@aion0/bastion 0.1.11 → 0.1.13

package/dist/dashboard/page.js

@@ -97,11 +97,13 @@ tr:hover td{background:var(--border)}
 .audit-kv .v{color:var(--bright)}
 .timeline-card{margin-bottom:4px;cursor:pointer;transition:border-color .15s;padding:10px 12px}
 .timeline-card:hover{border-color:var(--cyan)}
-.pro-feature-row{cursor:pointer;transition:border-color .15s}
-.pro-feature-row:hover{border-color:var(--cyan)}
-.pro-feature-row.unlocked .toggle-label{color:var(--green)}
 .filter-input{background:var(--bg);border:1px solid var(--border);color:var(--bright);padding:4px 10px;font-family:inherit;font-size:11px;width:280px}
 @keyframes pulse{0%,100%{opacity:1}50%{opacity:.5}}
+.row-tag.elevated{background:#1a1a00;color:var(--yellow)}
+.row-tag.high-threat{background:#1a0a00;color:#ff6600}
+.row-tag.critical-threat{background:#330000;color:var(--red)}
+.ti-reset-btn{padding:2px 8px;font-size:10px;cursor:pointer;font-family:inherit;color:var(--red);background:none;border:1px solid #330000;border-radius:2px}
+.ti-reset-btn:hover{background:#1a0000}
 </style>
 </head>`;
 // ── TITLEBAR ──────────────────────────────────────────────────────
@@ -181,6 +183,20 @@ const PAGE_GUARD = `
     <div class="section-body" id="gd-rules"><div class="empty">No rules</div></div>
   </div>
 </div>
+<div class="section" style="margin-top:8px">
+  <div class="section-head"><span class="section-title">Threat Sessions</span><span style="color:var(--muted);font-size:10px;margin-left:4px">(elevated+)</span></div>
+  <div class="section-body">
+    <table><thead><tr><th>Session</th><th>Score</th><th>Level</th><th>Events</th><th>Last Event</th><th></th></tr></thead><tbody id="ti-sessions-list"></tbody></table>
+    <p class="empty" id="ti-no-sessions">No elevated sessions</p>
+  </div>
+</div>
+<div class="section" style="margin-top:2px">
+  <div class="section-head"><span class="section-title">Chain Detections</span></div>
+  <div class="section-body">
+    <table><thead><tr><th>Time</th><th>Session</th><th>Rule</th><th>Sequence</th><th>Action</th></tr></thead><tbody id="ti-chains-list"></tbody></table>
+    <p class="empty" id="ti-no-chains">No chain detections</p>
+  </div>
+</div>
 </div>`;
 // ── PAGE: LOG ─────────────────────────────────────────────────────
 const PAGE_LOG = `
@@ -254,25 +270,20 @@ const PAGE_SETTINGS = `
 <div class="section"><div class="section-head setting-toggle" data-target="set-plugins"><span class="section-title"><span class="sect-arrow">&#9662;</span> PLUGINS</span></div>
 <div class="section-body" id="set-plugins" style="padding:12px"><div id="plugin-toggles"></div></div></div>
 
-<!-- 2. Pro Features (dev-only) -->
-<div class="section" id="sec-pro" style="display:none"><div class="section-head setting-toggle" data-target="set-pro"><span class="section-title"><span class="sect-arrow">&#9656;</span> PRO FEATURES</span></div>
-<div class="section-body" id="set-pro" style="display:none;padding:12px">
-  <div id="pro-features">
-    <div class="toggle-row pro-feature-row" data-pro-feature="ai-injection"><div><div class="toggle-label">AI Injection Detection</div><div class="toggle-desc">Multi-layer AI-driven prompt injection detection</div></div><span class="row-tag" style="background:#1a1a1a;color:var(--dim)">PRO</span></div>
-    <div class="toggle-row pro-feature-row" data-pro-feature="budget"><div><div class="toggle-label">Budget Control</div><div class="toggle-desc">Per-session/user/project usage and cost budgets</div></div><span class="row-tag" style="background:#1a1a1a;color:var(--dim)">PRO</span></div>
-    <div class="toggle-row pro-feature-row" data-pro-feature="ratelimit"><div><div class="toggle-label">Rate Limiting</div><div class="toggle-desc">Configurable rate limiting by API key, session, or global</div></div><span class="row-tag" style="background:#1a1a1a;color:var(--dim)">PRO</span></div>
+<!-- 2. Optional Features -->
+<div class="section"><div class="section-head setting-toggle" data-target="set-optional"><span class="section-title"><span class="sect-arrow">&#9656;</span> OPTIONAL FEATURES</span></div>
+<div class="section-body" id="set-optional" style="display:none;padding:12px">
+  <div id="optional-features">
+    <div class="toggle-row" data-opt="pi-classifier"><div><div class="toggle-label">AI Injection Detection</div><div class="toggle-desc">ML-based prompt injection detection (ONNX Runtime)</div></div><span class="row-tag" id="opt-tag-pi-classifier" style="background:#1a1a1a;color:var(--dim)">NOT INSTALLED</span></div>
+    <div class="toggle-row" data-opt="content-extractor"><div><div class="toggle-label">Content Extractor</div><div class="toggle-desc">PDF text extraction and image OCR for DLP scanning</div></div><span class="row-tag" id="opt-tag-content-extractor" style="background:#1a1a1a;color:var(--dim)">NOT INSTALLED</span></div>
   </div>
-  <div id="pro-detail" style="display:none;margin-top:12px;padding:16px;background:var(--bg);border:1px solid var(--border);text-align:center">
-    <div id="pro-detail-title" style="color:var(--bright);font-size:13px;font-weight:700;margin-bottom:6px"></div>
-    <div id="pro-detail-desc" style="color:var(--dim);font-size:12px;max-width:480px;margin:0 auto 12px"></div>
-    <div id="pro-detail-unlocked" style="display:none;color:var(--green);font-size:12px">Feature enabled.</div>
-    <div id="pro-detail-locked">
-      <a style="display:inline-block;padding:6px 20px;background:#0a3d0a;color:var(--green);border:1px solid var(--green);font-size:12px;text-decoration:none;font-family:inherit" href="https://bastion.dev/pro" target="_blank">Upgrade to Pro</a>
-      <div class="pro-license-input" id="pro-detail-license" style="display:none;margin-top:12px">
-        <input type="text" class="cfg-input" style="width:240px;display:inline-block" placeholder="License key" id="pro-license-key">
-        <button class="cfg-btn primary" onclick="activateLicense('pro-license-key')">Activate</button>
-      </div>
-    </div>
+  <div id="opt-install-hint" style="margin-top:12px;padding:12px;background:var(--bg);border:1px solid var(--border);font-size:11px;color:var(--dim)">
+    <div style="margin-bottom:4px;color:var(--bright)">Install optional plugins:</div>
+    <code style="color:var(--green);font-size:12px">bastion plugins install</code> or <code style="color:var(--green);font-size:12px">./install.sh -local -plugins</code>
+    <div style="margin-top:4px">Adds ML-based detection, PDF/OCR content extraction, and more.</div>
+  </div>
+  <div id="opt-uninstall-row" style="display:none;margin-top:12px;text-align:right">
+    <button id="opt-uninstall-btn" class="cfg-btn secondary" style="color:var(--red);border-color:#330000">Uninstall Optional Plugins</button>
   </div>
 </div></div>
 
