@vibesdotdev/security 0.0.0-stage → 1.0.0-rc.4

package/dist/implementations/errors.d.ts

@@ -0,0 +1,17 @@
+import type { ValidationErrorDetails } from '../schemas/contracts/misc.ts';
+export type { ValidationErrorDetails, ValidationErrorDetailValue } from '../schemas/contracts/misc.ts';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import type { ZodIssue } from 'zod/v4';
+/**
+ * Validation error for consistent error handling across security utilities.
+ *
+ * A `CapabilityError` with the taxonomy code `INVALID_INPUT`. The caller's own
+ * validation code (`'CSRF_ERROR'`, `'VALIDATION_ERROR'`, …) is its `reason`.
+ * Record details are the error's `details`; Zod issues are its `issues`.
+ */
+export declare class ValidationError extends CapabilityError {
+    /** The Zod issues that failed validation, when the caller passed them. */
+    readonly issues?: readonly ZodIssue[];
+    constructor(message: string, reason: string, details?: ValidationErrorDetails, options?: ErrorOptions);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/implementations/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/implementations/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,YAAY,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEvC;;;;;;GAMG;AACH,qBAAa,eAAgB,SAAQ,eAAe;IACnD,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;gBAE1B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,YAAY;CASrG"}

package/dist/implementations/errors.js

@@ -0,0 +1,23 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+/**
+ * Validation error for consistent error handling across security utilities.
+ *
+ * A `CapabilityError` with the taxonomy code `INVALID_INPUT`. The caller's own
+ * validation code (`'CSRF_ERROR'`, `'VALIDATION_ERROR'`, …) is its `reason`.
+ * Record details are the error's `details`; Zod issues are its `issues`.
+ */
+export class ValidationError extends CapabilityError {
+    /** The Zod issues that failed validation, when the caller passed them. */
+    issues;
+    constructor(message, reason, details, options) {
+        super(message, 'INVALID_INPUT', {
+            reason,
+            details: Array.isArray(details) ? undefined : details,
+            cause: options?.cause
+        });
+        this.name = 'ValidationError';
+        if (Array.isArray(details))
+            this.issues = details;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/implementations/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/implementations/errors.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD;;;;;;GAMG;AACH,MAAM,OAAO,eAAgB,SAAQ,eAAe;IACnD,0EAA0E;IACjE,MAAM,CAAuB;IAEtC,YAAY,OAAe,EAAE,MAAc,EAAE,OAAgC,EAAE,OAAsB;QACpG,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE;YAC/B,MAAM;YACN,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YACrD,KAAK,EAAE,OAAO,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;IACnD,CAAC;CACD"}

package/dist/implementations/keys.d.ts

@@ -0,0 +1,24 @@
+export type { EncryptionKeyRuntime, KeyFileSystem } from '../schemas/encryption.ts';
+import { type EncryptionKeyRuntime, type KeyFileSystem } from '../schemas/encryption.ts';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+export declare const SECRET_ENCRYPTION_KEY_CREDENTIAL: {
+    readonly source: "secret";
+    readonly key: "SECRET_ENCRYPTION_KEY";
+};
+export declare function readOrCreateKeyFile(configDir: string, fs?: KeyFileSystem): string;
+export declare function boundEncryptionKeyHex(runtime: Pick<RuntimeRef, 'resolveCredential'>): Promise<string | null>;
+/**
+ * The runtime's encryption key: the `SECRET_ENCRYPTION_KEY` credential bound in
+ * the Secrets owner (`runtime.resolveCredential`), else, on a non-cloud host,
+ * the key persisted under the config root. A cloud host without a bound key is
+ * refused. The host environment is never consulted.
+ */
+export declare function resolveEncryptionKeyHex(runtime: EncryptionKeyRuntime): Promise<string>;
+/**
+ * The key co-located with an encrypted store under `baseDir`. This is the
+ * store's own root of trust, so it cannot resolve through the Secrets owner it
+ * unlocks: the host-bound `SECRET_ENCRYPTION_KEY` is the one declared host read,
+ * else the key persisted under `{baseDir}/config`.
+ */
+export declare function resolveEncryptionKeyHexForBase(runtime: Pick<RuntimeRef, 'getEnv'>, baseDir: string): string;
+//# sourceMappingURL=keys.d.ts.map

