orcareplay 0.1.0

package/dist/tls-capture.js

@@ -0,0 +1,198 @@
+import { readFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { DEFAULT_TLS_HOSTS, HostPolicy, RunCa, } from '@orcareplay/proxy';
+export async function setupTlsCapture(req) {
+    const { args, out, writer, writes } = req;
+    const interceptTls = args.bool('tls-intercept');
+    const tlsHosts = args.list('tls-hosts');
+    // Naming hosts without asking for interception captures nothing and says nothing, which reads
+    // as "orca ignored my traffic" rather than as "orca ignored my flag".
+    if (!interceptTls && tlsHosts.length > 0) {
+        out.warn('tls.hosts_ignored', { hosts: tlsHosts.join(','), next: 'add --tls-intercept' });
+    }
+    if (!interceptTls)
+        return { proxyOptions: {} };
+    const hosts = tlsHosts.length > 0 ? tlsHosts : DEFAULT_TLS_HOSTS;
+    HostPolicy.from(hosts);
+    const trustedOriginCerts = await extraOriginRoots();
+    const runDir = writer?.runDir ?? req.runDir;
+    if (!runDir)
+        throw new Error('TLS interception needs a run directory');
+    const ca = await RunCa.create({ runDir });
+    return {
+        ca,
+        proxyOptions: {
+            tls: {
+                ca,
+                hosts,
+                trustedOriginCerts,
+                ...(writer
+                    ? {
+                        onNetExchange: (exchange) => {
+                            writes.push(() => persistNetExchange(writer, req.turn(), exchange));
+                        },
+                    }
+                    : {}),
+                onTunnel: (tunnel) => {
+                    if (writer)
+                        writes.push(() => persistTunnel(writer, req.turn(), tunnel));
+                },
+                onFailure: (failure) => out.warn('tls.handshake_failed', { ...failure }),
+            },
+        },
+    };
+}
+/**
+ * What the launched agent needs in its environment to be intercepted, and the disclosure the
+ * operator needs before it happens.
+ *
+ * Lived in `orca record` alongside the setup, so a fork that minted a CA would have decrypted
+ * nothing: the child was never pointed at the proxy and never told to trust the root. Interception
+ * is only two halves working together, so both halves belong in one place.
+ */
+export async function trustRunCa(writer, proxyTls, proxyUrl, env, out) {
+    // The child trusts the run CA through its own environment and through nothing else. Nothing here
+    // touches a system or browser trust store, and orca will not offer to: interception ends when
+    // this process does, which is the property that makes it defensible at all.
+    env.HTTPS_PROXY = proxyUrl;
+    env.https_proxy = proxyUrl;
+    // NODE_EXTRA_CA_CERTS *adds* to Node's trust store. The rest of these *replace* an OpenSSL
+    // client's store outright, so they get the bundle — the run CA plus the public roots — or the
+    // child would lose its ability to reach every host orca deliberately does not intercept.
+    env.NODE_EXTRA_CA_CERTS = proxyTls.caCertPath;
+    for (const variable of [
+        'SSL_CERT_FILE',
+        'REQUESTS_CA_BUNDLE',
+        'CURL_CA_BUNDLE',
+        'AWS_CA_BUNDLE',
+        'DENO_CERT',
+    ]) {
+        env[variable] = proxyTls.caBundlePath;
+    }
+    // The agent also talks to the recording proxy directly over plain HTTP via the base-URL
+    // variables. Sending those through the proxy as well would be a loop.
+    const existing = process.env.NO_PROXY ?? process.env.no_proxy ?? '';
+    const noProxy = [existing, 'localhost', '127.0.0.1', '::1'].filter(Boolean).join(',');
+    env.NO_PROXY = noProxy;
+    env.no_proxy = noProxy;
+    out.warn('tls.intercepting', {
+        hosts: proxyTls.hosts,
+        ca_sha256: proxyTls.fingerprint,
+        ca_dir: dirname(proxyTls.caCertPath),
+    });
+    out.plain('  TLS interception is on for this run. Traffic to the hosts above is decrypted,');
+    out.plain('  recorded and re-encrypted; everything else is tunnelled unread. The certificate');
+    out.plain('  authority is unique to this run, trusted only by the agent orca launches, and');
+    out.plain('  deleted when the run ends. It is not installed anywhere.');
