opencode-rehydra-core 0.14.0

package/dist/opencode-plugin/v2/response-rehydrate.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Response rehydration for the V2 `http.response` / `experimental.ws.receive`
+ * hooks.
+ *
+ * The model only ever sees PII tags; its output must be rewritten back to the
+ * real values before the user sees it. Referencing `deps.rehydrate` keeps the
+ * PII map lookup in the caller (the session store) so this module stays free of
+ * storage concerns.
+ *
+ * Rewriting strategy by surface:
+ * - JSON `http.response`: parse, walk string leaves, re-serialise.
+ * - SSE `http.response`: streamed through a {@link SseStreamRewriter}; only
+ *   complete frames are rewritten so a tag split across chunks, across SSE
+ *   events, or split inside a streamed delta field is never emitted truncated.
+ * - WebSocket frames: only `primary` frames are rehydrated. JSON frames are
+ *   parsed and walked, carrying a tag split across the delta field of two frames
+ *   on the matching JSON pointer; non-JSON frames fall back to text replacement
+ *   with a per-session tail buffer that holds an incomplete trailing PII tag
+ *   until the next frame completes it.
+ *
+ * Every failure is logged and the original payload is passed through — a failed
+ * rehydration must never corrupt the response or break OpenCode.
+ */
+import type { RehydrateTailStore } from "./rehydrate-tail.js";
+import type { HttpResponseKind, V2Logger } from "./types.js";
+export { InMemoryRehydrateTailStore } from "./rehydrate-tail.js";
+export type { RehydrateTailStore } from "./rehydrate-tail.js";
+export interface ResponseRehydrateDeps {
+    /** Restores PII tags in a single string. */
+    rehydrate: (input: string) => Promise<string>;
+    log: V2Logger;
+    sessionID: string;
+    kind: HttpResponseKind;
+    /** Tag prefix used to detect an incomplete trailing tag (`<PII`). */
+    tagPrefix?: string;
+    /** Tag close delimiter used to detect a complete tag (`/>`). */
+    tagClose?: string;
+    /** Per-session WebSocket tail buffer; defaults to a shared instance. */
+    tailStore?: RehydrateTailStore;
+}
+/** Dependencies accepted by the WebSocket frame rehydrator. */
+export interface WsFrameRehydrateDeps {
+    rehydrate: (input: string) => Promise<string>;
+    log: V2Logger;
+    sessionID?: string;
+    tagPrefix?: string;
+    tagClose?: string;
+    tailStore?: RehydrateTailStore;
+}
+/**
+ * Rehydrates an HTTP response produced for a session request.
+ *
+ * Only `primary` responses are processed: `title` / `compaction` / `generate`
+ * responses are not user-facing, so restoring real values there would only leak
+ * PII. Unsupported content types are left untouched.
+ */
+export declare function rehydrateHttpResponse(event: {
+    response: Response;
+}, deps: ResponseRehydrateDeps): Promise<void>;
+/**
+ * Restores a WebSocket frame in place.
+ *
+ * Only `primary` frames are rehydrated: `title` / `compaction` / `generate`
+ * frames are not user-facing, so restoring real values there would only leak
+ * PII. Any fragment held from an earlier frame is dropped on a non-primary
+ * frame so it cannot surface later.
+ *
+ * Complete JSON frames are parsed and walked so escaped characters are handled
+ * correctly; a tag split across the delta field of consecutive JSON frames is
+ * carried on the matching JSON pointer. Other frames use raw replacement,
+ * holding an incomplete trailing tag in a per-session text buffer until a later
+ * frame completes it.