package/dist/implementations/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/implementations/keys.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACpF,OAAO,EAA2C,KAAK,oBAAoB,EAAE,KAAK,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAClI,OAAO,EAA4D,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAOhH,eAAO,MAAM,gCAAgC;;;CAGL,CAAC;AAsDzC,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,GAAE,aAAgC,GAAG,MAAM,CAenG;AAiBD,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,GAC5C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKxB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAK5F;AAED;;;;;GAKG;AAEH,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EACnC,OAAO,EAAE,MAAM,GACb,MAAM,CAIR"}

package/dist/implementations/keys.js

@@ -0,0 +1,114 @@
+import { KeyFileSystemSchema, parseEncryptionKey } from "../schemas/encryption.js";
+import { CapabilityError, CaughtFailureSchema } from '@vibesdotdev/kernel';
+import { getPathRoots } from '@vibesdotdev/paths';
+import { z } from 'zod/v4';
+const ENCRYPTION_KEY_LENGTH = 32;
+export const SECRET_ENCRYPTION_KEY_CREDENTIAL = {
+    source: 'secret',
+    key: 'SECRET_ENCRYPTION_KEY'
+};
+const UNBOUND_CREDENTIAL_REASONS = new Set(['credential-not-set', 'no-store']);
+function generateKeyHex() {
+    const bytes = new Uint8Array(ENCRYPTION_KEY_LENGTH);
+    crypto.getRandomValues(bytes);
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+function hostFileSystem() {
+    const fsModule = globalThis.process?.getBuiltinModule?.('node:fs');
+    if (!fsModule) {
+        throw new CapabilityError('This host has no filesystem for a persisted encryption key; configure SECRET_ENCRYPTION_KEY.', 'UNAVAILABLE', { reason: 'encryption-key-unconfigured', retryable: false });
+    }
+    return fsModule;
+}
+const ErrnoSchema = z.object({ code: z.string() });
+function hasErrnoCode(failure) {
+    return failure instanceof Error && ErrnoSchema.safeParse(failure).success;
+}
+function errnoCode(failure) {
+    return hasErrnoCode(failure) ? failure.code : null;
+}
+function keyFileError(keyPath, action, cause) {
+    return new CapabilityError(`The encryption key file ${keyPath} could not be ${action}.`, 'UNAVAILABLE', {
+        reason: 'encryption-key-unreadable',
+        retryable: false,
+        details: { path: keyPath, code: errnoCode(cause) },
+        cause
+    });
+}
+function readKeyFile(fs, keyPath) {
+    try {
+        return parseEncryptionKey(String(fs.readFileSync(keyPath, 'utf-8')).trim());
+    }
+    catch (error) {
+        if (error instanceof CapabilityError)
+            throw error;
+        const failure = CaughtFailureSchema.parse(error);
+        if (hasErrnoCode(failure) && failure.code === 'ENOENT')
+            return null;
+        throw keyFileError(keyPath, 'read', failure);
+    }
+}
+export function readOrCreateKeyFile(configDir, fs = hostFileSystem()) {
+    fs = KeyFileSystemSchema.parse(fs);
+    const keyPath = `${configDir.replace(/[\\/]+$/, '')}/encryption.key`;
+    const existing = readKeyFile(fs, keyPath);
+    if (existing)
+        return existing;
+    const generated = generateKeyHex();
+    try {
+        fs.mkdirSync(configDir, { recursive: true });
+        fs.writeFileSync(keyPath, generated, { mode: 0o600, flag: 'wx' });
+        return generated;
+    }
+    catch (error) {
+        const failure = CaughtFailureSchema.parse(error);
+        if (hasErrnoCode(failure) && failure.code === 'EEXIST')
+            return readWinnerKey(fs, keyPath, failure);
+        throw keyFileError(keyPath, 'written', failure);
+    }
+}
+function readWinnerKey(fs, keyPath, lostRace) {
+    const winner = readKeyFile(fs, keyPath);
+    if (!winner)
+        throw keyFileError(keyPath, 'read after a concurrent create', lostRace);
+    return winner;
+}
+function cloudKeyUnconfigured() {
+    return new CapabilityError('SECRET_ENCRYPTION_KEY must be bound on a cloud host. ' +
+        `Provide a ${ENCRYPTION_KEY_LENGTH * 2}-character hex string (${ENCRYPTION_KEY_LENGTH} bytes).`, 'UNAVAILABLE', { reason: 'encryption-key-unconfigured', retryable: false });
+}
+export async function boundEncryptionKeyHex(runtime) {
+    const resolved = await runtime.resolveCredential(SECRET_ENCRYPTION_KEY_CREDENTIAL);
+    if (resolved.ok)
+        return resolved.value;
+    if (UNBOUND_CREDENTIAL_REASONS.has(resolved.error.reason))
+        return null;
+    throw resolved.error;
+}
+/**
+ * The runtime's encryption key: the `SECRET_ENCRYPTION_KEY` credential bound in
+ * the Secrets owner (`runtime.resolveCredential`), else, on a non-cloud host,
+ * the key persisted under the config root. A cloud host without a bound key is
+ * refused. The host environment is never consulted.
+ */
+export async function resolveEncryptionKeyHex(runtime) {
+    const bound = await boundEncryptionKeyHex(runtime);
+    if (bound)
+        return parseEncryptionKey(bound);
+    if (runtime.scope.hardware === 'cloud')
+        throw cloudKeyUnconfigured();
+    return readOrCreateKeyFile(getPathRoots(runtime).configDir);
+}
+/**
+ * The key co-located with an encrypted store under `baseDir`. This is the
+ * store's own root of trust, so it cannot resolve through the Secrets owner it
+ * unlocks: the host-bound `SECRET_ENCRYPTION_KEY` is the one declared host read,
+ * else the key persisted under `{baseDir}/config`.
+ */
+export function resolveEncryptionKeyHexForBase(runtime, baseDir) {
+    const configured = runtime.getEnv('SECRET_ENCRYPTION_KEY');
+    if (configured)
+        return parseEncryptionKey(configured);
+    return readOrCreateKeyFile(`${baseDir.replace(/[\\/]+$/, '')}/config`);
+}
+//# sourceMappingURL=keys.js.map

