@agentlensai/server 0.11.0 → 0.13.0

package/dist/lib/redaction/semantic-denylist-layer.js

@@ -1,64 +0,0 @@
-/**
- * Layer 5: Semantic Deny List (Story 2.2)
- */
-export class SemanticDenyListLayer {
-    name = 'semantic_denylist';
-    order = 500;
-    process(input, context) {
-        const findings = [];
-        for (const pattern of context.denyListPatterns) {
-            let matched = false;
-            let matchStart = -1;
-            let matchEnd = -1;
-            let matchedText = '';
-            if (pattern.startsWith('/') && pattern.lastIndexOf('/') > 0) {
-                // Regex pattern: /pattern/flags
-                const lastSlash = pattern.lastIndexOf('/');
-                const regexBody = pattern.slice(1, lastSlash);
-                const flags = pattern.slice(lastSlash + 1);
-                try {
-                    const regex = new RegExp(regexBody, flags.includes('i') ? 'gi' : 'g');
-                    const match = regex.exec(input);
-                    if (match) {
-                        matched = true;
-                        matchStart = match.index;
-                        matchEnd = match.index + match[0].length;
-                        matchedText = match[0];
-                    }
-                }
-                catch {
-                    // Invalid regex — skip
-                }
-            }
-            else {
-                // Plain text match (case-insensitive)
-                const idx = input.toLowerCase().indexOf(pattern.toLowerCase());
-                if (idx !== -1) {
-                    matched = true;
-                    matchStart = idx;
-                    matchEnd = idx + pattern.length;
-                    matchedText = input.slice(idx, idx + pattern.length);
-                }
-            }
-            if (matched) {
-                findings.push({
-                    layer: 'semantic_denylist',
-                    category: 'denied_content',
-                    originalLength: matchedText.length,
-                    replacement: '',
-                    startOffset: matchStart,
-                    endOffset: matchEnd,
-                    confidence: 1.0,
-                });
-                return {
-                    output: input,
-                    findings,
-                    blocked: true,
-                    blockReason: `Content matched deny-list pattern: ${pattern}`,
-                };
-            }
-        }
-        return { output: input, findings, blocked: false };
-    }
-}
-//# sourceMappingURL=semantic-denylist-layer.js.map

package/dist/lib/redaction/semantic-denylist-layer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"semantic-denylist-layer.js","sourceRoot":"","sources":["../../../src/lib/redaction/semantic-denylist-layer.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,MAAM,OAAO,qBAAqB;IACvB,IAAI,GAAG,mBAA4B,CAAC;IACpC,KAAK,GAAG,GAAG,CAAC;IAErB,OAAO,CAAC,KAAa,EAAE,OAAyB;QAC9C,MAAM,QAAQ,GAAuB,EAAE,CAAC;QAExC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC/C,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;YACpB,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;YAClB,IAAI,WAAW,GAAG,EAAE,CAAC;YAErB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,gCAAgC;gBAChC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;gBAC3C,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBACtE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAChC,IAAI,KAAK,EAAE,CAAC;wBACV,OAAO,GAAG,IAAI,CAAC;wBACf,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;wBACzB,QAAQ,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;wBACzC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC/D,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;oBACf,OAAO,GAAG,IAAI,CAAC;oBACf,UAAU,GAAG,GAAG,CAAC;oBACjB,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;oBAChC,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,mBAAmB;oBAC1B,QAAQ,EAAE,gBAAgB;oBAC1B,cAAc,EAAE,WAAW,CAAC,MAAM;oBAClC,WAAW,EAAE,EAAE;oBACf,WAAW,EAAE,UAAU;oBACvB,SAAS,EAAE,QAAQ;oBACnB,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;gBAEH,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,QAAQ;oBACR,OAAO,EAAE,IAAI;oBACb,WAAW,EAAE,sCAAsC,OAAO,EAAE;iBAC7D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;CACF"}

package/dist/lib/redaction/tenant-deidentification-layer.d.ts

@@ -1,10 +0,0 @@
-/**
- * Layer 4: Tenant De-identification (Story 2.2)
- */
-import type { RedactionLayer, RedactionLayerResult, RedactionContext } from '@agentlensai/core';
-export declare class TenantDeidentificationLayer implements RedactionLayer {
-    readonly name: "tenant_deidentification";
-    readonly order = 400;
-    process(input: string, context: RedactionContext): RedactionLayerResult;
-}
-//# sourceMappingURL=tenant-deidentification-layer.d.ts.map