+ */
+export declare function rehydrateWsFrame(event: {
+    frame: string;
+    kind?: HttpResponseKind;
+}, deps: WsFrameRehydrateDeps): Promise<void>;
+//# sourceMappingURL=response-rehydrate.d.ts.map

package/dist/opencode-plugin/v2/response-rehydrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-rehydrate.d.ts","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/response-rehydrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAWH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAQ9D,MAAM,WAAW,qBAAqB;IACpC,4CAA4C;IAC5C,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,GAAG,EAAE,QAAQ,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,gBAAgB,CAAC;IACvB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAED,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,GAAG,EAAE,QAAQ,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAmGD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,EAC7B,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;CAAE,EACjD,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC,CA0Df"}

package/dist/opencode-plugin/v2/response-rehydrate.js

@@ -0,0 +1,210 @@
+/**
+ * Response rehydration for the V2 `http.response` / `experimental.ws.receive`
+ * hooks.
+ *
+ * The model only ever sees PII tags; its output must be rewritten back to the
+ * real values before the user sees it. Referencing `deps.rehydrate` keeps the
+ * PII map lookup in the caller (the session store) so this module stays free of
+ * storage concerns.
+ *
+ * Rewriting strategy by surface:
+ * - JSON `http.response`: parse, walk string leaves, re-serialise.
+ * - SSE `http.response`: streamed through a {@link SseStreamRewriter}; only
+ *   complete frames are rewritten so a tag split across chunks, across SSE
+ *   events, or split inside a streamed delta field is never emitted truncated.
+ * - WebSocket frames: only `primary` frames are rehydrated. JSON frames are
+ *   parsed and walked, carrying a tag split across the delta field of two frames
+ *   on the matching JSON pointer; non-JSON frames fall back to text replacement
+ *   with a per-session tail buffer that holds an incomplete trailing PII tag
+ *   until the next frame completes it.
+ *
+ * Every failure is logged and the original payload is passed through — a failed
+ * rehydration must never corrupt the response or break OpenCode.
+ */
+import { walkJson } from "../../utils/json-walk.js";
+import { SseStreamRewriter } from "./sse.js";
+import { DEFAULT_TAG_CLOSE, DEFAULT_TAG_PREFIX, InMemoryRehydrateTailStore, splitTrailingTag, walkJsonWithTail, } from "./rehydrate-tail.js";
+// Re-exported so existing consumers keep importing the tail store from here.
+export { InMemoryRehydrateTailStore } from "./rehydrate-tail.js";
+/**
+ * Fallback store used when a caller does not inject one. Tests should inject a
+ * fresh store to keep sessions isolated.
+ */
+const sharedTailStore = new InMemoryRehydrateTailStore();
+/** Normalizes an unknown thrown value into a loggable message. */
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * Builds a replacement response with the same status and headers.
+ *
+ * `content-length` is dropped because the rehydrated body differs in length and
+ * a stale value would truncate or over-read it.
+ */
+function withBody(original, body) {
+    const headers = new Headers(original.headers);
+    headers.delete("content-length");
+    return new Response(body, {
+        status: original.status,
+        statusText: original.statusText,
+        headers,
+    });
+}
+/**
+ * Rehydrates a JSON response body on `event.response`.
+ *
+ * JSON is the safest surface to rewrite: `JSON.parse` / `JSON.stringify` keeps
+ * the payload valid while every string leaf is passed through `rehydrate`.
+ */
+async function rehydrateJsonResponse(event, deps) {
+    const rawBody = await event.response.clone().text();
+    const parsed = JSON.parse(rawBody);
+    const restored = await walkJson(parsed, deps.rehydrate);
+    event.response = withBody(event.response, JSON.stringify(restored));
+}
+/**
+ * Rehydrates a streamed SSE response body by piping it through a
+ * {@link SseStreamRewriter}. The body is never fully buffered, so OpenCode keeps
+ * receiving incremental frames.
