opencode-rehydar 0.14.2 → 0.14.3

package/dist/opencode-plugin/v2/scrub-messages.js

@@ -0,0 +1,260 @@
+/**
+ * Message scrubbing for OpenCode Plugin V2 session hooks.
+ *
+ * Walks the messages attached to a model request and anonymizes every string
+ * that can carry secrets: user/assistant/reasoning text, tool arguments,
+ * completed tool output, and V1-style part state.
+ *
+ * The scrub runs on a deep copy; only after it completes successfully are the
+ * results written back into the caller's original objects (preserving the
+ * references Plugin V2 relies on). If any step throws, the originals are left
+ * untouched and the error propagates so the caller can block the request
+ * instead of leaking raw PII (fail-closed).
+ */
+import { PIIType } from "../../types/index.js";
+import { vcsCommandTypes } from "../vcs-command.js";
+/** Reads a shell command from a tool input object, if present. */
+function extractCommand(input) {
+    if (input === null || typeof input !== "object")
+        return undefined;
+    const command = input.command;
+    return typeof command === "string" ? command : undefined;
+}
+/** Resolves the session ID carried by a message, for diagnostic logging only. */
+function messageSessionID(message) {
+    const info = message.info;
+    if (info !== undefined && info !== null && typeof info === "object") {
+        const sessionID = info.sessionID;
+        if (typeof sessionID === "string" && sessionID.length > 0)
+            return sessionID;
+    }
+    const sessionID = message.sessionID;
+    if (typeof sessionID === "string" && sessionID.length > 0)
+        return sessionID;
+    return undefined;
+}
+/** Deep-clones a JSON-like value (message payloads contain no class instances). */
+function deepClone(value) {
+    if (Array.isArray(value)) {
+        const items = value;
+        return items.map((item) => deepClone(item));
+    }
+    if (value !== null && typeof value === "object") {
+        const source = value;
+        const out = {};
+        for (const [key, item] of Object.entries(source)) {
+            out[key] = deepClone(item);
+        }
+        return out;
+    }
+    return value;
+}
+/**
+ * Copies the fields the scrubber mutates from a scrubbed part back onto the
+ * original part, keeping the original object identities intact.
+ */
+function restorePart(original, scrubbed) {
+    if (original === undefined ||
+        original === null ||
+        scrubbed === undefined ||
+        scrubbed === null) {
+        return;
+    }
+    original.text = scrubbed.text;
+    original.input = scrubbed.input;
+    original.result = scrubbed.result;
+    restorePartState(original.state, scrubbed.state);
+}
+/** Copies mutable tool-state fields back onto the original part state. */
+function restorePartState(original, scrubbed) {
+    if (original === undefined ||
+        original === null ||
+        scrubbed === undefined ||
+        scrubbed === null) {
+        return;
+    }
+    original.input = scrubbed.input;
+    original.error = scrubbed.error;
+    original.output = scrubbed.output;
+}
+/** Applies scrub results from `source` back onto the original message parts. */
+function restoreScrubbedParts(originalMessages, scrubbedMessages) {
+    for (let index = 0; index < originalMessages.length; index++) {
+        const original = originalMessages[index];
+        const scrubbed = scrubbedMessages[index];
+        if (original === undefined ||
+            original === null ||
+            scrubbed === undefined ||
+            scrubbed === null) {
+            continue;
+        }
+        restorePartArray(original.content, scrubbed.content);
+        restorePartArray(original.parts, scrubbed.parts);
+    }
+}
+function restorePartArray(originalParts, scrubbedParts) {
+    if (!Array.isArray(originalParts) || !Array.isArray(scrubbedParts)) {
+        return;
+    }
+    const length = Math.min(originalParts.length, scrubbedParts.length);
+    for (let index = 0; index < length; index++) {
+        restorePart(originalParts[index], scrubbedParts[index]);
+    }
+}
+/**
+ * Anonymizes the messages of a session request in place.
