@vainplex/openclaw-cortex 0.3.0 → 0.4.0

package/dist/src/trace-analyzer/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../../src/trace-analyzer/hooks.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,qCAAqC;AACrC,+DAA+D;AAC/D,EAAE;AACF,4DAA4D;AAC5D,yDAAyD;AACzD,wCAAwC;AACxC,EAAE;AACF,4DAA4D;AAC5D,4DAA4D;AAC5D,+DAA+D;AAI/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAWhE;;GAEG;AACH;;;GAGG;AACH,SAAS,oBAAoB,CAAC,QAA2B;IACvD,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5F,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAoB,EACpB,SAAiB,EACjB,MAAoB;IAEpB,gDAAgD;IAChD,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,IAAI,qBAAqB,EAAE,CAAC;IACnD,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,cAAc,GAAqB,cAAc,CAAC,WAAW,EAAE,CAAC;IAEtE,MAAM,CAAC,IAAI,CACT,gDAAgD,cAAc,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjG,CAAC;IAEF,OAAO,IAAI,aAAa,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC,aAAa;QAC5B,MAAM;QACN,SAAS;QACT,WAAW,EAAE,MAAM,CAAC,GAAgB;QACpC,YAAY,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAC5E,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,KAA6B,EAC7B,MAAoB,EACpB,SAAiB,EACjB,MAAoB;IAEpB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,KAAK,CAAC,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC;AACxB,CAAC;AAED,yCAAyC;AACzC,KAAK,UAAU,kBAAkB,CAC/B,GAAsB,EACtB,KAA6B,EAC7B,MAAoB,EACpB,SAAiB,EACjB,IAA8B;IAE9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,KAAK,IAAI,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE;gBACJ,0BAA0B;gBAC1B,WAAW,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE;gBACzC,WAAW,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;gBAC7C,aAAa,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;gBAC5C,eAAe,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;gBAChD,YAAY,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;aAC5C,CAAC,IAAI,CAAC,KAAK,CAAC;SACd,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,IAAI,EAAE,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAChG,CAAC;AACH,CAAC;AAED,wCAAwC;AACxC,KAAK,UAAU,iBAAiB,CAC9B,GAAsB,EACtB,KAA6B,EAC7B,MAAoB,EACpB,SAAiB;IAEjB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE;gBACJ,uBAAuB;gBACvB,aAAa,MAAM,CAAC,OAAO,IAAI,OAAO,EAAE;gBACxC,mBAAmB,MAAM,CAAC,QAAQ,EAAE;gBACpC,qBAAqB,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,EAAE;aAC9D,CAAC,IAAI,CAAC,KAAK,CAAC;SACd,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,SAAS,aAAa,CACpB,GAAsB,EACtB,KAA6B,EAC7B,MAAoB,EACpB,SAAiB;IAEjB,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAChF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC9D,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC;aAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;aAChC,KAAK,CAAC,GAAG,CAAC,EAAE;YACX,MAAM,CAAC,IAAI,CACT,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClG,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,UAAU,CAAC,CAAC;IACf,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,GAAG,CAAC,CAAC;AAC/G,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAsB,EACtB,MAAoB,EACpB,KAA6B;IAE7B,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAE3C,GAAG,CAAC,eAAe,CAAC;QAClB,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,wEAAwE;QACrF,OAAO,EAAE,CAAC,IAA8B,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC;KACrG,CAAC,CAAC;IAEH,GAAG,CAAC,eAAe,CAAC;QAClB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,yEAAyE;QACtF,OAAO,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;KAChE,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC1C,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,gDAAgD,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,QAAQ,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,CAChI,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAA6B;IACrE,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;AACxB,CAAC"}

