codex-openai-proxy 0.1.0-rc.0

package/dist/core/canonical.js

@@ -0,0 +1,22 @@
+import { createHash } from "node:crypto";
+/** Canonicalizes JSON values so equivalent structures serialize identically. */
+export function canonicalJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    if (value && typeof value === "object") {
+        const entries = Object.entries(value).sort(([a], [b]) => a.localeCompare(b));
+        return `{${entries.map(([key, item]) => `${JSON.stringify(key)}:${canonicalJson(item)}`).join(",")}}`;
+    }
+    return JSON.stringify(value) ?? "null";
+}
+/** Returns a stable SHA-256 binding for a JSON-compatible value. */
+export function bindingHash(value) {
+    return createHash("sha256").update(canonicalJson(value)).digest("hex");
+}
+/** Narrows an unknown value to a non-null, non-array object record. */
+export function record(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+//# sourceMappingURL=canonical.js.map

package/dist/core/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../src/core/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,IAAI,CACnE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACjC,CAAC;QACF,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxG,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;AACzC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/core/config.d.ts

@@ -0,0 +1,33 @@
+/** Default maximum accepted HTTP request-body size. */
+export declare const DEFAULT_BODY_LIMIT: number;
+/** User-facing description of the root-namespaced state default. */
+export declare const DEFAULT_STATE_DIR_DESCRIPTION = "per-root under ~/.codex-openai-proxy";
+/** Fully validated configuration for the proxy server. */
+export interface ServeOptions {
+    host: "127.0.0.1" | "::1";
+    port: number;
+    root: string;
+    codexPath: string;
+    toolTimeoutMs: number;
+    implicitToolContinuation: boolean;
+    requestTimeoutMs: number;
+    shutdownTimeoutMs: number;
+    bodyLimitBytes: number;
+    maxRequests: number;
+    logLevel: LogLevel;
+    stateDir: string;
+}
+/** Syntactically valid CLI options awaiting canonical root finalization. */
+export interface ParsedServeOptions extends Omit<ServeOptions, "stateDir"> {
+    stateDir?: string | undefined;
+}
+/** Supported structured-log severity levels. */
+export declare const LOG_LEVELS: readonly ["debug", "info", "warn", "error"];
+/** A supported structured-log severity level. */
+export type LogLevel = (typeof LOG_LEVELS)[number];
+/** Normalizes accepted host spellings to validated loopback addresses. */
+export declare function normalizeLoopbackHost(value: string): ServeOptions["host"];
+/** Canonicalizes the root and derives every root-dependent serve option. */
+export declare function resolveServeOptions(parsed: ParsedServeOptions): Promise<ServeOptions>;
+/** Parses and validates CLI syntax without accessing the filesystem. */
+export declare function parseServeOptions(args: readonly string[], cwd?: string): ParsedServeOptions;

