agenticreplay 0.1.0 → 0.1.2

package/node_modules/@agenticreplay/proxy/dist/ca.js

@@ -0,0 +1,264 @@
+import { createHash, generateKeyPairSync, randomBytes, sign, X509Certificate, } from 'node:crypto';
+import { rmSync } from 'node:fs';
+import { mkdir, rm, writeFile } from 'node:fs/promises';
+import { isIPv4, isIPv6 } from 'node:net';
+import { join } from 'node:path';
+import { rootCertificates } from 'node:tls';
+import { restrictToOwner } from '@agenticreplay/core';
+import { derBitString, derBoolean, derContext, derInteger, derOctetString, derOid, derSequence, derSet, derTime, derTlv, derUtf8String, toPem, } from './der.js';
+const OID = {
+    commonName: '2.5.4.3',
+    organization: '2.5.4.10',
+    ecdsaWithSha256: '1.2.840.10045.4.3.2',
+    basicConstraints: '2.5.29.19',
+    keyUsage: '2.5.29.15',
+    subjectAltName: '2.5.29.17',
+    extendedKeyUsage: '2.5.29.37',
+    subjectKeyIdentifier: '2.5.29.14',
+    authorityKeyIdentifier: '2.5.29.35',
+    serverAuth: '1.3.6.1.5.5.7.3.1',
+};
+const FILE_MODE = 0o600;
+const DIR_MODE = 0o700;
+/**
+ * How long a run CA lives.
+ *
+ * A day, not a decade. The key is deleted when the run ends, but a run can be killed with SIGKILL
+ * and leave the file behind; an expiry short enough to outlive nothing but the session it was
+ * minted for is the backstop for that. Nobody's agent session lasts twenty-five hours.
+ */
+const DEFAULT_LIFETIME_MS = 24 * 60 * 60 * 1000;
+/** Backdated a little, because a clock a few seconds behind ours should not see a future cert. */
+const CLOCK_SKEW_MS = 5 * 60 * 1000;
+/** The X.509 tail: sign the TBS bytes and wrap them into a Certificate. */
+function signCertificate(tbs, issuerKey) {
+    const algorithm = derSequence(derOid(OID.ecdsaWithSha256));
+    // Node signs EC keys with a DER-encoded ECDSA-Sig-Value by default, which is exactly the
+    // BIT STRING content RFC 5280 wants. No re-encoding needed.
+    const signature = sign('sha256', tbs, issuerKey);
+    return toPem('CERTIFICATE', derSequence(tbs, algorithm, derBitString(signature)));
+}
+function distinguishedName(commonName) {
+    return derSequence(derSet(derSequence(derOid(OID.organization), derUtf8String('AgenticReplay'))), derSet(derSequence(derOid(OID.commonName), derUtf8String(commonName))));
+}
+function extension(id, critical, value) {
+    return derSequence(derOid(id), ...(critical ? [derBoolean(true)] : []), 
+    // An extension's value is always wrapped in an OCTET STRING, whatever its own type.
+    derOctetString(value));
+}
+/**
+ * A KeyUsage BIT STRING.
+ *
+ * Bits are numbered from the most significant bit of the first byte, and the leading count byte
+ * says how many trailing bits are padding — get it wrong and a strict verifier reads a different
+ * set of usages than you meant.
+ */
+function keyUsage(...bits) {
+    const highest = Math.max(...bits);
+    const bytes = Buffer.alloc(Math.floor(highest / 8) + 1);
+    for (const bit of bits)
+        bytes[Math.floor(bit / 8)] |= 0x80 >> (bit % 8);
+    const unused = bytes.length * 8 - (highest + 1);
+    return derTlv(0x03, Buffer.concat([Buffer.from([unused]), bytes]));
+}
+/**
+ * The uncompressed EC point, `04 || x || y`.
+ *
+ * Taken from the JWK export rather than by walking the SPKI DER: this module encodes ASN.1 and
+ * never decodes it, and a key identifier is not worth introducing a parser for.
+ */
+function publicKeyPoint(key) {
+    const jwk = key.export({ format: 'jwk' });
+    if (!jwk.x || !jwk.y)
+        throw new Error('expected an EC public key');
+    return Buffer.concat([
+        Buffer.from([0x04]),
+        Buffer.from(jwk.x, 'base64url'),
+        Buffer.from(jwk.y, 'base64url'),
+    ]);
+}
+function keyIdentifier(key) {
+    // SHA-1 here is RFC 5280's own recommendation for a key identifier. It is a uniqueness label
+    // for chain building, not a signature, so its collision resistance is not load-bearing.
+    return createHash('sha1').update(publicKeyPoint(key)).digest();
+}
+/**
+ * A subjectAltName for one host. Literal addresses become iPAddress, names become dNSName.
