offrouter-core 0.2.0 → 0.2.2

package/dist/audit.d.ts

@@ -0,0 +1,137 @@
+import type { FallbackChainEntry, FallbackReason, PolicyDenial, RouteDecision, RouteRequest, SelectedRoute } from "./types.js";
+/** Default max chars kept for an opt-in redacted prompt preview. */
+export declare const DEFAULT_PREVIEW_MAX_CHARS = 80;
+/** Cancellation lifecycle for an audited request/decision in-process. */
+export type CancellationState = "active" | "cancelled" | "completed";
+/** High-level audit event kind. */
+export type AuditRecordKind = "route_decision" | "api_key_fallback" | "cancellation";
+/**
+ * Append-only audit record. Intentionally omits raw prompt text.
+ * `promptPreviewRedacted` appears only when explicitly requested at append.
+ */
+export interface AuditRecord {
+    recordId: string;
+    kind: AuditRecordKind;
+    timestamp: string;
+    requestId: string;
+    decisionId?: string;
+    profile?: string;
+    harnessKind?: string;
+    /** Prompt content login digest (sha256:..., etc.). Never the prompt itself. */
+    promptDigest?: string;
+    /**
+     * Short, redacted preview. Present only when the append opted into previews.
+     * Never the full raw user prompt.
+     */
+    promptPreviewRedacted?: string;
+    /** Digest-oriented decision summary from routing. */
+    auditSummary?: string;
+    reason: string;
+    explanation: string;
+    route?: SelectedRoute | null;
+    fallbackChain?: FallbackChainEntry[];
+    /** Explicit API-key fallback reason when paid capacity was used. */
+    apiKeyFallbackReason?: FallbackReason | string;
+    policyDenials?: PolicyDenial[];
+    blocked?: boolean;
+    needsConfiguration?: boolean;
+    cancellationState?: CancellationState;
+    cancelledAt?: string;
+}
+export interface AppendDecisionOptions {
+    /**
+     * When true, store a short redacted preview derived from promptPreview.
+     * Default false — digests and summaries only.
+     */
+    includePromptPreview?: boolean;
+    /** Max chars of redacted preview when includePromptPreview is true. */
+    previewMaxChars?: number;
+    /**
+     * Known secret values to strip in addition to pattern-based redaction.
+     * Never stored; used only during redaction.
+     */
+    knownSecrets?: Iterable<string>;
+    /** Initial cancellation state; default "active" for successful routes. */
+    cancellationState?: CancellationState;
+    /** Override clock for tests. */
+    now?: () => Date;
+}
+export interface ListAuditOptions {
+    requestId?: string;
+    decisionId?: string;
+    kind?: AuditRecordKind;
+    /** Max records to return (most recent first). */
+    limit?: number;
+}
+export interface MarkCancelledOptions {
+    reason?: string;
+    now?: () => Date;
+}
+/**
+ * Audit log contract. Implementations must never persist raw secrets or full
+ * prompt bodies by default.
+ */
+export interface AuditStore {
+    appendDecision(request: RouteRequest, decision: RouteDecision, options?: AppendDecisionOptions): Promise<AuditRecord>;
+    /**
+     * Record that an API-key fallback was used, with an audited reason.
+     * Always redacted; never log the delegated prompt or credential material.
+     */
+    recordApiKeyFallback(input: {
+        requestId: string;
+        decisionId?: string;
+        reason: FallbackReason | string;
+        explanation: string;
+        route?: SelectedRoute | null;
+        /** Optional digest already present on the route request/decision. */
+        promptDigest?: string;
+        knownSecrets?: Iterable<string>;
+        now?: () => Date;
+    }): Promise<AuditRecord>;
+    markCancelled(requestId: string, options?: MarkCancelledOptions): Promise<AuditRecord | undefined>;
+    markCompleted(requestId: string, options?: {
+        now?: () => Date;
+    }): Promise<AuditRecord | undefined>;
+    getCancellationState(requestId: string): Promise<CancellationState | undefined>;
+    list(options?: ListAuditOptions): Promise<AuditRecord[]>;
+    get(recordId: string): Promise<AuditRecord | undefined>;
+    /**
+     * JSON-safe diagnostic view. Must never include raw prompt text or secrets.