package/dist/lib/redaction/tenant-deidentification-layer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenant-deidentification-layer.d.ts","sourceRoot":"","sources":["../../../src/lib/redaction/tenant-deidentification-layer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAEjB,MAAM,mBAAmB,CAAC;AAK3B,qBAAa,2BAA4B,YAAW,cAAc;IAChE,QAAQ,CAAC,IAAI,EAAG,yBAAyB,CAAU;IACnD,QAAQ,CAAC,KAAK,OAAO;IAErB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,oBAAoB;CA2DxE"}

package/dist/lib/redaction/tenant-deidentification-layer.js

@@ -1,64 +0,0 @@
-/**
- * Layer 4: Tenant De-identification (Story 2.2)
- */
-// UUID v4 pattern
-const UUID_RE = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
-export class TenantDeidentificationLayer {
-    name = 'tenant_deidentification';
-    order = 400;
-    process(input, context) {
-        const findings = [];
-        let output = input;
-        // Build list of terms to strip
-        const terms = [];
-        if (context.tenantId)
-            terms.push(context.tenantId);
-        if (context.agentId)
-            terms.push(context.agentId);
-        terms.push(...context.knownTenantTerms);
-        // Filter empty/very short terms (avoid stripping single chars)
-        const validTerms = terms.filter(t => t.length >= 3);
-        // Sort by length descending to replace longer terms first
-        validTerms.sort((a, b) => b.length - a.length);
-        for (const term of validTerms) {
-            const escaped = term.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-            const regex = new RegExp(escaped, 'gi');
-            let match;
-            while ((match = regex.exec(output)) !== null) {
-                findings.push({
-                    layer: 'tenant_deidentification',
-                    category: 'tenant_term',
-                    originalLength: match[0].length,
-                    replacement: '[TENANT_ENTITY]',
-                    startOffset: match.index,
-                    endOffset: match.index + match[0].length,
-                    confidence: 0.90,
-                });
-            }
-            output = output.replace(regex, '[TENANT_ENTITY]');
-        }
-        // Strip UUIDs (could be tenant/agent/user IDs)
-        const uuidRegex = new RegExp(UUID_RE.source, 'gi');
-        let uuidMatch;
-        const uuidMatches = [];
-        while ((uuidMatch = uuidRegex.exec(output)) !== null) {
-            uuidMatches.push({ start: uuidMatch.index, end: uuidMatch.index + uuidMatch[0].length });
-        }
-        // Replace UUIDs from end
-        for (let i = uuidMatches.length - 1; i >= 0; i--) {
-            const m = uuidMatches[i];
-            findings.push({
-                layer: 'tenant_deidentification',
-                category: 'uuid',
-                originalLength: m.end - m.start,
-                replacement: '[TENANT_ENTITY]',
-                startOffset: m.start,
-                endOffset: m.end,
-                confidence: 0.85,
-            });
-            output = output.slice(0, m.start) + '[TENANT_ENTITY]' + output.slice(m.end);
-        }
-        return { output, findings, blocked: false };
-    }
-}
-//# sourceMappingURL=tenant-deidentification-layer.js.map

package/dist/lib/redaction/tenant-deidentification-layer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenant-deidentification-layer.js","sourceRoot":"","sources":["../../../src/lib/redaction/tenant-deidentification-layer.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,kBAAkB;AAClB,MAAM,OAAO,GAAG,oEAAoE,CAAC;AAErF,MAAM,OAAO,2BAA2B;IAC7B,IAAI,GAAG,yBAAkC,CAAC;IAC1C,KAAK,GAAG,GAAG,CAAC;IAErB,OAAO,CAAC,KAAa,EAAE,OAAyB;QAC9C,MAAM,QAAQ,GAAuB,EAAE,CAAC;QACxC,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,+BAA+B;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAExC,+DAA+D;QAC/D,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAEpD,0DAA0D;QAC1D,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAE/C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC7C,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,yBAAyB;oBAChC,QAAQ,EAAE,aAAa;oBACvB,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;oBAC/B,WAAW,EAAE,iBAAiB;oBAC9B,WAAW,EAAE,KAAK,CAAC,KAAK;oBACxB,SAAS,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;oBACxC,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QACpD,CAAC;QAED,+CAA+C;QAC/C,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,SAAiC,CAAC;QACtC,MAAM,WAAW,GAA0C,EAAE,CAAC;QAC9D,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,yBAAyB;QACzB,KAAK,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,yBAAyB;gBAChC,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK;gBAC/B,WAAW,EAAE,iBAAiB;gBAC9B,WAAW,EAAE,CAAC,CAAC,KAAK;gBACpB,SAAS,EAAE,CAAC,CAAC,GAAG;gBAChB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;CACF"}