package/dist/core/config.js

@@ -0,0 +1,139 @@
+import { createHash } from "node:crypto";
+import { realpathSync } from "node:fs";
+import { homedir } from "node:os";
+import { isAbsolute, join, resolve } from "node:path";
+import { canonicalizeRoot, isPathWithinRoot } from "./policy.js";
+/** Default maximum accepted HTTP request-body size. */
+export const DEFAULT_BODY_LIMIT = 1024 * 1024;
+/** User-facing description of the root-namespaced state default. */
+export const DEFAULT_STATE_DIR_DESCRIPTION = "per-root under ~/.codex-openai-proxy";
+/** Supported structured-log severity levels. */
+export const LOG_LEVELS = ["debug", "info", "warn", "error"];
+/** Normalizes accepted host spellings to validated loopback addresses. */
+export function normalizeLoopbackHost(value) {
+    const host = value.trim().toLowerCase();
+    if (host === "127.0.0.1")
+        return "127.0.0.1";
+    if (host === "::1")
+        return "::1";
+    if (host === "localhost")
+        return "127.0.0.1";
+    throw new Error(`Invalid --host ${JSON.stringify(value)}. Only 127.0.0.1, ::1, and localhost are allowed.`);
+}
+/** Parses a bounded integer CLI option. */
+function integer(name, value, minimum, maximum) {
+    if (!/^\d+$/.test(value))
+        throw new Error(`${name} must be an integer.`);
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed) || parsed < minimum || parsed > maximum) {
+        throw new Error(`${name} must be between ${minimum} and ${maximum}.`);
+    }
+    return parsed;
+}
+/** Parses a positive duration CLI option into milliseconds. */
+function duration(name, value) {
+    const match = /^(\d+)(ms|s|m)?$/.exec(value);
+    if (!match)
+        throw new Error(`${name} must be a duration such as 500ms, 30s, or 5m.`);
+    const amount = Number(match[1]);
+    const multiplier = match[2] === "m" ? 60_000 : match[2] === "s" ? 1_000 : 1;
+    const result = amount * multiplier;
+    if (!Number.isSafeInteger(result) || result < 1)
+        throw new Error(`${name} must be positive.`);
+    return result;
+}
+/** Parses an explicit true-or-false CLI option. */
+function boolean(name, value) {
+    if (value === "true")
+        return true;
+    if (value === "false")
+        return false;
+    throw new Error(`${name} must be true or false.`);
+}
+/** Validates a CLI string against a fixed list and returns its member type. */
+function oneOf(name, value, allowed) {
+    const selected = allowed.find((candidate) => candidate === value);
+    if (selected === undefined) {
+        const last = allowed.at(-1);
+        const choices = allowed.length < 2
+            ? (last ?? "a supported value")
+            : `${allowed.slice(0, -1).join(", ")}, or ${last}`;
+        throw new Error(`${name} must be ${choices}.`);
+    }
+    return selected;
+}
+/** Builds the default per-root state directory from a canonical root. */
+function defaultStateDir(root) {
+    const namespace = createHash("sha256")
+        .update(root)
+        .digest("hex")
+        .slice(0, 16);
+    return join(realpathSync(homedir()), ".codex-openai-proxy", namespace);
+}
+/** Canonicalizes the root and derives every root-dependent serve option. */
+export async function resolveServeOptions(parsed) {
+    const canonicalRoot = await canonicalizeRoot(parsed.root);
+    const usesDefaultStateDir = parsed.stateDir === undefined;
+    const stateDir = parsed.stateDir === undefined
+        ? defaultStateDir(canonicalRoot)
+        : isAbsolute(parsed.stateDir)
+            ? parsed.stateDir
+            : resolve(canonicalRoot, parsed.stateDir);
+    if (usesDefaultStateDir && isPathWithinRoot(canonicalRoot, stateDir))
+        throw new Error("The default --state-dir falls inside --root; set --state-dir to a directory outside the root.");
+    return { ...parsed, root: canonicalRoot, stateDir };
+}
+/** Parses and validates CLI syntax without accessing the filesystem. */
+export function parseServeOptions(args, cwd = process.cwd()) {
+    const values = new Map();
+    for (let index = 0; index < args.length; index += 1) {
+        const token = args[index];
+        if (token === undefined || !token.startsWith("--"))
+            throw new Error(`Unexpected argument: ${token}`);
+        const equals = token.indexOf("=");
+        const name = equals < 0 ? token : token.slice(0, equals);
+        const next = equals < 0 ? args[index + 1] : token.slice(equals + 1);
+        if (next === undefined || (equals < 0 && next.startsWith("--")))
+            throw new Error(`Missing value for ${name}.`);
+        if (values.has(name))
+            throw new Error(`Duplicate option: ${name}.`);
+        values.set(name, next);
+        if (equals < 0)
+            index += 1;
+    }
+    const known = new Set([
+        "--host",
+        "--port",
+        "--root",
+        "--codex-path",
+        "--tool-timeout",
+        "--implicit-tool-continuation",
+        "--request-timeout",
+        "--shutdown-timeout",
+        "--body-limit",
+        "--max-requests",
+        "--log-level",
+        "--state-dir",
+    ]);
