@xoxoai/checkmate 0.4.28 → 0.5.0

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,IAAI,YAAY,EAAE,QAAQ,IAAI,eAAe,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AASlH,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAA;AAI1D,MAAM,UAAU,GAAG,CAClB,OAAgB,EAChB,OAA0B;IAE1B,OAAO,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAgB,EAAE,OAA0C;IACpF,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAA0C;IAClE,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAA;AACpC,CAAC"}

package/dist/logging/invocation-logger.d.ts

@@ -0,0 +1,4 @@
+import { DiagnosticSanitizer } from '../redaction/diagnostic-sanitizer.js';
+import type { RuntimeLogger } from './types.js';
+export declare function createInvocationLogger(sink: RuntimeLogger, sanitizer: DiagnosticSanitizer): RuntimeLogger;
+//# sourceMappingURL=invocation-logger.d.ts.map

package/dist/logging/invocation-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation-logger.d.ts","sourceRoot":"","sources":["../../src/logging/invocation-logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAA;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/C,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,mBAAmB,GAAG,aAAa,CAOzG"}

package/dist/logging/invocation-logger.js

@@ -0,0 +1,25 @@
+export function createInvocationLogger(sink, sanitizer) {
+    return {
+        debug: (message, ...details) => sink.debug(sanitizeLog(message, details, sanitizer)),
+        info: (message, ...details) => sink.info(sanitizeLog(message, details, sanitizer)),
+        warn: (message, ...details) => sink.warn(sanitizeLog(message, details, sanitizer)),
+        error: (message, ...details) => sink.error(sanitizeLog(message, details, sanitizer)),
+    };
+}
+function sanitizeLog(message, details, sanitizer) {
+    const suffix = details.length === 0 ? '' : ` ${details.map((detail) => diagnosticDetail(detail, sanitizer)).join(' ')}`;
+    return sanitizer.text(`${message}${suffix}`);
+}
+function diagnosticDetail(value, sanitizer) {
+    if (value instanceof Error)
+        return `${value.name}: ${sanitizer.error(value)}`;
+    if (typeof value === 'string')
+        return value;
+    try {
+        return JSON.stringify(value) ?? String(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+//# sourceMappingURL=invocation-logger.js.map

package/dist/logging/invocation-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation-logger.js","sourceRoot":"","sources":["../../src/logging/invocation-logger.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,sBAAsB,CAAC,IAAmB,EAAE,SAA8B;IACzF,OAAO;QACN,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACpF,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAClF,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAClF,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;KACpF,CAAA;AACF,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,OAA2B,EAAE,SAA8B;IAChG,MAAM,MAAM,GACX,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IACzG,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,SAA8B;IACvE,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAA;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACF,CAAC"}

package/dist/logging/types.d.ts

@@ -0,0 +1,8 @@
+export type RuntimeLogger = Readonly<{
+    debug(message: string, ...details: unknown[]): unknown;
+    info(message: string, ...details: unknown[]): unknown;
+    warn(message: string, ...details: unknown[]): unknown;
+    error(message: string, ...details: unknown[]): unknown;
+}>;
+export declare const silentLogger: RuntimeLogger;
+//# sourceMappingURL=types.d.ts.map

package/dist/logging/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/logging/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACpC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IACtD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IACrD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IACrD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;CACtD,CAAC,CAAA;AAEF,eAAO,MAAM,YAAY,EAAE,aAK1B,CAAA"}

package/dist/logging/types.js

@@ -0,0 +1,7 @@
+export const silentLogger = {
+    debug: () => undefined,
+    info: () => undefined,
+    warn: () => undefined,
+    error: () => undefined,
+};
+//# sourceMappingURL=types.js.map

package/dist/logging/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/logging/types.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,YAAY,GAAkB;IAC1C,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;IACtB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;CACtB,CAAA"}

package/dist/redaction/diagnostic-sanitizer.d.ts

@@ -0,0 +1,7 @@
+export declare class DiagnosticSanitizer {
+    private readonly redactor;
+    constructor(exactSecrets: Iterable<string>);
+    text(value: string): string;
+    error(error: unknown): string;
+}
+//# sourceMappingURL=diagnostic-sanitizer.d.ts.map

