humanish 0.105.0 → 0.106.0

package/dist/redaction.d.ts

@@ -1,90 +0,0 @@
-export declare const SECRET_PATTERNS: RegExp[];
-export declare const LOCAL_PATH_PATTERNS: Array<[RegExp, string]>;
-/** True if the text contains any secret-shaped token or known local path. */
-export declare function containsSensitive(text: string): boolean;
-/** Redact secrets to [REDACTED_SECRET] and local paths to their path labels. */
-export declare function redactText(text: string): string;
-/** Redact every sensitive match (secrets and paths) to a single [REDACTED_SECRET] label. */
-export declare function redactToSecretLabel(text: string): string;
-/**
- * Label a path relative to the run's target cwd, or redact it. Returns
- * "[target-cwd]" for the root itself, "[target-cwd]/<rel>" for a descendant, and
- * a redacted form for anything outside the root or a non-absolute value.
- */
-export declare function publicPathForTrace(value: string, rootCwd: string): string;
-/**
- * A redacted screenshot safe to persist to a public run bundle. `buffer` is
- * always a re-encoded thumbnail, never the source bytes.
- */
-export interface RedactedScreenshot {
-    /** Public-safe PNG bytes: a downscaled, blurred thumbnail or a placeholder. */
-    buffer: Buffer;
-    /** How the frame was redacted. Today always "blurred" ("ocr_scrubbed" is reserved). */
-    mode: "blurred";
-    /** Width of the emitted thumbnail (not the source). */
-    width: number;
-    /** Height of the emitted thumbnail (not the source). */
-    height: number;
-    /**
-     * True when the source PNG decoded and was downscaled+blurred. False when
-     * redaction fell back to a neutral placeholder (non-PNG input, decode failure,
-     * or any error). `buffer` is public-safe either way.
-     */
-    decoded: boolean;
-}
-export interface RedactScreenshotOptions {
-    /**
-     * Longest emitted edge in pixels. Clamped to [1, 128]: a caller may request a
-     * SMALLER (safer) thumbnail but never a larger one, so no call site can widen
-     * the frame back into legibility. Default 96. Blur is not a caller knob: it is
-     * an internal safety floor computed from the output size.
-     */
-    maxWidth?: number;
-}
-/**
- * Redact a screenshot to a public-safe thumbnail. Fail-closed: any decode or
- * processing failure yields an opaque placeholder, never the source frame.
- */
-export declare function redactScreenshot(input: Buffer | Uint8Array, options?: RedactScreenshotOptions): RedactedScreenshot;
-/** Stable short content digest (sha256 hex, first `length` chars; default 12). */
-export declare function digestText(text: string, length?: number): string;
-/** Last `maxChars` of a string (the whole string when shorter). No redaction. */
-export declare function tailText(value: string, maxChars: number): string;
-/**
- * A redacted, ellipsis-prefixed tail of captured output for a (public-bound)
- * message field. Pattern-redacts the FULL text BEFORE truncating: slicing a tail
- * first could cut through a secret's prefix (e.g. drop "sk-proj-") and defeat the
- * pattern matcher on the remainder. Callers should literal-scrub known
- * provisioned values first; this is the pattern pass. Empty output -> "(no output)".
- */
-export declare function redactedTail(text: string, maxChars: number): string;
-/**
- * A log-safe reference to a raw prompt: a placeholder string, a stable digest,
- * and the length. Proves which prompt was used without persisting its text.
- */
-export declare function promptForLog(raw: string): {
-    placeholder: string;
-    digest: string;
-    length: number;
-};
-export interface ScreenshotMeta {
-    /** Optional smaller-only thumbnail width (clamped to the safe ceiling). */
-    maxWidth?: number;
-    /** Free-form label for logs (e.g. "turn-03-call-01"). Never enters the pixels. */
-    label?: string;
-}
-export interface RedactionHooks {
-    redactText(text: string): string;
-    publicPath(value: string, rootCwd: string): string;
-    redactScreenshot(buffer: Buffer | Uint8Array, meta?: ScreenshotMeta): Promise<{
-        buffer: Buffer;
-        method: "blurred" | "ocr_scrubbed";
-    }>;
-    promptForLog(raw: string): {
-        placeholder: string;
-        digest: string;
-        length: number;
-    };
-}
-/** The default hooks wired into every actor: redaction.ts is the source of truth. */
-export declare const defaultRedactionHooks: RedactionHooks;

