claude-code-infinite 1.0.35 → 1.0.37

package/dist/desktop-setup.js

@@ -0,0 +1,288 @@
+/**
+ * `ccc desktop setup`'s files and registrations (desktop-command.ts): the service's state,
+ * its certificate (mitm-ca.ts: a CA name-constrained to api.anthropic.com whose key is
+ * dropped at once; only the leaf key is kept, 0600), the Bash env file, the launchd agent
+ * and the user-scope `memtree` MCP server. The service itself is desktop-service.ts.
+ */
+import http from "node:http";
+import os from "node:os";
+import path from "node:path";
+import fs from "node:fs";
+import { spawnSync } from "node:child_process";
+import { randomBytes } from "node:crypto";
+import { createSessionCa } from "./mitm-ca.js";
+import { MESSAGE_THREADS_OFF, UNREACHABLE_BLOCKING_LIMIT } from "./claude-env.js";
+import { MEMTREE_MCP_SCRIPT } from "./memtree-mcp-config.js";
+import { MEMTREE_MCP_SERVER_NAME } from "./memtree-mcp.js";
+import { proxyUrlFor } from "./https-proxy-mode.js";
+import { cccProxyRestoreLines, ifStill, shellQuote } from "./https-proxy-session.js";
+const LAUNCHD_LABEL = "co.polychat.ccc-desktop";
+export function desktopPaths(configDir, mode) {
+    const dir = path.join(configDir, mode === "production" ? "desktop" : `desktop-${mode}`);
+    const label = mode === "production" ? LAUNCHD_LABEL : `${LAUNCHD_LABEL}-${mode}`;
+    return {
+        dir,
+        caPem: path.join(dir, "ca.pem"),
+        caCert: path.join(dir, "ccc-ca.pem"),
+        upstreamCa: path.join(dir, "upstream-ca.pem"),
+        leafPem: path.join(dir, "leaf.pem"),
+        leafKey: path.join(dir, "leaf-key.pem"),
+        state: path.join(dir, "service.json"),
+        bashEnv: path.join(dir, "bash-env.sh"),
+        log: path.join(dir, "service.log"),
+        plist: path.join(os.homedir(), "Library", "LaunchAgents", `${label}.plist`),
+    };
+}
+export function desktopLaunchdLabel(mode) {
+    return mode === "production" ? LAUNCHD_LABEL : `${LAUNCHD_LABEL}-${mode}`;
+}
+/** The lines to paste into Desktop's environment editor (one KEY=value per line). */
+export function desktopEnvLines(paths, state) {
+    return [
+        `HTTPS_PROXY=${proxyUrlFor(state.port, state.token)}`,
+        `NODE_EXTRA_CA_CERTS=${paths.caPem}`,
+        ...Object.entries(PASTED_LIMITS).map(([name, value]) => `${name}=${value}`),
+        `CLAUDE_ENV_FILE=${paths.bashEnv}`,
+    ];
+}
+/** What terminal ccc sets for MemTree (claude-env.ts), pasted for Desktop sessions. */
+const PASTED_LIMITS = {
+    DISABLE_AUTO_COMPACT: "1",
+    CLAUDE_CODE_BLOCKING_LIMIT_OVERRIDE: UNREACHABLE_BLOCKING_LIMIT,
+    CLAUDE_CODE_RESUME_TOKEN_THRESHOLD: "1000000000",
+    ...MESSAGE_THREADS_OFF,
+};
+/**
+ * Bash-tool commands get the session's env minus ccc's proxy and CA (else curl, Python
+ * and others would fail TLS to api.anthropic.com), each only while it still holds ccc's
+ * value (Claude Code's sandbox sets its own first; the token is matched by pattern, never
+ * written). Programs started from Bash (a nested `claude -p`, an SDK script) aren't routed
+ * through ccc, so they get Claude Code's own compaction back.
+ */
+export function desktopBashEnvScript(paths, state, userEnv = {}) {
+    const userFile = userEnv.CLAUDE_ENV_FILE;
+    return [
+        "# ccc desktop: written by `ccc desktop setup`; sourced by Claude Code before each Bash command.",
+        // The user's own CA file (seen at setup) comes back for Bash; ccc's bundle goes.