+ *
+ * @returns the number of entities removed and a per-type breakdown for logging.
+ */
+export async function scrubMessages(eventMessages, ctx, resolveSession, state, options) {
+    let scrubbed = 0;
+    const byType = {};
+    const record = (result) => {
+        if (result.stats.totalEntities <= 0)
+            return;
+        state.hasAnonymized = true;
+        scrubbed += result.stats.totalEntities;
+        for (const [type, count] of Object.entries(result.stats.countsByType)) {
+            byType[type] = (byType[type] ?? 0) + count;
+        }
+    };
+    // Recursively anonymize a value. Object keys are preserved so execution
+    // arguments and JSON property names stay intact.
+    const scrubValue = async (value, session, policy) => {
+        if (typeof value === "string") {
+            const result = await session.anonymize(value, options.locale, policy);
+            record(result);
+            return result.anonymizedText;
+        }
+        if (Array.isArray(value)) {
+            const items = value;
+            const out = [];
+            for (const item of items) {
+                out.push(await scrubValue(item, session, policy));
+            }
+            return out;
+        }
+        if (value !== null && typeof value === "object") {
+            const source = value;
+            const out = {};
+            for (const [key, item] of Object.entries(source)) {
+                out[key] = await scrubValue(item, session, policy);
+            }
+            return out;
+        }
+        return value;
+    };
+    // Tool call id → shell command, so a later `tool-result` can use the identity
+    // policy its matching `tool-call` requires.
+    const commandByCallID = new Map();
+    const policyForCommand = (command) => {
+        if (!options.vcsIdentities || typeof command !== "string")
+            return undefined;
+        const commands = vcsCommandTypes(command);
+        const types = [];
+        if (commands.has("github"))
+            types.push(PIIType.GITHUB_USERNAME);
+        if (commands.has("git"))
+            types.push(PIIType.PERSON);
+        if (types.length === 0)
+            return undefined;
+        return options.identityPolicy(types);
+    };
+    const commandFor = (part) => {
+        const callID = part.callID ?? part.id;
+        if (callID === undefined)
+            return undefined;
+        return commandByCallID.get(callID);
+    };
+    const scrubPart = async (part, session) => {
+        // V1-style part state (kept so the scrubber works for both message shapes).
+        const partState = part.state;
+        if (partState !== undefined &&
+            partState !== null &&
+            typeof partState === "object") {
+            if (partState.input !== undefined) {
+                const command = extractCommand(partState.input);
+                if (command !== undefined) {
+                    commandByCallID.set(part.callID ?? part.id ?? "", command);
+                }
+                partState.input = await scrubValue(partState.input, session, options.policy);
+            }
+            if (typeof partState.error === "string") {
+                partState.error = (await scrubValue(partState.error, session, options.policy));
+            }
+            if (partState.status === "completed" && typeof partState.output === "string") {
+                const command = extractCommand(partState.input) ?? commandFor(part);
+                const policyOverride = policyForCommand(command) ?? options.policy;
+                partState.output = (await scrubValue(partState.output, session, policyOverride));
+            }
+        }
+        // V2 tool arguments.
+        if (part.type === "tool-call" && part.input !== undefined) {
+            const command = extractCommand(part.input);
+            if (command !== undefined && part.id !== undefined) {
+                commandByCallID.set(part.id, command);
+            }
+            part.input = await scrubValue(part.input, session, options.policy);
+        }
+        // V2 tool output.
+        if (part.type === "tool-result" && part.result !== undefined) {
+            const command = extractCommand(part.input) ?? commandFor(part);
+            const policyOverride = policyForCommand(command) ?? options.policy;
+            part.result = await scrubValue(part.result, session, policyOverride);
+        }
+        // Any textual part (text, reasoning, compaction).