package/dist/redaction.js

@@ -1,294 +0,0 @@
-import { createHash } from "node:crypto";
-import { realpathSync } from "node:fs";
-import path from "node:path";
-import { PNG } from "pngjs";
-import { SCREENSHOT_MAX_SOURCE_PIXELS, readPngDeclaredDimensions } from "./screenshot-image.js";
-// Single source of truth for public-safety redaction patterns. Both the Codex
-// actor trace (src/codex-app-server.ts) and the run-bundle scanner/redactor
-// (src/run.ts) use these so the denylist cannot drift between producers and the
-// verify gate. See docs/contracts/policy.md for the enforcement-scope policy.
-export const SECRET_PATTERNS = [
-    /\bsk-(?:proj-|svcacct-)?[A-Za-z0-9_-]{20,}\b/g,
-    /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g,
-    /\be2b_[A-Za-z0-9]{16,}\b/g,
-    /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{20,}\b/g,
-    /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
-    /\bAKIA[0-9A-Z]{16}\b/g,
-    /\bAIza[0-9A-Za-z_-]{20,}\b/g,
-    /\b(?:sk|rk)_live_[A-Za-z0-9]{16,}\b/g,
-    /\bhf_[A-Za-z0-9]{30,}\b/g,
-    /\bxox[baprs]-[A-Za-z0-9-]{20,}\b/g,
-    /\beyJ[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{10,}\b/g,
-    /-----BEGIN [A-Z ]*PRIVATE KEY-----/g,
-    /\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis):\/\/[^:@/\s]+:[^@/\s]+@\S+/g,
-    /_authToken\s*=\s*[A-Za-z0-9._~+/=-]{20,}/g,
-    /\bBearer\s+[A-Za-z0-9._~+/-]{24,}\b/g,
-    /https?:\/\/[^/\s]*e2b[^)\s]+/gi,
-    /BEGIN (RSA|OPENSSH|PRIVATE) KEY/gi
-];
-export const LOCAL_PATH_PATTERNS = [
-    [/\/private\/var\/folders\/[^\s"'`<>)]*/g, "[REDACTED_LOCAL_PATH]"],
-    [/\/var\/folders\/[^\s"'`<>)]*/g, "[REDACTED_LOCAL_PATH]"],
-    [/\/private\/tmp\/[^\s"'`<>)]*/g, "[REDACTED_LOCAL_PATH]"],
-    [/\/tmp\/[^\s"'`<>)]*/g, "[REDACTED_LOCAL_PATH]"],
-    [/\/Users\/[A-Za-z0-9._-]+(?:\/[^\s"'`<>)]*)?/g, "[REDACTED_LOCAL_PATH]"],
-    [/\/home\/[A-Za-z0-9._-]+(?:\/[^\s"'`<>)]*)?/g, "[REDACTED_RUNTIME_PATH]"]
-];
-// Sticky/global regexes carry lastIndex state across .test() calls. Always reset
-// before a detection test so the shared singletons are safe to reuse.
-function matchesPattern(pattern, text) {
-    pattern.lastIndex = 0;
-    return pattern.test(text);
-}
-/** True if the text contains any secret-shaped token or known local path. */
-export function containsSensitive(text) {
-    return (SECRET_PATTERNS.some((pattern) => matchesPattern(pattern, text)) ||
-        LOCAL_PATH_PATTERNS.some(([pattern]) => matchesPattern(pattern, text)));
-}
-// A local-path match may end in the backslashes escaping its closing quote in
-// serialized JSON (including JSON nested inside a terminal event). Keep that
-// suffix so redaction cannot turn a string's contents into JSON delimiters.
-// This also works when the closing quote arrives in a later stream callback.
-function redactLocalPaths(text, label) {
-    return LOCAL_PATH_PATTERNS.reduce((current, [pattern, replacement]) => current.replace(pattern, (match) => (label ?? replacement) + (match.match(/\\+$/)?.[0] ?? "")), text);
-}
-/** Redact secrets to [REDACTED_SECRET] and local paths to their path labels. */
-export function redactText(text) {
-    const withoutSecrets = SECRET_PATTERNS.reduce((current, pattern) => current.replace(pattern, "[REDACTED_SECRET]"), text);
-    return redactLocalPaths(withoutSecrets);
-}
-/** Redact every sensitive match (secrets and paths) to a single [REDACTED_SECRET] label. */
-export function redactToSecretLabel(text) {
-    const withoutSecrets = SECRET_PATTERNS.reduce((current, pattern) => current.replace(pattern, "[REDACTED_SECRET]"), text);
-    return redactLocalPaths(withoutSecrets, "[REDACTED_SECRET]");
-}
-function canonicalizePath(value) {
-    const resolved = path.resolve(value);
-    try {
-        // Follow symlinks so an actor cwd reported in realpath form (e.g. /private/tmp
-        // on macOS) matches a configured root still in its symlinked form (/tmp).
-        // Without this, path.relative yields a "../"-prefixed path that escapes the
-        // [target-cwd] label and leaks an absolute temp path into the trace.
-        return realpathSync.native(resolved);
-    }
-    catch {
-        return resolved;
-    }
-}
-/**
- * Label a path relative to the run's target cwd, or redact it. Returns
- * "[target-cwd]" for the root itself, "[target-cwd]/<rel>" for a descendant, and
- * a redacted form for anything outside the root or a non-absolute value.
- */
-export function publicPathForTrace(value, rootCwd) {
-    if (!path.isAbsolute(value)) {
-        return redactText(value);
-    }
-    const root = canonicalizePath(rootCwd);
-    const absolute = canonicalizePath(value);
-    const relative = path.relative(root, absolute).replace(/\\/g, "/");
-    if (relative === "") {
-        return "[target-cwd]";
-    }
-    if (!relative.startsWith("..") && !path.isAbsolute(relative)) {
-        return `[target-cwd]/${relative}`;
-    }
-    return redactText(value);
-}
-// ---------------------------------------------------------------------------
-// Screenshot redaction.
-//
-// Computer-use lanes capture raw desktop frames that can contain secrets, PII,
-// or a logged-in third-party UI. A raw frame must never reach a public artifact.
-// redactScreenshot is the fail-closed primitive that gates that surface. It
-// always returns a freshly re-encoded, downscaled, box-blurred thumbnail (or a
-// neutral placeholder), and NEVER the source pixels. The "too coarse to read"
-// invariant is enforced in code, not by defaults: the emitted width is hard-
-// capped (a caller may request a SMALLER thumbnail but never a larger one), and
-// the blur radius is computed internally with a floor, so neither a caller
-// option nor a natively small frame can widen the output back into legibility.
-// On any uncertainty (non-PNG input, an oversized or unreadable PNG, or any
-// error in the resize/blur path) it falls back to an opaque placeholder, so a
-// redaction failure can never leak the original frame. Threat model: inputs are
-// bounded desktop-viewport frames from our own sandbox, not adversarial uploads.
-// ---------------------------------------------------------------------------
-const SCREENSHOT_MAX_WIDTH_DEFAULT = 96;
-// Hard ceiling on the emitted thumbnail width. This, not the default, is what
-// makes the output too coarse to read text off: a 1024px+ desktop frame is
-// downscaled at least ~8x. A caller can only ask for something smaller.
-const SCREENSHOT_MAX_WIDTH_CAP = 128;
-// Reject absurd source dimensions before decode so a crafted IHDR cannot OOM the
-// process before the try/catch can fall back to a placeholder.
-const SCREENSHOT_PLACEHOLDER_GRAY = 128;
-/**
- * Redact a screenshot to a public-safe thumbnail. Fail-closed: any decode or
- * processing failure yields an opaque placeholder, never the source frame.
- */
-export function redactScreenshot(input, options = {}) {
-    const maxWidth = Math.min(SCREENSHOT_MAX_WIDTH_CAP, Math.max(1, Math.floor(options.maxWidth ?? SCREENSHOT_MAX_WIDTH_DEFAULT)));
-    try {
-        const source = Buffer.isBuffer(input) ? input : Buffer.from(input);
-        if (source.length === 0 || sourcePixelsExceedCap(source)) {
-            return placeholderScreenshot(maxWidth);
