opencode-rehydar 0.14.1 → 0.14.3

package/dist/proxy/rehydra-proxy.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Rehydra Proxy Middleware
+ * Generic (Request → Response) proxy that anonymizes LLM requests
+ * and rehydrates responses. Uses standard Web APIs — no framework dependency.
+ */
+import type { RehydraProxyConfig } from "./types.js";
+/**
+ * Creates a proxy middleware function that forwards requests to an upstream
+ * LLM API, anonymizing requests and rehydrating responses.
+ *
+ * Returns a standard `(Request) => Promise<Response>` function that works
+ * with any framework supporting Web Request/Response APIs.
+ *
+ * @example
+ * ```typescript
+ * // Hono
+ * import { Hono } from 'hono';
+ * const app = new Hono();
+ * const proxy = createRehydraProxy({
+ *   upstream: 'https://api.openai.com',
+ *   keyProvider: new ConfigKeyProvider(process.env.PII_KEY!),
+ *   piiStorageProvider: new SQLitePIIStorageProvider('proxy.db'),
+ * });
+ * app.post('/v1/*', (c) => proxy(c.req.raw));
+ * ```
+ *
+ * @example
+ * ```typescript
+ * // Bun.serve
+ * const proxy = createRehydraProxy({ upstream: 'https://api.openai.com', ... });
+ * Bun.serve({
+ *   fetch(req) {
+ *     if (new URL(req.url).pathname.startsWith('/v1/')) return proxy(req);
+ *     return new Response('Not Found', { status: 404 });
+ *   },
+ * });
+ * ```
+ */
+export declare function createRehydraProxy(config: RehydraProxyConfig): (request: Request) => Promise<Response>;
+//# sourceMappingURL=rehydra-proxy.d.ts.map

package/dist/proxy/rehydra-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehydra-proxy.d.ts","sourceRoot":"","sources":["../../src/proxy/rehydra-proxy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAYrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,kBAAkB,GACzB,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA0FzC"}