+    // A digest, never the certificate and never the key. The CA is deleted when the run ends, so
+    // this line is the only lasting evidence of which authority signed what — enough to match a
+    // certificate someone finds later to the run that minted it, and useless for anything else.
+    if (writer) {
+        await writer.append({
+            type: 'note',
+            actor: 'orca',
+            turn: 0,
+            attrs: { rule: 'tls_intercept', hosts: proxyTls.hosts, ca_sha256: proxyTls.fingerprint },
+        });
+    }
+}
+/**
+ * One decrypted HTTP exchange orca did not recognise as a model call.
+ *
+ * `net.request` / `net.response` have been in the spec since v0 and nothing has ever emitted them;
+ * this is what makes them real. The pair is deliberately shaped like `model.request` /
+ * `model.response` so the timeline reads the same either way.
+ */
+export async function persistNetExchange(writer, turn, exchange) {
+    const request = await writer.append({
+        type: 'net.request',
+        // The agent made the call. No actor names "some server on the internet", so the reply is
+        // attributed to orca, which is the only party that witnessed it.
+        actor: 'agent',
+        turn,
+        attrs: {
+            host: exchange.host,
+            port: exchange.port,
+            method: exchange.method,
+            path: exchange.path,
+            intercepted: true,
+            headers: exchange.requestHeaders,
+            truncated: exchange.requestTruncated,
+        },
+        payload: exchange.requestBody,
+    });
+    await writer.append({
+        type: 'net.response',
+        actor: 'orca',
+        turn,
+        causes: [request.seq],
+        attrs: {
+            host: exchange.host,
+            port: exchange.port,
+            status: exchange.status,
+            intercepted: true,
+            headers: exchange.responseHeaders,
+            bytes: exchange.responseBytes,
+            truncated: exchange.responseTruncated,
+            duration_ms: exchange.durationMs,
+        },
+        payload: exchange.responseBody,
+    });
+}
+/**
+ * A connection orca refused to decrypt.
+ *
+ * Recorded because the refusal is itself the evidence — and because an operator whose harness talks
+ * to an endpoint nobody predicted finds it here, in a line naming the host and nothing else, rather
+ * than by guessing. No path, no headers, no payload: there is nothing to write, because orca never
+ * held the plaintext.
+ */
+async function persistTunnel(writer, turn, tunnel) {
+    const request = await writer.append({
+        type: 'net.request',
+        actor: 'agent',
+        turn,
+        attrs: {
+            host: tunnel.host,
+            port: tunnel.port,
+            intercepted: false,
+            reason: 'host not in the TLS interception allowlist',
+        },
+    });
+    await writer.append({
+        type: 'net.response',
+        actor: 'orca',
+        turn,
+        causes: [request.seq],
+        attrs: {
+            host: tunnel.host,
+            port: tunnel.port,
+            intercepted: false,
+            bytes_to_origin: tunnel.bytesToOrigin,
+            bytes_to_client: tunnel.bytesToClient,
+            duration_ms: tunnel.durationMs,
+            ...(tunnel.error === undefined ? {} : { error: tunnel.error }),
+        },
+    });
+}
+/**
+ * Extra roots to trust when connecting onward to the real origin.
+ *
+ * An intercepting proxy terminates TLS, so it also has to make the outbound connection itself. In a
+ * corporate environment that connection goes through another intercepting proxy whose root Node
+ * does not ship, and the run fails at the first request with an opaque certificate error.
+ */
+async function extraOriginRoots(env = process.env) {
+    const configured = env.ORCA_TLS_UPSTREAM_CA;
+    if (!configured)
+        return [];
+    const roots = [];
+    for (const path of configured
+        .split(',')
+        .map((p) => p.trim())
+        .filter(Boolean)) {
+        roots.push(await readFile(path, 'utf8'));
+    }
+    return roots;
+}
+//# sourceMappingURL=tls-capture.js.map