-        }
-        const decoded = PNG.sync.read(source);
-        const srcW = decoded.width;
-        const srcH = decoded.height;
-        if (!srcW || !srcH) {
-            return placeholderScreenshot(maxWidth);
-        }
-        const outW = Math.max(1, Math.min(maxWidth, srcW));
-        const outH = Math.max(1, Math.round((srcH * outW) / srcW));
-        const small = downscaleRgba(decoded.data, srcW, srcH, outW, outH);
-        const blurred = boxBlurRgba(small, outW, outH, effectiveBlurRadius(outW));
-        const out = new PNG({ width: outW, height: outH });
-        blurred.copy(out.data);
-        return { buffer: PNG.sync.write(out), mode: "blurred", width: outW, height: outH, decoded: true };
-    }
-    catch {
-        return placeholderScreenshot(maxWidth);
-    }
-}
-// Blur enough to erase sub-thumbnail detail even on the no-downscale path (a
-// natively small source where downscale alone does little). Scales with output
-// width so the floor stays meaningful, never below radius 2.
-function effectiveBlurRadius(outW) {
-    return Math.max(2, Math.round(outW / 24));
-}
-// Peek a PNG's declared IHDR dimensions without decoding it, and report whether
-// the pixel count exceeds the cap. A too-short or non-PNG buffer returns false
-// and falls through to PNG.sync.read, which throws and lands on the placeholder.
-function sourcePixelsExceedCap(buf) {
-    const dimensions = readPngDeclaredDimensions(buf);
-    return dimensions !== null
-        && dimensions.width * dimensions.height > SCREENSHOT_MAX_SOURCE_PIXELS;
-}
-function placeholderScreenshot(maxWidth) {
-    const width = Math.max(1, Math.min(maxWidth, SCREENSHOT_MAX_WIDTH_DEFAULT));
-    const height = Math.max(1, Math.round((width * 9) / 16));
-    const png = new PNG({ width, height });
-    for (let i = 0; i < width * height; i += 1) {
-        const o = i * 4;
-        png.data[o] = SCREENSHOT_PLACEHOLDER_GRAY;
-        png.data[o + 1] = SCREENSHOT_PLACEHOLDER_GRAY;
-        png.data[o + 2] = SCREENSHOT_PLACEHOLDER_GRAY;
-        png.data[o + 3] = 255;
-    }
-    return { buffer: PNG.sync.write(png), mode: "blurred", width, height, decoded: false };
-}
-/** Area-average downscale of an RGBA buffer. Output is outW x outH RGBA. */
-function downscaleRgba(src, srcW, srcH, outW, outH) {
-    const out = Buffer.alloc(outW * outH * 4);
-    const xRatio = srcW / outW;
-    const yRatio = srcH / outH;
-    for (let oy = 0; oy < outH; oy += 1) {
-        const sy0 = Math.floor(oy * yRatio);
-        const sy1 = Math.min(srcH, Math.max(sy0 + 1, Math.floor((oy + 1) * yRatio)));
-        for (let ox = 0; ox < outW; ox += 1) {
-            const sx0 = Math.floor(ox * xRatio);
-            const sx1 = Math.min(srcW, Math.max(sx0 + 1, Math.floor((ox + 1) * xRatio)));
-            let r = 0;
-            let g = 0;
-            let b = 0;
-            let a = 0;
-            let n = 0;
-            for (let sy = sy0; sy < sy1; sy += 1) {
-                for (let sx = sx0; sx < sx1; sx += 1) {
-                    const si = (sy * srcW + sx) * 4;
-                    r += src[si] ?? 0;
-                    g += src[si + 1] ?? 0;
-                    b += src[si + 2] ?? 0;
-                    a += src[si + 3] ?? 0;
-                    n += 1;
-                }
-            }
-            const oi = (oy * outW + ox) * 4;
-            out[oi] = n ? Math.round(r / n) : 0;
-            out[oi + 1] = n ? Math.round(g / n) : 0;
-            out[oi + 2] = n ? Math.round(b / n) : 0;
-            out[oi + 3] = n ? Math.round(a / n) : 255;
-        }
-    }
-    return out;
-}
-/** Separable box blur over an RGBA buffer. */
-function boxBlurRgba(data, width, height, radius) {
-    if (radius <= 0) {
-        return data;
-    }
-    return blurPass(blurPass(data, width, height, radius, true), width, height, radius, false);
-}
-// ---------------------------------------------------------------------------
-// Prompt logging.
-//
-// Raw persona prompts can carry synthetic identity details, so they are never
-// written to the event log verbatim. digestText is the single source of truth
-// for the short content digest used across producers; promptForLog turns a raw
-// prompt into a log-safe reference (placeholder + digest + length).
-// ---------------------------------------------------------------------------
-/** Stable short content digest (sha256 hex, first `length` chars; default 12). */
-export function digestText(text, length = 12) {
-    return createHash("sha256").update(text).digest("hex").slice(0, length);
-}
-/** Last `maxChars` of a string (the whole string when shorter). No redaction. */
-export function tailText(value, maxChars) {
-    return value.length <= maxChars ? value : value.slice(-maxChars);
-}
-/**
- * A redacted, ellipsis-prefixed tail of captured output for a (public-bound)
- * message field. Pattern-redacts the FULL text BEFORE truncating: slicing a tail
- * first could cut through a secret's prefix (e.g. drop "sk-proj-") and defeat the
- * pattern matcher on the remainder. Callers should literal-scrub known
- * provisioned values first; this is the pattern pass. Empty output -> "(no output)".
- */
-export function redactedTail(text, maxChars) {
-    const trimmed = redactText(text).trim();
-    return trimmed.length > maxChars ? `…${trimmed.slice(-maxChars)}` : trimmed || "(no output)";
-}
-/**
- * A log-safe reference to a raw prompt: a placeholder string, a stable digest,
- * and the length. Proves which prompt was used without persisting its text.
- */
-export function promptForLog(raw) {
-    const digest = digestText(raw);
-    return { placeholder: `[persona-prompt sha256:${digest} len:${raw.length}]`, digest, length: raw.length };
-}
-/** The default hooks wired into every actor: redaction.ts is the source of truth. */
-export const defaultRedactionHooks = {
-    redactText,
-    publicPath: publicPathForTrace,
-    async redactScreenshot(buffer, meta) {
-        const result = redactScreenshot(buffer, meta?.maxWidth === undefined ? {} : { maxWidth: meta.maxWidth });
-        return { buffer: result.buffer, method: result.mode };
-    },
-    promptForLog
-};
-function blurPass(src, width, height, radius, horizontal) {
-    const out = Buffer.alloc(src.length);
-    for (let y = 0; y < height; y += 1) {
-        for (let x = 0; x < width; x += 1) {
-            let r = 0;
-            let g = 0;
-            let b = 0;
-            let a = 0;
-            let n = 0;
-            for (let k = -radius; k <= radius; k += 1) {
-                const sx = horizontal ? Math.min(width - 1, Math.max(0, x + k)) : x;
-                const sy = horizontal ? y : Math.min(height - 1, Math.max(0, y + k));
-                const si = (sy * width + sx) * 4;
-                r += src[si] ?? 0;
-                g += src[si + 1] ?? 0;
-                b += src[si + 2] ?? 0;
-                a += src[si + 3] ?? 0;
-                n += 1;
-            }
-            const oi = (y * width + x) * 4;
-            out[oi] = Math.round(r / n);
-            out[oi + 1] = Math.round(g / n);
-            out[oi + 2] = Math.round(b / n);
-            out[oi + 3] = Math.round(a / n);
-        }
-    }
-    return out;
-}
-//# sourceMappingURL=redaction.js.map

