codiedev 0.10.0-beta.5 → 0.10.0-beta.7

package/dist/commands/security.js

@@ -1,156 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.runSecurityCommand = runSecurityCommand;
-const securityInstall_1 = require("../securityInstall");
-const securityPilot_1 = require("../securityPilot");
-const securityPolicy_1 = require("../securityPolicy");
-const securityInventory_1 = require("../securityInventory");
-const securityDeepScan_1 = require("../securityDeepScan");
-const utils_1 = require("../utils");
-const securityDoctor_1 = require("../securityDoctor");
-const securityFeature_1 = require("../securityFeature");
-const SECURITY_USAGE = "Usage: codiedev security <doctor|pilot|inventory|scan|sync|rollback> [--json] [--deep] [--connect-mcp] [--supply-chain] [--no-upload] [--yes]";
-function printPilot(json) {
-    const report = (0, securityPilot_1.runSyntheticSecurityPilot)();
-    if (json) {
-        console.log(JSON.stringify(report, null, 2));
-        return report.ok;
-    }
-    console.log("\nCodiedev security pilot — synthetic, side-effect-free validation\n");
-    for (const item of report.cases) {
-        console.log(`${item.passed ? "✓" : "✗"} ${item.surface}: ${item.name} (${item.actual})`);
-    }
-    console.log(`\n${report.ok ? "PASS" : "FAIL"}: ${report.cases.filter((item) => item.passed).length}/${report.cases.length} policy checks matched.`);
-    console.log("No commands were executed and no real credentials were used.\n");
-    return report.ok;
-}
-function printDoctor(json, companyId) {
-    const result = (0, securityDoctor_1.collectSecurityDoctorReport)(companyId);
-    if (json) {
-        console.log(JSON.stringify(result, null, 2));
-        return result.ok;
-    }
-    console.log("\nCodiedev doctor — Agent Security details\n");
-    for (const check of (0, securityDoctor_1.securityDoctorChecks)(result)) {
-        const mark = check.status === "pass" ? "✓" : check.status === "warn" ? "!" : "✗";
-        console.log(`${mark} ${check.name}: ${check.detail}`);
-    }
-    console.log(`\n${result.ok ? "PASS" : "FAIL"}: ${result.ok ? "endpoint security is healthy" : "run `codiedev connect`, then repeat this check"}.\n`);
-    return result.ok;
-}
-async function runSecurityCommand(args) {
-    const subcommand = args.find((arg) => !arg.startsWith("-")) ?? "doctor";
-    const json = args.includes("--json");
-    if (args.includes("--help") || args.includes("-h") || subcommand === "help") {
-        console.log(SECURITY_USAGE);
-        return;
-    }
-    const connectedConfig = (0, utils_1.readConfig)();
-    const requiresEntitlement = !["pilot", "self-test"].includes(subcommand);
-    if (requiresEntitlement && (!connectedConfig || !(0, securityFeature_1.isAgentSecurityEnabled)(connectedConfig))) {
-        const detail = connectedConfig
-            ? `Agent Security is not enabled for ${connectedConfig.companyName}.`
-            : "Not connected. Run `codiedev connect` first.";
-        if (json)
-            console.log(JSON.stringify({ schemaVersion: 1, enabled: false, detail }, null, 2));
-        else
-            console.log(`\n${detail}\n`);
-        return;
-    }
-    if (subcommand === "inventory" || subcommand === "scan") {
-        const workspaceFlag = args.indexOf("--workspace");
-        const workspace = workspaceFlag >= 0 && args[workspaceFlag + 1]
-            ? args[workspaceFlag + 1]
-            : process.cwd();
-        const inventory = (0, securityInventory_1.buildSecurityInventory)({ workspace });
-        const deep = subcommand === "scan" && args.includes("--deep")
-            ? (0, securityDeepScan_1.runDeepSecurityScan)(inventory, {
-                workspace,
-                connectMcp: args.includes("--connect-mcp"),