package/dist/src/trace-analyzer/index.d.ts

@@ -0,0 +1,32 @@
+export type { NormalizedEvent, AnalyzerEventType, NormalizedPayload, } from "./events.js";
+export { normalizeEvent, normalizeSession, normalizePayload, mapEventType, detectSchema, } from "./events.js";
+export type { TraceSource, FetchOpts } from "./trace-source.js";
+export { createNatsTraceSource } from "./nats-trace-source.js";
+export type { ConversationChain, ChainReconstructorOpts } from "./chain-reconstructor.js";
+export { reconstructChains } from "./chain-reconstructor.js";
+export type { TraceAnalyzerConfig, SignalId, Severity, TriageLlmConfig } from "./config.js";
+export { TRACE_ANALYZER_DEFAULTS, resolveTraceAnalyzerConfig } from "./config.js";
+export type { FailureSignal, Finding, FindingClassification, SignalDetector, } from "./signals/types.js";
+export { detectCorrections } from "./signals/correction.js";
+export { detectToolFails } from "./signals/tool-fail.js";
+export { detectDoomLoops } from "./signals/doom-loop.js";
+export { detectDissatisfied } from "./signals/dissatisfied.js";
+export { detectRepeatFails, createRepeatFailState } from "./signals/repeat-fail.js";
+export type { RepeatFailState } from "./signals/repeat-fail.js";
+export { detectHallucinations } from "./signals/hallucination.js";
+export { detectUnverifiedClaims } from "./signals/unverified-claim.js";
+export { detectAllSignals, SignalPatternRegistry } from "./signals/index.js";
+export type { SignalPatternSet } from "./signals/index.js";
+export type { SignalLanguagePack } from "./signals/lang/types.js";
+export { BUILTIN_SIGNAL_LANGUAGES } from "./signals/lang/registry.js";
+export { redactText, redactChain } from "./redactor.js";
+export { classifyFindings, resolveAnalyzerLlmConfig, formatChainAsTranscript } from "./classifier.js";
+export type { GeneratedOutput } from "./output-generator.js";
+export { generateOutputs } from "./output-generator.js";
+export type { AnalysisReport, RunStats, SignalStats, RuleEffectiveness, ProcessingState, AssembleReportParams, } from "./report.js";
+export { assembleReport } from "./report.js";
+export { TraceAnalyzer } from "./analyzer.js";
+export type { TraceAnalyzerRunOpts, TraceAnalyzerStatus } from "./analyzer.js";
+export { registerTraceAnalyzerHooks, cleanupTraceAnalyzerHooks } from "./hooks.js";
+export type { TraceAnalyzerHookState } from "./hooks.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/trace-analyzer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/trace-analyzer/index.ts"],"names":[],"mappings":"AAKA,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,YAAY,GACb,MAAM,aAAa,CAAC;AAGrB,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAGhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,YAAY,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAGlF,YAAY,EACV,aAAa,EACb,OAAO,EACP,qBAAqB,EACrB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACpF,YAAY,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAGvE,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAGtE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAGtG,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,YAAY,EACV,cAAc,EACd,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAG/E,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACnF,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC"}

package/dist/src/trace-analyzer/index.js

@@ -0,0 +1,30 @@
+// ============================================================
+// Trace Analyzer — Public API
+// ============================================================
+export { normalizeEvent, normalizeSession, normalizePayload, mapEventType, detectSchema, } from "./events.js";
+// NatsTraceSource
+export { createNatsTraceSource } from "./nats-trace-source.js";
+export { reconstructChains } from "./chain-reconstructor.js";
+export { TRACE_ANALYZER_DEFAULTS, resolveTraceAnalyzerConfig } from "./config.js";
+// Signal detectors
+export { detectCorrections } from "./signals/correction.js";
+export { detectToolFails } from "./signals/tool-fail.js";
+export { detectDoomLoops } from "./signals/doom-loop.js";
+export { detectDissatisfied } from "./signals/dissatisfied.js";
+export { detectRepeatFails, createRepeatFailState } from "./signals/repeat-fail.js";
+export { detectHallucinations } from "./signals/hallucination.js";
+export { detectUnverifiedClaims } from "./signals/unverified-claim.js";
+// Signal registry
+export { detectAllSignals, SignalPatternRegistry } from "./signals/index.js";
+export { BUILTIN_SIGNAL_LANGUAGES } from "./signals/lang/registry.js";
+// Redaction (Phase 3)
+export { redactText, redactChain } from "./redactor.js";
+// Classifier (Phase 3)
+export { classifyFindings, resolveAnalyzerLlmConfig, formatChainAsTranscript } from "./classifier.js";
+export { generateOutputs } from "./output-generator.js";
+export { assembleReport } from "./report.js";
+// Analyzer (Phase 4)
+export { TraceAnalyzer } from "./analyzer.js";
+// Hook registration (Phase 4)
+export { registerTraceAnalyzerHooks, cleanupTraceAnalyzerHooks } from "./hooks.js";
+//# sourceMappingURL=index.js.map

package/dist/src/trace-analyzer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/trace-analyzer/index.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,8BAA8B;AAC9B,+DAA+D;AAS/D,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,YAAY,GACb,MAAM,aAAa,CAAC;AAKrB,kBAAkB;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAI/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAI7D,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAUlF,mBAAmB;AACnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,kBAAkB;AAClB,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAK7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,sBAAsB;AACtB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAExD,uBAAuB;AACvB,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAItG,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAWxD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,qBAAqB;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG9C,8BAA8B;AAC9B,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC"}

