praxis-agent 0.1.0

package/dist/platform/bounded-process-runner.js

@@ -0,0 +1,209 @@
+import { spawn } from 'node:child_process';
+import { redactSensitiveText, sanitizeChildEnvironment, sensitiveEnvironmentValues, } from './sensitive-data.js';
+function abortError() {
+    return new DOMException('Tool execution aborted', 'AbortError');
+}
+function takeUtf8Prefix(content, maxBytes) {
+    const encodedBytes = Buffer.byteLength(content);
+    if (encodedBytes <= maxBytes) {
+        return { content, bytes: encodedBytes, truncated: false };
+    }
+    let prefix = '';
+    let bytes = 0;
+    for (const character of content) {
+        const characterBytes = Buffer.byteLength(character);
+        if (bytes + characterBytes > maxBytes)
+            break;
+        prefix += character;
+        bytes += characterBytes;
+    }
+    return { content: prefix, bytes, truncated: true };
+}
+function redactSensitivePrefix(content, sensitiveValues, maxRawBytes) {
+    let redacted = '';
+    let index = 0;
+    let rawBytes = 0;
+    while (index < content.length && rawBytes < maxRawBytes) {
+        const sensitiveValue = sensitiveValues.find((value) => content.startsWith(value, index));
+        if (sensitiveValue) {
+            redacted += redactSensitiveText(sensitiveValue, [sensitiveValue]);
+            rawBytes += Buffer.byteLength(sensitiveValue);
+            index += sensitiveValue.length;
+            continue;
+        }
+        const codePoint = content.codePointAt(index);
+        if (codePoint === undefined)
+            break;
+        const character = String.fromCodePoint(codePoint);
+        const characterBytes = Buffer.byteLength(character);
+        if (rawBytes + characterBytes > maxRawBytes)
+            break;
+        redacted += character;
+        rawBytes += characterBytes;
+        index += character.length;
+    }
+    return redacted;
+}
+function unstableSensitiveSuffixLength(content, sensitiveValues) {
+    let longest = 0;
+    for (const value of sensitiveValues) {
+        const limit = Math.min(content.length, value.length - 1);
+        for (let length = limit; length > longest; length -= 1) {
+            if (content.endsWith(value.slice(0, length))) {
+                longest = length;
+                break;
+            }
+        }
+    }
+    return longest;
+}
+function renderOutput(content, sensitiveValues, maxOutputBytes, rawBytes, complete) {
+    const safeContent = complete
+        ? content
+        : content.slice(0, content.length -
+            unstableSensitiveSuffixLength(content, sensitiveValues));
+    const redacted = redactSensitivePrefix(safeContent, sensitiveValues, maxOutputBytes);
+    const retained = takeUtf8Prefix(redacted, maxOutputBytes);
+    return `${retained.content}${rawBytes > maxOutputBytes || retained.truncated
+        ? '\n[output truncated]'
+        : ''}`;
+}
+export function joinedProcessOutput(result) {
+    if (!result.stdout)
+        return result.stderr;
+    if (!result.stderr)
+        return result.stdout;
+    return `${result.stdout}${result.stdout.endsWith('\n') ? '' : '\n'}${result.stderr}`;
+}
+export class BoundedProcessRunner {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    run(options) {
+        if (options.signal?.aborted)
+            return Promise.reject(abortError());
+        return new Promise((resolve, reject) => {
+            const sensitiveValues = sensitiveEnvironmentValues(process.env);
+            const longestSensitiveValueBytes = sensitiveValues.reduce((longest, value) => Math.max(longest, Buffer.byteLength(value)), 0);
+            const rawOutputLimit = this.options.maxOutputBytes + Math.max(3, longestSensitiveValueBytes);
+            const child = spawn(options.command, options.args, {
+                cwd: options.cwd ?? this.options.cwd,
+                detached: process.platform !== 'win32',
+                env: { ...sanitizeChildEnvironment(), ...options.env },
+                stdio: ['ignore', 'pipe', 'pipe'],
+            });
+            const chunks = { stdout: [], stderr: [] };
+            const combined = [];
+            const retainedBytes = { stdout: 0, stderr: 0, combined: 0 };
+            let outputBytes = 0;
+            let timedOut = false;
+            let settled = false;
+            let outputUpdates = Promise.resolve();
+            let outputUpdateError;
+            const queueOutputUpdate = (output) => {
+                if (!options.onOutput)
+                    return;
+                outputUpdates = outputUpdates.then(async () => {
+                    if (outputUpdateError !== undefined)