+    for (const name of values.keys())
+        if (!known.has(name))
+            throw new Error(`Unknown option: ${name}.`);
+    const root = resolve(cwd, values.get("--root") ?? ".");
+    const stateValue = values.get("--state-dir");
+    const logLevel = oneOf("--log-level", values.get("--log-level") ?? "info", LOG_LEVELS);
+    return {
+        host: normalizeLoopbackHost(values.get("--host") ?? "127.0.0.1"),
+        port: integer("--port", values.get("--port") ?? "8787", 0, 65_535),
+        root,
+        codexPath: values.get("--codex-path") ?? "codex",
+        toolTimeoutMs: duration("--tool-timeout", values.get("--tool-timeout") ?? "5m"),
+        implicitToolContinuation: boolean("--implicit-tool-continuation", values.get("--implicit-tool-continuation") ?? "true"),
+        requestTimeoutMs: duration("--request-timeout", values.get("--request-timeout") ?? "30s"),
+        shutdownTimeoutMs: duration("--shutdown-timeout", values.get("--shutdown-timeout") ?? "10s"),
+        bodyLimitBytes: integer("--body-limit", values.get("--body-limit") ?? String(DEFAULT_BODY_LIMIT), 1, 100 * 1024 * 1024),
+        maxRequests: integer("--max-requests", values.get("--max-requests") ?? "100", 1, 10_000),
+        logLevel,
+        ...(stateValue === undefined ? {} : { stateDir: stateValue }),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/core/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEjE,uDAAuD;AACvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9C,oEAAoE;AACpE,MAAM,CAAC,MAAM,6BAA6B,GACxC,sCAAsC,CAAC;AAuBzC,gDAAgD;AAChD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAKtE,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IAC7C,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IAC7C,MAAM,IAAI,KAAK,CACb,kBAAkB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,mDAAmD,CAC3F,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,SAAS,OAAO,CACd,IAAY,EACZ,KAAa,EACb,OAAe,EACf,OAAe;IAEf,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,OAAO,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,OAAO,QAAQ,OAAO,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+DAA+D;AAC/D,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK;QACR,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gDAAgD,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mDAAmD;AACnD,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa;IAC1C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;AACpD,CAAC;AAED,+EAA+E;AAC/E,SAAS,KAAK,CACZ,IAAY,EACZ,KAAa,EACb,OAAqB;IAErB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;IAClE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,GAAG,CAAC;YAChB,CAAC,CAAC,CAAC,IAAI,IAAI,mBAAmB,CAAC;YAC/B,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,YAAY,OAAO,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;SACnC,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,EAAE,qBAAqB,EAAE,SAAS,CAAC,CAAC;AACzE,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA0B;IAE1B,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,mBAAmB,GAAG,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC;IAC1D,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC;QAChC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,QAAQ;YACjB,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,mBAAmB,IAAI,gBAAgB,CAAC,aAAa,EAAE,QAAQ,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAC/B,IAAuB,EACvB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAEnB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpE,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,GAAG,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,GAAG,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,IAAI,MAAM,GAAG,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;QACpB,QAAQ;QACR,QAAQ;QACR,QAAQ;QACR,cAAc;QACd,gBAAgB;QAChB,8BAA8B;QAC9B,mBAAmB;QACnB,oBAAoB;QACpB,cAAc;QACd,gBAAgB;QAChB,aAAa;QACb,aAAa;KACd,CAAC,CAAC;IACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE;QAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC;IAEpE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,KAAK,CACpB,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,MAAM,EACnC,UAAU,CACX,CAAC;IACF,OAAO;QACL,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC;QAChE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC;QAClE,IAAI;QACJ,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO;QAChD,aAAa,EAAE,QAAQ,CACrB,gBAAgB,EAChB,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CACrC;QACD,wBAAwB,EAAE,OAAO,CAC/B,8BAA8B,EAC9B,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,IAAI,MAAM,CACrD;QACD,gBAAgB,EAAE,QAAQ,CACxB,mBAAmB,EACnB,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,CACzC;QACD,iBAAiB,EAAE,QAAQ,CACzB,oBAAoB,EACpB,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAC1C;QACD,cAAc,EAAE,OAAO,CACrB,cAAc,EACd,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,kBAAkB,CAAC,EACxD,CAAC,EACD,GAAG,GAAG,IAAI,GAAG,IAAI,CAClB;QACD,WAAW,EAAE,OAAO,CAClB,gBAAgB,EAChB,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,KAAK,EACrC,CAAC,EACD,MAAM,CACP;QACD,QAAQ;QACR,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC"}