-                supplyChain: args.includes("--supply-chain"),
-            })
-            : undefined;
-        const uploadableInventory = deep ? (0, securityDeepScan_1.mergeDeepScanFindings)(inventory, deep) : inventory;
-        let upload;
-        const config = (0, utils_1.readConfig)();
-        if (config && !args.includes("--no-upload")) {
-            try {
-                upload = await (0, securityInventory_1.uploadSecurityInventory)(uploadableInventory, config);
-            }
-            catch (error) {
-                if (!json)
-                    console.warn(`Inventory upload failed; local scan is still valid: ${error.message}`);
-            }
-        }
-        const output = { inventory: uploadableInventory, scanners: (0, securityInventory_1.scannerAvailability)(), ...(deep ? { deep } : {}), ...(upload ? { upload } : {}) };
-        if (json)
-            console.log(JSON.stringify(output, null, 2));
-        else {
-            const risky = inventory.components.filter((component) => component.findings.length > 0).length;
-            console.log(`\nCodiedev security inventory — ${inventory.components.length} components, ${risky} with local findings, ${inventory.drift.length} changed\n`);
-            const counts = new Map();
-            for (const component of inventory.components)
-                counts.set(component.kind, (counts.get(component.kind) ?? 0) + 1);
-            for (const [kind, count] of [...counts].sort())
-                console.log(`  ${kind}: ${count}`);
-            if (deep)
-                for (const run of deep.runs)
-                    console.log(`  ${run.scanner}: ${run.status} — ${run.detail}`);
-            if (upload)
-                console.log(`\nUploaded ${upload.accepted} component records to the security workspace.`);
-            console.log("\nUse --json for machine-readable hashes and findings. Use scan --deep for installed OSS scanners; --connect-mcp and --supply-chain are explicit because they start or download third-party code.\n");
-        }
-        return;
-    }
-    if (subcommand === "sync") {
-        const config = (0, utils_1.readConfig)();
-        if (!config) {
-            console.error("Not connected. Run `codiedev connect` first.");
-            process.exitCode = 1;
-            return;
-        }
-        try {
-            const policy = await (0, securityPolicy_1.syncEndpointSecurityPolicy)(config);
-            if (json)
-                console.log(JSON.stringify({ ok: true, policy }, null, 2));
-            else {
-                const verification = (0, securityPolicy_1.verifyEndpointSecurityPolicySignature)(policy);
-                console.log(`Security policy v${policy.policyVersion} synced (${policy.enforcementMode} mode; ${verification.detail}).`);
-            }
-        }
-        catch (error) {
-            console.error(`Security policy sync failed: ${error.message}`);
-            process.exitCode = 1;
-        }
-        return;
-    }
-    if (subcommand === "rollback") {
-        if (!args.includes("--yes")) {
-            console.error("Rollback overwrites the installed agent hook configurations. Re-run with `codiedev security rollback --yes` after confirming the snapshot shown by `codiedev doctor`.");
-            process.exitCode = 1;
-            return;
-        }
-        try {
-            const result = (0, securityInstall_1.restoreSecurityInstallSnapshot)((0, securityInstall_1.readSecurityInstallManifest)());
-            if (json)
-                console.log(JSON.stringify({ schemaVersion: 1, ok: true, ...result }, null, 2));
-            else
-                console.log(`Restored ${result.restored} hook configuration(s) from snapshot ${result.snapshotId}.`);
