@theokit/sdk 4.51.0 → 4.52.0

package/dist/chunk-ZHPET3LZ.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/internal/diagnostics.ts","../src/internal/security/redact.ts"],"names":[],"mappings":";;;AAoEA,IAAM,SAAA,mBAAY,MAAA,CAAO,GAAA,CAAI,iCAAiC,CAAA;AAI9D,SAAS,WAAA,GAA2C;AAClD,EAAA,OAAQ,WAAqC,SAAS,CAAA;AACxD;AASO,SAAS,mBAAmB,IAAA,EAAyC;AAC1E,EAAC,UAAA,CAAqC,SAAS,CAAA,GAAI,IAAA;AACrD;AAQO,SAAS,KAAK,OAAA,EAAuB;AAG1C,EAAA,MAAM,OAAO,WAAA,EAAY;AACzB,EAAA,IAAI,SAAS,MAAA,EAAW;AACxB,EAAA,IAAI;AACF,IAAA,IAAA,CAAK,OAAO,CAAA;AAAA,EACd,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;;;AC/EA,IAAI,iBAA0B,WAAA,EAAY;AAE1C,SAAS,WAAA,GAAuB;AAC9B,EAAA,MAAM,GAAA,GAAM,QAAQ,GAAA,CAAI,sBAAA;AACxB,EAAA,IAAI,GAAA,KAAQ,QAAW,OAAO,IAAA;AAC9B,EAAA,OAAO,CAAC,KAAK,MAAA,EAAQ,KAAA,EAAO,IAAI,CAAA,CAAE,QAAA,CAAS,GAAA,CAAI,WAAA,EAAa,CAAA;AAC9D;AAGA,IAAI,YAAA,GAAe,KAAA;AACnB,IAAI,CAAC,cAAA,IAAkB,CAAC,YAAA,EAAc;AACpC,EAAA,IAAA;AAAA,IACE;AAAA,GAEF;AACA,EAAA,YAAA,GAAe,IAAA;AACjB;AASA,IAAM,gBAAA,GAAsC;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1C,iJAAA;AAAA;AAAA;AAAA,EAGA,gEAAA;AAAA;AAAA,EAEA,mCAAA;AAAA;AAAA,EAEA,oCAAA;AAAA;AAAA,EACA,4BAAA;AAAA;AAAA;AAAA,EAEA,6BAAA;AAAA;AAAA,EACA,wBAAA;AAAA;AAAA;AAAA,EAEA,wBAAA;AAAA;AAAA,EACA,mBAAA;AAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EACA,0BAAA;AAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EACA,8BAAA;AAAA;AAAA,EACA,uBAAA;AAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EACA,0BAAA;AAAA;AAAA,EACA,0BAAA;AAAA;AAAA,EACA,0BAAA;AAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EACA,2BAAA;AAAA;AAAA,EACA,2BAAA;AAAA;AAAA,EACA,0BAAA;AAAA;AAAA,EACA,yBAAA;AAAA;AAAA,EACA,+BAAA;AAAA;AAAA;AAAA,EAEA,sBAAA;AAAA;AAAA,EACA,2CAAA;AAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EACA,uBAAA;AAAA;AAAA,EACA,2DAAA;AAAA;AAAA,EACA;AAAA;AACF,CAAA;AAKA,IAAM,cAAA,GAAiB,wCAAA;AAoBvB,IAAM,aAAA,GACJ,4NAAA;AAEF,IAAM,iBAA2B,EAAC;AAS3B,SAAS,WAAW,EAAA,EAAkB;AAC3C,EAAA,IAAI,CAAC,GAAG,MAAA,EAAQ;AACd,IAAA,MAAM,IAAI,MAAM,wEAAwE,CAAA;AAAA,EAC1F;AACA,EAAA,cAAA,CAAe,KAAK,EAAE,CAAA;AACxB;AAYO,SAAS,UAAU,KAAA,EAAuB;AAC/C,EAAA,IAAI,KAAA,CAAM,MAAA,GAAS,EAAA,EAAI,OAAO,KAAA;AAC9B,EAAA,OAAO,CAAA,EAAG,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,GAAA,EAAM,KAAA,CAAM,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAClD;AAKA,IAAM,UAAA,GAAa,mBAAA;AAoBnB,SAAS,eAAe,KAAA,EAA+B;AACrD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AACtC,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,MAAA,EAAW,OAAO,IAAA;AAClD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,IAAI;AACF,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AAC9B,MAAA,OAAO,CAAA,KAAM,SAAY,IAAA,GAAO,CAAA;AAAA,IAClC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,0BAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,OAAO,OAAO,KAAK,CAAA;AACrB;AAEO,SAAS,aAAA,CAAc,MAAe,IAAA,EAAuC;AAClF,EAAA,MAAM,OAAA,GAAU,eAAe,IAAI,CAAA;AACnC,EAAA,IAAI,OAAA,KAAY,MAAM,OAAO,EAAA;AAC7B,EAAA,IAAI,CAAC,gBAAgB,OAAO,OAAA;AAE5B,EAAA,IAAI,CAAA,GAAI,OAAA;AACR,EAAA,KAAA,MAAW,MAAM,gBAAA,EAAkB;AACjC,IAAA,CAAA,GAAI,EAAE,OAAA,CAAQ,EAAA,EAAI,CAAC,CAAA,KAAM,SAAA,CAAU,CAAC,CAAC,CAAA;AAAA,EACvC;AACA,EAAA,KAAA,MAAW,MAAM,cAAA,EAAgB;AAC/B,IAAA,CAAA,GAAI,EAAE,OAAA,CAAQ,EAAA,EAAI,CAAC,CAAA,KAAM,SAAA,CAAU,CAAC,CAAC,CAAA;AAAA,EACvC;AACA,EAAA,IAAI,CAAC,MAAM,QAAA,EAAU;AAInB,IAAA,CAAA,GAAI,CAAA,CAAE,QAAQ,cAAA,EAAgB,CAAC,GAAG,MAAA,KAAmB,CAAA,EAAG,MAAM,CAAA,GAAA,CAAK,CAAA;AAInE,IAAA,CAAA,GAAI,EAAE,OAAA,CAAQ,aAAA,EAAe,CAAC,KAAA,EAAO,QAAgB,KAAA,KAAkB;AAOrE,MAAA,IAAI,UAAA,CAAW,IAAA,CAAK,KAAK,CAAA,EAAG,OAAO,KAAA;AACnC,MAAA,OAAO,GAAG,MAAM,CAAA,GAAA,CAAA;AAAA,IAClB,CAAC,CAAA;AAAA,EACH;AACA,EAAA,OAAO,CAAA;AACT","file":"chunk-ZHPET3LZ.cjs","sourcesContent":["/**\n * The library's single diagnostics channel — silent by default (#147).\n *\n * ## The problem\n *\n * The SDK wrote diagnostics straight to `process.stderr` from hot paths — 92 sites across 51\n * files under `internal/`. In a TUI host (Ink, alternate screen), those writes interleave with the\n * render and **corrupt the frame**. And the host had no way to intercept them: there was no\n * injectable logger. One consumer went as far as installing `proper-lockfile` just to silence ONE\n * of them.\n *\n * A library cannot assume `stdout`/`stderr` are free sinks. The application owns the terminal, not\n * the dependency.\n *\n * ## The contract\n *\n * - **`setDiagnosticsSink(fn)`** hands the messages to the application, which decides where to put\n *   them (a status line, a file, a panel). It is what was missing for a TUI to coexist with the SDK.\n * - **With no sink, nothing is emitted.** A library does not own the host's terminal.\n *\n * ## Silent by default, and how 36 suites survived the flip\n *\n * The default WAS `stderr`, and 36 test files spy on `process.stderr.write` to assert a given\n * warning is emitted. That contract is real and had to survive; migrating all 36 by hand, across\n * four different spy styles, is how you weaken 36 suites in one commit.