@pome-sh/cli 0.2.0 → 0.3.0

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/shared-types/dist/recorder-events.js

@@ -0,0 +1,270 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * recorder-events — twin runtime trace format
+ *
+ * Single source of truth for the per-request event a twin runtime emits into
+ * its recorder ring buffer. Consumed by:
+ *   - twin runtimes (`@pome-sh/twin-github`, `@pome-sh/twin-stripe`) — emit shape
+ *   - `@pome-sh/sdk` — read shape for post-run analysis
+ *   - `pome-cloud` correlator — input to trace correlation on ingest
+ *   - `pome-cloud` recorder writers — persisted shape for events.jsonl S3 blob
+ *
+ * v1.0 freeze of the twin runtime trace format. Breaking changes go through a
+ * documented deprecation policy.
+ */
+import { z } from "zod";
+// `twin` is an open string at the schema level so SDK-based community twins
+// can set their own id without forcing a shared-types schema bump. Dashboard
+// rendering pattern-matches against `KNOWN_TWIN_IDS` and falls back to
+// generic rendering for unknown values — losing a recording to parse failure
+// would be worse than rendering it generically. First-party twins SHOULD use
+// the canonical values for type-aware UI.
+export const KNOWN_TWIN_IDS = ["github", "stripe", "slack"];
+export const twinIdSchema = z.string().min(1);
+export const recorderFidelitySchema = z.enum(["semantic", "unsupported"]);
+// stateDelta captures the row-level before/after for a mutation. State-inspector
+// renders these as a key/value diff. `before: null` = row was inserted (no prior
+// state); `after: null` = row was deleted. Parent `null` = no mutation (read-only
+// call — should also have `state_mutation: false`). Per-twin types are NOT
+// enforced — each twin owns its row shape, and forcing a strong type here would
+// couple shared-types to twin schemas.
+export const stateDeltaSchema = z
+    .object({
+    before: z.record(z.string(), z.unknown()).nullable(),
+    after: z.record(z.string(), z.unknown()).nullable(),
+})
+    .nullable();
+// ─────────────────────────────────────────────────────────────────────────────
+// Legacy single-shape recorder event (pre-FDRS-398).
+//
+// Kept exported as-is for the 58 callers across twin runtimes, SDK, correlator,
+// CLI, and cloud control plane that still emit/consume this shape on disk.
+// Their migration to the unified discriminated-union `eventSchema` below is
+// owned by downstream M0 tickets (FDRS-402 / 403 / 412 / 415 / 417).
+// `isLegacyEventRow` lets readers detect this shape during the rollout.
+// ─────────────────────────────────────────────────────────────────────────────
+// Internal plain-object shape. Kept as a `ZodObject` so `twinHttpEventSchema`
+// can `.extend` it and stay a discriminated-union member; the exported
+// `recorderEventSchema` wraps it with the FDRS-653 task-vocab normalization.
+const recorderEventObjectSchema = z.object({
+    ts: z.string().datetime(),
+    run_id: z.string().min(1),
+    twin: twinIdSchema,
+    request_id: z.string().min(1),
+    correlation_id: z.string().min(1).optional(),
+    // task_step_id is set by the task author in .yaml (static expectation:
+    // "this HTTP call is expected at step 2"). step_id below is set post-hoc by
+    // the correlator (dynamic grouping: "this event landed in Step stp_xyz").
+    // 90% of events use only one; both can coexist.
+    //
+    // W3 vocab (FDRS-653): `task_step_id` is canonical; `scenario_step_id` is
+    // the 0.3.0-era spelling. BOTH stay in the schema for the tolerant-reader
+    // window — this row shape is the frozen v1 trace format and its emitters
+    // (twin runtimes, shipped CLIs on vendored 0.3.0) still write the old key.
+    // The exported reader schemas normalize: when only `scenario_step_id` is
+    // present, `task_step_id` is populated from it at parse time. New emitters
+    // write `task_step_id`.
+    task_step_id: z.string().min(1).nullable().optional(),
+    scenario_step_id: z.string().min(1).nullable().optional(),
+    step_id: z.string().nullable(),
+    // tool_call_id is set by the `@pome-sh/adapter-claude-sdk` adapter when active.
+    // Null for the heuristic-correlator path (no adapter signal available).