+                        return;
+                    try {
+                        await options.onOutput?.(output);
+                    }
+                    catch (error) {
+                        outputUpdateError = error;
+                    }
+                });
+            };
+            const updateLiveOutput = () => {
+                const raw = Buffer.concat(combined).toString('utf8');
+                const output = renderOutput(raw, sensitiveValues, this.options.maxOutputBytes, outputBytes, false);
+                queueOutputUpdate(output);
+            };
+            const retain = (stream, chunk) => {
+                outputBytes = Math.min(this.options.maxOutputBytes + 1, outputBytes + chunk.length);
+                const remaining = rawOutputLimit - retainedBytes[stream];
+                if (remaining > 0) {
+                    const retained = chunk.subarray(0, remaining);
+                    chunks[stream].push(retained);
+                    retainedBytes[stream] += retained.length;
+                }
+                const combinedRemaining = rawOutputLimit - retainedBytes.combined;
+                if (combinedRemaining > 0) {
+                    const retained = chunk.subarray(0, combinedRemaining);
+                    combined.push(retained);
+                    retainedBytes.combined += retained.length;
+                }
+                updateLiveOutput();
+            };
+            child.stdout.on('data', (chunk) => retain('stdout', chunk));
+            child.stderr.on('data', (chunk) => retain('stderr', chunk));
+            const kill = () => {
+                if (child.pid === undefined)
+                    return;
+                try {
+                    if (process.platform === 'win32')
+                        child.kill('SIGKILL');
+                    else
+                        process.kill(-child.pid, 'SIGKILL');
+                }
+                catch (error) {
+                    if (error.code !== 'ESRCH')
+                        reject(error);
+                }
+            };
+            const cancel = () => kill();
+            options.signal?.addEventListener('abort', cancel, { once: true });
+            const timeout = setTimeout(() => {
+                timedOut = true;
+                kill();
+            }, options.timeoutMs);
+            child.once('error', (error) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timeout);
+                options.signal?.removeEventListener('abort', cancel);
+                reject(error);
+            });
+            child.once('close', (code) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timeout);
+                options.signal?.removeEventListener('abort', cancel);
+                if (options.signal?.aborted) {
+                    reject(abortError());
+                    return;
+                }
+                const rawStdout = Buffer.concat(chunks.stdout).toString('utf8');
+                const rawStderr = Buffer.concat(chunks.stderr).toString('utf8');
+                const stdoutRawBudget = Math.min(retainedBytes.stdout, this.options.maxOutputBytes);
+                const stderrRawBudget = Math.min(retainedBytes.stderr, this.options.maxOutputBytes - stdoutRawBudget);
+                const stdout = takeUtf8Prefix(redactSensitivePrefix(rawStdout, sensitiveValues, stdoutRawBudget), this.options.maxOutputBytes);
+                const stderr = takeUtf8Prefix(redactSensitivePrefix(rawStderr, sensitiveValues, stderrRawBudget), this.options.maxOutputBytes - stdout.bytes);
+                const truncated = outputBytes > this.options.maxOutputBytes ||
+                    stdout.truncated ||
+                    stderr.truncated;
+                const combinedRaw = Buffer.concat(combined).toString('utf8');
+                const output = renderOutput(combinedRaw, sensitiveValues, this.options.maxOutputBytes, outputBytes, true);
+                queueOutputUpdate(output);
+                void outputUpdates.then(() => {
+                    if (outputUpdateError !== undefined) {
+                        reject(outputUpdateError);
+                        return;
+                    }
+                    resolve({
+                        stdout: `${stdout.content}${truncated ? '\n[output truncated]' : ''}`,
+                        stderr: stderr.content,
+                        output,
+                        code: code ?? 1,
+                        timedOut,
+                        truncated,
+                    });
+                }, reject);
+            });
+        });
+    }
+}
+//# sourceMappingURL=bounded-process-runner.js.map