\n *\n * So the flip happened at the default, and `vitest.setup.ts` installs a sink that FORWARDS to\n * `stderr` for the duration of every test. Those assertions still test what they always tested —\n * \"this condition emits a diagnostic\" — through the channel a host would use, while production\n * emits nothing unless asked.\n *\n * The cost is stated rather than hidden: no test observes the production default by accident, so\n * `tests/diagnostics-public-entry.test.ts` pins it explicitly by clearing the sink first.\n *\n * ## Coverage is the whole guarantee\n *\n * The first sweep migrated the 92 sites under `internal/` and left `src/`'s own modules —\n * `event-bus.ts`, `batch.ts`, `compaction.ts`, `internal/workflow/step-branch.ts`. A host could\n * therefore install a sink and still have its frame corrupted by a batch run, which is the reported\n * defect with a smaller blast radius. Those are routed here too, and\n * `tests/lint/no-direct-terminal-write.test.ts` is what keeps the next hot path from\n * reintroducing one. \"Mostly interceptable\" is not interceptable.\n *\n * The remaining direct writers are allowlisted there with a reason, and every one of them is a seam\n * whose destination the CALLER already chooses (`opts.warn`, `opts.logger`, the Workflow logger).\n *\n * ## What this is NOT\n *\n * It is not a logger with levels, formatting or multiple destinations. It is the minimum that\n * resolves the reported blocker; a full logger here would be inventing a requirement nobody asked\n * for.\n */\n\n/** Receives each diagnostic message already formatted, with the trailing `\\n`. */\nexport type DiagnosticsSink = (message: string) => void;\n\n/**\n * The registry lives on `globalThis`, not in a module-level `let` (theokit#173).\n *\n * A module-level binding is a per-INSTANCE singleton, and a package manager will install two\n * physical copies of the same version whenever two dependents resolve different peer sets. Measured:\n * `@theokit/sdk@4.39.1` existed under two pnpm store hashes in the theokit workspace, so a sink\n * installed through `@theokit/agents` landed in a different registry than the emitter writes to.\n *\n * The failure mode is the quiet one — the re-export resolves, the function is callable, nothing\n * throws, and no diagnostic ever arrives. `Symbol.for` gives every copy in the process the same\n * slot; the `v1` suffix leaves room to change the shape without colliding with an older copy.\n */\nconst SINK_SLOT = Symbol.for(\"theokit.sdk.diagnostics.sink.v1\");\n\ntype SinkHolder = Record<symbol, DiagnosticsSink | undefined>;\n\nfunction currentSink(): DiagnosticsSink | undefined {\n  return (globalThis as unknown as SinkHolder)[SINK_SLOT];\n}\n\n/**\n * Installs (or removes, by passing `undefined`) the diagnostics destination.\n *\n * When a sink is present it is the ONLY destination — `stderr` gets no copy. Duplicating\n * destinations would hand the problem back to the TUI that installed the sink precisely to get the\n * messages out of the terminal.\n */\nexport function setDiagnosticsSink(next: DiagnosticsSink | undefined): void {\n  (globalThis as unknown as SinkHolder)[SINK_SLOT] = next;\n}\n\n/**\n * Emits a library diagnostic message.\n *\n * Replaces `process.stderr.write` on internal paths. Never throws: a faulty sink must not\n * must not take down the run it merely observes.\n */\nexport function diag(message: string): void {\n  // Silent by default (#147): with no sink installed the message is dropped. A library must not\n  // assume the host's stdout/stderr are free-form log sinks — in a TUI they are the render surface.\n  const sink = currentSink();\n  if (sink === undefined) return;\n  try {\n    sink(message);\n  } catch {\n    // Observability never breaks the run — same principle as `emitRunEvent`.\n  }\n}\n","import { diag } from \"../diagnostics.js\";\n\n/**\n * Canonical secret redaction module (ADRs D68-D73).\n *\n * Single source of truth for credential pattern masking across the SDK.\n * Wired at output boundaries: `ErrorMetadata.raw` (mappers/shared.ts),\n * telemetry span attributes (telemetry/tracer.ts), transcript JSONL\n * appends (agent-session-store.ts), migration logger output\n * (memory/migrate-sqlite-to-lance.ts).\n *\n * - D68: central module, single source of truth (replaces 2 duplicates)\n * - D69: env snapshot at module init (prompt-injection defense)\n * - D70: ON by default, warn on opt-out\n * - D71: two-bucket masking — short fully masked, long preserves prefix+suffix\n * - D72: `codeFile` opt-out for legitimate prefix-shaped content\n * - D73: redact at OUTPUT boundaries, not at storage\n *\n * @internal\n */\n\n// D69: env snapshot captured at module load. Subsequent mutations of\n// process.env.THEOKIT_REDACT_SECRETS are ignored — defends against\n// prompt injection that tries to disable redaction mid-run.\nlet REDACT_ENABLED: boolean = readEnvOnce();\n\nfunction readEnvOnce(): boolean {\n  const raw = process.env.THEOKIT_REDACT_SECRETS;\n  if (raw === undefined) return true; // D70: default ON\n  return [\"1\", \"true\", \"yes\", \"on\"].includes(raw.toLowerCase());\n}\n\n// D70: warn once on opt-out so the user knows they're vulnerable.