+     */
+    toJSON(): Record<string, unknown>;
+}
+export interface InMemoryAuditStoreOptions {
+    /** Optional hard cap on retained records (FIFO eviction of oldest). */
+    maxRecords?: number;
+    /** Default known secrets used for every redaction pass. */
+    knownSecrets?: Iterable<string>;
+    now?: () => Date;
+}
+/**
+ * In-memory audit store for tests and single-process V1 use.
+ * Appends are serialized so concurrent writers cannot interleave corruptly.
+ */
+export declare class InMemoryAuditStore implements AuditStore {
+    #private;
+    constructor(options?: InMemoryAuditStoreOptions);
+    appendDecision(request: RouteRequest, decision: RouteDecision, options?: AppendDecisionOptions): Promise<AuditRecord>;
+    recordApiKeyFallback(input: {
+        requestId: string;
+        decisionId?: string;
+        reason: FallbackReason | string;
+        explanation: string;
+        route?: SelectedRoute | null;
+        promptDigest?: string;
+        knownSecrets?: Iterable<string>;
+        now?: () => Date;
+    }): Promise<AuditRecord>;
+    markCancelled(requestId: string, options?: MarkCancelledOptions): Promise<AuditRecord | undefined>;
+    markCompleted(requestId: string, options?: {
+        now?: () => Date;
+    }): Promise<AuditRecord | undefined>;
+    getCancellationState(requestId: string): Promise<CancellationState | undefined>;
+    list(options?: ListAuditOptions): Promise<AuditRecord[]>;
+    get(recordId: string): Promise<AuditRecord | undefined>;
+    toJSON(): Record<string, unknown>;
+}
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,aAAa,EACd,MAAM,YAAY,CAAC;AAEpB,oEAAoE;AACpE,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,yEAAyE;AACzE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAErE,mCAAmC;AACnC,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,CAAC;AAEnB;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACrC,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC;IAC/C,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,cAAc,CACZ,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,aAAa,EACvB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,WAAW,CAAC,CAAC;IAExB;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,cAAc,GAAG,MAAM,CAAC;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;QAC7B,qEAAqE;QACrE,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;KAClB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAEzB,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAEpC,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,GAC7B,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAEpC,oBAAoB,CAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAE1C,IAAI,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAEzD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAExD;;OAEG;IACH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,yBAAyB;IACxC,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAqED;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,UAAU;;gBAUvC,OAAO,GAAE,yBAA8B;IAkB7C,cAAc,CAClB,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,aAAa,EACvB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,WAAW,CAAC;IA+EjB,oBAAoB,CAAC,KAAK,EAAE;QAChC,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,cAAc,GAAG,MAAM,CAAC;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;QAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;KAClB,GAAG,OAAO,CAAC,WAAW,CAAC;IAyBlB,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IA4B7B,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO,GACjC,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAuB7B,oBAAoB,CACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAKnC,IAAI,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAmB5D,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAK7D,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CA8ElC"}

package/dist/audit.js

@@ -0,0 +1,320 @@
+/**
+ * Redacted audit log store for OffRouter V1.
+ *
+ * V1 keeps only digests, short redacted previews (opt-in), and decision
+ * summaries. Raw prompt text and secrets are never persisted by default.
+ *
+ * In-memory only for this task; file/JSONL backend comes after the interface
+ * stabilizes (see design: ~/.offrouter/audit/*.jsonl).
+ */
+import { randomBytes } from "node:crypto";
+import { redact, REDACTED } from "./secrets.js";
+/** Default max chars kept for an opt-in redacted prompt preview. */
+export const DEFAULT_PREVIEW_MAX_CHARS = 80;
+function newId(prefix) {
+    return `${prefix}_${randomBytes(8).toString("hex")}`;
+}
+function clampPreview(text, maxChars) {
+    if (text.length <= maxChars)
+        return text;
+    return `${text.slice(0, Math.max(0, maxChars - 1))}…`;
+}
+/**
+ * Strip secret-like patterns and optionally known secrets from free text.
+ * Safe for empty/undefined values.
+ */
+function safeRedact(value, knownSecrets) {
+    if (value == null || value === "")
+        return value ?? "";
+    return redact(value, knownSecrets);
+}
+function looksLikeApiKeyFallback(decision) {
+    if (decision.route?.authTier === "api-key") {
+        if (decision.reason === "api_key_fallback")
+            return true;
+        if (decision.fallbackChain?.some((e) => e.reason === "api_key_fallback" || e.authTier === "api-key")) {
+            return true;
+        }
+        // Any API-key selection with a subscription fallback reason counts.
