@cendor/acttrace 0.2.0

package/dist/detectors.js

@@ -0,0 +1,378 @@
+/**
+ * Offline, deterministic sensitive-data detectors for `@cendor/acttrace` — the TS port of
+ * `cendor.acttrace.detectors`.
+ *
+ * A {@link Detector} is a labelled regex plus an optional checksum/format **validator** that gates
+ * loose matches (Luhn for cards, mod-97 for IBANs, Verhoeff for Aadhaar, ABA for US routing numbers,
+ * range checks for SSNs). {@link DETECTORS} is the single source of truth for both scanning and
+ * redaction, so the built-in `default_redactor` is rebuilt from it and the original six categories
+ * still scrub byte-for-byte.
+ *
+ * Everything here is **local-first**: regex + arithmetic, no network, no model, no account. The
+ * registry is ordered original-six-first (`email` → `bearer_token`) so redaction application order —
+ * and therefore output — is unchanged for pre-existing payloads.
+ *
+ * Regex porting notes (vs Python `re`): the `u` flag is intentionally OFF so `\d`/`\w`/`\b` keep
+ * ASCII semantics; `i` mirrors `re.IGNORECASE`; `g` is used for finditer/scan and replace.
+ */
+/** What a scrubbed span is replaced with. Kept identical to the original redactor's token. */
+export const REDACTED = '<redacted>';
+// --------------------------------------------------------------------------- validators
+function digits(s) {
+    const out = [];
+    for (const c of s) {
+        if (c >= '0' && c <= '9')
+            out.push(c.charCodeAt(0) - 48);
+    }
+    return out;
+}
+/** Luhn (mod-10) check for a 13–19 digit payment card number. */
+export function luhn(number) {
+    const d = digits(number);
+    if (!(d.length >= 13 && d.length <= 19))
+        return false;
+    let total = 0;
+    const rev = [...d].reverse();
+    for (let i = 0; i < rev.length; i++) {
+        let digit = rev[i];
+        if (i % 2 === 1) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        total += digit;
+    }
+    return total % 10 === 0;
+}
+/** ISO 13616 IBAN check (mod-97 == 1) after the country/check-digit rearrangement. */
+export function ibanMod97(iban) {
+    const s = iban.replace(/\s+/g, '').toUpperCase();
+    if (!/^[A-Z]{2}\d{2}[A-Z0-9]{11,30}$/.test(s))
+        return false;
+    const rearranged = s.slice(4) + s.slice(0, 4);
+    let numeric = '';
+    for (const c of rearranged) {
+        // int(c, 36): '0'-'9' -> 0-9, 'A'-'Z' -> 10-35.
+        numeric += c >= '0' && c <= '9' ? c : String(c.charCodeAt(0) - 55);
+    }
+    return BigInt(numeric) % 97n === 1n;
+}
+// Verhoeff dihedral-group tables (used by the Aadhaar locale pack).
+const VERHOEFF_D = [
+    [0, 1, 2, 3, 4, 5, 6, 7, 8, 9],
+    [1, 2, 3, 4, 0, 6, 7, 8, 9, 5],
+    [2, 3, 4, 0, 1, 7, 8, 9, 5, 6],
+    [3, 4, 0, 1, 2, 8, 9, 5, 6, 7],
+    [4, 0, 1, 2, 3, 9, 5, 6, 7, 8],
+    [5, 9, 8, 7, 6, 0, 4, 3, 2, 1],
+    [6, 5, 9, 8, 7, 1, 0, 4, 3, 2],
+    [7, 6, 5, 9, 8, 2, 1, 0, 4, 3],
+    [8, 7, 6, 5, 9, 3, 2, 1, 0, 4],
+    [9, 8, 7, 6, 5, 4, 3, 2, 1, 0],
+];
+const VERHOEFF_P = [
+    [0, 1, 2, 3, 4, 5, 6, 7, 8, 9],
+    [1, 5, 7, 6, 2, 8, 3, 0, 9, 4],