+        if (typeof part.text === "string") {
+            const result = await session.anonymize(part.text, options.locale, options.policy);
+            record(result);
+            part.text = result.anonymizedText;
+        }
+    };
+    // Scrub a deep copy first; the originals are only touched after the whole
+    // pass succeeds, so a mid-way failure cannot send partially scrubbed PII.
+    const workingMessages = deepClone(eventMessages);
+    const session = resolveSession(ctx.sessionID);
+    for (const message of workingMessages) {
+        if (message === null || typeof message !== "object")
+            continue;
+        const messageSession = messageSessionID(message);
+        if (messageSession !== undefined && messageSession !== ctx.sessionID) {
+            ctx.logger.debug("message sessionID differs from event sessionID", {
+                eventSessionID: ctx.sessionID,
+                messageSessionID: messageSession,
+            });
+        }
+        if (Array.isArray(message.content)) {
+            for (const part of message.content) {
+                if (part !== null && typeof part === "object") {
+                    await scrubPart(part, session);
+                }
+            }
+        }
+        if (Array.isArray(message.parts)) {
+            for (const part of message.parts) {
+                if (part !== null && typeof part === "object") {
+                    await scrubPart(part, session);
+                }
+            }
+        }
+    }
+    restoreScrubbedParts(eventMessages, workingMessages);
+    if (scrubbed > 0) {
+        const nonZero = {};
+        for (const [type, count] of Object.entries(byType)) {
+            if (count > 0)
+                nonZero[type] = count;
+        }
+        ctx.logger.info(`scrubbed ${scrubbed} secret(s) from messages`, {
+            scrubbed: nonZero,
+            messageCount: eventMessages.length,
+        });
+    }
+    else {
+        ctx.logger.debug("no secrets found in messages", {
+            messageCount: eventMessages.length,
+        });
+    }
+    return { scrubbed, byType };
+}
+//# sourceMappingURL=scrub-messages.js.map

package/dist/opencode-plugin/v2/scrub-messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub-messages.js","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/scrub-messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAK/C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA4BpD,kEAAkE;AAClE,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,OAAO,GAAI,KAA+B,CAAC,OAAO,CAAC;IACzD,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,OAAgB;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9E,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAI,KAAQ;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAkB,CAAC;QACjC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAiB,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,GAAQ,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,QAAiC,EACjC,QAAiC;IAEjC,IACE,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,IAAI;QACjB,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,IAAI,EACjB,CAAC;QACD,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC9B,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAClC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,0EAA0E;AAC1E,SAAS,gBAAgB,CACvB,QAAsC,EACtC,QAAsC;IAEtC,IACE,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,IAAI;QACjB,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,IAAI,EACjB,CAAC;QACD,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;AACpC,CAAC;AAED,gFAAgF;AAChF,SAAS,oBAAoB,CAC3B,gBAA2B,EAC3B,gBAA2B;IAE3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,IACE,QAAQ,KAAK,SAAS;YACtB,QAAQ,KAAK,IAAI;YACjB,QAAQ,KAAK,SAAS;YACtB,QAAQ,KAAK,IAAI,EACjB,CAAC;YACD,SAAS;QACX,CAAC;QACD,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrD,gBAAgB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,aAAwC,EACxC,aAAwC;IAExC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACnE,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,aAAwB,EACxB,GAAiB,EACjB,cAA+B,EAC/B,KAAyB,EACzB,OAA6B;IAE7B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,MAAM,MAAM,GAAG,CAAC,MAA2B,EAAQ,EAAE;QACnD,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC;YAAE,OAAO;QAC5C,