+ */
+async function rehydrateSseResponse(event, deps) {
+    const rewriter = new SseStreamRewriter(deps.rehydrate, (message) => {
+        deps.log.error("rehydra SSE frame rewrite failed", {
+            sessionID: deps.sessionID,
+            error: message,
+        });
+    }, {
+        sessionID: deps.sessionID,
+        tagPrefix: deps.tagPrefix,
+        tagClose: deps.tagClose,
+    });
+    const encoder = new TextEncoder();
+    const source = event.response.body;
+    const { readable, writable } = new TransformStream({
+        async transform(chunk, controller) {
+            const text = await rewriter.push(chunk);
+            if (text.length > 0) {
+                controller.enqueue(encoder.encode(text));
+            }
+        },
+        async flush(controller) {
+            const text = await rewriter.flush();
+            if (text.length > 0) {
+                controller.enqueue(encoder.encode(text));
+            }
+        },
+    });
+    const headers = new Headers(event.response.headers);
+    headers.delete("content-length");
+    event.response = new Response(readable, {
+        status: event.response.status,
+        statusText: event.response.statusText,
+        headers,
+    });
+    if (source === null) {
+        await writable.close();
+        return;
+    }
+    source.pipeTo(writable).catch((error) => {
+        deps.log.error("rehydra SSE stream failed", {
+            sessionID: deps.sessionID,
+            error: errorMessage(error),
+        });
+    });
+}
+/**
+ * Rehydrates an HTTP response produced for a session request.
+ *
+ * Only `primary` responses are processed: `title` / `compaction` / `generate`
+ * responses are not user-facing, so restoring real values there would only leak
+ * PII. Unsupported content types are left untouched.
+ */
+export async function rehydrateHttpResponse(event, deps) {
+    if (deps.kind !== "primary") {
+        return;
+    }
+    try {
+        const contentType = event.response.headers.get("content-type") ?? "";
+        if (contentType.includes("application/json")) {
+            await rehydrateJsonResponse(event, deps);
+            return;
+        }
+        if (contentType.includes("text/event-stream")) {
+            await rehydrateSseResponse(event, deps);
+        }
+    }
+    catch (error) {
+        deps.log.error("rehydra http.response hook failed", {
+            sessionID: deps.sessionID,
+            kind: deps.kind,
+            error: errorMessage(error),
+        });
+    }
+}
+/**
+ * Restores a WebSocket frame in place.
+ *
+ * Only `primary` frames are rehydrated: `title` / `compaction` / `generate`
+ * frames are not user-facing, so restoring real values there would only leak
+ * PII. Any fragment held from an earlier frame is dropped on a non-primary
+ * frame so it cannot surface later.
+ *
+ * Complete JSON frames are parsed and walked so escaped characters are handled
+ * correctly; a tag split across the delta field of consecutive JSON frames is
+ * carried on the matching JSON pointer. Other frames use raw replacement,
+ * holding an incomplete trailing tag in a per-session text buffer until a later
+ * frame completes it.
+ */
+export async function rehydrateWsFrame(event, deps) {
+    const store = deps.tailStore ?? sharedTailStore;
+    const sessionID = deps.sessionID ?? "";
+    const tagPrefix = deps.tagPrefix ?? DEFAULT_TAG_PREFIX;
+    const tagClose = deps.tagClose ?? DEFAULT_TAG_CLOSE;
+    if (event.kind !== "primary") {
+        // Fail closed: never restore PII in a non-primary response, and drop any
+        // fragment left behind by an earlier frame.
+        store.delete(sessionID);
+        return;
+    }
+    const combined = store.get(sessionID) + event.frame;
+    const originalFrame = event.frame;
+    try {
+        let parsed;
+        let isJson = true;
+        try {
+            parsed = JSON.parse(combined);
+        }
+        catch {
+            isJson = false;
+        }
+        if (isJson) {
+            const result = await walkJsonWithTail(parsed, deps.rehydrate, {
+                store,
+                sessionID,
+                pointerPrefix: "ws:",
+                tagPrefix,
+                tagClose,
+            });
+            // Preserve the frame byte-for-byte when nothing was rehydrated; otherwise
+            // re-serialize so escaped characters are handled correctly. `combined`
+            // includes any fragment held back from a previous frame.
+            event.frame = result.changed ? JSON.stringify(result.value) : combined;
+            // Clear the byte-level text tail; JSON-pointer tails were updated above.