package/dist/lib/redaction/url-path-scrubbing-layer.d.ts

@@ -1,14 +0,0 @@
-/**
- * Layer 3: URL/Path Scrubbing (Story 2.1)
- */
-import type { RedactionLayer, RedactionLayerResult, RedactionContext } from '@agentlensai/core';
-/** Default public domain allowlist — URLs to these domains are preserved */
-export declare const DEFAULT_PUBLIC_DOMAINS: Set<string>;
-export declare class UrlPathScrubbingLayer implements RedactionLayer {
-    readonly name: "url_path_scrubbing";
-    readonly order = 300;
-    private readonly allowlist;
-    constructor(publicDomainAllowlist?: string[]);
-    process(input: string, _context: RedactionContext): RedactionLayerResult;
-}
-//# sourceMappingURL=url-path-scrubbing-layer.d.ts.map

package/dist/lib/redaction/url-path-scrubbing-layer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-path-scrubbing-layer.d.ts","sourceRoot":"","sources":["../../../src/lib/redaction/url-path-scrubbing-layer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAEjB,MAAM,mBAAmB,CAAC;AAE3B,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,aAoBjC,CAAC;AAmDH,qBAAa,qBAAsB,YAAW,cAAc;IAC1D,QAAQ,CAAC,IAAI,EAAG,oBAAoB,CAAU;IAC9C,QAAQ,CAAC,KAAK,OAAO;IAErB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;gBAE5B,qBAAqB,CAAC,EAAE,MAAM,EAAE;IAM5C,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,oBAAoB;CAuFzE"}