package/dist/redaction/diagnostic-sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostic-sanitizer.d.ts","sourceRoot":"","sources":["../../src/redaction/diagnostic-sanitizer.ts"],"names":[],"mappings":"AAIA,qBAAa,mBAAmB;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;gBAEvB,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC;IAI1C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAI3B,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;CAe7B"}

package/dist/redaction/diagnostic-sanitizer.js

@@ -0,0 +1,42 @@
+import { Redactor } from './redactor.js';
+const MAX_CAUSE_DEPTH = 16;
+export class DiagnosticSanitizer {
+    redactor;
+    constructor(exactSecrets) {
+        this.redactor = new Redactor({ mode: 'off', exactSecrets });
+    }
+    text(value) {
+        return this.redactor.redactDiagnosticText(value);
+    }
+    error(error) {
+        const messages = [];
+        const seen = new Set();
+        let current = error;
+        for (let depth = 0; current !== undefined && depth < MAX_CAUSE_DEPTH; depth++) {
+            if (seen.has(current)) {
+                messages.push('[circular cause]');
+                break;
+            }
+            seen.add(current);
+            messages.push(this.text(errorMessage(current)));
+            current = errorCause(current);
+        }
+        return messages.join('\ncaused by: ');
+    }
+}
+function errorMessage(error) {
+    if (error instanceof Error)
+        return error.message;
+    if (typeof error === 'string')
+        return error;
+    try {
+        return JSON.stringify(error) ?? String(error);
+    }
+    catch {
+        return String(error);
+    }
+}
+function errorCause(error) {
+    return error && typeof error === 'object' && 'cause' in error ? error.cause : undefined;
+}
+//# sourceMappingURL=diagnostic-sanitizer.js.map

package/dist/redaction/diagnostic-sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostic-sanitizer.js","sourceRoot":"","sources":["../../src/redaction/diagnostic-sanitizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,MAAM,eAAe,GAAG,EAAE,CAAA;AAE1B,MAAM,OAAO,mBAAmB;IACd,QAAQ,CAAU;IAEnC,YAAY,YAA8B;QACzC,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;IAC5D,CAAC;IAED,IAAI,CAAC,KAAa;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,KAAc;QACnB,MAAM,QAAQ,GAAa,EAAE,CAAA;QAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAA;QAC/B,IAAI,OAAO,GAAY,KAAK,CAAA;QAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC;YAC/E,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;gBACjC,MAAK;YACN,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACjB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YAC/C,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACtC,CAAC;CACD;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAA;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IACjC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,CAAE,KAA6B,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACjH,CAAC"}

package/dist/redaction/redactor.d.ts

@@ -0,0 +1,40 @@
+import type { Diagnostic, EvidenceReference, ExecutedStepResult, ExecutionResultV1, JsonValue, RunRequestV1 } from '../contracts/types.js';
+export declare const REDACTED_VALUE = "[secret omitted]";
+export type RedactorOptions = Readonly<{
+    mode: 'on' | 'off';
+    exactSecrets?: Iterable<string>;
+}>;
+export type InvocationDocumentV1 = Readonly<{
+    layoutVersion: 1;
+    runId: string;
+    startedAt: string;
+    request: RunRequestV1;
+}>;
+export type CheckpointDocumentV1 = Readonly<{
+    layoutVersion: 1;
+    runId: string;
+    updatedAt: string;
+    state: 'partial';
+    completedSteps: readonly ExecutedStepResult[];
+    evidenceReferences: readonly EvidenceReference[];
+    diagnostics: readonly Diagnostic[];
+}>;
+export declare class Redactor {
+    private readonly enabled;
+    private readonly exactSecrets;
+    constructor({ mode, exactSecrets }: RedactorOptions);
+    redactText(value: string): string;
+    redactContent(value: JsonValue): JsonValue;
+    redactInvocation(document: InvocationDocumentV1): InvocationDocumentV1;
+    redactCheckpoint(document: CheckpointDocumentV1): CheckpointDocumentV1;
+    redactExecutionResult(result: ExecutionResultV1): ExecutionResultV1;
+    redactDiagnosticText(value: string): string;
+    private redactRequest;
+    private redactExecutedStep;
+    private copyNotRunStep;
+    private redactDiagnostic;
+    private transformContent;
+    private sanitizeText;
+}
+export declare function isSensitiveKey(key: string): boolean;
+//# sourceMappingURL=redactor.d.ts.map