+        ...cccProxyRestoreLines(state.port, paths.caPem, userEnv.NODE_EXTRA_CA_CERTS ? { NODE_EXTRA_CA_CERTS: userEnv.NODE_EXTRA_CA_CERTS } : {}),
+        ...Object.entries(PASTED_LIMITS).map(([name, value]) => ifStill(name, value, `unset ${name}`)),
+        userFile ? `export CLAUDE_ENV_FILE=${shellQuote(userFile)}` : "unset CLAUDE_ENV_FILE",
+        // An env file of the user's own, which the pasted line replaced, still runs (as in
+        // terminal proxy mode).
+        ...(userFile ? [`if [ -r ${shellQuote(userFile)} ]; then . ${shellQuote(userFile)}; fi`] : []),
+        "true",
+        "",
+    ].join("\n");
+}
+function freePort() {
+    return new Promise((resolve, reject) => {
+        const s = http.createServer();
+        s.once("error", reject);
+        s.listen(0, "127.0.0.1", () => {
+            const port = s.address().port;
+            s.close(() => resolve(port));
+        });
+    });
+}
+export function readDesktopState(paths) {
+    try {
+        return JSON.parse(fs.readFileSync(paths.state, "utf8"));
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Setup rotates the CA when it expires within this. */
+export const CA_ROTATE_BEFORE_MS = 30 * 24 * 3600_000;
+/**
+ * Make the CA and leaf, the token, the port and the Bash env file. A re-run keeps
+ * the port and token (the pasted lines stay valid) unless `rotateToken`, and keeps
+ * the CA (live sessions trust only the one they started with) unless `rotateCa`,
+ * it is missing or unreadable, or it expires within CA_ROTATE_BEFORE_MS.
+ */
+export async function setupDesktopFiles(paths, mode, opts = {}) {
+    fs.mkdirSync(paths.dir, { recursive: true, mode: 0o700 });
+    fs.chmodSync(paths.dir, 0o700);
+    const previous = readDesktopState(paths);
+    const now = Date.now();
+    const write = (file, text, mode) => {
+        const tmp = `${file}.${process.pid}.tmp`;
+        fs.writeFileSync(tmp, text, { mode });
+        fs.renameSync(tmp, file);
+    };
+    const caUsable = previous !== undefined && Date.parse(previous.notAfter) - now > CA_ROTATE_BEFORE_MS &&
+        [paths.caCert, paths.leafPem, paths.leafKey].every((f) => fs.existsSync(f));
+    const caRotated = opts.rotateCa === true || !caUsable;
+    if (caRotated) {
+        // The CA's key never leaves createSessionCa: it signs this one leaf and is dropped.
+        const ca = createSessionCa();
+        write(paths.leafKey, ca.leafKeyPem, 0o600);
+        write(paths.leafPem, ca.leafCertPem, 0o600);
+        write(paths.caCert, ca.caCertPem, 0o644);
+    }
+    // The pasted NODE_EXTRA_CA_CERTS replaces any the session would have had (a corporate
+    // CA from the login shell): keep those first, as terminal proxy mode does.
+    const extra = opts.userExtraCaPem?.trim() ?? "";
+    const parts = [extra, fs.readFileSync(paths.caCert, "utf8").trim()];
+    write(paths.caPem, `${parts.filter(Boolean).join("\n")}\n`, 0o644);
+    // The service's own connections to Anthropic need those roots too (launchd gives it
+    // none of the shell's env): the plist names this file when it exists (Codex r1 P2).
+    if (extra)
+        write(paths.upstreamCa, `${extra}\n`, 0o644);
+    else
+        fs.rmSync(paths.upstreamCa, { force: true });
+    const state = {
+        mode,
+        port: previous?.port ?? await pickServicePort(),
+        token: !opts.rotateToken && previous?.token ? previous.token : randomBytes(24).toString("hex"),
+        createdAt: caRotated || !previous ? new Date(now).toISOString() : previous.createdAt,
+        notAfter: caRotated || !previous ? new Date(now + 365 * 24 * 3600_000).toISOString() : previous.notAfter,
+        ...(previous?.mcpRegistered ? { mcpRegistered: true } : {}),
+        ...(opts.claudeConfigDir ? { claudeConfigDir: opts.claudeConfigDir } : {}),
+    };
+    write(paths.state, `${JSON.stringify(state, null, 2)}\n`, 0o600);
+    write(paths.bashEnv, desktopBashEnvScript(paths, state, opts.userEnv), 0o600);
+    return { ...state, caRotated };
+}
+export function writeDesktopState(paths, state) {
+    const { mode, port, token, createdAt, notAfter, mcpRegistered, claudeConfigDir } = state;
+    const tmp = `${paths.state}.${process.pid}.tmp`;
+    const kept = { mode, port, token, createdAt, notAfter, mcpRegistered, claudeConfigDir };
+    fs.writeFileSync(tmp, `${JSON.stringify(kept, null, 2)}\n`, { mode: 0o600 });
+    fs.renameSync(tmp, paths.state);
+}
+/**
+ * A fixed port for the pasted lines: below the macOS ephemeral range (49152+), so an
+ * outgoing connection can't hold it when the service restarts. Free when chosen.