package/dist/lib/redaction/url-path-scrubbing-layer.js

@@ -1,156 +0,0 @@
-/**
- * Layer 3: URL/Path Scrubbing (Story 2.1)
- */
-/** Default public domain allowlist — URLs to these domains are preserved */
-export const DEFAULT_PUBLIC_DOMAINS = new Set([
-    'github.com', 'gitlab.com', 'bitbucket.org',
-    'stackoverflow.com', 'stackexchange.com',
-    'docs.python.org', 'docs.rs', 'pkg.go.dev',
-    'npmjs.com', 'pypi.org', 'crates.io',
-    'developer.mozilla.org', 'mdn.io',
-    'wikipedia.org', 'en.wikipedia.org',
-    'google.com', 'youtube.com',
-    'medium.com', 'dev.to',
-    'reddit.com', 'news.ycombinator.com',
-    'twitter.com', 'x.com',
-    'microsoft.com', 'docs.microsoft.com', 'learn.microsoft.com',
-    'aws.amazon.com', 'docs.aws.amazon.com',
-    'cloud.google.com',
-    'azure.microsoft.com',
-    'docker.com', 'hub.docker.com',
-    'kubernetes.io',
-    'vercel.com', 'netlify.com', 'heroku.com',
-    'openai.com', 'platform.openai.com',
-    'anthropic.com', 'docs.anthropic.com',
-]);
-const PRIVATE_IP_RE = /\b(?:10\.\d{1,3}\.\d{1,3}\.\d{1,3}|172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3}|127\.\d{1,3}\.\d{1,3}\.\d{1,3})\b/g;
-const UNIX_PATH_RE = /(?:\/(?:home|Users|var|etc|tmp|opt|usr|root|srv|mnt|proc|dev|sys|run))\/?[^\s,;:)"'`\]}>]*/g;
-const WINDOWS_PATH_RE = /[A-Z]:\\[^\s,;:)"'`\]}>]*/g;
-const UNC_PATH_RE = /\\\\[a-zA-Z0-9._-]+\\[^\s,;:)"'`\]}>]*/g;
-const URL_RE = /https?:\/\/[^\s,;)"'`\]}>]+/g;
-const INTERNAL_HOST_PATTERNS = [
-    /\.local\b/i,
-    /\.internal\b/i,
-    /\.corp\b/i,
-    /\.private\b/i,
-    /\.lan\b/i,
-    /\.intranet\b/i,
-    /\.compute\.internal\b/i,
-    /localhost/i,
-];
-function extractHostFromUrl(url) {
-    try {
-        const parsed = new URL(url);
-        return parsed.hostname;
-    }
-    catch {
-        // Try extracting manually
-        const match = url.match(/https?:\/\/([^/:]+)/);
-        return match?.[1] ?? null;
-    }
-}
-function isPrivateIP(host) {
-    return /^(?:10\.\d{1,3}\.\d{1,3}\.\d{1,3}|172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3}|127\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.test(host);
-}
-function isInternalHost(host) {
-    if (isPrivateIP(host))
-        return true;
-    return INTERNAL_HOST_PATTERNS.some(p => p.test(host));
-}
-function isPublicDomain(host, allowlist) {
-    // Check exact match and parent domains
-    const parts = host.split('.');
-    for (let i = 0; i < parts.length - 1; i++) {
-        const domain = parts.slice(i).join('.');
-        if (allowlist.has(domain))
-            return true;
-    }
-    return false;
-}
-export class UrlPathScrubbingLayer {
-    name = 'url_path_scrubbing';
-    order = 300;
-    allowlist;
-    constructor(publicDomainAllowlist) {
-        this.allowlist = publicDomainAllowlist
-            ? new Set([...DEFAULT_PUBLIC_DOMAINS, ...publicDomainAllowlist])
-            : DEFAULT_PUBLIC_DOMAINS;
-    }
-    process(input, _context) {
-        const findings = [];
-        const replacements = [];
-        // Detect URLs
-        const urlRegex = new RegExp(URL_RE.source, 'g');
-        let match;
-        while ((match = urlRegex.exec(input)) !== null) {
-            const url = match[0];
-            const host = extractHostFromUrl(url);
-            if (host && !isPublicDomain(host, this.allowlist)) {
-                if (isInternalHost(host) || !host.includes('.') || host === 'localhost') {
-                    replacements.push({
-                        start: match.index,
-                        end: match.index + url.length,
-                        replacement: '[INTERNAL_URL]',
-                        category: 'internal_url',
-                    });
-                }
-            }
-        }
-        // Detect private IPs (standalone, not in URLs already matched)
-        const ipRegex = new RegExp(PRIVATE_IP_RE.source, 'g');
-        while ((match = ipRegex.exec(input)) !== null) {
-            const alreadyCovered = replacements.some(r => match.index >= r.start && match.index < r.end);
-            if (!alreadyCovered) {
-                replacements.push({
-                    start: match.index,
-                    end: match.index + match[0].length,
-                    replacement: '[PRIVATE_IP]',
-                    category: 'private_ip',
-                });
-            }
-        }
-        // Detect file paths
-        for (const pathRe of [UNIX_PATH_RE, WINDOWS_PATH_RE, UNC_PATH_RE]) {
-            const re = new RegExp(pathRe.source, pathRe.flags);
-            while ((match = re.exec(input)) !== null) {
-                const alreadyCovered = replacements.some(r => match.index >= r.start && match.index < r.end);
-                if (!alreadyCovered) {
-                    replacements.push({
-                        start: match.index,
-                        end: match.index + match[0].length,
-                        replacement: '[FILE_PATH]',
-                        category: 'file_path',
-                    });
-                }
-            }
-        }
-        // Deduplicate overlapping
-        replacements.sort((a, b) => b.start - a.start);
-        const deduped = [];
-        for (const r of replacements) {
-            if (!deduped.some(d => r.start < d.end && r.end > d.start)) {
-                deduped.push(r);
-            }
-        }
-        // Record findings ascending
-        const ascending = [...deduped].sort((a, b) => a.start - b.start);
-        for (const r of ascending) {
-            findings.push({
-                layer: 'url_path_scrubbing',
-                category: r.category,
-                originalLength: r.end - r.start,
-                replacement: r.replacement,
-                startOffset: r.start,
-                endOffset: r.end,
-                confidence: 0.90,
-            });
-        }
-        // Apply replacements descending
-        let output = input;
-        for (const r of deduped) {
-            output = output.slice(0, r.start) + r.replacement + output.slice(r.end);
-        }
-        return { output, findings, blocked: false };
-    }
-}
-//# sourceMappingURL=url-path-scrubbing-layer.js.map