package/dist/proxy/rehydra-proxy.js

@@ -0,0 +1,150 @@
+/**
+ * Rehydra Proxy Middleware
+ * Generic (Request → Response) proxy that anonymizes LLM requests
+ * and rehydrates responses. Uses standard Web APIs — no framework dependency.
+ */
+import { createRehydraFetch } from "./rehydra-fetch.js";
+const DEFAULT_FORWARD_HEADERS = [
+    "authorization",
+    "content-type",
+    "x-api-key",
+    "anthropic-version",
+    "anthropic-beta",
+    "openai-organization",
+    "openai-project",
+];
+/**
+ * Creates a proxy middleware function that forwards requests to an upstream
+ * LLM API, anonymizing requests and rehydrating responses.
+ *
+ * Returns a standard `(Request) => Promise<Response>` function that works
+ * with any framework supporting Web Request/Response APIs.
+ *
+ * @example
+ * ```typescript
+ * // Hono
+ * import { Hono } from 'hono';
+ * const app = new Hono();
+ * const proxy = createRehydraProxy({
+ *   upstream: 'https://api.openai.com',
+ *   keyProvider: new ConfigKeyProvider(process.env.PII_KEY!),
+ *   piiStorageProvider: new SQLitePIIStorageProvider('proxy.db'),
+ * });
+ * app.post('/v1/*', (c) => proxy(c.req.raw));
+ * ```
+ *
+ * @example
+ * ```typescript
+ * // Bun.serve
+ * const proxy = createRehydraProxy({ upstream: 'https://api.openai.com', ... });
+ * Bun.serve({
+ *   fetch(req) {
+ *     if (new URL(req.url).pathname.startsWith('/v1/')) return proxy(req);
+ *     return new Response('Not Found', { status: 404 });
+ *   },
+ * });
+ * ```
+ */
+export function createRehydraProxy(config) {
+    const forwardHeaders = config.forwardHeaders ?? DEFAULT_FORWARD_HEADERS;
+    const upstream = config.upstream.replace(/\/$/, ""); // Remove trailing slash
+    // Base path of the upstream, used only for overlap detection. Invalid upstream URL will throw at fetch time
+    const upstreamPathname = tryGetPathname(upstream);
+    const upstreamPathSegments = upstreamPathname.split("/").filter(Boolean);
+    // Create the underlying Rehydra fetch wrapper
+    const rehydraFetch = createRehydraFetch(config);
+    // Skip the per-request overlap check when there is no listener or upstream path segments
+    const shouldCheckPathOverlap = config.onPathOverlapWarning !== undefined && upstreamPathSegments.length > 0;
+    return async (request) => {
+        // Build upstream URL
+        const requestUrl = new URL(request.url);
+        let pathname = requestUrl.pathname;
+        // Strip prefix if configured
+        if (config.stripPrefix !== undefined && config.stripPrefix !== "" && pathname.startsWith(config.stripPrefix)) {
+            pathname = pathname.slice(config.stripPrefix.length);
+            if (!pathname.startsWith("/")) {
+                pathname = "/" + pathname;
+            }
+        }
+        const upstreamUrl = upstream + pathname + requestUrl.search;
+        // Detect overlapping path and warn
+        if (shouldCheckPathOverlap) {
+            const requestPathSegments = pathname.split("/").filter(Boolean);
+            const overlappingSegments = findPathSegmentOverlap(upstreamPathSegments, requestPathSegments);
+            if (overlappingSegments.length > 0) {
+                try {
+                    const result = config.onPathOverlapWarning?.({
+                        upstreamBaseUrl: upstream,
+                        overlappingSegments,
+                    });
+                    void Promise.resolve(result).catch(() => {
+                        // Async callback failures must not interrupt proxying.
+                    });
+                }
+                catch {
+                    // Synchronous callback failures must not interrupt proxying.
+                }
+            }
+        }
+        // Filter headers to forward
+        const headers = new Headers();
+        for (const name of forwardHeaders) {
+            const value = request.headers.get(name);
+            if (value !== null) {
+                headers.set(name, value);
+            }
+        }
+        // Inject proxy-configured API key, replacing any client auth headers.
+        // This is needed when the client uses OAuth (e.g. Claude Code with Max)
+        // but the upstream only accepts API key auth.
+        if (config.apiKey !== undefined) {
+            headers.delete("authorization");
+            if (upstreamUrl.includes("anthropic")) {
+                headers.set("x-api-key", config.apiKey);
+            }
+            else {
+                headers.set("authorization", `Bearer ${config.apiKey}`);
+            }
+        }
+        else if (headers.has("x-api-key") && headers.has("authorization")) {
+            // When client sends both, prefer API key over OAuth token
+            headers.delete("authorization");
+        }
+        // Disable upstream compression — the proxy reads and modifies the response
+        // body, so we need it uncompressed. Without this, Node's fetch may
+        // auto-decompress but leave content-encoding headers, causing ZlibError
+        // on clients that try to decompress the already-decompressed body.
+        headers.set("accept-encoding", "identity");
+        // Forward via rehydraFetch (which handles anonymization/rehydration)
+        return rehydraFetch(upstreamUrl, {
+            method: request.method,
+            headers,
+            body: request.body,
+            // @ts-expect-error - duplex is needed for streaming request bodies
+            duplex: "half",
+        });
+    };
+}
+// Returns the URL's pathname, or an empty string if invalid
+function tryGetPathname(url) {
+    try {
+        return new URL(url).pathname;
+    }
+    catch {
+        return "";
+    }
+}
+// Finds the overlapping path segments between the upstream and request paths.
+function findPathSegmentOverlap(upstreamSegments, requestSegments) {
+    const maxOverlapLength = Math.min(upstreamSegments.length, requestSegments.length);
+    for (let length = maxOverlapLength; length > 0; length--) {
+        const upstreamSuffix = upstreamSegments.slice(-length);
+        const requestPrefix = requestSegments.slice(0, length);
+        const matches = upstreamSuffix.every((segment, index) => segment === requestPrefix[index]);
+        if (matches) {
+            return upstreamSuffix;
+        }
+    }
+    return [];
+}
+//# sourceMappingURL=rehydra-proxy.js.map