package/dist/core/logger.d.ts

@@ -0,0 +1,17 @@
+import type { LogLevel } from "./config.js";
+/** Receives one structured log entry. */
+export type LogWriter = (entry: Record<string, unknown>) => void;
+/** Paths that default-visible failure summaries must mask. */
+export interface RedactionContext {
+    root: string;
+    sensitivePaths: readonly string[];
+}
+/** Structured logger with failure reporting bound to one redaction context. */
+export interface Logger {
+    (entryLevel: LogLevel, event: string, fields?: Record<string, unknown>): void;
+    failure(event: string, fields: Record<string, unknown>, error: unknown): void;
+}
+/** Writes an unconfigured startup failure using the standard log envelope. */
+export declare function writeStartupError(error: unknown): void;
+/** Creates a structured logger filtered at the configured level. */
+export declare function createLogger(level: LogLevel, write?: LogWriter, redaction?: RedactionContext): Logger;

package/dist/core/logger.js

@@ -0,0 +1,44 @@
+import { redact } from "./redact.js";
+/** Numeric severity ordering used for log filtering. */
+const priorities = {
+    debug: 10,
+    info: 20,
+    warn: 30,
+    error: 40,
+};
+/** Writes an unconfigured startup failure using the standard log envelope. */
+export function writeStartupError(error) {
+    defaultWriter({
+        time: new Date().toISOString(),
+        level: "error",
+        event: "startup_failed",
+        error: error instanceof Error ? error.message : String(error),
+    });
+}
+/** Creates a structured logger filtered at the configured level. */
+export function createLogger(level, write = defaultWriter, redaction = { root: "", sensitivePaths: [] }) {
+    const log = ((entryLevel, event, fields = {}) => {
+        if (priorities[entryLevel] < priorities[level])
+            return;
+        write({
+            time: new Date().toISOString(),
+            level: entryLevel,
+            event,
+            ...fields,
+        });
+    });
+    log.failure = (event, fields, error) => {
+        const message = error instanceof Error ? error.message : String(error);
+        log("error", event, {
+            ...fields,
+            error: redact(message, redaction.root, redaction.sensitivePaths),
+        });
+        log("debug", `${event}_detail`, { ...fields, error: message });
+    };
+    return log;
+}
+/** Writes structured logs to stderr as newline-delimited JSON. */
+function defaultWriter(entry) {
+    process.stderr.write(`${JSON.stringify(entry)}\n`);
+}
+//# sourceMappingURL=logger.js.map