package/dist/lib/redaction/url-path-scrubbing-layer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-path-scrubbing-layer.js","sourceRoot":"","sources":["../../../src/lib/redaction/url-path-scrubbing-layer.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,YAAY,EAAE,YAAY,EAAE,eAAe;IAC3C,mBAAmB,EAAE,mBAAmB;IACxC,iBAAiB,EAAE,SAAS,EAAE,YAAY;IAC1C,WAAW,EAAE,UAAU,EAAE,WAAW;IACpC,uBAAuB,EAAE,QAAQ;IACjC,eAAe,EAAE,kBAAkB;IACnC,YAAY,EAAE,aAAa;IAC3B,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,sBAAsB;IACpC,aAAa,EAAE,OAAO;IACtB,eAAe,EAAE,oBAAoB,EAAE,qBAAqB;IAC5D,gBAAgB,EAAE,qBAAqB;IACvC,kBAAkB;IAClB,qBAAqB;IACrB,YAAY,EAAE,gBAAgB;IAC9B,eAAe;IACf,YAAY,EAAE,aAAa,EAAE,YAAY;IACzC,YAAY,EAAE,qBAAqB;IACnC,eAAe,EAAE,oBAAoB;CACtC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,8IAA8I,CAAC;AAErK,MAAM,YAAY,GAAG,6FAA6F,CAAC;AACnH,MAAM,eAAe,GAAG,4BAA4B,CAAC;AACrD,MAAM,WAAW,GAAG,yCAAyC,CAAC;AAE9D,MAAM,MAAM,GAAG,8BAA8B,CAAC;AAE9C,MAAM,sBAAsB,GAAG;IAC7B,YAAY;IACZ,eAAe;IACf,WAAW;IACX,cAAc;IACd,UAAU;IACV,eAAe;IACf,wBAAwB;IACxB,YAAY;CACb,CAAC;AAEF,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC/C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,2IAA2I,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChK,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,SAAsB;IAC1D,uCAAuC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,qBAAqB;IACvB,IAAI,GAAG,oBAA6B,CAAC;IACrC,KAAK,GAAG,GAAG,CAAC;IAEJ,SAAS,CAAc;IAExC,YAAY,qBAAgC;QAC1C,IAAI,CAAC,SAAS,GAAG,qBAAqB;YACpC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,qBAAqB,CAAC,CAAC;YAChE,CAAC,CAAC,sBAAsB,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,QAA0B;QAC/C,MAAM,QAAQ,GAAuB,EAAE,CAAC;QACxC,MAAM,YAAY,GAAiF,EAAE,CAAC;QAEtG,cAAc;QACd,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;oBACxE,YAAY,CAAC,IAAI,CAAC;wBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM;wBAC7B,WAAW,EAAE,gBAAgB;wBAC7B,QAAQ,EAAE,cAAc;qBACzB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACtD,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,KAAM,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,KAAM,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CACrD,CAAC;YACF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,YAAY,CAAC,IAAI,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;oBAClC,WAAW,EAAE,cAAc;oBAC3B,QAAQ,EAAE,YAAY;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,KAAK,MAAM,MAAM,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,CAAC;YAClE,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACzC,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,KAAM,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,KAAM,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CACrD,CAAC;gBACF,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,YAAY,CAAC,IAAI,CAAC;wBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;wBAClC,WAAW,EAAE,aAAa;wBAC1B,QAAQ,EAAE,WAAW;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACjE,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,oBAAoB;gBAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,cAAc,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK;gBAC/B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,KAAK;gBACpB,SAAS,EAAE,CAAC,CAAC,GAAG;gBAChB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QAED,gCAAgC;QAChC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;CACF"}