package/dist/src/trace-analyzer/nats-trace-source.d.ts

@@ -0,0 +1,10 @@
+import type { PluginLogger } from "../types.js";
+import type { TraceSource } from "./trace-source.js";
+import type { TraceAnalyzerConfig } from "./config.js";
+/**
+ * Attempt to create a NatsTraceSource. Returns null if:
+ * - `nats` npm package is not installed (R-004)
+ * - NATS connection fails
+ */
+export declare function createNatsTraceSource(natsConfig: TraceAnalyzerConfig["nats"], logger: PluginLogger): Promise<TraceSource | null>;
+//# sourceMappingURL=nats-trace-source.d.ts.map

package/dist/src/trace-analyzer/nats-trace-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nats-trace-source.d.ts","sourceRoot":"","sources":["../../../src/trace-analyzer/nats-trace-source.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAa,MAAM,mBAAmB,CAAC;AAEhE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAiFvD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,mBAAmB,CAAC,MAAM,CAAC,EACvC,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAI7B"}

package/dist/src/trace-analyzer/nats-trace-source.js

@@ -0,0 +1,151 @@
+// ============================================================
+// Trace Analyzer — NatsTraceSource Implementation
+// ============================================================
+//
+// Reads events from a NATS JetStream stream, normalizing both
+// Schema A (nats-eventstore) and Schema B (session-sync) events
+// into NormalizedEvent format.
+//
+// The `nats` package is dynamically imported — if not installed,
+// createNatsTraceSource() returns null gracefully (R-004).
+// ============================================================
+import { normalizeEvent } from "./events.js";
+/**
+ * Dynamically import the nats module, returning null if not installed.
+ * Uses `new Function()` to prevent bundler static resolution (R-004).
+ */
+async function loadNatsModule(logger) {
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        return await new Function("specifier", "return import(specifier)")("nats");
+    }
+    catch {
+        logger.info("[trace-analyzer] `nats` package not installed — NATS trace source unavailable");
+        return null;
+    }
+}
+/** Connect to NATS and return an implementation, or null on failure. */
+async function connectNats(nats, natsConfig, logger) {
+    try {
+        const nc = await nats.connect({
+            servers: natsConfig.url.replace(/^nats:\/\//, ""),
+            user: natsConfig.user, pass: natsConfig.password,
+            reconnect: true, maxReconnectAttempts: 10, timeout: 10_000,
+        });
+        logger.info(`[trace-analyzer] Connected to NATS at ${natsConfig.url}`);
+        const js = nc.jetstream();
+        const jsm = await nc.jetstreamManager();
+        return new NatsTraceSourceImpl(nc, js, jsm, natsConfig, nats, logger);
+    }
+    catch (err) {
+        logger.warn(`[trace-analyzer] NATS connection failed: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+/**
+ * Attempt to create a NatsTraceSource. Returns null if:
+ * - `nats` npm package is not installed (R-004)
+ * - NATS connection fails
+ */
+export async function createNatsTraceSource(natsConfig, logger) {
+    const nats = await loadNatsModule(logger);
+    if (!nats)
+        return null;
+    return connectNats(nats, natsConfig, logger);
+}
+/** Decode, normalize and filter a single NATS message. */
+function processMessage(msg, sc, startMs, endMs, opts) {
+    let raw;
+    try {
+        raw = JSON.parse(sc.decode(msg.data));
+    }
+    catch {
+        return "skip";
+    }
+    const event = normalizeEvent(raw, msg.seq);
+    if (!event)
+        return "skip";
+    if (event.ts < startMs)
+        return "skip";
+    if (event.ts > endMs)
+        return "past-end";
+    if (opts?.eventTypes && !opts.eventTypes.includes(event.type))
+        return "skip";
+    if (opts?.agents && !opts.agents.includes(event.agent))
+        return "skip";
+    return { event };
+}
+class NatsTraceSourceImpl {
+    nc;
+    js;
+    jsm;
+    config;
+    natsModule;
+    logger;
+    closed = false;
+    constructor(nc, js, jsm, config, natsModule, logger) {
+        this.nc = nc;
+        this.js = js;
+        this.jsm = jsm;
+        this.config = config;
+        this.natsModule = natsModule;
+        this.logger = logger;
+    }
+    async *fetchByTimeRange(startMs, endMs, opts) {
+        const sc = this.natsModule.StringCodec();
+        const batchSize = opts?.batchSize ?? 500;
+        let yieldedCount = 0;
+        let exhausted = false;
+        while (!exhausted) {
+            const consumer = await this.js.consumers.get(this.config.stream);
+            const messages = await consumer.consume({ max_messages: batchSize, idle_heartbeat: 5_000 });
+            let batchCount = 0;
+            let pastEnd = false;
+            try {
+                for await (const msg of messages) {
+                    batchCount++;
+                    const result = processMessage(msg, sc, startMs, endMs, opts);
+                    msg.ack();
+                    if (result === "skip")
+                        continue;
+                    if (result === "past-end") {
+                        messages.stop();
+                        pastEnd = true;
+                        break;
+                    }
+                    yieldedCount++;
+                    yield result.event;
+                }
+            }
+            catch (err) {
+                this.logger.warn(`[trace-analyzer] Error during NATS fetch: ${err instanceof Error ? err.message : String(err)}`);
+                break;
+            }
+            if (pastEnd || batchCount < batchSize)
+                exhausted = true;
+        }
+        this.logger.info(`[trace-analyzer] Fetched ${yieldedCount} events in time range`);
+    }
+    async *fetchByAgent(agent, startMs, endMs, opts) {
+        yield* this.fetchByTimeRange(startMs, endMs, {
+            ...opts,
+            agents: [agent],
+        });
+    }
+    async getLastSequence() {
+        const info = await this.jsm.streams.info(this.config.stream);
+        return info.state.last_seq;
+    }
+    async getEventCount() {
+        const info = await this.jsm.streams.info(this.config.stream);
+        return info.state.messages;
+    }
+    async close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        await this.nc.drain().catch(() => { });
+        await this.nc.close().catch(() => { });
+    }
+}
+//# sourceMappingURL=nats-trace-source.js.map