package/dist/tls-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls-capture.js","sourceRoot":"","sources":["../src/tls-capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,KAAK,GAKN,MAAM,mBAAmB,CAAC;AAyC3B,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAsB;IAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAE1C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,8FAA8F;IAC9F,sEAAsE;IACtE,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAE/C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACjE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,MAAM,kBAAkB,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACvE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAE1C,OAAO;QACL,EAAE;QACF,YAAY,EAAE;YACZ,GAAG,EAAE;gBACH,EAAE;gBACF,KAAK;gBACL,kBAAkB;gBAClB,GAAG,CAAC,MAAM;oBACR,CAAC,CAAC;wBACE,aAAa,EAAE,CAAC,QAAqB,EAAE,EAAE;4BACvC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;wBACtE,CAAC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,QAAQ,EAAE,CAAC,MAAoB,EAAE,EAAE;oBACjC,IAAI,MAAM;wBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC3E,CAAC;gBACD,SAAS,EAAE,CAAC,OAAyB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC;aAC3F;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAA+B,EAC/B,QAA0B,EAC1B,QAAgB,EAChB,GAA2B,EAC3B,GAAW;IAEX,iGAAiG;IACjG,8FAA8F;IAC9F,4EAA4E;IAC5E,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC;IAC3B,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC;IAC3B,2FAA2F;IAC3F,8FAA8F;IAC9F,yFAAyF;IACzF,GAAG,CAAC,mBAAmB,GAAG,QAAQ,CAAC,UAAU,CAAC;IAC9C,KAAK,MAAM,QAAQ,IAAI;QACrB,eAAe;QACf,oBAAoB;QACpB,gBAAgB;QAChB,eAAe;QACf,WAAW;KACZ,EAAE,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC;IACxC,CAAC;IACD,wFAAwF;IACxF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtF,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;IACvB,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;IAEvB,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,WAAW;QAC/B,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;KACrC,CAAC,CAAC;IACH,GAAG,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IAC7F,GAAG,CAAC,KAAK,CAAC,mFAAmF,CAAC,CAAC;IAC/F,GAAG,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IAC7F,GAAG,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAExE,6FAA6F;IAC7F,4FAA4F;IAC5F,4FAA4F;IAC5F,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,MAAM,CAAC;YAClB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE;SACzF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAmB,EACnB,IAAY,EACZ,QAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;QAClC,IAAI,EAAE,aAAa;QACnB,yFAAyF;QACzF,iEAAiE;QACjE,KAAK,EAAE,OAAO;QACd,IAAI;QACJ,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,QAAQ,CAAC,cAAc;YAChC,SAAS,EAAE,QAAQ,CAAC,gBAAgB;SACrC;QACD,OAAO,EAAE,QAAQ,CAAC,WAAoB;KACvC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,MAAM;QACb,IAAI;QACJ,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACrB,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,QAAQ,CAAC,eAAe;YACjC,KAAK,EAAE,QAAQ,CAAC,aAAa;YAC7B,SAAS,EAAE,QAAQ,CAAC,iBAAiB;YACrC,WAAW,EAAE,QAAQ,CAAC,UAAU;SACjC;QACD,OAAO,EAAE,QAAQ,CAAC,YAAqB;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,aAAa,CAC1B,MAAmB,EACnB,IAAY,EACZ,MAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;QAClC,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,OAAO;QACd,IAAI;QACJ,KAAK,EAAE;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,4CAA4C;SACrD;KACF,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,MAAM;QACb,IAAI;QACJ,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACrB,KAAK,EAAE;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,KAAK;YAClB,eAAe,EAAE,MAAM,CAAC,aAAa;YACrC,eAAe,EAAE,MAAM,CAAC,aAAa;YACrC,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;SAC/D;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;IAC5C,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,UAAU;SAC1B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/upstream.d.ts