package/dist/redaction/redactor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.d.ts","sourceRoot":"","sources":["../../src/redaction/redactor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EAEjB,SAAS,EAET,YAAY,EACZ,MAAM,uBAAuB,CAAA;AAI9B,eAAO,MAAM,cAAc,qBAAqB,CAAA;AAiBhD,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACtC,IAAI,EAAE,IAAI,GAAG,KAAK,CAAA;IAClB,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;CAC/B,CAAC,CAAA;AAEF,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,YAAY,CAAA;CACrB,CAAC,CAAA;AAEF,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,SAAS,CAAA;IAChB,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC7C,kBAAkB,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAChD,WAAW,EAAE,SAAS,UAAU,EAAE,CAAA;CAClC,CAAC,CAAA;AAEF,qBAAa,QAAQ;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmB;gBAEpC,EAAE,IAAI,EAAE,YAAiB,EAAE,EAAE,eAAe;IAOxD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIjC,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS;IAI1C,gBAAgB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,oBAAoB;IAStE,gBAAgB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,oBAAoB;IAYtE,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB;IA0BnE,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAI3C,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,kBAAkB;IAoB1B,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,YAAY;CAKpB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGnD"}

package/dist/redaction/redactor.js

@@ -0,0 +1,176 @@
+import { compareUtf16 } from '../config/record.js';
+import { scrub } from './scrub.js';
+export const REDACTED_VALUE = '[secret omitted]';
+const MAX_SENSITIVE_KEY_LENGTH = 128;
+const SENSITIVE_KEYS = new Set([
+    'accesstoken',
+    'apikey',
+    'authorization',
+    'checkmateopenaiapikey',
+    'clientsecret',
+    'cookie',
+    'databasepassword',
+    'openaiapikey',
+    'password',
+    'refreshtoken',
+    'secret',
+]);
+export class Redactor {
+    enabled;
+    exactSecrets;
+    constructor({ mode, exactSecrets = [] }) {
+        this.enabled = mode === 'on';
+        this.exactSecrets = [...new Set(exactSecrets)]
+            .filter((value) => value.length > 0)
+            .sort((left, right) => right.length - left.length || compareUtf16(left, right));
+    }
+    redactText(value) {
+        return this.enabled ? this.sanitizeText(value) : value;
+    }
+    redactContent(value) {
+        return this.enabled ? this.transformContent(value) : structuredClone(value);
+    }
+    redactInvocation(document) {
+        return {
+            layoutVersion: document.layoutVersion,
+            runId: document.runId,
+            startedAt: document.startedAt,
+            request: this.redactRequest(document.request),
+        };
+    }
+    redactCheckpoint(document) {
+        return {
+            layoutVersion: document.layoutVersion,
+            runId: document.runId,
+            updatedAt: document.updatedAt,
+            state: document.state,
+            completedSteps: document.completedSteps.map((step) => this.redactExecutedStep(step)),
+            evidenceReferences: document.evidenceReferences.map(copyEvidenceReference),
+            diagnostics: document.diagnostics.map((diagnostic) => this.redactDiagnostic(diagnostic)),
+        };
+    }
+    redactExecutionResult(result) {
+        return {
+            kind: result.kind,
+            schemaVersion: result.schemaVersion,
+            runId: result.runId,
+            scenarioId: result.scenarioId,
+            status: result.status,
+            category: result.category,
+            reason: result.reason,
+            targetMutation: result.targetMutation,
+            startedAt: result.startedAt,
+            durationMs: result.durationMs,
+            driver: { ...result.driver },
+            policy: { id: result.policy.id, effectiveLimits: { ...result.policy.effectiveLimits } },
+            usage: { ...result.usage },
+            steps: result.steps.map((step) => step.status === 'not-run' ? this.copyNotRunStep(step) : this.redactExecutedStep(step)),
+            evidence: {
+                state: result.evidence.state,