+        if (decision.fallbackChain?.some((e) => e.reason === "subscription_exhausted" ||
+            e.reason === "subscription_degraded" ||
+            e.reason === "subscription_unconfigured" ||
+            e.reason === "provider_error")) {
+            return true;
+        }
+    }
+    return decision.reason === "api_key_fallback";
+}
+function extractApiKeyFallbackReason(decision) {
+    if (!looksLikeApiKeyFallback(decision))
+        return undefined;
+    const chainHit = decision.fallbackChain?.find((e) => e.reason === "api_key_fallback");
+    if (chainHit)
+        return chainHit.reason;
+    const exhausted = decision.fallbackChain?.find((e) => e.reason === "subscription_exhausted" ||
+        e.reason === "subscription_degraded" ||
+        e.reason === "subscription_unconfigured" ||
+        e.reason === "provider_error");
+    if (exhausted)
+        return exhausted.reason;
+    if (decision.route?.authTier === "api-key")
+        return "api_key_fallback";
+    return decision.reason;
+}
+/**
+ * In-memory audit store for tests and single-process V1 use.
+ * Appends are serialized so concurrent writers cannot interleave corruptly.
+ */
+export class InMemoryAuditStore {
+    #records = [];
+    #byId = new Map();
+    /** Latest cancellation-bearing record per requestId. */
+    #latestByRequest = new Map();
+    #maxRecords;
+    #defaultKnownSecrets;
+    #now;
+    #chain = Promise.resolve();
+    constructor(options = {}) {
+        this.#maxRecords = options.maxRecords;
+        this.#defaultKnownSecrets = options.knownSecrets
+            ? [...options.knownSecrets].filter((s) => typeof s === "string" && s.length > 0)
+            : [];
+        this.#now = options.now ?? (() => new Date());
+    }
+    /** Serialize mutations so concurrent appends stay ordered and consistent. */
+    #exclusive(fn) {
+        const run = this.#chain.then(fn, fn);
+        this.#chain = run.then(() => undefined, () => undefined);
+        return run;
+    }
+    async appendDecision(request, decision, options = {}) {
+        return this.#exclusive(() => {
+            const known = mergeKnown(this.#defaultKnownSecrets, options.knownSecrets);
+            const now = (options.now ?? this.#now)();
+            const includePreview = options.includePromptPreview === true;
+            const maxChars = options.previewMaxChars ?? DEFAULT_PREVIEW_MAX_CHARS;
+            const apiKeyFallbackReason = extractApiKeyFallbackReason(decision);
+            const kind = apiKeyFallbackReason
+                ? "api_key_fallback"
+                : "route_decision";
+            const initialCancellation = options.cancellationState ??
+                (decision.blocked || decision.route == null ? "completed" : "active");
+            // Drop any raw-looking fields that might have leaked into reason/explanation.
+            const reason = safeRedact(decision.reason, known);
+            const explanation = safeRedact(decision.explanation, known);
+            const auditSummary = decision.auditSummary
+                ? safeRedact(decision.auditSummary, known)
+                : safeRedact(`decision=${decision.decisionId} digest=${request.task.promptDigest}`, known);
+            // Guard: never let raw promptPreview appear in stored free text.
+            const rawPreview = request.task.promptPreview;
+            const redactedStoredPreview = includePreview
+                ? clampPreview(safeRedact(rawPreview, known), maxChars)
+                : undefined;
+            const record = {
+                recordId: newId("aud"),
+                kind,
+                timestamp: now.toISOString(),
+                requestId: request.requestId,
+                decisionId: decision.decisionId,
+                profile: request.harness.profile,
+                harnessKind: request.harness.kind,
+                promptDigest: request.task.promptDigest,
+                auditSummary,
+                reason,
+                explanation,
+                route: decision.route ?? null,
+                fallbackChain: decision.fallbackChain
+                    ? decision.fallbackChain.map((e) => ({ ...e }))
+                    : undefined,
+                apiKeyFallbackReason,
+                policyDenials: decision.policyDenials
+                    ? decision.policyDenials.map((d) => ({
+                        ...d,
+                        message: safeRedact(d.message, known),
+                    }))
+                    : undefined,
+                blocked: decision.blocked,
+                needsConfiguration: decision.needsConfiguration,
+                cancellationState: initialCancellation,
+            };
+            if (redactedStoredPreview !== undefined) {
+                // If redaction wiped the value entirely, keep a stable redacted token.