+ *
+ * Getting this wrong is silent: every modern TLS client ignores the subject CN entirely, so a
+ * certificate with the right CN and the wrong SAN type simply fails to match anything.
+ */
+function subjectAltName(host) {
+    if (isIPv4(host)) {
+        return derSequence(derTlv(0x87, Buffer.from(host.split('.').map(Number))));
+    }
+    if (isIPv6(host)) {
+        const groups = expandIPv6(host);
+        return derSequence(derTlv(0x87, Buffer.from(groups)));
+    }
+    return derSequence(derTlv(0x82, Buffer.from(host, 'ascii')));
+}
+/** IPv6 text to its sixteen bytes, `::` expanded. */
+function expandIPv6(host) {
+    const [head, tail] = host.split('::');
+    const parse = (part) => part
+        .split(':')
+        .filter((s) => s.length > 0)
+        .flatMap((s) => {
+        const v = Number.parseInt(s, 16);
+        return [(v >> 8) & 0xff, v & 0xff];
+    });
+    const left = parse(head ?? '');
+    const right = tail === undefined ? [] : parse(tail);
+    return [...left, ...Array(16 - left.length - right.length).fill(0), ...right];
+}
+/**
+ * The certificate authority for one recorded run.
+ *
+ * Per run, in the run directory, never in a trust store. The child process is told about it
+ * through its own environment and nothing else, so the interception ends when the process does.
+ * `dispose()` takes the key with it.
+ */
+export class RunCa {
+    dir;
+    certPath;
+    keyPath;
+    bundlePath;
+    certPem;
+    fingerprint;
+    notAfter;
+    /** Never exposed, never serialized, never written anywhere but `keyPath`. */
+    #key;
+    #subject;
+    #authorityKeyId;
+    /** One key pair for every host certificate — minting is then a signature, not a keygen. */
+    #leafPublicSpki;
+    #leafKeyPem;
+    #leafKeyId;
+    #issued = new Map();
+    #lifetimeMs;
+    #atExit;
+    constructor(init) {
+        this.#atExit = () => {
+            // `exit` handlers must be synchronous, which is why this is the one place the module reaches
+            // for the sync API. Best effort by construction: if it fails there is nothing left to do.
+            try {
+                rmSync(init.dir, { recursive: true, force: true });
+            }
+            catch {
+                /* the directory is already gone, or was never ours to remove */
+            }
+        };
+        // The backstop for every path that never reaches the ordinary teardown: an agent that fails to
+        // launch, a throw mid-recording, a Ctrl-C. Deleting the key is normally the run's own job; a
+        // private key surviving a crashed run is not an acceptable failure mode for it to have.
+        process.once('exit', this.#atExit);
+        this.dir = init.dir;
+        this.certPath = join(init.dir, 'ca.crt');
+        this.keyPath = join(init.dir, 'ca.key');
+        this.bundlePath = join(init.dir, 'ca-bundle.crt');
+        this.certPem = init.certPem;
+        this.fingerprint = new X509Certificate(init.certPem).fingerprint256;
+        this.notAfter = init.notAfter;
+        this.#key = init.key;
+        this.#subject = init.subject;
+        this.#authorityKeyId = init.authorityKeyId;
+        this.#leafPublicSpki = init.leafPublicSpki;
+        this.#leafKeyPem = init.leafKeyPem;
+        this.#leafKeyId = init.leafKeyId;
+        this.#lifetimeMs = init.lifetimeMs;
+    }
+    static async create(options) {
+        const lifetimeMs = options.lifetimeMs ?? DEFAULT_LIFETIME_MS;
+        // P-256 rather than RSA: generation is instantaneous, so standing up interception costs
+        // nothing at the top of a run, and every TLS stack from the last decade accepts it.
+        const authority = generateKeyPairSync('ec', { namedCurve: 'prime256v1' });
+        const leaf = generateKeyPairSync('ec', { namedCurve: 'prime256v1' });
+        const notBefore = new Date(Date.now() - CLOCK_SKEW_MS);
+        const notAfter = new Date(Date.now() + lifetimeMs);
+        // Names the run directory it belongs to, so a certificate found in a browser's warning dialog
+        // can be traced back to the run that minted it — and so two concurrent runs never collide.
+        const subject = distinguishedName(`AgenticReplay run CA ${randomBytes(4).toString('hex')}`);
+        const spki = authority.publicKey.export({ type: 'spki', format: 'der' });
+        const authorityKeyId = keyIdentifier(authority.publicKey);
+        const tbs = derSequence(
+        // [0] version, EXPLICIT: v3 is the integer 2. Extensions are illegal below v3.
+        derContext(0, derInteger(Buffer.from([2]))), derInteger(randomBytes(16)), derSequence(derOid(OID.ecdsaWithSha256)), subject, derSequence(derTime(notBefore), derTime(notAfter)), subject, spki, derContext(3, derSequence(
+        // pathLenConstraint 0: this CA may sign leaves and nothing else. A run CA that could
+        // mint further CAs would be a broader capability than the feature needs.