package/dist/implementations/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/implementations/keys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAiD,MAAM,0BAA0B,CAAC;AAClI,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAuC,MAAM,qBAAqB,CAAC;AAEhH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC/C,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,uBAAuB;CACW,CAAC;AAEzC,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC,CAAC;AAG/E,SAAS,cAAc;IACtB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC;IACpD,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAGD,SAAS,cAAc;IACtB,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CACxB,8FAA8F,EAC9F,aAAa,EACb,EAAE,MAAM,EAAE,6BAA6B,EAAE,SAAS,EAAE,KAAK,EAAE,CAC3D,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnD,SAAS,YAAY,CAAC,OAAsB;IAC3C,OAAO,OAAO,YAAY,KAAK,IAAI,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,OAAsB;IACxC,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,MAAc,EAAE,KAAoB;IAC1E,OAAO,IAAI,eAAe,CAAC,2BAA2B,OAAO,iBAAiB,MAAM,GAAG,EAAE,aAAa,EAAE;QACvG,MAAM,EAAE,2BAA2B;QACnC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE;QAClD,KAAK;KACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,EAAiB,EAAE,OAAe;IACtD,IAAI,CAAC;QACJ,OAAO,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,eAAe;YAAE,MAAM,KAAK,CAAC;QAClD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;AACF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,KAAoB,cAAc,EAAE;IAC1F,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC;IACrE,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;IACnC,IAAI,CAAC;QACJ,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,SAAS,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACnG,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,EAAiB,EAAE,OAAe,EAAE,QAAuB;IACjF,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,MAAM,YAAY,CAAC,OAAO,EAAE,gCAAgC,EAAE,QAAQ,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB;IAC5B,OAAO,IAAI,eAAe,CACzB,uDAAuD;QACtD,aAAa,qBAAqB,GAAG,CAAC,0BAA0B,qBAAqB,UAAU,EAChG,aAAa,EACb,EAAE,MAAM,EAAE,6BAA6B,EAAE,SAAS,EAAE,KAAK,EAAE,CAC3D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,OAA8C;IAE9C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;IACnF,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IACvC,IAAI,0BAA0B,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,QAAQ,CAAC,KAAK,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAA6B;IAC1E,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,KAAK;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,oBAAoB,EAAE,CAAC;IACrE,OAAO,mBAAmB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AAEH,MAAM,UAAU,8BAA8B,CAC7C,OAAmC,EACnC,OAAe;IAEf,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAC3D,IAAI,UAAU;QAAE,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACtD,OAAO,mBAAmB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;AACxE,CAAC"}