\nlet warnedOptOut = false;\nif (!REDACT_ENABLED && !warnedOptOut) {\n  diag(\n    \"[theokit-sdk] Secret redaction is DISABLED via THEOKIT_REDACT_SECRETS. \" +\n      \"Credentials may leak into errors, telemetry, logs, transcripts.\\n\",\n  );\n  warnedOptOut = true;\n}\n\n/**\n * Built-in credential patterns. Order matters — more specific prefixes\n * must come before generic ones (e.g., `sk-ant-` before `sk-`). Quantifiers\n * are all bounded `{n,m}` or applied to char classes — linear time, no ReDoS.\n *\n * @internal\n */\nconst BUILTIN_PATTERNS: readonly RegExp[] = [\n  // T5.4: 30+ vendor prefixes (was 12 pre-T5.4). Order matters — more\n  // specific prefixes precede generic ones (e.g., sk-ant-admin01 before\n  // sk-ant-, sk-proj- before sk-). PEM block deliberately first so its\n  // multi-line span runs before any per-line patterns can fire.\n  /-----BEGIN[ ]+(?:RSA |EC |DSA |OPENSSH |ENCRYPTED |)PRIVATE KEY-----[\\s\\S]+?-----END[ ]+(?:RSA |EC |DSA |OPENSSH |ENCRYPTED |)PRIVATE KEY-----/g,\n  // JWT — exact 3-segment base64url. Dotted; the body floor of 4 chars per\n  // segment matches the minimum legal payload while skipping `a.b.c` noise.\n  /eyJ[A-Za-z0-9_-]{4,}\\.eyJ[A-Za-z0-9_-]{4,}\\.[A-Za-z0-9_-]{4,}/g,\n  // Azure Storage SAS — match the sig= component (URL-encoded base64).\n  /(?<=[?&]sig=)[A-Za-z0-9%+/]{20,}/g,\n  // Anthropic\n  /sk-ant-admin01-[A-Za-z0-9_-]{10,}/g, //   Anthropic admin keys (must precede sk-ant-)\n  /sk-ant-[A-Za-z0-9_-]{10,}/g, //           Anthropic regular\n  // OpenAI family + clones (sk- generic must come AFTER all sk-foo- variants)\n  /sk-proj-[A-Za-z0-9_-]{10,}/g, //  OpenAI project key (must precede sk- generic)\n  /sk-[A-Za-z0-9_-]{10,}/g, //       OpenAI / OpenRouter / DeepInfra / Together / DeepSeek\n  // Provider prefixes (alphabetized for maintainability)\n  /AIza[A-Za-z0-9_-]{35}/g, //       Google API key\n  /AKIA[A-Z0-9]{16}/g, //            AWS access key\n  /fw_[A-Za-z0-9]{20,}/g, //         Fireworks\n  /glpat-[A-Za-z0-9_-]{20}/g, //     GitLab PAT\n  /ghp_[A-Za-z0-9]{36}/g, //         GitHub PAT classic\n  /github_pat_[A-Za-z0-9_]{82}/g, // GitHub PAT fine-grained\n  /gsk_[A-Za-z0-9]{20,}/g, //        Groq\n  /hf_[A-Za-z0-9]{20,}/g, //         HuggingFace\n  /\\bpa-[A-Za-z0-9_-]{20,}/g, //     Voyage AI (word-boundary to skip CSS / kebab IDs)\n  /pcsk_[A-Za-z0-9_-]{20,}/g, //     Pinecone\n  /pplx-[A-Za-z0-9_-]{20,}/g, //     Perplexity\n  /r8_[A-Za-z0-9_-]{20,}/g, //       Replicate\n  /rk_live_[A-Za-z0-9]{20,}/g, //    Stripe restricted\n  /sk_live_[A-Za-z0-9]{20,}/g, //    Stripe secret\n  /sntrys_[A-Za-z0-9]{40,}/g, //     Sentry user auth\n  /xai-[A-Za-z0-9_-]{20,}/g, //      xAI (Grok)\n  /xox[bpasr]-[A-Za-z0-9-]{10,}/g, //Slack tokens\n  // Additional unique-prefix tokens with low false-positive risk\n  /npm_[A-Za-z0-9]{36}/g, //         npm access token\n  /SG\\.[A-Za-z0-9_-]{22}\\.[A-Za-z0-9_-]{43}/g, // SendGrid\n  /\\bSK[A-Za-z0-9]{32}\\b/g, //       Twilio API SID (word-boundary to skip CSS class noise)\n  /\\bkey-[a-f0-9]{32}\\b/g, //        Mailgun (hex-only narrows false positives)\n  /MT[A-Za-z0-9_-]{23}\\.[A-Za-z0-9_-]{6}\\.[A-Za-z0-9_-]{27}/g, // Discord bot\n  /\\b(?:sdk|mob)-[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}\\b/g, // LaunchDarkly\n];\n\n// `Bearer <token>` matched as its own first-class pattern so PARAM_PATTERN\n// doesn't have to handle the unusual `Authorization: Bearer xxx` shape\n// (no `:` or `=` between \"Bearer\" and the value — bare whitespace).\nconst BEARER_PATTERN = /\\b(Bearer\\s+)([A-Za-z0-9_\\-.+/=]{8,})/g;\n\n// Parametric: matches `key=value` and `key: value` (with optional quote\n// between the key and the separator, to handle JSON: `\"api_key\": \"...\"`)\n// in URLs, query strings, JSON-like bodies, HTTP headers. Captures the\n// prefix so we keep it visible while masking the value.\n//\n// `authorization` deliberately excluded — BEARER_PATTERN handles the\n// common `Authorization: Bearer xxx` shape. Including it here causes\n// double-masking (\"Authorization: *** ***\") after Bearer fires.\n// T5.4: keyword set expanded from 6 → 16 to cover the OAuth / JWT / generic\n// credential vocabulary surfaced by DR6 finding #4. `authorization`,\n// `auth`, `bearer` stay excluded — BEARER_PATTERN handles the\n// `Authorization: Bearer xxx` shape and including these here would\n// re-catch the post-BUILTIN-masked form (D71 prefix-preservation\n// contract) and double-mask to `***`.\n//\n// Value class includes `.` so JWT / `.env` / dotted base64url values\n// match; the callback skips already-masked values (containing the\n// `...` D71 separator) to preserve the BUILTIN prefix-mask result.\nconst PARAM_PATTERN =\n  /(\\b(?:access_token|api_key|api-key|client_secret|credential|credentials|id_token|jwt|password|private_key|refresh_token|secret|service_account|session_token|token|x-api-key)\\b[\"']?