ccompactor 0.1.0

package/dist/ir/types.js

@@ -0,0 +1,36 @@
+/**
+ * The canonical internal representation.
+ *
+ * Every adapter normalises a provider's transcript into these types, and every
+ * later stage reads only these types. That is what makes a Codex session and a
+ * Claude session the same problem downstream — and it is the only reason adding
+ * an agent is a file rather than a fork.
+ *
+ * Spec: docs/SPEC.md §5.
+ */
+/** `evt 12` or `evt 12–19`. The artifact's only pointer syntax. */
+export function evtLabel(from, to) {
+    const end = to ?? from;
+    return from === end ? `evt ${from}` : `evt ${from}–${end}`;
+}
+/**
+ * The transcript content after the last compact boundary, plus everything when
+ * there is none. A provider compaction already summarised what came before, so
+ * re-reading it means summarising a summary.
+ */
+export function afterLastBoundary(ir) {
+    const last = ir.compactBoundaries.at(-1);
+    if (last === undefined)
+        return ir.messages;
+    return ir.messages.filter((m) => m.eventIndex >= last);
+}
+/** Events the human actually typed. Intent lives here and nowhere else. */
+export function humanTurns(ir) {
+    return ir.messages.filter((m) => m.isHumanTurn && !m.isMeta);
+}
+/** Cwd recorded by the provider, if any. */
+export function sessionCwd(ir) {
+    const cwd = ir.metadata['cwd'];
+    return typeof cwd === 'string' && cwd.length > 0 ? cwd : undefined;
+}
+//# sourceMappingURL=types.js.map

package/dist/ir/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/ir/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA2EH,mEAAmE;AACnE,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,EAAW;IAChD,MAAM,GAAG,GAAG,EAAE,IAAI,IAAI,CAAA;IACtB,OAAO,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,GAAG,EAAE,CAAA;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAa;IAC7C,MAAM,IAAI,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACxC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,QAAQ,CAAA;IAC1C,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAA;AACxD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,EAAa;IACtC,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAC9D,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,UAAU,CAAC,EAAa;IACtC,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AACpE,CAAC"}

package/dist/ledgers/index.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Deterministic ledgers.
+ *
+ * Everything here is computed from the transcript without a model. That is the
+ * point: a handoff that cannot say which files were touched, which commands
+ * failed and what the human actually asked for is not worth the model call that
+ * would summarise it, and these facts are cheap and exact.
+ *
+ * Every record carries the event index it came from, so anything the artifact
+ * claims can be pulled back out with `ccompactor expand`.
+ */
+import type { SessionIR } from '../ir/types.js';
+export interface FileRecord {
+    path: string;
+    edits: number;
+    writes: number;
+    reads: number;
+    firstEvt: number;
+    lastEvt: number;
+}
+export interface CommandRecord {
+    command: string;
+    evt: number;
+    exitCode?: number;
+    failed: boolean;
+    outputHead: string;
+}
+export interface ErrorRecord {
+    signature: string;
+    evt: number;
+    occurrences: number;
+    example: string;
+}
+export interface CommitRecord {
+    sha: string;
+    subject: string;
+    evt: number;
+}
+export interface Ledgers {
+    files: FileRecord[];
+    commands: CommandRecord[];
+    errors: ErrorRecord[];
+    commits: CommitRecord[];
+    userTurns: Array<{
+        evt: number;
+        text: string;
+    }>;
+    toolUse: Array<{
+        name: string;
+        count: number;
+    }>;
+    counts: {
+        messages: number;
+        userTurns: number;
+        toolCalls: number;
+        failedCommands: number;
+    };
+}
+export declare function buildLedgers(ir: SessionIR): Ledgers;
+/**
+ * A signature is the error's *shape* with the parts that vary per occurrence
+ * removed — paths, line numbers, hex ids, counts — so the same failure repeated
+ * forty times is one record with a count rather than forty records.
+ */
+export declare function errorSignature(text: string): string;
+export declare function isNoisePath(path: string): boolean;