package/dist/routes/community.d.ts

@@ -1,24 +0,0 @@
-/**
- * Community Sharing REST API (Stories 4.1–4.3)
- *
- * POST /api/community/share           — share a lesson
- * GET  /api/community/search          — search shared lessons
- * GET  /api/community/config          — get tenant sharing config
- * PUT  /api/community/config          — update tenant sharing config
- * GET  /api/community/config/agents/:agentId — get agent sharing config
- * PUT  /api/community/config/agents/:agentId — update agent sharing config
- * GET  /api/community/deny-list       — list deny-list rules
- * POST /api/community/deny-list       — add deny-list rule
- * DELETE /api/community/deny-list/:id — delete deny-list rule
- */
-import { Hono } from 'hono';
-import type { AuthVariables } from '../middleware/auth.js';
-import type { SqliteDb } from '../db/index.js';
-import { CommunityService, type PoolTransport } from '../services/community-service.js';
-export declare function communityRoutes(db: SqliteDb, transport?: PoolTransport): {
-    app: Hono<{
-        Variables: AuthVariables;
-    }, import("hono/types").BlankSchema, "/">;
-    service: CommunityService;
-};
-//# sourceMappingURL=community.d.ts.map

package/dist/routes/community.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"community.d.ts","sourceRoot":"","sources":["../../src/routes/community.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAA+B,KAAK,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAKrH,wBAAgB,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,aAAa;;mBACnC,aAAa;;;EAqRhD"}