package/dist/proxy/rehydra-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehydra-proxy.js","sourceRoot":"","sources":["../../src/proxy/rehydra-proxy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,MAAM,uBAAuB,GAAG;IAC9B,eAAe;IACf,cAAc;IACd,WAAW;IACX,mBAAmB;IACnB,gBAAgB;IAChB,qBAAqB;IACrB,gBAAgB;CACjB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0B;IAE1B,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,uBAAuB,CAAC;IACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB;IAC7E,4GAA4G;IAC5G,MAAM,gBAAgB,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEzE,8CAA8C;IAC9C,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAEhD,yFAAyF;IACzF,MAAM,sBAAsB,GAC1B,MAAM,CAAC,oBAAoB,KAAK,SAAS,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC;IAE/E,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,qBAAqB;QACrB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QAEnC,6BAA6B;QAC7B,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7G,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,QAAQ,GAAG,GAAG,GAAG,QAAQ,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC;QAE5D,mCAAmC;QACnC,IAAI,sBAAsB,EAAE,CAAC;YAC3B,MAAM,mBAAmB,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChE,MAAM,mBAAmB,GAAG,sBAAsB,CAChD,oBAAoB,EACpB,mBAAmB,CACpB,CAAC;YAEF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,CAAC,oBAAoB,EAAE,CAAC;wBAC3C,eAAe,EAAE,QAAQ;wBACzB,mBAAmB;qBACpB,CAAC,CAAC;oBAEH,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;wBACtC,uDAAuD;oBACzD,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,6DAA6D;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,8CAA8C;QAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAChC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YACpE,0DAA0D;YAC1D,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;QACD,2EAA2E;QAC3E,mEAAmE;QACnE,wEAAwE;QACxE,mEAAmE;QACnE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QAE3C,qEAAqE;QACrE,OAAO,YAAY,CAAC,WAAW,EAAE;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,mEAAmE;YACnE,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,sBAAsB,CAC7B,gBAA0B,EAC1B,eAAyB;IAEzB,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAC/B,gBAAgB,CAAC,MAAM,EACvB,eAAe,CAAC,MAAM,CACvB,CAAC;IAEF,KAAK,IAAI,MAAM,GAAG,gBAAgB,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC;QACzD,MAAM,cAAc,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAClC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,aAAa,CAAC,KAAK,CAAC,CACrD,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/proxy/sse-parser.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Server-Sent Events (SSE) Parser
+ * Parses SSE protocol streams, handling chunk boundaries correctly.
+ */
+/**
+ * A parsed SSE event
+ */
+export interface SSEEvent {
+    /** Event type (defaults to "message") */
+    event: string;
+    /** Event data (concatenated from all data: lines) */
+    data: string;
+}
+/**
+ * Parses a Server-Sent Events stream chunk by chunk.
+ *
+ * SSE protocol format:
+ * ```
+ * event: message_start
+ * data: {"type": "content"}
+ *
+ * data: {"text": "Hello"}
+ *
+ * data: [DONE]
+ *
+ * ```
+ *
+ * Each event is one or more field lines terminated by a blank line.
+ */
+export declare class SSEParser {
+    private buffer;
+    /**
+     * Feed a chunk of text from the SSE stream.
+     * Returns zero or more fully parsed events.
+     */
+    parse(chunk: string): SSEEvent[];
+    /**
+     * Flush remaining buffer content (call on stream end).
+     * Returns any remaining events.
+     */
+    flush(): SSEEvent[];
+    /**
+     * Reset the parser state.
+     */
+    reset(): void;
+    /**
+     * Parse a single raw SSE event block into an SSEEvent.
+     */
+    private parseEvent;
+}
+/**
+ * Check if a string is the SSE stream termination sentinel.
+ */
+export declare function isSSEDone(data: string): boolean;
+/**
+ * Serialize an SSE event back to wire format.
+ */
+export declare function serializeSSEEvent(event: SSEEvent): string;
+//# sourceMappingURL=sse-parser.d.ts.map

package/dist/proxy/sse-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-parser.d.ts","sourceRoot":"","sources":["../../src/proxy/sse-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAM;IAEpB;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,EAAE;IAoBhC;;;OAGG;IACH,KAAK,IAAI,QAAQ,EAAE;IAUnB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,OAAO,CAAC,UAAU;CAuBnB;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAWzD"}