package/dist/ledgers/index.js

@@ -0,0 +1,185 @@
+/** Tools whose argument names a file the session worked on. */
+const FILE_TOOLS = {
+    Edit: 'edit',
+    MultiEdit: 'edit',
+    NotebookEdit: 'edit',
+    Write: 'write',
+    Read: 'read',
+    NotebookRead: 'read',
+};
+const COMMAND_TOOLS = new Set(['Bash', 'BashOutput', 'Shell', 'shell']);
+export function buildLedgers(ir) {
+    const files = new Map();
+    const commands = [];
+    const errors = [];
+    const commits = [];
+    const userTurns = [];
+    const toolCounts = new Map();
+    // Tool results are keyed by call id, so a command's outcome attaches to the
+    // call that produced it rather than being guessed from proximity.
+    const resultFor = new Map();
+    for (const message of ir.messages) {
+        if (message.role === 'tool' && message.toolUseId)
+            resultFor.set(message.toolUseId, message);
+    }
+    for (const message of ir.messages) {
+        if (message.isHumanTurn && message.text) {
+            userTurns.push({ evt: message.eventIndex, text: message.text });
+            continue;
+        }
+        if (message.role !== 'assistant' || !message.toolName)
+            continue;
+        toolCounts.set(message.toolName, (toolCounts.get(message.toolName) ?? 0) + 1);
+        const input = asRecord(message.toolInput);
+        const result = message.toolUseId ? resultFor.get(message.toolUseId) : undefined;
+        const fileKind = FILE_TOOLS[message.toolName];
+        if (fileKind) {
+            const path = firstString(input, ['file_path', 'path', 'notebook_path']);
+            if (path) {
+                const record = files.get(path) ?? {
+                    path,
+                    edits: 0,
+                    writes: 0,
+                    reads: 0,
+                    firstEvt: message.eventIndex,
+                    lastEvt: message.eventIndex,
+                };
+                if (fileKind === 'edit')
+                    record.edits += 1;
+                if (fileKind === 'write')
+                    record.writes += 1;
+                if (fileKind === 'read')
+                    record.reads += 1;
+                record.lastEvt = Math.max(record.lastEvt, message.eventIndex);
+                files.set(path, record);
+            }
+            continue;
+        }
+        if (COMMAND_TOOLS.has(message.toolName)) {
+            const command = firstString(input, ['command', 'cmd']);
+            if (!command)
+                continue;
+            const exitCode = exitCodeOf(result);
+            const failed = result?.isError === true || (exitCode !== undefined && exitCode !== 0);
+            commands.push({
+                command: command.split('\n')[0].slice(0, 300),
+                evt: message.eventIndex,
+                ...(exitCode !== undefined ? { exitCode } : {}),
+                failed,
+                outputHead: head(result?.text),
+            });
+            if (failed) {
+                errors.push(errorRecord(result?.text ?? command, message.eventIndex, command));
+            }
+            collectCommit(command, message.eventIndex, commits);
+        }
+    }
+    return {
+        files: [...files.values()].sort((a, b) => weight(b) - weight(a) || a.path.localeCompare(b.path)),
+        commands: commands.sort((a, b) => a.evt - b.evt),
+        errors: mergeErrors(errors),
+        commits,
+        userTurns,
+        toolUse: [...toolCounts.entries()]
+            .map(([name, count]) => ({ name, count }))
+            .sort((a, b) => b.count - a.count || a.name.localeCompare(b.name)),
+        counts: {
+            messages: ir.messages.length,
+            userTurns: userTurns.length,
+            toolCalls: [...toolCounts.values()].reduce((a, b) => a + b, 0),
+            failedCommands: commands.filter((c) => c.failed).length,
+        },
+    };
+}
+/** A file the session wrote to matters more than one it merely read. */
+function weight(file) {
+    return file.edits * 3 + file.writes * 3 + file.reads;
+}
+const GIT_COMMIT = /git\s+commit\s+(?:-[a-zA-Z-]+\s+)*(?:-m\s+)?["']([^"']+)["']/;
+function collectCommit(command, evt, out) {
+    if (!command.includes('git commit'))
+        return;
+    const message = GIT_COMMIT.exec(command)?.[1];
+    if (message)
+        out.push({ sha: '?', subject: message.slice(0, 200), evt });
+}
+function exitCodeOf(result) {
+    if (!result)
+        return undefined;
+    const raw = asRecord(result.raw);
+    const toolUseResult = asRecord(raw['toolUseResult']);
+    for (const candidate of [toolUseResult['exitCode'], toolUseResult['exit_code']]) {
+        if (typeof candidate === 'number')
+            return candidate;
+    }
+    const match = /exit code (\d+)/i.exec(result.text ?? '');
+    return match ? Number.parseInt(match[1], 10) : undefined;
+}
+/**
+ * A signature is the error's *shape* with the parts that vary per occurrence
+ * removed — paths, line numbers, hex ids, counts — so the same failure repeated
+ * forty times is one record with a count rather than forty records.
+ */
+export function errorSignature(text) {
+    const line = text
+        .split('\n')
+        .map((l) => l.trim())
+        .find((l) => l.length > 0)
+        ?.slice(0, 200) ?? '';
+    return line
+        .replace(/0x[0-9a-f]+/gi, '0x…')
+        .replace(/\b[0-9a-f]{7,40}\b/gi, '…')
+        .replace(/\/[^\s:]+/g, (m) => (m.length > 12 ? `…${m.slice(-12)}` : m))
+        .replace(/:\d+:\d+/g, ':N:N')
+        .replace(/:\d+/g, ':N')
+        .replace(/\b\d{2,}\b/g, 'N')
+        .replace(/\s+/g, ' ')
+        .trim();
+}
+function errorRecord(text, evt, fallback) {
+    const signature = errorSignature(text) || errorSignature(fallback);
+    return { signature, evt, occurrences: 1, example: head(text) };
+}
+function mergeErrors(errors) {
+    const merged = new Map();
+    for (const error of errors) {
+        const existing = merged.get(error.signature);
+        if (existing) {
+            existing.occurrences += 1;
+            existing.evt = Math.max(existing.evt, error.evt);
+        }
+        else {
+            merged.set(error.signature, { ...error });
+        }
+    }
+    return [...merged.values()].sort((a, b) => b.occurrences - a.occurrences || a.signature.localeCompare(b.signature));
+}
+function head(text) {
+    if (!text)
+        return '';
+    return text.split('\n').slice(0, 3).join(' ').trim().slice(0, 200);
+}
+function asRecord(value) {
+    return typeof value === 'object' && value !== null ? value : {};
+}
+function firstString(record, keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === 'string' && value.length > 0)
+            return value;
+    }
+    return undefined;
+}
+/** Paths under these are noise: dependencies, build output, logs, caches. */
+const NOISE = [
+    /(^|\/)node_modules\//,
+    /(^|\/)\.git\//,
+    /(^|\/)dist\//,
+    /(^|\/)build\//,
+    /\.log$/,
+    /(^|\/)\.cache\//,
+];
+export function isNoisePath(path) {
+    return NOISE.some((pattern) => pattern.test(path));
+}
+//# sourceMappingURL=index.js.map