-        }
-        catch (error) {
-            console.error(`Rollback failed: ${error.message}`);
-            process.exitCode = 1;
-        }
-        return;
-    }
-    const ok = subcommand === "pilot" || subcommand === "self-test"
-        ? printPilot(json)
-        : subcommand === "doctor" || subcommand === "status"
-            ? printDoctor(json, connectedConfig.companyId)
-            : false;
-    if (!["pilot", "self-test", "doctor", "status"].includes(subcommand)) {
-        console.error(SECURITY_USAGE);
-    }
-    if (!ok)
-        process.exitCode = 1;
-}

package/dist/prUrl.js

@@ -1,28 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.parsePrOrMrUrl = parsePrOrMrUrl;
-function parsePrOrMrUrl(url) {
-    if (!url)
-        return null;
-    const gh = url.match(/^https?:\/\/([^/]+)\/([^/]+)\/([^/]+)\/pull\/(\d+)(?:[/?#]|$)/);
-    if (gh && /github/i.test(gh[1])) {
-        return {
-            provider: "github",
-            host: gh[1],
-            owner: gh[2],
-            repo: gh[3],
-            number: Number(gh[4]),
-        };
-    }
-    const gl = url.match(/^https?:\/\/([^/]+)\/(.+)\/([^/]+)\/-\/merge_requests\/(\d+)(?:[/?#]|$)/);
-    if (gl) {
-        return {
-            provider: "gitlab",
-            host: gl[1],
-            owner: gl[2],
-            repo: gl[3],
-            number: Number(gl[4]),
-        };
-    }
-    return null;
-}

package/dist/security.js

@@ -1,417 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SECURITY_RUNTIME_VERSION = void 0;
-exports.withEndpointIdentity = withEndpointIdentity;
-exports.evaluatePromptSecurity = evaluatePromptSecurity;
-exports.evaluateToolSecurity = evaluateToolSecurity;
-exports.securityInputHasSensitivePath = securityInputHasSensitivePath;
-exports.buildSecurityWorkflowEvent = buildSecurityWorkflowEvent;
-exports.buildSecurityPromptEvent = buildSecurityPromptEvent;
-exports.buildBlockedSecurityPromptEvent = buildBlockedSecurityPromptEvent;
-const crypto = __importStar(require("crypto"));
-exports.SECURITY_RUNTIME_VERSION = 1;
-function withEndpointIdentity(event, identity) {
-    return {
-        ...event,
-        ...(identity.endpointId ? { endpointId: identity.endpointId.slice(0, 240) } : {}),
-        ...(identity.endpointName ? { endpointName: identity.endpointName.slice(0, 240) } : {}),
-        ...(identity.cliVersion ? { cliVersion: identity.cliVersion.slice(0, 80) } : {}),
-        ...(typeof identity.securityRuntimeVersion === "number"
-            && Number.isInteger(identity.securityRuntimeVersion)
-            && identity.securityRuntimeVersion > 0
-            ? { securityRuntimeVersion: identity.securityRuntimeVersion }
-            : {}),
-        ...(typeof identity.securityPolicyVersion === "number"
-            && Number.isInteger(identity.securityPolicyVersion)
-            && identity.securityPolicyVersion > 0
-            ? { securityPolicyVersion: identity.securityPolicyVersion }
-            : {}),
-    };
-}
-function scopeMatches(value, candidate) {
-    const escaped = value.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
-    try {
-        return new RegExp(`^${escaped}$`, "i").test(candidate);
-    }
-    catch {
-        return false;
-    }
-}
-function effectivePolicyAction(policy, category, fallback, source, input) {
-    if (!policy)
-        return fallback;
-    const toolName = input?.tool_name ?? input?.toolName ?? "";
-    const cwd = input?.cwd ?? "";
-    const excepted = policy.exceptions.some((exception) => {
-        if (exception.scope === "company" || exception.scope === "user")
-            return true;
-        if (exception.scope === "category")
-            return scopeMatches(exception.scopeValue, category);