package/dist/proxy/sse-parser.js

@@ -0,0 +1,112 @@
+/**
+ * Server-Sent Events (SSE) Parser
+ * Parses SSE protocol streams, handling chunk boundaries correctly.
+ */
+/**
+ * Parses a Server-Sent Events stream chunk by chunk.
+ *
+ * SSE protocol format:
+ * ```
+ * event: message_start
+ * data: {"type": "content"}
+ *
+ * data: {"text": "Hello"}
+ *
+ * data: [DONE]
+ *
+ * ```
+ *
+ * Each event is one or more field lines terminated by a blank line.
+ */
+export class SSEParser {
+    buffer = "";
+    /**
+     * Feed a chunk of text from the SSE stream.
+     * Returns zero or more fully parsed events.
+     */
+    parse(chunk) {
+        this.buffer += chunk;
+        const events = [];
+        // Split on double newline (event boundary)
+        // Handle both \n\n and \r\n\r\n
+        const parts = this.buffer.split(/\n\n|\r\n\r\n/);
+        // Last part may be incomplete — keep it in the buffer
+        this.buffer = parts.pop() ?? "";
+        for (const part of parts) {
+            if (part.trim() === "")
+                continue;
+            const event = this.parseEvent(part);
+            if (event)
+                events.push(event);
+        }
+        return events;
+    }
+    /**
+     * Flush remaining buffer content (call on stream end).
+     * Returns any remaining events.
+     */
+    flush() {
+        if (this.buffer.trim() === "") {
+            this.buffer = "";
+            return [];
+        }
+        const event = this.parseEvent(this.buffer);
+        this.buffer = "";
+        return event ? [event] : [];
+    }
+    /**
+     * Reset the parser state.
+     */
+    reset() {
+        this.buffer = "";
+    }
+    /**
+     * Parse a single raw SSE event block into an SSEEvent.
+     */
+    parseEvent(raw) {
+        let data = "";
+        let eventType = "message";
+        for (const line of raw.split(/\n|\r\n/)) {
+            if (line.startsWith("data: ")) {
+                // Concatenate multiple data: lines with newlines
+                data += (data ? "\n" : "") + line.slice(6);
+            }
+            else if (line === "data:") {
+                // Empty data line
+                data += (data ? "\n" : "");
+            }
+            else if (line.startsWith("event: ")) {
+                eventType = line.slice(7).trim();
+            }
+            else if (line.startsWith("event:")) {
+                eventType = line.slice(6).trim();
+            }
+            // Ignore 'id:', 'retry:', and comments (lines starting with ':')
+        }
+        if (data === "" && !raw.includes("data:"))
+            return null;
+        return { event: eventType, data };
+    }
+}
+/**
+ * Check if a string is the SSE stream termination sentinel.
+ */
+export function isSSEDone(data) {
+    return data.trim() === "[DONE]";
+}
+/**
+ * Serialize an SSE event back to wire format.
+ */
+export function serializeSSEEvent(event) {
+    let result = "";
+    if (event.event !== "message") {
+        result += `event: ${event.event}\n`;
+    }
+    // Split data on newlines for multi-line data fields
+    for (const line of event.data.split("\n")) {
+        result += `data: ${line}\n`;
+    }
+    result += "\n";
+    return result;
+}
+//# sourceMappingURL=sse-parser.js.map