+            store.set(sessionID, "");
+            return;
+        }
+        const restored = await deps.rehydrate(combined);
+        const { emitted, tail } = splitTrailingTag(restored, tagPrefix, tagClose);
+        event.frame = emitted;
+        store.set(sessionID, tail);
+    }
+    catch (error) {
+        store.delete(sessionID);
+        event.frame = originalFrame;
+        deps.log.error("rehydra experimental.ws.receive hook failed", {
+            sessionID,
+            error: errorMessage(error),
+        });
+    }
+}
+//# sourceMappingURL=response-rehydrate.js.map

package/dist/opencode-plugin/v2/response-rehydrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-rehydrate.js","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/response-rehydrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,EAC1B,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAI7B,6EAA6E;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAGjE;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,0BAA0B,EAAE,CAAC;AA0BzD,kEAAkE;AAClE,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,QAAkB,EAAE,IAAY;IAChD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB,CAClC,KAA6B,EAC7B,IAA2B;IAE3B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACxD,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CACjC,KAA6B,EAC7B,IAA2B;IAE3B,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CACpC,IAAI,CAAC,SAAS,EACd,CAAC,OAAO,EAAE,EAAE;QACV,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kCAAkC,EAAE;YACjD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC,EACD;QACE,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CACF,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IACnC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,eAAe,CAAyB;QACzE,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU;YAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,UAAU;YACpB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,KAAK,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,QAAQ,EAAE;QACtC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;QACrC,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC/C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,2BAA2B,EAAE;YAC1C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAA6B,EAC7B,IAA2B;IAE3B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACrE,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7C,MAAM,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QACD,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC9C,MAAM,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,mCAAmC,EAAE;YAClD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAiD,EACjD,IAA0B;IAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IAEpD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,yEAAyE;QACzE,4CAA4C;QAC5C,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;IACpD,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC;IAElC,IAAI,CAAC;QACH,IAAI,MAAe,CAAC;QACpB,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE;gBAC5D,KAAK;gBACL,SAAS;gBACT,aAAa,EAAE,KAAK;gBACpB,SAAS;gBACT,QAAQ;aACT,CAAC,CAAC;YACH,0EAA0E;YAC1E,uEAAuE;YACvE,yDAAyD;YACzD,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvE,yEAAyE;YACzE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,gBAAgB,CACxC,QAAQ,EACR,SAAS,EACT,QAAQ,CACT,CAAC;QACF,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxB,KAAK,CAAC,KAAK,GAAG,aAAa,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,6CAA6C,EAAE;YAC5D,SAAS;YACT,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/opencode-plugin/v2/scrub-messages.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Message scrubbing for OpenCode Plugin V2 session hooks.
+ *
+ * Walks the messages attached to a model request and anonymizes every string
+ * that can carry secrets: user/assistant/reasoning text, tool arguments,
+ * completed tool output, and V1-style part state.
+ *
+ * The scrub runs on a deep copy; only after it completes successfully are the
+ * results written back into the caller's original objects (preserving the
+ * references Plugin V2 relies on). If any step throws, the originals are left
+ * untouched and the error propagates so the caller can block the request
+ * instead of leaking raw PII (fail-closed).
+ */
+import { PIIType } from "../../types/index.js";
+import type { AnonymizationPolicy } from "../../types/index.js";
+import type { AnonymizationState } from "./anon-state.js";
+import type { Message, ScrubContext, SessionResolver } from "./types.js";
+export interface ScrubMessagesOptions {
+    /** Locale hint passed to `anonymize()`; defaults to the plugin option. */
+    locale?: string;
+    /** Base policy (URL/IP disabled by default). */
+    policy?: Partial<AnonymizationPolicy>;
+    /** Whether the VCS identity recognizers are enabled. */
+    vcsIdentities: boolean;
+    /** Builds the extended policy that enables identity types for a VCS output. */
+    identityPolicy: (types: PIIType[]) => Partial<AnonymizationPolicy>;
+}
+export interface ScrubResult {
+    /** Entities anonymized during this call. */
+    scrubbed: number;
+    byType: Record<string, number>;
+}
+/**
+ * Anonymizes the messages of a session request in place.
