configproof 0.3.0

package/dist/core/collect.js

@@ -0,0 +1,147 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.coverageFor = coverageFor;
+exports.collectTrace = collectTrace;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const schema_1 = require("./schema");
+const io_1 = require("./io");
+function coverageFor(notices) {
+    const has = (n) => notices.includes(n);
+    return [
+        { feature: 'environment', status: 'limited', reasons: ['original_reference_bypass', ...(has('environment_replaced') ? ['environment_replaced'] : [])] },
+        { feature: 'startup', status: 'limited', reasons: ['startup_history_unknown', 'early_preloads_possible'] },
+        { feature: 'dotenv', status: has('dotenv_attached') ? 'limited' : 'not-observed', reasons: notices.filter(n => n.startsWith('dotenv_')) },
+        { feature: 'source-maps', status: has('source_maps_requested') ? 'limited' : 'not-observed', reasons: [has('source_maps_requested') ? 'source_maps_requested' : 'source_maps_opt_in'] },
+        { feature: 'children', status: has('children_opt_in') ? 'limited' : 'unsupported', reasons: notices.filter(n => n.startsWith('child') || n === 'sync_children_unobserved') },
+        { feature: 'native-env', status: has('native_env_attached') ? 'limited' : 'not-observed', reasons: notices.filter(n => n.startsWith('native_env_')) },
+        { feature: 'native', status: 'unsupported', reasons: ['native_access_unobserved'] },
+        { feature: 'workers', status: has('workers_opt_in') || has('worker_attached') ? 'limited' : 'unsupported', reasons: notices.filter(n => n.startsWith('worker')) },
+        { feature: 'adapters', status: has('custom_adapter_loaded') ? 'limited' : 'not-observed', reasons: notices.filter(n => n === 'custom_adapter_loaded' || n === 'adapter_failed') },
+    ];
+}
+/** Recover complete records without pretending that interrupted/malformed tails are complete. */
+function collectTrace(config, result) {
+    const notices = new Set(['capture_unverified']);
+    const processes = [];
+    const events = [];
+    const adapters = [];
+    let aggregate = 0;
+    let files = [];
+    try {
+        files = node_fs_1.default.readdirSync(config.directory).filter(name => /^p_[a-f0-9]{24}\.jsonl$/.test(name));
+    }
+    catch {
+        notices.add('recorder_failed');
+    }
+    files.sort((a, b) => a.startsWith(config.rootId) ? -1 : b.startsWith(config.rootId) ? 1 : a.localeCompare(b));
+    if (files.length > schema_1.MAX_PROCESSES)
+        notices.add('process_limit');
+    for (const file of files.slice(0, schema_1.MAX_PROCESSES)) {
+        let raw;
+        try {
+            raw = (0, io_1.readBounded)(node_path_1.default.join(config.directory, file), config.maxBytes);
+        }
+        catch {
+            notices.add('invalid_stream');
+            continue;
+        }
+        aggregate += Buffer.byteLength(raw);
+        if (aggregate > schema_1.MAX_ARTIFACT_BYTES / 2) {
+            notices.add('aggregate_limit');
+            break;
+        }
+        let info;
+        let ended = false;
+        let sequence = -1;
+        const seen = new Map();
+        for (const line of raw.split('\n')) {
+            if (!line)
+                continue;
+            try {
+                const record = schema_1.StreamRecordSchema.parse(JSON.parse(line));
+                if (ended) {
+                    notices.add('invalid_stream');
+                    break;
+                }
+                if (record.type === 'start') {
+                    if (info || record.process.id + '.jsonl' !== file) {
+                        notices.add('invalid_stream');
+                        break;
+                    }
+                    info = { ...record.process, ended: false, exitCode: null };
+                    processes.push(info);
+                }
+                else if (!info) {
+                    notices.add('invalid_stream');
+                    break;
+                }
+                else if (record.type === 'notice')
+                    notices.add(record.notice);
+                else if (record.type === 'adapter') {
+                    if (record.declaration.processId !== info.id || adapters.length >= 512)
+                        notices.add('invalid_stream');
+                    else
+                        adapters.push(record.declaration);
+                }
+                else if (record.type === 'end') {
+                    info.ended = true;
+                    info.exitCode = record.exitCode;
+                    info.eventsDropped = record.eventsDropped;
+                    ended = true;
+                    if (record.eventsDropped)
+                        notices.add('events_dropped');
+                }
+                else {
+                    const e = record.event;
+                    if (e.processId !== info.id || e.id !== `${info.id}:${e.seq}` || e.seq <= sequence || seen.has(e.id)) {
+                        notices.add('invalid_stream');
+                        break;
+                    }
+                    sequence = e.seq;
+                    if (events.length >= schema_1.MAX_EVENTS) {
+                        notices.add('aggregate_limit');
+                        continue;
+                    }
+                    if (e.causedBy && (!seen.has(e.causedBy) || seen.get(e.causedBy)?.key !== e.key)) {
+                        delete e.causedBy;
+                        e.origin = { kind: 'unknown', confidence: 'unknown' };
+                        notices.add('invalid_stream');
+                    }
+                    seen.set(e.id, e);
+                    events.push(e);
+                }
+            }
+            catch {
+                notices.add('invalid_stream');
+                break;
+            }
+        }
+        if (!ended)
+            notices.add('missing_footer');
+    }
+    const ids = new Set(processes.map(p => p.id));
+    for (const e of events)
+        if (['child-spawn', 'worker-spawn'].includes(e.operation) && e.outcome === 'spawned' && e.childId && !ids.has(e.childId))
+            notices.add('missing_footer');
+    if (processes.some(p => p.role === 'worker' && !p.ended))
+        notices.add('worker_outlived_root');
+    for (const e of events)
+        if (e.operation === 'worker-spawn' && e.outcome === 'spawned' && e.childId && !ids.has(e.childId))
+            notices.add('worker_unconfirmed');
+    if (processes.some(p => p.role === 'child' && !p.ended))
+        notices.add('child_outlived_root');
+    const partialReasons = ['events_dropped', 'event_limit', 'byte_limit', 'key_limit', 'recorder_failed', 'missing_footer', 'invalid_stream', 'process_limit', 'aggregate_limit', 'child_outlived_root', 'environment_replaced', 'adapter_failed', 'worker_outlived_root', 'worker_unconfirmed'];
+    const rootFound = processes.some(p => p.id === config.rootId);
+    const status = !rootFound ? 'failed' : partialReasons.some(n => notices.has(n)) ? 'partial' : 'complete';
+    return {
+        schemaVersion: schema_1.SCHEMA_VERSION, toolVersion: schema_1.TOOL_VERSION, id: config.runId,
+        comparison: { domainId: config.comparison.domainId, mode: 'hmac-sha256' },
+        capture: { status, watch: config.watch, caseMode: process.platform === 'win32' ? 'insensitive' : 'sensitive', maxEventsPerProcess: config.maxEvents, notices: [...notices] },
+        result, processes, events, adapters, coverage: coverageFor([...notices]), exported: false,
+    };
+}
+//# sourceMappingURL=collect.js.map