package/dist/platform/bounded-process-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-process-runner.js","sourceRoot":"","sources":["../../src/platform/bounded-process-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAA;AA0B5B,SAAS,UAAU;IACjB,OAAO,IAAI,YAAY,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,cAAc,CACrB,OAAe,EACf,QAAgB;IAEhB,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC3D,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;QAChC,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACnD,IAAI,KAAK,GAAG,cAAc,GAAG,QAAQ;YAAE,MAAK;QAC5C,MAAM,IAAI,SAAS,CAAA;QACnB,KAAK,IAAI,cAAc,CAAA;IACzB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;AACpD,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAe,EACf,eAAkC,EAClC,WAAmB;IAEnB,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,GAAG,WAAW,EAAE,CAAC;QACxD,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACpD,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CACjC,CAAA;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,QAAQ,IAAI,mBAAmB,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,CAAC,CAAA;YACjE,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAA;YAC7C,KAAK,IAAI,cAAc,CAAC,MAAM,CAAA;YAC9B,SAAQ;QACV,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QAC5C,IAAI,SAAS,KAAK,SAAS;YAAE,MAAK;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACnD,IAAI,QAAQ,GAAG,cAAc,GAAG,WAAW;YAAE,MAAK;QAClD,QAAQ,IAAI,SAAS,CAAA;QACrB,QAAQ,IAAI,cAAc,CAAA;QAC1B,KAAK,IAAI,SAAS,CAAC,MAAM,CAAA;IAC3B,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,6BAA6B,CACpC,OAAe,EACf,eAAkC;IAElC,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACxD,KAAK,IAAI,MAAM,GAAG,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC7C,OAAO,GAAG,MAAM,CAAA;gBAChB,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,YAAY,CACnB,OAAe,EACf,eAAkC,EAClC,cAAsB,EACtB,QAAgB,EAChB,QAAiB;IAEjB,MAAM,WAAW,GAAG,QAAQ;QAC1B,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,OAAO,CAAC,KAAK,CACX,CAAC,EACD,OAAO,CAAC,MAAM;YACZ,6BAA6B,CAAC,OAAO,EAAE,eAAe,CAAC,CAC1D,CAAA;IACL,MAAM,QAAQ,GAAG,qBAAqB,CACpC,WAAW,EACX,eAAe,EACf,cAAc,CACf,CAAA;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;IACzD,OAAO,GAAG,QAAQ,CAAC,OAAO,GACxB,QAAQ,GAAG,cAAc,IAAI,QAAQ,CAAC,SAAS;QAC7C,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,EACN,EAAE,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAqB;IACvD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,MAAM,CAAA;IACxC,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,MAAM,CAAA;IACxC,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;AACtF,CAAC;AAED,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,OAAoC;QAApC,YAAO,GAAP,OAAO,CAA6B;IAAG,CAAC;IAErE,GAAG,CAAC,OAA0B;QAC5B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;QAChE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,eAAe,GAAG,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC/D,MAAM,0BAA0B,GAAG,eAAe,CAAC,MAAM,CACvD,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAC/D,CAAC,CACF,CAAA;YACD,MAAM,cAAc,GAClB,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAA;YACvE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBACjD,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;gBACtC,GAAG,EAAE,EAAE,GAAG,wBAAwB,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;gBACtD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAc,EAAE,MAAM,EAAE,EAAc,EAAE,CAAA;YACjE,MAAM,QAAQ,GAAa,EAAE,CAAA;YAC7B,MAAM,aAAa,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;YAC3D,IAAI,WAAW,GAAG,CAAC,CAAA;YACnB,IAAI,QAAQ,GAAG,KAAK,CAAA;YACpB,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,IAAI,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;YACrC,IAAI,iBAA0B,CAAA;YAE9B,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAE,EAAE;gBAC3C,IAAI,CAAC,OAAO,CAAC,QAAQ;oBAAE,OAAM;gBAC7B,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAC5C,IAAI,iBAAiB,KAAK,SAAS;wBAAE,OAAM;oBAC3C,IAAI,CAAC;wBACH,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAA;oBAClC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,iBAAiB,GAAG,KAAK,CAAA;oBAC3B,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC,CAAA;YAED,MAAM,gBAAgB,GAAG,GAAG,EAAE;gBAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;gBACpD,MAAM,MAAM,GAAG,YAAY,CACzB,GAAG,EACH,eAAe,EACf,IAAI,CAAC,OAAO,CAAC,cAAc,EAC3B,WAAW,EACX,KAAK,CACN,CAAA;gBACD,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAC3B,CAAC,CAAA;YACD,MAAM,MAAM,GAAG,CAAC,MAA2B,EAAE,KAAa,EAAE,EAAE;gBAC5D,WAAW,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,CAAC,EAC/B,WAAW,GAAG,KAAK,CAAC,MAAM,CAC3B,CAAA;gBACD,MAAM,SAAS,GAAG,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;gBACxD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;oBAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;oBAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;oBAC7B,aAAa,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAA;gBAC1C,CAAC;gBACD,MAAM,iBAAiB,GAAG,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAA;gBACjE,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAA;oBACrD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;oBACvB,aAAa,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAA;gBAC3C,CAAC;gBACD,gBAAgB,EAAE,CAAA;YACpB,CAAC,CAAA;YACD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;YACnE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;YAEnE,MAAM,IAAI,GAAG,GAAG,EAAE;gBAChB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;oBAAE,OAAM;gBACnC,IAAI,CAAC;oBACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;wBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;;wBAClD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;gBAC1C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;wBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;gBACtE,CAAC;YACH,CAAC,CAAA;YACD,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,CAAA;YAC3B,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACjE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,QAAQ,GAAG,IAAI,CAAA;gBACf,IAAI,EAAE,CAAA;YACR,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;YAErB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBACpD,MAAM,CAAC,KAAK,CAAC,CAAA;YACf,CAAC,CAAC,CAAA;YACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC3B,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBACpD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;oBAC5B,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;oBACpB,OAAM;gBACR,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;gBAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;gBAC/D,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAC9B,aAAa,CAAC,MAAM,EACpB,IAAI,CAAC,OAAO,CAAC,cAAc,CAC5B,CAAA;gBACD,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAC9B,aAAa,CAAC,MAAM,EACpB,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,eAAe,CAC9C,CAAA;gBACD,MAAM,MAAM,GAAG,cAAc,CAC3B,qBAAqB,CAAC,SAAS,EAAE,eAAe,EAAE,eAAe,CAAC,EAClE,IAAI,CAAC,OAAO,CAAC,cAAc,CAC5B,CAAA;gBACD,MAAM,MAAM,GAAG,cAAc,CAC3B,qBAAqB,CAAC,SAAS,EAAE,eAAe,EAAE,eAAe,CAAC,EAClE,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,MAAM,CAAC,KAAK,CAC3C,CAAA;gBACD,MAAM,SAAS,GACb,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc;oBACzC,MAAM,CAAC,SAAS;oBAChB,MAAM,CAAC,SAAS,CAAA;gBAClB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;gBAC5D,MAAM,MAAM,GAAG,YAAY,CACzB,WAAW,EACX,eAAe,EACf,IAAI,CAAC,OAAO,CAAC,cAAc,EAC3B,WAAW,EACX,IAAI,CACL,CAAA;gBACD,iBAAiB,CAAC,MAAM,CAAC,CAAA;gBACzB,KAAK,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE;oBAC3B,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;wBACpC,MAAM,CAAC,iBAAiB,CAAC,CAAA;wBACzB,OAAM;oBACR,CAAC;oBACD,OAAO,CAAC;wBACN,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE;wBACrE,MAAM,EAAE,MAAM,CAAC,OAAO;wBACtB,MAAM;wBACN,IAAI,EAAE,IAAI,IAAI,CAAC;wBACf,QAAQ;wBACR,SAAS;qBACV,CAAC,CAAA;gBACJ,CAAC,EAAE,MAAM,CAAC,CAAA;YACZ,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/platform/claude-version.d.ts

