instar 1.3.745 → 1.3.747

package/dist/data/durableOutputChokepoints.js

@@ -0,0 +1,145 @@
+/**
+ * Durable-Output Chokepoint Inventory — the auditable registry of every store
+ * that accepts LLM output and, per store, its Layer-B scrub status + its
+ * durable-secret bench-axis coverage (Durable-Output Hygiene Standard §3,
+ * docs/specs/durable-output-hygiene-standard.md).
+ *
+ * This is the file the Standards Enforcement Coverage audit reads to grade the
+ * "What Persists Must Be Clean" standard `gate` rather than `spec-only`, and the
+ * file the durable-output-chokepoint ratchet (tests/unit/
+ * durable-output-chokepoint-ratchet.test.ts) pins SHRINK-ONLY: a chokepoint may
+ * graduate `pending → wired`, never regress, and a NEW durable-output persistence
+ * path cannot silently bypass the class (it must be classified here, exactly like
+ * the llmBenchCoverage map forces a bench decision on every LLM component).
+ *
+ * SCOPE (spec §3): memory-family stores + doc-tree summaries are in scope now;
+ * logs/telemetry are covered by the existing telemetry scrubs; caches / vector
+ * indexes / eval artifacts and the private-view / published-page write path are
+ * enumerated as tracked follow-ups IN this inventory (a semantically-durable leak
+ * path cannot park as an undated TODO — each carries an owner).
+ *
+ * MULTI-MACHINE POSTURE (spec §3, Cross-Machine Coherence): a replicated
+ * memory-family store accepts records FROM PEERS, so a peer running with the
+ * scrub dark could deliver an unscrubbed secret into a scrub-enabled machine's
+ * durable store, bypassing every writer-side chokepoint. Each replicated store
+ * therefore lists its RECEIVE path as its own chokepoint (`receivePath`).
+ *
+ * NOTE (rollout reality): the CODE that wires the scrub at each chokepoint lands
+ * incrementally (dark-first). This inventory is the durable contract that names
+ * every chokepoint up front so the ratchet + coverage audit measure progress
+ * against a fixed denominator rather than agent memory.
+ */
+/**
+ * The known set from the routing registry (spec §3) + the replicated-store
+ * receive paths + the tracked follow-ups. SessionSummarySentinel is the FIRST
+ * wired chokepoint (the demonstrated Layer-B wiring); the rest are pending
+ * follow-ups adopting the same one-line scrubber call.
+ */
+export const DURABLE_OUTPUT_CHOKEPOINTS = [
+    {
+        component: 'SessionSummarySentinel',
+        store: 'session routing summaries (state/sessions/<id>/summary.json)',
+        path: 'src/messaging/SessionSummarySentinel.ts',
+        scrubStatus: 'wired',
+        benchAxis: 'covered',
+        benchTaskId: 'session-summary-durable-secret',
+    },
+    {
+        component: 'SessionActivitySentinel',
+        store: 'activity-digest entries → SemanticMemory (long-term memory)',
+        path: 'src/monitoring/SessionActivitySentinel.ts',
+        scrubStatus: 'pending',
+        owner: 'durable-output-hygiene rollout step 3 (Layer A digest writer already shipped v1.3.721; migrate its persist path onto the shared scrubber)',
+        benchAxis: 'pending',
+    },
+    {
+        component: 'SelfKnowledgeTree',
+        store: 'self-knowledge facts extractor → self-knowledge-tree.json',
+        path: 'src/core/SelfKnowledgeTree.ts',
+        scrubStatus: 'pending',
+        owner: 'durable-output-hygiene rollout (adopt the shared scrubber at the facts-persist write)',
+        benchAxis: 'pending',
+    },
+    {
+        component: 'knowledge-base-synthesizer',
+        store: 'knowledge-base synthesized records',
+        path: 'src/knowledge (KB synthesizer persist path)',
+        scrubStatus: 'pending',
+        owner: 'durable-output-hygiene rollout (adopt the shared scrubber at the KB record write)',
+        benchAxis: 'pending',
+        receivePath: {
+            store: 'replicated KB catalog (WS2.4 stateSync.knowledge receive)',
+            scrubStatus: 'pending',
+            owner: 'durable-output-hygiene multi-machine posture (scrub-on-receive with the shared module, or argue a serve-time-redaction exemption)',
+        },
+    },
+    {
+        component: 'correction-learning',
+        store: 'correction distiller records (CorrectionCaptureLoop)',
+        path: 'src/monitoring/CorrectionCaptureLoop.ts',
+        scrubStatus: 'exempt',
+        reason: 'CorrectionCaptureLoop already applies the deterministic scrubSecrets() pass on BOTH sides of its LLM hop (pre-distill + post-distill persist) per its own spec §3.3 — an existing serve-time/persist redaction. Migrates to the shared module in rollout step 0; the class is not unguarded here.',
+        benchAxis: 'covered',
+        benchTaskId: 'correction-distiller',
+    },
+    {
+        component: 'CartographerSweep',
+        store: 'cartographer doc-tree node summaries',
+        path: 'src/core/cartographerSummary.ts',
+        scrubStatus: 'pending',
+        owner: 'durable-output-hygiene rollout (adopt the shared scrubber at the node-summary write; the sweep already runs on a light off-Claude model)',
+        benchAxis: 'pending',
+    },
+    {
+        component: 'learnings-registry',
+        store: 'learnings registry entries',
+        path: 'src/core (learning registry persist path)',
+        scrubStatus: 'pending',
+        owner: 'durable-output-hygiene rollout (adopt the shared scrubber at the learning-persist write)',
+        benchAxis: 'pending',
+        receivePath: {
+            store: 'replicated learnings (WS2.2 stateSync.learnings receive)',
+            scrubStatus: 'pending',
+            owner: 'durable-output-hygiene multi-machine posture (scrub-on-receive with the shared module, or argue a serve-time-redaction exemption)',