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;QAC3B,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC;IAEF,wEAAwE;IACxE,iDAAiD;IACjD,MAAM,UAAU,GAAG,KAAK,EACtB,KAAc,EACd,OAA8B,EAC9B,MAAgD,EAC9B,EAAE;QACpB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,CAAC;YACf,OAAO,MAAM,CAAC,cAAc,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,KAAkB,CAAC;YACjC,MAAM,GAAG,GAAc,EAAE,CAAC;YAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,KAAgC,CAAC;YAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,8EAA8E;IAC9E,4CAA4C;IAC5C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,MAAM,gBAAgB,GAAG,CACvB,OAAgB,EAC0B,EAAE;QAC5C,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5E,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,IAAiB,EAAsB,EAAE;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,EACrB,IAAiB,EACjB,OAA8B,EACf,EAAE;QACjB,4EAA4E;QAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7B,IACE,SAAS,KAAK,SAAS;YACvB,SAAS,KAAK,IAAI;YAClB,OAAO,SAAS,KAAK,QAAQ,EAC7B,CAAC;YACD,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAChD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC7D,CAAC;gBACD,SAAS,CAAC,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACxC,SAAS,CAAC,KAAK,GAAG,CAAC,MAAM,UAAU,CACjC,SAAS,CAAC,KAAK,EACf,OAAO,EACP,OAAO,CAAC,MAAM,CACf,CAAW,CAAC;YACf,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;gBACpE,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC;gBACnE,SAAS,CAAC,MAAM,GAAG,CAAC,MAAM,UAAU,CAClC,SAAS,CAAC,MAAM,EAChB,OAAO,EACP,cAAc,CACf,CAAW,CAAC;YACf,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBACnD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrE,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC;YACnE,IAAI,CAAC,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QACvE,CAAC;QAED,kDAAkD;QAClD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAClF,MAAM,CAAC,MAAM,CAAC,CAAC;YACf,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IAEF,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,eAAe,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE9C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,SAAS;QAC9D,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;gBACjE,cAAc,EAAE,GAAG,CAAC,SAAS;gBAC7B,gBAAgB,EAAE,cAAc;aACjC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9C,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9C,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAErD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,QAAQ,0BAA0B,EAAE;YAC9D,QAAQ,EAAE,OAAO;YACjB,YAAY,EAAE,aAAa,CAAC,MAAM;SACnC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;YAC/C,YAAY,EAAE,aAAa,CAAC,MAAM;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC"}

package/dist/opencode-plugin/v2/sessions.d.ts

@@ -0,0 +1,17 @@
+/**
+ * In-memory session registry for the V2 plugin.
+ *
+ * OpenCode identifies a conversation by `sessionID`; each conversation gets
+ * its own {@link AnonymizerSessionImpl} so PII maps stay isolated. Sessions are
+ * process-local and intentionally not persisted here.
+ */
+import type { AnonymizerSessionImpl } from "../../storage/session-base.js";
+/** Lazily creates and memoizes one session per OpenCode session ID. */
+export declare class SessionStore {
+    private readonly map;
+    /**
+     * Returns the session for `sessionID`, creating it via `factory` on first use.
+     */
+    get(sessionID: string, factory: () => AnonymizerSessionImpl): AnonymizerSessionImpl;
+}
+//# sourceMappingURL=sessions.d.ts.map

package/dist/opencode-plugin/v2/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E,uEAAuE;AACvE,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiD;IAErE;;OAEG;IACH,GAAG,CACD,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,qBAAqB,GACnC,qBAAqB;CAQzB"}

package/dist/opencode-plugin/v2/sessions.js

@@ -0,0 +1,23 @@
+/**
+ * In-memory session registry for the V2 plugin.
+ *
+ * OpenCode identifies a conversation by `sessionID`; each conversation gets
+ * its own {@link AnonymizerSessionImpl} so PII maps stay isolated. Sessions are
+ * process-local and intentionally not persisted here.
+ */
+/** Lazily creates and memoizes one session per OpenCode session ID. */
+export class SessionStore {
+    map = new Map();
+    /**
+     * Returns the session for `sessionID`, creating it via `factory` on first use.