package/dist/core/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/core/logger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,wDAAwD;AACxD,MAAM,UAAU,GAA6B;IAC3C,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;CACV,CAAC;AAiBF,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,aAAa,CAAC;QACZ,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC9B,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAC1B,KAAe,EACf,QAAmB,aAAa,EAChC,YAA8B,EAAE,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;IAE9D,MAAM,GAAG,GAAG,CAAC,CACX,UAAoB,EACpB,KAAa,EACb,SAAkC,EAAE,EAC9B,EAAE;QACR,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO;QACvD,KAAK,CAAC;YACJ,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,GAAG,MAAM;SACV,CAAC,CAAC;IACL,CAAC,CAAW,CAAC;IACb,GAAG,CAAC,OAAO,GAAG,CACZ,KAAa,EACb,MAA+B,EAC/B,KAAc,EACR,EAAE;QACR,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE;YAClB,GAAG,MAAM;YACT,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,cAAc,CAAC;SACjE,CAAC,CAAC;QACH,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kEAAkE;AAClE,SAAS,aAAa,CAAC,KAA8B;IACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC"}

package/dist/core/policy.d.ts

@@ -0,0 +1,98 @@
+/** Sandbox modes exposed by the x_codex request extension. */
+export declare const SANDBOX_MODES: readonly ["read-only", "workspace-write", "danger-full-access"];
+/** A sandbox mode exposed by the x_codex request extension. */
+export type SandboxMode = (typeof SANDBOX_MODES)[number];
+/** Per-request web-search modes supported by the pinned app-server. */
+export declare const WEB_SEARCH_MODES: readonly ["disabled", "cached", "indexed", "live"];
+/** A per-request web-search mode supported by the pinned app-server. */
+export type WebSearchMode = (typeof WEB_SEARCH_MODES)[number];
+/** Non-interactive approval policies in the proxy's preference order. */
+declare const APPROVAL_POLICY_ORDER: readonly ["never", "on-request", "untrusted"];
+/** A non-interactive approval policy that the proxy can safely own. */
+export type ApprovalPolicy = (typeof APPROVAL_POLICY_ORDER)[number];
+/** Approval reviewers in the proxy's preference order. */
+declare const APPROVAL_REVIEWER_ORDER: readonly ["auto_review", "guardian_subagent", "user"];
+/** An approval reviewer accepted by the pinned app-server protocol. */
+export type ApprovalsReviewer = (typeof APPROVAL_REVIEWER_ORDER)[number];
+/** Relevant managed requirements read from app-server at startup. */
+export interface PolicyRequirements {
+    allowedApprovalPolicies: ApprovalPolicy[] | null;
+    allowedApprovalsReviewers: ApprovalsReviewer[] | null;
+    allowedSandboxModes: SandboxMode[] | null;
+    allowedWebSearchModes: WebSearchMode[] | null;
+}
+/** The validated request-side x_codex policy extension. */
+export interface RequestPolicy {
+    cwd?: string | undefined;
+    sandbox?: SandboxMode | undefined;
+    webSearch?: WebSearchMode | undefined;
+}
+/** JSON-safe policy material persisted as the continuation binding. */
+export interface PolicyBindingInput {
+    cwd: string;
+    sandbox: SandboxMode;
+    webSearch: WebSearchMode;
+    approvalPolicy: ApprovalPolicy;
+    approvalsReviewer: ApprovalsReviewer | null;
+}
+/** Full app-server sandbox policy applied explicitly to every turn. */
+export type EffectiveSandboxPolicy = {
+    type: "readOnly";
+    networkAccess: false;
+} | {
+    type: "workspaceWrite";
+    writableRoots: string[];
+    networkAccess: false;
+    excludeTmpdirEnvVar: false;
+    excludeSlashTmp: false;
+} | {
+    type: "dangerFullAccess";
+};
+/** Canonical effective settings bound to a response and Codex thread. */
+export interface EffectivePolicy {
+    cwd: string;
+    sandbox: SandboxMode;
+    webSearch: WebSearchMode;
+    approvalPolicy: ApprovalPolicy;
+    approvalsReviewer?: ApprovalsReviewer | undefined;
+    sandboxPolicy: EffectiveSandboxPolicy;
+}
+/** A request-policy failure safe to expose without filesystem details. */
+export declare class PolicyError extends Error {
+    readonly code: string;
+    readonly param: string;
+    constructor(code: string, param: string, message: string);
+}
+/** Requirements used when app-server reports no managed restrictions. */
+export declare const UNRESTRICTED_POLICY_REQUIREMENTS: PolicyRequirements;
+/** Minimal path semantics needed for cross-platform containment checks. */
+export interface PathSemantics {
+    isAbsolute(path: string): boolean;
+    relative(from: string, to: string): string;
+    sep: string;
+}
+/** Checks canonical path containment using host or supplied platform semantics. */
+export declare function isPathWithinRoot(root: string, candidate: string, paths?: PathSemantics): boolean;
+/** Resolves and verifies the configured working-directory root. */
+export declare function canonicalizeRoot(path: string): Promise<string>;
+/** Validates the complete public x_codex extension without ignoring fields. */
+export declare function validateRequestPolicy(value: unknown): RequestPolicy;
+/** Parses the relevant portion of configRequirements/read strictly. */
+export declare function parsePolicyRequirements(value: unknown): PolicyRequirements;
+/** Resolves request selections against the canonical root and managed policy. */
+export declare function resolveEffectivePolicy(request: RequestPolicy, root: string, requirements: PolicyRequirements): Promise<EffectivePolicy>;
+/** Selects a managed-allowed reviewer, preferring non-interactive review. */
+export declare function selectApprovalsReviewer(requirements: PolicyRequirements): ApprovalsReviewer;
+/**
+ * Chooses the strictest usable non-interactive approval policy, preferring the
+ * least-interactive option app-server allows (`never`, then `on-request`, then
+ * `untrusted`) so the proxy never depends on an interactive approver.
+ */
+export declare function selectApprovalPolicy(requirements: PolicyRequirements): ApprovalPolicy;
+/** Builds the exact app-server sandbox policy for a canonical cwd. */
+export declare function sandboxPolicy(sandbox: SandboxMode, cwd: string): EffectiveSandboxPolicy;
+/** Returns the canonical effective fields whose meaning must not change. */
+export declare function policyBindingInput(policy: EffectivePolicy): PolicyBindingInput;
+/** Computes a stable continuation hash for canonical effective settings. */
+export declare function policyBindingHash(policy: EffectivePolicy): string;
+export {};