package/dist/core/collect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collect.js","sourceRoot":"","sources":["../../src/core/collect.ts"],"names":[],"mappings":";;;;;AAOA,kCAaC;AAGD,oCAoEC;AA3FD,sDAAyB;AACzB,0DAA6B;AAC7B,qCACwH;AACxH,6BAAmC;AAGnC,SAAgB,WAAW,CAAC,OAAiB;IAC3C,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO;QACL,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,2BAA2B,EAAE,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,sBAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAChK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,EAAE;QAC1G,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE;QACzI,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE;QACvL,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,0BAA0B,CAAC,EAAE;QAC5K,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE;QACrJ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,0BAA0B,CAAC,EAAE;QACnF,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE;QACjK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,uBAAuB,IAAI,CAAC,KAAK,gBAAgB,CAAC,EAAE;KAClL,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,SAAgB,YAAY,CAAC,MAAqB,EAAE,MAAuB;IACzE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACxD,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QAAC,KAAK,GAAG,iBAAE,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IACtG,MAAM,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9G,IAAI,KAAK,CAAC,MAAM,GAAG,sBAAa;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAa,CAAC,EAAE,CAAC;QACjD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YAAC,GAAG,GAAG,IAAA,gBAAW,EAAC,mBAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAC9E,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClD,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,2BAAkB,GAAG,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;QAClF,IAAI,IAA6B,CAAC;QAClC,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,2BAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1D,IAAI,KAAK,EAAE,CAAC;oBAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBACpD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5B,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,QAAQ,KAAK,IAAI,EAAE,CAAC;wBAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;wBAAC,MAAM;oBAAC,CAAC;oBAC5F,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;oBAC3D,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvB,CAAC;qBAAM,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;qBACtD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;qBACzD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACnC,IAAI,MAAM,CAAC,WAAW,CAAC,SAAS,KAAK,IAAI,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;wBAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;;wBACjG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBACzC,CAAC;qBACI,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;oBAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;oBAAC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAAC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;oBAAC,KAAK,GAAG,IAAI,CAAC;oBAC5G,IAAI,MAAM,CAAC,aAAa;wBAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC1D,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;oBACvB,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;wBAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;wBAAC,MAAM;oBAAC,CAAC;oBAC/I,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC;oBACjB,IAAI,MAAM,CAAC,MAAM,IAAI,mBAAU,EAAE,CAAC;wBAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBAC9E,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;wBACjF,OAAO,CAAC,CAAC,QAAQ,CAAC;wBAAC,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;wBAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;oBAC1G,CAAC;oBACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBAClB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChL,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC9F,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,IAAI,CAAC,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC7J,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAa,CAAC,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;IACxS,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IACzG,OAAO;QACL,aAAa,EAAE,uBAAc,EAAE,WAAW,EAAE,qBAAY,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK;QAC1E,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE;QACzE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,mBAAmB,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE;QAC5K,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK;KAC1F,CAAC;AACJ,CAAC"}