+                record.promptPreviewRedacted =
+                    redactedStoredPreview.length > 0
+                        ? redactedStoredPreview
+                        : REDACTED;
+            }
+            // Assert default path never embeds raw preview (defensive for tests + misuse).
+            this.#assertNoRawLeak(record, rawPreview, known);
+            this.#push(record);
+            return structuredClone(record);
+        });
+    }
+    async recordApiKeyFallback(input) {
+        return this.#exclusive(() => {
+            const known = mergeKnown(this.#defaultKnownSecrets, input.knownSecrets);
+            const now = (input.now ?? this.#now)();
+            const record = {
+                recordId: newId("aud"),
+                kind: "api_key_fallback",
+                timestamp: now.toISOString(),
+                requestId: input.requestId,
+                decisionId: input.decisionId,
+                promptDigest: input.promptDigest,
+                reason: safeRedact(String(input.reason), known),
+                explanation: safeRedact(input.explanation, known),
+                route: input.route ?? null,
+                apiKeyFallbackReason: safeRedact(String(input.reason), known),
+                cancellationState: "active",
+            };
+            this.#push(record);
+            return structuredClone(record);
+        });
+    }
+    async markCancelled(requestId, options = {}) {
+        return this.#exclusive(() => {
+            const latest = this.#latestByRequest.get(requestId);
+            if (!latest)
+                return undefined;
+            if (latest.cancellationState === "cancelled") {
+                return structuredClone(latest);
+            }
+            const now = (options.now ?? this.#now)();
+            const known = this.#defaultKnownSecrets;
+            const update = {
+                ...latest,
+                recordId: newId("aud"),
+                kind: "cancellation",
+                timestamp: now.toISOString(),
+                cancellationState: "cancelled",
+                cancelledAt: now.toISOString(),
+                reason: options.reason
+                    ? safeRedact(options.reason, known)
+                    : "cancelled",
+                explanation: options.reason
+                    ? safeRedact(options.reason, known)
+                    : "Request cancelled in-process.",
+            };
+            this.#push(update);
+            return structuredClone(update);
+        });
+    }
+    async markCompleted(requestId, options = {}) {
+        return this.#exclusive(() => {
+            const latest = this.#latestByRequest.get(requestId);
+            if (!latest)
+                return undefined;
+            if (latest.cancellationState === "completed" ||
+                latest.cancellationState === "cancelled") {
+                return structuredClone(latest);
+            }
+            const now = (options.now ?? this.#now)();
+            const update = {
+                ...latest,
+                recordId: newId("aud"),
+                kind: latest.kind === "cancellation" ? "cancellation" : latest.kind,
+                timestamp: now.toISOString(),
+                cancellationState: "completed",
+            };
+            this.#push(update);
+            return structuredClone(update);
+        });
+    }
+    async getCancellationState(requestId) {
+        const latest = this.#latestByRequest.get(requestId);
+        return latest?.cancellationState;
+    }
+    async list(options = {}) {
+        let rows = this.#records.slice();
+        if (options.requestId) {
+            rows = rows.filter((r) => r.requestId === options.requestId);
+        }
+        if (options.decisionId) {
+            rows = rows.filter((r) => r.decisionId === options.decisionId);
+        }
+        if (options.kind) {
+            rows = rows.filter((r) => r.kind === options.kind);
+        }
+        // Most recent first.
+        rows = rows.slice().reverse();
+        if (options.limit !== undefined && options.limit >= 0) {
+            rows = rows.slice(0, options.limit);
+        }
+        return rows.map((r) => structuredClone(r));
+    }
+    async get(recordId) {
+        const hit = this.#byId.get(recordId);
+        return hit ? structuredClone(hit) : undefined;
+    }
+    toJSON() {
+        // Never surface free-text that might contain secrets beyond redacted fields.
+        return {
+            kind: "in-memory-audit",
+            recordCount: this.#records.length,
+            requestIds: [...new Set(this.#records.map((r) => r.requestId))],
+            // Digests only — no previews in the diagnostic surface.
