observability-toolkit 1.8.5 → 2.1.0

package/dist/lib/privacy/content-redaction.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Content Redaction for LLM Observability Telemetry (R10)
+ *
+ * Tier 1 (irreversible) regex-based PII redaction for span attributes and log event bodies
+ * before export. Designed for pre-export hook in the OTel SDK span processor.
+ *
+ * Architecture:
+ * - Attribute redaction: allowlist/blocklist on structured key-value span attributes
+ * - Body redaction: pattern-based replacement on free-text log event body content
+ * - Customizable via RedactionConfig: override patterns, add custom rules, disable categories
+ *
+ * @see docs/roadmap/r10-content-redaction-pipelines.md
+ */
+/** Placeholder used for irreversible redaction (Tier 1) */
+export declare const REDACTION_PLACEHOLDER = "[REDACTED]";
+/** Appended when input was truncated before redaction — signals incomplete sanitization */
+export declare const REDACTION_TRUNCATION_SENTINEL = "[TRUNCATED\u2014REDACTION INCOMPLETE]";
+/** Category-specific placeholders for human-readable audit trails */
+export declare const REDACTION_PLACEHOLDERS: {
+    readonly email: "[EMAIL]";
+    readonly phone: "[PHONE]";
+    readonly ssn: "[SSN]";
+    readonly creditCard: "[CREDIT_CARD]";
+    readonly ipAddress: "[IP_ADDRESS]";
+    readonly apiKey: "[API_KEY]";
+    readonly generic: "[REDACTED]";
+};
+export type RedactionCategory = keyof typeof REDACTION_PLACEHOLDERS;
+/**
+ * Span attribute keys that contain LLM prompt/completion content.
+ * These keys are blocked by default when attribute-level redaction is enabled.
+ */
+export declare const GENAI_CONTENT_ATTRIBUTE_KEYS: ReadonlySet<string>;
+/**
+ * Span attribute keys that are safe to pass through without redaction.
+ * Structural/metadata attributes that contain no user content.
+ *
+ * Reviewed against OTel GenAI semantic conventions v1.29.0.
+ * Re-audit this set on semconv upgrade — some keys (e.g. gen_ai.system) may
+ * carry user-supplied content in certain instrumentation libraries.
+ *
+ * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/ (v1.29.0)
+ */
+export declare const GENAI_SAFE_ATTRIBUTE_KEYS: ReadonlySet<string>;
+/** A single custom redaction rule */
+export interface RedactionRule {
+    /** Unique identifier for this rule (used in audit logs) */
+    id: string;
+    /** Regex to match; must have the `g` flag for global replacement */
+    pattern: RegExp;
+    /** Replacement string (default: REDACTION_PLACEHOLDER) */
+    placeholder?: string;
+}
+export interface RedactionConfig {
+    /**
+     * Categories to disable from the built-in pattern set.
+     * When omitted, all built-in categories are active.
+     */
+    disabledCategories?: RedactionCategory[];
+    /**
+     * Additional custom redaction rules applied after built-in patterns.
+     * Rules are applied in order.
+     */
+    customRules?: RedactionRule[];
+    /**
+     * When true, redact the value of any span attribute key in GENAI_CONTENT_ATTRIBUTE_KEYS.
+     * Default: false (attributes are passed through; only body redaction is applied).
+     */
+    redactContentAttributes?: boolean;
+    /**
+     * When true, skip all built-in patterns and only apply customRules.
+     * Useful for callers that want full control over redaction behavior.
+     */
+    disableBuiltins?: boolean;
+}
+/**
+ * Redact PII from a free-text string using the configured pattern set.
+ *
+ * - Input is truncated at MAX_SANITIZE_LENGTH before regex processing (ReDoS guard).
+ * - Returns the original value unchanged if it is not a string.
+ * - Patterns are applied sequentially; each uses a freshly reset lastIndex.
+ *
+ * @param text - Input text to redact
+ * @param config - Redaction configuration
+ * @returns Redacted text with PII replaced by placeholders
+ */
+export declare function redactText(text: string, config?: RedactionConfig): string;
+/**
+ * Redact PII from a span attribute value.