+        },
+    },
+    {
+        component: 'RelationshipManager',
+        store: 'relationship records (WS2.3 — user-visible PII)',
+        path: 'src/core/RelationshipManager.ts',
+        scrubStatus: 'pending',
+        owner: 'durable-output-hygiene rollout (adopt the shared scrubber at the relationship-record write)',
+        benchAxis: 'pending',
+        receivePath: {
+            store: 'replicated relationships (WS2.3 stateSync.relationships receive)',
+            scrubStatus: 'pending',
+            owner: 'durable-output-hygiene multi-machine posture (scrub-on-receive with the shared module, or argue a serve-time-redaction exemption)',
+        },
+    },
+    // ── Tracked follow-ups (spec §3 scope boundary + Frontloaded Decision #3) ──
+    {
+        component: 'private-view-publisher',
+        store: 'private views / published Telegraph pages (different write path)',
+        path: 'src/server (view + publish routes)',
+        scrubStatus: 'exempt',
+        reason: 'Out of scope for the first pass (spec Frontloaded Decision #3): a different write path, same pattern. Tracked follow-up owned by the class-closure escalator gap machinery (max-age escalation applies) — a semantically-durable leak path may not park undated.',
+        benchAxis: 'exempt',
+    },
+    {
+        component: 'vector-index-eval-artifacts',
+        store: 'caches / vector indexes / eval artifacts',
+        path: 'src/memory (embedding + eval artifact write paths)',
+        scrubStatus: 'exempt',
+        reason: 'Enumerated as a tracked follow-up (spec §3 scope boundary) under the class-closure gap machinery so it carries the max-age escalation — a semantically-durable leak path cannot park as an undated TODO. Not silently omitted.',
+        benchAxis: 'exempt',
+    },
+];
+/** Chokepoints whose writer-side scrub is wired (the class is guarded here). */
+export function wiredChokepoints() {
+    return DURABLE_OUTPUT_CHOKEPOINTS.filter((c) => c.scrubStatus === 'wired');
+}
+/** Chokepoints still awaiting the scrub (Close the Loop — each has an owner). */
+export function pendingChokepoints() {
+    return DURABLE_OUTPUT_CHOKEPOINTS.filter((c) => c.scrubStatus === 'pending');
+}
+//# sourceMappingURL=durableOutputChokepoints.js.map

package/dist/data/durableOutputChokepoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"durableOutputChokepoints.js","sourceRoot":"","sources":["../../src/data/durableOutputChokepoints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AA+CH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAuC;IAC5E;QACE,SAAS,EAAE,wBAAwB;QACnC,KAAK,EAAE,8DAA8D;QACrE,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EAAE,OAAO;QACpB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,SAAS,EAAE,yBAAyB;QACpC,KAAK,EAAE,6DAA6D;QACpE,IAAI,EAAE,2CAA2C;QACjD,WAAW,EAAE,SAAS;QACtB,KAAK,EAAE,2IAA2I;QAClJ,SAAS,EAAE,SAAS;KACrB;IACD;QACE,SAAS,EAAE,mBAAmB;QAC9B,KAAK,EAAE,2DAA2D;QAClE,IAAI,EAAE,+BAA+B;QACrC,WAAW,EAAE,SAAS;QACtB,KAAK,EAAE,uFAAuF;QAC9F,SAAS,EAAE,SAAS;KACrB;IACD;QACE,SAAS,EAAE,4BAA4B;QACvC,KAAK,EAAE,oCAAoC;QAC3C,IAAI,EAAE,6CAA6C;QACnD,WAAW,EAAE,SAAS;QACtB,KAAK,EAAE,mFAAmF;QAC1F,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE;YACX,KAAK,EAAE,2DAA2D;YAClE,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,mIAAmI;SAC3I;KACF;IACD;QACE,SAAS,EAAE,qBAAqB;QAChC,KAAK,EAAE,sDAAsD;QAC7D,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,mSAAmS;QAC3S,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,SAAS,EAAE,mBAAmB;QAC9B,KAAK,EAAE,sCAAsC;QAC7C,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,SAAS;QACtB,KAAK,EAAE,0IAA0I;QACjJ,SAAS,EAAE,SAAS;KACrB;IACD;QACE,SAAS,EAAE,oBAAoB;QAC/B,KAAK,EAAE,4BAA4B;QACnC,IAAI,EAAE,2CAA2C;QACjD,WAAW,EAAE,SAAS;QACtB,KAAK,EAAE,0FAA0F;QACjG,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE;YACX,KAAK,EAAE,0DAA0D;YACjE,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,mIAAmI;SAC3I;KACF;IACD;QACE,SAAS,EAAE,qBAAqB;QAChC,KAAK,EAAE,iDAAiD;QACxD,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,SAAS;QACtB,KAAK,EAAE,6FAA6F;QACpG,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE;YACX,KAAK,EAAE,kEAAkE;YACzE,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,mIAAmI;SAC3I;KACF;IACD,8EAA8E;IAC9E;QACE,SAAS,EAAE,wBAAwB;QACnC,KAAK,EAAE,kEAAkE;QACzE,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,kQAAkQ;QAC1Q,SAAS,EAAE,QAAQ;KACpB;IACD;QACE,SAAS,EAAE,6BAA6B;QACxC,KAAK,EAAE,0CAA0C;QACjD,IAAI,EAAE,oDAAoD;QAC1D,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,gOAAgO;QACxO,SAAS,EAAE,QAAQ;KACpB;CACF,CAAC;AAEF,gFAAgF;AAChF,MAAM,UAAU,gBAAgB;IAC9B,OAAO,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB;IAChC,OAAO,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC;AAC/E,CAAC"}

package/dist/messaging/SessionSummarySentinel.d.ts

@@ -10,6 +10,7 @@
  * - Falls back to keyword matching when LLM is unavailable
  */
 import type { Session, IntelligenceProvider } from '../core/types.js';
+import type { DurableOutputScrubber } from '../monitoring/DurableOutputScrubber.js';
 export type SessionPhase = 'planning' | 'building' | 'testing' | 'debugging' | 'deploying' | 'engaging' | 'idle';
 export interface SessionSummary {
     sessionId: string;
@@ -23,6 +24,14 @@ export interface SessionSummary {
     updatedAt: string;
     stale: boolean;
     outputHash: string;
+    /**
+     * Durable-Output Hygiene (spec Frontloaded Decision #2 — mandatory provenance):
+     * the one-line human-visible marker set when the Layer-B scrubber redacted a
+     * span from this persisted summary. Absent when nothing was redacted. An
+     * unmarked alteration is a swallowed finding — so an altered summary always
+     * carries this note.