\\s*[:=]\\s*[\"']?)([A-Za-z0-9_\\-.+/]+)/gi;\n\nconst _extraPatterns: RegExp[] = [];\n\n/**\n * Add a user-defined redaction pattern. Additive — never removes builtins.\n * Throws if the regex lacks the `/g` flag (without `/g`, `.replace` only\n * substitutes the first match and the rest leaks).\n *\n * @internal — exposed publicly via `Security.addPattern` in `src/security.ts`.\n */\nexport function addPattern(re: RegExp): void {\n  if (!re.global) {\n    throw new Error(\"Security.addPattern: regex must have /g flag for replace-all semantics\");\n  }\n  _extraPatterns.push(re);\n}\n\n/**\n * Two-bucket masking (D71):\n *   - tokens shorter than 18 chars → fully masked as `***`\n *   - tokens >= 18 chars → keep first 6 + `...` + last 4\n *\n * Rationale: long tokens are unique per-account; prefix+suffix preserves\n * debuggability without revealing the secret middle.\n *\n * @internal\n */\nexport function maskToken(token: string): string {\n  if (token.length < 18) return \"***\";\n  return `${token.slice(0, 6)}...${token.slice(-4)}`;\n}\n\n// issue #117 — the EXACT shape of a `maskToken` output (`slice(0,6)+\"...\"+slice(-4)`\n// = 6 chars, literal `...`, 4 chars). Used to detect a value PARAM_PATTERN would\n// otherwise re-mask, WITHOUT skipping a raw secret that merely contains `...`.\nconst MASK_SHAPE = /^.{6}\\.\\.\\..{4}$/s;\n\n/**\n * Redact known credential patterns from `text`. Default behavior masks\n * builtins + extras + parametric `key=value` sinks.\n *\n * With `{ codeFile: true }` (D72), skips PARAM_PATTERN to avoid mangling\n * `.env.example`, schema JSON, or test fixtures that legitimately contain\n * prefix-like strings.\n *\n * Returns the redacted string. Coerces non-strings via JSON.stringify;\n * EC-7 fix (edge-case review): wraps in try/catch so circular references\n * never propagate — returns sentinel `\"[unredactable: circular]\"`.\n *\n * @internal\n */\n// Coerce arbitrary input to a string for redaction. Returns `null`\n// sentinel when the value is null/undefined/non-stringifiable, so the\n// caller can short-circuit with `\"\"`. EC-7 fix: circular refs go through\n// the try/catch and produce the sentinel marker, never throwing.\nfunction coerceToString(value: unknown): string | null {\n  if (typeof value === \"string\") return value;\n  if (value === null || value === undefined) return null;\n  if (typeof value === \"object\") {\n    try {\n      const s = JSON.stringify(value);\n      return s === undefined ? null : s;\n    } catch {\n      return \"[unredactable: circular]\";\n    }\n  }\n  return String(value);\n}\n\nexport function redactSecrets(text: unknown, opts?: { codeFile?: boolean }): string {\n  const coerced = coerceToString(text);\n  if (coerced === null) return \"\";\n  if (!REDACT_ENABLED) return coerced;\n\n  let s = coerced;\n  for (const re of BUILTIN_PATTERNS) {\n    s = s.replace(re, (m) => maskToken(m));\n  }\n  for (const re of _extraPatterns) {\n    s = s.replace(re, (m) => maskToken(m));\n  }\n  if (!opts?.codeFile) {\n    // Bearer first (preserves \"Bearer \" prefix, masks the token after).\n    // Must run before PARAM_PATTERN so the bare-whitespace shape doesn't\n    // get mis-handled as a value.\n    s = s.replace(BEARER_PATTERN, (_, prefix: string) => `${prefix}***`);\n    // T5.4: skip if value already contains the D71 bucket-mask separator\n    // (`...`) — BUILTIN ran first and produced a prefix-preserved mask;\n    // re-masking would lose the prefix and degrade debuggability.\n    s = s.replace(PARAM_PATTERN, (whole, prefix: string, value: string) => {\n      // issue #117 — skip ONLY when the value is already a mask that a BUILTIN\n      // pattern produced (maskToken's exact `6chars...4chars` shape), so we don't\n      // re-mask and lose the prefix. The old `value.includes(\"...\")` was too broad:\n      // a REAL secret that happens to contain `...` (e.g. `L_-cxw-.2UI_..._`) was\n      // skipped and LEAKED. The mask shape is exact (maskToken: slice(0,6)+\"...\"+\n      // slice(-4)), so a raw secret with `...` elsewhere is now masked.\n      if (MASK_SHAPE.test(value)) return whole;\n      return `${prefix}***`;\n    });\n  }\n  return s;\n}\n\n/**\n * Test-only helper exported for `_test-reset.ts`. NOT included in the\n * `index.ts` barrel — vitest setup imports the dedicated module via\n * explicit path to discourage production callers.\n *\n * @internal\n */\nexport function _resetForTests(opts: { enabled?: boolean; clearExtras?: boolean }): void {\n  if (opts.enabled !== undefined) REDACT_ENABLED = opts.enabled;\n  if (opts.clearExtras === true) _extraPatterns.length = 0;\n}\n\n/**\n * T5.4 — Test-only count of BUILTIN_PATTERNS. Exposed so the count-floor\n * assertion can run without re-deriving the array shape in test land.\n * NOT included in the public barrel.\n *\n * @internal\n */\nexport function __TESTING__BUILTIN_PATTERN_COUNT(): number {\n  return BUILTIN_PATTERNS.length;\n}\n"]}