package/dist/core/policy.js

@@ -0,0 +1,242 @@
+import { constants } from "node:fs";
+import { access, realpath, stat } from "node:fs/promises";
+import { isAbsolute, relative, sep } from "node:path";
+import { bindingHash, record } from "./canonical.js";
+/** Sandbox modes exposed by the x_codex request extension. */
+export const SANDBOX_MODES = [
+    "read-only",
+    "workspace-write",
+    "danger-full-access",
+];
+/** Per-request web-search modes supported by the pinned app-server. */
+export const WEB_SEARCH_MODES = [
+    "disabled",
+    "cached",
+    "indexed",
+    "live",
+];
+/** Non-interactive approval policies in the proxy's preference order. */
+const APPROVAL_POLICY_ORDER = ["never", "on-request", "untrusted"];
+/** Approval reviewers in the proxy's preference order. */
+const APPROVAL_REVIEWER_ORDER = [
+    "auto_review",
+    "guardian_subagent",
+    "user",
+];
+/** A request-policy failure safe to expose without filesystem details. */
+export class PolicyError extends Error {
+    code;
+    param;
+    constructor(code, param, message) {
+        super(message);
+        this.code = code;
+        this.param = param;
+        this.name = "PolicyError";
+    }
+}
+/** Requirements used when app-server reports no managed restrictions. */
+export const UNRESTRICTED_POLICY_REQUIREMENTS = {
+    allowedApprovalPolicies: null,
+    allowedApprovalsReviewers: null,
+    allowedSandboxModes: null,
+    allowedWebSearchModes: null,
+};
+/** Checks canonical path containment using host or supplied platform semantics. */
+export function isPathWithinRoot(root, candidate, paths = { isAbsolute, relative, sep }) {
+    const fromRoot = paths.relative(root, candidate);
+    return (fromRoot === "" ||
+        (fromRoot !== ".." &&
+            !fromRoot.startsWith(`..${paths.sep}`) &&
+            !paths.isAbsolute(fromRoot)));
+}
+/** Resolves and verifies the configured working-directory root. */
+export async function canonicalizeRoot(path) {
+    if (!isAbsolute(path))
+        throw new Error("--root must name an absolute readable directory.");
+    try {
+        return await canonicalDirectory(path);
+    }
+    catch {
+        throw new Error("--root must name a readable directory.");
+    }
+}
+/** Validates the complete public x_codex extension without ignoring fields. */
+export function validateRequestPolicy(value) {
+    if (value === undefined)
+        return {};
+    const extension = record(value);
+    if (!extension)
+        throw new PolicyError("invalid_x_codex", "x_codex", "x_codex must be an object.");
+    const allowed = new Set(["cwd", "sandbox", "web_search"]);
+    if (Object.keys(extension).some((key) => !allowed.has(key)))
+        throw new PolicyError("invalid_x_codex", "x_codex", "x_codex contains unsupported fields.");
+    if (extension.cwd !== undefined &&
+        (typeof extension.cwd !== "string" || extension.cwd.length === 0))
+        throw new PolicyError("invalid_cwd", "x_codex.cwd", "x_codex.cwd must be a non-empty string.");
+    const sandbox = validateEnumField(extension.sandbox, SANDBOX_MODES, "unsupported_sandbox", "x_codex.sandbox", "x_codex.sandbox is not supported.");
+    const webSearch = validateEnumField(extension.web_search, WEB_SEARCH_MODES, "unsupported_web_search", "x_codex.web_search", "x_codex.web_search is not supported.");
+    return {
+        ...(typeof extension.cwd === "string" ? { cwd: extension.cwd } : {}),
+        ...(sandbox === undefined ? {} : { sandbox }),
+        ...(webSearch === undefined ? {} : { webSearch }),
+    };
+}
+/** Parses the relevant portion of configRequirements/read strictly. */
+export function parsePolicyRequirements(value) {
+    const response = record(value);
+    if (!response || !("requirements" in response))
+        throw new Error("configRequirements/read returned a malformed response.");
+    if (response.requirements === null)
+        return UNRESTRICTED_POLICY_REQUIREMENTS;
+    const requirements = record(response.requirements);
+    if (!requirements)
+        throw new Error("configRequirements/read returned malformed requirements.");
+    return {
+        allowedApprovalPolicies: stringAllowlist(requirements.allowedApprovalPolicies, APPROVAL_POLICY_ORDER, "allowedApprovalPolicies", true),
+        allowedApprovalsReviewers: stringAllowlist(requirements.allowedApprovalsReviewers, APPROVAL_REVIEWER_ORDER, "allowedApprovalsReviewers"),
+        allowedSandboxModes: stringAllowlist(requirements.allowedSandboxModes, SANDBOX_MODES, "allowedSandboxModes"),
+        allowedWebSearchModes: stringAllowlist(requirements.allowedWebSearchModes, WEB_SEARCH_MODES, "allowedWebSearchModes"),
+    };
+}
+/** Resolves request selections against the canonical root and managed policy. */
+export async function resolveEffectivePolicy(request, root, requirements) {
+    // `root` is already canonical (the CLI resolves it once via canonicalizeRoot),
+    // so a request that names no cwd needs no per-request filesystem walk. Only a
+    // client-supplied cwd is canonicalized and bounded here.
+    const cwd = request.cwd === undefined
+        ? root
+        : await canonicalizeRequestCwd(request.cwd, root);
+    const sandbox = request.sandbox ?? "read-only";
+    const webSearch = request.webSearch ?? "disabled";
+    requireAllowed(sandbox, requirements.allowedSandboxModes, "x_codex.sandbox", "sandbox_not_allowed");
+    requireAllowed(webSearch, requirements.allowedWebSearchModes, "x_codex.web_search", "web_search_not_allowed");
+    const approvalPolicy = selectApprovalPolicy(requirements);
+    const approvalsReviewer = selectApprovalsReviewer(requirements);
+    return {
+        cwd,
+        sandbox,