+ *
+ * - If the key is in GENAI_CONTENT_ATTRIBUTE_KEYS and redactContentAttributes is enabled,
+ *   the value is replaced wholesale with REDACTION_PLACEHOLDER.
+ * - Otherwise, applies text redaction to string values.
+ * - Non-string attribute values (numbers, booleans, arrays) pass through unchanged.
+ *
+ * @param key - Span attribute key
+ * @param value - Span attribute value
+ * @param config - Redaction configuration
+ * @returns Redacted attribute value
+ */
+export declare function redactAttributeValue(key: string, value: unknown, config?: RedactionConfig): unknown;
+/**
+ * Redact PII from all attributes in a span attribute map.
+ *
+ * Returns a new object — does not mutate the input.
+ *
+ * @param attributes - Span attribute map (key → value)
+ * @param config - Redaction configuration
+ * @returns New attribute map with PII redacted
+ */
+export declare function redactAttributes(attributes: Record<string, unknown>, config?: RedactionConfig): Record<string, unknown>;
+/**
+ * Minimal shape of an OTel span as used within this toolkit.
+ * Only fields relevant to redaction are required.
+ */
+export interface RedactableSpan {
+    attributes?: Record<string, unknown>;
+    /** Optional free-text body (log events, custom spans) */
+    body?: string;
+    /** Other span fields pass through unchanged */
+    [key: string]: unknown;
+}
+/**
+ * Redact PII from a single span (attributes + body).
+ *
+ * Returns a new object — does not mutate the input.
+ *
+ * @param span - Span to redact
+ * @param config - Redaction configuration
+ * @returns New span with PII redacted from attributes and body
+ */
+export declare function redactSpan(span: RedactableSpan, config?: RedactionConfig): RedactableSpan;
+/**
+ * Redact PII from an array of spans in one pass.
+ *
+ * @param spans - Array of spans to redact
+ * @param config - Redaction configuration
+ * @returns New array of spans with PII redacted
+ */
+export declare function redactSpans(spans: RedactableSpan[], config?: RedactionConfig): RedactableSpan[];
+//# sourceMappingURL=content-redaction.d.ts.map

package/dist/lib/privacy/content-redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-redaction.d.ts","sourceRoot":"","sources":["../../../src/lib/privacy/content-redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAQH,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAElD,2FAA2F;AAC3F,eAAO,MAAM,6BAA6B,0CAAqC,CAAC;AAEhF,qEAAqE;AACrE,eAAO,MAAM,sBAAsB;;;;;;;;CAQzB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,sBAAsB,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,MAAM,CAO3D,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAQxD,CAAC;AA0CH,qCAAqC;AACrC,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACzC;;;OAGG;IACH,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;IAC9B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAmCD;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,eAAoB,GAAG,MAAM,CAe7E;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,MAAM,GAAE,eAAoB,GAC3B,OAAO,CAUT;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,MAAM,GAAE,eAAoB,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAMD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,GAAE,eAAoB,GAAG,cAAc,CAY7F;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,MAAM,GAAE,eAAoB,GAAG,cAAc,EAAE,CAEnG"}

package/dist/lib/privacy/content-redaction.js

@@ -0,0 +1,210 @@
+/**
+ * Content Redaction for LLM Observability Telemetry (R10)
+ *
+ * Tier 1 (irreversible) regex-based PII redaction for span attributes and log event bodies
+ * before export. Designed for pre-export hook in the OTel SDK span processor.