+        extension(OID.basicConstraints, true, derSequence(derBoolean(true), derInteger(Buffer.from([0])))), extension(OID.keyUsage, true, keyUsage(5, 6)), extension(OID.subjectKeyIdentifier, false, derOctetString(authorityKeyId)))));
+        const certPem = signCertificate(tbs, authority.privateKey);
+        const dir = join(options.runDir, 'tls');
+        await mkdir(dir, { recursive: true, mode: DIR_MODE });
+        // Explicit, because the mode passed to mkdir is only a ceiling — umask can lower it, and on
+        // Windows it is not a floor either, it is ignored. "0700" is a promise this feature makes
+        // rather than a preference, so it is made again on a directory that already exists, and made
+        // in ACLs where that is the only thing the filesystem understands.
+        await restrictToOwner(dir, DIR_MODE);
+        // Node types `export` as `string | Buffer` across all overloads; PEM is always a string.
+        const keyPem = authority.privateKey.export({ type: 'pkcs8', format: 'pem' });
+        await writeFile(join(dir, 'ca.key'), keyPem, { mode: FILE_MODE });
+        await restrictToOwner(join(dir, 'ca.key'), FILE_MODE);
+        await writeFile(join(dir, 'ca.crt'), certPem, { mode: FILE_MODE });
+        await restrictToOwner(join(dir, 'ca.crt'), FILE_MODE);
+        // SSL_CERT_FILE and REQUESTS_CA_BUNDLE *replace* an OpenSSL client's trust store rather than
+        // adding to it. Handing the child a file with only our CA in it would break every host we
+        // deliberately refuse to intercept — the tunnelled ones — so the bundle is ours plus the
+        // roots Node ships.
+        await writeFile(join(dir, 'ca-bundle.crt'), `${certPem}${rootCertificates.join('\n')}\n`, {
+            mode: FILE_MODE,
+        });
+        await restrictToOwner(join(dir, 'ca-bundle.crt'), FILE_MODE);
+        return new RunCa({
+            dir,
+            certPem,
+            key: authority.privateKey,
+            subject,
+            authorityKeyId,
+            leafPublicSpki: leaf.publicKey.export({ type: 'spki', format: 'der' }),
+            leafKeyPem: leaf.privateKey.export({ type: 'pkcs8', format: 'pem' }),
+            leafKeyId: keyIdentifier(leaf.publicKey),
+            lifetimeMs,
+            notAfter,
+        });
+    }
+    /**
+     * A certificate for one host, minted on demand and cached.
+     *
+     * Only ever called for a host the allowlist already approved — this class does no policy of its
+     * own, and a mint is the point of no return for interception.
+     */
+    issue(host) {
+        const cached = this.#issued.get(host);
+        if (cached)
+            return cached;
+        const notBefore = new Date(Date.now() - CLOCK_SKEW_MS);
+        // Never outlive the CA that signed it: a leaf valid past its issuer is a certificate no
+        // verifier will accept anyway, and pretending otherwise only produces confusing failures.
+        const notAfter = new Date(Math.min(Date.now() + this.#lifetimeMs, this.notAfter.getTime()));
+        const tbs = derSequence(derContext(0, derInteger(Buffer.from([2]))), derInteger(randomBytes(16)), derSequence(derOid(OID.ecdsaWithSha256)), this.#subject, derSequence(derTime(notBefore), derTime(notAfter)), distinguishedName(host), this.#leafPublicSpki, derContext(3, derSequence(
+        // Empty SEQUENCE: cA is DEFAULT FALSE and DER forbids encoding a default.
+        extension(OID.basicConstraints, true, derSequence()), extension(OID.keyUsage, true, keyUsage(0)), extension(OID.extendedKeyUsage, false, derSequence(derOid(OID.serverAuth))), extension(OID.subjectAltName, false, subjectAltName(host)), extension(OID.subjectKeyIdentifier, false, derOctetString(this.#leafKeyId)), extension(OID.authorityKeyIdentifier, false, 
+        // keyIdentifier is [0] IMPLICIT, so the raw bytes sit directly under the tag.
+        derSequence(derContext(0, this.#authorityKeyId, false))))));
+        const issued = {
+            certPem: signCertificate(tbs, this.#key),
+            keyPem: this.#leafKeyPem,
+        };
+        this.#issued.set(host, issued);
+        return issued;
+    }
+    /**
+     * End the CA's life with the run.
+     *
+     * The whole directory goes, key included. Idempotent, because it is called both on the normal
+     * path and from a failure handler.
+     */
+    async dispose() {
+        // Removed first: a listener left behind would keep the closure — and a reference to this run —
+        // alive for the life of the process, and agenticreplay records more than one run per process.