package/dist/src/trace-analyzer/nats-trace-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nats-trace-source.js","sourceRoot":"","sources":["../../../src/trace-analyzer/nats-trace-source.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,kDAAkD;AAClD,+DAA+D;AAC/D,EAAE;AACF,8DAA8D;AAC9D,gEAAgE;AAChE,+BAA+B;AAC/B,EAAE;AACF,iEAAiE;AACjE,2DAA2D;AAC3D,+DAA+D;AAM/D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AA4C7C;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,MAAoB;IAChD,IAAI,CAAC;QACH,iEAAiE;QACjE,OAAO,MAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC,MAAM,CAAyB,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,KAAK,UAAU,WAAW,CACxB,IAAgB,EAChB,UAAuC,EACvC,MAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAC5B,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;YACjD,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ;YAChD,SAAS,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM;SAC3D,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,yCAAyC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACxC,OAAO,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,4CAA4C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5G,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAuC,EACvC,MAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAKD,0DAA0D;AAC1D,SAAS,cAAc,CACrB,GAAiB,EACjB,EAAwC,EACxC,OAAe,EACf,KAAa,EACb,IAAgB;IAEhB,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAA4B,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,MAAM,CAAC;IAAC,CAAC;IAE1B,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,KAAK,CAAC,EAAE,GAAG,OAAO;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,KAAK,CAAC,EAAE,GAAG,KAAK;QAAE,OAAO,UAAU,CAAC;IACxC,IAAI,IAAI,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7E,IAAI,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAEtE,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,mBAAmB;IAIJ;IACA;IACA;IACA;IACA;IACA;IARX,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,EAAkB,EAClB,EAAmB,EACnB,GAAqB,EACrB,MAAmC,EACnC,UAAsB,EACtB,MAAoB;QALpB,OAAE,GAAF,EAAE,CAAgB;QAClB,OAAE,GAAF,EAAE,CAAiB;QACnB,QAAG,GAAH,GAAG,CAAkB;QACrB,WAAM,GAAN,MAAM,CAA6B;QACnC,eAAU,GAAV,UAAU,CAAY;QACtB,WAAM,GAAN,MAAM,CAAc;IACpC,CAAC;IAEJ,KAAK,CAAC,CAAC,gBAAgB,CACrB,OAAe,EACf,KAAa,EACb,IAAgB;QAEhB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,GAAG,CAAC;QACzC,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,OAAO,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5F,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBACjC,UAAU,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;oBAC7D,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,IAAI,MAAM,KAAK,MAAM;wBAAE,SAAS;oBAChC,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;wBAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;wBAAC,OAAO,GAAG,IAAI,CAAC;wBAAC,MAAM;oBAAC,CAAC;oBACtE,YAAY,EAAE,CAAC;oBACf,MAAM,MAAM,CAAC,KAAK,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6CAA6C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChG,CAAC;gBACF,MAAM;YACR,CAAC;YAED,IAAI,OAAO,IAAI,UAAU,GAAG,SAAS;gBAAE,SAAS,GAAG,IAAI,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,YAAY,uBAAuB,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,CAAC,YAAY,CACjB,KAAa,EACb,OAAe,EACf,KAAa,EACb,IAAgB;QAEhB,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE;YAC3C,GAAG,IAAI;YACP,MAAM,EAAE,CAAC,KAAK,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/src/trace-analyzer/output-generator.d.ts