@@ -0,0 +1,20 @@
+import type { ParsedArgs } from './args.js';
+/**
+ * Where live model calls go, and what they carry.
+ *
+ * Needed by record *and* by replay: `--loose` and any fork continue live, and a fork that ignored
+ * the override would quietly talk to the real provider instead of the gateway the user pointed it
+ * at. Same precedence whichever command is running — flag, then environment, then the gateway from
+ * `orca setup`.
+ *
+ * The headers are the half that makes `orca setup` worth having: a gateway needs a key, and this
+ * is the only place one is attached. It goes on the *outbound* request only. What gets recorded is
+ * built from the incoming request with auth stripped, so a key orca injects cannot reach a trace
+ * by construction rather than by a rule someone has to remember.
+ */
+export interface UpstreamPlan {
+    upstream: Record<string, string> | undefined;
+    headers: Record<string, string> | undefined;
+}
+export declare function upstreamPlan(args: ParsedArgs, env?: NodeJS.ProcessEnv): Promise<UpstreamPlan>;
+//# sourceMappingURL=upstream.d.ts.map

package/dist/upstream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream.d.ts","sourceRoot":"","sources":["../src/upstream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CAC7C;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,UAAU,EAChB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,YAAY,CAAC,CAqBvB"}

package/dist/upstream.js

@@ -0,0 +1,31 @@
+import { gatewayHeaders, readConfig, resolveUpstream } from './config.js';
+export async function upstreamPlan(args, env = process.env) {
+    const config = await readConfig(env);
+    const upstream = await resolveUpstream(args, env);
+    const headers = gatewayHeaders(config, env);
+    // Unanimity, not `some`. `upstreamHeaders` are attached to every live call the proxy makes —
+    // there is no per-dialect header channel — so if any origin we might reach is not the gateway,
+    // attaching the key sends it there. A `.some()` check passed whenever *one* dialect still
+    // defaulted to the gateway, which is exactly what happens when a flag redirects the other: the
+    // gateway's credential went to api.anthropic.com. Verified against the built CLI.
+    //
+    // Erring towards withholding costs an unauthenticated request and a clear 401. Erring the other
+    // way hands a third party a key they were never meant to see, and nothing says it happened.
+    const origins = Object.values(upstream ?? {});
+    const goingToGateway = config.gateway?.url !== undefined &&
+        origins.length > 0 &&
+        origins.every((origin) => sameOrigin(origin, config.gateway.url));
+    return {
+        upstream,
+        headers: goingToGateway && Object.keys(headers).length > 0 ? headers : undefined,
+    };
+}
+function sameOrigin(a, b) {
+    try {
+        return new URL(a).origin === new URL(b).origin;
+    }
+    catch {
+        return a.replace(/\/+$/, '') === b.replace(/\/+$/, '');
+    }
+}
+//# sourceMappingURL=upstream.js.map

package/dist/upstream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream.js","sourceRoot":"","sources":["../src/upstream.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAoB1E,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAgB,EAChB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,6FAA6F;IAC7F,+FAA+F;IAC/F,0FAA0F;IAC1F,+FAA+F;IAC/F,kFAAkF;IAClF,EAAE;IACF,gGAAgG;IAChG,4FAA4F;IAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,cAAc,GAClB,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS;QACjC,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,OAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KACjF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAAS,EAAE,CAAS;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const ORCA_VERSION = "0.1.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,UAAU,CAAC"}

package/dist/version.js

@@ -0,0 +1,2 @@
+export const ORCA_VERSION = '0.1.0';
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "orcareplay",
+  "version": "0.1.0",
+  "type": "module",
+  "license": "Apache-2.0",
+  "description": "Record, replay and fork debugger for AI agents",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "orca": "./dist/cli.js",
+    "orcareplay": "./dist/cli.js"
+  },
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "keywords": [
+    "ai",
+    "agent",
+    "debugger",
+    "replay",
+    "record",
+    "llm",
+    "observability",
+    "claude",
+    "openai"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Continuum-AI-Corp/OrcaReplay.git"
+  },
+  "dependencies": {
+    "@orcareplay/schema": "0.1.0",
+    "@orcareplay/plugin-api": "0.1.0",
+    "@orcareplay/core": "0.1.0",
+    "@orcareplay/proxy": "0.1.0",
+    "@orcareplay/providers": "0.1.0",
+    "@orcareplay/adapters": "0.1.0",
+    "@orcareplay/fs-capture": "0.1.0",
+    "@orcareplay/viewer": "0.1.0",
+    "@orcareplay/mcp-shim": "0.1.0",
+    "@orcareplay/shell-shim": "0.1.0"
+  }
+}