+        process.off('exit', this.#atExit);
+        await rm(this.dir, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=ca.js.map

package/node_modules/@agenticreplay/proxy/dist/ca.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca.js","sourceRoot":"","sources":["../src/ca.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,WAAW,EACX,IAAI,EACJ,eAAe,GAEhB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACL,YAAY,EACZ,UAAU,EACV,UAAU,EACV,UAAU,EACV,cAAc,EACd,MAAM,EACN,WAAW,EACX,MAAM,EACN,OAAO,EACP,MAAM,EACN,aAAa,EACb,KAAK,GACN,MAAM,UAAU,CAAC;AAElB,MAAM,GAAG,GAAG;IACV,UAAU,EAAE,SAAS;IACrB,YAAY,EAAE,UAAU;IACxB,eAAe,EAAE,qBAAqB;IACtC,gBAAgB,EAAE,WAAW;IAC7B,QAAQ,EAAE,WAAW;IACrB,cAAc,EAAE,WAAW;IAC3B,gBAAgB,EAAE,WAAW;IAC7B,oBAAoB,EAAE,WAAW;IACjC,sBAAsB,EAAE,WAAW;IACnC,UAAU,EAAE,mBAAmB;CACvB,CAAC;AAEX,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,QAAQ,GAAG,KAAK,CAAC;AAEvB;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD,kGAAkG;AAClG,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAepC,2EAA2E;AAC3E,SAAS,eAAe,CAAC,GAAW,EAAE,SAAoB;IACxD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IAC3D,yFAAyF;IACzF,4DAA4D;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,OAAO,WAAW,CAChB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,EAC7E,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CACvE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,EAAU,EAAE,QAAiB,EAAE,KAAa;IAC7D,OAAO,WAAW,CAChB,MAAM,CAAC,EAAE,CAAC,EACV,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,oFAAoF;IACpF,cAAc,CAAC,KAAK,CAAC,CACtB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,GAAG,IAAc;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,GAAc;IACpC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,GAAc;IACnC,6FAA6F;IAC7F,wFAAwF;IACxF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,qDAAqD;AACrD,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAY,EAAE,CACvC,IAAI;SACD,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACP,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAS,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,KAAK;IACP,GAAG,CAAS;IACZ,QAAQ,CAAS;IACjB,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,OAAO,CAAS;IAChB,WAAW,CAAS;IACpB,QAAQ,CAAO;IAExB,6EAA6E;IACpE,IAAI,CAAY;IAChB,QAAQ,CAAS;IACjB,eAAe,CAAS;IACjC,2FAA2F;IAClF,eAAe,CAAS;IACxB,WAAW,CAAS;IACpB,UAAU,CAAS;IACnB,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC/C,WAAW,CAAS;IACpB,OAAO,CAAa;IAE7B,YAAoB,IAWnB;QACC,IAAI,CAAC,OAAO,GAAG,GAAG,EAAE;YAClB,6FAA6F;YAC7F,0FAA0F;YAC1F,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;QACH,CAAC,CAAC;QACF,+FAA+F;QAC/F,6FAA6F;QAC7F,wFAAwF;QACxF,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC;QACpE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAqB;QACvC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC7D,wFAAwF;QACxF,oFAAoF;QACpF,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;QAErE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC;QACnD,8FAA8F;QAC9F,2FAA2F;QAC3F,MAAM,OAAO,GAAG,iBAAiB,CAAC,wBAAwB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAE1D,MAAM,GAAG,GAAG,WAAW;QACrB,+EAA+E;QAC/E,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC3C,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAC3B,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EACxC,OAAO,EACP,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAClD,OAAO,EACP,IAAI,EACJ,UAAU,CACR,CAAC,EACD,WAAW;QACT,qFAAqF;QACrF,yEAAyE;QACzE,SAAS,CACP,GAAG,CAAC,gBAAgB,EACpB,IAAI,EACJ,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC5D,EACD,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAC7C,SAAS,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC,CAC3E,CACF,CACF,CAAC;QAEF,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtD,4FAA4F;QAC5F,0FAA0F;QAC1F,6FAA6F;QAC7F,mEAAmE;QACnE,MAAM,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAErC,yFAAyF;QACzF,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;QACvF,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACnE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEtD,6FAA6F;QAC7F,0FAA0F;QAC1F,yFAAyF;QACzF,oBAAoB;QACpB,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,GAAG,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACxF,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;QACH,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC;QAE7D,OAAO,IAAI,KAAK,CAAC;YACf,GAAG;YACH,OAAO;YACP,GAAG,EAAE,SAAS,CAAC,UAAU;YACzB,OAAO;YACP,cAAc;YACd,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACtE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW;YAC9E,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;YACxC,UAAU;YACV,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAY;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,CAAC;QACvD,wFAAwF;QACxF,0FAA0F;QAC1F,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAE5F,MAAM,GAAG,GAAG,WAAW,CACrB,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC3C,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAC3B,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EACxC,IAAI,CAAC,QAAQ,EACb,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAClD,iBAAiB,CAAC,IAAI,CAAC,EACvB,IAAI,CAAC,eAAe,EACpB,UAAU,CACR,CAAC,EACD,WAAW;QACT,0EAA0E;QAC1E,SAAS,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EACpD,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAC1C,SAAS,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAC3E,SAAS,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,EAC1D,SAAS,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAC3E,SAAS,CACP,GAAG,CAAC,sBAAsB,EAC1B,KAAK;QACL,8EAA8E;QAC9E,WAAW,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CACxD,CACF,CACF,CACF,CAAC;QAEF,MAAM,MAAM,GAAsB;YAChC,OAAO,EAAE,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;YACxC,MAAM,EAAE,IAAI,CAAC,WAAW;SACzB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO;QACX,+FAA+F;QAC/F,8FAA8F;QAC9F,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;CACF"}

package/node_modules/@agenticreplay/proxy/dist/der.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Just enough DER to build an X.509 certificate.