-        if (exception.scope === "source")
-            return !!source && scopeMatches(exception.scopeValue, source);
-        if (exception.scope === "tool")
-            return !!toolName && scopeMatches(exception.scopeValue, toolName);
-        if (exception.scope === "repository")
-            return !!cwd && scopeMatches(exception.scopeValue, cwd);
-        return false;
-    });
-    if (excepted)
-        return "allow";
-    const configured = policy.rules[category] ?? fallback;
-    return policy.enforcementMode === "alert" && configured === "block" ? "alert" : configured;
-}
-function policyActionPrefix(action) {
-    if (action === "block")
-        return "Codie blocked";
-    if (action === "alert")
-        return "Codie detected";
-    return "Codie detected but allowed";
-}
-const SECRET_KEY = /(?:api[_-]?key|access[_-]?token|auth[_-]?token|password|passwd|secret|private[_-]?key|client[_-]?secret)/i;
-const SECRET_VALUE_PATTERNS = [
-    /\b(?:sk|rk|pk)-(?:live|test|proj)?[-_A-Za-z0-9]{16,}\b/g,
-    /\bgh[opusr]_[A-Za-z0-9]{20,}\b/g,
-    /\bAKIA[0-9A-Z]{16}\b/g,
-    /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/g,
-    /\bBearer\s+[A-Za-z0-9._~+\/-]{16,}=*\b/gi,
-];
-const SECRET_ASSIGNMENT = /\b([A-Z][A-Z0-9_]*(?:API_KEY|ACCESS_KEY|TOKEN|SECRET|PASSWORD|PASSWD|PRIVATE_KEY|CLIENT_SECRET|DATABASE_URL))\s*[:=]\s*["']?([^\s"'`]{8,})/gi;
-const SENSITIVE_PATH = /(?:~\/\.ssh\/(?:id_[a-z0-9_-]+)|(?:^|\/)\.env(?:\.[a-z0-9_-]+)?|(?:^|\/)\.aws\/credentials|(?:^|\/)\.config\/gcloud\/application_default_credentials\.json)(?=$|[\/\s"'])/i;
-const PROTECTED_AGENT_CONFIG = /(?:^|[\/\s"'])\.(?:claude\/(?:settings(?:\.local)?\.json|hooks)|codex\/(?:config\.toml|hooks\.json)|cursor\/(?:mcp\.json|rules)|config\/opencode\/(?:opencode\.json|plugins))(?=$|[\s"'\/])/i;
-function looksLikePlaceholder(value) {
-    return (/^\$\{?[A-Z][A-Z0-9_]*\}?$/.test(value) ||
-        /^(?:your|example|sample|dummy|fake|replace|redacted|changeme)[-_\[]/i.test(value) ||
-        /^\[(?:redacted|secret|value)\]$/i.test(value) ||
-        /^<[^>]+>$/.test(value));
-}
-function containsSecretValue(text) {
-    for (const pattern of SECRET_VALUE_PATTERNS) {
-        pattern.lastIndex = 0;
-        if (pattern.test(text)) {
-            pattern.lastIndex = 0;
-            return true;
-        }
-        pattern.lastIndex = 0;
-    }
-    SECRET_ASSIGNMENT.lastIndex = 0;
-    let match;
-    while ((match = SECRET_ASSIGNMENT.exec(text)) !== null) {
-        if (!looksLikePlaceholder(match[2])) {
-            SECRET_ASSIGNMENT.lastIndex = 0;
-            return true;
-        }
-    }
-    SECRET_ASSIGNMENT.lastIndex = 0;
-    return false;
-}
-function evaluatePromptSecurity(prompt, policy, source) {
-    if (!prompt || !containsSecretValue(prompt))
-        return { action: "allow" };
-    const action = effectivePolicyAction(policy, "secret_in_prompt", "block", source);
-    return {
-        action,
-        category: "secret_in_prompt",
-        reason: policyActionPrefix(action) + " this prompt because it appears to contain an API key, password, or credential. Remove the secret value and reference the environment variable by name instead (for example, $OPENAI_API_KEY).",
-    };
-}
-function serializedToolInput(input) {
-    const value = input.tool_input ?? input.toolInput;
-    if (typeof value === "string")
-        return value;
-    try {
-        return JSON.stringify(value ?? "");
-    }
-    catch {
-        return "";
-    }
-}
-function toolCommand(input) {
-    const value = input.tool_input ?? input.toolInput;
-    if (value && typeof value === "object" && typeof value.command === "string") {
-        return value.command;
-    }
-    return typeof value === "string" ? value : "";
-}