package/dist/implementations/redaction-admission.d.ts

@@ -0,0 +1,24 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { type RedactionRule, type RedactionRuleInput } from '../schemas/RedactionRule.ts';
+import { type SecurityRedactorResult } from '../schemas/redactor.ts';
+/** The rules a built-in redactor applies when the caller supplies none. */
+export declare const DEFAULT_REDACTION_RULES: RedactionRule[];
+/**
+ * Built-in admission shared by every built-in redactor: content and rule-count
+ * limits, then each applied rule's regex source compiles. Value-free refusals.
+ */
+export declare function admitBuiltinRedaction(content: string, rules?: RedactionRuleInput[]): {
+    content: string;
+    rules: {
+        id: string;
+        name: string;
+        pattern: string;
+        replacement: string;
+        target: "metadata" | "content" | "header";
+        enabled: boolean;
+    }[];
+};
+export declare function redactionBudgetExceeded(): CapabilityError;
+/** Admit span output (in-process value or the child's parsed stdout); a budget outcome refuses. */
+export declare function admitRedactionOutput(output: unknown): SecurityRedactorResult;
+//# sourceMappingURL=redaction-admission.d.ts.map

package/dist/implementations/redaction-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction-admission.d.ts","sourceRoot":"","sources":["../../src/implementations/redaction-admission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAyC,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAE1F,OAAO,EAA6D,KAAK,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhI,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,EAAE,aAAa,EAIlD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,kBAAkB,EAA4B;;;;;;;;;;EAe3G;AAED,wBAAgB,uBAAuB,IAAI,eAAe,CAIzD;AAKD,mGAAmG;AACnG,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,sBAAsB,CAI5E"}

package/dist/implementations/redaction-admission.js

@@ -0,0 +1,44 @@
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import {} from "../schemas/RedactionRule.js";
+import * as z from 'zod/v4';
+import { BuiltinRedactionInputSchema, SecurityRedactorResultSchema } from "../schemas/redactor.js";
+/** The rules a built-in redactor applies when the caller supplies none. */
+export const DEFAULT_REDACTION_RULES = [
+    { id: 'email', name: 'Email', pattern: '(?<!href=")[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}', replacement: '[EMAIL REDACTED]', enabled: true, target: 'content' },
+    { id: 'ssn', name: 'SSN', pattern: '\\b\\d{3}[-.\\s]?\\d{2}[-.\\s]?\\d{4}\\b', replacement: '[SSN REDACTED]', enabled: true, target: 'content' },
+    { id: 'key', name: 'API Key', pattern: '(?<![a-zA-Z0-9])(sk-|pk_)[a-zA-Z0-9]{20,}', replacement: '[API KEY REDACTED]', enabled: true, target: 'content' }
+];
+/**
+ * Built-in admission shared by every built-in redactor: content and rule-count
+ * limits, then each applied rule's regex source compiles. Value-free refusals.
+ */
+export function admitBuiltinRedaction(content, rules = DEFAULT_REDACTION_RULES) {
+    const input = BuiltinRedactionInputSchema.parse({ content, rules });
+    for (const rule of input.rules) {
+        if (!rule.enabled || rule.target !== 'content')
+            continue;
+        try {
+            new RegExp(rule.pattern, 'g');
+        }
+        catch (cause) {
+            throw new CapabilityError('The redaction pattern is invalid.', 'INVALID_INPUT', {
+                reason: 'redaction-pattern-invalid', retryable: false, details: { ruleId: rule.id, failure: valueFreeFailure(CaughtFailureSchema.parse(cause)) }
+            });
+        }
+    }
+    return input;
+}
+export function redactionBudgetExceeded() {
+    return new CapabilityError('Redaction exceeded its execution budget.', 'UNAVAILABLE', {
+        reason: 'redaction-budget-exceeded', retryable: false
+    });
+}
+/** `redactSpans` output from either path: a result, or the value-free budget outcome. */
+const RedactionBudgetOutcomeSchema = z.object({ budgetExceeded: z.literal(true) });
+/** Admit span output (in-process value or the child's parsed stdout); a budget outcome refuses. */
+export function admitRedactionOutput(output) {
+    if (RedactionBudgetOutcomeSchema.safeParse(output).success)
+        throw redactionBudgetExceeded();
+    return SecurityRedactorResultSchema.parse(output);
+}
+//# sourceMappingURL=redaction-admission.js.map