+            digests: this.#records
+                .map((r) => r.promptDigest)
+                .filter((d) => typeof d === "string"),
+            kinds: this.#records.reduce((acc, r) => {
+                acc[r.kind] = (acc[r.kind] ?? 0) + 1;
+                return acc;
+            }, {}),
+        };
+    }
+    #push(record) {
+        this.#records.push(record);
+        this.#byId.set(record.recordId, record);
+        this.#latestByRequest.set(record.requestId, record);
+        if (this.#maxRecords !== undefined &&
+            this.#records.length > this.#maxRecords) {
+            const overflow = this.#records.length - this.#maxRecords;
+            const removed = this.#records.splice(0, overflow);
+            for (const old of removed) {
+                this.#byId.delete(old.recordId);
+                // Only drop latest mapping if it still points at the evicted record.
+                const latest = this.#latestByRequest.get(old.requestId);
+                if (latest?.recordId === old.recordId) {
+                    this.#latestByRequest.delete(old.requestId);
+                }
+            }
+        }
+    }
+    #assertNoRawLeak(record, rawPreview, knownSecrets) {
+        if (!rawPreview || rawPreview.length < 8)
+            return;
+        const blobs = [
+            record.auditSummary,
+            record.reason,
+            record.explanation,
+            record.promptPreviewRedacted,
+            ...(record.policyDenials?.map((d) => d.message) ?? []),
+        ]
+            .filter((s) => typeof s === "string")
+            .join("\n");
+        // Allow the case where the "preview" is only a digest-like token or was fully redacted.
+        if (blobs.includes(rawPreview)) {
+            // Self-heal by scrubbing — should not happen under normal use.
+            if (record.auditSummary?.includes(rawPreview)) {
+                record.auditSummary = redact(record.auditSummary, knownSecrets).replaceAll(rawPreview, REDACTED);
+            }
+            if (record.explanation.includes(rawPreview)) {
+                record.explanation = redact(record.explanation, knownSecrets).replaceAll(rawPreview, REDACTED);
+            }
+            if (record.reason.includes(rawPreview)) {
+                record.reason = redact(record.reason, knownSecrets).replaceAll(rawPreview, REDACTED);
+            }
+        }
+    }
+}
+function mergeKnown(base, extra) {
+    const out = [...base];
+    if (extra) {
+        for (const s of extra) {
+            if (typeof s === "string" && s.length > 0)
+                out.push(s);
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAUhD,oEAAoE;AACpE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAwI5C,SAAS,KAAK,CAAC,MAAc;IAC3B,OAAO,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,QAAgB;IAClD,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,KAAyB,EACzB,YAA8B;IAE9B,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,IAAI,EAAE,CAAC;IACtD,OAAO,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAuB;IACtD,IAAI,QAAQ,CAAC,KAAK,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB;YAAE,OAAO,IAAI,CAAC;QACxD,IACE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,kBAAkB,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,CACnE,EACD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,oEAAoE;QACpE,IACE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAC1B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,wBAAwB;YACrC,CAAC,CAAC,MAAM,KAAK,uBAAuB;YACpC,CAAC,CAAC,MAAM,KAAK,2BAA2B;YACxC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAChC,EACD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,kBAAkB,CAAC;AAChD,CAAC;AAED,SAAS,2BAA2B,CAClC,QAAuB;IAEvB,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,EAAE,IAAI,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,kBAAkB,CACvC,CAAC;IACF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,EAAE,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,wBAAwB;QACrC,CAAC,CAAC,MAAM,KAAK,uBAAuB;QACpC,CAAC,CAAC,MAAM,KAAK,2BAA2B;QACxC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAChC,CAAC;IACF,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IACvC,IAAI,QAAQ,CAAC,KAAK,EAAE,QAAQ,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IACtE,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACpB,QAAQ,GAAkB,EAAE,CAAC;IAC7B,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,wDAAwD;IAC/C,gBAAgB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,WAAW,CAAqB;IAChC,oBAAoB,CAAW;IAC/B,IAAI,CAAa;IAC1B,MAAM,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE7C,YAAY,UAAqC,EAAE;QACjD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,YAAY;YAC9C,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAChF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,UAAU,CAAI,EAAwB;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CACpB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,OAAqB,EACrB,QAAuB,EACvB,UAAiC,EAAE;QAEnC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,KAAK,GAAG,UAAU,CACtB,IAAI,CAAC,oBAAoB,EACzB,OAAO,CAAC,YAAY,CACrB,CAAC;YACF,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,cAAc,GAAG,OAAO,CAAC,oBAAoB,KAAK,IAAI,CAAC;YAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;YAEtE,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,IAAI,GAAoB,oBAAoB;gBAChD,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,gBAAgB,CAAC;YAErB,MAAM,mBAAmB,GACvB,OAAO,CAAC,iBAAiB;gBACzB,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAExE,8EAA8E;YAC9E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY;gBACxC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC;gBAC1C,CAAC,CAAC,UAAU,CACR,YAAY,QAAQ,CAAC,UAAU,WAAW,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,EACrE,KAAK,CACN