package/dist/proxy/sse-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-parser.js","sourceRoot":"","sources":["../../src/proxy/sse-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,SAAS;IACZ,MAAM,GAAG,EAAE,CAAC;IAEpB;;;OAGG;IACH,KAAK,CAAC,KAAa;QACjB,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACrB,MAAM,MAAM,GAAe,EAAE,CAAC;QAE9B,2CAA2C;QAC3C,gCAAgC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEjD,sDAAsD;QACtD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,GAAW;QAC5B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,SAAS,GAAG,SAAS,CAAC;QAE1B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,iDAAiD;gBACjD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;iBAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,kBAAkB;gBAClB,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7B,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,CAAC;YACD,iEAAiE;QACnE,CAAC;QAED,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAEvD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAe;IAC/C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,KAAK,CAAC,KAAK,IAAI,CAAC;IACtC,CAAC;IACD,oDAAoD;IACpD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,SAAS,IAAI,IAAI,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,IAAI,CAAC;IACf,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/proxy/system-instruction.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Default system instruction for PII placeholder handling.
+ *
+ * Injected into the system prompt when anonymization produces PII replacements,
+ * telling the model to treat PII placeholders as opaque pass-through values.
+ *
+ * Shared between the proxy layer and the OpenCode plugin.
+ */
+import type { TagFormat } from "../types/index.js";
+/**
+ * Builds a system instruction string using the configured tag format.
+ */
+export declare function buildPIISystemInstruction(tagFormat?: TagFormat): string;
+/**
+ * Default system instruction using XML-style tag format.
+ * Kept for backwards compatibility.
+ */
+export declare const DEFAULT_PII_SYSTEM_INSTRUCTION: string;
+//# sourceMappingURL=system-instruction.d.ts.map

package/dist/proxy/system-instruction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-instruction.d.ts","sourceRoot":"","sources":["../../src/proxy/system-instruction.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAGnD;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,GAAE,SAA8B,GACxC,MAAM,CAeR;AAED;;;GAGG;AACH,eAAO,MAAM,8BAA8B,QAA8B,CAAC"}

package/dist/proxy/system-instruction.js

@@ -0,0 +1,33 @@
+/**
+ * Default system instruction for PII placeholder handling.
+ *
+ * Injected into the system prompt when anonymization produces PII replacements,
+ * telling the model to treat PII placeholders as opaque pass-through values.
+ *
+ * Shared between the proxy layer and the OpenCode plugin.
+ */
+import { DEFAULT_TAG_FORMAT } from "../types/index.js";
+/**
+ * Builds a system instruction string using the configured tag format.
+ */
+export function buildPIISystemInstruction(tagFormat = DEFAULT_TAG_FORMAT) {
+    const keyword = tagFormat.keyword ?? "PII";
+    const exampleTag = `${tagFormat.open}${keyword} type="..." id="..."${tagFormat.close}`;
+    const emailTag = `${tagFormat.open}${keyword} type="EMAIL" id="1"${tagFormat.close}`;
+    return [
+        `Some values in this conversation have been replaced with PII placeholders like ${exampleTag}.`,
+        "These are real values that have been masked for privacy during transit.",
+        "They will be automatically rehydrated (replaced with the original values) before any command is executed locally.",
+        "IMPORTANT: Treat these placeholders exactly like real values.",
+        "Do NOT try to resolve, decode, remove, or work around them.",
+        "Use them as-is in commands, code, and tool calls.",
+        `For example, if a user message contains ${emailTag}, pass that exact placeholder as the email argument in any tool call.`,
+        "The rehydration layer handles the rest.",
+    ].join(" ");
+}
+/**
+ * Default system instruction using XML-style tag format.
+ * Kept for backwards compatibility.
+ */
+export const DEFAULT_PII_SYSTEM_INSTRUCTION = buildPIISystemInstruction();
+//# sourceMappingURL=system-instruction.js.map

package/dist/proxy/system-instruction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-instruction.js","sourceRoot":"","sources":["../../src/proxy/system-instruction.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,YAAuB,kBAAkB;IAEzC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC;IAC3C,MAAM,UAAU,GAAG,GAAG,SAAS,CAAC,IAAI,GAAG,OAAO,uBAAuB,SAAS,CAAC,KAAK,EAAE,CAAC;IACvF,MAAM,QAAQ,GAAG,GAAG,SAAS,CAAC,IAAI,GAAG,OAAO,uBAAuB,SAAS,CAAC,KAAK,EAAE,CAAC;IAErF,OAAO;QACL,kFAAkF,UAAU,GAAG;QAC/F,yEAAyE;QACzE,mHAAmH;QACnH,+DAA+D;QAC/D,6DAA6D;QAC7D,mDAAmD;QACnD,2CAA2C,QAAQ,uEAAuE;QAC1H,yCAAyC;KAC1C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,yBAAyB,EAAE,CAAC"}