package/dist/implementations/redaction-admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction-admission.js","sourceRoot":"","sources":["../../src/implementations/redaction-admission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAA+C,MAAM,6BAA6B,CAAC;AAC1F,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAA+B,MAAM,wBAAwB,CAAC;AAEhI,2EAA2E;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAoB;IACpD,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4DAA4D,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE;IACxK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE;IAChJ,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,2CAA2C,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE;CAC5J,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,QAA8B,uBAAuB;IACxG,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAC1C,SAAS;QACb,IAAI,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CAAC,mCAAmC,EAAE,eAAe,EAAE;gBAC5E,MAAM,EAAE,2BAA2B,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE;aACnJ,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB;IACnC,OAAO,IAAI,eAAe,CAAC,0CAA0C,EAAE,aAAa,EAAE;QAClF,MAAM,EAAE,2BAA2B,EAAE,SAAS,EAAE,KAAK;KACxD,CAAC,CAAC;AACP,CAAC;AAED,yFAAyF;AACzF,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAEnF,mGAAmG;AACnG,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAChD,IAAI,4BAA4B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO;QACtD,MAAM,uBAAuB,EAAE,CAAC;IACpC,OAAO,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACtD,CAAC"}

package/dist/implementations/redaction.d.ts

@@ -0,0 +1,32 @@
+import type { RedactionRule } from '../schemas/RedactionRule.ts';
+/**
+ * The most candidate spans one call may collect across every rule. Content is
+ * capped at 262,144 code units and rules at 64, so without this bound a
+ * zero-width rule set could hold millions of spans. Each `exec` that matches
+ * adds one span, so this also bounds the number of regex steps.
+ */
+export declare const MAX_REDACTION_CANDIDATES = 65536;
+/**
+ * Pure span redaction shared by every built-in redactor. Self-contained: the
+ * subprocess implementation ships this function's source into its child, so it
+ * references nothing outside its own body. All coordinates are original UTF-16
+ * offsets. Returns `{ budgetExceeded: true }` instead of a result once
+ * `maxCandidates` spans would be exceeded.
+ */
+export declare function redactSpans(content: string, rules: RedactionRule[], maxCandidates: number): {
+    budgetExceeded: true;
+    redacted?: undefined;
+    matches?: undefined;
+    redactorAvailable?: undefined;
+} | {
+    redacted: string;
+    matches: {
+        pattern: string;
+        index: number;
+        length: number;
+        replacement: string;
+    }[];
+    redactorAvailable: boolean;
+    budgetExceeded?: undefined;
+};
+//# sourceMappingURL=redaction.d.ts.map

package/dist/implementations/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/implementations/redaction.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,aAAa,EAAE,MAAM;;;;;;;;;;;;;;;EAiCzF"}