+     */
+    redactionNote?: string;
 }
 export interface SentinelConfig {
     stateDir: string;
@@ -40,6 +49,15 @@ export interface SentinelConfig {
     stalenessMinutes?: number;
     /** Misroute threshold before fallback (default: 3 in 10 min) */
     misrouteThreshold?: number;
+    /**
+     * Durable-Output Hygiene Standard §2 (Layer B) — the config-gated scrubber that
+     * redacts credential SPANS from the LLM/output-derived summary fields BEFORE
+     * they persist to disk. Optional + dark-first: when absent (or not engaged) the
+     * summary is stored byte-for-byte as today. When engaged in dryRun it computes +
+     * records would-redact metrics but stores the original text; only a deliberate
+     * dryRun:false flip actually alters stored content (operator decision).
+     */
+    scrubber?: DurableOutputScrubber;
 }
 export interface RoutingScore {
     sessionId: string;
@@ -73,6 +91,16 @@ export declare class SessionSummarySentinel {
     private parseLlmResponse;
     /** Keyword-based summary extraction (fallback when LLM unavailable) */
     private extractKeywordSummary;
+    /**
+     * Durable-Output Hygiene Standard §2 (Layer B) — run the config-gated scrubber
+     * over the LLM/output-derived string fields (task, blockers) + string arrays
+     * (files, topics) BEFORE the summary persists. When the scrubber is absent or
+     * not engaged this is a strict no-op (returns the input summary). When engaged
+     * in dryRun it records would-redact metrics but returns the original content;
+     * only a live (dryRun:false) scrubber alters the stored text — and every altered
+     * summary carries the mandatory `redactionNote` provenance marker.
+     */
+    private scrubForStore;
     /** Save a summary to disk */
     private saveSummary;
     /** Get a summary for a specific session */

package/dist/messaging/SessionSummarySentinel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SessionSummarySentinel.d.ts","sourceRoot":"","sources":["../../src/messaging/SessionSummarySentinel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAItE,MAAM,MAAM,YAAY,GACpB,UAAU,GACV,UAAU,GACV,SAAS,GACT,WAAW,GACX,WAAW,GACX,UAAU,GACV,MAAM,CAAC;AAEX,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,uCAAuC;IACvC,iBAAiB,EAAE,MAAM,OAAO,EAAE,CAAC;IACnC,2CAA2C;IAC3C,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACtD,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AA8BD,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,KAAK,CAA+C;IAE5D,2DAA2D;IAC3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAE1D,qCAAqC;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,aAAa,CAAa;gBAEtB,MAAM,EAAE,cAAc;IAMlC,8BAA8B;IAC9B,KAAK,IAAI,IAAI;IAMb,6BAA6B;IAC7B,IAAI,IAAI,IAAI;IAOZ,mDAAmD;IAC7C,IAAI,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAyC3E,uEAAuE;YACzD,eAAe;IAwC7B,8CAA8C;IAC9C,OAAO,CAAC,gBAAgB;IAgCxB,uEAAuE;IACvE,OAAO,CAAC,qBAAqB;IAgE7B,6BAA6B;YACf,WAAW;IAOzB,2CAA2C;IAC3C,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAUpD,gCAAgC;IAChC,eAAe,IAAI,cAAc,EAAE;IAoBnC,mDAAmD;YACrC,eAAe;IAgB7B;;;;;;;;;OASG;IACH,eAAe,CACb,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,cAAc,CAAC,EAAE,MAAM,GACtB,YAAY,EAAE;IAkFjB,4CAA4C;IAC5C,OAAO,CAAC,eAAe;IAgBvB,mEAAmE;IACnE,cAAc,IAAI,IAAI;IActB,0EAA0E;IAC1E,gBAAgB,IAAI,OAAO;IAI3B,yCAAyC;IACzC,SAAS,IAAI;QACX,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,OAAO,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;KACzB;CAUF"}
+{"version":3,"file":"SessionSummarySentinel.d.ts","sourceRoot":"","sources":["../../src/messaging/SessionSummarySentinel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAIpF,MAAM,MAAM,YAAY,GACpB,UAAU,GACV,UAAU,GACV,SAAS,GACT,WAAW,GACX,WAAW,GACX,UAAU,GACV,MAAM,CAAC;AAEX,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,uCAAuC;IACvC,iBAAiB,EAAE,MAAM,OAAO,EAAE,CAAC;IACnC,2CAA2C;IAC3C,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACtD,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AA8BD,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,KAAK,CAA+C;IAE5D,2DAA2D;IAC3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAE1D,qCAAqC;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,aAAa,CAAa;gBAEtB,MAAM,EAAE,cAAc;IAMlC,8BAA8B;IAC9B,KAAK,IAAI,IAAI;IAMb,6BAA6B;IAC7B,IAAI,IAAI,IAAI;IAOZ,mDAAmD;IAC7C,IAAI,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IA8C3E,uEAAuE;YACzD,eAAe;IAwC7B,8CAA8C;IAC9C,OAAO,CAAC,gBAAgB;IAgCxB,uEAAuE;IACvE,OAAO,CAAC,qBAAqB;IAgE7B;;;;;;;;OAQG;IACH,OAAO,CAAC,aAAa;IAarB,6BAA6B;YACf,WAAW;IAOzB,2CAA2C;IAC3C,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAUpD,gCAAgC;IAChC,eAAe,IAAI,cAAc,EAAE;IAoBnC,mDAAmD;YACrC,eAAe;IAgB7B;;;;;;;;;OASG;IACH,eAAe,CACb,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,cAAc,CAAC,EAAE,MAAM,GACtB,YAAY,EAAE;IAkFjB,4CAA4C;IAC5C,OAAO,CAAC,eAAe;IAgBvB,mEAAmE;IACnE,cAAc,IAAI,IAAI;IActB,0EAA0E;IAC1E,gBAAgB,IAAI,OAAO;IAI3B,yCAAyC;IACzC,SAAS,IAAI;QACX,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,OAAO,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;KACzB;CAUF"}

package/dist/messaging/SessionSummarySentinel.js

@@ -88,7 +88,12 @@ export class SessionSummarySentinel {
                 // Generate summary
                 const summary = await this.generateSummary(session, output, hash);
                 if (summary) {
-                    await this.saveSummary(summary);
+                    // Durable-Output Hygiene §2: scrub the freshly-generated LLM/output-
+                    // derived summary at the persistence chokepoint BEFORE the write. The
+                    // staleness re-save path (updateStaleness → saveSummary) is deliberately
+                    // NOT re-scrubbed — it re-persists an already-scrubbed summary, so
+                    // re-scrubbing would recompute an empty provenance and drop redactionNote.