package/dist/ledgers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ledgers/index.ts"],"names":[],"mappings":"AA0DA,+DAA+D;AAC/D,MAAM,UAAU,GAA8C;IAC5D,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,MAAM;IACpB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,MAAM;CACrB,CAAA;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AAEvE,MAAM,UAAU,YAAY,CAAC,EAAa;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC3C,MAAM,QAAQ,GAAoB,EAAE,CAAA;IACpC,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,MAAM,OAAO,GAAmB,EAAE,CAAA;IAClC,MAAM,SAAS,GAAyC,EAAE,CAAA;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE5C,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqB,CAAA;IAC9C,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,SAAS;YAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAC7F,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;YAC/D,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,SAAQ;QAE/D,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7E,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAE/E,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAA;YACvE,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI;oBAChC,IAAI;oBACJ,KAAK,EAAE,CAAC;oBACR,MAAM,EAAE,CAAC;oBACT,KAAK,EAAE,CAAC;oBACR,QAAQ,EAAE,OAAO,CAAC,UAAU;oBAC5B,OAAO,EAAE,OAAO,CAAC,UAAU;iBAC5B,CAAA;gBACD,IAAI,QAAQ,KAAK,MAAM;oBAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;gBAC1C,IAAI,QAAQ,KAAK,OAAO;oBAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;gBAC5C,IAAI,QAAQ,KAAK,MAAM;oBAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;gBAC1C,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;gBAC7D,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACzB,CAAC;YACD,SAAQ;QACV,CAAC;QAED,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;YACtD,IAAI,CAAC,OAAO;gBAAE,SAAQ;YACtB,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;YACnC,MAAM,MAAM,GAAG,MAAM,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAA;YACrF,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC9C,GAAG,EAAE,OAAO,CAAC,UAAU;gBACvB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;aAC/B,CAAC,CAAA;YACF,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,IAAI,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;YAChF,CAAC;YACD,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChG,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;QAChD,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;QAC3B,OAAO;QACP,SAAS;QACT,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;aAC/B,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;aACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,EAAE;YACN,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM;YAC5B,SAAS,EAAE,SAAS,CAAC,MAAM;YAC3B,SAAS,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9D,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;SACxD;KACF,CAAA;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,MAAM,CAAC,IAAgB;IAC9B,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,GAAG,8DAA8D,CAAA;AAEjF,SAAS,aAAa,CAAC,OAAe,EAAE,GAAW,EAAE,GAAmB;IACtE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAM;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7C,IAAI,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,MAA6B;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAA;IACpD,KAAK,MAAM,SAAS,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,IAAI,GACR,IAAI;SACD,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,OAAO,IAAI;SACR,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC;SAC/B,OAAO,CAAC,sBAAsB,EAAE,GAAG,CAAC;SACpC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACtE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;SAC5B,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;SACtB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAA;AACX,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,GAAW,EAAE,QAAgB;IAC9D,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAA;IAClE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAA;YACzB,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;QAClD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAClF,CAAA;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAwB;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC9F,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B,EAAE,IAAc;IAClE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;IACjE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,6EAA6E;AAC7E,MAAM,KAAK,GAAG;IACZ,sBAAsB;IACtB,eAAe;IACf,cAAc;IACd,eAAe;IACf,QAAQ;IACR,iBAAiB;CAClB,CAAA;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AACpD,CAAC"}