+    tool_call_id: z.string().nullable(),
+    method: z.string().min(1),
+    path: z.string(),
+    request_body: z.unknown(),
+    status: z.number().int(),
+    response_body: z.unknown(),
+    latency_ms: z.number().int().min(0),
+    fidelity: recorderFidelitySchema,
+    state_mutation: z.boolean(),
+    state_delta: stateDeltaSchema,
+    // True iff the twin's idempotency layer replayed a cached response without
+    // re-invoking the handler. Optional + additive so existing recordings parse
+    // unchanged; dashboards/SDKs can render dedupe hits distinctly without
+    // inferring from request_body. Absent on the original mutation, present and
+    // true on the replayed event.
+    idempotency_dedupe: z.boolean().optional(),
+    error: z.string().nullable(),
+});
+// FDRS-653 tolerant reader: populate the canonical `task_step_id` from the
+// 0.3.0-era `scenario_step_id` when only the old key was written. The old key
+// is preserved as-sent (additive normalization — a re-serialized row still
+// parses under a 0.3.0 reader, which treats both keys as optional).
+function normalizeTaskStepVocab(event) {
+    if (event.task_step_id == null && event.scenario_step_id != null) {
+        return { ...event, task_step_id: event.scenario_step_id };
+    }
+    return event;
+}
+export const recorderEventSchema = recorderEventObjectSchema.transform(normalizeTaskStepVocab);
+// ─────────────────────────────────────────────────────────────────────────────
+// FDRS-398 — unified events.jsonl discriminated-union schema (v1).
+//
+// Hard-cut from the legacy single-shape `RecorderEvent`. The on-disk row is
+// now a tagged union over `kind`. Every variant carries:
+//   - `event_id`  — unique row id (uuid/nanoid, set by emitter)
+//   - `parent_id` — points at the spawning row's `event_id`, or null at the
+//                   root of a parent chain (e.g. top-level twin HTTP calls,
+//                   the first LLM call in a turn).
+//   - `kind`      — the discriminator literal (see each schema below)
+//
+// Provenance:
+//   - PR/FAQ: linear.app/pome-sh/project/agent-trace-v1-af8924d607f0
+//   - Milestone M0 "Universal Floor"
+//   - /plan-eng-review 2026-05-26 amendments:
+//       • Dropped OtelSpanEvent from this frozen v1 union (FDRS-400 cancelled).
+//         It later shipped additively (FDRS-480): the schema + mapper live in
+//         `./otel/` and are composed into `otelEventSchema` (= eventSchema ∪
+//         OtelSpanEvent). This v1 union is intentionally left unchanged.
+//       • LlmCallEvent per-call token/model/cost reclassified
+//         "TLS-terminate-only" — they are `nullable()` across both baseline
+//         CONNECT-tunnel mode AND CAS adapter mode in v1. CAS surfaces those
+//         at the per-turn aggregate level on the run summary, NOT here.
+// ─────────────────────────────────────────────────────────────────────────────
+// Common fields on every event variant. Spread (not extend) so the resulting
+// Zod object types stay readable.
+const eventBaseShape = {
+    ts: z.string().datetime(),
+    event_id: z.string().min(1),
+    parent_id: z.string().min(1).nullable(),
+};
+// `TwinHttpEvent` is the legacy RecorderEvent shape extended with the union
+// discriminator + parent-chain fields. `extend` keeps it in lockstep with
+// the RecorderEvent object shape so updates to the underlying HTTP-call shape
+// flow through automatically. NOTE: as a discriminated-union member this stays
+// a plain `ZodObject` — the FDRS-653 task-vocab normalization is applied by
+// the exported `recorderEventSchema` / `eventSchema` readers, not here.
+export const twinHttpEventSchema = recorderEventObjectSchema.extend({
+    kind: z.literal("TwinHttpEvent"),
+    event_id: z.string().min(1),
+    parent_id: z.string().min(1).nullable(),
+});
+// `LlmCallEvent` baseline fields are populated by the HTTP_PROXY CONNECT
+// tunnel `pome capture-server` (M0). TLS-terminate-only fields stay null in
+// baseline mode and in CAS adapter mode; they get populated only by the v2
+// opt-in TLS-terminate proxy. Per-turn aggregate cost/model from CAS lives
+// on the run summary, not on individual LlmCallEvent rows.