@@ -547,37 +558,53 @@ function actionTag(a){
   if(a==='flag')return '<span class="row-tag warn">flag</span>';
   return '<span class="row-tag">'+esc(a)+'</span>';
 }
+function threatLevelTag(level){
+  if(level==='critical')return '<span class="row-tag critical-threat">critical</span>';
+  if(level==='high')return '<span class="row-tag high-threat">high</span>';
+  if(level==='elevated')return '<span class="row-tag elevated">elevated</span>';
+  return '<span class="row-tag">'+esc(level||'normal')+'</span>';
+}
 
 // ══ 4. PAGE: OVERVIEW ═════════════════════════════════════════════
 async function refreshOverview(){
   try{
     var sp=sinceParam();
     var qp=sp?'?'+sp:'';
-    var [statsR,alertsR,dlpRecentR]=await Promise.all([
+    var [statsR,alertsR,dlpRecentR,piRecentR,threatOvR]=await Promise.all([
       apiFetch('/api/stats'+qp),
       apiFetch('/api/tool-guard/alerts'),
-      apiFetch('/api/dlp/recent?limit=5'+(sp?'&'+sp:''))
+      apiFetch('/api/dlp/recent?limit=5'+(sp?'&'+sp:'')),
+      apiFetch('/api/plugin-events/recent?limit=5&plugin=pi-classifier'+(sp?'&'+sp:'')),
+      apiFetch('/api/threat/sessions').catch(function(){return{json:function(){return[]}}})
     ]);
     var statsData=await statsR.json();
     var alertsData=await alertsR.json();
     var dlpRecent=await dlpRecentR.json();
+    var piRecent=await piRecentR.json();
+    var threatOvData=await threatOvR.json();
+    var threatSessions=Array.isArray(threatOvData)?threatOvData:threatOvData.sessions||[];
+    var threatCount=threatSessions.length;
     var s=statsData.stats;
     var dlp=statsData.dlp||{};
     var ba=dlp.by_action||{};
+    var piStats=statsData.pluginEvents||{};
 
     // Gauges
-    if(!skipIfSame('ov-gauges',{s:s,dlp:dlp})){
+    if(!skipIfSame('ov-gauges',{s:s,dlp:dlp,pi:piStats,tc:threatCount})){
       var dlpTotal=dlp.total_events||0;
+      var piTotal=piStats.total_events||0;
       var latAvg=s.avg_latency_ms||0;
       document.getElementById('ov-gauges').innerHTML=
         gauge('Requests',fmt(s.total_requests),'','')+
         gauge('Cost',cost(s.total_cost_usd),'','green')+
         gauge('Tokens',fmt(s.total_input_tokens+s.total_output_tokens),fmt(s.total_input_tokens)+' in / '+fmt(s.total_output_tokens)+' out','')+
         gauge('DLP Hits',fmt(dlpTotal),(ba.redact||0)+' redact, '+(ba.block||0)+' block',dlpTotal>0?'red':'')+
+        gauge('PI Detections',fmt(piTotal),'ML injection','red')+
+        gauge('Threats',fmt(threatCount),'elevated+ sessions',threatCount>0?'red':'green')+
         gauge('Avg Latency',Math.round(latAvg)+'ms','','cyan');
     }
 