+ *
+ * `node:crypto` can generate keys, sign, hash and *parse* certificates, but it cannot mint one —
+ * there is no API for it and there never has been. Every MITM proxy in the ecosystem reaches for
+ * `node-forge` or `selfsigned` at this point. This project has near-zero runtime dependencies on
+ * purpose, and pulling a general-purpose ASN.1 and crypto library into a debugger people install
+ * to diagnose a broken machine is a poor trade for the two hundred lines below.
+ *
+ * The surface is deliberately tiny: the exact handful of ASN.1 types RFC 5280 needs for a
+ * certificate we ourselves construct. It is an encoder, never a decoder — nothing here parses
+ * untrusted bytes, so the usual ASN.1 attack surface does not exist. Verification is left to
+ * OpenSSL, which is where it belongs.
+ */
+/** Tag-length-value, the shape every other function here is built from. */
+export declare function derTlv(tag: number, body: Buffer): Buffer;
+export declare function derSequence(...parts: Buffer[]): Buffer;
+export declare function derSet(...parts: Buffer[]): Buffer;
+/**
+ * A non-negative INTEGER from raw big-endian bytes.
+ *
+ * Two DER rules, both of which produce certificates OpenSSL rejects if you get them wrong: leading
+ * zero bytes are forbidden, and a value whose top bit is set needs a zero byte in front or it
+ * would read as negative. Serial numbers are random, so roughly half of them hit the second rule.
+ */
+export declare function derInteger(bytes: Buffer): Buffer;
+export declare function derBoolean(value: boolean): Buffer;
+/** A BIT STRING whose content is a whole number of bytes, which is all a certificate needs. */
+export declare function derBitString(bits: Buffer): Buffer;
+export declare function derOctetString(bytes: Buffer): Buffer;
+export declare function derUtf8String(text: string): Buffer;
+/**
+ * An OBJECT IDENTIFIER from dotted decimal.
+ *
+ * The first two arcs are packed into one byte as `40 * a + b`; the rest are base-128 with the
+ * continuation bit set on every byte but the last.
+ */
+export declare function derOid(dotted: string): Buffer;
+/**
+ * A certificate time.
+ *
+ * RFC 5280 requires UTCTime through 2049 and GeneralizedTime from 2050 — a certificate that uses
+ * the wrong one for its year is malformed. Run CAs live for a day so they will always take the
+ * first branch, but the rule is cheap to honour and expensive to remember later.
+ */
+export declare function derTime(when: Date): Buffer;
+/** A context-specific tag, `[n]`. Constructed wraps another DER value; primitive wraps raw bytes. */
+export declare function derContext(n: number, body: Buffer, constructed?: boolean): Buffer;
+/** DER bytes as a PEM block, wrapped at the 64 columns every tool expects. */
+export declare function toPem(label: string, der: Buffer): string;
+//# sourceMappingURL=der.d.ts.map

package/node_modules/@agenticreplay/proxy/dist/der.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"der.d.ts","sourceRoot":"","sources":["../src/der.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA8BH,2EAA2E;AAC3E,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,WAAW,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAEtD;AAED,wBAAgB,MAAM,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAEjD;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAShD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGjD;AAED,+FAA+F;AAC/F,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAmB7C;AAMD;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAQ1C;AAED,qGAAqG;AACrG,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,UAAO,GAAG,MAAM,CAE9E;AAED,8EAA8E;AAC9E,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAKxD"}

package/node_modules/@agenticreplay/proxy/dist/der.js

@@ -0,0 +1,144 @@
+/**
+ * Just enough DER to build an X.509 certificate.