+ *
+ * Architecture:
+ * - Attribute redaction: allowlist/blocklist on structured key-value span attributes
+ * - Body redaction: pattern-based replacement on free-text log event body content
+ * - Customizable via RedactionConfig: override patterns, add custom rules, disable categories
+ *
+ * @see docs/roadmap/r10-content-redaction-pipelines.md
+ */
+import { MAX_SANITIZE_LENGTH } from '../errors/error-sanitizer.js';
+// ============================================================================
+// Constants
+// ============================================================================
+/** Placeholder used for irreversible redaction (Tier 1) */
+export const REDACTION_PLACEHOLDER = '[REDACTED]';
+/** Appended when input was truncated before redaction — signals incomplete sanitization */
+export const REDACTION_TRUNCATION_SENTINEL = '[TRUNCATED—REDACTION INCOMPLETE]';
+/** Category-specific placeholders for human-readable audit trails */
+export const REDACTION_PLACEHOLDERS = {
+    email: '[EMAIL]',
+    phone: '[PHONE]',
+    ssn: '[SSN]',
+    creditCard: '[CREDIT_CARD]',
+    ipAddress: '[IP_ADDRESS]',
+    apiKey: '[API_KEY]',
+    generic: '[REDACTED]',
+};
+/**
+ * Span attribute keys that contain LLM prompt/completion content.
+ * These keys are blocked by default when attribute-level redaction is enabled.
+ */
+export const GENAI_CONTENT_ATTRIBUTE_KEYS = new Set([
+    'gen_ai.prompt',
+    'gen_ai.completion',
+    'gen_ai.user.message',
+    'gen_ai.assistant.message',
+    'gen_ai.tool.message',
+    'gen_ai.system.message',
+]);
+/**
+ * Span attribute keys that are safe to pass through without redaction.
+ * Structural/metadata attributes that contain no user content.
+ *
+ * Reviewed against OTel GenAI semantic conventions v1.29.0.
+ * Re-audit this set on semconv upgrade — some keys (e.g. gen_ai.system) may
+ * carry user-supplied content in certain instrumentation libraries.
+ *
+ * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/ (v1.29.0)
+ */
+export const GENAI_SAFE_ATTRIBUTE_KEYS = new Set([
+    'gen_ai.system',
+    'gen_ai.request.model',
+    'gen_ai.usage.input_tokens',
+    'gen_ai.usage.output_tokens',
+    'gen_ai.response.finish_reasons',
+    'gen_ai.response.id',
+    'gen_ai.operation.name',
+]);
+// ============================================================================
+// Built-in PII Patterns
+// ============================================================================
+/** Email address pattern */
+const EMAIL_PATTERN = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
+/** US phone number patterns (various formats) */
+const PHONE_PATTERN = /(?:\+?1[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b/g;
+/** US Social Security Number */
+const SSN_PATTERN = /\b\d{3}-\d{2}-\d{4}\b/g;
+/** Credit card numbers (Visa, MC, Amex, Discover) — Luhn not checked */
+const CREDIT_CARD_PATTERN = /\b(?:4\d{3}|5[1-5]\d{2}|6011|3[47]\d{2})[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}\b/g;
+/** IPv4 addresses */
+const IPV4_PATTERN = /\b(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\b/g;
+/** IPv6 addresses (full and abbreviated) */
+const IPV6_PATTERN = /\b(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}\b|\b(?:[0-9a-fA-F]{1,4}:)*::(?:[0-9a-fA-F]{1,4}:)*[0-9a-fA-F]{1,4}\b/g;
+/** API keys and tokens (common patterns: Bearer tokens, sk-*, pk-*, etc.) */
+const API_KEY_PATTERN = /(?:sk|pk|api|tok|key)-[A-Za-z0-9_-]{16,}|Bearer\s+[A-Za-z0-9._-]{16,}/g;
+/** Default built-in pattern set with co-located category for filtering */
+const BUILT_IN_PATTERNS = [
+    { pattern: EMAIL_PATTERN, placeholder: REDACTION_PLACEHOLDERS.email, category: 'email' },
+    { pattern: PHONE_PATTERN, placeholder: REDACTION_PLACEHOLDERS.phone, category: 'phone' },
+    { pattern: SSN_PATTERN, placeholder: REDACTION_PLACEHOLDERS.ssn, category: 'ssn' },
+    { pattern: CREDIT_CARD_PATTERN, placeholder: REDACTION_PLACEHOLDERS.creditCard, category: 'creditCard' },
+    { pattern: IPV4_PATTERN, placeholder: REDACTION_PLACEHOLDERS.ipAddress, category: 'ipAddress' },
+    { pattern: IPV6_PATTERN, placeholder: REDACTION_PLACEHOLDERS.ipAddress, category: 'ipAddress' },
+    { pattern: API_KEY_PATTERN, placeholder: REDACTION_PLACEHOLDERS.apiKey, category: 'apiKey' },
+];
+// ============================================================================
+// Body Redaction (free-text)
+// ============================================================================
+/**
+ * Build the active pattern list from config.