+                references: result.evidence.references.map(copyEvidenceReference),
+            },
+            diagnostics: result.diagnostics.map((diagnostic) => this.redactDiagnostic(diagnostic)),
+        };
+    }
+    redactDiagnosticText(value) {
+        return this.sanitizeText(value);
+    }
+    redactRequest(request) {
+        return {
+            schemaVersion: request.schemaVersion,
+            scenario: {
+                id: request.scenario.id,
+                ...(request.scenario.name === undefined ? {} : { name: this.redactText(request.scenario.name) }),
+                driver: {
+                    id: request.scenario.driver.id,
+                    target: this.redactContent(request.scenario.driver.target),
+                },
+                ...(request.scenario.policy === undefined ? {} : { policy: request.scenario.policy }),
+                ...(request.scenario.limits === undefined ? {} : { limits: { ...request.scenario.limits } }),
+                steps: request.scenario.steps.map((step) => ({
+                    id: step.id,
+                    action: this.redactText(step.action),
+                    expect: this.redactText(step.expect),
+                })),
+            },
+        };
+    }
+    redactExecutedStep(step) {
+        return {
+            id: step.id,
+            status: step.status,
+            category: step.category,
+            reason: step.reason,
+            ...(step.actual === undefined ? {} : { actual: this.redactText(step.actual) }),
+            turns: step.turns,
+            durationMs: step.durationMs,
+            usage: { ...step.usage },
+            toolCalls: step.toolCalls.map((call) => ({
+                turn: call.turn,
+                driverId: call.driverId,
+                name: call.name,
+                arguments: this.redactContent(call.arguments),
+                status: call.status,
+            })),
+        };
+    }
+    copyNotRunStep(step) {
+        return step.reason === 'prior-step-failed'
+            ? { id: step.id, status: step.status, reason: step.reason, blockedBy: step.blockedBy }
+            : { id: step.id, status: step.status, reason: step.reason };
+    }
+    redactDiagnostic(diagnostic) {
+        return {
+            code: diagnostic.code,
+            path: diagnostic.path,
+            message: this.redactText(diagnostic.message),
+        };
+    }
+    transformContent(value) {
+        if (typeof value === 'string')
+            return this.sanitizeText(value);
+        if (Array.isArray(value))
+            return value.map((entry) => this.transformContent(entry));
+        if (value === null || typeof value !== 'object')
+            return value;
+        const transformed = Object.create(null);
+        const used = new Set();
+        for (const key of Object.keys(value).sort(compareUtf16)) {
+            const redactedKey = uniqueContentKey(this.sanitizeText(key), used);
+            used.add(redactedKey);
+            transformed[redactedKey] = isSensitiveKey(key) ? REDACTED_VALUE : this.transformContent(value[key]);
+        }
+        return transformed;
+    }
+    sanitizeText(value) {
+        let sanitized = value;
+        for (const secret of this.exactSecrets)
+            sanitized = sanitized.replaceAll(secret, REDACTED_VALUE);
+        return scrub(sanitized);
+    }
+}
+export function isSensitiveKey(key) {
+    if (key.length > MAX_SENSITIVE_KEY_LENGTH)
+        return false;
+    return SENSITIVE_KEYS.has(key.replaceAll(/[-_\s]/g, '').toLowerCase());
+}
+function uniqueContentKey(base, used) {
+    if (!used.has(base))
+        return base;
+    for (let suffix = 2; suffix <= Number.MAX_SAFE_INTEGER; suffix++) {
+        const candidate = `${base} [collision ${suffix}]`;
+        if (!used.has(candidate))
+            return candidate;
+    }
+    throw new Error('Unable to allocate a collision-safe redacted key');
+}
+function copyEvidenceReference(reference) {
+    return {
+        kind: reference.kind,
+        mediaType: reference.mediaType,
+        path: reference.path,
+        producer: reference.producer,
+        ...(reference.stepId === undefined ? {} : { stepId: reference.stepId }),
+    };
+}
+//# sourceMappingURL=redactor.js.map