@@ -0,0 +1,29 @@
+import type { Finding } from "./signals/types.js";
+/** A generated output: rule, policy, or pattern. */
+export type GeneratedOutput = {
+    /** Output ID (UUIDv4). */
+    id: string;
+    /** Type of output. */
+    type: "soul_rule" | "governance_policy" | "cortex_pattern";
+    /** The generated content. */
+    content: string;
+    /** Finding IDs that produced this output. */
+    sourceFindings: string[];
+    /** Number of observations across findings. */
+    observationCount: number;
+    /** Confidence (average of source finding confidences). */
+    confidence: number;
+};
+/**
+ * Generate outputs from classified findings (Stage 3).
+ *
+ * Groups findings by classification.actionType and produces:
+ * - SOUL.md rules (soul_rule) — R-021
+ * - Governance policies (governance_policy) — R-022
+ * - Cortex patterns (cortex_pattern) — R-023
+ * - manual_review findings produce no output (appear in report only)
+ *
+ * Findings without classification are skipped.
+ */
+export declare function generateOutputs(findings: Finding[]): GeneratedOutput[];
+//# sourceMappingURL=output-generator.d.ts.map

package/dist/src/trace-analyzer/output-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-generator.d.ts","sourceRoot":"","sources":["../../../src/trace-analyzer/output-generator.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAY,MAAM,oBAAoB,CAAC;AAE5D,oDAAoD;AACpD,MAAM,MAAM,eAAe,GAAG;IAC5B,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,sBAAsB;IACtB,IAAI,EAAE,WAAW,GAAG,mBAAmB,GAAG,gBAAgB,CAAC;IAC3D,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,8CAA8C;IAC9C,gBAAgB,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AA0IF;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAStE"}

package/dist/src/trace-analyzer/output-generator.js

@@ -0,0 +1,142 @@
+// ============================================================
+// Trace Analyzer — Output Generator (Stage 3)
+// ============================================================
+//
+// Groups classified findings by actionType and generates
+// SOUL.md rules, governance policies, and Cortex patterns.
+// Implements R-019, R-021, R-022, R-023.
+// ============================================================
+import { randomUUID } from "node:crypto";
+// ---- Helpers ----
+function average(values) {
+    if (values.length === 0)
+        return 0;
+    return values.reduce((sum, v) => sum + v, 0) / values.length;
+}
+/**
+ * Group findings by a similarity key derived from their actionText.
+ * Simple approach: normalize whitespace and lowercase first 80 chars.
+ */
+function groupByActionText(findings) {
+    const groups = new Map();
+    for (const f of findings) {
+        const key = (f.classification?.actionText ?? "")
+            .toLowerCase()
+            .replace(/\s+/g, " ")
+            .trim()
+            .slice(0, 80);
+        let group = groups.get(key);
+        if (!group) {
+            group = [];
+            groups.set(key, group);
+        }
+        group.push(f);
+    }
+    return [...groups.values()];
+}
+// ---- SOUL.md Rule Generation (R-021) ----
+/**
+ * Format: "NIEMALS X — stattdessen Y. [Grund: Z, {N}× beobachtet in Traces, Findings: abc, def]"
+ */
+function formatSoulRule(actionText, observationCount, findingIds) {
+    const idRef = findingIds.slice(0, 3).map(id => id.slice(0, 8)).join(", ");
+    return `${actionText} [${observationCount}× beobachtet in Traces, Findings: ${idRef}]`;
+}
+function generateSoulRules(findings) {
+    const ruleFindings = findings.filter(f => f.classification?.actionType === "soul_rule");
+    if (ruleFindings.length === 0)
+        return [];
+    const grouped = groupByActionText(ruleFindings);
+    return grouped.map(group => {
+        const primary = group[0].classification;
+        const count = group.length;
+        const findingIds = group.map(f => f.id);
+        const ruleText = formatSoulRule(primary.actionText, count, findingIds);
+        return {
+            id: randomUUID(),
+            type: "soul_rule",
+            content: ruleText,
+            sourceFindings: findingIds,
+            observationCount: count,
+            confidence: average(group.map(f => f.classification.confidence)),
+        };
+    });
+}
+// ---- Governance Policy Generation (R-022) ----
+function inferHooksFromSignal(signal) {
+    switch (signal) {
+        case "SIG-DOOM-LOOP":
+        case "SIG-TOOL-FAIL":
+            return ["before_tool_call"];
+        case "SIG-HALLUCINATION":
+        case "SIG-UNVERIFIED-CLAIM":
+            return ["message_sending"];
+        default:
+            return ["message_sent"];
+    }
+}
+function generateGovernancePolicies(findings) {
+    const policyFindings = findings.filter(f => f.classification?.actionType === "governance_policy");
+    return policyFindings.map(f => {
+        const classification = f.classification;
+        const policy = {
+            id: `trace-gen-${f.signal.signal.toLowerCase().replace(/[^a-z0-9]/g, "-")}-${f.id.slice(0, 8)}`,
+            name: `Auto: ${f.signal.summary.slice(0, 60)}`,
+            version: "1.0.0",
+            description: `Auto-generated from trace analysis finding ${f.id}. Root cause: ${classification.rootCause}`,
+            scope: { hooks: inferHooksFromSignal(f.signal.signal) },
+            rules: [{
+                    id: `rule-${f.id.slice(0, 8)}`,
+                    description: classification.actionText,
+                    conditions: { signal: f.signal.signal, severity: f.signal.severity },
+                    effect: {
+                        action: "audit",
+                        reason: classification.actionText,
+                    },
+                }],
+        };
+        return {
+            id: randomUUID(),
+            type: "governance_policy",
+            content: JSON.stringify(policy, null, 2),
+            sourceFindings: [f.id],
+            observationCount: 1,
+            confidence: classification.confidence,
+        };
+    });
+}
+// ---- Cortex Pattern Generation (R-023) ----
+function generateCortexPatterns(findings) {
+    const patternFindings = findings.filter(f => f.classification?.actionType === "cortex_pattern");
+    return patternFindings.map(f => ({
+        id: randomUUID(),
+        type: "cortex_pattern",
+        content: f.classification.actionText,
+        sourceFindings: [f.id],
+        observationCount: 1,
+        confidence: f.classification.confidence,
+    }));
+}
+// ---- Public API ----
+/**
+ * Generate outputs from classified findings (Stage 3).
+ *
+ * Groups findings by classification.actionType and produces:
+ * - SOUL.md rules (soul_rule) — R-021
+ * - Governance policies (governance_policy) — R-022
+ * - Cortex patterns (cortex_pattern) — R-023
+ * - manual_review findings produce no output (appear in report only)
+ *
+ * Findings without classification are skipped.
+ */
+export function generateOutputs(findings) {
+    const classified = findings.filter(f => f.classification !== null);
+    if (classified.length === 0)
+        return [];
+    return [
+        ...generateSoulRules(classified),
+        ...generateGovernancePolicies(classified),
+        ...generateCortexPatterns(classified),
+    ];
+}
+//# sourceMappingURL=output-generator.js.map