+ */
+async function pickServicePort() {
+    for (let i = 0; i < 50; i++) {
+        const port = 41000 + Math.floor(Math.random() * 7000);
+        if (await portFree(port))
+            return port;
+    }
+    return freePort();
+}
+function portFree(port) {
+    return new Promise((resolve) => {
+        const s = http.createServer();
+        s.once("error", () => resolve(false));
+        s.listen(port, "127.0.0.1", () => s.close(() => resolve(true)));
+    });
+}
+/** The launchd agent: `node <cli.js> [staging|local] desktop serve`, kept alive. */
+export function launchdPlist(mode, paths, cliPath) {
+    const args = [process.execPath, cliPath, ...(mode === "production" ? [] : [mode]), "desktop", "serve"];
+    // Transcripts (usage, the final reply) are read where setup's Claude Code keeps them.
+    const configDir = readDesktopState(paths)?.claudeConfigDir;
+    const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${desktopLaunchdLabel(mode)}</string>
+  <key>ProgramArguments</key>
+  <array>
+${args.map((a) => `    <string>${esc(a)}</string>`).join("\n")}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key><string>${esc(`${path.dirname(process.execPath)}:/usr/bin:/bin:/usr/sbin:/sbin`)}</string>${fs.existsSync(paths.upstreamCa)
+        ? `\n    <key>NODE_EXTRA_CA_CERTS</key><string>${esc(paths.upstreamCa)}</string>` : ""}${configDir ? `\n    <key>CLAUDE_CONFIG_DIR</key><string>${esc(configDir)}</string>` : ""}
+  </dict>
+  <key>RunAtLoad</key><true/>
+  <key>ExitTimeOut</key><integer>45</integer>
+  <key>KeepAlive</key><true/>
+  <key>ProcessType</key><string>Background</string>
+  <key>StandardOutPath</key><string>${esc(paths.log)}</string>
+  <key>StandardErrorPath</key><string>${esc(paths.log)}</string>
+</dict>
+</plist>
+`;
+}
+export function installLaunchAgent(mode, paths, cliPath) {
+    fs.mkdirSync(path.dirname(paths.plist), { recursive: true });
+    fs.writeFileSync(paths.plist, launchdPlist(mode, paths, cliPath), { mode: 0o644 });
+    const domain = `gui/${process.getuid?.() ?? 501}`;
+    spawnSync("launchctl", ["bootout", `${domain}/${desktopLaunchdLabel(mode)}`], { stdio: "ignore" });
+    // bootout returns before the job is fully gone (it may take its ExitTimeOut to final-index);
+    // wait for it to leave, then bootstrap, retrying the transient 5/37 errors.
+    for (let i = 0; i < 200 && spawnSync("launchctl", ["print", `${domain}/${desktopLaunchdLabel(mode)}`], { stdio: "ignore" }).status === 0; i++) {
+        spawnSync("sleep", ["0.25"]);
+    }
+    let last = "";
+    for (let attempt = 0; attempt < 40; attempt++) {
+        const r = spawnSync("launchctl", ["bootstrap", domain, paths.plist], { encoding: "utf8" });
+        if (r.status === 0)
+            return;
+        last = `${r.status}: ${(r.stderr || "").trim()}`;
+        spawnSync("sleep", ["0.25"]);
+    }
+    throw new Error(`launchctl bootstrap failed (${last})`);
+}
+export function uninstallLaunchAgent(mode, paths) {
+    const domain = `gui/${process.getuid?.() ?? 501}`;
+    spawnSync("launchctl", ["bootout", `${domain}/${desktopLaunchdLabel(mode)}`], { stdio: "ignore" });
+    fs.rmSync(paths.plist, { force: true });
+}
+/**
+ * The `memtree` MCP server for every Claude Code on this account (Desktop
+ * re-delivers ~/.claude.json's stdio servers to its sessions). It is inert
+ * (no tools) unless the session's HTTPS_PROXY is a ccc proxy or it runs
+ * under terminal ccc (memtree-mcp.ts desktopMcpTarget). Registered through
+ * `claude mcp add-json --scope user`, never by editing ~/.claude.json directly.