+ *
+ * `node:crypto` can generate keys, sign, hash and *parse* certificates, but it cannot mint one —
+ * there is no API for it and there never has been. Every MITM proxy in the ecosystem reaches for
+ * `node-forge` or `selfsigned` at this point. This project has near-zero runtime dependencies on
+ * purpose, and pulling a general-purpose ASN.1 and crypto library into a debugger people install
+ * to diagnose a broken machine is a poor trade for the two hundred lines below.
+ *
+ * The surface is deliberately tiny: the exact handful of ASN.1 types RFC 5280 needs for a
+ * certificate we ourselves construct. It is an encoder, never a decoder — nothing here parses
+ * untrusted bytes, so the usual ASN.1 attack surface does not exist. Verification is left to
+ * OpenSSL, which is where it belongs.
+ */
+/** ASN.1 universal tag numbers, plus the two class bits DER spends on context tags. */
+const TAG = {
+    boolean: 0x01,
+    integer: 0x02,
+    bitString: 0x03,
+    octetString: 0x04,
+    oid: 0x06,
+    utf8String: 0x0c,
+    sequence: 0x30,
+    set: 0x31,
+    utcTime: 0x17,
+    generalizedTime: 0x18,
+};
+const CONTEXT = 0x80;
+const CONSTRUCTED = 0x20;
+/**
+ * DER length: short form under 128, otherwise a byte count followed by big-endian length bytes.
+ * BER's indefinite form is not legal in DER and is not produced here.
+ */
+function encodeLength(n) {
+    if (n < 0x80)
+        return Buffer.from([n]);
+    const bytes = [];
+    for (let v = n; v > 0; v = Math.floor(v / 256))
+        bytes.unshift(v % 256);
+    return Buffer.from([0x80 | bytes.length, ...bytes]);
+}
+/** Tag-length-value, the shape every other function here is built from. */
+export function derTlv(tag, body) {
+    return Buffer.concat([Buffer.from([tag]), encodeLength(body.length), body]);
+}
+export function derSequence(...parts) {
+    return derTlv(TAG.sequence, Buffer.concat(parts));
+}
+export function derSet(...parts) {
+    return derTlv(TAG.set, Buffer.concat(parts));
+}
+/**
+ * A non-negative INTEGER from raw big-endian bytes.
+ *
+ * Two DER rules, both of which produce certificates OpenSSL rejects if you get them wrong: leading
+ * zero bytes are forbidden, and a value whose top bit is set needs a zero byte in front or it
+ * would read as negative. Serial numbers are random, so roughly half of them hit the second rule.
+ */
+export function derInteger(bytes) {
+    let start = 0;
+    while (start < bytes.length - 1 && bytes[start] === 0 && (bytes[start + 1] & 0x80) === 0) {
+        start += 1;
+    }
+    let body = bytes.subarray(start);
+    if (body.length === 0)
+        body = Buffer.from([0]);
+    if ((body[0] & 0x80) !== 0)
+        body = Buffer.concat([Buffer.from([0]), body]);
+    return derTlv(TAG.integer, body);
+}
+export function derBoolean(value) {
+    // DER pins TRUE to all-ones; BER would accept any non-zero byte.
+    return derTlv(TAG.boolean, Buffer.from([value ? 0xff : 0x00]));
+}
+/** A BIT STRING whose content is a whole number of bytes, which is all a certificate needs. */
+export function derBitString(bits) {
+    return derTlv(TAG.bitString, Buffer.concat([Buffer.from([0]), bits]));
+}
+export function derOctetString(bytes) {
+    return derTlv(TAG.octetString, bytes);
+}
+export function derUtf8String(text) {
+    return derTlv(TAG.utf8String, Buffer.from(text, 'utf8'));
+}
+/**
+ * An OBJECT IDENTIFIER from dotted decimal.
+ *
+ * The first two arcs are packed into one byte as `40 * a + b`; the rest are base-128 with the
+ * continuation bit set on every byte but the last.
+ */
+export function derOid(dotted) {
+    const arcs = dotted.split('.').map((part) => {
+        const n = Number(part);
+        if (!Number.isInteger(n) || n < 0)
+            throw new Error(`not an object identifier: ${dotted}`);
+        return n;
+    });
+    if (arcs.length < 2)
+        throw new Error(`not an object identifier: ${dotted}`);
+    const bytes = [arcs[0] * 40 + arcs[1]];
+    for (const arc of arcs.slice(2)) {
+        const chunk = [];
+        let v = arc;
+        do {
+            chunk.unshift(v & 0x7f);
+            v >>>= 7;
+        } while (v > 0);
+        for (let i = 0; i < chunk.length - 1; i += 1)
+            chunk[i] |= 0x80;
+        bytes.push(...chunk);
+    }
+    return derTlv(TAG.oid, Buffer.from(bytes));
+}
+function pad2(n) {
+    return String(n).padStart(2, '0');
+}
+/**
+ * A certificate time.