package/dist/compact-session-FKYCJRAK.cjs

@@ -1,56 +0,0 @@
-'use strict';
-
-var chunkQFFNMJAS_cjs = require('./chunk-QFFNMJAS.cjs');
-require('./chunk-4JBHSLQO.cjs');
-require('./chunk-HLNLYLNN.cjs');
-require('./chunk-S4Q5OMIK.cjs');
-require('./chunk-MUUQ2WFJ.cjs');
-require('./chunk-6JSIEDKL.cjs');
-require('./chunk-WCXOKGOQ.cjs');
-require('./chunk-YLQQX5W2.cjs');
-require('./chunk-NETYW4V3.cjs');
-require('./chunk-NNNUQELM.cjs');
-require('./chunk-GLEKLAUW.cjs');
-require('./chunk-4JRRFRV4.cjs');
-require('./chunk-C6Y6CWYD.cjs');
-require('./chunk-XABN5HY6.cjs');
-require('./chunk-VKJ7V7EB.cjs');
-require('./chunk-YULF6FPB.cjs');
-require('./chunk-ZHPET3LZ.cjs');
-
-
-
-Object.defineProperty(exports, "COMPACT_SUMMARY_MARKER", {
-  enumerable: true,
-  get: function () { return chunkQFFNMJAS_cjs.COMPACT_SUMMARY_MARKER; }
-});
-Object.defineProperty(exports, "COMPACT_USER_MESSAGE_MAX_TOKENS", {
-  enumerable: true,
-  get: function () { return chunkQFFNMJAS_cjs.COMPACT_USER_MESSAGE_MAX_TOKENS; }
-});
-Object.defineProperty(exports, "autoCompactIfNeeded", {
-  enumerable: true,
-  get: function () { return chunkQFFNMJAS_cjs.autoCompactIfNeeded; }
-});
-Object.defineProperty(exports, "buildDefaultSummarizer", {
-  enumerable: true,
-  get: function () { return chunkQFFNMJAS_cjs.buildDefaultSummarizer; }
-});
-Object.defineProperty(exports, "compactSessionTranscript", {
-  enumerable: true,
-  get: function () { return chunkQFFNMJAS_cjs.compactSessionTranscript; }
-});
-Object.defineProperty(exports, "isCompactSummary", {
-  enumerable: true,
-  get: function () { return chunkQFFNMJAS_cjs.isCompactSummary; }
-});
-Object.defineProperty(exports, "resolveSummarizerRoute", {
-  enumerable: true,
-  get: function () { return chunkQFFNMJAS_cjs.resolveSummarizerRoute; }
-});
-Object.defineProperty(exports, "shouldAutoCompact", {
-  enumerable: true,
-  get: function () { return chunkQFFNMJAS_cjs.shouldAutoCompact; }
-});
-//# sourceMappingURL=compact-session-FKYCJRAK.cjs.map
-//# sourceMappingURL=compact-session-FKYCJRAK.cjs.map