+     */
+    get(sessionID, factory) {
+        let session = this.map.get(sessionID);
+        if (session === undefined) {
+            session = factory();
+            this.map.set(sessionID, session);
+        }
+        return session;
+    }
+}
+//# sourceMappingURL=sessions.js.map

package/dist/opencode-plugin/v2/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,uEAAuE;AACvE,MAAM,OAAO,YAAY;IACN,GAAG,GAAuC,IAAI,GAAG,EAAE,CAAC;IAErE;;OAEG;IACH,GAAG,CACD,SAAiB,EACjB,OAAoC;QAEpC,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/opencode-plugin/v2/sse.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Server-Sent Events body rewriting for the V2 `http.response` hook.
+ *
+ * When the model streams its answer as SSE (`text/event-stream`), each `data:`
+ * line may carry PII tags that must be restored before OpenCode renders the
+ * text. `event:` / `id:` / comment lines are structural and never modified.
+ *
+ * Two strategies are applied per `data:` payload:
+ * - JSON payloads are parsed, every string leaf is restored, and the value is
+ *   re-serialised. This keeps quotes / backslashes / newlines inside restored
+ *   values correctly escaped. A tag split across the delta field of two frames
+ *   is carried on the matching JSON pointer.
+ * - Non-JSON payloads fall back to raw string replacement. A tag split across
+ *   two events is carried in a per-response text tail.
+ *
+ * Frames are only rewritten once their blank-line terminator has been seen, so
+ * a tag is never processed while its frame is still buffered. Frame boundaries
+ * may be `\n\n`, `\r\n\r\n`, or a bare `\r\r`; the original separator bytes are
+ * preserved on output. On failure the original body is passed through and the
+ * reason is reported via `error`.
+ */
+import type { RehydrateTailStore } from "./rehydrate-tail.js";
+/** Which strategy produced a rewritten body. */
+export type SseRewriteMode = "json" | "text" | "passthrough";
+/** Outcome of rewriting an SSE body. */
+export interface SseRewriteResult {
+    /** Full rewritten SSE body. */
+    body: string;
+    /** Whether a `data:` line actually changed (i.e. a PII tag was restored). */
+    rewrote: boolean;
+    /** Strategy used: `json`/`text` when rewritten, `passthrough` otherwise. */
+    mode: SseRewriteMode;
+    /** Set when an internal failure forced the original body to pass through. */
+    error?: string;
+}
+/**
+ * Per-response state shared across the events of one SSE stream.
+ *
+ * `dataTail` holds an unterminated tag fragment from the previous text event;
+ * `store` holds per-JSON-pointer fragments so a tag split across two JSON
+ * delta frames is reassembled.
+ */
+export interface SseTailState {
+    /** Unterminated tag fragment carried between SSE events (text payloads). */
+    dataTail: string;
+    readonly store: RehydrateTailStore;
+    readonly sessionID: string;
+    readonly tagPrefix: string;
+    readonly tagClose: string;
+}
+/** Creates a fresh per-response tail state, applying option defaults. */
+export declare function createSseTailState(options?: {
+    store?: RehydrateTailStore;
+    sessionID?: string;
+    tagPrefix?: string;
+    tagClose?: string;
+}): SseTailState;
+/** Options accepted by {@link SseStreamRewriter}. */
+export interface SseStreamRewriterOptions {
+    tailStore?: RehydrateTailStore;
+    sessionID?: string;
+    tagPrefix?: string;
+    tagClose?: string;
+}
+/**
+ * Rewrites every PII tag in a complete SSE body.
+ *
+ * The body is split on blank-line frame separators (`\n\n`, `\r\n\r\n`, or
+ * `\r\r`), each frame is rewritten, and the original separators are rejoined so
+ * CRLF streams stay CRLF.
+ *
+ * @param body - Raw SSE body as read from the response.
+ * @param rehydrate - Restores PII tags in a single string.
+ * @param state - Optional per-response tail state; a fresh one is created when
+ *   omitted so tags split across the frames of a single body still reassemble.