-    // Alerts pane (combine DLP + Guard)
+    // Alerts pane (combine DLP + Guard + PI)
     var combined=[];
     (dlpRecent||[]).forEach(function(d){
       combined.push({type:'dlp',time:d.created_at,text:'<b>'+esc(d.pattern_name)+'</b> \\u2192 '+esc(d.action),tag:'dlp'});
@@ -585,8 +612,11 @@ async function refreshOverview(){
     (alertsData.alerts||[]).filter(function(a){return !a.acknowledged}).slice(0,5).forEach(function(a){
       combined.push({type:'guard',time:a.timestamp,text:'<b>'+esc(a.toolName)+'</b> \\u2192 '+esc(a.ruleName),tag:'guard'});
     });
+    (piRecent||[]).forEach(function(p){
+      combined.push({type:'pi',time:p.created_at,text:'<b>'+esc(p.rule)+'</b> '+esc(p.detail),tag:'block'});
+    });
     combined.sort(function(a,b){return new Date(b.time)-new Date(a.time)});
-    var alertCount=(alertsData.unacknowledged||0)+(dlpRecent||[]).length;
+    var alertCount=(alertsData.unacknowledged||0)+(dlpRecent||[]).length+(piRecent||[]).length;
     document.getElementById('ov-alert-count').textContent=alertCount||'';
     if(!skipIfSame('ov-alerts',combined)){
       document.getElementById('ov-alerts').innerHTML=combined.length?combined.slice(0,8).map(function(c){
@@ -775,12 +805,58 @@ async function refreshGuard(){
           '<span class="row-tag '+(r.enabled?'audit':'')+'">'+((r.enabled?'ON':'OFF'))+'</span></div>';
       }).join(''):'<div class="empty">No rules</div>';
     }
+
+    // Threat Intelligence sections
+    try{
+      var [threatR,chainR]=await Promise.all([
+        apiFetch('/api/threat/sessions'),
+        apiFetch('/api/threat/chain-detections?limit=20')
+      ]);
+      var sessions=await threatR.json();
+      var chains=await chainR.json();
+
+      // Threat sessions table
+      if(!skipIfSame('ti-sessions',sessions)){
+        var tsList=Array.isArray(sessions)?sessions:sessions.sessions||[];
+        document.getElementById('ti-no-sessions').style.display=tsList.length?'none':'';
+        document.getElementById('ti-sessions-list').innerHTML=tsList.map(function(s){
+          return '<tr><td class="mono" style="font-size:11px;color:#555">'+esc((s.session_id||s.sessionId||'').slice(0,12))+'</td>'+
+            '<td style="font-weight:700;color:var(--bright)">'+Math.round(s.score||0)+'</td>'+
+            '<td>'+threatLevelTag(s.level||s.threatLevel)+'</td>'+
+            '<td>'+fmt(s.events||s.eventCount||0)+'</td>'+
+            '<td>'+ago(s.last_event||s.lastEvent||s.updated_at||'')+'</td>'+
+            '<td><button class="ti-reset-btn" data-sid="'+esc(s.session_id||s.sessionId||'')+'">Reset</button></td></tr>';
+        }).join('');
+      }
+
+      // Chain detections table
+      if(!skipIfSame('ti-chains',chains)){
+        var chList=Array.isArray(chains)?chains:chains.detections||[];
+        document.getElementById('ti-no-chains').style.display=chList.length?'none':'';
+        document.getElementById('ti-chains-list').innerHTML=chList.map(function(c){
+          var seq=(c.sequence||c.tools||[]).map(function(t){return esc(t)}).join(' \\u2192 ');
+          var actionCls=(c.action==='block')?'block':'warn';
+          return '<tr><td>'+ago(c.created_at||c.timestamp||'')+'</td>'+
+            '<td class="mono" style="font-size:11px;color:#555">'+esc((c.session_id||c.sessionId||'').slice(0,12))+'</td>'+
+            '<td class="mono">'+esc(c.rule||c.ruleName||'')+'</td>'+
+            '<td style="font-size:11px">'+seq+'</td>'+
+            '<td><span class="row-tag '+actionCls+'">'+esc((c.action||'warn').toUpperCase())+'</span></td></tr>';
+        }).join('');
+      }
+    }catch(te){/* threat API may not be available */}
   }catch(e){console.error('Guard refresh error',e)}
 }
 document.getElementById('gd-ack-btn').addEventListener('click',async function(){
   await apiFetch('/api/tool-guard/alerts/ack',{method:'POST'});
   refreshGuard();pollAlerts();
 });
+document.getElementById('ti-sessions-list').addEventListener('click',async function(e){
+  var btn=e.target.closest('.ti-reset-btn');if(!btn)return;
+  var sid=btn.dataset.sid;if(!sid)return;
+  btn.textContent='...';btn.disabled=true;
+  try{await apiFetch('/api/threat/sessions/'+encodeURIComponent(sid)+'/reset',{method:'POST'});_lastJson={};refreshGuard()}
+  catch(ex){btn.textContent='Reset';btn.disabled=false}
+});
 // Click guard event → go to Log detail
 document.getElementById('gd-events').addEventListener('click',function(e){
   var row=e.target.closest('.row[data-rid]');
@@ -1138,19 +1214,10 @@ document.querySelectorAll('.setting-toggle[data-target]').forEach(function(h){
   });
 });
 