package/dist/llm/index.d.ts

@@ -0,0 +1,43 @@
+/**
+ * LLM backends for the summary step.
+ *
+ * `--llm none` is a first-class mode, not a degraded one: the deterministic
+ * artifact is complete for following the evidence, and it costs nothing. The
+ * model is what turns evidence into understanding, and everything else works
+ * without it.
+ *
+ * Only `fetch` is used. An SDK per provider is a dependency per provider, and
+ * the differences between these APIs are a URL, a header and a JSON shape.
+ */
+export type Selection = {
+    kind: 'none';
+} | {
+    kind: 'anthropic';
+    model: string;
+} | {
+    kind: 'openai';
+    model: string;
+} | {
+    kind: 'compat';
+    model: string;
+    baseUrl: string;
+};
+export interface LlmRequest {
+    system: string;
+    user: string;
+    maxTokens: number;
+}
+export interface LlmResponse {
+    text: string;
+    inputTokens?: number;
+    outputTokens?: number;
+}
+export interface Backend {
+    readonly label: string;
+    complete(request: LlmRequest): Promise<LlmResponse>;
+}
+export declare function parseSelection(text: string): Selection;
+/** Resolve `auto`: an API key if one is present, otherwise nothing. */
+export declare function resolveAuto(): Selection;
+export declare function selectionLabel(selection: Selection): string;
+export declare function build(selection: Selection): Backend | undefined;