@@ -0,0 +1,5 @@
+export type VersionCommand = (file: string, args: readonly string[]) => Promise<{
+    stdout: string;
+}>;
+export declare function detectInstalledClaudeVersion(execute?: VersionCommand): Promise<string>;
+//# sourceMappingURL=claude-version.d.ts.map

package/dist/platform/claude-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-version.d.ts","sourceRoot":"","sources":["../../src/platform/claude-version.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,cAAc,GAAG,CAC3B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,KACpB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAUhC,wBAAsB,4BAA4B,CAChD,OAAO,GAAE,cAAsC,GAC9C,OAAO,CAAC,MAAM,CAAC,CAGjB"}

package/dist/platform/claude-version.js

@@ -0,0 +1,17 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { parseClaudeVersionOutput } from '../compatibility/claude/schema.js';
+import { sanitizeChildEnvironment } from './sensitive-data.js';
+const execFileAsync = promisify(execFile);
+const executeVersionCommand = async (file, args) => {
+    const { stdout } = await execFileAsync(file, [...args], {
+        encoding: 'utf8',
+        env: sanitizeChildEnvironment(),
+    });
+    return { stdout };
+};
+export async function detectInstalledClaudeVersion(execute = executeVersionCommand) {
+    const { stdout } = await execute('claude', ['--version']);
+    return parseClaudeVersionOutput(stdout);
+}
+//# sourceMappingURL=claude-version.js.map

package/dist/platform/claude-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-version.js","sourceRoot":"","sources":["../../src/platform/claude-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAA;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAE9D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AAOzC,MAAM,qBAAqB,GAAmB,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IACjE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACtD,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,wBAAwB,EAAE;KAChC,CAAC,CAAA;IACF,OAAO,EAAE,MAAM,EAAE,CAAA;AACnB,CAAC,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,UAA0B,qBAAqB;IAE/C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;IACzD,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAA;AACzC,CAAC"}

package/dist/platform/command-shell.d.ts

@@ -0,0 +1,3 @@
+export declare function commandShell(platform?: NodeJS.Platform): "/bin/zsh" | "/bin/bash";
+export declare function commandShellArguments(command: string, platform?: NodeJS.Platform): string[];
+//# sourceMappingURL=command-shell.d.ts.map

package/dist/platform/command-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-shell.d.ts","sourceRoot":"","sources":["../../src/platform/command-shell.ts"],"names":[],"mappings":"AAAA,wBAAgB,YAAY,CAAC,QAAQ,GAAE,MAAM,CAAC,QAA2B,4BAMxE;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,EAAE,CAMV"}

package/dist/platform/command-shell.js

@@ -0,0 +1,15 @@
+export function commandShell(platform = process.platform) {
+    if (platform === 'darwin')
+        return '/bin/zsh';
+    if (platform === 'linux')
+        return '/bin/bash';
+    throw new Error(`Praxis command execution is unsupported on platform ${platform}`);
+}
+export function commandShellArguments(command, platform = process.platform) {
+    if (platform === 'darwin')
+        return ['-f', '-c', command];
+    if (platform === 'linux')
+        return ['--noprofile', '--norc', '-c', command];
+    throw new Error(`Praxis command execution is unsupported on platform ${platform}`);
+}
+//# sourceMappingURL=command-shell.js.map

package/dist/platform/command-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-shell.js","sourceRoot":"","sources":["../../src/platform/command-shell.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,YAAY,CAAC,WAA4B,OAAO,CAAC,QAAQ;IACvE,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAA;IAC5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,WAAW,CAAA;IAC5C,MAAM,IAAI,KAAK,CACb,uDAAuD,QAAQ,EAAE,CAClE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACvD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACzE,MAAM,IAAI,KAAK,CACb,uDAAuD,QAAQ,EAAE,CAClE,CAAA;AACH,CAAC"}

package/dist/platform/exclusive-file-lease.d.ts

@@ -0,0 +1,15 @@
+export interface ExclusiveFileLeaseHandle {
+    release(): Promise<void>;
+}
+export declare class ExclusiveFileLease {
+    private readonly lockFile;
+    constructor(lockFile: string);
+    tryAcquire(): Promise<ExclusiveFileLeaseHandle | null>;
+    private acquire;
+    private acquireReclaimGuard;
+    private owns;
+    private cleanupStaleArtifacts;
+    private staleArtifactHasLiveOwner;
+    private releaseOwned;
+}
+//# sourceMappingURL=exclusive-file-lease.d.ts.map

package/dist/platform/exclusive-file-lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exclusive-file-lease.d.ts","sourceRoot":"","sources":["../../src/platform/exclusive-file-lease.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,wBAAwB;IACvC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAqCD,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEvC,UAAU,IAAI,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;YAU9C,OAAO;YA0EP,mBAAmB;YAsDnB,IAAI;YASJ,qBAAqB;YAkCrB,yBAAyB;YAgBzB,YAAY;CAG3B"}