+ */
+export declare function rewriteSseBody(body: string, rehydrate: (input: string) => Promise<string>, state?: SseTailState): Promise<SseRewriteResult>;
+/**
+ * Streaming SSE rewriter for `http.response` bodies.
+ *
+ * Chunks are decoded and appended to an internal buffer. Only complete frames
+ * (terminated by a blank line, LF or CRLF) are rewritten and emitted, so a PII
+ * tag split across two chunks is held back until the frame completes. The
+ * per-response {@link SseTailState} additionally carries tag fragments split
+ * across events. {@link flush} rewrites any trailing frame that was never
+ * terminated and emits the final held fragment.
+ */
+export declare class SseStreamRewriter {
+    private readonly rehydrate;
+    private readonly onError?;
+    private readonly decoder;
+    private readonly state;
+    private pending;
+    constructor(rehydrate: (input: string) => Promise<string>, onError?: ((message: string) => void) | undefined, options?: SseStreamRewriterOptions);
+    /** Feeds one byte chunk; returns the text confirmed safe to emit. */
+    push(chunk: Uint8Array): Promise<string>;
+    /** Rewrites and returns any trailing frame at end of stream. */
+    flush(): Promise<string>;
+    private drainCompleteFrames;
+}
+//# sourceMappingURL=sse.d.ts.map

package/dist/opencode-plugin/v2/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AASH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,gDAAgD;AAChD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,CAAC;AAE7D,wCAAwC;AACxC,MAAM,WAAW,gBAAgB;IAC/B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,OAAO,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,IAAI,EAAE,cAAc,CAAC;IACrB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,yEAAyE;AACzE,wBAAgB,kBAAkB,CAChC,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACd,GACL,YAAY,CAQd;AAED,qDAAqD;AACrD,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA8GD;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EAC7C,KAAK,GAAE,YAAmC,GACzC,OAAO,CAAC,gBAAgB,CAAC,CAsC3B;AAcD;;;;;;;;;GASG;AACH,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAN3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,OAAO,CAAM;gBAGF,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EAC7C,OAAO,CAAC,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,aAAA,EACpD,OAAO,GAAE,wBAA6B;IAKxC,qEAAqE;IAC/D,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAK9C,gEAAgE;IAC1D,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;YA0BhB,mBAAmB;CAalC"}

package/dist/opencode-plugin/v2/sse.js

@@ -0,0 +1,235 @@
+/**
+ * Server-Sent Events body rewriting for the V2 `http.response` hook.
+ *
+ * When the model streams its answer as SSE (`text/event-stream`), each `data:`
+ * line may carry PII tags that must be restored before OpenCode renders the
+ * text. `event:` / `id:` / comment lines are structural and never modified.
+ *
+ * Two strategies are applied per `data:` payload:
+ * - JSON payloads are parsed, every string leaf is restored, and the value is
+ *   re-serialised. This keeps quotes / backslashes / newlines inside restored
+ *   values correctly escaped. A tag split across the delta field of two frames
+ *   is carried on the matching JSON pointer.
+ * - Non-JSON payloads fall back to raw string replacement. A tag split across
+ *   two events is carried in a per-response text tail.
+ *
+ * Frames are only rewritten once their blank-line terminator has been seen, so
+ * a tag is never processed while its frame is still buffered. Frame boundaries
+ * may be `\n\n`, `\r\n\r\n`, or a bare `\r\r`; the original separator bytes are
+ * preserved on output. On failure the original body is passed through and the
+ * reason is reported via `error`.