package/dist/llm/index.js

@@ -0,0 +1,143 @@
+/**
+ * LLM backends for the summary step.
+ *
+ * `--llm none` is a first-class mode, not a degraded one: the deterministic
+ * artifact is complete for following the evidence, and it costs nothing. The
+ * model is what turns evidence into understanding, and everything else works
+ * without it.
+ *
+ * Only `fetch` is used. An SDK per provider is a dependency per provider, and
+ * the differences between these APIs are a URL, a header and a JSON shape.
+ */
+const DEFAULT_MODELS = {
+    anthropic: 'claude-sonnet-4-5-20250929',
+    openai: 'gpt-4.1-mini',
+    compat: 'deepseek-chat',
+};
+export function parseSelection(text) {
+    const value = text.trim();
+    if (value === 'none')
+        return { kind: 'none' };
+    // The spec writes these as `api:anthropic`, `api:compat/<model>`. Splitting on
+    // `/` before stripping the `api:` prefix makes the provider `api:compat` and
+    // every run fail with a message that names the prefix it just failed to strip.
+    const bare = value.startsWith('api:') ? value.slice(4) : value;
+    const [provider, model] = bare.split('/');
+    if (!provider)
+        throw new Error(`unknown --llm \`${text}\``);
+    if (provider === 'anthropic')
+        return { kind: 'anthropic', model: model ?? DEFAULT_MODELS['anthropic'] };
+    if (provider === 'openai')
+        return { kind: 'openai', model: model ?? DEFAULT_MODELS['openai'] };
+    if (provider === 'compat') {
+        const baseUrl = process.env['CCOMPACTOR_BASE_URL'];
+        if (!baseUrl)
+            throw new Error('--llm api:compat needs CCOMPACTOR_BASE_URL');
+        return { kind: 'compat', model: model ?? DEFAULT_MODELS['compat'], baseUrl };
+    }
+    throw new Error(`unknown --llm provider \`${provider}\` (expected none, api:anthropic, api:openai, api:compat/<model>)`);
+}
+/** Resolve `auto`: an API key if one is present, otherwise nothing. */
+export function resolveAuto() {
+    const explicit = process.env['CCOMPACTOR_LLM'];
+    if (explicit && explicit !== 'auto')
+        return parseSelection(explicit);
+    if (process.env['ANTHROPIC_API_KEY'])
+        return parseSelection('api:anthropic');
+    if (process.env['OPENAI_API_KEY'])
+        return parseSelection('api:openai');
+    if (process.env['CCOMPACTOR_API_KEY'] && process.env['CCOMPACTOR_BASE_URL']) {
+        return parseSelection('api:compat');
+    }
+    return { kind: 'none' };
+}
+export function selectionLabel(selection) {
+    return selection.kind === 'none' ? 'none' : `api:${selection.kind}/${selection.model}`;
+}
+export function build(selection) {
+    if (selection.kind === 'none')
+        return undefined;
+    return new HttpBackend(selection);
+}
+class HttpBackend {
+    selection;
+    label;
+    constructor(selection) {
+        this.selection = selection;
+        this.label = selectionLabel(selection);
+    }
+    async complete(request) {
+        if (this.selection.kind === 'anthropic')
+            return this.anthropic(request);
+        return this.openaiCompatible(request);
+    }
+    async anthropic(request) {
+        const key = process.env['ANTHROPIC_API_KEY'];
+        if (!key)
+            throw new Error('ANTHROPIC_API_KEY is not set');
+        const response = await fetch('https://api.anthropic.com/v1/messages', {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                'x-api-key': key,
+                'anthropic-version': '2023-06-01',
+            },
+            body: JSON.stringify({
+                model: this.selection.model,
+                max_tokens: request.maxTokens,
+                system: request.system,
+                messages: [{ role: 'user', content: request.user }],
+            }),
+        });
+        if (!response.ok) {
+            throw new Error(`anthropic ${response.status}: ${(await response.text()).slice(0, 400)}`);
+        }
+        const body = (await response.json());
+        const text = (body.content ?? [])
+            .filter((block) => block.type === 'text')
+            .map((block) => block.text ?? '')
+            .join('');
+        return {
+            text,
+            ...(body.usage?.input_tokens !== undefined ? { inputTokens: body.usage.input_tokens } : {}),
+            ...(body.usage?.output_tokens !== undefined ? { outputTokens: body.usage.output_tokens } : {}),
+        };
+    }
+    async openaiCompatible(request) {
+        const selection = this.selection;
+        const base = selection.kind === 'compat'
+            ? selection.baseUrl.replace(/\/$/, '')
+            : 'https://api.openai.com';
+        const key = selection.kind === 'compat'
+            ? (process.env['CCOMPACTOR_API_KEY'] ?? '')
+            : (process.env['OPENAI_API_KEY'] ?? '');
+        const response = await fetch(`${base}/v1/chat/completions`, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                ...(key ? { authorization: `Bearer ${key}` } : {}),
+            },
+            body: JSON.stringify({
+                model: selection.model,
+                max_tokens: request.maxTokens,
+                temperature: 0,
+                messages: [
+                    { role: 'system', content: request.system },
+                    { role: 'user', content: request.user },
+                ],
+            }),
+        });
+        if (!response.ok) {
+            throw new Error(`${selection.kind} ${response.status}: ${(await response.text()).slice(0, 400)}`);
+        }
+        const body = (await response.json());
+        return {
+            text: body.choices?.[0]?.message?.content ?? '',
+            ...(body.usage?.prompt_tokens !== undefined ? { inputTokens: body.usage.prompt_tokens } : {}),
+            ...(body.usage?.completion_tokens !== undefined
+                ? { outputTokens: body.usage.completion_tokens }
+                : {}),
+        };
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/llm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/llm/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAyBH,MAAM,cAAc,GAA2B;IAC7C,SAAS,EAAE,4BAA4B;IACvC,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,eAAe;CACxB,CAAA;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IACzB,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAC7C,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAC9D,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACzC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,CAAA;IAC3D,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,WAAW,CAAE,EAAE,CAAA;IACxG,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,QAAQ,CAAE,EAAE,CAAA;IAC/F,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC3E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,cAAc,CAAC,QAAQ,CAAE,EAAE,OAAO,EAAE,CAAA;IAC/E,CAAC;IACD,MAAM,IAAI,KAAK,CACb,4BAA4B,QAAQ,mEAAmE,CACxG,CAAA;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC9C,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAA;IACpE,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAAE,OAAO,cAAc,CAAC,eAAe,CAAC,CAAA;IAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAAE,OAAO,cAAc,CAAC,YAAY,CAAC,CAAA;IACtE,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC5E,OAAO,cAAc,CAAC,YAAY,CAAC,CAAA;IACrC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAoB;IACjD,OAAO,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAA;AACxF,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,SAAoB;IACxC,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAA;IAC/C,OAAO,IAAI,WAAW,CAAC,SAAS,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,WAAW;IAEc;IADpB,KAAK,CAAQ;IACtB,YAA6B,SAA+C;QAA/C,cAAS,GAAT,SAAS,CAAsC;QAC1E,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAmB;QAChC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACvE,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACvC,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAmB;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QAC5C,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,uCAAuC,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,GAAG;gBAChB,mBAAmB,EAAE,YAAY;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAG,IAAI,CAAC,SAA+B,CAAC,KAAK;gBAClD,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;aACpD,CAAC;SACH,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,CAAC,MAAM,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC3F,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAA;QACD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;aAC9B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;aACxC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;aAChC,IAAI,CAAC,EAAE,CAAC,CAAA;QACX,OAAO;YACL,IAAI;YACJ,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/F,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAmB;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,SAA2E,CAAA;QAClG,MAAM,IAAI,GACR,SAAS,CAAC,IAAI,KAAK,QAAQ;YACzB,CAAC,CAAC,SAAS,CAAC,OAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACvC,CAAC,CAAC,wBAAwB,CAAA;QAC9B,MAAM,GAAG,GACP,SAAS,CAAC,IAAI,KAAK,QAAQ;YACzB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;YAC3C,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,sBAAsB,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,WAAW,EAAE,CAAC;gBACd,QAAQ,EAAE;oBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE;oBAC3C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;iBACxC;aACF,CAAC;SACH,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QACnG,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAA;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE;YAC/C,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,KAAK,SAAS;gBAC7C,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;SACR,CAAA;IACH,CAAC;CACF"}