package/dist/routes/community.js

@@ -1,272 +0,0 @@
-/**
- * Community Sharing REST API (Stories 4.1–4.3)
- *
- * POST /api/community/share           — share a lesson
- * GET  /api/community/search          — search shared lessons
- * GET  /api/community/config          — get tenant sharing config
- * PUT  /api/community/config          — update tenant sharing config
- * GET  /api/community/config/agents/:agentId — get agent sharing config
- * PUT  /api/community/config/agents/:agentId — update agent sharing config
- * GET  /api/community/deny-list       — list deny-list rules
- * POST /api/community/deny-list       — add deny-list rule
- * DELETE /api/community/deny-list/:id — delete deny-list rule
- */
-import { Hono } from 'hono';
-import { CommunityService, LocalCommunityPoolTransport } from '../services/community-service.js';
-import { LESSON_SHARING_CATEGORIES } from '@agentlensai/core';
-const VALID_CATEGORIES = new Set(LESSON_SHARING_CATEGORIES);
-export function communityRoutes(db, transport) {
-    const app = new Hono();
-    const poolTransport = transport ?? new LocalCommunityPoolTransport();
-    const service = new CommunityService(db, { transport: poolTransport });
-    function getTenantId(c) {
-        return c.get('apiKey')?.tenantId ?? 'default';
-    }
-    // ─── Share ─────────────────────────────────────────
-    app.post('/share', async (c) => {
-        const tenantId = getTenantId(c);
-        let body;
-        try {
-            body = await c.req.json();
-        }
-        catch {
-            return c.json({ error: 'Invalid JSON body' }, 400);
-        }
-        const lessonId = body.lessonId;
-        if (!lessonId || typeof lessonId !== 'string') {
-            return c.json({ error: 'lessonId is required' }, 400);
-        }
-        const result = await service.share(tenantId, lessonId, 'api');
-        switch (result.status) {
-            case 'shared':
-                return c.json(result, 201);
-            case 'rate_limited':
-                return c.json({ error: 'Rate limit exceeded', status: 'rate_limited' }, 429);
-            case 'disabled':
-                return c.json({ error: result.reason, status: 'disabled' }, 403);
-            case 'blocked':
-                return c.json({ error: result.reason, status: 'blocked' }, 422);
-            case 'pending_review':
-                return c.json(result, 202);
-            case 'error':
-                return c.json({ error: result.error, status: 'error' }, 500);
-        }
-    });
-    // ─── Search ────────────────────────────────────────
-    app.get('/search', async (c) => {
-        const tenantId = getTenantId(c);
-        const query = c.req.query('q') || c.req.query('query');
-        if (!query) {
-            return c.json({ error: 'q (query) parameter is required' }, 400);
-        }
-        const category = c.req.query('category') || undefined;
-        if (category && !VALID_CATEGORIES.has(category)) {
-            return c.json({ error: `Invalid category. Must be one of: ${LESSON_SHARING_CATEGORIES.join(', ')}` }, 400);
-        }
-        const minReputation = c.req.query('minReputation') ? Number(c.req.query('minReputation')) : undefined;
-        const limit = c.req.query('limit') ? Math.min(Number(c.req.query('limit')), 50) : 50;
-        const result = await service.search(tenantId, query, { category, minReputation, limit }, 'api');
-        return c.json(result);
-    });
-    // ─── Tenant Config ────────────────────────────────
-    app.get('/config', async (c) => {
-        const tenantId = getTenantId(c);
-        const config = service.getSharingConfig(tenantId);
-        return c.json(config);
-    });
-    app.put('/config', async (c) => {
-        const tenantId = getTenantId(c);
-        let body;
-        try {
-            body = await c.req.json();
-        }
-        catch {
-            return c.json({ error: 'Invalid JSON body' }, 400);
-        }
-        const updates = {};
-        if (body.enabled !== undefined)
-            updates.enabled = Boolean(body.enabled);
-        if (body.humanReviewEnabled !== undefined)
-            updates.humanReviewEnabled = Boolean(body.humanReviewEnabled);
-        if (body.poolEndpoint !== undefined)
-            updates.poolEndpoint = body.poolEndpoint;
-        if (body.rateLimitPerHour !== undefined) {
-            const val = Number(body.rateLimitPerHour);
-            if (isNaN(val) || val < 1)
-                return c.json({ error: 'rateLimitPerHour must be >= 1' }, 400);
-            updates.rateLimitPerHour = val;
-        }
-        if (body.volumeAlertThreshold !== undefined) {
-            const val = Number(body.volumeAlertThreshold);
-            if (isNaN(val) || val < 1)
-                return c.json({ error: 'volumeAlertThreshold must be >= 1' }, 400);
-            updates.volumeAlertThreshold = val;
-        }
-        if (body.categories !== undefined) {
-            if (!Array.isArray(body.categories))
-                return c.json({ error: 'categories must be an array' }, 400);
-            for (const cat of body.categories) {
-                if (!VALID_CATEGORIES.has(cat)) {
-                    return c.json({ error: `Invalid category: ${cat}` }, 400);
-                }
-            }
-        }
-        const config = service.updateSharingConfig(tenantId, updates);
-        return c.json(config);
-    });
-    // ─── Agent Config (list all) ────────────────────────
-    app.get('/agents', async (c) => {
-        const tenantId = getTenantId(c);
-        const configs = service.getAgentSharingConfigs(tenantId);
-        return c.json({ configs });
-    });
-    // ─── Agent Config ──────────────────────────────────
-    app.get('/config/agents/:agentId', async (c) => {