package/dist/compact-session-LF4YOT5S.js

@@ -1,19 +0,0 @@
-export { COMPACT_SUMMARY_MARKER, COMPACT_USER_MESSAGE_MAX_TOKENS, autoCompactIfNeeded, buildDefaultSummarizer, compactSessionTranscript, isCompactSummary, resolveSummarizerRoute, shouldAutoCompact } from './chunk-TDDRPFO3.js';
-import './chunk-4QEC4CCS.js';
-import './chunk-F4RUADRC.js';
-import './chunk-SNKY3C2L.js';
-import './chunk-FD2UT76F.js';
-import './chunk-U54XCYG3.js';
-import './chunk-AF4BBKIF.js';
-import './chunk-2XLKLVVR.js';
-import './chunk-VQFSEKU5.js';
-import './chunk-FRQ6F44U.js';
-import './chunk-Z6N6SDNR.js';
-import './chunk-L4JFQCG4.js';
-import './chunk-5NBUH3NO.js';
-import './chunk-JGYYNDAZ.js';
-import './chunk-RIAM53CP.js';
-import './chunk-MRKSSN36.js';
-import './chunk-PBML2FHN.js';
-//# sourceMappingURL=compact-session-LF4YOT5S.js.map
-//# sourceMappingURL=compact-session-LF4YOT5S.js.map

package/dist/context-2G4375BZ.cjs

@@ -1,22 +0,0 @@
-'use strict';
-
-var chunkHECR7KF5_cjs = require('./chunk-HECR7KF5.cjs');
-require('./chunk-YULF6FPB.cjs');
-require('./chunk-ZHPET3LZ.cjs');
-
-
-
-Object.defineProperty(exports, "currentPersonalityContext", {
-  enumerable: true,
-  get: function () { return chunkHECR7KF5_cjs.currentPersonalityContext; }
-});
-Object.defineProperty(exports, "warnPersonalitySwitchInsideFork", {
-  enumerable: true,
-  get: function () { return chunkHECR7KF5_cjs.warnPersonalitySwitchInsideFork; }
-});
-Object.defineProperty(exports, "withPersonalityContext", {
-  enumerable: true,
-  get: function () { return chunkHECR7KF5_cjs.withPersonalityContext; }
-});
-//# sourceMappingURL=context-2G4375BZ.cjs.map
-//# sourceMappingURL=context-2G4375BZ.cjs.map

package/dist/context-GSQYVVMJ.js

@@ -1,5 +0,0 @@
-export { currentPersonalityContext, warnPersonalitySwitchInsideFork, withPersonalityContext } from './chunk-J5RW43IR.js';
-import './chunk-MRKSSN36.js';
-import './chunk-PBML2FHN.js';
-//# sourceMappingURL=context-GSQYVVMJ.js.map
-//# sourceMappingURL=context-GSQYVVMJ.js.map

package/dist/fs-session-store-MAZV5FXJ.cjs

@@ -1,19 +0,0 @@
-'use strict';
-
-var chunkNRA36JKG_cjs = require('./chunk-NRA36JKG.cjs');
-require('./chunk-JA4FEA5Z.cjs');
-require('./chunk-WCXOKGOQ.cjs');
-require('./chunk-6W4U2G3J.cjs');
-require('./chunk-YLQQX5W2.cjs');
-require('./chunk-NETYW4V3.cjs');
-require('./chunk-YULF6FPB.cjs');
-require('./chunk-ZHPET3LZ.cjs');
-
-
-
-Object.defineProperty(exports, "FsSessionStore", {
-  enumerable: true,
-  get: function () { return chunkNRA36JKG_cjs.FsSessionStore; }
-});
-//# sourceMappingURL=fs-session-store-MAZV5FXJ.cjs.map
-//# sourceMappingURL=fs-session-store-MAZV5FXJ.cjs.map

package/dist/fs-session-store-ZNUYZHYI.js

@@ -1,10 +0,0 @@
-export { FsSessionStore } from './chunk-PYM5OUL4.js';
-import './chunk-HKSSM5RK.js';
-import './chunk-AF4BBKIF.js';
-import './chunk-ZNW2TXLO.js';
-import './chunk-2XLKLVVR.js';
-import './chunk-VQFSEKU5.js';
-import './chunk-MRKSSN36.js';
-import './chunk-PBML2FHN.js';
-//# sourceMappingURL=fs-session-store-ZNUYZHYI.js.map
-//# sourceMappingURL=fs-session-store-ZNUYZHYI.js.map

package/dist/generate-object-6PWGH5DZ.cjs

@@ -1,20 +0,0 @@
-'use strict';
-
-var chunkGC44RATP_cjs = require('./chunk-GC44RATP.cjs');
-require('./chunk-WIGJGFH4.cjs');
-require('./chunk-WJVHMTKB.cjs');
-require('./chunk-YULF6FPB.cjs');
-require('./chunk-ZHPET3LZ.cjs');
-
-
-
-Object.defineProperty(exports, "GenerateObjectError", {
-  enumerable: true,
-  get: function () { return chunkGC44RATP_cjs.GenerateObjectError; }
-});
-Object.defineProperty(exports, "generateObjectImpl", {
-  enumerable: true,
-  get: function () { return chunkGC44RATP_cjs.generateObjectImpl; }
-});
-//# sourceMappingURL=generate-object-6PWGH5DZ.cjs.map
-//# sourceMappingURL=generate-object-6PWGH5DZ.cjs.map

package/dist/generate-object-IXMJ7FUX.js

@@ -1,7 +0,0 @@
-export { GenerateObjectError, generateObjectImpl } from './chunk-35NFZ7QB.js';
-import './chunk-O3IZ7JEL.js';
-import './chunk-4VPXM6UU.js';
-import './chunk-MRKSSN36.js';
-import './chunk-PBML2FHN.js';
-//# sourceMappingURL=generate-object-IXMJ7FUX.js.map
-//# sourceMappingURL=generate-object-IXMJ7FUX.js.map