+ *
+ * @returns the number of entities removed and a per-type breakdown for logging.
+ */
+export declare function scrubMessages(eventMessages: Message[], ctx: ScrubContext, resolveSession: SessionResolver, state: AnonymizationState, options: ScrubMessagesOptions): Promise<ScrubResult>;
+//# sourceMappingURL=scrub-messages.d.ts.map

package/dist/opencode-plugin/v2/scrub-messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub-messages.d.ts","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/scrub-messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,KAAK,EACV,mBAAmB,EAEpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EACV,OAAO,EAGP,YAAY,EACZ,eAAe,EAChB,MAAM,YAAY,CAAC;AAGpB,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtC,wDAAwD;IACxD,aAAa,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,cAAc,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,WAAW;IAC1B,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAgHD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,aAAa,EAAE,OAAO,EAAE,EACxB,GAAG,EAAE,YAAY,EACjB,cAAc,EAAE,eAAe,EAC/B,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,WAAW,CAAC,CA+KtB"}

package/dist/opencode-plugin/v2/scrub-messages.js

@@ -0,0 +1,260 @@
+/**
+ * Message scrubbing for OpenCode Plugin V2 session hooks.
+ *
+ * Walks the messages attached to a model request and anonymizes every string
+ * that can carry secrets: user/assistant/reasoning text, tool arguments,
+ * completed tool output, and V1-style part state.
+ *
+ * The scrub runs on a deep copy; only after it completes successfully are the
+ * results written back into the caller's original objects (preserving the
+ * references Plugin V2 relies on). If any step throws, the originals are left
+ * untouched and the error propagates so the caller can block the request
+ * instead of leaking raw PII (fail-closed).
+ */
+import { PIIType } from "../../types/index.js";
+import { vcsCommandTypes } from "../vcs-command.js";
+/** Reads a shell command from a tool input object, if present. */
+function extractCommand(input) {
+    if (input === null || typeof input !== "object")
+        return undefined;
+    const command = input.command;
+    return typeof command === "string" ? command : undefined;
+}
+/** Resolves the session ID carried by a message, for diagnostic logging only. */
+function messageSessionID(message) {
+    const info = message.info;
+    if (info !== undefined && info !== null && typeof info === "object") {
+        const sessionID = info.sessionID;
+        if (typeof sessionID === "string" && sessionID.length > 0)
+            return sessionID;
+    }
+    const sessionID = message.sessionID;
+    if (typeof sessionID === "string" && sessionID.length > 0)
+        return sessionID;
+    return undefined;
+}
+/** Deep-clones a JSON-like value (message payloads contain no class instances). */
+function deepClone(value) {
+    if (Array.isArray(value)) {
+        const items = value;
+        return items.map((item) => deepClone(item));
+    }
+    if (value !== null && typeof value === "object") {
+        const source = value;
+        const out = {};
+        for (const [key, item] of Object.entries(source)) {
+            out[key] = deepClone(item);
+        }
+        return out;
+    }
+    return value;
+}
+/**
+ * Copies the fields the scrubber mutates from a scrubbed part back onto the
+ * original part, keeping the original object identities intact.