,CAAC;YAEN,iEAAiE;YACjE,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;YAC9C,MAAM,qBAAqB,GAAG,cAAc;gBAC1C,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC;gBACvD,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,MAAM,GAAgB;gBAC1B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;gBACtB,IAAI;gBACJ,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;gBAChC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;gBACjC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY;gBACvC,YAAY;gBACZ,MAAM;gBACN,WAAW;gBACX,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI;gBAC7B,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACnC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC/C,CAAC,CAAC,SAAS;gBACb,oBAAoB;gBACpB,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACnC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACjC,GAAG,CAAC;wBACJ,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC;qBACtC,CAAC,CAAC;oBACL,CAAC,CAAC,SAAS;gBACb,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,iBAAiB,EAAE,mBAAmB;aACvC,CAAC;YAEF,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBACxC,uEAAuE;gBACvE,MAAM,CAAC,qBAAqB;oBAC1B,qBAAqB,CAAC,MAAM,GAAG,CAAC;wBAC9B,CAAC,CAAC,qBAAqB;wBACvB,CAAC,CAAC,QAAQ,CAAC;YACjB,CAAC;YAED,+EAA+E;YAC/E,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YAEjD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,KAS1B;QACC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,KAAK,GAAG,UAAU,CACtB,IAAI,CAAC,oBAAoB,EACzB,KAAK,CAAC,YAAY,CACnB,CAAC;YACF,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,MAAM,GAAgB;gBAC1B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;gBACtB,IAAI,EAAE,kBAAkB;gBACxB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;gBAC/C,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;gBACjD,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;gBAC1B,oBAAoB,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;gBAC7D,iBAAiB,EAAE,QAAQ;aAC5B,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,UAAgC,EAAE;QAElC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,IAAI,MAAM,CAAC,iBAAiB,KAAK,WAAW,EAAE,CAAC;gBAC7C,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC;YACxC,MAAM,MAAM,GAAgB;gBAC1B,GAAG,MAAM;gBACT,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;gBACtB,IAAI,EAAE,cAAc;gBACpB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC5B,iBAAiB,EAAE,WAAW;gBAC9B,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;oBACpB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;oBACnC,CAAC,CAAC,WAAW;gBACf,WAAW,EAAE,OAAO,CAAC,MAAM;oBACzB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;oBACnC,CAAC,CAAC,+BAA+B;aACpC,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,UAAgC,EAAE;QAElC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,IACE,MAAM,CAAC,iBAAiB,KAAK,WAAW;gBACxC,MAAM,CAAC,iBAAiB,KAAK,WAAW,EACxC,CAAC;gBACD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,MAAM,GAAgB;gBAC1B,GAAG,MAAM;gBACT,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;gBACtB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBACnE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC5B,iBAAiB,EAAE,WAAW;aAC/B,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,SAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,MAAM,EAAE,iBAAiB,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAA4B,EAAE;QACvC,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QACD,qBAAqB;QACrB,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACtD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChD,CAAC;IAED,MAAM;QACJ,6EAA6E;QAC7E,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YACjC,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/D,wDAAwD;YACxD,OAAO,EAAE,IAAI,CAAC,QAAQ;iBACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;iBAC1B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YACpD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAyB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;gBAC7D,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACrC,OAAO,GAAG,CAAC;YACb,CAAC,EAAE,EAAE,CAAC;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAmB;QACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEpD,IACE,IAAI,CAAC,WAAW,KAAK,SAAS;YAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EACvC,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAClD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAChC,qEAAqE;gBACrE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACxD,IAAI,MAAM,EAAE,QAAQ,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACtC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,gBAAgB,CACd,MAAmB,EACnB,UAAkB,EAClB,YAAsB;QAEtB,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO;QACjD,MAAM,KAAK,GAAG;YACZ,MAAM,CAAC,YAAY;YACnB,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,WAAW;YAClB,MAAM,CAAC,qBAAqB;YAC5B,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SACvD;aACE,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;aACjD,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,wFAAwF;QACxF,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,+DAA+D;YAC/D,IAAI,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9C,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,UAAU,CACxE,UAAU,EACV,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5C,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,UAAU,CACtE,UAAU,EACV,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,UAAU,CAC5D,UAAU,EACV,QAAQ,CACT,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,SAAS,UAAU,CACjB,IAAuB,EACvB,KAAmC;IAEnC,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACtB,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/auth/credential-chain.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Credential-chain resolution for OffRouter.