+                    await this.saveSummary(this.scrubForStore(summary));
                     this.outputHashes.set(session.id, hash);
                     updated++;
                 }
@@ -218,6 +223,25 @@ export class SessionSummarySentinel {
             outputHash: hash,
         };
     }
+    /**
+     * Durable-Output Hygiene Standard §2 (Layer B) — run the config-gated scrubber
+     * over the LLM/output-derived string fields (task, blockers) + string arrays
+     * (files, topics) BEFORE the summary persists. When the scrubber is absent or
+     * not engaged this is a strict no-op (returns the input summary). When engaged
+     * in dryRun it records would-redact metrics but returns the original content;
+     * only a live (dryRun:false) scrubber alters the stored text — and every altered
+     * summary carries the mandatory `redactionNote` provenance marker.
+     */
+    scrubForStore(summary) {
+        const scrubber = this.config.scrubber;
+        if (!scrubber || !scrubber.isEngaged())
+            return summary;
+        const outcome = scrubber.scrubRecord(summary, ['task', 'blockers', 'files', 'topics'], { store: 'session-summary', callsite: 'SessionSummarySentinel.saveSummary' });
+        const next = outcome.record;
+        if (outcome.provenance)
+            next.redactionNote = outcome.provenance;
+        return next;
+    }
     /** Save a summary to disk */
     async saveSummary(summary) {
         const sessionDir = path.join(this.summaryDir, summary.sessionId);

package/dist/messaging/SessionSummarySentinel.js.map

@@ -1 +1 @@
-{"version":3,"file":"SessionSummarySentinel.js","sourceRoot":"","sources":["../../src/messaging/SessionSummarySentinel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAqD7B,mEAAmE;AAEnE,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AACrC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AACvC,MAAM,oBAAoB,GAAG,EAAE,GAAG,MAAM,CAAC;AACzC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;CActB,CAAC;AAEF,mEAAmE;AAEnE,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAAiB;IACvB,UAAU,CAAS;IAC5B,KAAK,GAA0C,IAAI,CAAC;IAE5D,2DAA2D;IAC1C,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1D,qCAAqC;IACpB,SAAS,GAAa,EAAE,CAAC;IAClC,aAAa,GAAW,CAAC,CAAC;IAElC,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,8BAA8B;IAC9B,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACxE,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,6BAA6B;IAC7B,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,IAAI;QACR,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAEjD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAC9D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1C,OAAO,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnE,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC/C,qCAAqC;oBACrC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACvC,OAAO,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;gBAED,mBAAmB;gBACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBAClE,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;oBAChC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;oBACxC,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED,uEAAuE;IAC/D,KAAK,CAAC,eAAe,CAC3B,OAAgB,EAChB,MAAc,EACd,IAAY;QAEZ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAC;QAChE,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAElE,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAa,CAAC,QAAQ,CACvD,cAAc,GAAG,aAAa,EAC9B,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE,EAAE,CACzF,CAAC;gBAEF,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC/C,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO;wBACL,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,KAAK,EAAE,MAAM,CAAC,KAAqB;wBACnC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;wBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;wBACjC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACtC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACnC,KAAK,EAAE,KAAK;wBACZ,UAAU,EAAE,IAAI;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,wEAAwE;YAClF,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,OAAO,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAED,8CAA8C;IACtC,gBAAgB,CAAC,QAAgB;QAOvC,IAAI,CAAC;YACH,wCAAwC;YACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEnC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAEnE,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YACtG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,iCAAiC;YAC9D,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;gBACpG,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;gBACvG,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;aACvE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC,CAAC,yFAAyF;YACjG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,uEAAuE;IAC/D,qBAAqB,CAC3B,OAAgB,EAChB,MAAc,EACd,IAAY;QAEZ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjC,8CAA8C;QAC9C,MAAM,WAAW,GAAG,6FAA6F,CAAC;QAClH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,MAAM,aAAa,GAA6B;YAC9C,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC;YAC3E,QAAQ,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC;YACvE,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;YAC1E,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC;YACzE,SAAS,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC;YAC3E,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC;YAC9E,GAAG,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC;YACxE,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC;SAC3E,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9D,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAClD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,IAAI,KAAK,GAAiB,UAAU,CAAC;QACrC,IAAI,+CAA+C,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,SAAS,CAAC;aAC/E,IAAI,gDAAgD,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,WAAW,CAAC;aACvF,IAAI,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,UAAU,CAAC;aACnF,IAAI,4CAA4C,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,WAAW,CAAC;aACnF,IAAI,sDAAsD,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,UAAU,CAAC;QAEjG,sDAAsD;QACtD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM;YACzB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC9B,CAAC,CAAC,WAAW,OAAO,CAAC,EAAE,KAAK,KAAK,GAAG,CAAC;QAEvC,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,IAAI;YACJ,KAAK;YACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;YACnB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,6BAA6B;IACrB,KAAK,CAAC,WAAW,CAAC,OAAuB;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACjE,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACvD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,2CAA2C;IAC3C,UAAU,CAAC,SAAiB;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC,CAAC,+CAA+C;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,eAAe;QACb,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;oBAAE,SAAS;gBACnC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBAC3E,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;oBACnD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC,CAAC,gDAAgD;oBACxD,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,sDAAsD;YAC9D,8BAA8B;QAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,mDAAmD;IAC3C,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;QACnF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,gBAAgB,GAAG,MAAM,CAAC;QAEnE,IAAI,OAAO,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;YACxB,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,+DAA+D;IAE/D;;;;;;;;;OASG;IACH,eAAe,CACb,OAAe,EACf,IAAY,EACZ,WAAmB,EACnB,cAAuB;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEzD,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC3C,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;eACvB,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