-var _devMode=false;var _proLicense={pro:false};
-var _proFeatures={
-  'ai-injection':{title:'AI Injection Detection',desc:'Multi-layer AI-driven prompt injection detection with semantic analysis.'},
-  'budget':{title:'Budget Control',desc:'Per-session/user/project cost budgets with auto-blocking.'},
-  'ratelimit':{title:'Rate Limiting',desc:'Configurable rate limiting by API key, session, or global scope.'}
-};
-
 async function refreshSettings(){
   try{
-    var [cfgR,licR,devR]=await Promise.all([apiFetch('/api/config'),apiFetch('/api/license'),apiFetch('/api/dev')]);
-    var cfgData=await cfgR.json();_proLicense=await licR.json();var devData=await devR.json();
-    _devMode=!!devData.dev;
-    document.getElementById('sec-pro').style.display=_devMode?'':'none';
+    var cfgR=await apiFetch('/api/config');
+    var cfgData=await cfgR.json();
 
     // 1. Plugins
     var info=cfgData.pluginInfo||[];
@@ -1176,8 +1243,25 @@ async function refreshSettings(){
       });
     });
 
-    // 2. Pro Features
-    updateProFeatures();
+    // 2. Optional Features
+    var extNames=external.map(function(p){return p.name});
+    var optMap={'pi-classifier':'pi-classifier','content-extractor':'content-extractor'};
+    var hasAnyOpt=false;
+    Object.keys(optMap).forEach(function(key){
+      var tag=document.getElementById('opt-tag-'+key);if(!tag)return;
+      var installed=extNames.indexOf(optMap[key])>=0;
+      if(installed){
+        hasAnyOpt=true;
+        var p=external.find(function(x){return x.name===optMap[key]});
+        tag.style.background=p&&p.enabled?'#0a1a0a':'#1a1a00';
+        tag.style.color=p&&p.enabled?'#00ff88':'var(--yellow)';
+        tag.textContent=p&&p.enabled?'ACTIVE':'DISABLED';
+      }else{
+        tag.style.background='#1a1a1a';tag.style.color='var(--dim)';tag.textContent='NOT INSTALLED';
+      }
+    });
+    document.getElementById('opt-install-hint').style.display=hasAnyOpt?'none':'';
+    document.getElementById('opt-uninstall-row').style.display=hasAnyOpt?'':'none';
 
     // 3. DLP Config
     await loadDlpConfig(cfgData);
@@ -1208,37 +1292,16 @@ async function refreshSettings(){
   }catch(e){console.error('Settings refresh error',e)}
 }
 
-// Pro features
-function updateProFeatures(){
-  document.querySelectorAll('.pro-feature-row').forEach(function(row){
-    if(_proLicense.pro){
-      row.classList.add('unlocked');
-      var badge=row.querySelector('.row-tag');
-      if(badge){badge.style.background='#0a1a0a';badge.style.color='#00ff88';badge.textContent='ACTIVE'}
-    }
-  });
-}
-function showProDetail(feature){
-  var info=_proFeatures[feature];if(!info)return;
-  document.getElementById('pro-detail-title').textContent=info.title;
-  document.getElementById('pro-detail-desc').textContent=info.desc;
-  document.getElementById('pro-detail').style.display='block';
-  if(_proLicense.pro){document.getElementById('pro-detail-unlocked').style.display='block';document.getElementById('pro-detail-locked').style.display='none'}
-  else{document.getElementById('pro-detail-unlocked').style.display='none';document.getElementById('pro-detail-locked').style.display='block';
-    document.getElementById('pro-detail-license').style.display=(_devMode||_proLicense.installed)?'block':'none'}
-}
-document.querySelectorAll('.pro-feature-row').forEach(function(row){
-  row.addEventListener('click',function(){showProDetail(row.dataset.proFeature)});
+// Optional plugins uninstall
+document.getElementById('opt-uninstall-btn').addEventListener('click',async function(){
+  if(!confirm('Uninstall optional plugins (bastion-pro)?'))return;
+  var removeModels=confirm('Also remove downloaded models? This frees disk space but models will need to be re-downloaded on next install.');
+  try{
+    var r=await apiFetch('/api/plugins/uninstall',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({name:'bastion-pro',removeModels:removeModels})});
+    var d=await r.json();
+    if(d.ok){refreshSettings()}else{alert(d.error||'Uninstall failed')}
+  }catch(e){alert('Uninstall failed: '+e.message)}
 });
-async function activateLicense(inputId){
-  var key=document.getElementById(inputId).value.trim();if(!key)return;
-  if(_devMode){
-    try{var r=await apiFetch('/api/dev/activate',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({token:key})});
-      var d=await r.json();if(d.ok){refreshSettings();return}alert(d.error||'Invalid token');
-    }catch(e){alert('Activation failed')}
-  }else{alert('License activation requires the Bastion Pro plugin.')}
-}
-window.activateLicense=activateLicense;
 
 // DLP Config
 var dlpServerState=null;var dlpBuiltinsLoaded=false;var dlpCleanSnapshot='';