package/dist/platform/exclusive-file-lease.js

@@ -0,0 +1,265 @@
+import { randomUUID } from 'node:crypto';
+import { link, mkdir, open, opendir, readFile, rename, rm, } from 'node:fs/promises';
+import { basename, dirname, join } from 'node:path';
+const MAX_STALE_ARTIFACT_CLEANUP = 64;
+function parseLease(source) {
+    let value;
+    try {
+        value = JSON.parse(source);
+    }
+    catch {
+        return null;
+    }
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        return null;
+    }
+    const lock = value;
+    if (lock.version !== 1 ||
+        !Number.isSafeInteger(lock.pid) ||
+        Number(lock.pid) <= 0 ||
+        typeof lock.token !== 'string' ||
+        !/^[A-Za-z0-9_-]{1,128}$/u.test(lock.token) ||
+        typeof lock.createdAt !== 'string') {
+        return null;
+    }
+    return lock;
+}
+function processAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === 'EPERM';
+    }
+}
+export class ExclusiveFileLease {
+    lockFile;
+    constructor(lockFile) {
+        this.lockFile = lockFile;
+    }
+    async tryAcquire() {
+        await mkdir(dirname(this.lockFile), { recursive: true });
+        await this.cleanupStaleArtifacts();
+        const owner = await this.acquire();
+        if (!owner)
+            return null;
+        return {
+            release: () => this.releaseOwned(this.lockFile, owner.token),
+        };
+    }
+    async acquire() {
+        const owner = {
+            version: 1,
+            pid: process.pid,
+            token: randomUUID(),
+            createdAt: new Date().toISOString(),
+        };
+        const candidate = `${this.lockFile}.${owner.token}.candidate`;
+        const handle = await open(candidate, 'wx', 0o600);
+        try {
+            try {
+                await handle.writeFile(JSON.stringify(owner));
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            try {
+                await link(candidate, this.lockFile);
+                return owner;
+            }
+            catch (error) {
+                if (error.code !== 'EEXIST')
+                    throw error;
+            }
+            let existing;
+            try {
+                existing = parseLease(await readFile(this.lockFile, 'utf8'));
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+                try {
+                    await link(candidate, this.lockFile);
+                    return owner;
+                }
+                catch (linkError) {
+                    if (linkError.code === 'EEXIST')
+                        return null;
+                    throw linkError;
+                }
+            }
+            if (!existing || processAlive(existing.pid))
+                return null;
+            const guard = `${this.lockFile}.${existing.token}.reclaim`;
+            if (!(await this.acquireReclaimGuard(candidate, guard, owner.token))) {
+                return null;
+            }
+            try {
+                if (!(await this.owns(guard, owner.token)))
+                    return null;
+                let current;
+                try {
+                    current = parseLease(await readFile(this.lockFile, 'utf8'));
+                }
+                catch (error) {
+                    if (error.code === 'ENOENT')
+                        current = null;
+                    else
+                        throw error;
+                }
+                if (current?.token !== existing.token || processAlive(current.pid)) {
+                    return null;
+                }
+                await rm(this.lockFile, { force: true });
+                try {
+                    await link(candidate, this.lockFile);
+                    if (!(await this.owns(guard, owner.token))) {
+                        await this.releaseOwned(this.lockFile, owner.token);
+                        return null;
+                    }
+                    return owner;
+                }
+                catch (error) {
+                    if (error.code === 'EEXIST')
+                        return null;
+                    throw error;
+                }
+            }
+            finally {
+                await this.releaseOwned(guard, owner.token);
+            }
+        }
+        finally {
+            await rm(candidate, { force: true });
+        }
+    }
+    async acquireReclaimGuard(candidate, guard, token) {
+        try {
+            await link(candidate, guard);
+            return true;
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+        }
+        let existing;
+        try {
+            existing = parseLease(await readFile(guard, 'utf8'));
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+            try {
+                await link(candidate, guard);
+                return true;
+            }
+            catch (linkError) {
+                if (linkError.code === 'EEXIST')
+                    return false;
+                throw linkError;
+            }
+        }
+        if (!existing || processAlive(existing.pid))
+            return false;
+        const displaced = `${guard}.${token}.stale`;
+        try {
+            try {
+                await rename(guard, displaced);
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+                try {
+                    await link(candidate, guard);
+                    return true;
+                }
+                catch (linkError) {
+                    if (linkError.code === 'EEXIST')
+                        return false;
+                    throw linkError;
+                }
+            }
+            const moved = parseLease(await readFile(displaced, 'utf8'));
+            if (moved?.token !== existing.token)
+                return false;
+            try {
+                await link(candidate, guard);
+                return true;
+            }
+            catch (error) {
+                if (error.code === 'EEXIST')
+                    return false;
+                throw error;
+            }
+        }
+        finally {
+            await rm(displaced, { force: true });
+        }
+    }
+    async owns(filePath, token) {
+        try {
+            return parseLease(await readFile(filePath, 'utf8'))?.token === token;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return false;
+            throw error;
+        }
+    }
+    async cleanupStaleArtifacts() {
+        const directory = dirname(this.lockFile);
+        const prefix = `${basename(this.lockFile)}.`;
+        const entries = await opendir(directory);
+        let inspected = 0;
+        for await (const entry of entries) {
+            if (!entry.isFile() ||
+                !entry.name.startsWith(prefix) ||
+                !/\.(?:candidate|stale)$/u.test(entry.name)) {
+                continue;
+            }
+            if (inspected >= MAX_STALE_ARTIFACT_CLEANUP)
+                return;
+            inspected += 1;
+            if (entry.name.endsWith('.stale') &&
+                (await this.staleArtifactHasLiveOwner(entry.name))) {
+                continue;
+            }
+            const artifact = join(directory, entry.name);
+            let owner;
+            try {
+                owner = parseLease(await readFile(artifact, 'utf8'));
+            }
+            catch (error) {
+                if (error.code === 'ENOENT')
+                    continue;
+                throw error;
+            }
+            if (!owner || processAlive(owner.pid))
+                continue;
+            await this.releaseOwned(artifact, owner.token);
+        }
+    }
+    async staleArtifactHasLiveOwner(name) {
+        const match = /\.reclaim\.([A-Za-z0-9_-]{1,128})\.stale$/u.exec(name);
+        const token = match?.[1];
+        if (!token)
+            return true;
+        let owner;
+        try {
+            owner = parseLease(await readFile(`${this.lockFile}.${token}.candidate`, 'utf8'));
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return false;
+            throw error;
+        }
+        return !owner || owner.token !== token || processAlive(owner.pid);
+    }
+    async releaseOwned(filePath, token) {
+        if (await this.owns(filePath, token))
+            await rm(filePath, { force: true });
+    }
+}
+//# sourceMappingURL=exclusive-file-lease.js.map