,WAAW,KAAK,cAAc,CAAC,CAAC,CAC7F,CAAC;QAEF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAE5C,MAAM,WAAW,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAmB,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,OAAO,GAAa,EAAE,CAAC;YAE7B,wBAAwB;YACxB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC7C,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CACvD,CAAC,MAAM,CAAC;YACT,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;YACtD,KAAK,IAAI,UAAU,CAAC;YACpB,IAAI,YAAY,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,mBAAmB,CAAC,CAAC;YAEvE,uBAAuB;YACvB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC3C,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CACtC,CAAC,MAAM,CAAC;YACT,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;YACnD,KAAK,IAAI,SAAS,CAAC;YACnB,IAAI,WAAW,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,gBAAgB,CAAC,CAAC;YAElE,6BAA6B;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACnE,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;YACnD,KAAK,IAAI,SAAS,CAAC;YACnB,IAAI,WAAW,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,WAAW,SAAS,CAAC,CAAC;YAEzE,uDAAuD;YACvD,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAClC,KAAK,IAAI,GAAG,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACjC,KAAK,IAAI,GAAG,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACtC,CAAC;YAED,wBAAwB;YACxB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3D,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC;YACrD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACnB,KAAK,IAAI,GAAG,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAClC,CAAC;YAED,oBAAoB;YACpB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,KAAK,IAAI,GAAG,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAChC,CAAC;YAED,OAAO;gBACL,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,KAAK;gBACL,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY;aAC3C,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,mDAAmD;QACnD,OAAO,MAAM;aACV,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,uBAAuB,CAAC,CAAC;IACrD,CAAC;IAED,4CAA4C;IACpC,eAAe,CAAC,IAAY;QAClC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;YACxB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;YAC1D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM;YACzD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI;YAC3D,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ;YAC9D,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;SAC/D,CAAC,CAAC;QAEH,OAAO,IAAI;aACR,KAAK,CAAC,KAAK,CAAC;aACZ,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,+DAA+D;IAE/D,mEAAmE;IACnE,cAAc;QACZ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChC,sBAAsB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC;QAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC;YAC/D,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;QAC9E,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,CAAC;QACzD,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,gBAAgB;QACd,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;IACzC,CAAC;IAED,yCAAyC;IACzC,SAAS;QAOP,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,OAAO;YACL,YAAY,EAAE,SAAS,CAAC,MAAM;YAC9B,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM;YACjD,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE;YACnC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;YACtC,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;SACxC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"SessionSummarySentinel.js","sourceRoot":"","sources":["../../src/messaging/SessionSummarySentinel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAuE7B,mEAAmE;AAEnE,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AACrC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AACvC,MAAM,oBAAoB,GAAG,EAAE,GAAG,MAAM,CAAC;AACzC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;CActB,CAAC;AAEF,mEAAmE;AAEnE,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAAiB;IACvB,UAAU,CAAS;IAC5B,KAAK,GAA0C,IAAI,CAAC;IAE5D,2DAA2D;IAC1C,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1D,qCAAqC;IACpB,SAAS,GAAa,EAAE,CAAC;IAClC,aAAa,GAAW,CAAC,CAAC;IAElC,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,8BAA8B;IAC9B,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACxE,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,6BAA6B;IAC7B,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,IAAI;QACR,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAEjD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAC9D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1C,OAAO,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnE,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC/C,qCAAqC;oBACrC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACvC,OAAO,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;gBAED,mBAAmB;gBACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBAClE,IAAI,OAAO,EAAE,CAAC;oBACZ,qEAAqE;oBACrE,sEAAsE;oBACtE,yEAAyE;oBACzE,mEAAmE;oBACnE,2EAA2E;oBAC3E,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;oBACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;oBACxC,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED,uEAAuE;IAC/D,KAAK,CAAC,eAAe,CAC3B,OAAgB,EAChB,MAAc,EACd,IAAY;QAEZ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAC;QAChE,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAElE,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAa,CAAC,QAAQ,CACvD,cAAc,GAAG,aAAa,EAC9B,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE,EAAE,CACzF,CAAC;gBAEF,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC/C,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO;wBACL,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,KAAK,EAAE,MAAM,CAAC,KAAqB;wBACnC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;wBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;wBACjC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACtC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACnC,KAAK,EAAE,KAAK;wBACZ,UAAU,EAAE,IAAI;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,wEAAwE;YAClF,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,OAAO,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAED,8CAA8C;IACtC,gBAAgB,CAAC,QAAgB;QAOvC,IAAI,CAAC;YACH,wCAAwC;YACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEnC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAEnE,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YACtG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,iCAAiC;YAC9D,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;gBACpG,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;gBACvG,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;aACvE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC,CAAC,yFAAyF;YACjG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,uEAAuE;IAC/D,qBAAqB,CAC3B,OAAgB,EAChB,MAAc,EACd,IAAY;QAEZ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjC,8CAA8C;QAC9C,MAAM,WAAW,GAAG,6FAA6F,CAAC;QAClH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,MAAM,aAAa,GAA6B;YAC9C,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC;YAC3E,QAAQ,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC;YACvE,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;YAC1E,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC;YACzE,SAAS,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC;YAC3E,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC;YAC9E,GAAG,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC;YACxE,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC;SAC3E,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9D,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAClD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,IAAI,KAAK,GAAiB,UAAU,CAAC;QACrC,IAAI,+CAA+C,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,SAAS,CAAC;aAC/E,IAAI,gDAAgD,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,WAAW,CAAC;aACvF,IAAI,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,UAAU,CAAC;aACnF,IAAI,4CAA4C,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,WAAW,CAAC;aACnF,IAAI,sDAAsD,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,UAAU,CAAC;QAEjG,sDAAsD;QACtD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM;YACzB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC9B,CAAC,CAAC,WAAW,OAAO,CAAC,EAAE,KAAK,KAAK,GAAG,CAAC;QAEvC,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,IAAI;YACJ,KAAK;YACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;YACnB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,aAAa,CAAC,OAAuB;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;YAAE,OAAO,OAAO,CAAC;QACvD,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAClC,OAA6C,EAC7C,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,EACvC,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,oCAAoC,EAAE,CAC7E,CAAC;QACF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAmC,CAAC;QACzD,IAAI,OAAO,CAAC,UAAU;YAAE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6BAA6B;IACrB,KAAK,CAAC,WAAW,CAAC,OAAuB;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACjE,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACvD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,2CAA2C;IAC3C,UAAU,CAAC,SAAiB;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC,CAAC,+CAA+C;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,eAAe;QACb,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;oBAAE,SAAS;gBACnC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBAC3E,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;oBACnD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC,CAAC,gDAAgD;oBACxD,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,sDAAsD;YAC9D,8BAA8B;QAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,mDAAmD;IAC3C,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;QACnF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,gBAAgB,GAAG,MAAM,CAAC;QAEnE,IAAI,OAAO,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;YACxB,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,+DAA+D;IAE/D;;;;;;;;;OASG;IACH,eAAe,CACb,OAAe,EACf,IAAY,EACZ,WAAmB,EACnB,cAAuB;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEzD,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC3C,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;eACvB,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,WAAW,KAAK,cAAc,CAAC,CAAC,CAC7F,CAAC;QAEF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAE5C,MAAM,WAAW,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAmB,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,OAAO,GAAa,EAAE,CAAC;YAE7B,wBAAwB;YACxB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC7C,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CACvD,CAAC,MAAM,CAAC;YACT,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;YACtD,KAAK,IAAI,UAAU,CAAC;YACpB,IAAI,YAAY,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,mBAAmB,CAAC,CAAC;YAEvE,uBAAuB;YACvB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC3C,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CACtC,CAAC,MAAM,CAAC;YACT,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;YACnD,KAAK,IAAI,SAAS,CAAC;YACnB,IAAI,WAAW,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,gBAAgB,CAAC,CAAC;YAElE,6BAA6B;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACnE,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;YACnD,KAAK,IAAI,SAAS,CAAC;YACnB,IAAI,WAAW,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,WAAW,SAAS,CAAC,CAAC;YAEzE,uDAAuD;YACvD,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAClC,KAAK,IAAI,GAAG,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACjC,KAAK,IAAI,GAAG,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACtC,CAAC;YAED,wBAAwB;YACxB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3D,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC;YACrD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACnB,KAAK,IAAI,GAAG,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAClC,CAAC;YAED,oBAAoB;YACpB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,KAAK,IAAI,GAAG,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAChC,CAAC;YAED,OAAO;gBACL,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,KAAK;gBACL,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY;aAC3C,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,mDAAmD;QACnD,OAAO,MAAM;aACV,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,uBAAuB,CAAC,CAAC;IACrD,CAAC;IAED,4CAA4C;IACpC,eAAe,CAAC,IAAY;QAClC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;YACxB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;YAC1D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM;YACzD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI;YAC3D,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ;YAC9D,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;SAC/D,CAAC,CAAC;QAEH,OAAO,IAAI;aACR,KAAK,CAAC,KAAK,CAAC;aACZ,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,+DAA+D;IAE/D,mEAAmE;IACnE,cAAc;QACZ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChC,sBAAsB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC;QAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC;YAC/D,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;QAC9E,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,CAAC;QACzD,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,gBAAgB;QACd,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;IACzC,CAAC;IAED,yCAAyC;IACzC,SAAS;QAOP,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,OAAO;YACL,YAAY,EAAE,SAAS,CAAC,MAAM;YAC9B,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM;YACjD,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE;YACnC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;YACtC,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;SACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/monitoring/DurableOutputScrubber.d.ts

@@ -0,0 +1,123 @@
+/**
+ * DurableOutputScrubber — the config-gated Layer B service that wraps the shared
+ * `scrubForStore` floor at a durable-output persistence chokepoint (Durable-Output
+ * Hygiene Standard, "What Persists Must Be Clean" —
+ * docs/specs/durable-output-hygiene-standard.md §2).
+ *
+ * The pure floor (src/core/durableSecretScrub.ts) does the redaction; THIS layer
+ * adds everything that is NOT pure:
+ *   - config gating (enabled / dryRun) — dark-first per Graduated Rollout;
+ *   - observability (FeatureMetricsLedger under feature key `durable-output-scrub`);
+ *   - the MANDATORY provenance marker on every altered entry (spec Frontloaded
+ *     Decision #2 — an unmarked alteration is a swallowed finding);
+ *   - the per-store poisoning-rate alarm (spec §2 — a burst of credential-shaped
+ *     plants is an attention event, not a quiet counter).
+ *
+ * SIGNAL-VS-AUTHORITY (spec §Decision points touched, P2): this is a detector
+ * holding MUTATION authority over durable content — sanctioned as a deterministic
+ * safety floor (the fork-bomb spawn-cap precedent) that earns that authority by
+ * being observable, bounded, and reversible-in-posture:
+ *   - DARK-FIRST + dryRun soak with a measured false-positive rate;
+ *   - provenance marker on every alteration (no silent mutation);
+ *   - typed markers + structured metadata (diagnosable after the fact);
+ *   - per-store opt-out in the chokepoint inventory;
+ *   - an operator-gated enforce flip (dryRun:false is Frontloaded Decision #4).
+ *
+ * dryRun semantics (the canary): while dryRun holds, the scrub is COMPUTED and
+ * its would-redact metrics are recorded, but the ORIGINAL text is returned
+ * unchanged — no durable content is ever altered until a deliberate dryRun:false.
+ * Telemetry never carries the secret (the floor's metadata is kind/offset/length
+ * only, and this layer records COUNTS, never bytes).