package/dist/redaction.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAE5B,OAAO,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAEhG,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC,+CAA+C;IAC/C,gCAAgC;IAChC,2BAA2B;IAC3B,gDAAgD;IAChD,mCAAmC;IACnC,uBAAuB;IACvB,6BAA6B;IAC7B,sCAAsC;IACtC,0BAA0B;IAC1B,mCAAmC;IACnC,oEAAoE;IACpE,qCAAqC;IACrC,iFAAiF;IACjF,2CAA2C;IAC3C,sCAAsC;IACtC,gCAAgC;IAChC,mCAAmC;CACpC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAA4B;IAC1D,CAAC,wCAAwC,EAAE,uBAAuB,CAAC;IACnE,CAAC,+BAA+B,EAAE,uBAAuB,CAAC;IAC1D,CAAC,+BAA+B,EAAE,uBAAuB,CAAC;IAC1D,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;IACjD,CAAC,8CAA8C,EAAE,uBAAuB,CAAC;IACzE,CAAC,6CAA6C,EAAE,yBAAyB,CAAC;CAC3E,CAAC;AAEF,iFAAiF;AACjF,sEAAsE;AACtE,SAAS,cAAc,CAAC,OAAe,EAAE,IAAY;IACnD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtB,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,CACL,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CACvE,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAc;IACpD,OAAO,mBAAmB,CAAC,MAAM,CAC/B,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE,CAC9E,CAAC,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAC5D,IAAI,CACL,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAC3C,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,CAAC,EACnE,IAAI,CACL,CAAC;IACF,OAAO,gBAAgB,CAAC,cAAc,CAAC,CAAC;AAC1C,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAC3C,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,CAAC,EACnE,IAAI,CACL,CAAC;IACF,OAAO,gBAAgB,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,+EAA+E;QAC/E,0EAA0E;QAC1E,4EAA4E;QAC5E,qEAAqE;QACrE,OAAO,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,OAAe;IAC/D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,OAAO,gBAAgB,QAAQ,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAE9E,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AACxE,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,iFAAiF;AACjF,+DAA+D;AAC/D,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAiCxC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAA0B,EAC1B,UAAmC,EAAE;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,wBAAwB,EACxB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,4BAA4B,CAAC,CAAC,CAC1E,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,OAAO,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,6DAA6D;AAC7D,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,UAAU,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,UAAU,KAAK,IAAI;WACrB,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,4BAA4B,CAAC;AAC3E,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,2BAA2B,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,2BAA2B,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,2BAA2B,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACzF,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY,EAAE,IAAY,EAAE,IAAY;IACxF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAC3B,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7E,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC7E,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,KAAK,IAAI,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,KAAK,IAAI,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;oBACrC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;oBAChC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;oBAClB,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;oBACtB,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;oBACtB,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;oBACtB,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;YACH,CAAC;YACD,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;YAChC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8CAA8C;AAC9C,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc,EAAE,MAAc;IAC9E,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AAC7F,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,oEAAoE;AACpE,8EAA8E;AAE9E,kFAAkF;AAClF,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,QAAgB;IACtD,OAAO,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,QAAgB;IACzD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,aAAa,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,EAAE,WAAW,EAAE,0BAA0B,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AAC5G,CAAC;AA6BD,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,UAAU;IACV,UAAU,EAAE,kBAAkB;IAC9B,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI;QACjC,MAAM,MAAM,GAAG,gBAAgB,CAC7B,MAAM,EACN,IAAI,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAChE,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,YAAY;CACb,CAAC;AAEF,SAAS,QAAQ,CAAC,GAAW,EAAE,KAAa,EAAE,MAAc,EAAE,MAAc,EAAE,UAAmB;IAC/F,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACrE,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;gBACjC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBAClB,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/B,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/restricted-codex-analysis.d.ts