+ */
+export function desktopMcpServerJson() {
+    return JSON.stringify({
+        type: "stdio",
+        command: process.execPath,
+        args: [MEMTREE_MCP_SCRIPT],
+        env: { CCC_MEMTREE_MCP_DESKTOP: "1" },
+        alwaysLoad: true,
+    });
+}
+/** The file `claude mcp --scope user` edits: `$CLAUDE_CONFIG_DIR/.claude.json`, else `~/.claude.json`. */
+export function userClaudeJsonPath(env = process.env) {
+    return env.CLAUDE_CONFIG_DIR ? path.join(env.CLAUDE_CONFIG_DIR, ".claude.json") : path.join(os.homedir(), ".claude.json");
+}
+/**
+ * Who owns the user-scope `memtree` entry (read only; never written here). A file that
+ * exists but can't be read or parsed is "other": ccc then touches nothing.
+ */
+export function userMcpOwner(claudeJsonPath = userClaudeJsonPath()) {
+    let config;
+    try {
+        config = JSON.parse(fs.readFileSync(claudeJsonPath, "utf8"));
+    }
+    catch (err) {
+        return err?.code === "ENOENT" ? "none" : "other";
+    }
+    const entry = config.mcpServers?.[MEMTREE_MCP_SERVER_NAME];
+    if (!entry)
+        return "none";
+    return entry.env?.CCC_MEMTREE_MCP_DESKTOP === "1" ? "ccc-desktop" : "other";
+}
+/**
+ * Register (or refresh) ccc's entry. Someone else's `memtree` entry is left alone
+ * (false, with the reason): the user decides.
+ */
+export function registerDesktopMcp(claudeCommand, env = process.env) {
+    const owner = userMcpOwner(userClaudeJsonPath(env));
+    if (owner === "other") {
+        return { ok: false, reason: "a user-scope MCP server named `memtree` that ccc didn't add already exists" };
+    }
+    if (owner === "ccc-desktop") {
+        spawnSync(claudeCommand, ["mcp", "remove", "--scope", "user", MEMTREE_MCP_SERVER_NAME], { stdio: "ignore", env });
+    }
+    const r = spawnSync(claudeCommand, [
+        "mcp", "add-json", "--scope", "user", MEMTREE_MCP_SERVER_NAME, desktopMcpServerJson(),
+    ], { stdio: "inherit", env });
+    return r.status === 0 ? { ok: true } : { ok: false, reason: `\`claude mcp add-json\` exited ${r.status}` };
+}
+/** Remove ccc's entry only, and only when no other ccc desktop mode still uses it. */
+export function unregisterDesktopMcp(claudeCommand, otherModesInstalled, env = process.env) {
+    if (otherModesInstalled || userMcpOwner(userClaudeJsonPath(env)) !== "ccc-desktop")
+        return;
+    spawnSync(claudeCommand, ["mcp", "remove", "--scope", "user", MEMTREE_MCP_SERVER_NAME], { stdio: "ignore", env });
+}
+//# sourceMappingURL=desktop-setup.js.map

package/dist/desktop-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop-setup.js","sourceRoot":"","sources":["../src/desktop-setup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAIrF,MAAM,aAAa,GAAG,yBAAyB,CAAC;AA+BhD,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,IAAiB;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;IACjF,OAAO;QACL,GAAG;QACH,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;QACpC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;QACvC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;QACtC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;QAClC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,QAAQ,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAiB;IACnD,OAAO,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,KAAmB,EAAE,KAAmB;IACtE,OAAO;QACL,eAAe,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;QACrD,uBAAuB,KAAK,CAAC,KAAK,EAAE;QACpC,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;QAC3E,mBAAmB,KAAK,CAAC,OAAO,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,aAAa,GAA2B;IAC5C,oBAAoB,EAAE,GAAG;IACzB,mCAAmC,EAAE,0BAA0B;IAC/D,kCAAkC,EAAE,YAAY;IAChD,GAAG,mBAAmB;CACvB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAmB,EAAE,KAAmB,EAAE,UAA0B,EAAE;IAEtE,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;IACzC,OAAO;QACL,iGAAiG;QACjG,iFAAiF;QACjF,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAC7C,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QAC9F,QAAQ,CAAC,CAAC,CAAC,0BAA0B,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB;QACrF,mFAAmF;QACnF,wBAAwB;QACxB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,QAAQ,CAAC,cAAc,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM;QACN,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAQD,SAAS,QAAQ;IACf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAC5B,MAAM,IAAI,GAAI,CAAC,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;YACpD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAmB;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAiB,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAmB,EAAE,IAAiB,EACtC,OAGI,EAAE;IAEN,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,EAAQ,EAAE;QAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,GAAG,GAAG,mBAAmB;QAClG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,oFAAoF;QACpF,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QAC7B,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC5C,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