package/dist/implementations/redaction.js

@@ -0,0 +1,47 @@
+/**
+ * The most candidate spans one call may collect across every rule. Content is
+ * capped at 262,144 code units and rules at 64, so without this bound a
+ * zero-width rule set could hold millions of spans. Each `exec` that matches
+ * adds one span, so this also bounds the number of regex steps.
+ */
+export const MAX_REDACTION_CANDIDATES = 65_536;
+/**
+ * Pure span redaction shared by every built-in redactor. Self-contained: the
+ * subprocess implementation ships this function's source into its child, so it
+ * references nothing outside its own body. All coordinates are original UTF-16
+ * offsets. Returns `{ budgetExceeded: true }` instead of a result once
+ * `maxCandidates` spans would be exceeded.
+ */
+export function redactSpans(content, rules, maxCandidates) {
+    const candidates = [];
+    for (const [order, rule] of rules.entries()) {
+        if (!rule.enabled || rule.target !== 'content')
+            continue;
+        const pattern = new RegExp(rule.pattern, 'g');
+        let match;
+        while ((match = pattern.exec(content)) !== null) {
+            if (candidates.length >= maxCandidates)
+                return { budgetExceeded: true };
+            candidates.push({ pattern: rule.pattern, index: match.index, length: match[0].length, replacement: rule.replacement, order });
+            if (match[0].length === 0)
+                pattern.lastIndex = match.index + 1;
+        }
+    }
+    // Earlier start wins; caller rule order breaks ties. An accepted span excludes overlapping spans.
+    candidates.sort((a, b) => a.index - b.index || a.order - b.order);
+    const matches = [];
+    let cursor = 0;
+    let redacted = '';
+    let lastStart = -1;
+    for (const { order: _order, ...match } of candidates) {
+        if (match.index < cursor || match.index === lastStart)
+            continue;
+        redacted += content.slice(cursor, match.index) + match.replacement;
+        cursor = match.index + match.length;
+        lastStart = match.index;
+        matches.push(match);
+    }
+    redacted += content.slice(cursor);
+    return { redacted, matches, redactorAvailable: true };
+}
+//# sourceMappingURL=redaction.js.map

package/dist/implementations/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/implementations/redaction.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,KAAsB,EAAE,aAAqB;IACtF,MAAM,UAAU,GAEX,EAAE,CAAC;IACR,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAC1C,SAAS;QACb,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,IAAI,UAAU,CAAC,MAAM,IAAI,aAAa;gBAClC,OAAO,EAAE,cAAc,EAAE,IAAa,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9H,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;gBACrB,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;IACD,kGAAkG;IAClG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IACnB,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,IAAI,UAAU,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YACjD,SAAS;QACb,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;QACnE,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QACpC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;AAC1D,CAAC"}

package/dist/implementations/redactor.inprocess.impl.d.ts

@@ -0,0 +1,30 @@
+import type { KindContext } from '@vibesdotdev/kernel';
+import { type RedactionRuleInput } from '../schemas/RedactionRule.ts';
+import type { SecurityRedactorDescriptor } from '../schemas/redactor.ts';
+/**
+ * Built-in redactor for every hardware that cannot spawn a supervised child
+ * (Cloudflare Workers, browsers). Same admission, same span semantics and the
+ * same candidate budget as the subprocess redactor, run in the caller's isolate.
+ *
+ * Bounds: content 262,144 code units, 64 rules, 4,096-unit patterns, and at
+ * most MAX_REDACTION_CANDIDATES spans (which also bounds regex steps). There is
+ * no wall-clock deadline: workerd freezes `Date.now()`/`performance.now()`
+ * during synchronous compute, so a clock check could never fire, and one
+ * `RegExp.exec` cannot be interrupted in-process. The host's CPU limit is the
+ * backstop for a single catastrophically backtracking caller pattern.
+ */
+export default class InProcessRedactor {
+    readonly descriptor: SecurityRedactorDescriptor;
+    constructor(descriptor: SecurityRedactorDescriptor, _context: KindContext);
+    redact(content: string, rules?: RedactionRuleInput[]): Promise<{
+        redacted: string;
+        matches: {
+            pattern: string;
+            index: number;
+            length: number;
+            replacement: string;
+        }[];
+        redactorAvailable: boolean;
+    }>;
+}
+//# sourceMappingURL=redactor.inprocess.impl.d.ts.map

package/dist/implementations/redactor.inprocess.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.inprocess.impl.d.ts","sourceRoot":"","sources":["../../src/implementations/redactor.inprocess.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAIzE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,OAAO,OAAO,iBAAiB;IACtB,QAAQ,CAAC,UAAU,EAAE,0BAA0B;gBAAtC,UAAU,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW;IAC5E,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,kBAAkB,EAAE;;;;;;;;;;CAI7D"}