package/dist/src/trace-analyzer/output-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-generator.js","sourceRoot":"","sources":["../../../src/trace-analyzer/output-generator.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,8CAA8C;AAC9C,+DAA+D;AAC/D,EAAE;AACF,yDAAyD;AACzD,2DAA2D;AAC3D,yCAAyC;AACzC,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmBzC,oBAAoB;AAEpB,SAAS,OAAO,CAAC,MAAgB;IAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,QAAmB;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,IAAI,EAAE,CAAC;aAC7C,WAAW,EAAE;aACb,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACpB,IAAI,EAAE;aACN,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,4CAA4C;AAE5C;;GAEG;AACH,SAAS,cAAc,CAAC,UAAkB,EAAE,gBAAwB,EAAE,UAAoB;IACxF,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,OAAO,GAAG,UAAU,KAAK,gBAAgB,qCAAqC,KAAK,GAAG,CAAC;AACzF,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAmB;IAC5C,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,KAAK,WAAW,CAClD,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAEhD,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,cAAe,CAAC;QACzC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAEvE,OAAO;YACL,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,WAAoB;YAC1B,OAAO,EAAE,QAAQ;YACjB,cAAc,EAAE,UAAU;YAC1B,gBAAgB,EAAE,KAAK;YACvB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAe,CAAC,UAAU,CAAC,CAAC;SAClE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iDAAiD;AAEjD,SAAS,oBAAoB,CAAC,MAAgB;IAC5C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC9B,KAAK,mBAAmB,CAAC;QACzB,KAAK,sBAAsB;YACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7B;YACE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAmB;IACrD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,KAAK,mBAAmB,CAC1D,CAAC;IAEF,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC5B,MAAM,cAAc,GAAG,CAAC,CAAC,cAAe,CAAC;QACzC,MAAM,MAAM,GAAG;YACb,EAAE,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YAC/F,IAAI,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YAC9C,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,8CAA8C,CAAC,CAAC,EAAE,iBAAiB,cAAc,CAAC,SAAS,EAAE;YAC1G,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACvD,KAAK,EAAE,CAAC;oBACN,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;oBAC9B,WAAW,EAAE,cAAc,CAAC,UAAU;oBACtC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE;oBACpE,MAAM,EAAE;wBACN,MAAM,EAAE,OAAgB;wBACxB,MAAM,EAAE,cAAc,CAAC,UAAU;qBAClC;iBACF,CAAC;SACH,CAAC;QAEF,OAAO;YACL,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,mBAA4B;YAClC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,gBAAgB,EAAE,CAAC;YACnB,UAAU,EAAE,cAAc,CAAC,UAAU;SACtC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8CAA8C;AAE9C,SAAS,sBAAsB,CAAC,QAAmB;IACjD,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,KAAK,gBAAgB,CACvD,CAAC;IAEF,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/B,EAAE,EAAE,UAAU,EAAE;QAChB,IAAI,EAAE,gBAAyB;QAC/B,OAAO,EAAE,CAAC,CAAC,cAAe,CAAC,UAAU;QACrC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,gBAAgB,EAAE,CAAC;QACnB,UAAU,EAAE,CAAC,CAAC,cAAe,CAAC,UAAU;KACzC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,uBAAuB;AAEvB;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,QAAmB;IACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC;IACnE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,OAAO;QACL,GAAG,iBAAiB,CAAC,UAAU,CAAC;QAChC,GAAG,0BAA0B,CAAC,UAAU,CAAC;QACzC,GAAG,sBAAsB,CAAC,UAAU,CAAC;KACtC,CAAC;AACJ,CAAC"}