package/dist/index-manager-34ELCOAP.cjs

@@ -1,21 +0,0 @@
-'use strict';
-
-var chunkRWMNTFHZ_cjs = require('./chunk-RWMNTFHZ.cjs');
-require('./chunk-2RW7K6FN.cjs');
-require('./chunk-MUUQ2WFJ.cjs');
-require('./chunk-BV42CCRP.cjs');
-require('./chunk-YLQQX5W2.cjs');
-require('./chunk-NETYW4V3.cjs');
-require('./chunk-XABN5HY6.cjs');
-require('./chunk-VKJ7V7EB.cjs');
-require('./chunk-YULF6FPB.cjs');
-require('./chunk-ZHPET3LZ.cjs');
-
-
-
-Object.defineProperty(exports, "IndexManager", {
-  enumerable: true,
-  get: function () { return chunkRWMNTFHZ_cjs.IndexManager; }
-});
-//# sourceMappingURL=index-manager-34ELCOAP.cjs.map
-//# sourceMappingURL=index-manager-34ELCOAP.cjs.map

package/dist/index-manager-OMJVYS2U.js

@@ -1,12 +0,0 @@
-export { IndexManager } from './chunk-E54KDYOE.js';
-import './chunk-OXNYIMZZ.js';
-import './chunk-FD2UT76F.js';
-import './chunk-2WB6EIYW.js';
-import './chunk-2XLKLVVR.js';
-import './chunk-VQFSEKU5.js';
-import './chunk-JGYYNDAZ.js';
-import './chunk-RIAM53CP.js';
-import './chunk-MRKSSN36.js';
-import './chunk-PBML2FHN.js';
-//# sourceMappingURL=index-manager-OMJVYS2U.js.map
-//# sourceMappingURL=index-manager-OMJVYS2U.js.map

package/dist/judge-call-3QZO5H5N.js

@@ -1,5 +0,0 @@
-export { JudgeCredentialError, composeJudgePrompt, judgeCallImpl } from './chunk-PAV4ZPSW.js';
-import './chunk-MRKSSN36.js';
-import './chunk-PBML2FHN.js';
-//# sourceMappingURL=judge-call-3QZO5H5N.js.map
-//# sourceMappingURL=judge-call-3QZO5H5N.js.map

package/dist/judge-call-J5EETJL3.cjs

@@ -1,22 +0,0 @@
-'use strict';
-
-var chunkUJMEWGO6_cjs = require('./chunk-UJMEWGO6.cjs');
-require('./chunk-YULF6FPB.cjs');
-require('./chunk-ZHPET3LZ.cjs');
-
-
-
-Object.defineProperty(exports, "JudgeCredentialError", {
-  enumerable: true,
-  get: function () { return chunkUJMEWGO6_cjs.JudgeCredentialError; }
-});
-Object.defineProperty(exports, "composeJudgePrompt", {
-  enumerable: true,
-  get: function () { return chunkUJMEWGO6_cjs.composeJudgePrompt; }
-});
-Object.defineProperty(exports, "judgeCallImpl", {
-  enumerable: true,
-  get: function () { return chunkUJMEWGO6_cjs.judgeCallImpl; }
-});
-//# sourceMappingURL=judge-call-J5EETJL3.cjs.map
-//# sourceMappingURL=judge-call-J5EETJL3.cjs.map

package/dist/registry-KB3TS6BM.cjs

@@ -1,46 +0,0 @@
-'use strict';
-
-var chunkKCQUYQ3V_cjs = require('./chunk-KCQUYQ3V.cjs');
-require('./chunk-BUUUWQMB.cjs');
-require('./chunk-27DYRARU.cjs');
-require('./chunk-XR4LPBXH.cjs');
-require('./chunk-NETYW4V3.cjs');
-require('./chunk-YULF6FPB.cjs');
-require('./chunk-ZHPET3LZ.cjs');
-
-
-
-Object.defineProperty(exports, "__getSubscribersCountForTests", {
-  enumerable: true,
-  get: function () { return chunkKCQUYQ3V_cjs.__getSubscribersCountForTests; }
-});
-Object.defineProperty(exports, "__resetTaskRegistryForTests", {
-  enumerable: true,
-  get: function () { return chunkKCQUYQ3V_cjs.__resetTaskRegistryForTests; }
-});
-Object.defineProperty(exports, "cancel", {
-  enumerable: true,
-  get: function () { return chunkKCQUYQ3V_cjs.cancel; }
-});
-Object.defineProperty(exports, "configure", {
-  enumerable: true,
-  get: function () { return chunkKCQUYQ3V_cjs.configure; }
-});
-Object.defineProperty(exports, "get", {
-  enumerable: true,
-  get: function () { return chunkKCQUYQ3V_cjs.get; }
-});
-Object.defineProperty(exports, "list", {
-  enumerable: true,
-  get: function () { return chunkKCQUYQ3V_cjs.list; }
-});
-Object.defineProperty(exports, "submit", {
-  enumerable: true,
-  get: function () { return chunkKCQUYQ3V_cjs.submit; }
-});
-Object.defineProperty(exports, "subscribe", {
-  enumerable: true,
-  get: function () { return chunkKCQUYQ3V_cjs.subscribe; }
-});
-//# sourceMappingURL=registry-KB3TS6BM.cjs.map
-//# sourceMappingURL=registry-KB3TS6BM.cjs.map

package/dist/registry-PPFMCM4A.js

@@ -1,9 +0,0 @@
-export { __getSubscribersCountForTests, __resetTaskRegistryForTests, cancel, configure, get, list, submit, subscribe } from './chunk-GNMPCZNN.js';
-import './chunk-K2BQQ445.js';
-import './chunk-Q4DTGCSD.js';
-import './chunk-NOM2YWFP.js';
-import './chunk-VQFSEKU5.js';
-import './chunk-MRKSSN36.js';
-import './chunk-PBML2FHN.js';
-//# sourceMappingURL=registry-PPFMCM4A.js.map
-//# sourceMappingURL=registry-PPFMCM4A.js.map