+ */
+function restorePart(original, scrubbed) {
+    if (original === undefined ||
+        original === null ||
+        scrubbed === undefined ||
+        scrubbed === null) {
+        return;
+    }
+    original.text = scrubbed.text;
+    original.input = scrubbed.input;
+    original.result = scrubbed.result;
+    restorePartState(original.state, scrubbed.state);
+}
+/** Copies mutable tool-state fields back onto the original part state. */
+function restorePartState(original, scrubbed) {
+    if (original === undefined ||
+        original === null ||
+        scrubbed === undefined ||
+        scrubbed === null) {
+        return;
+    }
+    original.input = scrubbed.input;
+    original.error = scrubbed.error;
+    original.output = scrubbed.output;
+}
+/** Applies scrub results from `source` back onto the original message parts. */
+function restoreScrubbedParts(originalMessages, scrubbedMessages) {
+    for (let index = 0; index < originalMessages.length; index++) {
+        const original = originalMessages[index];
+        const scrubbed = scrubbedMessages[index];
+        if (original === undefined ||
+            original === null ||
+            scrubbed === undefined ||
+            scrubbed === null) {
+            continue;
+        }
+        restorePartArray(original.content, scrubbed.content);
+        restorePartArray(original.parts, scrubbed.parts);
+    }
+}
+function restorePartArray(originalParts, scrubbedParts) {
+    if (!Array.isArray(originalParts) || !Array.isArray(scrubbedParts)) {
+        return;
+    }
+    const length = Math.min(originalParts.length, scrubbedParts.length);
+    for (let index = 0; index < length; index++) {
+        restorePart(originalParts[index], scrubbedParts[index]);
+    }
+}
+/**
+ * Anonymizes the messages of a session request in place.
+ *
+ * @returns the number of entities removed and a per-type breakdown for logging.
+ */
+export async function scrubMessages(eventMessages, ctx, resolveSession, state, options) {
+    let scrubbed = 0;
+    const byType = {};
+    const record = (result) => {
+        if (result.stats.totalEntities <= 0)
+            return;
+        state.hasAnonymized = true;
+        scrubbed += result.stats.totalEntities;
+        for (const [type, count] of Object.entries(result.stats.countsByType)) {
+            byType[type] = (byType[type] ?? 0) + count;
+        }
+    };
+    // Recursively anonymize a value. Object keys are preserved so execution
+    // arguments and JSON property names stay intact.
+    const scrubValue = async (value, session, policy) => {
+        if (typeof value === "string") {
+            const result = await session.anonymize(value, options.locale, policy);
+            record(result);
+            return result.anonymizedText;
+        }
+        if (Array.isArray(value)) {
+            const items = value;
+            const out = [];
+            for (const item of items) {
+                out.push(await scrubValue(item, session, policy));
+            }
+            return out;
+        }
+        if (value !== null && typeof value === "object") {
+            const source = value;
+            const out = {};
+            for (const [key, item] of Object.entries(source)) {
+                out[key] = await scrubValue(item, session, policy);
+            }
+            return out;
+        }
+        return value;
+    };
+    // Tool call id → shell command, so a later `tool-result` can use the identity
+    // policy its matching `tool-call` requires.
+    const commandByCallID = new Map();
+    const policyForCommand = (command) => {
+        if (!options.vcsIdentities || typeof command !== "string")
+            return undefined;
+        const commands = vcsCommandTypes(command);
+        const types = [];
+        if (commands.has("github"))
+            types.push(PIIType.GITHUB_USERNAME);
+        if (commands.has("git"))
+            types.push(PIIType.PERSON);
+        if (types.length === 0)
+            return undefined;
+        return options.identityPolicy(types);
+    };
+    const commandFor = (part) => {
+        const callID = part.callID ?? part.id;
+        if (callID === undefined)
+            return undefined;
+        return commandByCallID.get(callID);
+    };
+    const scrubPart = async (part, session) => {
+        // V1-style part state (kept so the scrubber works for both message shapes).
+        const partState = part.state;
+        if (partState !== undefined &&
+            partState !== null &&
+            typeof partState === "object") {
+            if (partState.input !== undefined) {
+                const command = extractCommand(partState.input);
+                if (command !== undefined) {
+                    commandByCallID.set(part.callID ?? part.id ?? "", command);
+                }
+                partState.input = await scrubValue(partState.input, session, options.policy);
+            }
+            if (typeof partState.error === "string") {
+                partState.error = (await scrubValue(partState.error, session, options.policy));
+            }
+            if (partState.status === "completed" && typeof partState.output === "string") {
+                const command = extractCommand(partState.input) ?? commandFor(part);
+                const policyOverride = policyForCommand(command) ?? options.policy;
+                partState.output = (await scrubValue(partState.output, session, policyOverride));
+            }
+        }
+        // V2 tool arguments.