+ */
+import { type RedactionSpan, type StructuredRedactionSpan, type DurableSecretKind } from '../core/durableSecretScrub.js';
+/** Minimal metrics sink — the real FeatureMetricsLedger satisfies this. */
+export interface DurableScrubMetricsSink {
+    recordEvent(feature: string, outcome: 'fired' | 'noop' | 'error' | 'shed', verdictId?: string): void;
+}
+/** Fired when one store's redaction rate crosses the poisoning threshold. Carries
+ *  COUNTS + kinds only — never bytes (spec §2 telemetry-safety). */
+export interface PoisoningSignal {
+    store: string;
+    /** Redaction events for this store within the current window. */
+    count: number;
+    /** Distinct pattern kinds seen in the burst. */
+    kinds: DurableSecretKind[];
+    windowMs: number;
+}
+export declare const DURABLE_SCRUB_FEATURE_KEY = "durable-output-scrub";
+export interface DurableOutputScrubberConfig {
+    /** Resolved via resolveDevAgentGate at the construction boundary (live-on-dev,
+     *  dark-on-fleet). When false the scrubber is a strict no-op. */
+    enabled: boolean;
+    /** The canary: while true, compute + record metrics but return original text
+     *  unchanged (no durable mutation). Defaults to TRUE (fail-safe — a missing
+     *  dryRun flag must never silently enable real redaction). */
+    dryRun?: boolean;
+    /** Input size bound handed to the floor (spec §2). */
+    maxBytes?: number;
+    metrics?: DurableScrubMetricsSink;
+    /** Per-store redaction-rate alarm (spec §2 poisoning visibility). Fires ONCE
+     *  per (store) window when count crosses the threshold. */
+    onPoisoningSuspected?: (signal: PoisoningSignal) => void;
+    /** Redactions within `poisoningWindowMs` on one store before the alarm fires. */
+    poisoningThreshold?: number;
+    poisoningWindowMs?: number;
+    /** Injectable clock for deterministic tests. */
+    now?: () => number;
+}
+export interface ScrubOutcome {
+    /** The text to persist. In dryRun (or when disabled) this is the ORIGINAL
+     *  input; live-with-redactions it is the scrubbed text + provenance marker. */
+    text: string;
+    /** Structured redaction metadata (kind/offset/length only). Populated even in
+     *  dryRun (the would-redact record) — never carries matched bytes. */
+    redactions: RedactionSpan[];
+    /** True only when the returned `text` was actually altered (live, ≥1 redaction). */
+    applied: boolean;
+    /** The one-line human-visible provenance marker, when any span was redacted. */
+    provenance?: string;
+}
+export interface ScrubStructuredOutcome<T> {
+    record: T;
+    redactions: StructuredRedactionSpan[];
+    applied: boolean;
+    provenance?: string;
+}
+export declare class DurableOutputScrubber {
+    private readonly enabled;
+    private readonly dryRun;
+    private readonly maxBytes?;
+    private readonly metrics?;
+    private readonly onPoisoningSuspected?;
+    private readonly poisoningThreshold;
+    private readonly poisoningWindowMs;
+    private readonly now;
+    /** Per-store rolling redaction timestamps + kinds for the poisoning alarm. */
+    private readonly poisoningState;
+    constructor(config: DurableOutputScrubberConfig);
+    /** True when the scrubber will actually mutate durable content (enabled AND live). */
+    isEnforcing(): boolean;
+    /** True when the scrubber is engaged at all (enabled — includes dryRun soak). */
+    isEngaged(): boolean;
+    private buildProvenance;
+    private recordAndAlarm;
+    private maybeAlarm;
+    /**
+     * Scrub a single durable string field. Returns the original text unchanged when
+     * disabled or in dryRun; the scrubbed text + provenance marker when enforcing.
+     * Metrics + poisoning alarm fire in BOTH dryRun and enforcing modes.
+     */
+    scrub(input: string, ctx: {
+        store: string;
+        callsite?: string;
+    }): ScrubOutcome;
+    /**
+     * Scrub the named string fields of a structured record before serialization
+     * (spec §2 — structured stores). Same dryRun/enforcing semantics as `scrub`.
+     */
+    scrubRecord<T extends Record<string, unknown>>(record: T, fields: readonly (keyof T)[], ctx: {
+        store: string;
+        callsite?: string;
+    }): ScrubStructuredOutcome<T>;
+}
+//# sourceMappingURL=DurableOutputScrubber.d.ts.map

package/dist/monitoring/DurableOutputScrubber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DurableOutputScrubber.d.ts","sourceRoot":"","sources":["../../src/monitoring/DurableOutputScrubber.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACvB,MAAM,+BAA+B,CAAC;AAEvC,2EAA2E;AAC3E,MAAM,WAAW,uBAAuB;IACtC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtG;AAED;oEACoE;AACpE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAEhE,MAAM,WAAW,2BAA2B;IAC1C;qEACiE;IACjE,OAAO,EAAE,OAAO,CAAC;IACjB;;kEAE8D;IAC9D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAClC;+DAC2D;IAC3D,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;IACzD,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B;mFAC+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb;0EACsE;IACtE,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,oFAAoF;IACpF,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC;IACV,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAKD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA0B;IACnD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAoC;IAC1E,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6F;gBAEhH,MAAM,EAAE,2BAA2B;IAY/C,sFAAsF;IACtF,WAAW,IAAI,OAAO;IAItB,iFAAiF;IACjF,SAAS,IAAI,OAAO;IAIpB,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,UAAU;IA+BlB;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,YAAY;IA6B7E;;;OAGG;IACH,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3C,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAC5B,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GACxC,sBAAsB,CAAC,CAAC,CAAC;CAoB7B"}

package/dist/monitoring/DurableOutputScrubber.js

@@ -0,0 +1,179 @@
+/**
+ * DurableOutputScrubber — the config-gated Layer B service that wraps the shared
+ * `scrubForStore` floor at a durable-output persistence chokepoint (Durable-Output
+ * Hygiene Standard, "What Persists Must Be Clean" —
+ * docs/specs/durable-output-hygiene-standard.md §2).
+ *
+ * The pure floor (src/core/durableSecretScrub.ts) does the redaction; THIS layer
+ * adds everything that is NOT pure:
+ *   - config gating (enabled / dryRun) — dark-first per Graduated Rollout;
+ *   - observability (FeatureMetricsLedger under feature key `durable-output-scrub`);
+ *   - the MANDATORY provenance marker on every altered entry (spec Frontloaded
+ *     Decision #2 — an unmarked alteration is a swallowed finding);
+ *   - the per-store poisoning-rate alarm (spec §2 — a burst of credential-shaped
+ *     plants is an attention event, not a quiet counter).
+ *
+ * SIGNAL-VS-AUTHORITY (spec §Decision points touched, P2): this is a detector
+ * holding MUTATION authority over durable content — sanctioned as a deterministic
+ * safety floor (the fork-bomb spawn-cap precedent) that earns that authority by
+ * being observable, bounded, and reversible-in-posture:
+ *   - DARK-FIRST + dryRun soak with a measured false-positive rate;
+ *   - provenance marker on every alteration (no silent mutation);
+ *   - typed markers + structured metadata (diagnosable after the fact);
+ *   - per-store opt-out in the chokepoint inventory;
+ *   - an operator-gated enforce flip (dryRun:false is Frontloaded Decision #4).
+ *
+ * dryRun semantics (the canary): while dryRun holds, the scrub is COMPUTED and
+ * its would-redact metrics are recorded, but the ORIGINAL text is returned
+ * unchanged — no durable content is ever altered until a deliberate dryRun:false.
+ * Telemetry never carries the secret (the floor's metadata is kind/offset/length
+ * only, and this layer records COUNTS, never bytes).