+export const llmCallEventSchema = z.object({
+    ...eventBaseShape,
+    kind: z.literal("LlmCallEvent"),
+    // Baseline (always populated)
+    host: z.string().min(1),
+    port: z.number().int().min(1).max(65535),
+    latency_ms: z.number().int().min(0),
+    bytes_in: z.number().int().min(0),
+    bytes_out: z.number().int().min(0),
+    // TLS-terminate-only — nullable, not optional. Writers must emit explicit
+    // null in baseline/CAS mode so the on-disk JSON shape is stable.
+    url: z.string().nullable(),
+    method: z.string().nullable(),
+    status: z.number().int().nullable(),
+    model: z.string().nullable(),
+    prompt_tokens: z.number().int().min(0).nullable(),
+    completion_tokens: z.number().int().min(0).nullable(),
+    cost_usd: z.number().nullable(),
+});
+// `ToolUseEvent` — emitted by the CAS adapter (FDRS-408) for each tool_use
+// content block in an `SDKAssistantMessage`. `input` is opaque (already
+// redactor-scrubbed by the writer) so we type it as `unknown`.
+export const toolUseEventSchema = z.object({
+    ...eventBaseShape,
+    kind: z.literal("ToolUseEvent"),
+    tool_use_id: z.string().min(1),
+    tool_name: z.string().min(1),
+    input: z.unknown(),
+});
+// `ToolResultEvent` — emitted by the CAS adapter (FDRS-408) for each
+// tool_result content block in a user message. `tool_use_id` matches the
+// originating `ToolUseEvent.tool_use_id`; `parent_id` typically points at
+// that ToolUseEvent's `event_id`.
+export const toolResultEventSchema = z.object({
+    ...eventBaseShape,
+    kind: z.literal("ToolResultEvent"),
+    tool_use_id: z.string().min(1),
+    output: z.unknown(),
+    is_error: z.boolean(),
+});
+// `SubagentSpawnEvent` — emitted once per sub-agent (FDRS-409), the first
+// time the adapter sees a non-null `parent_tool_use_id` on an
+// `SDKAssistantMessage`.
+export const subagentSpawnEventSchema = z.object({
+    ...eventBaseShape,
+    kind: z.literal("SubagentSpawnEvent"),
+    parent_tool_use_id: z.string().min(1),
+});
+// `HookEvent` — thin audit-trail row written by the adapter for each of the
+// SDK's 25 hook invocations (FDRS-407). `tool_name` is null when the hook
+// isn't tool-scoped (e.g. SessionStarted, PreCompact, PermissionGranted on a
+// non-tool resource).
+export const hookEventSchema = z.object({
+    ...eventBaseShape,
+    kind: z.literal("HookEvent"),
+    hook_name: z.string().min(1),
+    tool_name: z.string().min(1).nullable(),
+});
+// `LlmTurnEvent` — emitted by the CAS adapter (F-766) once per assistant turn
+// that reported usage (same turn detection as the OTLP `withGenAiSpans` lane).
+// Per-turn LLM usage — and specifically the cache-read/cache-creation token
+// counts — is the only capture-side datum that never otherwise reaches
+// events.jsonl: the OTLP side-lane carries a subset (input/output tokens only)
+// and is not the JSONL source of truth. Everything else the trace needs is
+// projected cloud-side from existing kinds, so this is the sole new M1 kind.
+//
+// Field discipline (grill 2026-07-14 + codex review 2026-07-15):
+//   - Absent SDK values are `nullable`, not `optional` — writers emit explicit
+//     null so the on-disk JSON shape is stable.
+//   - `parent_id: null` in M1 (turn→tool parent linkage is M2).
+//   - `session_id: null` in M1 (no session-id env plumbing — out of scope).
+//   - No cost fields (no OTEL convention; computed cloud-side from a pricing
+//     table at display time).
+//   - `turn_index` is 0-based per adapter `query()` stream, NOT globally unique.
+//   - `latency_ms_estimated` is true whenever `latency_ms` is approximated from
+//     message timing (always true in M1 — the SDK surfaces no per-call API
+//     timing). The field exists so a future real-timing source can set false.
+export const llmTurnEventSchema = z.object({
+    ...eventBaseShape,
+    kind: z.literal("LlmTurnEvent"),
+    turn_index: z.number().int().min(0),
+    model: z.string().min(1).nullable(),
+    input_tokens: z.number().int().min(0).nullable(),
+    output_tokens: z.number().int().min(0).nullable(),
+    cache_read_input_tokens: z.number().int().min(0).nullable(),
+    cache_creation_input_tokens: z.number().int().min(0).nullable(),
+    // OTel `gen_ai.response.finish_reasons` is an array; Anthropic reports one
+    // `stop_reason` per turn. null when the SDK surfaced none.