package/dist/src/trace-analyzer/redactor.d.ts

@@ -0,0 +1,14 @@
+import type { ConversationChain } from "./chain-reconstructor.js";
+/**
+ * Redact sensitive data from a text string.
+ *
+ * Applies built-in patterns first, then custom patterns from config.
+ * Invalid custom regex patterns are silently skipped.
+ */
+export declare function redactText(text: string, customPatterns?: string[]): string;
+/**
+ * Redact all text fields in a ConversationChain.
+ * Returns a new chain with redacted payloads — does NOT mutate the original.
+ */
+export declare function redactChain(chain: ConversationChain, customPatterns?: string[]): ConversationChain;
+//# sourceMappingURL=redactor.d.ts.map

package/dist/src/trace-analyzer/redactor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.d.ts","sourceRoot":"","sources":["../../../src/trace-analyzer/redactor.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAoDlE;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,GAAE,MAAM,EAAO,GAAG,MAAM,CAiB9E;AAyDD;;;GAGG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,iBAAiB,EACxB,cAAc,GAAE,MAAM,EAAO,GAC5B,iBAAiB,CAQnB"}

package/dist/src/trace-analyzer/redactor.js

@@ -0,0 +1,137 @@
+// ============================================================
+// Trace Analyzer — Credential Redaction Pipeline
+// ============================================================
+//
+// Redacts credentials, API keys, passwords, tokens, and other
+// sensitive data from traces BEFORE they are sent to LLMs or
+// written to disk. Implements R-011, R-035, R-036.
+// ============================================================
+/**
+ * Built-in redaction patterns covering common credential formats.
+ * Recreated per call to avoid lastIndex state issues with global regexes.
+ */
+function builtinRules() {
+    return [
+        // API keys: OpenAI (sk-...), Stripe (pk_live_/pk_test_)
+        {
+            pattern: /\b(?:sk-|pk_(?:live|test)_)[A-Za-z0-9_-]{20,}/g,
+            replacement: "[REDACTED_API_KEY]",
+        },
+        // Bearer tokens
+        {
+            pattern: /Bearer\s+[A-Za-z0-9_.-]{20,}/g,
+            replacement: "Bearer [REDACTED_TOKEN]",
+        },
+        // Passwords in URLs: ://user:password@host
+        {
+            pattern: /:\/\/([^:\s]+):([^@\s]+)@/g,
+            replacement: "://$1:[REDACTED]@",
+        },
+        // Environment variable values with sensitive names
+        {
+            pattern: /((?:PASSWORD|SECRET|TOKEN|KEY|CREDENTIAL|API_KEY)\s*=\s*)\S+/gi,
+            replacement: "$1[REDACTED]",
+        },
+        // PEM key blocks (private keys, RSA keys, etc.)
+        {
+            pattern: /-----BEGIN [A-Z ]*(?:PRIVATE |RSA )?KEY-----[\s\S]*?-----END [A-Z ]*KEY-----/g,
+            replacement: "[REDACTED_PEM_BLOCK]",
+        },
+        // GitHub tokens (ghp_, ghs_)
+        {
+            pattern: /\bgh[ps]_[A-Za-z0-9]{36,}/g,
+            replacement: "[REDACTED_GH_TOKEN]",
+        },
+        // JWT tokens (three base64url segments separated by dots)
+        {
+            pattern: /\beyJ[A-Za-z0-9_-]{20,}\.eyJ[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}/g,
+            replacement: "[REDACTED_JWT]",
+        },
+    ];
+}
+/**
+ * Redact sensitive data from a text string.
+ *
+ * Applies built-in patterns first, then custom patterns from config.
+ * Invalid custom regex patterns are silently skipped.
+ */
+export function redactText(text, customPatterns = []) {
+    let result = text;
+    for (const { pattern, replacement } of builtinRules()) {
+        result = result.replace(pattern, replacement);
+    }
+    for (const patternStr of customPatterns) {
+        try {
+            const regex = new RegExp(patternStr, "g");
+            result = result.replace(regex, "[REDACTED]");
+        }
+        catch {
+            // Invalid regex — skip silently
+        }
+    }
+    return result;
+}
+/**
+ * Deep-redact an unknown value.