package/dist/proxy/tool-loop-stream.d.ts

@@ -0,0 +1,7 @@
+import type { StreamingToolLoopAdapter } from './providers/streaming-tool-loop.js';
+/** Buffer one response with a byte limit and cancellation, including incomplete SSE events. */
+export declare function readToolResponse(response: Response, limit: number, signal: AbortSignal): Promise<string>;
+export declare function accumulateToolStream(text: string, adapter: StreamingToolLoopAdapter): unknown;
+/** Generate frames on demand so downstream consumption controls backpressure. */
+export declare function toolResultStream(body: unknown, response: Response, adapter: StreamingToolLoopAdapter): Response;
+//# sourceMappingURL=tool-loop-stream.d.ts.map

package/dist/proxy/tool-loop-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-loop-stream.d.ts","sourceRoot":"","sources":["../../src/proxy/tool-loop-stream.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAEnF,+FAA+F;AAC/F,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA2B9G;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAQ7F;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,wBAAwB,GAAG,QAAQ,CAe/G"}

package/dist/proxy/tool-loop-stream.js

@@ -0,0 +1,65 @@
+import { SSEParser, isSSEDone, serializeSSEEvent } from './sse-parser.js';
+/** Buffer one response with a byte limit and cancellation, including incomplete SSE events. */
+export async function readToolResponse(response, limit, signal) {
+    signal.throwIfAborted();
+    if (response.body === null)
+        return '';
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    let bytes = 0;
+    let text = '';
+    const cancel = () => { void reader.cancel().catch(() => { }); };
+    signal.addEventListener('abort', cancel, { once: true });
+    try {
+        for (;;) {
+            signal.throwIfAborted();
+            const { value, done } = await reader.read();
+            signal.throwIfAborted();
+            if (done)
+                break;
+            bytes += value.byteLength;
+            if (bytes > limit)
+                throw new Error('Tool response exceeds maxToolResponseBytes');
+            text += decoder.decode(value, { stream: true });
+        }
+        return text + decoder.decode();
+    }
+    catch (error) {
+        cancel();
+        throw error;
+    }
+    finally {
+        signal.removeEventListener('abort', cancel);
+        reader.releaseLock();
+    }
+}
+export function accumulateToolStream(text, adapter) {
+    const parser = new SSEParser();
+    const accumulator = adapter.createAccumulator();
+    for (const event of [...parser.parse(text), ...parser.flush()]) {
+        if (isSSEDone(event.data))
+            continue;
+        accumulator.push(JSON.parse(event.data));
+    }
+    return accumulator.finish();
+}
+/** Generate frames on demand so downstream consumption controls backpressure. */
+export function toolResultStream(body, response, adapter) {
+    const frames = adapter.encode(body)[Symbol.iterator]();
+    const encoder = new TextEncoder();
+    const headers = new Headers(response.headers);
+    headers.delete('content-length');
+    headers.delete('content-encoding');
+    headers.set('content-type', 'text/event-stream');
+    return new Response(new ReadableStream({
+        pull(controller) {
+            const next = frames.next();
+            if (next.done === true)
+                controller.close();
+            else
+                controller.enqueue(encoder.encode(serializeSSEEvent(next.value)));
+        },
+        cancel() { frames.return?.(); },
+    }), { status: response.status, statusText: response.statusText, headers });
+}
+//# sourceMappingURL=tool-loop-stream.js.map

package/dist/proxy/tool-loop-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-loop-stream.js","sourceRoot":"","sources":["../../src/proxy/tool-loop-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAG1E,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAkB,EAAE,KAAa,EAAE,MAAmB;IAC3F,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,MAAM,MAAM,GAAG,GAAS,EAAE,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,IAAI;gBAAE,MAAM;YAChB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACjF,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC;QACT,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAiC;IAClF,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,IAAa,EAAE,QAAkB,EAAE,OAAiC;IACnG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,cAAc,CAAa;QACjD,IAAI,CAAC,UAAU;YACb,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;;gBACtC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAW,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;KACtC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;AAC7E,CAAC"}