package/dist/platform/exclusive-file-lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exclusive-file-lease.js","sourceRoot":"","sources":["../../src/platform/exclusive-file-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EACL,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,MAAM,EACN,EAAE,GACH,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAanD,MAAM,0BAA0B,GAAG,EAAE,CAAA;AAErC,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,IAAI,GAAG,KAAgC,CAAA;IAC7C,IACE,IAAI,CAAC,OAAO,KAAK,CAAC;QAClB,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QACrB,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC9B,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3C,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAClC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,IAAgC,CAAA;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACpB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAA;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,KAAK,CAAC,UAAU;QACd,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAA;QAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACvB,OAAO;YACL,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;SAC7D,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,KAAK,GAAkB;YAC3B,OAAO,EAAE,CAAC;YACV,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,UAAU,EAAE;YACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAA;QACD,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,YAAY,CAAA;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QACjD,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;gBAC7C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YACrB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACtB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACpC,OAAO,KAAK,CAAA;YACd,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAA;YACrE,CAAC;YAED,IAAI,QAA8B,CAAA;YAClC,IAAI,CAAC;gBACH,QAAQ,GAAG,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAA;gBACnE,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;oBACpC,OAAO,KAAK,CAAA;gBACd,CAAC;gBAAC,OAAO,SAAS,EAAE,CAAC;oBACnB,IAAK,SAAmC,CAAC,IAAI,KAAK,QAAQ;wBACxD,OAAO,IAAI,CAAA;oBACb,MAAM,SAAS,CAAA;gBACjB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YACxD,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,UAAU,CAAA;YAC1D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrE,OAAO,IAAI,CAAA;YACb,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAA;gBACvD,IAAI,OAA6B,CAAA;gBACjC,IAAI,CAAC;oBACH,OAAO,GAAG,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;gBAC7D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAO,GAAG,IAAI,CAAA;;wBACjE,MAAM,KAAK,CAAA;gBAClB,CAAC;gBACD,IAAI,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnE,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBACxC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;oBACpC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBAC3C,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;wBACnD,OAAO,IAAI,CAAA;oBACb,CAAC;oBACD,OAAO,KAAK,CAAA;gBACd,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAO,IAAI,CAAA;oBACnE,MAAM,KAAK,CAAA;gBACb,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;YAC7C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,SAAiB,EACjB,KAAa,EACb,KAAa;QAEb,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC5B,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QACrE,CAAC;QACD,IAAI,QAA8B,CAAA;QAClC,IAAI,CAAC;YACH,QAAQ,GAAG,UAAU,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACnE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;gBAC5B,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,IAAK,SAAmC,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAA;gBACxE,MAAM,SAAS,CAAA;YACjB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QACzD,MAAM,SAAS,GAAG,GAAG,KAAK,IAAI,KAAK,QAAQ,CAAA;QAC3C,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAA;gBACnE,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;oBAC5B,OAAO,IAAI,CAAA;gBACb,CAAC;gBAAC,OAAO,SAAS,EAAE,CAAC;oBACnB,IAAK,SAAmC,CAAC,IAAI,KAAK,QAAQ;wBACxD,OAAO,KAAK,CAAA;oBACd,MAAM,SAAS,CAAA;gBACjB,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;YAC3D,IAAI,KAAK,EAAE,KAAK,KAAK,QAAQ,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAA;YACjD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;gBAC5B,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAA;gBACpE,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,KAAa;QAChD,IAAI,CAAC;YACH,OAAO,UAAU,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK,CAAA;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAA;YACpE,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAA;QAC5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,SAAS,GAAG,CAAC,CAAA;QACjB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAClC,IACE,CAAC,KAAK,CAAC,MAAM,EAAE;gBACf,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC9B,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAC3C,CAAC;gBACD,SAAQ;YACV,CAAC;YACD,IAAI,SAAS,IAAI,0BAA0B;gBAAE,OAAM;YACnD,SAAS,IAAI,CAAC,CAAA;YACd,IACE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC7B,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAClD,CAAC;gBACD,SAAQ;YACV,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5C,IAAI,KAA2B,CAAA;YAC/B,IAAI,CAAC;gBACH,KAAK,GAAG,UAAU,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAQ;gBAChE,MAAM,KAAK,CAAA;YACb,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,SAAQ;YAC/C,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QAChD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,IAAY;QAClD,MAAM,KAAK,GAAG,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrE,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;QACxB,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACvB,IAAI,KAA2B,CAAA;QAC/B,IAAI,CAAC;YACH,KAAK,GAAG,UAAU,CAChB,MAAM,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,YAAY,EAAE,MAAM,CAAC,CAC9D,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAA;YACpE,MAAM,KAAK,CAAA;QACb,CAAC;QACD,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACnE,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,KAAa;QACxD,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3E,CAAC;CACF"}