package/dist/dashboard/page.js.map

@@ -1 +1 @@
-{"version":3,"file":"page.js","sourceRoot":"","sources":["../../src/dashboard/page.ts"],"names":[],"mappings":";;AAslDA,wCAOC;AA3lDD,qEAAqE;AACrE,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAqGL,CAAC;AAET,qEAAqE;AACrE,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;OAcV,CAAC;AAER,qEAAqE;AACrE,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;OAoBf,CAAC;AAER,qEAAqE;AACrE,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;OAgBV,CAAC;AAER,qEAAqE;AACrE,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;OAoBZ,CAAC;AAER,qEAAqE;AACrE,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8DV,CAAC;AAER,qEAAqE;AACrE,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0Mf,CAAC;AAER,qEAAqE;AACrE,MAAM,MAAM,GAAG,iFAAiF,CAAC;AAEjG,qEAAqE;AACrE,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkoCL,CAAC;AAEX,MAAM,IAAI,GAAG,IAAI,GAAG,+BAA+B;IACjD,QAAQ,GAAG,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,aAAa,GAAG,MAAM;IACpF,QAAQ,GAAG,MAAM,GAAG,gBAAgB,CAAC;AAEvC,SAAgB,cAAc,CAAC,GAAmB;IAChD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,0BAA0B;QAC1C,eAAe,EAAE,qCAAqC;QACtD,QAAQ,EAAE,UAAU;KACrB,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}
+{"version":3,"file":"page.js","sourceRoot":"","sources":["../../src/dashboard/page.ts"],"names":[],"mappings":";;AAqpDA,wCAOC;AA1pDD,qEAAqE;AACrE,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAuGL,CAAC;AAET,qEAAqE;AACrE,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;OAcV,CAAC;AAER,qEAAqE;AACrE,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;OAoBf,CAAC;AAER,qEAAqE;AACrE,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;OAgBV,CAAC;AAER,qEAAqE;AACrE,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCZ,CAAC;AAER,qEAAqE;AACrE,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8DV,CAAC;AAER,qEAAqE;AACrE,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqMf,CAAC;AAER,qEAAqE;AACrE,MAAM,MAAM,GAAG,iFAAiF,CAAC;AAEjG,qEAAqE;AACrE,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAsrCL,CAAC;AAEX,MAAM,IAAI,GAAG,IAAI,GAAG,+BAA+B;IACjD,QAAQ,GAAG,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,aAAa,GAAG,MAAM;IACpF,QAAQ,GAAG,MAAM,GAAG,gBAAgB,CAAC;AAEvC,SAAgB,cAAc,CAAC,GAAmB;IAChD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,0BAA0B;QAC1C,eAAe,EAAE,qCAAqC;QACtD,QAAQ,EAAE,UAAU;KACrB,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/dlp/ai-validator.d.ts

@@ -1,17 +1,19 @@
 import type { DlpFinding } from './actions.js';
 export interface AiValidatorConfig {
     enabled: boolean;
-    provider: 'anthropic' | 'openai';
+    provider: 'anthropic' | 'openai' | 'local';
     model: string;
     apiKey: string;
     timeoutMs: number;
     cacheSize: number;
+    /** Lazy getter for local ClassifierProvider (set by bootstrap when pi-classifier is available) */
+    getLocalProvider?: () => import('../plugin-api/types.js').ClassifierProvider | undefined;
 }
 export declare class AiValidator {
     private config;
     private cache;
     constructor(config: AiValidatorConfig);
-    /** Returns true if the validator is ready (enabled + apiKey configured) */
+    /** Returns true if the validator is ready (enabled + provider configured) */
     get ready(): boolean;
     /** Update config at runtime (e.g. toggle enabled) */
     updateConfig(config: Partial<AiValidatorConfig>): void;
@@ -21,6 +23,7 @@ export declare class AiValidator {
      */
     validate(findings: DlpFinding[], text: string): Promise<DlpFinding[]>;
     private callLLM;
+    private callLocal;
     private callAnthropic;
     private callOpenAI;
     private httpPost;

package/dist/dlp/ai-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai-validator.d.ts","sourceRoot":"","sources":["../../src/dlp/ai-validator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAM/C,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,WAAW,GAAG,QAAQ,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AA2CD,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,KAAK,CAAW;gBAEZ,MAAM,EAAE,iBAAiB;IAKrC,2EAA2E;IAC3E,IAAI,KAAK,IAAI,OAAO,CAEnB;IAED,qDAAqD;IACrD,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAItD;;;OAGG;IACG,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YAgD7D,OAAO;IAarB,OAAO,CAAC,aAAa;IAuBrB,OAAO,CAAC,UAAU;IAyBlB,OAAO,CAAC,QAAQ;CAgCjB"}
+{"version":3,"file":"ai-validator.d.ts","sourceRoot":"","sources":["../../src/dlp/ai-validator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAO/C,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,MAAM,OAAO,wBAAwB,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC1F;AA2CD,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,KAAK,CAAW;gBAEZ,MAAM,EAAE,iBAAiB;IAKrC,6EAA6E;IAC7E,IAAI,KAAK,IAAI,OAAO,CAMnB;IAED,qDAAqD;IACrD,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAItD;;;OAGG;IACG,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YAgD7D,OAAO;YAiBP,SAAS;IAUvB,OAAO,CAAC,aAAa;IAuBrB,OAAO,CAAC,UAAU;IAyBlB,OAAO,CAAC,QAAQ;CAgCjB"}