-function isWriteOperation(input, serialized) {
-    const tool = String(input.tool_name ?? input.toolName ?? "").toLowerCase();
-    return /(?:^|[_-])(?:write|edit|patch|move|rename)(?:$|[_-])/.test(tool) ||
-        (/\b(?:tee|cp|mv|install)\b|(?:^|[^>])>{1,2}(?:[^>]|$)/.test(serialized) && /(?:bash|shell|terminal|exec)/.test(tool));
-}
-function networkHosts(text) {
-    const hosts = [];
-    for (const match of text.matchAll(/https?:\/\/([^\s/"'`]+)/gi))
-        hosts.push(match[1].replace(/:\d+$/, "").toLowerCase());
-    return [...new Set(hosts)];
-}
-function allowedByPatterns(candidate, patterns) {
-    return Boolean(patterns?.some((pattern) => scopeMatches(pattern, candidate)));
-}
-function mcpServerName(input) {
-    const tool = String(input.tool_name ?? input.toolName ?? "");
-    return tool.match(/^mcp__(.+?)__/)?.[1] ?? tool.match(/^mcp[.:/]([^.:/]+)/i)?.[1] ?? null;
-}
-function rootCommand(command) {
-    const cleaned = command.trim().replace(/^(?:sudo\s+|env\s+(?:[A-Za-z_][A-Za-z0-9_]*=[^\s]+\s+)*)/, "");
-    return cleaned.match(/^([A-Za-z0-9_./+-]+)/)?.[1]?.split("/").pop() ?? null;
-}
-function destructiveTargetOutsideWorkspace(command, cwd) {
-    const match = command.match(/\brm\s+(?:-[a-zA-Z]*r[a-zA-Z]*f[a-zA-Z]*|-[a-zA-Z]*f[a-zA-Z]*r[a-zA-Z]*)\s+(?:--\s+)?([^\s;&|]+)/);
-    if (!match)
-        return false;
-    const target = match[1].replace(/^['"]|['"]$/g, "");
-    if (["/", "~", "$HOME", "${HOME}", "..", "../"].includes(target))
-        return true;
-    if (target.startsWith("~/") || target.startsWith("../"))
-        return true;
-    if (!target.startsWith("/") || !cwd)
-        return false;
-    const normalizedCwd = cwd.replace(/\/+$/, "");
-    return target !== normalizedCwd && !target.startsWith(`${normalizedCwd}/`);
-}
-function evaluateToolSecurity(input, phase, policy, source, sessionContext) {
-    if (phase !== "pre")
-        return { action: "allow" };
-    const serialized = serializedToolInput(input);
-    if (!serialized)
-        return { action: "allow" };
-    if (destructiveTargetOutsideWorkspace(serialized, input.cwd)) {
-        const action = effectivePolicyAction(policy, "destructive_outside_workspace", "block", source, input);
-        return {
-            action,
-            category: "destructive_outside_workspace",
-            reason: policyActionPrefix(action) + " a destructive command targeting files outside the approved workspace.",
-        };
-    }
-    const hasNetworkEgress = /\b(?:curl|wget)\b|https?:\/\//i.test(serialized);
-    if (hasNetworkEgress && containsSecretValue(serialized)) {
-        const action = effectivePolicyAction(policy, "secret_exfiltration", "block", source, input);
-        return {
-            action,
-            category: "secret_exfiltration",
-            reason: policyActionPrefix(action) + " a command that would send credential material to an external destination.",
-        };
-    }
-    if (hasNetworkEgress &&
-        sessionContext?.sensitiveReadAt &&
-        (sessionContext.now ?? Date.now()) - sessionContext.sensitiveReadAt <= 5 * 60_000) {
-        return {
-            action: effectivePolicyAction(policy, "sensitive_read_then_egress", "alert", source, input),
-            category: "sensitive_read_then_egress",
-            reason: "Codie observed network egress shortly after this session read a credential-bearing file.",
-        };
-    }
-    const writeOperation = isWriteOperation(input, serialized);
-    if (writeOperation && SENSITIVE_PATH.test(serialized)) {
-        const action = effectivePolicyAction(policy, "sensitive_file_write", "block", source, input);
-        return {
-            action,
-            category: "sensitive_file_write",