+    finish_reasons: z.array(z.string()).nullable(),
+    latency_ms: z.number().int().min(0),
+    latency_ms_estimated: z.boolean(),
+    session_id: z.string().min(1).nullable(),
+});
+// The unified event row. Discriminated on `kind` — adding a future variant
+// (e.g. `OtelSpanEvent` in v2) is a non-breaking extension. The exported
+// reader applies the FDRS-653 task-vocab normalization to `TwinHttpEvent`
+// rows (the only variant carrying the step-expectation key).
+const eventUnionSchema = z.discriminatedUnion("kind", [
+    twinHttpEventSchema,
+    llmCallEventSchema,
+    toolUseEventSchema,
+    toolResultEventSchema,
+    subagentSpawnEventSchema,
+    hookEventSchema,
+    llmTurnEventSchema,
+]);
+export const eventSchema = eventUnionSchema.transform((event) => event.kind === "TwinHttpEvent" ? normalizeTaskStepVocab(event) : event);
+// Detect a pre-FDRS-398 legacy row on disk. A new-shape row always carries a
+// string `kind` discriminator; a legacy row does not. Non-object inputs
+// (`null`, arrays, primitives) are not event rows at all — return false so
+// the caller surfaces the underlying type error rather than treating them as
+// legacy.
+//
+// A row whose `kind` is present but not a string also routes through the
+// legacy path: the discriminated union will reject it with a clear error,
+// which is more useful than silently treating it as new-shape.
+export function isLegacyEventRow(row) {
+    if (typeof row !== "object" || row === null || Array.isArray(row)) {
+        return false;
+    }
+    return typeof row.kind !== "string";
+}
+//# sourceMappingURL=recorder-events.js.map

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/shared-types/dist/recorder-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recorder-events.js","sourceRoot":"","sources":["../src/recorder-events.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4EAA4E;AAC5E,6EAA6E;AAC7E,uEAAuE;AACvE,6EAA6E;AAC7E,6EAA6E;AAC7E,0CAA0C;AAC1C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAGrE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAG9C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;AAG1E,iFAAiF;AACjF,iFAAiF;AACjF,kFAAkF;AAClF,2EAA2E;AAC3E,gFAAgF;AAChF,uCAAuC;AACvC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,QAAQ,EAAE,CAAC;AAGd,gFAAgF;AAChF,qDAAqD;AACrD,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,wEAAwE;AACxE,gFAAgF;AAEhF,8EAA8E;AAC9E,uEAAuE;AACvE,6EAA6E;AAC7E,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,YAAY;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,uEAAuE;IACvE,4EAA4E;IAC5E,0EAA0E;IAC1E,gDAAgD;IAChD,EAAE;IACF,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,wBAAwB;IACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,gFAAgF;IAChF,wEAAwE;IACxE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,QAAQ,EAAE,sBAAsB;IAChC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC3B,WAAW,EAAE,gBAAgB;IAC7B,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,4EAA4E;IAC5E,8BAA8B;IAC9B,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,oEAAoE;AACpE,SAAS,sBAAsB,CAE7B,KAAQ;IACR,IAAI,KAAK,CAAC,YAAY,IAAI,IAAI,IAAI,KAAK,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;QACjE,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;AAG/F,gFAAgF;AAChF,mEAAmE;AACnE,EAAE;AACF,4EAA4E;AAC5E,yDAAyD;AACzD,gEAAgE;AAChE,4EAA4E;AAC5E,4EAA4E;AAC5E,mDAAmD;AACnD,sEAAsE;AACtE,EAAE;AACF,cAAc;AACd,qEAAqE;AACrE,qCAAqC;AACrC,8CAA8C;AAC9C,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,8DAA8D;AAC9D,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,gFAAgF;AAEhF,6EAA6E;AAC7E,kCAAkC;AAClC,MAAM,cAAc,GAAG;IACrB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/B,CAAC;AAEX,4EAA4E;AAC5E,0EAA0E;AAC1E,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,MAAM,CAAC;IAClE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAGH,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,cAAc;IACjB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,8BAA8B;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,0EAA0E;IAC1E,iEAAiE;IACjE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,2EAA2E;AAC3E,wEAAwE;AACxE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,cAAc;IACjB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;CACnB,CAAC,CAAC;AAGH,qEAAqE;AACrE,yEAAyE;AACzE,0EAA0E;AAC1E,kCAAkC;AAClC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,cAAc;IACjB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAGH,0EAA0E;AAC1E,8DAA8D;AAC9D,yBAAyB;AACzB,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,cAAc;IACjB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACrC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC,CAAC;AAGH,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,sBAAsB;AACtB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,cAAc;IACjB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,uEAAuE;AACvE,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,iEAAiE;AACjE,+EAA+E;AAC/E,gDAAgD;AAChD,gEAAgE;AAChE,4EAA4E;AAC5E,6EAA6E;AAC7E,8BAA8B;AAC9B,iFAAiF;AACjF,gFAAgF;AAChF,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,cAAc;IACjB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/D,2EAA2E;IAC3E,2DAA2D;IAC3D,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAGH,2EAA2E;AAC3E,yEAAyE;AACzE,0EAA0E;AAC1E,6DAA6D;AAC7D,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACpD,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,qBAAqB;IACrB,wBAAwB;IACxB,eAAe;IACf,kBAAkB;CACnB,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9D,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CACvE,CAAC;AAGF,6EAA6E;AAC7E,wEAAwE;AACxE,2EAA2E;AAC3E,6EAA6E;AAC7E,UAAU;AACV,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,+DAA+D;AAC/D,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAQ,GAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnE,CAAC"}

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/shared-types/dist/redaction.d.ts

@@ -0,0 +1,2 @@
+export declare function redactSecrets(value: unknown): unknown;
+export declare function redactEvent<T>(event: T): T;

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/shared-types/dist/redaction.js

@@ -0,0 +1,152 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// Shared trace redaction. This is the one implementation used by the CLI,
+// adapter, SDK, and first-party twins before trace/state data is persisted,
+// uploaded, or rendered in prompts.
+const REDACTED = "[REDACTED]";
+const HARD_REDACT_KEYS = new Set([
+    "authorization",
+    "x-api-key",
+    "cookie",
+    "api_key",
+    "client_secret",
+    "webhook_secret",
+    "password",
+    "secret",
+    "token",
+    "access_token",
+    "refresh_token",
+    "session_token",
+    "agent_token",
+    "anthropic_api_key",
+]);
+function base64UrlRunEnd(value, from) {
+    let i = from;
+    while (i < value.length) {
+        const code = value.charCodeAt(i);
+        const isBase64Url = (code >= 48 && code <= 57) ||
+            (code >= 65 && code <= 90) ||
+            (code >= 97 && code <= 122) ||
+            code === 45 ||
+            code === 95;
+        if (!isBase64Url)
+            break;
+        i += 1;
+    }
+    return i;
+}
+function scrubJwts(value) {
+    let out = "";
+    let copied = 0;
+    let search = 0;
+    while (true) {
+        const start = value.indexOf("eyJ", search);
+        if (start === -1)
+            break;
+        const header = base64UrlRunEnd(value, start + 3);
+        if (header === start + 3) {
+            search = start + 1;
+            continue;
+        }
+        if (value.charCodeAt(header) !== 46) {
+            search = header;
+            continue;
+        }
+        const payload = base64UrlRunEnd(value, header + 1);
+        if (payload === header + 1 || value.charCodeAt(payload) !== 46) {
+            search = header;
+            continue;
+        }
+        const end = base64UrlRunEnd(value, payload + 1);
+        out += value.slice(copied, start) + REDACTED;
+        copied = end;
+        search = end;
+    }
+    return copied === 0 ? value : out + value.slice(copied);
+}
+function pemHeaderEnd(value, at, keyword) {
+    const labelStart = at + keyword.length;
+    let labelEnd = labelStart;
+    while (labelEnd < value.length) {
+        const code = value.charCodeAt(labelEnd);
+        if (!((code >= 65 && code <= 90) || code === 32))
+            break;
+        labelEnd += 1;
+    }
+    if (labelEnd === labelStart)
+        return -1;
+    if (!value.startsWith("-----", labelEnd))
+        return -1;
+    return labelEnd + 5;
+}
+function scrubPemBlocks(value) {
+    let out = "";
+    let copied = 0;
+    let search = 0;
+    while (true) {
+        const begin = value.indexOf("-----BEGIN ", search);
+        if (begin === -1)
+            break;
+        const bodyStart = pemHeaderEnd(value, begin, "-----BEGIN ");
+        if (bodyStart === -1) {
+            search = begin + 1;
+            continue;