package/dist/dlp/ai-validator.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AiValidator = void 0;
 const node_https_1 = __importDefault(require("node:https"));
 const logger_js_1 = require("../utils/logger.js");
+const heuristic_validator_js_1 = require("./heuristic-validator.js");
 const log = (0, logger_js_1.createLogger)('ai-validator');
 const SNIPPET_RADIUS = 200;
 // ── Simple LRU cache ──
@@ -44,9 +45,14 @@ class AiValidator {
         this.config = config;
         this.cache = new LRUCache(config.cacheSize);
     }
-    /** Returns true if the validator is ready (enabled + apiKey configured) */
+    /** Returns true if the validator is ready (enabled + provider configured) */
     get ready() {
-        return this.config.enabled && this.config.apiKey.length > 0;
+        if (!this.config.enabled)
+            return false;
+        if (this.config.provider === 'local') {
+            return true; // heuristic validator is always available
+        }
+        return this.config.apiKey.length > 0;
     }
     /** Update config at runtime (e.g. toggle enabled) */
     updateConfig(config) {
@@ -101,12 +107,24 @@ class AiValidator {
         return confirmed;
     }
     async callLLM(finding, matchText, context) {
+        if (this.config.provider === 'local') {
+            return this.callLocal(finding, matchText, context);
+        }
         const prompt = buildPrompt(finding, matchText, context);
         if (this.config.provider === 'anthropic') {
             return this.callAnthropic(prompt);
         }
         return this.callOpenAI(prompt);
     }
+    async callLocal(finding, matchText, context) {
+        const verdict = (0, heuristic_validator_js_1.heuristicValidate)({
+            matchText,
+            surrounding: context,
+            patternName: finding.patternName,
+            patternCategory: finding.patternCategory,
+        });
+        return { verdict: verdict.verdict, reason: verdict.reason };
+    }
     callAnthropic(prompt) {
         const body = JSON.stringify({
             model: this.config.model,

package/dist/dlp/ai-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"ai-validator.js","sourceRoot":"","sources":["../../src/dlp/ai-validator.ts"],"names":[],"mappings":";;;;;;AAAA,4DAA+B;AAC/B,kDAAkD;AAGlD,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,cAAc,CAAC,CAAC;AAEzC,MAAM,cAAc,GAAG,GAAG,CAAC;AAgB3B,yBAAyB;AAEzB,MAAM,QAAQ;IACJ,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,OAAO,CAAS;IAExB,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,GAAG,CAAC,GAAW;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,mCAAmC;YACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAiB;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AAED,qBAAqB;AAErB,MAAa,WAAW;IACd,MAAM,CAAoB;IAC1B,KAAK,CAAW;IAExB,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,2EAA2E;IAC3E,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED,qDAAqD;IACrD,YAAY,CAAC,MAAkC;QAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAsB,EAAE,IAAY;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QAE1D,MAAM,SAAS,GAAiB,EAAE,CAAC;QAEnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,UAAU,EAAE,CAAC;YAExD,oBAAoB;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;oBACnC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjG,CAAC;gBACD,SAAS;YACX,CAAC;YAED,8BAA8B;YAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YAEjE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;gBAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAEjC,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;oBACnC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE;wBAChD,OAAO,EAAE,OAAO,CAAC,WAAW;wBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sDAAsD;gBACtD,GAAG,CAAC,IAAI,CAAC,6CAA6C,EAAE;oBACtD,OAAO,EAAE,OAAO,CAAC,WAAW;oBAC5B,KAAK,EAAG,GAAa,CAAC,OAAO;iBAC9B,CAAC,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,OAAmB,EACnB,SAAiB,EACjB,OAAe;QAEf,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAExD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC9C,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,QAAQ,CAClB,mBAAmB,EACnB,cAAc,EACd;YACE,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC/B,mBAAmB,EAAE,YAAY;SAClC,EACD,IAAI,CACL,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YAC1C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,MAAc;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kFAAkF,EAAE;gBAC/G,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;aAClC;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,QAAQ,CAClB,gBAAgB,EAChB,sBAAsB,EACtB;YACE,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;SAChD,EACD,IAAI,CACL,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;YACtD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CACd,QAAgB,EAChB,IAAY,EACZ,OAA+B,EAC/B,IAAY;QAEZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,oBAAK,CAAC,OAAO,CACvB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EACjH,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;oBACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACvD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;wBAClC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClB,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YAEF,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE;gBACzC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AApKD,kCAoKC;AAED,gBAAgB;AAEhB,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,OAAmB,EAAE,SAAiB,EAAE,OAAe;IAC1E,qEAAqE;IACrE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;;WAEE,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,eAAe;mCACvB,MAAM;;;EAGvC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;;;;qFAI8D,CAAC;AACtF,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,wCAAwC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC;YACrF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,4CAA4C;IAC5C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"ai-validator.js","sourceRoot":"","sources":["../../src/dlp/ai-validator.ts"],"names":[],"mappings":";;;;;;AAAA,4DAA+B;AAC/B,kDAAkD;AAElD,qEAA6D;AAE7D,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,cAAc,CAAC,CAAC;AAEzC,MAAM,cAAc,GAAG,GAAG,CAAC;AAkB3B,yBAAyB;AAEzB,MAAM,QAAQ;IACJ,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,OAAO,CAAS;IAExB,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,GAAG,CAAC,GAAW;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,mCAAmC;YACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAiB;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AAED,qBAAqB;AAErB,MAAa,WAAW;IACd,MAAM,CAAoB;IAC1B,KAAK,CAAW;IAExB,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK;QACP,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,CAAC,0CAA0C;QACzD,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,qDAAqD;IACrD,YAAY,CAAC,MAAkC;QAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAsB,EAAE,IAAY;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QAE1D,MAAM,SAAS,GAAiB,EAAE,CAAC;QAEnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,UAAU,EAAE,CAAC;YAExD,oBAAoB;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;oBACnC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjG,CAAC;gBACD,SAAS;YACX,CAAC;YAED,8BAA8B;YAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YAEjE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;gBAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAEjC,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;oBACnC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE;wBAChD,OAAO,EAAE,OAAO,CAAC,WAAW;wBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sDAAsD;gBACtD,GAAG,CAAC,IAAI,CAAC,6CAA6C,EAAE;oBACtD,OAAO,EAAE,OAAO,CAAC,WAAW;oBAC5B,KAAK,EAAG,GAAa,CAAC,OAAO;iBAC9B,CAAC,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,OAAmB,EACnB,SAAiB,EACjB,OAAe;QAEf,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAExD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAmB,EAAE,SAAiB,EAAE,OAAe;QAC7E,MAAM,OAAO,GAAG,IAAA,0CAAiB,EAAC;YAChC,SAAS;YACT,WAAW,EAAE,OAAO;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC9D,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC9C,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,QAAQ,CAClB,mBAAmB,EACnB,cAAc,EACd;YACE,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC/B,mBAAmB,EAAE,YAAY;SAClC,EACD,IAAI,CACL,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YAC1C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,MAAc;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kFAAkF,EAAE;gBAC/G,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;aAClC;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,QAAQ,CAClB,gBAAgB,EAChB,sBAAsB,EACtB;YACE,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;SAChD,EACD,IAAI,CACL,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;YACtD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CACd,QAAgB,EAChB,IAAY,EACZ,OAA+B,EAC/B,IAAY;QAEZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,oBAAK,CAAC,OAAO,CACvB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EACjH,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;oBACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACvD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;wBAClC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClB,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YAEF,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE;gBACzC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAtLD,kCAsLC;AAED,gBAAgB;AAEhB,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,OAAmB,EAAE,SAAiB,EAAE,OAAe;IAC1E,qEAAqE;IACrE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;;WAEE,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,eAAe;mCACvB,MAAM;;;EAGvC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;;;;qFAI8D,CAAC;AACtF,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,wCAAwC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC;YACrF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,4CAA4C;IAC5C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC9D,CAAC"}