package/dist/core/export.d.ts

@@ -0,0 +1,53 @@
+import { z } from 'zod';
+import { type Trace } from './schema';
+export declare const ExportPolicySchema: z.ZodObject<{
+    paths: z.ZodDefault<z.ZodEnum<["relative", "basename", "omit"]>>;
+    keys: z.ZodDefault<z.ZodObject<{
+        redact: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        redact: string[];
+    }, {
+        redact?: string[] | undefined;
+    }>>;
+    include: z.ZodDefault<z.ZodObject<{
+        callSites: z.ZodDefault<z.ZodBoolean>;
+        loaders: z.ZodDefault<z.ZodBoolean>;
+        comparisons: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        callSites: boolean;
+        loaders: boolean;
+        comparisons: boolean;
+    }, {
+        callSites?: boolean | undefined;
+        loaders?: boolean | undefined;
+        comparisons?: boolean | undefined;
+    }>>;
+    metadata: z.ZodDefault<z.ZodEnum<["minimal", "keep"]>>;
+}, "strict", z.ZodTypeAny, {
+    keys: {
+        redact: string[];
+    };
+    paths: "relative" | "basename" | "omit";
+    include: {
+        callSites: boolean;
+        loaders: boolean;
+        comparisons: boolean;
+    };
+    metadata: "minimal" | "keep";
+}, {
+    keys?: {
+        redact?: string[] | undefined;
+    } | undefined;
+    paths?: "relative" | "basename" | "omit" | undefined;
+    include?: {
+        callSites?: boolean | undefined;
+        loaders?: boolean | undefined;
+        comparisons?: boolean | undefined;
+    } | undefined;
+    metadata?: "minimal" | "keep" | undefined;
+}>;
+export type ExportPolicy = z.infer<typeof ExportPolicySchema>;
+export declare function readExportPolicy(file?: string): ExportPolicy;
+/** Sanitization cannot certify arbitrary metadata as non-sensitive. Review exports before sharing. */
+export declare function sanitizeTraces(inputs: Trace[], suppliedPolicy: ExportPolicy): Trace[];
+export declare function exportArtifacts(traces: Trace[], out: string, policy: ExportPolicy): string[];