package/dist/redact.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Secret redaction.
+ *
+ * A transcript is somebody's working session. It contains the API keys they
+ * pasted, the tokens their shell echoed back, and the contents of their `.env`.
+ * Two rules follow, and they are not negotiable:
+ *
+ * 1. **Redact before anything leaves the process.** The LLM path and the rendered
+ *    artifact both go through here. A redaction that runs after the request has
+ *    been sent is a redaction that did not happen.
+ *
+ * 2. **Redact by shape, not by keyword.** A pattern list keyed on the word "key"
+ *    catches `apiKey = "..."` and misses a bare 40-character token, which is the
+ *    form that actually leaks. What follows matches the *shapes* secrets take.
+ *
+ * The replacement is a stable marker rather than a deletion: `[REDACTED:openai]`
+ * tells a reader that a value was here and what kind it was, so an artifact with
+ * a hole in it is diagnosable instead of merely wrong.
+ */
+interface Rule {
+    /** What to call it in the marker. */
+    kind: string;
+    pattern: RegExp;
+    /** Which capture group holds the secret. 0 means the whole match. */
+    group?: number;
+}
+export interface RedactionReport {
+    text: string;
+    /** How many of each kind were replaced. */
+    counts: Record<string, number>;
+    total: number;
+}
+/** Replace every secret-shaped span in `text` with a named marker. */
+export declare function redact(text: string, rules?: Rule[]): RedactionReport;
+/** Redact every string field of a record, leaving structure intact. */
+export declare function redactValue<T>(value: T): T;
+/** Total secrets replaced, for the artifact header. */
+export declare function summarize(counts: Record<string, number>): string;
+export {};