package/dist/redaction/redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.js","sourceRoot":"","sources":["../../src/redaction/redactor.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAElC,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAA;AAEhD,MAAM,wBAAwB,GAAG,GAAG,CAAA;AACpC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC9B,aAAa;IACb,QAAQ;IACR,eAAe;IACf,uBAAuB;IACvB,cAAc;IACd,QAAQ;IACR,kBAAkB;IAClB,cAAc;IACd,UAAU;IACV,cAAc;IACd,QAAQ;CACR,CAAC,CAAA;AAwBF,MAAM,OAAO,QAAQ;IACH,OAAO,CAAS;IAChB,YAAY,CAAmB;IAEhD,YAAY,EAAE,IAAI,EAAE,YAAY,GAAG,EAAE,EAAmB;QACvD,IAAI,CAAC,OAAO,GAAG,IAAI,KAAK,IAAI,CAAA;QAC5B,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;aAC5C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;aACnC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IACjF,CAAC;IAED,UAAU,CAAC,KAAa;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACvD,CAAC;IAED,aAAa,CAAC,KAAgB;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC5E,CAAC;IAED,gBAAgB,CAAC,QAA8B;QAC9C,OAAO;YACN,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;SAC7C,CAAA;IACF,CAAC;IAED,gBAAgB,CAAC,QAA8B;QAC9C,OAAO;YACN,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACpF,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC1E,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;SACxF,CAAA;IACF,CAAC;IAED,qBAAqB,CAAC,MAAyB;QAC9C,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;YAC5B,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE;YACvF,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE;YAC1B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAChC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CACrF;YACD,QAAQ,EAAE;gBACT,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;gBAC5B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,qBAAqB,CAAC;aACjE;YACD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;SACtF,CAAA;IACF,CAAC;IAED,oBAAoB,CAAC,KAAa;QACjC,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IAEO,aAAa,CAAC,OAAqB;QAC1C,OAAO;YACN,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ,EAAE;gBACT,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;gBACvB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChG,MAAM,EAAE;oBACP,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;oBAC9B,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAe;iBACxE;gBACD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACrF,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC5F,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC5C,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;oBACpC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAC;aACH;SACD,CAAA;IACF,CAAC;IAEO,kBAAkB,CAAC,IAAwB;QAClD,OAAO;YACN,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9E,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACxC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC7C,MAAM,EAAE,IAAI,CAAC,MAAM;aACnB,CAAC,CAAC;SACH,CAAA;IACF,CAAC;IAEO,cAAc,CAAC,IAAsB;QAC5C,OAAO,IAAI,CAAC,MAAM,KAAK,mBAAmB;YACzC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;YACtF,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAA;IAC7D,CAAC;IAEO,gBAAgB,CAAC,UAAsB;QAC9C,OAAO;YACN,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;SAC5C,CAAA;IACF,CAAC;IAEO,gBAAgB,CAAC,KAAgB;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAA;QACnF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAE7D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA8B,CAAA;QACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAA;YAClE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACrB,WAAW,CAAC,WAAW,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QACpG,CAAC;QACD,OAAO,WAAW,CAAA;IACnB,CAAC;IAEO,YAAY,CAAC,KAAa;QACjC,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,YAAY;YAAE,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;QAChG,OAAO,KAAK,CAAC,SAAS,CAAC,CAAA;IACxB,CAAC;CACD;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACzC,IAAI,GAAG,CAAC,MAAM,GAAG,wBAAwB;QAAE,OAAO,KAAK,CAAA;IACvD,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAAyB;IAChE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAChC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,CAAC;QAClE,MAAM,SAAS,GAAG,GAAG,IAAI,eAAe,MAAM,GAAG,CAAA;QACjD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IAC3C,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,qBAAqB,CAAC,SAA4B;IAC1D,OAAO;QACN,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;KACvE,CAAA;AACF,CAAC"}

package/dist/redaction/scrub.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The single place that decides what counts as a secret.
+ *
+ * `StepEvidence` calls this where the loop *records* evidence, so a credential the model typed
+ * into the page never reaches `StepReport` in the first place. The logging path (`ToolDispatcher`,
+ * `ToolResponseHandler`) consumes the same function instead of keeping its own copy of the rules,
+ * so there is exactly one definition of "looks like a secret" in the codebase.
+ *
+ * @example
+ * ```ts
+ * scrub('Authorization: Bearer sk-abc123') // 'Authorization: [secret omitted]'
+ * ```
+ */
+export declare function scrub(value: string): string;
+/**
+ * Recursively applies {@link scrub} to every string value in an arbitrary JSON-like value,
+ * preserving its shape.
+ *
+ * Tool call arguments are kept as a structured object rather than a serialized string, so
+ * scrubbing them string-by-string is what keeps the report's `toolCalls` array both readable
+ * and free of secrets.
+ *
+ * @example
+ * ```ts
+ * scrubValue({ ref: 'e17', text: 'sk-abc123' }) // { ref: 'e17', text: '[secret omitted]' }
+ * ```
+ */
+export declare function scrubValue<T>(value: T): T;
+//# sourceMappingURL=scrub.d.ts.map