+ * Filters out disabled categories and adds custom rules.
+ */
+function buildActivePatterns(config) {
+    const active = [];
+    if (!config.disableBuiltins) {
+        const disabledSet = new Set(config.disabledCategories ?? []);
+        for (const entry of BUILT_IN_PATTERNS) {
+            if (!disabledSet.has(entry.category)) {
+                active.push(entry);
+            }
+        }
+    }
+    for (const rule of config.customRules ?? []) {
+        active.push({
+            pattern: rule.pattern,
+            placeholder: rule.placeholder ?? REDACTION_PLACEHOLDER,
+        });
+    }
+    return active;
+}
+/**
+ * Redact PII from a free-text string using the configured pattern set.
+ *
+ * - Input is truncated at MAX_SANITIZE_LENGTH before regex processing (ReDoS guard).
+ * - Returns the original value unchanged if it is not a string.
+ * - Patterns are applied sequentially; each uses a freshly reset lastIndex.
+ *
+ * @param text - Input text to redact
+ * @param config - Redaction configuration
+ * @returns Redacted text with PII replaced by placeholders
+ */
+export function redactText(text, config = {}) {
+    if (typeof text !== 'string' || text.length === 0)
+        return text;
+    // ReDoS guard: truncate excessively long inputs
+    const truncated = text.length > MAX_SANITIZE_LENGTH;
+    const safe = truncated ? text.slice(0, MAX_SANITIZE_LENGTH) : text;
+    const patterns = buildActivePatterns(config);
+    let result = safe;
+    for (const { pattern, placeholder } of patterns) {
+        result = result.replace(pattern, placeholder);
+    }
+    return truncated ? `${result} ${REDACTION_TRUNCATION_SENTINEL}` : result;
+}
+// ============================================================================
+// Attribute Redaction (structured key-value)
+// ============================================================================
+/**
+ * Redact PII from a span attribute value.
+ *
+ * - If the key is in GENAI_CONTENT_ATTRIBUTE_KEYS and redactContentAttributes is enabled,
+ *   the value is replaced wholesale with REDACTION_PLACEHOLDER.
+ * - Otherwise, applies text redaction to string values.
+ * - Non-string attribute values (numbers, booleans, arrays) pass through unchanged.
+ *
+ * @param key - Span attribute key
+ * @param value - Span attribute value
+ * @param config - Redaction configuration
+ * @returns Redacted attribute value
+ */
+export function redactAttributeValue(key, value, config = {}) {
+    // Wholesale redaction of known content attributes
+    if (config.redactContentAttributes && GENAI_CONTENT_ATTRIBUTE_KEYS.has(key)) {
+        return REDACTION_PLACEHOLDER;
+    }
+    // Only process string values
+    if (typeof value !== 'string')
+        return value;
+    return redactText(value, config);
+}
+/**
+ * Redact PII from all attributes in a span attribute map.
+ *
+ * Returns a new object — does not mutate the input.
+ *
+ * @param attributes - Span attribute map (key → value)
+ * @param config - Redaction configuration
+ * @returns New attribute map with PII redacted
+ */
+export function redactAttributes(attributes, config = {}) {
+    const result = {};
+    for (const [key, value] of Object.entries(attributes)) {
+        result[key] = redactAttributeValue(key, value, config);
+    }
+    return result;
+}
+/**
+ * Redact PII from a single span (attributes + body).
+ *
+ * Returns a new object — does not mutate the input.