+        if (part.type === "tool-call" && part.input !== undefined) {
+            const command = extractCommand(part.input);
+            if (command !== undefined && part.id !== undefined) {
+                commandByCallID.set(part.id, command);
+            }
+            part.input = await scrubValue(part.input, session, options.policy);
+        }
+        // V2 tool output.
+        if (part.type === "tool-result" && part.result !== undefined) {
+            const command = extractCommand(part.input) ?? commandFor(part);
+            const policyOverride = policyForCommand(command) ?? options.policy;
+            part.result = await scrubValue(part.result, session, policyOverride);
+        }
+        // Any textual part (text, reasoning, compaction).
+        if (typeof part.text === "string") {
+            const result = await session.anonymize(part.text, options.locale, options.policy);
+            record(result);
+            part.text = result.anonymizedText;
+        }
+    };
+    // Scrub a deep copy first; the originals are only touched after the whole
+    // pass succeeds, so a mid-way failure cannot send partially scrubbed PII.
+    const workingMessages = deepClone(eventMessages);
+    const session = resolveSession(ctx.sessionID);
+    for (const message of workingMessages) {
+        if (message === null || typeof message !== "object")
+            continue;
+        const messageSession = messageSessionID(message);
+        if (messageSession !== undefined && messageSession !== ctx.sessionID) {
+            ctx.logger.debug("message sessionID differs from event sessionID", {
+                eventSessionID: ctx.sessionID,
+                messageSessionID: messageSession,
+            });
+        }
+        if (Array.isArray(message.content)) {
+            for (const part of message.content) {
+                if (part !== null && typeof part === "object") {
+                    await scrubPart(part, session);
+                }
+            }
+        }
+        if (Array.isArray(message.parts)) {
+            for (const part of message.parts) {
+                if (part !== null && typeof part === "object") {
+                    await scrubPart(part, session);
+                }
+            }
+        }
+    }
+    restoreScrubbedParts(eventMessages, workingMessages);
+    if (scrubbed > 0) {
+        const nonZero = {};
+        for (const [type, count] of Object.entries(byType)) {
+            if (count > 0)
+                nonZero[type] = count;
+        }
+        ctx.logger.info(`scrubbed ${scrubbed} secret(s) from messages`, {
+            scrubbed: nonZero,
+            messageCount: eventMessages.length,
+        });
+    }
+    else {
+        ctx.logger.debug("no secrets found in messages", {
+            messageCount: eventMessages.length,
+        });
+    }
+    return { scrubbed, byType };
+}
+//# sourceMappingURL=scrub-messages.js.map

package/dist/opencode-plugin/v2/scrub-messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub-messages.js","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/scrub-messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAK/C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA4BpD,kEAAkE;AAClE,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,OAAO,GAAI,KAA+B,CAAC,OAAO,CAAC;IACzD,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,OAAgB;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9E,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAI,KAAQ;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAkB,CAAC;QACjC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAiB,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,GAAQ,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,QAAiC,EACjC,QAAiC;IAEjC,IACE,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,IAAI;QACjB,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,IAAI,EACjB,CAAC;QACD,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC9B,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAClC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,0EAA0E;AAC1E,SAAS,gBAAgB,CACvB,QAAsC,EACtC,QAAsC;IAEtC,IACE,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,IAAI;QACjB,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,IAAI,EACjB,CAAC;QACD,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;AACpC,CAAC;AAED,gFAAgF;AAChF,SAAS,oBAAoB,CAC3B,gBAA2B,EAC3B,gBAA2B;IAE3