package/dist/core/export.js

@@ -0,0 +1,155 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExportPolicySchema = void 0;
+exports.readExportPolicy = readExportPolicy;
+exports.sanitizeTraces = sanitizeTraces;
+exports.exportArtifacts = exportArtifacts;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_crypto_1 = require("node:crypto");
+const yaml_1 = require("yaml");
+const zod_1 = require("zod");
+const schema_1 = require("./schema");
+const privacy_1 = require("./privacy");
+const io_1 = require("./io");
+const html_1 = require("../report/html");
+const analyze_1 = require("./analyze");
+exports.ExportPolicySchema = zod_1.z.object({
+    paths: zod_1.z.enum(['relative', 'basename', 'omit']).default('basename'),
+    keys: zod_1.z.object({ redact: zod_1.z.array(zod_1.z.string().max(128)).max(64).default(['*']) }).strict().default({ redact: ['*'] }),
+    include: zod_1.z.object({ callSites: zod_1.z.boolean().default(true), loaders: zod_1.z.boolean().default(true), comparisons: zod_1.z.boolean().default(true) }).strict()
+        .default({ callSites: true, loaders: true, comparisons: true }),
+    metadata: zod_1.z.enum(['minimal', 'keep']).default('minimal'),
+}).strict();
+function readExportPolicy(file) {
+    if (!file)
+        return exports.ExportPolicySchema.parse({});
+    try {
+        const document = (0, yaml_1.parseDocument)((0, io_1.readBounded)(file, 65536), { uniqueKeys: true, schema: 'core', strict: true });
+        if (document.errors.length)
+            throw new Error('Invalid policy');
+        return exports.ExportPolicySchema.parse(document.toJS({ maxAliasCount: 0 }));
+    }
+    catch (error) {
+        if (error instanceof io_1.UserError)
+            throw error;
+        throw new io_1.UserError('Invalid export policy. Unknown fields and YAML aliases are not allowed.', 65);
+    }
+}
+/** Sanitization cannot certify arbitrary metadata as non-sensitive. Review exports before sharing. */
+function sanitizeTraces(inputs, suppliedPolicy) {
+    const policy = exports.ExportPolicySchema.parse(suppliedPolicy);
+    const traces = inputs.map(t => schema_1.TraceSchema.parse(t));
+    if (!traces.length || traces.length > 2)
+        throw new io_1.UserError('Export accepts one trace or one deliberately paired set.');
+    if (traces.length === 2 && policy.include.comparisons &&
+        (traces[0].comparison.mode === 'none' || traces[0].comparison.mode !== traces[1].comparison.mode || traces[0].comparison.domainId !== traces[1].comparison.domainId)) {
+        throw new io_1.UserError('Pair export cannot establish equality across unrelated comparison domains. Export separately or disable comparisons.', 65);
+    }
+    const salt = (0, node_crypto_1.randomBytes)(32);
+    const domainId = (0, io_1.uniqueId)('share');
+    const keyMap = new Map();
+    const patterns = policy.keys.redact.map(p => (0, privacy_1.globToRegex)(p, traces.some(t => t.capture.caseMode === 'insensitive')));
+    const names = [...new Set(traces.flatMap(t => [...t.events.flatMap(e => e.key ? [e.key] : []), ...t.capture.watch.filter(k => !/[*?]/.test(k))]))].sort();
+    const occupied = new Set(names.map(n => n.toUpperCase()));
+    let aliasNumber = 0;
+    for (const name of names) {
+        let alias = name;
+        if (patterns.some(p => p.test(name))) {
+            do {
+                alias = `KEY_${++aliasNumber}`;
+            } while (occupied.has(alias.toUpperCase()));
+            occupied.add(alias.toUpperCase());
+        }
+        keyMap.set(name, alias);
+    }
+    const maskPath = (file) => {
+        if (policy.paths === 'omit')
+            return undefined;
+        if (file.startsWith('<external:'))
+            return '<external>';
+        if (node_path_1.default.isAbsolute(file) || node_path_1.default.win32.isAbsolute(file) || file.split(/[/\\]/).includes('..') || /^[a-z]+:\/\//i.test(file))
+            return '<outside-project>';
+        return policy.paths === 'basename' ? file.split(/[/\\]/).at(-1) || '<unknown>' : file;
+    };
+    return traces.map(trace => {
+        const pids = new Map(trace.processes.map((p, i) => [p.id, `p${i + 1}`]));
+        const kept = trace.events.filter(e => policy.include.loaders || !['candidate', 'skip', 'load'].includes(e.operation));
+        const ids = new Map(kept.map(e => [e.id, `${pids.get(e.processId)}:${e.seq}`]));
+        const mask = (value, originalKey) => {
+            if (!value || value.state !== 'present')
+                return value ? { ...value } : undefined;
+            if (!policy.include.comparisons)