+ *
+ * Tries each source in order: env -> config -> keychain -> (oauth, opt-in).
+ * Never logs secret values. Uses Redacted<T> wrapper for safe output.
+ * Never scrapes other CLI credential stores.
+ */
+import type { SecretStore } from "../secrets.js";
+/**
+ * Wrapper that hides secret material from JSON serialization and string
+ * conversion. The raw value is accessible via `.rawValue` for use in
+ * Authorization headers, never for logging.
+ */
+export declare class Redacted<T extends string = string> {
+    #private;
+    constructor(value: T);
+    /** Access the raw secret value. Use only for provider API calls. */
+    get rawValue(): T;
+    /** Returns a constant redacted string for JSON serialization. */
+    toJSON(): string;
+    /** Returns a constant redacted string for debugging. */
+    toString(): string;
+}
+/**
+ * A single credential source in the chain.
+ * Each source is tried in order; the first non-empty value wins.
+ */
+export type CredentialSource = {
+    type: "env";
+    name: string;
+} | {
+    type: "config";
+    key: string;
+} | {
+    type: "keychain";
+    providerId: string;
+    accountId?: string;
+} | {
+    type: "oauth";
+    provider: string;
+};
+/**
+ * Result of a successful credential resolution.
+ */
+export interface CredentialResult {
+    /**
+     * The resolved credential value, wrapped in Redacted so it cannot be
+     * accidentally logged or serialized.
+     */
+    value: Redacted<string>;
+    /** Which source type produced the value. */
+    source: "env" | "config" | "keychain" | "oauth";
+}
+/**
+ * Options for resolveCredential.
+ */
+export interface ResolveCredentialOptions {
+    /** Secret store for keychain lookups. */
+    store: SecretStore;
+    /**
+     * Optional trusted config object. When provided, config sources can read
+     * provider-level apiKey values. Only use with trusted config from the
+     * user's OffRouter home directory.
+     */
+    config?: Record<string, unknown>;
+    /**
+     * Injectable fetch for any network calls during credential resolution
+     * (e.g. OAuth token refresh). Defaults to globalThis.fetch.
+     */
+    fetch?: typeof globalThis.fetch;
+    /**
+     * Optional OAuth token refresher. Given a provider id, refreshes the stored
+     * OAuth token (if possible) and returns the new access token, or null if
+     * refresh is not possible. When omitted, expired OAuth tokens resolve as
+     * null (no silent refresh during credential resolution).
+     */
+    refreshOAuthToken?: (provider: string) => Promise<string | null>;
+}
+/**
+ * Resolve a credential by trying each source in order.
+ * Returns the first non-empty value, or null if all sources are empty.
+ */
+export declare function resolveCredential(sources: CredentialSource[], opts: ResolveCredentialOptions): Promise<CredentialResult | null>;
+//# sourceMappingURL=credential-chain.d.ts.map

package/dist/auth/credential-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-chain.d.ts","sourceRoot":"","sources":["../../src/auth/credential-chain.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAWjD;;;;GAIG;AACH,qBAAa,QAAQ,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;;gBAGjC,KAAK,EAAE,CAAC;IAIpB,oEAAoE;IACpE,IAAI,QAAQ,IAAI,CAAC,CAEhB;IAED,iEAAiE;IACjE,MAAM,IAAI,MAAM;IAIhB,wDAAwD;IACxD,QAAQ,IAAI,MAAM;CAGnB;AAMD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxB,4CAA4C;IAC5C,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,yCAAyC;IACzC,KAAK,EAAE,WAAW,CAAC;IACnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAClE;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAQlC"}