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,IACE,QAAQ,KAAK,SAAS;YACtB,QAAQ,KAAK,IAAI;YACjB,QAAQ,KAAK,SAAS;YACtB,QAAQ,KAAK,IAAI,EACjB,CAAC;YACD,SAAS;QACX,CAAC;QACD,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrD,gBAAgB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,aAAwC,EACxC,aAAwC;IAExC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACnE,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,aAAwB,EACxB,GAAiB,EACjB,cAA+B,EAC/B,KAAyB,EACzB,OAA6B;IAE7B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,MAAM,MAAM,GAAG,CAAC,MAA2B,EAAQ,EAAE;QACnD,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC;YAAE,OAAO;QAC5C,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;QAC3B,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC;IAEF,wEAAwE;IACxE,iDAAiD;IACjD,MAAM,UAAU,GAAG,KAAK,EACtB,KAAc,EACd,OAA8B,EAC9B,MAAgD,EAC9B,EAAE;QACpB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,CAAC;YACf,OAAO,MAAM,CAAC,cAAc,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,KAAkB,CAAC;YACjC,MAAM,GAAG,GAAc,EAAE,CAAC;YAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,KAAgC,CAAC;YAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,8EAA8E;IAC9E,4CAA4C;IAC5C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,MAAM,gBAAgB,GAAG,CACvB,OAAgB,EAC0B,EAAE;QAC5C,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5E,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,IAAiB,EAAsB,EAAE;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,EACrB,IAAiB,EACjB,OAA8B,EACf,EAAE;QACjB,4EAA4E;QAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7B,IACE,SAAS,KAAK,SAAS;YACvB,SAAS,KAAK,IAAI;YAClB,OAAO,SAAS,KAAK,QAAQ,EAC7B,CAAC;YACD,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAChD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC7D,CAAC;gBACD,SAAS,CAAC,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACxC,SAAS,CAAC,KAAK,GAAG,CAAC,MAAM,UAAU,CACjC,SAAS,CAAC,KAAK,EACf,OAAO,EACP,OAAO,CAAC,MAAM,CACf,CAAW,CAAC;YACf,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;gBACpE,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC;gBACnE,SAAS,CAAC,MAAM,GAAG,CAAC,MAAM,UAAU,CAClC,SAAS,CAAC,MAAM,EAChB,OAAO,EACP,cAAc,CACf,CAAW,CAAC;YACf,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBACnD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrE,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC;YACnE,IAAI,CAAC,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QACvE,CAAC;QAED,kDAAkD;QAClD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAClF,MAAM,CAAC,MAAM,CAAC,CAAC;YACf,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IAEF,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,eAAe,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE9C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,SAAS;QAC9D,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;gBACjE,cAAc,EAAE,GAAG,CAAC,SAAS;gBAC7B,gBAAgB,EAAE,cAAc;aACjC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9C,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9C,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAErD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,QAAQ,0BAA0B,EAAE;YAC9D,QAAQ,EAAE,OAAO;YACjB,YAAY,EAAE,aAAa,CAAC,MAAM;SACnC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;YAC/C,YAAY,EAAE,aAAa,CAAC,MAAM;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC"}

package/dist/opencode-plugin/v2/sessions.d.ts

@@ -0,0 +1,17 @@
+/**
+ * In-memory session registry for the V2 plugin.
+ *
+ * OpenCode identifies a conversation by `sessionID`; each conversation gets
+ * its own {@link AnonymizerSessionImpl} so PII maps stay isolated. Sessions are
+ * process-local and intentionally not persisted here.
+ */
+import type { AnonymizerSessionImpl } from "../../storage/session-base.js";
+/** Lazily creates and memoizes one session per OpenCode session ID. */
+export declare class SessionStore {
+    private readonly map;
+    /**
+     * Returns the session for `sessionID`, creating it via `factory` on first use.
+     */
+    get(sessionID: string, factory: () => AnonymizerSessionImpl): AnonymizerSessionImpl;
+}
+//# sourceMappingURL=sessions.d.ts.map

package/dist/opencode-plugin/v2/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/opencode-plugin/v2/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E,uEAAuE;AACvE,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiD;IAErE;;OAEG;IACH,GAAG,CACD,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,qBAAqB,GACnC,qBAAqB;CAQzB"}