+                return { state: 'omitted' };
+            return { state: 'present', empty: value.empty, token: (0, node_crypto_1.createHmac)('sha256', salt).update(JSON.stringify([trace.comparison.domainId, originalKey, value.token])).digest('hex') };
+        };
+        const events = kept.map(e => {
+            let origin = e.origin ? { ...e.origin, file: e.origin.file ? maskPath(e.origin.file) : undefined } : undefined;
+            if (!policy.include.loaders && origin && ['dotenv', 'native-env', 'adapter'].includes(origin.kind))
+                origin = { kind: 'unknown', confidence: 'unknown', file: undefined };
+            const siteFile = e.site?.file ? maskPath(e.site.file) : undefined;
+            return { ...e, id: ids.get(e.id), processId: pids.get(e.processId),
+                childId: e.childId ? pids.get(e.childId) : undefined,
+                key: e.key ? keyMap.get(e.key) : undefined,
+                value: mask(e.value, e.key || ''), before: mask(e.before, e.key || ''), candidate: mask(e.candidate, e.key || ''),
+                causedBy: e.causedBy ? ids.get(e.causedBy) : undefined, origin,
+                site: policy.include.callSites && e.site && siteFile ? { ...e.site, file: siteFile } : undefined, };
+        });
+        const extra = ['metadata_scrubbed'];
+        if (!policy.include.comparisons)
+            extra.push('comparison_removed');
+        if (!policy.include.loaders)
+            extra.push('loader_details_removed');
+        if (!policy.include.callSites)
+            extra.push('call_sites_removed');
+        const clean = {
+            schemaVersion: trace.schemaVersion, toolVersion: trace.toolVersion, id: (0, io_1.uniqueId)('r'),
+            comparison: { domainId, mode: policy.include.comparisons ? 'export-hmac' : 'none' },
+            capture: { ...trace.capture, watch: [...new Set(events.flatMap(e => e.key ? [e.key] : []))].slice(0, 256),
+                caseMode: trace.capture.caseMode, notices: [...new Set([...trace.capture.notices, ...extra])] },
+            result: { ...trace.result }, coverage: trace.coverage.map(c => ({ ...c, reasons: [...c.reasons] })),
+            processes: trace.processes.map(p => ({ ...p, id: pids.get(p.id), parentId: p.parentId ? pids.get(p.parentId) : undefined,
+                pid: policy.metadata === 'keep' ? p.pid : null, ppid: policy.metadata === 'keep' ? p.ppid : null,
+                threadId: policy.metadata === 'keep' ? p.threadId : undefined,
+                startedAt: policy.metadata === 'keep' ? p.startedAt : undefined, entry: maskPath(p.entry) || '<omitted>' })),
+            adapters: policy.metadata === 'keep' ? trace.adapters?.map(a => ({ ...a, processId: pids.get(a.processId) })) : undefined,
+            events, exported: true,
+        };
+        return schema_1.TraceSchema.parse(clean);
+    });
+}
+function exportArtifacts(traces, out, policy) {
+    const clean = sanitizeTraces(traces, policy);
+    if (clean.length === 1) {
+        (0, io_1.writeTrace)(out, clean[0]);
+        return [out];
+    }
+    const directory = node_path_1.default.resolve(out);
+    try {
+        node_fs_1.default.mkdirSync(directory, { recursive: false, mode: 0o700 });
+    }
+    catch {
+        throw new io_1.UserError('Pair-export output must be a new directory whose parent already exists.', 74);
+    }
+    try {
+        const a = node_path_1.default.join(directory, 'run-a.ct.json'), b = node_path_1.default.join(directory, 'run-b.ct.json');
+        (0, io_1.writeTrace)(a, clean[0]);
+        (0, io_1.writeTrace)(b, clean[1]);
+        const report = node_path_1.default.join(directory, 'comparison.html');
+        (0, io_1.writeNew)(report, (0, html_1.renderDiffHtml)(clean[0], clean[1], (0, analyze_1.diffTraces)(clean[0], clean[1])));
+        const manifest = node_path_1.default.join(directory, 'manifest.json');
+        (0, io_1.writeNew)(manifest, JSON.stringify({ schemaVersion: 'configtrace-share/1', reviewRequired: true,
+            files: ['run-a.ct.json', 'run-b.ct.json', 'comparison.html'],
+            policySummary: { paths: policy.paths, keyNames: 'policy-applied', metadata: policy.metadata, ...policy.include },
+            warning: 'Inspect key names, paths and application metadata before sharing. This is not a universal secret-safety certificate.' }, null, 2) + '\n');
+        return [a, b, report, manifest];
+    }
+    catch (error) {
+        node_fs_1.default.rmSync(directory, { recursive: true, force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=export.js.map