package/dist/dlp/heuristic-validator.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Heuristic DLP Validator
+ *
+ * Local false-positive filter for DLP regex matches.
+ * Detects placeholder values, test keys, low-entropy strings, and documentation patterns.
+ * Zero external dependencies — replaces the incorrect PI-classifier-based local validation.
+ */
+export interface HeuristicContext {
+    /** The text matched by the DLP regex */
+    matchText: string;
+    /** Surrounding context around the match */
+    surrounding: string;
+    /** DLP pattern name (e.g. 'aws-access-key') */
+    patternName: string;
+    /** DLP pattern category (e.g. 'high-confidence') */
+    patternCategory: string;
+}
+export interface HeuristicVerdict {
+    verdict: 'sensitive' | 'false_positive';
+    reason: string;
+    confidence: number;
+}
+export declare function heuristicValidate(ctx: HeuristicContext): HeuristicVerdict;
+//# sourceMappingURL=heuristic-validator.d.ts.map

package/dist/dlp/heuristic-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heuristic-validator.d.ts","sourceRoot":"","sources":["../../src/dlp/heuristic-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,WAAW,gBAAgB;IAC/B,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,WAAW,GAAG,gBAAgB,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AA2BD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAyDzE"}

package/dist/dlp/heuristic-validator.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * Heuristic DLP Validator
+ *
+ * Local false-positive filter for DLP regex matches.
+ * Detects placeholder values, test keys, low-entropy strings, and documentation patterns.
+ * Zero external dependencies — replaces the incorrect PI-classifier-based local validation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.heuristicValidate = heuristicValidate;
+const entropy_js_1 = require("./entropy.js");
+// ── Known test values (per provider) ──
+const KNOWN_TEST_VALUES = new Set([
+    'AKIAIOSFODNN7EXAMPLE',
+    'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY',
+]);
+const KNOWN_TEST_PREFIXES = [
+    'sk_test_',
+    'pk_test_',
+    'rk_test_',
+];
+// ── Placeholder patterns ──
+const PLACEHOLDER_KEYWORDS_RE = /\b(example|test|sample|demo|dummy|placeholder|mock|fake|todo|fixme)\b/i;
+const PLACEHOLDER_TEMPLATE_RE = /YOUR_|your_|<YOUR|<your|\[YOUR|\[your|xxx{3,}|XXX{3,}|changeme|change_me|CHANGE_ME|insert.?here|replace.?this/i;
+// ── Documentation markers ──
+const DOC_MARKER_RE = /\b(e\.g\.|for example|such as|like this|format is|looks like|example:|sample:|returns?:)/i;
+// ── Core heuristic function ──
+function heuristicValidate(ctx) {
+    const { matchText, surrounding } = ctx;
+    // Rule 1: Known test values (exact match)
+    if (KNOWN_TEST_VALUES.has(matchText)) {
+        return fp('Known test/example value', 0.99);
+    }
+    // Rule 2: Known test prefixes
+    for (const prefix of KNOWN_TEST_PREFIXES) {
+        if (matchText.startsWith(prefix)) {
+            return fp(`Known test prefix: ${prefix}*`, 0.95);
+        }
+    }
+    // Rule 3: Placeholder template in match text
+    if (PLACEHOLDER_TEMPLATE_RE.test(matchText)) {
+        return fp('Placeholder template in match value', 0.95);
+    }
+    // Rule 4: Repeated characters (>80% same char)
+    if (matchText.length >= 8 && isRepeatedChars(matchText, 0.8)) {
+        return fp('Repeated characters', 0.9);
+    }
+    // Rule 5: Sequential characters (abcdef..., 123456...)
+    if (matchText.length >= 8 && isSequentialChars(matchText)) {
+        return fp('Sequential characters', 0.9);
+    }
+    // Rule 6: Placeholder keywords in surrounding context
+    if (PLACEHOLDER_KEYWORDS_RE.test(surrounding)) {
+        return fp('Placeholder keyword in context', 0.8);
+    }
+    // Rule 7: Documentation markers in surrounding context
+    if (DOC_MARKER_RE.test(surrounding)) {
+        return fp('Documentation marker in context', 0.75);
+    }
+    // Rule 8: Entropy-based checks (only for values long enough)
+    if (matchText.length >= 8) {
+        const entropy = (0, entropy_js_1.shannonEntropy)(matchText);
+        // Low entropy → likely not a real secret
+        if (entropy < 2.0) {
+            return fp(`Low entropy (${entropy.toFixed(2)})`, 0.85);
+        }
+        // High entropy + no false-positive indicators → likely real
+        if (entropy > 4.0) {
+            return { verdict: 'sensitive', reason: `High entropy (${entropy.toFixed(2)}), no false-positive indicators`, confidence: 0.8 };
+        }
+    }
+    // Default: treat as sensitive (fail-closed)
+    return { verdict: 'sensitive', reason: 'No false-positive indicators detected', confidence: 0.6 };
+}
+// ── Helpers ──
+function fp(reason, confidence) {
+    return { verdict: 'false_positive', reason, confidence };
+}
+function isRepeatedChars(s, threshold) {
+    const freq = new Map();
+    for (const ch of s) {
+        freq.set(ch, (freq.get(ch) ?? 0) + 1);
+    }
+    const maxFreq = Math.max(...freq.values());
+    return maxFreq / s.length > threshold;
+}
+function isSequentialChars(s) {
+    // Check if >=60% of adjacent chars are sequential (code point diff = +-1)
+    let sequential = 0;
+    for (let i = 1; i < s.length; i++) {
+        const diff = s.charCodeAt(i) - s.charCodeAt(i - 1);
+        if (diff === 1 || diff === -1)
+            sequential++;
+    }
+    return sequential / (s.length - 1) >= 0.6;
+}
+//# sourceMappingURL=heuristic-validator.js.map