+ *
+ * @param span - Span to redact
+ * @param config - Redaction configuration
+ * @returns New span with PII redacted from attributes and body
+ */
+export function redactSpan(span, config = {}) {
+    const result = { ...span };
+    if (span.attributes) {
+        result.attributes = redactAttributes(span.attributes, config);
+    }
+    if (typeof span.body === 'string') {
+        result.body = redactText(span.body, config);
+    }
+    return result;
+}
+/**
+ * Redact PII from an array of spans in one pass.
+ *
+ * @param spans - Array of spans to redact
+ * @param config - Redaction configuration
+ * @returns New array of spans with PII redacted
+ */
+export function redactSpans(spans, config = {}) {
+    return spans.map(span => redactSpan(span, config));
+}
+//# sourceMappingURL=content-redaction.js.map

package/dist/lib/privacy/content-redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-redaction.js","sourceRoot":"","sources":["../../../src/lib/privacy/content-redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,6BAA6B,GAAG,kCAAkC,CAAC;AAEhF,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,SAAS;IAChB,GAAG,EAAE,OAAO;IACZ,UAAU,EAAE,eAAe;IAC3B,SAAS,EAAE,cAAc;IACzB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;CACb,CAAC;AAIX;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IACvE,eAAe;IACf,mBAAmB;IACnB,qBAAqB;IACrB,0BAA0B;IAC1B,qBAAqB;IACrB,uBAAuB;CACxB,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IACpE,eAAe;IACf,sBAAsB;IACtB,2BAA2B;IAC3B,4BAA4B;IAC5B,gCAAgC;IAChC,oBAAoB;IACpB,uBAAuB;CACxB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,4BAA4B;AAC5B,MAAM,aAAa,GAAG,qDAAqD,CAAC;AAE5E,iDAAiD;AACjD,MAAM,aAAa,GAAG,wDAAwD,CAAC;AAE/E,gCAAgC;AAChC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C,wEAAwE;AACxE,MAAM,mBAAmB,GAAG,8EAA8E,CAAC;AAE3G,qBAAqB;AACrB,MAAM,YAAY,GAAG,yIAAyI,CAAC;AAE/J,4CAA4C;AAC5C,MAAM,YAAY,GAAG,kHAAkH,CAAC;AAExI,6EAA6E;AAC7E,MAAM,eAAe,GAAG,wEAAwE,CAAC;AAEjG,0EAA0E;AAC1E,MAAM,iBAAiB,GAAiF;IACtG,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE;IACxF,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE;IACxF,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,sBAAsB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;IAClF,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,sBAAsB,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IACxG,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,sBAAsB,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC/F,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,sBAAsB,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC/F,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE;CAC7F,CAAC;AAuCF,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,mBAAmB,CAC1B,MAAuB;IAEvB,MAAM,MAAM,GAAoD,EAAE,CAAC;IAEnE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAE7D,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;YACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,qBAAqB;SACvD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,SAA0B,EAAE;IACnE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/D,gDAAgD;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,GAAG,IAAI,CAAC;IAElB,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,6BAA6B,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3E,CAAC;AAED,+EAA+E;AAC/E,6CAA6C;AAC7C,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,KAAc,EACd,SAA0B,EAAE;IAE5B,kDAAkD;IAClD,IAAI,MAAM,CAAC,uBAAuB,IAAI,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED,6BAA6B;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5C,OAAO,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAmC,EACnC,SAA0B,EAAE;IAE5B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAkBD;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,IAAoB,EAAE,SAA0B,EAAE;IAC3E,MAAM,MAAM,GAAmB,EAAE,GAAG,IAAI,EAAE,CAAC;IAE3C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,CAAC,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB,EAAE,SAA0B,EAAE;IAC/E,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/lib/privacy/content-redaction.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=content-redaction.test.d.ts.map

package/dist/lib/privacy/content-redaction.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-redaction.test.d.ts","sourceRoot":"","sources":["../../../src/lib/privacy/content-redaction.test.ts"],"names":[],"mappings":""}