-            reason: policyActionPrefix(action) + " a write to a credential-bearing file.",
-        };
-    }
-    if (writeOperation && PROTECTED_AGENT_CONFIG.test(serialized)) {
-        const action = effectivePolicyAction(policy, "protected_agent_config_write", "block", source, input);
-        return {
-            action,
-            category: "protected_agent_config_write",
-            reason: policyActionPrefix(action) + " an agent modifying its own hooks, policy, MCP, or instruction configuration.",
-        };
-    }
-    const server = mcpServerName(input);
-    if (server && policy?.constraints?.allowedMcpServers?.length && !allowedByPatterns(server, policy.constraints.allowedMcpServers)) {
-        return {
-            action: effectivePolicyAction(policy, "untrusted_mcp_tool", "alert", source, input),
-            category: "untrusted_mcp_tool",
-            reason: `Codie observed a tool call from MCP server “${server}”, which is not in the approved component list.`,
-        };
-    }
-    const hosts = networkHosts(serialized);
-    const unapprovedHost = hosts.find((host) => policy?.constraints?.allowedHosts?.length && !allowedByPatterns(host, policy.constraints.allowedHosts));
-    if (unapprovedHost) {
-        return {
-            action: effectivePolicyAction(policy, "unapproved_network_egress", "alert", source, input),
-            category: "unapproved_network_egress",
-            reason: `Codie observed network egress to unapproved host “${unapprovedHost}”.`,
-        };
-    }
-    const command = toolCommand(input);
-    if (/\b(?:base64\s+(?:-[a-z]*d|--decode)|openssl\s+enc\s+-d)[^|;&]*(?:\||&&)\s*(?:sh|bash|zsh)\b|\beval\s+["']?\$\(/i.test(command)) {
-        return {
-            action: effectivePolicyAction(policy, "obfuscated_shell_command", "alert", source, input),
-            category: "obfuscated_shell_command",
-            reason: "Codie observed an encoded or dynamically evaluated shell payload.",
-        };
-    }
-    if (/\b(?:npm|pnpm|yarn|pipx?|uv|gem|cargo)\s+(?:add|install|i)\b/i.test(command)) {
-        return {
-            action: effectivePolicyAction(policy, "package_install", "alert", source, input),
-            category: "package_install",
-            reason: "Codie observed a package installation. Verify the package source and pinned version.",
-        };
-    }
-    const commandName = rootCommand(command);
-    if (commandName && policy?.constraints?.allowedCommands?.length && !allowedByPatterns(commandName, policy.constraints.allowedCommands)) {
-        return {
-            action: effectivePolicyAction(policy, "unapproved_command", "alert", source, input),
-            category: "unapproved_command",
-            reason: `Codie observed command “${commandName}”, which is not in the approved command list.`,
-        };
-    }
-    if (SENSITIVE_PATH.test(serialized)) {
-        return {
-            action: effectivePolicyAction(policy, "sensitive_file_read", "alert", source, input),
-            category: "sensitive_file_read",
-            reason: "Codie observed access to a sensitive credential file. This policy is alert-only.",
-        };
-    }
-    return { action: "allow" };
-}
-function securityInputHasSensitivePath(input) {
-    return SENSITIVE_PATH.test(serializedToolInput(input));
-}
-function fingerprint(value) {
-    return crypto.createHash("sha256").update(value).digest("hex").slice(0, 12);
-}
-function redactString(value) {
-    let count = 0;
-    let redacted = value;
-    for (const pattern of SECRET_VALUE_PATTERNS) {
-        redacted = redacted.replace(pattern, (match) => {
-            count += 1;
-            return `[REDACTED_SECRET:${fingerprint(match)}]`;
-        });
-    }
-    if (redacted.length > 16_384)