@@ -1,15 +0,0 @@
-import { type RestrictedCodexSessionOptions } from "./restricted-codex-session.js";
-import type { RestrictedCodexAnalysisErrorCode, RestrictedCodexRequest, RestrictedCodexResult } from "./restricted-codex-policy.js";
-export { RESTRICTED_CODEX_ANALYSIS_IDENTITY, RESTRICTED_CODEX_ANALYSIS_MODELS } from "./restricted-codex-policy.js";
-export type { RestrictedCodexAnalysisErrorCode } from "./restricted-codex-policy.js";
-/** Structurally implements StudyAnalysisProvider without importing its API transport.
- * Schema/evidence validation and transient-secret scrubbing remain in the engine. */
-export declare function createRestrictedCodexAnalysisProvider(options?: RestrictedCodexSessionOptions): (request: RestrictedCodexRequest) => Promise<RestrictedCodexResult>;
-/** Does not submit a model turn. Readiness is not a quota/access guarantee. */
-export declare function checkRestrictedCodexAnalysisReadiness(input?: {
-    signal?: AbortSignal;
-    timeoutMs?: number;
-}, options?: RestrictedCodexSessionOptions): Promise<{
-    ready: boolean;
-    errorCode: RestrictedCodexAnalysisErrorCode | null;
-}>;