package/dist/implementations/redactor.inprocess.impl.js

@@ -0,0 +1,26 @@
+import {} from "../schemas/RedactionRule.js";
+import { MAX_REDACTION_CANDIDATES, redactSpans } from "./redaction.js";
+import { admitBuiltinRedaction, admitRedactionOutput } from "./redaction-admission.js";
+/**
+ * Built-in redactor for every hardware that cannot spawn a supervised child
+ * (Cloudflare Workers, browsers). Same admission, same span semantics and the
+ * same candidate budget as the subprocess redactor, run in the caller's isolate.
+ *
+ * Bounds: content 262,144 code units, 64 rules, 4,096-unit patterns, and at
+ * most MAX_REDACTION_CANDIDATES spans (which also bounds regex steps). There is
+ * no wall-clock deadline: workerd freezes `Date.now()`/`performance.now()`
+ * during synchronous compute, so a clock check could never fire, and one
+ * `RegExp.exec` cannot be interrupted in-process. The host's CPU limit is the
+ * backstop for a single catastrophically backtracking caller pattern.
+ */
+export default class InProcessRedactor {
+    descriptor;
+    constructor(descriptor, _context) {
+        this.descriptor = descriptor;
+    }
+    async redact(content, rules) {
+        const input = admitBuiltinRedaction(content, rules);
+        return admitRedactionOutput(redactSpans(input.content, input.rules, MAX_REDACTION_CANDIDATES));
+    }
+}
+//# sourceMappingURL=redactor.inprocess.impl.js.map

package/dist/implementations/redactor.inprocess.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.inprocess.impl.js","sourceRoot":"","sources":["../../src/implementations/redactor.inprocess.impl.ts"],"names":[],"mappings":"AACA,OAAO,EAA2B,MAAM,6BAA6B,CAAC;AAEtE,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEvF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,OAAO,OAAO,iBAAiB;IACb;IAArB,YAAqB,UAAsC,EAAE,QAAqB;QAA7D,eAAU,GAAV,UAAU,CAA4B;IAA2B,CAAC;IACvF,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,KAA4B;QACtD,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpD,OAAO,oBAAoB,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACnG,CAAC;CACJ"}

package/dist/implementations/redactor.subprocess.impl.d.ts

@@ -0,0 +1,25 @@
+import { type KindContext } from '@vibesdotdev/kernel';
+import { type RedactionRuleInput } from '../schemas/RedactionRule.ts';
+import type { SecurityRedactorDescriptor } from '../schemas/redactor.ts';
+/**
+ * Consumer-hardware built-in redactor. Matching runs in the execution owner's
+ * supervised Node child, so a catastrophically backtracking caller pattern is
+ * preempted at a one-second deadline instead of blocking the host's event loop.
+ * This preemption is what the in-process redactor cannot provide.
+ */
+export default class SubprocessRedactor {
+    readonly descriptor: SecurityRedactorDescriptor;
+    private readonly context;
+    constructor(descriptor: SecurityRedactorDescriptor, context: KindContext);
+    redact(content: string, rules?: RedactionRuleInput[]): Promise<{
+        redacted: string;
+        matches: {
+            pattern: string;
+            index: number;
+            length: number;
+            replacement: string;
+        }[];
+        redactorAvailable: boolean;
+    }>;
+}
+//# sourceMappingURL=redactor.subprocess.impl.d.ts.map

package/dist/implementations/redactor.subprocess.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.subprocess.impl.d.ts","sourceRoot":"","sources":["../../src/implementations/redactor.subprocess.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAIzE;;;;;GAKG;AACH,MAAM,CAAC,OAAO,OAAO,kBAAkB;IACvB,QAAQ,CAAC,UAAU,EAAE,0BAA0B;IAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAhE,UAAU,EAAE,0BAA0B,EAAmB,OAAO,EAAE,WAAW;IAC5F,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,kBAAkB,EAAE;;;;;;;;;;CAsB7D"}