+ */
+import { scrubForStore, scrubStructured, } from '../core/durableSecretScrub.js';
+export const DURABLE_SCRUB_FEATURE_KEY = 'durable-output-scrub';
+const DEFAULT_POISONING_THRESHOLD = 25;
+const DEFAULT_POISONING_WINDOW_MS = 10 * 60_000;
+export class DurableOutputScrubber {
+    enabled;
+    dryRun;
+    maxBytes;
+    metrics;
+    onPoisoningSuspected;
+    poisoningThreshold;
+    poisoningWindowMs;
+    now;
+    /** Per-store rolling redaction timestamps + kinds for the poisoning alarm. */
+    poisoningState = new Map();
+    constructor(config) {
+        this.enabled = config.enabled === true;
+        // Fail-safe: dryRun defaults TRUE. Real redaction requires an explicit false.
+        this.dryRun = config.dryRun !== false;
+        this.maxBytes = config.maxBytes;
+        this.metrics = config.metrics;
+        this.onPoisoningSuspected = config.onPoisoningSuspected;
+        this.poisoningThreshold = config.poisoningThreshold ?? DEFAULT_POISONING_THRESHOLD;
+        this.poisoningWindowMs = config.poisoningWindowMs ?? DEFAULT_POISONING_WINDOW_MS;
+        this.now = config.now ?? Date.now;
+    }
+    /** True when the scrubber will actually mutate durable content (enabled AND live). */
+    isEnforcing() {
+        return this.enabled && !this.dryRun;
+    }
+    /** True when the scrubber is engaged at all (enabled — includes dryRun soak). */
+    isEngaged() {
+        return this.enabled;
+    }
+    buildProvenance(result) {
+        const n = result.redactions.length;
+        if (result.error)
+            return '⚠ durable-output scrub error — field withheld (see feature metrics: durable-output-scrub)';
+        if (result.truncated)
+            return '⚠ durable-output oversize — field withheld (see feature metrics: durable-output-scrub)';
+        return `${n} span${n === 1 ? '' : 's'} redacted by durable-output scrub (see feature metrics: durable-output-scrub)`;
+    }
+    recordAndAlarm(store, result, kinds) {
+        // Metrics: fired (any redaction), error (fail-safe path), else noop. Counts
+        // only — never the matched bytes (telemetry-safety, spec §2).
+        if (this.metrics) {
+            const outcome = result.error ? 'error' : result.redactions.length > 0 ? 'fired' : 'noop';
+            try {
+                this.metrics.recordEvent(DURABLE_SCRUB_FEATURE_KEY, outcome);
+            }
+            catch { // @silent-fallback-ok — observability must never break the persist path; a metrics sink throw is dropped so the store write still completes.
+                /* metrics are best-effort — never break a durable write */
+            }
+        }
+        if (result.redactions.length === 0)
+            return;
+        this.maybeAlarm(store, kinds);
+    }
+    maybeAlarm(store, kinds) {
+        if (!this.onPoisoningSuspected)
+            return;
+        const t = this.now();
+        let state = this.poisoningState.get(store);
+        if (!state) {
+            state = { events: [], kinds: new Set(), alarmedAt: 0 };
+            this.poisoningState.set(store, state);
+        }
+        state.events.push(t);
+        for (const k of kinds)
+            state.kinds.add(k);
+        // Drop events outside the window.
+        const cutoff = t - this.poisoningWindowMs;
+        while (state.events.length > 0 && state.events[0] < cutoff)
+            state.events.shift();
+        if (state.events.length >= this.poisoningThreshold && state.alarmedAt < cutoff) {
+            state.alarmedAt = t;
+            const signal = {
+                store,
+                count: state.events.length,
+                kinds: [...state.kinds],
+                windowMs: this.poisoningWindowMs,
+            };
+            try {
+                this.onPoisoningSuspected(signal);
+            }
+            catch { // @silent-fallback-ok — the alarm callback is a signal-only escalation; a throw in the consumer must not break the durable write path.
+                /* escalation is best-effort — never break a durable write */
+            }
+            // Reset the window's kind set after alarming so a fresh burst re-signals.
+            state.kinds = new Set();
+        }
+    }
+    /**
+     * Scrub a single durable string field. Returns the original text unchanged when
+     * disabled or in dryRun; the scrubbed text + provenance marker when enforcing.
+     * Metrics + poisoning alarm fire in BOTH dryRun and enforcing modes.
+     */
+    scrub(input, ctx) {
+        if (!this.enabled) {
+            return { text: input, redactions: [], applied: false };
+        }
+        const result = scrubForStore(input, this.maxBytes != null ? { maxBytes: this.maxBytes } : {});
+        const kinds = result.redactions
+            .map((r) => r.kind)
+            .filter((k) => k !== 'scrub-error' && k !== 'oversize');
+        this.recordAndAlarm(ctx.store, result, kinds);
+        const hasRedaction = result.redactions.length > 0;
+        if (this.dryRun) {
+            // Canary: computed + recorded, but the ORIGINAL text is what persists.
+            return {
+                text: input,
+                redactions: result.redactions,
+                applied: false,
+                provenance: hasRedaction ? this.buildProvenance(result) : undefined,
+            };
+        }
+        // Enforcing: the scrubbed text persists, carrying the provenance marker.
+        return {
+            text: result.text,
+            redactions: result.redactions,
+            applied: hasRedaction,
+            provenance: hasRedaction ? this.buildProvenance(result) : undefined,
+        };
+    }
+    /**
+     * Scrub the named string fields of a structured record before serialization
+     * (spec §2 — structured stores). Same dryRun/enforcing semantics as `scrub`.
+     */
+    scrubRecord(record, fields, ctx) {
+        if (!this.enabled) {
+            return { record, redactions: [], applied: false };
+        }
+        const result = scrubStructured(record, fields, this.maxBytes != null ? { maxBytes: this.maxBytes } : {});
+        const kinds = result.redactions
+            .map((r) => r.kind)
+            .filter((k) => k !== 'scrub-error' && k !== 'oversize');
+        this.recordAndAlarm(ctx.store, { redactions: result.redactions, error: result.error }, kinds);
+        const hasRedaction = result.redactions.length > 0;
+        const provenance = hasRedaction
+            ? this.buildProvenance({ redactions: result.redactions, truncated: result.truncated, error: result.error })
+            : undefined;
+        if (this.dryRun) {
+            return { record, redactions: result.redactions, applied: false, provenance };
+        }
+        return { record: result.record, redactions: result.redactions, applied: hasRedaction, provenance };
+    }
+}
+//# sourceMappingURL=DurableOutputScrubber.js.map