package/dist/redaction/scrub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.d.ts","sourceRoot":"","sources":["../../src/redaction/scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQ3C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAczC"}

package/dist/redaction/scrub.js

@@ -0,0 +1,54 @@
+/**
+ * The single place that decides what counts as a secret.
+ *
+ * `StepEvidence` calls this where the loop *records* evidence, so a credential the model typed
+ * into the page never reaches `StepReport` in the first place. The logging path (`ToolDispatcher`,
+ * `ToolResponseHandler`) consumes the same function instead of keeping its own copy of the rules,
+ * so there is exactly one definition of "looks like a secret" in the codebase.
+ *
+ * @example
+ * ```ts
+ * scrub('Authorization: Bearer sk-abc123') // 'Authorization: [secret omitted]'
+ * ```
+ */
+export function scrub(value) {
+    return scrubSecretFields(value)
+        .replace(/data:image\/[a-zA-Z0-9.+-]+;base64,[A-Za-z0-9+/=]+/g, '[image omitted]')
+        .replace(/[A-Za-z0-9+/]{200,}={0,2}/g, '[base64 omitted]')
+        .replace(/sk-[A-Za-z0-9_-]+/g, '[secret omitted]')
+        .replace(/Bearer\s+[A-Za-z0-9._~+/=-]+/gi, 'Bearer [secret omitted]')
+        .replace(/Authorization\s*[:=]\s*[^\s,;}]+/gi, '[secret omitted]')
+        .replace(/Cookie\s*[:=]\s*[^\n,;}]+/gi, '[secret omitted]');
+}
+/**
+ * Recursively applies {@link scrub} to every string value in an arbitrary JSON-like value,
+ * preserving its shape.
+ *
+ * Tool call arguments are kept as a structured object rather than a serialized string, so
+ * scrubbing them string-by-string is what keeps the report's `toolCalls` array both readable
+ * and free of secrets.
+ *
+ * @example
+ * ```ts
+ * scrubValue({ ref: 'e17', text: 'sk-abc123' }) // { ref: 'e17', text: '[secret omitted]' }
+ * ```
+ */
+export function scrubValue(value) {
+    if (typeof value === 'string') {
+        return scrub(value);
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => scrubValue(item));
+    }
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, scrubValue(entry)]));
+    }
+    return value;
+}
+function scrubSecretFields(value) {
+    const secretKey = String.raw `(?:CHECKMATE_OPENAI_API_KEY|OPENAI_API_KEY|api[_-]?key|apikey|authorization|cookie)`;
+    return value
+        .replace(new RegExp(String.raw `(["'])${secretKey}\1\s*:\s*(["'])(?:\\.|(?!\2).)*\2\s*,?`, 'gi'), '[secret omitted]')
+        .replace(new RegExp(String.raw `\b${secretKey}\b\s*[:=]\s*(?:Bearer\s+[^\s,;}]+|"[^"]*"|'[^']*'|[^\s,;}]+)`, 'gi'), '[secret omitted]');
+}
+//# sourceMappingURL=scrub.js.map

package/dist/redaction/scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.js","sourceRoot":"","sources":["../../src/redaction/scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,KAAK,CAAC,KAAa;IAClC,OAAO,iBAAiB,CAAC,KAAK,CAAC;SAC7B,OAAO,CAAC,qDAAqD,EAAE,iBAAiB,CAAC;SACjF,OAAO,CAAC,4BAA4B,EAAE,kBAAkB,CAAC;SACzD,OAAO,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;SACjD,OAAO,CAAC,gCAAgC,EAAE,yBAAyB,CAAC;SACpE,OAAO,CAAC,oCAAoC,EAAE,kBAAkB,CAAC;SACjE,OAAO,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAAA;AAC7D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU,CAAI,KAAQ;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,KAAK,CAAM,CAAA;IACzB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAM,CAAA;IAClD,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAM,CAAA;IACtG,CAAC;IAED,OAAO,KAAK,CAAA;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACvC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAA,qFAAqF,CAAA;IACjH,OAAO,KAAK;SACV,OAAO,CACP,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,SAAS,SAAS,wCAAwC,EAAE,IAAI,CAAC,EACtF,kBAAkB,CAClB;SACA,OAAO,CACP,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,KAAK,SAAS,8DAA8D,EAAE,IAAI,CAAC,EACxG,kBAAkB,CAClB,CAAA;AACH,CAAC"}