+        }
+        let endSearch = bodyStart;
+        let blockEnd = -1;
+        while (true) {
+            const end = value.indexOf("-----END ", endSearch);
+            if (end === -1)
+                break;
+            blockEnd = pemHeaderEnd(value, end, "-----END ");
+            if (blockEnd !== -1)
+                break;
+            endSearch = end + 1;
+        }
+        if (blockEnd === -1)
+            break;
+        out += value.slice(copied, begin) + REDACTED;
+        copied = blockEnd;
+        search = blockEnd;
+    }
+    return copied === 0 ? value : out + value.slice(copied);
+}
+const SCRUB_STEPS = [
+    /redaction_fixture_secret_[A-Za-z0-9_-]{8,}/g,
+    /\bsk-[A-Za-z0-9_-]{20,}/g,
+    /\b[rs]k_(?:test|live)_[A-Za-z0-9_]{4,}/g,
+    /ghp_[A-Za-z0-9]{36}/g,
+    /github_pat_[A-Za-z0-9_]{20,}/g,
+    /xox[aboprs]-[A-Za-z0-9-]{20,}/g,
+    /xapp-[A-Za-z0-9-]{10,}/g,
+    /(?:pme|pk|rk)_[A-Za-z0-9_-]{20,}/g,
+    /AIza[0-9A-Za-z_-]{20,}/g,
+    /AKIA[0-9A-Z]{16}/g,
+    scrubJwts,
+    scrubPemBlocks,
+    /-----BEGIN [A-Z ]+-----/g,
+];
+function scrubString(value) {
+    let out = value;
+    for (const step of SCRUB_STEPS) {
+        out = typeof step === "function" ? step(out) : out.replace(step, REDACTED);
+    }
+    return out;
+}
+export function redactSecrets(value) {
+    if (typeof value === "string")
+        return scrubString(value);
+    if (Array.isArray(value))
+        return value.map(redactSecrets);
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, nested]) => [
+            key,
+            HARD_REDACT_KEYS.has(key.toLowerCase()) ? REDACTED : redactSecrets(nested),
+        ]));
+    }
+    return value;
+}
+export function redactEvent(event) {
+    return redactSecrets(event);
+}
+//# sourceMappingURL=redaction.js.map

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/shared-types/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,oCAAoC;AACpC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,eAAe;IACf,WAAW;IACX,QAAQ;IACR,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,UAAU;IACV,QAAQ;IACR,OAAO;IACP,cAAc;IACd,eAAe;IACf,eAAe;IACf,aAAa;IACb,mBAAmB;CACpB,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IAClD,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,WAAW,GACf,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YAC1B,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YAC1B,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC;YAC3B,IAAI,KAAK,EAAE;YACX,IAAI,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,WAAW;YAAE,MAAM;QACxB,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM;QACxB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACpC,MAAM,GAAG,MAAM,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YAC/D,MAAM,GAAG,MAAM,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QAChD,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC;QAC7C,MAAM,GAAG,GAAG,CAAC;QACb,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,EAAU,EAAE,OAAe;IAC9D,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IACvC,IAAI,QAAQ,GAAG,UAAU,CAAC;IAC1B,OAAO,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;YAAE,MAAM;QACxD,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC;IACpD,OAAO,QAAQ,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM;QACxB,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC5D,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,SAAS,GAAG,SAAS,CAAC;QAC1B,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;QAClB,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAClD,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,MAAM;YACtB,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YACjD,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,MAAM;YAC3B,SAAS,GAAG,GAAG,GAAG,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,MAAM;QAC3B,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC;QAC7C,MAAM,GAAG,QAAQ,CAAC;QAClB,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,WAAW,GAAwD;IACvE,6CAA6C;IAC7C,0BAA0B;IAC1B,yCAAyC;IACzC,sBAAsB;IACtB,+BAA+B;IAC/B,gCAAgC;IAChC,yBAAyB;IACzB,mCAAmC;IACnC,yBAAyB;IACzB,mBAAmB;IACnB,SAAS;IACT,cAAc;IACd,0BAA0B;CAC3B,CAAC;AAEF,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,GAAG,GAAG,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YACtE,GAAG;YACH,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;SAC3E,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAI,KAAQ;IACrC,OAAO,aAAa,CAAC,KAAK,CAAM,CAAC;AACnC,CAAC"}