-        redacted = `${redacted.slice(0, 16_384)}[TRUNCATED]`;
-    return { value: redacted, count };
-}
-function redact(value, key = "", depth = 0) {
-    if (depth > 8)
-        return { value: "[TRUNCATED_DEPTH]", count: 0 };
-    if (SECRET_KEY.test(key) && value !== null && value !== undefined) {
-        const text = typeof value === "string" ? value : JSON.stringify(value);
-        return { value: `[REDACTED_SECRET:${fingerprint(text)}]`, count: 1 };
-    }
-    if (typeof value === "string")
-        return redactString(value);
-    if (Array.isArray(value)) {
-        let count = 0;
-        const next = value.slice(0, 200).map((item) => {
-            const result = redact(item, key, depth + 1);
-            count += result.count;
-            return result.value;
-        });
-        return { value: next, count };
-    }
-    if (value && typeof value === "object") {
-        let count = 0;
-        const next = {};
-        for (const [childKey, childValue] of Object.entries(value).slice(0, 200)) {
-            const result = redact(childValue, childKey, depth + 1);
-            count += result.count;
-            next[childKey] = result.value;
-        }
-        return { value: next, count };
-    }
-    return { value, count: 0 };
-}
-function buildSecurityWorkflowEvent(input, phase, source, now = Date.now) {
-    const sessionId = input.session_id ?? input.sessionId ?? "";
-    const toolName = input.tool_name ?? input.toolName ?? "";
-    if (!sessionId || !toolName)
-        return null;
-    const rawPayload = {
-        input: input.tool_input ?? input.toolInput,
-        ...(phase === "post" ? { response: input.tool_response ?? input.toolResponse } : {}),
-        ...(phase === "failure" ? { error: input.error ?? input.tool_response ?? input.toolResponse } : {}),
-    };
-    const sanitized = redact(rawPayload);
-    const duration = input.duration_ms ?? input.durationMs;
-    return {
-        schemaVersion: 1,
-        source,
-        phase,
-        sessionId,
-        toolName,
-        toolUseId: input.tool_use_id ?? input.toolUseId,
-        cwd: input.cwd,
-        observedAt: now(),
-        toolDurationMs: typeof duration === "number" && Number.isFinite(duration) ? duration : undefined,
-        payload: sanitized.value,
-        redactionCount: sanitized.count,
-    };
-}
-function buildSecurityPromptEvent(input, source, now = Date.now, policy) {
-    const sessionId = input.session_id ?? input.sessionId ?? "";
-    if (!sessionId || !input.prompt) {
-        return null;
-    }
-    const decision = evaluatePromptSecurity(input.prompt, policy, source);
-    if (decision.action === "block")
-        return null;
-    const sanitized = redact({ prompt: input.prompt });
-    return {
-        schemaVersion: 1,
-        source,
-        phase: "pre",
-        sessionId,
-        toolName: "UserPrompt",
-        cwd: input.cwd,
-        observedAt: now(),
-        payload: sanitized.value,
-        redactionCount: sanitized.count,
-        localDecision: decision.action === "alert" ? "alert" : undefined,
-        localCategory: decision.action === "alert" ? decision.category : undefined,
-    };
-}
-function buildBlockedSecurityPromptEvent(input, source, category, now = Date.now) {
-    const sessionId = input.session_id ?? input.sessionId ?? "";
-    if (!sessionId)
-        return null;
-    return {
-        schemaVersion: 1,
-        source,
-        phase: "pre",
-        sessionId,
-        toolName: "UserPrompt",
-        cwd: input.cwd,
-        observedAt: now(),
-        payload: { blocked: true, content: "[REDACTED_BLOCKED_PROMPT]" },
-        redactionCount: 1,
-        localDecision: "block",
-        localCategory: category,
-    };
-}