-        const tenantId = getTenantId(c);
-        const agentId = c.req.param('agentId');
-        const config = service.getAgentSharingConfig(tenantId, agentId);
-        return c.json({ config });
-    });
-    app.put('/config/agents/:agentId', async (c) => {
-        const tenantId = getTenantId(c);
-        const agentId = c.req.param('agentId');
-        let body;
-        try {
-            body = await c.req.json();
-        }
-        catch {
-            return c.json({ error: 'Invalid JSON body' }, 400);
-        }
-        const updates = {};
-        if (body.enabled !== undefined)
-            updates.enabled = Boolean(body.enabled);
-        if (body.categories !== undefined) {
-            if (!Array.isArray(body.categories))
-                return c.json({ error: 'categories must be an array' }, 400);
-            for (const cat of body.categories) {
-                if (!VALID_CATEGORIES.has(cat)) {
-                    return c.json({ error: `Invalid category: ${cat}` }, 400);
-                }
-            }
-            updates.categories = body.categories;
-        }
-        const config = service.updateAgentSharingConfig(tenantId, agentId, updates);
-        return c.json({ config });
-    });
-    // ─── Agent Config (dashboard shorthand) ─────────────
-    app.get('/agents/:agentId', async (c) => {
-        const tenantId = getTenantId(c);
-        const agentId = c.req.param('agentId');
-        const config = service.getAgentSharingConfig(tenantId, agentId);
-        return c.json(config);
-    });
-    app.put('/agents/:agentId', async (c) => {
-        const tenantId = getTenantId(c);
-        const agentId = c.req.param('agentId');
-        let body;
-        try {
-            body = await c.req.json();
-        }
-        catch {
-            return c.json({ error: 'Invalid JSON body' }, 400);
-        }
-        const updates = {};
-        if (body.enabled !== undefined)
-            updates.enabled = Boolean(body.enabled);
-        if (body.categories !== undefined) {
-            if (!Array.isArray(body.categories))
-                return c.json({ error: 'categories must be an array' }, 400);
-            updates.categories = body.categories;
-        }
-        const config = service.updateAgentSharingConfig(tenantId, agentId, updates);
-        return c.json(config);
-    });
-    // ─── Rate ──────────────────────────────────────────
-    app.post('/rate', async (c) => {
-        const tenantId = getTenantId(c);
-        let body;
-        try {
-            body = await c.req.json();
-        }
-        catch {
-            return c.json({ error: 'Invalid JSON body' }, 400);
-        }
-        const lessonId = body.lessonId;
-        const delta = Number(body.delta);
-        if (!lessonId)
-            return c.json({ error: 'lessonId is required' }, 400);
-        if (isNaN(delta) || (delta !== 1 && delta !== -1))
-            return c.json({ error: 'delta must be 1 or -1' }, 400);
-        const result = await service.rate(tenantId, lessonId, delta, 'vote', 'api');
-        if (result.status === 'rated') {
-            return c.json({ status: 'rated', reputationScore: result.reputationScore });
-        }
-        return c.json({ error: result.error }, 500);
-    });
-    // ─── Stats ─────────────────────────────────────────
-    app.get('/stats', async (c) => {
-        const tenantId = getTenantId(c);
-        const stats = service.getStats(tenantId);
-        return c.json(stats);
-    });
-    // (Agent list endpoint already defined above as GET /agents)
-    // ─── Purge ─────────────────────────────────────────
-    app.post('/purge', async (c) => {
-        const tenantId = getTenantId(c);
-        let body;
-        try {
-            body = await c.req.json();
-        }
-        catch {
-            return c.json({ error: 'Invalid JSON body' }, 400);
-        }
-        const confirmation = body.confirmation;
-        if (!confirmation)
-            return c.json({ error: 'confirmation is required' }, 400);
-        const result = await service.purge(tenantId, confirmation, 'api');
-        if (result.status === 'purged') {
-            return c.json({ status: 'purged', deleted: result.deleted });
-        }
-        return c.json({ error: result.error }, 400);
-    });
-    // ─── Deny List ─────────────────────────────────────
-    app.get('/deny-list', async (c) => {
-        const tenantId = getTenantId(c);
-        const rules = service.getDenyList(tenantId);
-        return c.json({ rules });
-    });
-    app.post('/deny-list', async (c) => {
-        const tenantId = getTenantId(c);
-        let body;
-        try {
-            body = await c.req.json();
-        }
-        catch {
-            return c.json({ error: 'Invalid JSON body' }, 400);
-        }
-        const pattern = body.pattern;
-        if (!pattern || typeof pattern !== 'string') {
-            return c.json({ error: 'pattern is required' }, 400);
-        }
-        const reason = body.reason || 'No reason provided';
-        const isRegex = Boolean(body.isRegex);
-        try {
-            const rule = service.addDenyListRule(tenantId, pattern, isRegex, reason);
-            return c.json({ rule }, 201);
-        }
-        catch (err) {
-            return c.json({ error: err instanceof Error ? err.message : String(err) }, 400);
-        }
-    });
-    app.delete('/deny-list/:id', async (c) => {
-        const tenantId = getTenantId(c);
-        const ruleId = c.req.param('id');
-        const ok = service.deleteDenyListRule(tenantId, ruleId);
-        if (!ok) {
-            return c.json({ error: 'Rule not found' }, 404);
-        }
-        return c.json({ deleted: true });
-    });
-    return { app, service };
-}
-//# sourceMappingURL=community.js.map