package/dist/platform/sensitive-data.d.ts

@@ -0,0 +1,8 @@
+type Environment = Readonly<Record<string, string | undefined>>;
+export declare function sanitizeChildEnvironment(explicitOverrides?: Environment, ambient?: Environment): Record<string, string>;
+export declare function sensitiveEnvironmentValues(...environments: readonly Environment[]): readonly string[];
+export declare function redactSensitiveText(text: string, sensitiveValues: readonly string[]): string;
+export declare function redactSensitiveValue<T>(value: T, sensitiveValues: readonly string[]): T;
+export declare function redactSensitiveError(error: unknown, sensitiveValues: readonly string[]): Error;
+export {};
+//# sourceMappingURL=sensitive-data.d.ts.map

package/dist/platform/sensitive-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-data.d.ts","sourceRoot":"","sources":["../../src/platform/sensitive-data.ts"],"names":[],"mappings":"AAUA,KAAK,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;AA0C/D,wBAAgB,wBAAwB,CACtC,iBAAiB,GAAE,WAAgB,EACnC,OAAO,GAAE,WAAyB,GACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBxB;AAED,wBAAgB,0BAA0B,CACxC,GAAG,YAAY,EAAE,SAAS,WAAW,EAAE,GACtC,SAAS,MAAM,EAAE,CAUnB;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,MAAM,CAMR;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EACpC,KAAK,EAAE,CAAC,EACR,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,CAAC,CAEH;AA4BD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,KAAK,CAEP"}