+ *
+ * RFC 5280 requires UTCTime through 2049 and GeneralizedTime from 2050 — a certificate that uses
+ * the wrong one for its year is malformed. Run CAs live for a day so they will always take the
+ * first branch, but the rule is cheap to honour and expensive to remember later.
+ */
+export function derTime(when) {
+    const year = when.getUTCFullYear();
+    const tail = `${pad2(when.getUTCMonth() + 1)}${pad2(when.getUTCDate())}` +
+        `${pad2(when.getUTCHours())}${pad2(when.getUTCMinutes())}${pad2(when.getUTCSeconds())}Z`;
+    return year < 2050
+        ? derTlv(TAG.utcTime, Buffer.from(`${pad2(year % 100)}${tail}`, 'ascii'))
+        : derTlv(TAG.generalizedTime, Buffer.from(`${year}${tail}`, 'ascii'));
+}
+/** A context-specific tag, `[n]`. Constructed wraps another DER value; primitive wraps raw bytes. */
+export function derContext(n, body, constructed = true) {
+    return derTlv(CONTEXT | (constructed ? CONSTRUCTED : 0) | n, body);
+}
+/** DER bytes as a PEM block, wrapped at the 64 columns every tool expects. */
+export function toPem(label, der) {
+    const body = der.toString('base64');
+    const lines = [];
+    for (let i = 0; i < body.length; i += 64)
+        lines.push(body.slice(i, i + 64));
+    return `-----BEGIN ${label}-----\n${lines.join('\n')}\n-----END ${label}-----\n`;
+}
+//# sourceMappingURL=der.js.map

package/node_modules/@agenticreplay/proxy/dist/der.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"der.js","sourceRoot":"","sources":["../src/der.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,uFAAuF;AACvF,MAAM,GAAG,GAAG;IACV,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,IAAI;IACjB,GAAG,EAAE,IAAI;IACT,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,IAAI;IACd,GAAG,EAAE,IAAI;IACT,OAAO,EAAE,IAAI;IACb,eAAe,EAAE,IAAI;CACb,CAAC;AAEX,MAAM,OAAO,GAAG,IAAI,CAAC;AACrB,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB;;;GAGG;AACH,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,IAAY;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAG,KAAe;IAC5C,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAG,KAAe;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1F,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,IAAI,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,iEAAiE;IACjE,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,MAAc;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;QAC1F,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IACnD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,CAAC;QACZ,GAAG,CAAC;YACF,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACxB,CAAC,MAAM,CAAC,CAAC;QACX,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,CAAC,CAAE,IAAI,IAAI,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,IAAU;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACnC,MAAM,IAAI,GACR,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE;QAC3D,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC;IAC3F,OAAO,IAAI,GAAG,IAAI;QAChB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,UAAU,CAAC,CAAS,EAAE,IAAY,EAAE,WAAW,GAAG,IAAI;IACpE,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,KAAK,CAAC,KAAa,EAAE,GAAW;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5E,OAAO,cAAc,KAAK,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC;AACnF,CAAC"}

package/node_modules/@agenticreplay/proxy/dist/dialects.d.ts

@@ -0,0 +1,81 @@
+import type { CanonicalRequest, CanonicalResponse } from '@agenticreplay/plugin-api';
+/**
+ * A wire dialect the proxy can sit in front of.
+ *
+ * The proxy deliberately does not know which dialects exist — it is handed a list. That is what
+ * lets a third party support a new model API without touching the interception core, and it keeps
+ * all wire-format knowledge in @agenticreplay/providers where it belongs.
+ */
+export interface Dialect {
+    id: string;
+    /** Does this dialect own the given request path? */
+    matches(path: string): boolean;
+    /** Upstream origin to forward to when no override is configured. */
+    defaultUpstream: string;
+    toCanonicalRequest(raw: unknown): CanonicalRequest;
+    toCanonicalResponse(raw: unknown): CanonicalResponse;
+    /** Parse a recorded SSE body into a response, for streamed exchanges. */
+    parseStream(body: string): CanonicalResponse;
+    /** Rewrite the model on a raw request body, for fork replay onto a different model. */
+    withModel(raw: unknown, model: string): unknown;
+    /** Request path this dialect posts to, for a request translated *into* it. */
+    requestPath: string;
+    /**
+     * Does this dialect serve the given model?
+     *
+     * Kept on the dialect rather than in a table in the proxy, for the same reason everything else
+     * here is: the proxy is handed a list of dialects and knows nothing about which exist, so a
+     * third party can add one without the routing needing to learn about it.