package/dist/redact.js

@@ -0,0 +1,104 @@
+/**
+ * Secret redaction.
+ *
+ * A transcript is somebody's working session. It contains the API keys they
+ * pasted, the tokens their shell echoed back, and the contents of their `.env`.
+ * Two rules follow, and they are not negotiable:
+ *
+ * 1. **Redact before anything leaves the process.** The LLM path and the rendered
+ *    artifact both go through here. A redaction that runs after the request has
+ *    been sent is a redaction that did not happen.
+ *
+ * 2. **Redact by shape, not by keyword.** A pattern list keyed on the word "key"
+ *    catches `apiKey = "..."` and misses a bare 40-character token, which is the
+ *    form that actually leaks. What follows matches the *shapes* secrets take.
+ *
+ * The replacement is a stable marker rather than a deletion: `[REDACTED:openai]`
+ * tells a reader that a value was here and what kind it was, so an artifact with
+ * a hole in it is diagnosable instead of merely wrong.
+ */
+/**
+ * Ordered most specific first. An Anthropic key would also match the generic
+ * long-token rule, and naming it correctly is what makes the marker useful.
+ */
+const RULES = [
+    { kind: 'private-key', pattern: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g },
+    { kind: 'anthropic', pattern: /sk-ant-[A-Za-z0-9_-]{16,}/g },
+    { kind: 'openai', pattern: /sk-(?:proj-)?[A-Za-z0-9_-]{20,}/g },
+    { kind: 'github-pat', pattern: /gh[pousr]_[A-Za-z0-9]{20,}/g },
+    { kind: 'aws-key-id', pattern: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g },
+    {
+        kind: 'aws-secret',
+        pattern: /aws_secret_access_key\s*[=:]\s*["']?([A-Za-z0-9/+=]{40})["']?/gi,
+        group: 1,
+    },
+    { kind: 'google-api', pattern: /AIza[0-9A-Za-z_-]{35}/g },
+    { kind: 'slack', pattern: /xox[abprs]-[A-Za-z0-9-]{10,}/g },
+    { kind: 'npm-token', pattern: /npm_[A-Za-z0-9]{36}/g },
+    { kind: 'pypi-token', pattern: /pypi-[A-Za-z0-9_-]{50,}/g },
+    { kind: 'jwt', pattern: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g },
+    { kind: 'bearer', pattern: /\bBearer\s+([A-Za-z0-9\-._~+/]{20,}=*)/g, group: 1 },
+    {
+        kind: 'assignment',
+        pattern: /\b(?:api[_-]?key|apikey|secret|password|passwd|token|access[_-]?token|client[_-]?secret)\b\s*[=:]\s*["']([^"'\s]{12,})["']/gi,
+        group: 1,
+    },
+    {
+        kind: 'env-line',
+        pattern: /^([A-Z][A-Z0-9_]{2,}(?:_KEY|_TOKEN|_SECRET|_PASSWORD|_PASSWD))\s*=\s*(.{12,})$/gm,
+        group: 2,
+    },
+];
+/**
+ * Internal placeholders, swapped for the readable marker at the very end.
+ *
+ * Rules run in sequence, so a marker written by an earlier rule is text that a
+ * later rule can match. It did: `OPENAI_API_KEY=sk-proj-…` became
+ * `OPENAI_API_KEY=[REDACTED:openai]`, and the env-line rule then redacted the
+ * marker, reporting the key under the wrong name. A NUL-delimited sentinel
+ * cannot be produced by any rule, so nothing downstream can see it.
+ */
+const SENTINEL = '\u0000';
+/** Replace every secret-shaped span in `text` with a named marker. */
+export function redact(text, rules = RULES) {
+    const counts = {};
+    let out = text;
+    for (const rule of rules) {
+        out = out.replace(rule.pattern, (match, ...args) => {
+            const captured = rule.group ? args[rule.group - 1] : match;
+            if (captured === undefined)
+                return match;
+            counts[rule.kind] = (counts[rule.kind] ?? 0) + 1;
+            const marker = `${SENTINEL}${rule.kind}${SENTINEL}`;
+            // Only the captured span is replaced, so the surrounding syntax — a
+            // variable name, a header prefix — survives for the reader.
+            return rule.group ? match.replace(captured, marker) : marker;
+        });
+    }
+    const finished = out.replace(new RegExp(`${SENTINEL}([a-z-]+)${SENTINEL}`, 'g'), (_match, kind) => `[REDACTED:${kind}]`);
+    return { text: finished, counts, total: Object.values(counts).reduce((a, b) => a + b, 0) };
+}
+/** Redact every string field of a record, leaving structure intact. */
+export function redactValue(value) {
+    if (typeof value === 'string')
+        return redact(value).text;
+    if (Array.isArray(value))
+        return value.map((item) => redactValue(item));
+    if (typeof value === 'object' && value !== null) {
+        const out = {};
+        for (const [key, entry] of Object.entries(value)) {
+            // The key itself can be a secret: an env dump keys the token.
+            out[redact(key).text] = redactValue(entry);
+        }
+        return out;
+    }
+    return value;
+}
+/** Total secrets replaced, for the artifact header. */
+export function summarize(counts) {
+    const entries = Object.entries(counts).sort((a, b) => b[1] - a[1]);
+    if (entries.length === 0)
+        return 'none';
+    return entries.map(([kind, count]) => `${kind}×${count}`).join(' ');
+}
+//# sourceMappingURL=redact.js.map