package/dist/core/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../src/core/export.ts"],"names":[],"mappings":";;;;;;AAmBA,4CAUC;AAGD,wCAqEC;AAED,0CAkBC;AAzHD,sDAAyB;AACzB,0DAA6B;AAC7B,6CAAsD;AACtD,+BAAqC;AACrC,6BAAwB;AACxB,qCAAkG;AAClG,uCAAwC;AACxC,6BAA8E;AAC9E,yCAAgD;AAChD,uCAAuC;AAE1B,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACnE,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACnH,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;SAC7I,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACjE,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;CACzD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,SAAgB,gBAAgB,CAAC,IAAa;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,0BAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,oBAAa,EAAC,IAAA,gBAAW,EAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7G,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC9D,OAAO,0BAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAS;YAAE,MAAM,KAAK,CAAC;QAC5C,MAAM,IAAI,cAAS,CAAC,yEAAyE,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,SAAgB,cAAc,CAAC,MAAe,EAAE,cAA4B;IAC1E,MAAM,MAAM,GAAG,0BAAkB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,cAAS,CAAC,0DAA0D,CAAC,CAAC;IACzH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW;QACjD,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzK,MAAM,IAAI,cAAS,CAAC,sHAAsH,EAAE,EAAE,CAAC,CAAC;IAClJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAA,aAAQ,EAAC,OAAO,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,qBAAW,EAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC;IACrH,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1J,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC;gBAAC,KAAK,GAAG,OAAO,EAAE,WAAW,EAAE,CAAC;YAAC,CAAC,QAAQ,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE;YACjF,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAsB,EAAE;QACpD,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,YAAY,CAAC;QACvD,IAAI,mBAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,mBAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,mBAAmB,CAAC;QACzJ,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACxB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACtH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,CAAC,KAA4B,EAAE,WAAmB,EAAyB,EAAE;YACxF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW;gBAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC7D,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,IAAA,wBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACjL,CAAC,CAAC;QACF,MAAM,MAAM,GAAkB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACzC,IAAI,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/G,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACzK,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAE;gBAClE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;gBACpD,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC1C,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;gBACjH,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM;gBAC9D,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,GACjG,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAa,CAAC,mBAAmB,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAChE,MAAM,KAAK,GAAU;YACnB,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,IAAA,aAAQ,EAAC,GAAG,CAAC;YACrF,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE;YACnF,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACvG,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;YACjG,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACnG,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;gBACvH,GAAG,EAAE,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;gBAChG,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBAC7D,SAAS,EAAE,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;YAC9G,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAC1H,MAAM,EAAE,QAAQ,EAAE,IAAI;SACvB,CAAC;QACF,OAAO,oBAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,eAAe,CAAC,MAAe,EAAE,GAAW,EAAE,MAAoB;IAChF,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAC,IAAA,eAAU,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IACpE,MAAM,SAAS,GAAG,mBAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC;QAAC,iBAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IACnE,MAAM,CAAC;QAAC,MAAM,IAAI,cAAS,CAAC,yEAAyE,EAAE,EAAE,CAAC,CAAC;IAAC,CAAC;IAC7G,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC3F,IAAA,eAAU,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,IAAA,eAAU,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QACvD,IAAA,aAAQ,EAAC,MAAM,EAAE,IAAA,qBAAc,EAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAA,oBAAU,EAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACvD,IAAA,aAAQ,EAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,IAAI;YAC5F,KAAK,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,iBAAiB,CAAC;YAC5D,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE;YAChH,OAAO,EAAE,sHAAsH,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACtJ,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,iBAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AAC1F,CAAC"}