+        webSearch,
+        approvalPolicy,
+        approvalsReviewer,
+        sandboxPolicy: sandboxPolicy(sandbox, cwd),
+    };
+}
+/** Selects a managed-allowed reviewer, preferring non-interactive review. */
+export function selectApprovalsReviewer(requirements) {
+    return firstAllowed(APPROVAL_REVIEWER_ORDER, requirements.allowedApprovalsReviewers, "approval_reviewer_not_allowed", "x_codex", "Managed requirements allow no supported approval reviewer.");
+}
+/**
+ * Chooses the strictest usable non-interactive approval policy, preferring the
+ * least-interactive option app-server allows (`never`, then `on-request`, then
+ * `untrusted`) so the proxy never depends on an interactive approver.
+ */
+export function selectApprovalPolicy(requirements) {
+    return firstAllowed(APPROVAL_POLICY_ORDER, requirements.allowedApprovalPolicies, "approval_policy_not_allowed", "x_codex", "Managed requirements allow no supported non-interactive approval policy.");
+}
+/** Builds the exact app-server sandbox policy for a canonical cwd. */
+export function sandboxPolicy(sandbox, cwd) {
+    if (sandbox === "read-only")
+        return { type: "readOnly", networkAccess: false };
+    if (sandbox === "workspace-write")
+        return {
+            type: "workspaceWrite",
+            writableRoots: [cwd],
+            networkAccess: false,
+            excludeTmpdirEnvVar: false,
+            excludeSlashTmp: false,
+        };
+    return { type: "dangerFullAccess" };
+}
+/** Returns the canonical effective fields whose meaning must not change. */
+export function policyBindingInput(policy) {
+    return {
+        cwd: policy.cwd,
+        sandbox: policy.sandbox,
+        webSearch: policy.webSearch,
+        approvalPolicy: policy.approvalPolicy,
+        approvalsReviewer: policy.approvalsReviewer ?? null,
+    };
+}
+/** Computes a stable continuation hash for canonical effective settings. */
+export function policyBindingHash(policy) {
+    return bindingHash(policyBindingInput(policy));
+}
+/** Resolves a requested cwd and enforces canonical root containment. */
+async function canonicalizeRequestCwd(requested, root) {
+    if (!isAbsolute(requested))
+        throw new PolicyError("invalid_cwd", "x_codex.cwd", "x_codex.cwd must be an absolute path to a readable directory.");
+    let canonical;
+    try {
+        canonical = await canonicalDirectory(requested);
+    }
+    catch {
+        throw new PolicyError("invalid_cwd", "x_codex.cwd", "x_codex.cwd must be an absolute path to a readable directory.");
+    }
+    if (!isPathWithinRoot(root, canonical))
+        throw new PolicyError("cwd_outside_root", "x_codex.cwd", "x_codex.cwd must resolve within the configured root.");
+    return canonical;
+}
+/** Resolves a readable directory while preserving filesystem check ordering. */
+async function canonicalDirectory(path) {
+    const canonical = await realpath(path);
+    await access(canonical, constants.R_OK | constants.X_OK);
+    if (!(await stat(canonical)).isDirectory())
+        throw new Error("not directory");
+    return canonical;
+}
+/** Returns the first managed-allowed value in the proxy's preference order. */
+function firstAllowed(order, allowed, code, param, message) {
+    for (const candidate of order)
+        if (allowed === null || allowed.includes(candidate))
+            return candidate;
+    throw new PolicyError(code, param, message);
+}
+/** Rejects a managed-disallowed request selection without approximation. */
+function requireAllowed(value, allowed, param, code) {
+    if (allowed !== null && !allowed.includes(value))
+        throw new PolicyError(code, param, "The requested setting is disallowed by managed policy.");
+}
+/** Parses a nullable managed string allowlist and rejects malformed entries. */
+function stringAllowlist(value, supported, name, allowGranular = false) {
+    if (value === null || value === undefined)
+        return null;
+    if (!Array.isArray(value))
+        throw new Error(`configRequirements/read returned malformed ${name}.`);
+    const result = [];
+    for (const entry of value) {
+        if (allowGranular && isGranularApproval(entry))
+            continue;
+        if (typeof entry !== "string" || !includesString(supported, entry))
+            throw new Error(`configRequirements/read returned malformed ${name}.`);
+        result.push(entry);
+    }
+    return result;
+}
+/** Validates an optional request string against a supported enum tuple. */
+function validateEnumField(value, allowed, code, param, message) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string" || !includesString(allowed, value))
+        throw new PolicyError(code, param, message);
+    return value;
+}
+/** Narrows a string after membership checking without weakening tuple types. */
+function includesString(values, value) {
+    return values.some((candidate) => candidate === value);
+}
+/** Recognizes the generated granular approval-policy shape for safe omission. */
+function isGranularApproval(value) {
+    const outer = record(value);
+    const granular = record(outer?.granular);
+    if (!outer ||
+        !granular ||
+        Object.keys(outer).some((key) => key !== "granular"))
+        return false;
+    const required = ["sandbox_approval", "rules", "mcp_elicitations"];
+    const optional = ["skill_approval", "request_permissions"];
+    const accepted = [...required, ...optional];
+    return (Object.keys(granular).every((key) => accepted.includes(key)) &&
+        required.every((key) => typeof granular[key] === "boolean") &&
+        optional.every((key) => granular[key] === undefined || typeof granular[key] === "boolean"));
+}
+//# sourceMappingURL=policy.js.map