package/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAUH;;;GAGG;AACH,MAAM,KAAK,GAAW;IACpB,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,6EAA6E,EAAE;IAC/G,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,4BAA4B,EAAE;IAC5D,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kCAAkC,EAAE;IAC/D,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,6BAA6B,EAAE;IAC9D,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gCAAgC,EAAE;IACjE;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,iEAAiE;QAC1E,KAAK,EAAE,CAAC;KACT;IACD,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,wBAAwB,EAAE;IACzD,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,+BAA+B,EAAE;IAC3D,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACtD,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAC3D,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,oEAAoE,EAAE;IAC9F,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yCAAyC,EAAE,KAAK,EAAE,CAAC,EAAE;IAChF;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EACL,8HAA8H;QAChI,KAAK,EAAE,CAAC;KACT;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,kFAAkF;QAC3F,KAAK,EAAE,CAAC;KACT;CACF,CAAA;AASD;;;;;;;;GAQG;AACH,MAAM,QAAQ,GAAG,QAAQ,CAAA;AAEzB,sEAAsE;AACtE,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,QAAgB,KAAK;IACxD,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,IAAI,GAAG,GAAG,IAAI,CAAA;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE;YACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAwB,CAAC,CAAC,CAAC,KAAK,CAAA;YAClF,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAA;YACxC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YAChD,MAAM,MAAM,GAAG,GAAG,QAAQ,GAAG,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAA;YACnD,oEAAoE;YACpE,4DAA4D;YAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAC9D,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAC1B,IAAI,MAAM,CAAC,GAAG,QAAQ,YAAY,QAAQ,EAAE,EAAE,GAAG,CAAC,EAClD,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,aAAa,IAAI,GAAG,CAC/C,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AAC5F,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAI,KAAQ;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,IAAoB,CAAA;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAiB,CAAA;IACvF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC5E,8DAA8D;YAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;QAC5C,CAAC;QACD,OAAO,GAAmB,CAAA;IAC5B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,SAAS,CAAC,MAA8B;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IACvC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACrE,CAAC"}