,sFAAsF;IACtF,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnE,oFAAoF;IACpF,oFAAoF;IACpF,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,IAAI,EAAE,KAAK,CAAC,CAAC;;QACnD,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAiB;QAC1B,IAAI;QACJ,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,MAAM,eAAe,EAAE;QAC/C,KAAK,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9F,SAAS,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS;QACpF,QAAQ,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ;QACxG,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;IACF,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9E,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAmB,EAAE,KAAmB;IACxE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;IACzF,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAChD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;IACxF,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QACtD,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,QAAQ,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,IAAiB,EAAE,KAAmB,EAAE,OAAe;IAClF,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACvG,sFAAsF;IACtF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IAC3D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxG,OAAO;;;;4BAImB,mBAAmB,CAAC,IAAI,CAAC;;;EAGnD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;6BAIjC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,YACjG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7B,CAAC,CAAC,+CAA+C,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GACxF,SAAS,CAAC,CAAC,CAAC,6CAA6C,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;;;;;;sCAMnD,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;wCACZ,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;;;CAGrD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAiB,EAAE,KAAmB,EAAE,OAAe;IACxF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC;IAClD,SAAS,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,GAAG,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,6FAA6F;IAC7F,4EAA4E;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9I,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC3B,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAiB,EAAE,KAAmB;IACzE,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC;IAClD,SAAS,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,GAAG,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,kBAAkB,CAAC;QAC1B,GAAG,EAAE,EAAE,uBAAuB,EAAE,GAAG,EAAE;QACrC,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;AACL,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,OAAO,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AAC5H,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,cAAc,GAAG,kBAAkB,EAAE;IAChE,IAAI,MAAyE,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,uBAAuB,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,OAAO,KAAK,CAAC,GAAG,EAAE,uBAAuB,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAAqB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAE3D,MAAM,KAAK,GAAG,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC;IAC7G,CAAC;IACD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,SAAS,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,CAAC,GAAG,SAAS,CAAC,aAAa,EAAE;QACjC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,EAAE,oBAAoB,EAAE;KACtF,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;AAC7G,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAClC,aAAqB,EAAE,mBAA4B,EAAE,MAAyB,OAAO,CAAC,GAAG;IAEzF,IAAI,mBAAmB,IAAI,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO;IAC3F,SAAS,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;AACpH,CAAC"}

package/dist/financial-redaction.d.ts

@@ -0,0 +1,12 @@
+export declare const CARD = "card_number";
+export declare const ROUTING = "bank_routing";
+export declare const IBAN = "iban";
+export declare const ACCOUNT = "bank_account";
+export declare const SSN = "ssn";
+export declare const FINANCIAL_KINDS: string[];
+export type Span = [start: number, end: number, kind: string];
+/** Non-overlapping [start, end, kind] spans of financial details in a byte string. */
+export declare function financialSpans(data: string): Span[];
+/** financialSpans of a field value whose key ("routing_number"...) is context. */
+export declare function spansWithContext(data: string, context: string): Span[];
+//# sourceMappingURL=financial-redaction.d.ts.map

package/dist/financial-redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"financial-redaction.d.ts","sourceRoot":"","sources":["../src/financial-redaction.ts"],"names":[],"mappings":"AAyBA,eAAO,MAAM,IAAI,gBAAgB,CAAC;AAClC,eAAO,MAAM,OAAO,iBAAiB,CAAC;AACtC,eAAO,MAAM,IAAI,SAAS,CAAC;AAC3B,eAAO,MAAM,OAAO,iBAAiB,CAAC;AACtC,eAAO,MAAM,GAAG,QAAQ,CAAC;AACzB,eAAO,MAAM,eAAe,UAAsC,CAAC;AAEnE,MAAM,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAsG9D,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,CASnD;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,CAKtE"}