package/dist/restricted-codex-analysis.js

@@ -1,13 +0,0 @@
-import { checkRestrictedCodexSessionReadiness, runRestrictedCodexSession } from "./restricted-codex-session.js";
-export { RESTRICTED_CODEX_ANALYSIS_IDENTITY, RESTRICTED_CODEX_ANALYSIS_MODELS } from "./restricted-codex-policy.js";
-/** Structurally implements StudyAnalysisProvider without importing its API transport.
- * Schema/evidence validation and transient-secret scrubbing remain in the engine. */
-export function createRestrictedCodexAnalysisProvider(options = {}) {
-    return request => runRestrictedCodexSession(request, options);
-}
-/** Does not submit a model turn. Readiness is not a quota/access guarantee. */
-export async function checkRestrictedCodexAnalysisReadiness(input = {}, options = {}) {
-    const result = await checkRestrictedCodexSessionReadiness(input, options);
-    return { ready: result.status === "completed", errorCode: result.errorCode };
-}
-//# sourceMappingURL=restricted-codex-analysis.js.map

package/dist/restricted-codex-analysis.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"restricted-codex-analysis.js","sourceRoot":"","sources":["../src/restricted-codex-analysis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,yBAAyB,EAAsC,MAAM,+BAA+B,CAAC;AAEpJ,OAAO,EAAE,kCAAkC,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAGpH;qFACqF;AACrF,MAAM,UAAU,qCAAqC,CAAC,UAAyC,EAAE;IAE/F,OAAO,OAAO,CAAC,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,QAAsD,EAAE,EAClH,UAAyC,EAAE;IAC3C,MAAM,MAAM,GAAG,MAAM,oCAAoC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1E,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AAC/E,CAAC"}

package/dist/restricted-codex-participant-policy.d.ts

@@ -1,44 +0,0 @@
-import { type CuaTurn } from "./computer-use.js";
-import type { ActorExecutionProfile, ParticipantClosingReport } from "./actor-contract.js";
-export declare const PARTICIPANT_PROFILE: Readonly<ActorExecutionProfile>;
-export declare const PARTICIPANT_LIMITS: Readonly<{
-    instructions: number;
-    hint: number;
-    narration: 2000;
-    output: number;
-    actions: 4;
-    requestMs: 180000;
-    cleanupMs: 5000;
-}>;
-export declare function participantToolSchema(speechEnabled?: boolean): Record<string, unknown>;
-export declare const PARTICIPANT_TOOL_SCHEMA: Record<string, unknown>;
-export declare const PARTICIPANT_FINAL_SCHEMA: {
-    type: string;
-    additionalProperties: boolean;
-    required: string[];
-    properties: {
-        outcome: {
-            type: string;
-            enum: string[];
-        };
-        summary: {
-            type: string;
-            minLength: number;
-            maxLength: number;
-        };
-        frictionReports: {
-            type: string;
-            maxItems: number;
-            items: {
-                type: string;
-                minLength: number;
-                maxLength: number;
-            };
-        };
-    };
-};
-/** Humanish tool arguments, validated before the shared executor sees a batch. */
-export declare function parseParticipantTool(value: unknown, speechEnabled?: boolean): CuaTurn;
-export declare function parseParticipantFinal(value: unknown): CuaTurn & {
-    closingReport: ParticipantClosingReport;
-};