package/dist/core/io.d.ts

@@ -0,0 +1,13 @@
+import { type Trace } from './schema';
+export declare class UserError extends Error {
+    readonly exitCode: number;
+    constructor(message: string, exitCode?: number);
+}
+/** Never include arbitrary fs/parser messages: they can contain credentials or file contents. */
+export declare function readBounded(file: string, max?: number): string;
+/** Exclusive creation, restrictive permissions, no overwrite of a file or symlink. */
+export declare function writeNew(file: string, data: string): void;
+export declare function readTrace(file: string): Trace;
+export declare function writeTrace(file: string, trace: Trace): void;
+export declare function uniqueId(prefix?: string): string;
+export declare function terminalSafe(input: string, multiline?: boolean): string;

package/dist/core/io.js

@@ -0,0 +1,100 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserError = void 0;
+exports.readBounded = readBounded;
+exports.writeNew = writeNew;
+exports.readTrace = readTrace;
+exports.writeTrace = writeTrace;
+exports.uniqueId = uniqueId;
+exports.terminalSafe = terminalSafe;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_crypto_1 = require("node:crypto");
+const schema_1 = require("./schema");
+class UserError extends Error {
+    exitCode;
+    constructor(message, exitCode = 64) {
+        super(message);
+        this.exitCode = exitCode;
+        this.name = 'UserError';
+    }
+}
+exports.UserError = UserError;
+/** Never include arbitrary fs/parser messages: they can contain credentials or file contents. */
+function readBounded(file, max = schema_1.MAX_ARTIFACT_BYTES) {
+    let fd;
+    try {
+        if (node_fs_1.default.lstatSync(file).isSymbolicLink())
+            throw new UserError('Symbolic-link inputs are not accepted.', 65);
+        fd = node_fs_1.default.openSync(file, node_fs_1.default.constants.O_RDONLY | (node_fs_1.default.constants.O_NOFOLLOW || 0));
+        const stat = node_fs_1.default.fstatSync(fd);
+        if (!stat.isFile() || stat.size > max)
+            throw new UserError('Input is not a regular file or exceeds its size limit.', 65);
+        const buffer = Buffer.alloc(Math.min(max + 1, stat.size + 1));
+        let offset = 0;
+        while (offset < buffer.length) {
+            const n = node_fs_1.default.readSync(fd, buffer, offset, buffer.length - offset, null);
+            if (n === 0)
+                break;
+            offset += n;
+        }
+        if (offset > max || offset > stat.size)
+            throw new UserError('Input changed while being read or exceeds its size limit.', 65);
+        return buffer.subarray(0, offset).toString('utf8');
+    }
+    catch (error) {
+        if (error instanceof UserError)
+            throw error;
+        throw new UserError('Unable to read input. Check its path and permissions.', 74);
+    }
+    finally {
+        if (fd !== undefined)
+            node_fs_1.default.closeSync(fd);
+    }
+}
+/** Exclusive creation, restrictive permissions, no overwrite of a file or symlink. */
+function writeNew(file, data) {
+    let fd;
+    try {
+        node_fs_1.default.mkdirSync(node_path_1.default.dirname(node_path_1.default.resolve(file)), { recursive: true, mode: 0o700 });
+        fd = node_fs_1.default.openSync(file, 'wx', 0o600);
+        node_fs_1.default.writeFileSync(fd, data, 'utf8');
+    }
+    catch {
+        throw new UserError('Unable to create output. It may already exist or the directory is not writable.', 74);
+    }
+    finally {
+        if (fd !== undefined)
+            node_fs_1.default.closeSync(fd);
+    }
+}
+function readTrace(file) {
+    try {
+        return schema_1.TraceSchema.parse(JSON.parse(readBounded(file)));
+    }
+    catch (error) {
+        if (error instanceof UserError)
+            throw error;
+        throw new UserError('Invalid, oversized, or unsupported ConfigTrace artifact.', 65);
+    }
+}
+function writeTrace(file, trace) {
+    const checked = schema_1.TraceSchema.safeParse(trace);
+    if (!checked.success)
+        throw new UserError('Refusing to write an invalid trace artifact.', 74);
+    const data = JSON.stringify(checked.data, null, 2) + '\n';
+    if (Buffer.byteLength(data) > schema_1.MAX_ARTIFACT_BYTES)
+        throw new UserError('Artifact exceeds the output size limit.', 74);
+    writeNew(file, data);
+}
+function uniqueId(prefix = 'r') { return `${prefix}_${(0, node_crypto_1.randomBytes)(12).toString('hex')}`; }
+function terminalSafe(input, multiline = false) {
+    const controls = multiline
+        ? /[\u0000-\u0008\u000b-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/g
+        : /[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/g;
+    return input.replace(controls, '?');
+}
+//# sourceMappingURL=io.js.map