package/dist/implementations/redactor.subprocess.impl.js

@@ -0,0 +1,42 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { runTimedCapture, whichCommand } from '@vibesdotdev/kernel/execution';
+import {} from "../schemas/RedactionRule.js";
+import { MAX_REDACTION_CANDIDATES, redactSpans } from "./redaction.js";
+import { admitBuiltinRedaction, admitRedactionOutput, redactionBudgetExceeded } from "./redaction-admission.js";
+/**
+ * Consumer-hardware built-in redactor. Matching runs in the execution owner's
+ * supervised Node child, so a catastrophically backtracking caller pattern is
+ * preempted at a one-second deadline instead of blocking the host's event loop.
+ * This preemption is what the in-process redactor cannot provide.
+ */
+export default class SubprocessRedactor {
+    descriptor;
+    context;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+    }
+    async redact(content, rules) {
+        const input = admitBuiltinRedaction(content, rules);
+        const command = await whichCommand(this.context.runtime, 'node');
+        if (!command)
+            throw new CapabilityError('A JavaScript execution host is required for bounded redaction.', 'UNAVAILABLE', {
+                reason: 'redaction-execution-unavailable', retryable: false
+            });
+        // Input stays on stdin, never argv. Execution owns the child, deadline and process-tree termination.
+        const program = `let input=''; for await (const chunk of process.stdin) input+=chunk;
+			const {content,rules}=JSON.parse(input);
+			process.stdout.write(JSON.stringify((${redactSpans.toString()})(content,rules,${MAX_REDACTION_CANDIDATES})));`;
+        const result = await runTimedCapture(this.context.runtime, command, ['--input-type=module', '-e', program], {
+            envMode: 'replace', env: {}, stdin: JSON.stringify(input), timeoutMs: 1000
+        });
+        if (result.timedOut)
+            throw redactionBudgetExceeded();
+        if (result.exitCode !== 0)
+            throw new CapabilityError('The redaction execution failed.', 'UNAVAILABLE', {
+                reason: 'redaction-execution-failed', retryable: false
+            });
+        return admitRedactionOutput(JSON.parse(result.stdout));
+    }
+}
+//# sourceMappingURL=redactor.subprocess.impl.js.map

package/dist/implementations/redactor.subprocess.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.subprocess.impl.js","sourceRoot":"","sources":["../../src/implementations/redactor.subprocess.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAoB,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAA2B,MAAM,6BAA6B,CAAC;AAEtE,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAEhH;;;;;GAKG;AACH,MAAM,CAAC,OAAO,OAAO,kBAAkB;IACd;IAAyD;IAA9E,YAAqB,UAAsC,EAAmB,OAAoB;QAA7E,eAAU,GAAV,UAAU,CAA4B;QAAmB,YAAO,GAAP,OAAO,CAAa;IAAI,CAAC;IACvG,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,KAA4B;QACtD,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO;YACR,MAAM,IAAI,eAAe,CAAC,gEAAgE,EAAE,aAAa,EAAE;gBACvG,MAAM,EAAE,iCAAiC,EAAE,SAAS,EAAE,KAAK;aAC9D,CAAC,CAAC;QACP,qGAAqG;QACrG,MAAM,OAAO,GAAG;;0CAEkB,WAAW,CAAC,QAAQ,EAAE,mBAAmB,wBAAwB,MAAM,CAAC;QAC1G,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;YACxG,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI;SAC7E,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ;YACf,MAAM,uBAAuB,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YACrB,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,aAAa,EAAE;gBACxE,MAAM,EAAE,4BAA4B,EAAE,SAAS,EAAE,KAAK;aACzD,CAAC,CAAC;QACP,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;CACJ"}

package/dist/implementations/scanner.impl.d.ts

@@ -0,0 +1,7 @@
+import type { SecurityScannerDescriptor, SecurityScannerOptionsInput, SecurityScannerResult } from '../schemas/scanner.ts';
+export default class BuiltinScanner {
+    readonly descriptor: SecurityScannerDescriptor;
+    constructor(descriptor: SecurityScannerDescriptor);
+    scan(content: string, options?: SecurityScannerOptionsInput): Promise<SecurityScannerResult>;
+}
+//# sourceMappingURL=scanner.impl.d.ts.map

package/dist/implementations/scanner.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.impl.d.ts","sourceRoot":"","sources":["../../src/implementations/scanner.impl.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAmL3H,MAAM,CAAC,OAAO,OAAO,cAAc;IACtB,QAAQ,CAAC,UAAU,EAAE,yBAAyB;gBAArC,UAAU,EAAE,yBAAyB;IACpD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,2BAA2B,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAOlG"}