package/dist/runtime/config.d.ts

@@ -0,0 +1,15 @@
+export type RuntimeConfig = Readonly<{
+    model: string;
+    baseUrl?: string;
+    reasoningEffort?: 'low' | 'medium' | 'high';
+    temperature: number;
+    turnCap: number;
+    requestTimeout: number;
+    maxRetries: number;
+    loopMaxRepetitions: number;
+    redact: boolean;
+    toolChoice: 'required' | 'auto';
+    rateLimitDelay: number;
+    logLevel: 'debug' | 'info' | 'warn' | 'error' | 'off';
+}>;
+//# sourceMappingURL=config.d.ts.map

package/dist/runtime/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/runtime/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,eAAe,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;IAC3C,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,UAAU,GAAG,MAAM,CAAA;IAC/B,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAA;CACrD,CAAC,CAAA"}

package/dist/runtime/config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config.js.map

package/dist/runtime/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/runtime/config.ts"],"names":[],"mappings":""}

package/dist/runtime/driver-boundary.d.ts

@@ -0,0 +1,16 @@
+import type { ControlExpirationReason, StepControl } from './scenario-control.js';
+export declare class DriverBoundaryError extends Error {
+    readonly operation: string;
+    readonly reason: ControlExpirationReason;
+    constructor(operation: string, reason: ControlExpirationReason);
+}
+export declare function awaitDriverBoundary<T>(input: {
+    operation: string;
+    signal: AbortSignal;
+    deadline: number;
+    call: (signal: AbortSignal) => Promise<T> | T;
+    now?: () => number;
+    reason?: () => ControlExpirationReason;
+}): Promise<T>;
+export declare function awaitStepDriverBoundary<T>(operation: string, control: StepControl, call: (signal: AbortSignal) => Promise<T> | T): Promise<T>;
+//# sourceMappingURL=driver-boundary.d.ts.map

package/dist/runtime/driver-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver-boundary.d.ts","sourceRoot":"","sources":["../../src/runtime/driver-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEjF,qBAAa,mBAAoB,SAAQ,KAAK;IAE5C,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,MAAM,EAAE,uBAAuB;gBAD/B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,uBAAuB;CAKzC;AAED,wBAAsB,mBAAmB,CAAC,CAAC,EAAE,KAAK,EAAE;IACnD,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,WAAW,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC7C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,uBAAuB,CAAA;CACtC,GAAG,OAAO,CAAC,CAAC,CAAC,CAyCb;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EACxC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC3C,OAAO,CAAC,CAAC,CAAC,CAYZ"}

package/dist/runtime/driver-boundary.js

@@ -0,0 +1,71 @@
+export class DriverBoundaryError extends Error {
+    operation;
+    reason;
+    constructor(operation, reason) {
+        super(`Driver boundary '${operation}' expired: ${reason}`);
+        this.operation = operation;
+        this.reason = reason;
+        this.name = 'DriverBoundaryError';
+    }
+}
+export async function awaitDriverBoundary(input) {
+    const now = input.now ?? Date.now;
+    if (input.signal.aborted || now() >= input.deadline) {
+        throw new DriverBoundaryError(input.operation, input.reason?.() ?? signalReason(input.signal));
+    }
+    const controller = new AbortController();
+    const reason = () => input.reason?.() ?? signalReason(input.signal);
+    const timeout = Math.max(0, input.deadline - now());
+    let timer;
+    let onAbort;
+    const boundaryPromise = new Promise((_, reject) => {
+        onAbort = () => {
+            const expiration = reason();
+            controller.abort(expiration);
+            reject(new DriverBoundaryError(input.operation, expiration));
+        };
+        if (input.signal.aborted)
+            queueMicrotask(onAbort);
+        else
+            input.signal.addEventListener('abort', onAbort, { once: true });
+        timer = setTimeout(onAbort, timeout);
+    });
+    let callPromise;
+    try {
+        callPromise = Promise.resolve(input.call(controller.signal));
+    }
+    catch (error) {
+        callPromise = Promise.reject(error);
+    }
+    void callPromise.catch(() => undefined);
+    try {
+        const value = await Promise.race([callPromise, boundaryPromise]);
+        if (input.signal.aborted || now() >= input.deadline) {
+            const expiration = reason();
+            controller.abort(expiration);
+            throw new DriverBoundaryError(input.operation, expiration);
+        }
+        return value;
+    }
+    finally {
+        clearTimeout(timer);
+        input.signal.removeEventListener('abort', onAbort);
+    }
+}
+export function awaitStepDriverBoundary(operation, control, call) {
+    return awaitDriverBoundary({
+        operation,
+        signal: control.signal,
+        deadline: control.deadline,
+        now: control.now,
+        reason: () => {
+            const state = control.poll();
+            return state.expired ? state.reason : 'step-timeout';
+        },
+        call,
+    });
+}
+function signalReason(signal) {
+    return signal.reason === 'interrupted' || signal.reason === 'scenario-timeout' ? signal.reason : 'step-timeout';
+}
+//# sourceMappingURL=driver-boundary.js.map