package/dist/dlp/heuristic-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heuristic-validator.js","sourceRoot":"","sources":["../../src/dlp/heuristic-validator.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AA8CH,8CAyDC;AArGD,6CAA8C;AAmB9C,yCAAyC;AAEzC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,sBAAsB;IACtB,0CAA0C;CAC3C,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG;IAC1B,UAAU;IACV,UAAU;IACV,UAAU;CACX,CAAC;AAEF,6BAA6B;AAE7B,MAAM,uBAAuB,GAAG,wEAAwE,CAAC;AAEzG,MAAM,uBAAuB,GAAG,gHAAgH,CAAC;AAEjJ,8BAA8B;AAE9B,MAAM,aAAa,GAAG,2FAA2F,CAAC;AAElH,gCAAgC;AAEhC,SAAgB,iBAAiB,CAAC,GAAqB;IACrD,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;IAEvC,0CAA0C;IAC1C,IAAI,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,8BAA8B;IAC9B,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzC,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC,sBAAsB,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,CAAC,qCAAqC,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,+CAA+C;IAC/C,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,uDAAuD;IACvD,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,sDAAsD;IACtD,IAAI,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,uDAAuD;IACvD,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,6DAA6D;IAC7D,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAA,2BAAc,EAAC,SAAS,CAAC,CAAC;QAE1C,yCAAyC;QACzC,IAAI,OAAO,GAAG,GAAG,EAAE,CAAC;YAClB,OAAO,EAAE,CAAC,gBAAgB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,4DAA4D;QAC5D,IAAI,OAAO,GAAG,GAAG,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QACjI,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,uCAAuC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACpG,CAAC;AAED,gBAAgB;AAEhB,SAAS,EAAE,CAAC,MAAc,EAAE,UAAkB;IAC5C,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,CAAS,EAAE,SAAiB;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,OAAO,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC;AACxC,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,0EAA0E;IAC1E,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;YAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;AAC5C,CAAC"}

package/dist/plugin-api/index.d.ts

@@ -1,3 +1,3 @@
-export type { BastionPlugin, PluginContext, ProxyRequest, ProxyResponse, PluginResult, PluginEvent, PluginManifest, Logger, DatabaseAccess, } from './types.js';
+export type { BastionPlugin, PluginContext, ProxyRequest, ProxyResponse, PluginResult, PluginEvent, PluginManifest, Logger, DatabaseAccess, ClassificationResult, ClassifierProvider, } from './types.js';
 export { PLUGIN_API_VERSION } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/plugin-api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugin-api/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,aAAa,EACb,aAAa,EACb,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,WAAW,EACX,cAAc,EACd,MAAM,EACN,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugin-api/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,aAAa,EACb,aAAa,EACb,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,WAAW,EACX,cAAc,EACd,MAAM,EACN,cAAc,EACd,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC"}

package/dist/plugin-api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/plugin-api/index.ts"],"names":[],"mappings":";;;AAWA,uCAAgD;AAAvC,8GAAA,kBAAkB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/plugin-api/index.ts"],"names":[],"mappings":";;;AAaA,uCAAgD;AAAvC,8GAAA,kBAAkB,OAAA"}