package/dist/restricted-codex-participant-policy.js

@@ -1,43 +0,0 @@
-import { z } from "zod";
-import { browserControlActionSchema, browserOnlyControlActionSchema, validateBrowserControlAction } from "./browser-control-protocol.js";
-import { validClosingReport } from "./computer-use.js";
-export const PARTICIPANT_PROFILE = Object.freeze({
-    schema: "humanish.actor-execution-profile.v1", transport: "codex-app-server", authentication: "chatgpt-account",
-    billing: "account-unknown", requestedModel: "gpt-6-astra", reasoningEffort: "low", cliVersion: "0.154.0",
-    toolPolicy: "codex-ui-tools-v1", participantSchema: "humanish.codex-ui-tool.v1", memoryPolicy: "continuing-thread-v1"
-});
-export const PARTICIPANT_LIMITS = Object.freeze({ instructions: 64 * 1024, hint: 8 * 1024, narration: 2000, output: 256 * 1024, actions: 4, requestMs: 180_000, cleanupMs: 5000 });
-const toolInput = (speechEnabled) => z.strictObject({ narration: z.string().max(PARTICIPANT_LIMITS.narration),
-    actions: z.array(speechEnabled ? browserControlActionSchema : browserOnlyControlActionSchema).min(1).max(PARTICIPANT_LIMITS.actions) });
-export function participantToolSchema(speechEnabled = false) {
-    return z.toJSONSchema(toolInput(speechEnabled), { io: "input" });
-}
-export const PARTICIPANT_TOOL_SCHEMA = participantToolSchema();
-export const PARTICIPANT_FINAL_SCHEMA = {
-    type: "object", additionalProperties: false, required: ["outcome", "summary", "frictionReports"], properties: {
-        outcome: { type: "string", enum: ["reached", "not_reached", "blocked"] },
-        summary: { type: "string", minLength: 1, maxLength: 4000 },
-        frictionReports: { type: "array", maxItems: 8, items: { type: "string", minLength: 1, maxLength: 2000 } }
-    }
-};
-/** Humanish tool arguments, validated before the shared executor sees a batch. */
-export function parseParticipantTool(value, speechEnabled = false) {
-    if (Buffer.byteLength(JSON.stringify(value) ?? "") > PARTICIPANT_LIMITS.output)
-        throw new Error("invalid_response");
-    const v = toolInput(speechEnabled).parse(value);
-    if (Buffer.byteLength(v.narration) > PARTICIPANT_LIMITS.narration)
-        throw new Error("invalid_response");
-    return { actions: v.actions.map(validateBrowserControlAction), pendingSafetyChecks: [], done: false,
-        ...(v.narration ? { message: v.narration } : {}), providerRequestPending: true };
-}
-export function parseParticipantFinal(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value))
-        throw new Error("invalid_response");
-    const { outcome, ...report } = value;
-    if ((outcome !== "reached" && outcome !== "not_reached" && outcome !== "blocked") || !validClosingReport(report))
-        throw new Error("invalid_response");
-    return { actions: [], pendingSafetyChecks: [], done: true, outcome,
-        message: [report.summary, ...report.frictionReports].join("\n"),
-        closingReport: { summary: report.summary, frictionReports: [...report.frictionReports] } };
-}
-//# sourceMappingURL=restricted-codex-participant-policy.js.map

package/dist/restricted-codex-participant-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"restricted-codex-participant-policy.js","sourceRoot":"","sources":["../src/restricted-codex-participant-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AACzI,OAAO,EAAE,kBAAkB,EAAgB,MAAM,mBAAmB,CAAC;AAGrE,MAAM,CAAC,MAAM,mBAAmB,GAAoC,MAAM,CAAC,MAAM,CAAC;IAChF,MAAM,EAAE,qCAAqC,EAAE,SAAS,EAAE,kBAAkB,EAAE,cAAc,EAAE,iBAAiB;IAC/G,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS;IACxG,UAAU,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,YAAY,EAAE,sBAAsB;CACtH,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACnL,MAAM,SAAS,GAAG,CAAC,aAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,SAAS,CAAC;IACpH,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC1I,MAAM,UAAU,qBAAqB,CAAC,aAAa,GAAG,KAAK;IACzD,OAAO,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAA4B,CAAC;AAC9F,CAAC;AACD,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,EAAE,CAAC;AAC/D,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE;QAC5G,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE;QACxE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;QAC1D,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;KAC1G;CACF,CAAC;AACF,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,aAAa,GAAG,KAAK;IACxE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpH,MAAM,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACvG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK;QACjG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC;AACrF,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACrG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,KAAgC,CAAC;IAChE,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtJ,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO;QAChE,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/D,aAAa,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;AAC/F,CAAC"}

package/dist/restricted-codex-participant-run.d.ts

@@ -1,20 +0,0 @@
-import type { LabConfig } from "./lab-config.js";
-import { type LabOutcome } from "./lab-engine.js";
-import type { DesktopSession, DesktopReleaseResult } from "./desktop-session.js";
-import type { AutomaticAnalysisHooks } from "./automatic-analysis-completion.js";
-import { type ParticipantProviderCloseResult, type RestrictedParticipantOptions } from "./restricted-codex-participant.js";
-/** Internal, explicit single-participant consumer. Uses the existing producer and
- * its automatic-completion boundary; never allocates or discovers a desktop. */
-export declare function runRestrictedParticipantStudy(options: {
-    cwd: string;
-    config: LabConfig;
-    desktop: DesktopSession;
-    participant?: RestrictedParticipantOptions;
-    signal?: AbortSignal;
-    runId?: string;
-    automaticAnalysis?: AutomaticAnalysisHooks;
-}): Promise<{
-    outcome: LabOutcome;
-    providerCleanup: ParticipantProviderCloseResult;
-    desktopCleanup: DesktopReleaseResult;
-}>;