package/dist/session-transcript-7FWTO4BK.js

@@ -1,5 +0,0 @@
-export { SessionTranscript, defaultBaseDir, encodeProjectDir, expandTilde, readTranscript, reconstructMessages, safeSessionId, transcriptPath, transcriptRoot, writeTranscript } from './chunk-AF4BBKIF.js';
-import './chunk-VQFSEKU5.js';
-import './chunk-PBML2FHN.js';
-//# sourceMappingURL=session-transcript-7FWTO4BK.js.map
-//# sourceMappingURL=session-transcript-7FWTO4BK.js.map

package/dist/session-transcript-FYRKWRWV.cjs

@@ -1,50 +0,0 @@
-'use strict';
-
-var chunkWCXOKGOQ_cjs = require('./chunk-WCXOKGOQ.cjs');
-require('./chunk-NETYW4V3.cjs');
-require('./chunk-ZHPET3LZ.cjs');
-
-
-
-Object.defineProperty(exports, "SessionTranscript", {
-  enumerable: true,
-  get: function () { return chunkWCXOKGOQ_cjs.SessionTranscript; }
-});
-Object.defineProperty(exports, "defaultBaseDir", {
-  enumerable: true,
-  get: function () { return chunkWCXOKGOQ_cjs.defaultBaseDir; }
-});
-Object.defineProperty(exports, "encodeProjectDir", {
-  enumerable: true,
-  get: function () { return chunkWCXOKGOQ_cjs.encodeProjectDir; }
-});
-Object.defineProperty(exports, "expandTilde", {
-  enumerable: true,
-  get: function () { return chunkWCXOKGOQ_cjs.expandTilde; }
-});
-Object.defineProperty(exports, "readTranscript", {
-  enumerable: true,
-  get: function () { return chunkWCXOKGOQ_cjs.readTranscript; }
-});
-Object.defineProperty(exports, "reconstructMessages", {
-  enumerable: true,
-  get: function () { return chunkWCXOKGOQ_cjs.reconstructMessages; }
-});
-Object.defineProperty(exports, "safeSessionId", {
-  enumerable: true,
-  get: function () { return chunkWCXOKGOQ_cjs.safeSessionId; }
-});
-Object.defineProperty(exports, "transcriptPath", {
-  enumerable: true,
-  get: function () { return chunkWCXOKGOQ_cjs.transcriptPath; }
-});
-Object.defineProperty(exports, "transcriptRoot", {
-  enumerable: true,
-  get: function () { return chunkWCXOKGOQ_cjs.transcriptRoot; }
-});
-Object.defineProperty(exports, "writeTranscript", {
-  enumerable: true,
-  get: function () { return chunkWCXOKGOQ_cjs.writeTranscript; }
-});
-//# sourceMappingURL=session-transcript-FYRKWRWV.cjs.map
-//# sourceMappingURL=session-transcript-FYRKWRWV.cjs.map

package/dist/stream-object-3R3HZPQN.cjs

@@ -1,20 +0,0 @@
-'use strict';
-
-var chunk57KX5WTP_cjs = require('./chunk-57KX5WTP.cjs');
-require('./chunk-WIGJGFH4.cjs');
-require('./chunk-WJVHMTKB.cjs');
-require('./chunk-YULF6FPB.cjs');
-require('./chunk-ZHPET3LZ.cjs');
-
-
-
-Object.defineProperty(exports, "StreamObjectError", {
-  enumerable: true,
-  get: function () { return chunk57KX5WTP_cjs.StreamObjectError; }
-});
-Object.defineProperty(exports, "streamObjectImpl", {
-  enumerable: true,
-  get: function () { return chunk57KX5WTP_cjs.streamObjectImpl; }
-});
-//# sourceMappingURL=stream-object-3R3HZPQN.cjs.map
-//# sourceMappingURL=stream-object-3R3HZPQN.cjs.map

package/dist/stream-object-NPJXDZXO.js

@@ -1,7 +0,0 @@
-export { StreamObjectError, streamObjectImpl } from './chunk-3KY7MHR4.js';
-import './chunk-O3IZ7JEL.js';
-import './chunk-4VPXM6UU.js';
-import './chunk-MRKSSN36.js';
-import './chunk-PBML2FHN.js';
-//# sourceMappingURL=stream-object-NPJXDZXO.js.map
-//# sourceMappingURL=stream-object-NPJXDZXO.js.map

package/dist/subagents-loader-5KQVYUNS.js

@@ -1,6 +0,0 @@
-export { loadSubagents } from './chunk-TJRPNBY5.js';
-import './chunk-OLLOUAUJ.js';
-import './chunk-MRKSSN36.js';
-import './chunk-PBML2FHN.js';
-//# sourceMappingURL=subagents-loader-5KQVYUNS.js.map
-//# sourceMappingURL=subagents-loader-5KQVYUNS.js.map

package/dist/subagents-loader-FDXPBBRA.cjs

@@ -1,15 +0,0 @@
-'use strict';
-
-var chunkX2YQP452_cjs = require('./chunk-X2YQP452.cjs');
-require('./chunk-BRHRQOJA.cjs');
-require('./chunk-YULF6FPB.cjs');
-require('./chunk-ZHPET3LZ.cjs');
-
-
-
-Object.defineProperty(exports, "loadSubagents", {
-  enumerable: true,
-  get: function () { return chunkX2YQP452_cjs.loadSubagents; }
-});
-//# sourceMappingURL=subagents-loader-FDXPBBRA.cjs.map
-//# sourceMappingURL=subagents-loader-FDXPBBRA.cjs.map