package/dist/runtime/driver-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver-boundary.js","sourceRoot":"","sources":["../../src/runtime/driver-boundary.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAEnC;IACA;IAFV,YACU,SAAiB,EACjB,MAA+B;QAExC,KAAK,CAAC,oBAAoB,SAAS,cAAc,MAAM,EAAE,CAAC,CAAA;QAHjD,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAAyB;QAGxC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IAClC,CAAC;CACD;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAI,KAO5C;IACA,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACjC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IAC/F,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAA;IACnD,IAAI,KAAoC,CAAA;IACxC,IAAI,OAAmB,CAAA;IACvB,MAAM,eAAe,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACxD,OAAO,GAAG,GAAG,EAAE;YACd,MAAM,UAAU,GAAG,MAAM,EAAE,CAAA;YAC3B,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YAC5B,MAAM,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAA;QAC7D,CAAC,CAAA;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,cAAc,CAAC,OAAO,CAAC,CAAA;;YAC5C,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACpE,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,IAAI,WAAuB,CAAA;IAC3B,IAAI,CAAC;QACJ,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,WAAW,CAAC,KAAK,CAAC,GAAS,EAAE,CAAC,SAAS,CAAC,CAAA;IAE7C,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAA;QAChE,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAA;YAC3B,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YAC5B,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAC3D,CAAC;QACD,OAAO,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,KAAM,CAAC,CAAA;QACpB,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAQ,CAAC,CAAA;IACpD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,SAAiB,EACjB,OAAoB,EACpB,IAA6C;IAE7C,OAAO,mBAAmB,CAAC;QAC1B,SAAS;QACT,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,GAAG,EAAE;YACZ,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;YAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAA;QACrD,CAAC;QACD,IAAI;KACJ,CAAC,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB;IACxC,OAAO,MAAM,CAAC,MAAM,KAAK,aAAa,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAA;AAChH,CAAC"}

package/dist/runtime/driver-session.d.ts

@@ -0,0 +1,9 @@
+import type { ChatCompletionMessageParam } from 'openai/resources/chat/completions';
+import type { DriverSession, DriverTool, StepIntent } from '../driver.js';
+import type { AgentTool, ToolExecution } from '../tools/types.js';
+import type { StepControl } from './scenario-control.js';
+export declare function adaptDriverTool(driverId: string, tool: DriverTool): AgentTool;
+export declare function buildInitialDriverContext(session: DriverSession, step: StepIntent, control: StepControl): Promise<ChatCompletionMessageParam[]>;
+export declare function buildPostToolDriverContext(session: DriverSession, step: StepIntent, turn: number, toolResponses: readonly ToolExecution[], control: StepControl): Promise<ChatCompletionMessageParam[]>;
+export declare function isEphemeralDriverMessage(message: ChatCompletionMessageParam): boolean;
+//# sourceMappingURL=driver-session.d.ts.map

package/dist/runtime/driver-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver-session.d.ts","sourceRoot":"","sources":["../../src/runtime/driver-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAA;AACnF,OAAO,KAAK,EAAwB,aAAa,EAAE,UAAU,EAAuB,UAAU,EAAE,MAAM,cAAc,CAAA;AACpH,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAExD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,SAAS,CAiB7E;AAED,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GAClB,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAKvC;AAED,wBAAsB,0BAA0B,CAC/C,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,SAAS,aAAa,EAAE,EACvC,OAAO,EAAE,WAAW,GAClB,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAUvC;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAErF"}