+     */
+    ownsModel(model: string): boolean;
+    /** Build a wire request from the canonical form — the inbound half of a cross-provider fork. */
+    fromCanonicalRequest(req: CanonicalRequest): unknown;
+    /** Build a wire response the agent will accept — the outbound half. */
+    fromCanonicalResponse(res: CanonicalResponse, streamed: boolean): string;
+}
+export declare function anthropicDialect(translators: {
+    toCanonicalRequest: (raw: unknown) => CanonicalRequest;
+    toCanonicalResponse: (raw: unknown) => CanonicalResponse;
+    parseSse: (body: string) => CanonicalResponse;
+    fromCanonicalRequest: (req: CanonicalRequest) => Record<string, unknown>;
+    fromCanonicalResponse: (res: CanonicalResponse) => Record<string, unknown>;
+    toSse: (res: CanonicalResponse) => string;
+}): Dialect;
+export declare function openaiDialect(translators: {
+    toCanonicalRequest: (raw: unknown) => CanonicalRequest;
+    toCanonicalResponse: (raw: unknown) => CanonicalResponse;
+    parseSse: (body: string) => CanonicalResponse;
+    fromCanonicalRequest: (req: CanonicalRequest) => Record<string, unknown>;
+    fromCanonicalResponse: (res: CanonicalResponse) => Record<string, unknown>;
+    toSse: (res: CanonicalResponse) => string;
+}): Dialect;
+/**
+ * The Codex CLI's subscription transport is an OpenAI Responses-shaped endpoint, but it is not
+ * the public `/v1/responses` API: it lives at `/backend-api/codex/responses`, sends zstd-compressed
+ * JSON and returns a Responses SSE stream. Keeping this dialect here lets the proxy replay the
+ * bytes exactly while still using the normal canonical matcher and trace timeline.
+ */
+export declare function codexDialect(): Dialect;
+/**
+ * The OpenAI Responses API.
+ *
+ * Kept apart from `openaiDialect` rather than folded into it, because the two share a provider and
+ * almost nothing else: the system prompt is a top-level string, tool traffic is a list of
+ * top-level items, and the stream is typed events rather than choice deltas. One dialect trying to
+ * be both would have to sniff the body shape on every request, and guess wrong on the empty ones.
+ *
+ * It is registered *after* `openaiDialect` for a reason that only shows up on forks: `ownsModel`
+ * cannot distinguish them — both serve everything that is not Claude — so the later position means
+ * an ordinary chat-completions run forking to another OpenAI model still goes to chat completions.
+ * A Responses run stays on Responses through the recorded-dialect preference in `goLive`.
+ */
+export declare function responsesDialect(translators: {
+    toCanonicalRequest: (raw: unknown) => CanonicalRequest;
+    toCanonicalResponse: (raw: unknown) => CanonicalResponse;
+    parseSse: (body: string) => CanonicalResponse;
+    fromCanonicalRequest: (req: CanonicalRequest) => Record<string, unknown>;
+    fromCanonicalResponse: (res: CanonicalResponse) => Record<string, unknown>;
+    toSse: (res: CanonicalResponse) => string;
+}): Dialect;
+export declare function selectDialect(dialects: Dialect[], path: string): Dialect | undefined;
+//# sourceMappingURL=dialects.d.ts.map

package/node_modules/@agenticreplay/proxy/dist/dialects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialects.d.ts","sourceRoot":"","sources":["../src/dialects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,gBAAgB,EAChB,iBAAiB,EAGlB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,oDAAoD;IACpD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAAC;IACnD,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,iBAAiB,CAAC;IACrD,yEAAyE;IACzE,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAAC;IAC7C,uFAAuF;IACvF,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAChD,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,gGAAgG;IAChG,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC;IACrD,uEAAuE;IACvE,qBAAqB,CAAC,GAAG,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;CAC1E;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE;IAC5C,kBAAkB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,gBAAgB,CAAC;IACvD,mBAAmB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,iBAAiB,CAAC;IACzD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,iBAAiB,CAAC;IAC9C,oBAAoB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzE,qBAAqB,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,KAAK,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,MAAM,CAAC;CAC3C,GAAG,OAAO,CAmBV;AAED,wBAAgB,aAAa,CAAC,WAAW,EAAE;IACzC,kBAAkB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,gBAAgB,CAAC;IACvD,mBAAmB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,iBAAiB,CAAC;IACzD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,iBAAiB,CAAC;IAC9C,oBAAoB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzE,qBAAqB,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,KAAK,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,MAAM,CAAC;CAC3C,GAAG,OAAO,CAqBV;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAiBtC;AAsPD;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE;IAC5C,kBAAkB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,gBAAgB,CAAC;IACvD,mBAAmB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,iBAAiB,CAAC;IACzD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,iBAAiB,CAAC;IAC9C,oBAAoB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzE,qBAAqB,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,KAAK,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,MAAM,CAAC;CAC3C,GAAG,OAAO,CAiBV;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAEpF"}