+ */
+import { DEFAULT_TAG_CLOSE, DEFAULT_TAG_PREFIX, InMemoryRehydrateTailStore, splitTrailingTag, walkJsonWithTail, } from "./rehydrate-tail.js";
+/** Creates a fresh per-response tail state, applying option defaults. */
+export function createSseTailState(options = {}) {
+    return {
+        dataTail: "",
+        store: options.store ?? new InMemoryRehydrateTailStore(),
+        sessionID: options.sessionID ?? "",
+        tagPrefix: options.tagPrefix ?? DEFAULT_TAG_PREFIX,
+        tagClose: options.tagClose ?? DEFAULT_TAG_CLOSE,
+    };
+}
+/** Splits a frame into lines while capturing the exact line endings. */
+const LINE_SEPARATOR = /(\r\n|\n|\r)/;
+/** Splits a body into frames while capturing the exact frame separators. */
+const FRAME_SEPARATOR = /(\r\n\r\n|\n\n|\r\r)/;
+/** Normalizes an unknown thrown value into a loggable message. */
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * Restores a single `data:` payload.
+ *
+ * JSON payloads are parsed so string leaves are restored before
+ * re-serialisation; a payload that parses but contains no tag is returned byte
+ * for byte unchanged so formatting/whitespace is preserved. Non-JSON payloads
+ * are rehydrated as text, carrying an incomplete trailing fragment in `state`
+ * so the next event can complete it.
+ */
+async function rewriteDataPayload(payload, rehydrate, state) {
+    let parsed;
+    let isJson = true;
+    try {
+        parsed = JSON.parse(payload);
+    }
+    catch {
+        isJson = false;
+    }
+    if (isJson) {
+        const result = await walkJsonWithTail(parsed, rehydrate, {
+            store: state.store,
+            sessionID: state.sessionID,
+            pointerPrefix: "sse:",
+            tagPrefix: state.tagPrefix,
+            tagClose: state.tagClose,
+        });
+        if (!result.changed) {
+            return { payload, changed: false, mode: "json" };
+        }
+        return { payload: JSON.stringify(result.value), changed: true, mode: "json" };
+    }
+    const combined = state.dataTail + payload;
+    const restored = await rehydrate(combined);
+    const { emitted, tail } = splitTrailingTag(restored, state.tagPrefix, state.tagClose);
+    state.dataTail = tail;
+    return { payload: emitted, changed: emitted !== payload, mode: "text" };
+}
+/**
+ * Rewrites the `data:` lines of a single complete SSE frame. The original
+ * `data: ` / `data:` prefix and spacing are preserved, as are the line endings
+ * (`\n`, `\r\n`, or `\r`).
+ */
+async function rewriteFrame(frame, rehydrate, state) {
+    if (frame.length === 0) {
+        return { frame, rewrote: false, mode: "passthrough" };
+    }
+    let rewrote = false;
+    let mode = "passthrough";
+    const parts = frame.split(LINE_SEPARATOR);
+    for (let index = 0; index < parts.length; index += 2) {
+        const line = parts[index] ?? "";
+        if (!line.startsWith("data:")) {
+            // `event:`, `id:`, `retry:` and `:` comments pass through untouched.
+            continue;
+        }
+        const afterPrefix = line.slice("data:".length);
+        const hasSpace = afterPrefix.startsWith(" ");
+        const prefix = hasSpace ? "data: " : "data:";
+        const payload = hasSpace ? afterPrefix.slice(1) : afterPrefix;
+        const result = await rewriteDataPayload(payload, rehydrate, state);
+        if (result.changed) {
+            rewrote = true;
+            mode = mode === "text" || result.mode === "text" ? "text" : "json";
+        }
+        parts[index] = prefix + result.payload;
+    }
+    return { frame: parts.join(""), rewrote, mode };
+}
+/**
+ * Rewrites every PII tag in a complete SSE body.
+ *
+ * The body is split on blank-line frame separators (`\n\n`, `\r\n\r\n`, or
+ * `\r\r`), each frame is rewritten, and the original separators are rejoined so
+ * CRLF streams stay CRLF.
+ *
+ * @param body - Raw SSE body as read from the response.
+ * @param rehydrate - Restores PII tags in a single string.
+ * @param state - Optional per-response tail state; a fresh one is created when
+ *   omitted so tags split across the frames of a single body still reassemble.