package/dist/core/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/core/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAErD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,WAAW;IACX,iBAAiB;IACjB,oBAAoB;CACZ,CAAC;AAKX,uEAAuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,UAAU;IACV,QAAQ;IACR,SAAS;IACT,MAAM;CACE,CAAC;AAKX,yEAAyE;AACzE,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;AAK5E,0DAA0D;AAC1D,MAAM,uBAAuB,GAAG;IAC9B,aAAa;IACb,mBAAmB;IACnB,MAAM;CACE,CAAC;AAmDX,0EAA0E;AAC1E,MAAM,OAAO,WAAY,SAAQ,KAAK;IAElB;IACA;IAFlB,YACkB,IAAY,EACZ,KAAa,EAC7B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAQ;QAI7B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,gCAAgC,GAAuB;IAClE,uBAAuB,EAAE,IAAI;IAC7B,yBAAyB,EAAE,IAAI;IAC/B,mBAAmB,EAAE,IAAI;IACzB,qBAAqB,EAAE,IAAI;CAC5B,CAAC;AASF,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,SAAiB,EACjB,QAAuB,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE;IAEpD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjD,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,QAAQ,KAAK,IAAI;YAChB,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;YACtC,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,SAAS;QACZ,MAAM,IAAI,WAAW,CACnB,iBAAiB,EACjB,SAAS,EACT,4BAA4B,CAC7B,CAAC;IACJ,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,IAAI,WAAW,CACnB,iBAAiB,EACjB,SAAS,EACT,sCAAsC,CACvC,CAAC;IACJ,IACE,SAAS,CAAC,GAAG,KAAK,SAAS;QAC3B,CAAC,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;QAEjE,MAAM,IAAI,WAAW,CACnB,aAAa,EACb,aAAa,EACb,yCAAyC,CAC1C,CAAC;IACJ,MAAM,OAAO,GAAG,iBAAiB,CAC/B,SAAS,CAAC,OAAO,EACjB,aAAa,EACb,qBAAqB,EACrB,iBAAiB,EACjB,mCAAmC,CACpC,CAAC;IACF,MAAM,SAAS,GAAG,iBAAiB,CACjC,SAAS,CAAC,UAAU,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,oBAAoB,EACpB,sCAAsC,CACvC,CAAC;IACF,OAAO;QACL,GAAG,CAAC,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,QAAQ,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,gCAAgC,CAAC;IAC5E,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY;QACf,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,OAAO;QACL,uBAAuB,EAAE,eAAe,CACtC,YAAY,CAAC,uBAAuB,EACpC,qBAAqB,EACrB,yBAAyB,EACzB,IAAI,CACL;QACD,yBAAyB,EAAE,eAAe,CACxC,YAAY,CAAC,yBAAyB,EACtC,uBAAuB,EACvB,2BAA2B,CAC5B;QACD,mBAAmB,EAAE,eAAe,CAClC,YAAY,CAAC,mBAAmB,EAChC,aAAa,EACb,qBAAqB,CACtB;QACD,qBAAqB,EAAE,eAAe,CACpC,YAAY,CAAC,qBAAqB,EAClC,gBAAgB,EAChB,uBAAuB,CACxB;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAsB,EACtB,IAAY,EACZ,YAAgC;IAEhC,+EAA+E;IAC/E,8EAA8E;IAC9E,yDAAyD;IACzD,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,KAAK,SAAS;QACvB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;IAClD,cAAc,CACZ,OAAO,EACP,YAAY,CAAC,mBAAmB,EAChC,iBAAiB,EACjB,qBAAqB,CACtB,CAAC;IACF,cAAc,CACZ,SAAS,EACT,YAAY,CAAC,qBAAqB,EAClC,oBAAoB,EACpB,wBAAwB,CACzB,CAAC;IACF,MAAM,cAAc,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAChE,OAAO;QACL,GAAG;QACH,OAAO;QACP,SAAS;QACT,cAAc;QACd,iBAAiB;QACjB,aAAa,EAAE,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB,CACrC,YAAgC;IAEhC,OAAO,YAAY,CACjB,uBAAuB,EACvB,YAAY,CAAC,yBAAyB,EACtC,+BAA+B,EAC/B,SAAS,EACT,4DAA4D,CAC7D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAgC;IAEhC,OAAO,YAAY,CACjB,qBAAqB,EACrB,YAAY,CAAC,uBAAuB,EACpC,6BAA6B,EAC7B,SAAS,EACT,0EAA0E,CAC3E,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAC3B,OAAoB,EACpB,GAAW;IAEX,IAAI,OAAO,KAAK,WAAW;QACzB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IACpD,IAAI,OAAO,KAAK,iBAAiB;QAC/B,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,aAAa,EAAE,CAAC,GAAG,CAAC;YACpB,aAAa,EAAE,KAAK;YACpB,mBAAmB,EAAE,KAAK;YAC1B,eAAe,EAAE,KAAK;SACvB,CAAC;IACJ,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;AACtC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAChC,MAAuB;IAEvB,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;KACpD,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAAC,MAAuB;IACvD,OAAO,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,wEAAwE;AACxE,KAAK,UAAU,sBAAsB,CACnC,SAAiB,EACjB,IAAY;IAEZ,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QACxB,MAAM,IAAI,WAAW,CACnB,aAAa,EACb,aAAa,EACb,+DAA+D,CAChE,CAAC;IACJ,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CACnB,aAAa,EACb,aAAa,EACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC;QACpC,MAAM,IAAI,WAAW,CACnB,kBAAkB,EAClB,aAAa,EACb,sDAAsD,CACvD,CAAC;IACJ,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CACnB,KAAmB,EACnB,OAA4B,EAC5B,IAAY,EACZ,KAAa,EACb,OAAe;IAEf,KAAK,MAAM,SAAS,IAAI,KAAK;QAC3B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACxE,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,4EAA4E;AAC5E,SAAS,cAAc,CACrB,KAAQ,EACR,OAA4B,EAC5B,KAAa,EACb,IAAY;IAEZ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9C,MAAM,IAAI,WAAW,CACnB,IAAI,EACJ,KAAK,EACL,wDAAwD,CACzD,CAAC;AACN,CAAC;AAED,gFAAgF;AAChF,SAAS,eAAe,CACtB,KAAc,EACd,SAAuB,EACvB,IAAY,EACZ,aAAa,GAAG,KAAK;IAErB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,GAAG,CAAC,CAAC;IACzE,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,aAAa,IAAI,kBAAkB,CAAC,KAAK,CAAC;YAAE,SAAS;QACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,GAAG,CAAC,CAAC;QACzE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,SAAS,iBAAiB,CACxB,KAAc,EACd,OAAqB,EACrB,IAAY,EACZ,KAAa,EACb,OAAe;IAEf,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC;QAC9D,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,SAAS,cAAc,CACrB,MAAoB,EACpB,KAAa;IAEb,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,iFAAiF;AACjF,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,IACE,CAAC,KAAK;QACN,CAAC,QAAQ;QACT,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAAC;QAEpD,OAAO,KAAK,CAAC;IACf,MAAM,QAAQ,GAAG,CAAC,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC5C,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5D,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;QAC3D,QAAQ,CAAC,KAAK,CACZ,CAAC,GAAG,EAAE,EAAE,CACN,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS,CACpE,CACF,CAAC;AACJ,CAAC"}

package/dist/core/redact.d.ts

@@ -0,0 +1,2 @@
+/** Removes common URL, credential, and local-path forms from diagnostics. */
+export declare function redact(value: string, root: string, sensitivePaths?: readonly string[]): string;