package/dist/restricted-codex-participant-run.js

@@ -1,79 +0,0 @@
-import { runLab } from "./lab-engine.js";
-import { runCuaActorSession } from "./computer-use-actor.js";
-import { createRestrictedCodexParticipant } from "./restricted-codex-participant.js";
-import { CuaProviderError } from "./cua-provider-error.js";
-/** Internal, explicit single-participant consumer. Uses the existing producer and
- * its automatic-completion boundary; never allocates or discovers a desktop. */
-export async function runRestrictedParticipantStudy(options) {
-    let participant;
-    let providerCleanup = { status: "unconfirmed" };
-    let desktopCleanup = { status: "unconfirmed", reason: "release_unavailable" };
-    let cleanupUncertain = false;
-    let finalized = false;
-    let finalizing;
-    const finish = () => finalizing ??= (async () => {
-        try {
-            if (participant)
-                providerCleanup = await participant.close();
-        }
-        catch {
-            providerCleanup = { status: "unconfirmed" };
-        }
-        let timer;
-        try {
-            desktopCleanup = await Promise.race([Promise.resolve().then(() => options.desktop.close()), new Promise(resolve => {
-                    timer = setTimeout(() => resolve({ status: "unconfirmed", reason: "release_unavailable" }), 10_000);
-                })]);
-        }
-        catch {
-            desktopCleanup = { status: "unconfirmed", reason: "release_failed" };
-        }
-        finally {
-            clearTimeout(timer);
-        }
-        cleanupUncertain ||= providerCleanup.status !== "confirmed" || desktopCleanup.status !== "released";
-        finalized = true;
-    })();
-    try {
-        const config = options.config;
-        if (config.subject.source !== "local-app" || config.actors.length !== 1 || config.actors[0]?.type !== "openai-computer-use" ||
-            (config.actors[0].model !== undefined && config.actors[0].model !== "gpt-6-astra") ||
-            (config.actors[0].reasoningEffort !== undefined && config.actors[0].reasoningEffort !== "low") ||
-            (config.actors[0]?.count ?? 1) !== 1 || (config.execution?.concurrency ?? 1) !== 1 ||
-            config.actors[0]?.lanes?.length ||
-            config.actors[0]?.maxOutputTokens !== undefined || config.execution?.caps?.maxUsd !== undefined ||
-            config.execution?.caps?.maxTotalUsd !== undefined || config.scenario?.caps?.maxUsd !== undefined || config.scenario?.caps?.maxTotalUsd !== undefined ||
-            !Number.isFinite(config.execution?.timeoutMs) || config.execution.timeoutMs < 1 || config.execution.timeoutMs > 600_000 ||
-            (config.review?.analysis !== false && (!config.review?.analysis || config.review.analysis.provider !== "codex"))) {
-            throw new CuaProviderError("request_rejected", { dispatched: false, usageComplete: false, cleanup: "confirmed" });
-        }
-        participant = createRestrictedCodexParticipant({ ...options.participant,
-            ...(options.desktop.executor.speechEnabled === true ? { speechEnabled: true } : {}) });
-        const outcome = await runLab(config, { cwd: options.cwd, dryRun: false, open: false,
-            ...(options.runId === undefined ? {} : { runId: options.runId }),
-            automaticAnalysis: { ...options.automaticAnalysis, onStart: () => {
-                    if (!finalized || cleanupUncertain || providerCleanup.status !== "confirmed" || desktopCleanup.status !== "released")
-                        throw new Error("participant_cleanup_unconfirmed");
-                    return options.automaticAnalysis?.onStart?.();
-                } },
-            cuaHooks: { env: {}, buildExecutor: async () => options.desktop.executor,
-                buildProvider: async () => participant.provider,
-                runSession: async (input) => {
-                    try {
-                        const result = await runCuaActorSession({ ...input, ...(options.signal === undefined ? {} : { signal: options.signal }) });
-                        cleanupUncertain ||= result.trace.providerRequests?.some(r => r.cleanup !== "confirmed") === true;
-                        return result;
-                    }
-                    finally {
-                        await finish();
-                    }
-                } }
-        });
-        await finish();
-        return { outcome, providerCleanup, desktopCleanup };
-    }
-    finally {
-        await finish();
-    }
-}
-//# sourceMappingURL=restricted-codex-participant-run.js.map