+ */
+export async function rewriteSseBody(body, rehydrate, state = createSseTailState()) {
+    try {
+        const parts = body.split(FRAME_SEPARATOR);
+        let rewrote = false;
+        let sawJson = false;
+        let sawText = false;
+        for (let index = 0; index < parts.length; index += 2) {
+            const result = await rewriteFrame(parts[index] ?? "", rehydrate, state);
+            parts[index] = result.frame;
+            if (result.rewrote) {
+                rewrote = true;
+                if (result.mode === "text") {
+                    sawText = true;
+                }
+                else {
+                    sawJson = true;
+                }
+            }
+        }
+        const rewrittenBody = parts.join("");
+        const mode = !rewrote
+            ? "passthrough"
+            : sawText
+                ? "text"
+                : sawJson
+                    ? "json"
+                    : "passthrough";
+        return { body: rewrittenBody, rewrote, mode };
+    }
+    catch (error) {
+        // The original body was not emitted by us, so drop any held fragment to
+        // avoid it leaking into a later, unrelated frame.
+        state.dataTail = "";
+        return {
+            body,
+            rewrote: false,
+            mode: "passthrough",
+            error: errorMessage(error),
+        };
+    }
+}
+/** Finds the end offset of the last complete frame separator in `text`. */
+function lastFrameBoundaryEnd(text) {
+    const matcher = new RegExp(FRAME_SEPARATOR.source, "g");
+    let end = -1;
+    let match = matcher.exec(text);
+    while (match !== null) {
+        end = match.index + match[0].length;
+        match = matcher.exec(text);
+    }
+    return end;
+}
+/**
+ * Streaming SSE rewriter for `http.response` bodies.
+ *
+ * Chunks are decoded and appended to an internal buffer. Only complete frames
+ * (terminated by a blank line, LF or CRLF) are rewritten and emitted, so a PII
+ * tag split across two chunks is held back until the frame completes. The
+ * per-response {@link SseTailState} additionally carries tag fragments split
+ * across events. {@link flush} rewrites any trailing frame that was never
+ * terminated and emits the final held fragment.
+ */
+export class SseStreamRewriter {
+    rehydrate;
+    onError;
+    decoder = new TextDecoder();
+    state;
+    pending = "";
+    constructor(rehydrate, onError, options = {}) {
+        this.rehydrate = rehydrate;
+        this.onError = onError;
+        this.state = createSseTailState(options);
+    }
+    /** Feeds one byte chunk; returns the text confirmed safe to emit. */
+    async push(chunk) {
+        this.pending += this.decoder.decode(chunk, { stream: true });
+        return this.drainCompleteFrames();
+    }
+    /** Rewrites and returns any trailing frame at end of stream. */
+    async flush() {
+        this.pending += this.decoder.decode();
+        const remainder = this.pending;
+        this.pending = "";
+        let output = "";
+        if (remainder.length > 0) {
+            const result = await rewriteSseBody(remainder, this.rehydrate, this.state);
+            if (result.error !== undefined) {
+                this.onError?.(result.error);
+            }
+            output += result.body;
+        }
+        // Emit any fragment still held from the final event, then release the
+        // per-response state so it cannot leak into a later stream.
+        if (this.state.dataTail.length > 0) {
+            output += this.state.dataTail;
+            this.state.dataTail = "";
+        }
+        this.state.store.clear();
+        return output;
+    }
+    async drainCompleteFrames() {
+        const boundaryEnd = lastFrameBoundaryEnd(this.pending);
+        if (boundaryEnd < 0) {
+            return "";
+        }
+        const complete = this.pending.slice(0, boundaryEnd);
+        this.pending = this.pending.slice(boundaryEnd);
+        const result = await rewriteSseBody(complete, this.rehydrate, this.state);
+        if (result.error !== undefined) {
+            this.onError?.(result.error);
+        }
+        return result.body;
+    }
+}
+//# sourceMappingURL=sse.js.map