package/dist/core/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../../src/core/io.ts"],"names":[],"mappings":";;;;;;AAUA,kCAoBC;AAGD,4BASC;AAED,8BAMC;AACD,gCAMC;AACD,4BAAyG;AACzG,oCAKC;AAhED,sDAAyB;AACzB,0DAA6B;AAC7B,6CAA0C;AAC1C,qCAAuE;AAEvE,MAAa,SAAU,SAAQ,KAAK;IACW;IAA7C,YAAY,OAAe,EAAkB,WAAW,EAAE;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAAhC,aAAQ,GAAR,QAAQ,CAAK;QAAoB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAAC,CAAC;CACzG;AAFD,8BAEC;AAED,iGAAiG;AACjG,SAAgB,WAAW,CAAC,IAAY,EAAE,GAAG,GAAG,2BAAkB;IAChE,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,IAAI,iBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAC;QAC3G,EAAE,GAAG,iBAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,iBAAE,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,iBAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,wDAAwD,EAAE,EAAE,CAAC,CAAC;QACzH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,iBAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM;YACnB,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;QACD,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,2DAA2D,EAAE,EAAE,CAAC,CAAC;QAC7H,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS;YAAE,MAAM,KAAK,CAAC;QAC5C,MAAM,IAAI,SAAS,CAAC,uDAAuD,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;YAAS,CAAC;QAAC,IAAI,EAAE,KAAK,SAAS;YAAE,iBAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACvD,CAAC;AAED,sFAAsF;AACtF,SAAgB,QAAQ,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,EAAE,GAAG,iBAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpC,iBAAE,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,iFAAiF,EAAE,EAAE,CAAC,CAAC;IAC7G,CAAC;YAAS,CAAC;QAAC,IAAI,EAAE,KAAK,SAAS;YAAE,iBAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACvD,CAAC;AAED,SAAgB,SAAS,CAAC,IAAY;IACpC,IAAI,CAAC;QAAC,OAAO,oBAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAChE,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,SAAS;YAAE,MAAM,KAAK,CAAC;QAC5C,MAAM,IAAI,SAAS,CAAC,0DAA0D,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AACD,SAAgB,UAAU,CAAC,IAAY,EAAE,KAAY;IACnD,MAAM,OAAO,GAAG,oBAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,EAAE,EAAE,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,2BAAkB;QAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,EAAE,EAAE,CAAC,CAAC;IACrH,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC;AACD,SAAgB,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAY,OAAO,GAAG,MAAM,IAAI,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AACzG,SAAgB,YAAY,CAAC,KAAa,EAAE,SAAS,GAAG,KAAK;IAC3D,MAAM,QAAQ,GAAG,SAAS;QACxB,CAAC,CAAC,sEAAsE;QACxE,CAAC,CAAC,yDAAyD,CAAC;IAC9D,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC"}

package/dist/core/privacy.d.ts

@@ -0,0 +1,25 @@
+import { type ComparisonKey, type SafeValue } from './schema';
+export declare function createComparisonKey(): ComparisonKey;
+export declare function writeComparisonKey(file: string): ComparisonKey;
+export declare function readComparisonKey(file: string): ComparisonKey;
+/** Length framing prevents collisions across key/value boundaries. No raw-value cache. */
+export declare function fingerprint(key: ComparisonKey, name: string, value: string | undefined): SafeValue;
+export declare function sameValue(a?: SafeValue, b?: SafeValue): boolean;
+export declare function globToRegex(pattern: string, insensitive?: boolean): RegExp;
+export declare function parseWatch(raw: string[]): string[];
+export declare class WatchSet {
+    readonly patterns: string[];
+    readonly insensitive: boolean;
+    private readonly regex;
+    constructor(patterns: string[], insensitive: boolean);
+    canonical(key: string): string;
+    matches(key: unknown): key is string;
+    exact(): string[];
+}
+/** Metadata is minimized, not magically anonymized. Export can remove remaining project names. */
+export declare class PathScrubber {
+    private readonly root;
+    private readonly salt;
+    constructor(root: string, salt: string);
+    scrub(input: string): string;
+}