+ * Strings → direct redact. Objects → JSON stringify, redact, parse back.
+ * Primitives pass through unchanged.
+ */
+function redactUnknown(value, customPatterns) {
+    if (typeof value === "string")
+        return redactText(value, customPatterns);
+    if (typeof value === "object" && value !== null) {
+        const str = JSON.stringify(value);
+        const redacted = redactText(str, customPatterns);
+        try {
+            return JSON.parse(redacted);
+        }
+        catch {
+            return redacted;
+        }
+    }
+    return value;
+}
+/** Redact all text fields in a NormalizedPayload. */
+function redactPayload(payload, customPatterns) {
+    const result = { ...payload };
+    if (result.content !== undefined) {
+        result.content = redactText(result.content, customPatterns);
+    }
+    if (result.toolError !== undefined) {
+        result.toolError = redactText(result.toolError, customPatterns);
+    }
+    if (result.toolResult !== undefined) {
+        result.toolResult = redactUnknown(result.toolResult, customPatterns);
+    }
+    if (result.toolParams !== undefined) {
+        const redactedParams = {};
+        for (const [key, value] of Object.entries(result.toolParams)) {
+            redactedParams[key] = redactUnknown(value, customPatterns);
+        }
+        result.toolParams = redactedParams;
+    }
+    if (result.from !== undefined) {
+        result.from = redactText(result.from, customPatterns);
+    }
+    if (result.error !== undefined) {
+        result.error = redactText(result.error, customPatterns);
+    }
+    if (result.prompt !== undefined) {
+        result.prompt = redactText(result.prompt, customPatterns);
+    }
+    return result;
+}
+/**
+ * Redact all text fields in a ConversationChain.
+ * Returns a new chain with redacted payloads — does NOT mutate the original.
+ */
+export function redactChain(chain, customPatterns = []) {
+    return {
+        ...chain,
+        events: chain.events.map(event => ({
+            ...event,
+            payload: redactPayload(event.payload, customPatterns),
+        })),
+    };
+}
+//# sourceMappingURL=redactor.js.map

package/dist/src/trace-analyzer/redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.js","sourceRoot":"","sources":["../../../src/trace-analyzer/redactor.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,iDAAiD;AACjD,+DAA+D;AAC/D,EAAE;AACF,8DAA8D;AAC9D,6DAA6D;AAC7D,mDAAmD;AACnD,+DAA+D;AAW/D;;;GAGG;AACH,SAAS,YAAY;IACnB,OAAO;QACL,wDAAwD;QACxD;YACE,OAAO,EAAE,gDAAgD;YACzD,WAAW,EAAE,oBAAoB;SAClC;QACD,gBAAgB;QAChB;YACE,OAAO,EAAE,+BAA+B;YACxC,WAAW,EAAE,yBAAyB;SACvC;QACD,2CAA2C;QAC3C;YACE,OAAO,EAAE,4BAA4B;YACrC,WAAW,EAAE,mBAAmB;SACjC;QACD,mDAAmD;QACnD;YACE,OAAO,EAAE,gEAAgE;YACzE,WAAW,EAAE,cAAc;SAC5B;QACD,gDAAgD;QAChD;YACE,OAAO,EAAE,+EAA+E;YACxF,WAAW,EAAE,sBAAsB;SACpC;QACD,6BAA6B;QAC7B;YACE,OAAO,EAAE,4BAA4B;YACrC,WAAW,EAAE,qBAAqB;SACnC;QACD,0DAA0D;QAC1D;YACE,OAAO,EAAE,qEAAqE;YAC9E,WAAW,EAAE,gBAAgB;SAC9B;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,iBAA2B,EAAE;IACpE,IAAI,MAAM,GAAG,IAAI,CAAC;IAElB,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,YAAY,EAAE,EAAE,CAAC;QACtD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC1C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAc,EAAE,cAAwB;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qDAAqD;AACrD,SAAS,aAAa,CACpB,OAA0B,EAC1B,cAAwB;IAExB,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAE9B,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,cAAc,GAA4B,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7D,cAAc,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,CAAC,UAAU,GAAG,cAAc,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,KAAwB,EACxB,iBAA2B,EAAE;IAE7B,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjC,GAAG,KAAK;YACR,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC;SACtD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}