+    [5, 8, 0, 3, 7, 9, 6, 1, 4, 2],
+    [8, 9, 1, 6, 0, 4, 3, 5, 2, 7],
+    [9, 4, 5, 3, 1, 2, 6, 8, 7, 0],
+    [4, 2, 8, 6, 5, 7, 3, 9, 0, 1],
+    [2, 7, 9, 3, 8, 0, 6, 4, 1, 5],
+    [7, 0, 4, 6, 9, 1, 3, 2, 5, 8],
+];
+/** Verhoeff checksum (used for India's Aadhaar); true when the trailing digit checks out. */
+export function verhoeff(number) {
+    const d = digits(number);
+    let c = 0;
+    const rev = [...d].reverse();
+    for (let i = 0; i < rev.length; i++) {
+        c = VERHOEFF_D[c][VERHOEFF_P[i % 8][rev[i]]];
+    }
+    return c === 0;
+}
+/** ABA routing-transit checksum for a 9-digit US routing number. */
+export function abaValid(number) {
+    const d = digits(number);
+    if (d.length !== 9)
+        return false;
+    const checksum = 3 * (d[0] + d[3] + d[6]) + 7 * (d[1] + d[4] + d[7]) + (d[2] + d[5] + d[8]);
+    return checksum % 10 === 0;
+}
+/** Reject structurally-invalid US SSNs (area 000/666/900-999, group 00, serial 0000). */
+export function ssnValid(ssn) {
+    const d = digits(ssn);
+    if (d.length !== 9)
+        return false;
+    const area = d[0] * 100 + d[1] * 10 + d[2];
+    const group = d[3] * 10 + d[4];
+    const serial = d[5] * 1000 + d[6] * 100 + d[7] * 10 + d[8];
+    if (area === 0 || area === 666 || area >= 900)
+        return false;
+    return group !== 0 && serial !== 0;
+}
+/** A candidate phone number is plausible when it carries 9–15 significant digits. */
+export function phoneValid(s) {
+    const n = s.replace(/\D/g, '').length;
+    return n >= 9 && n <= 15;
+}
+// ISO 3166-1 alpha-2 codes, used to gate SWIFT/BIC (chars 5–6 are the country) so an arbitrary
+// 8-letter uppercase token isn't mistaken for a bank code.
+const ISO_ALPHA2 = new Set(('AD AE AF AG AI AL AM AO AQ AR AS AT AU AW AX AZ BA BB BD BE BF BG BH BI BJ BL BM BN BO BQ ' +
+    'BR BS BT BV BW BY BZ CA CC CD CF CG CH CI CK CL CM CN CO CR CU CV CW CX CY CZ DE DJ DK DM ' +
+    'DO DZ EC EE EG EH ER ES ET FI FJ FK FM FO FR GA GB GD GE GF GG GH GI GL GM GN GP GQ GR GS ' +
+    'GT GU GW GY HK HM HN HR HT HU ID IE IL IM IN IO IQ IR IS IT JE JM JO JP KE KG KH KI KM KN ' +
+    'KP KR KW KY KZ LA LB LC LI LK LR LS LT LU LV LY MA MC MD ME MF MG MH MK ML MM MN MO MP MQ ' +
+    'MR MS MT MU MV MW MX MY MZ NA NC NE NF NG NI NL NO NP NR NU NZ OM PA PE PF PG PH PK PL PM ' +
+    'PN PR PS PT PW PY QA RE RO RS RU RW SA SB SC SD SE SG SH SI SJ SK SL SM SN SO SR SS ST SV ' +
+    'SX SY SZ TC TD TF TG TH TJ TK TL TM TN TO TR TT TV TW TZ UA UG UM US UY UZ VA VC VE VG VI ' +
+    'VN VU WF WS YE YT ZA ZM ZW').split(' '));
+/** Structural SWIFT/BIC check: 8 or 11 chars with a valid ISO-3166 country code at 5–6. */
+export function bicValid(s) {
+    return (s.length === 8 || s.length === 11) && ISO_ALPHA2.has(s.slice(4, 6));
+}
+// --------------------------------------------------------------------------- registry
+/** Compile a pattern (always global; add `i` for IGNORECASE). No `u` flag — ASCII class semantics. */
+function c(pattern, ignoreCase = false) {
+    return new RegExp(pattern, ignoreCase ? 'gi' : 'g');
+}
+/**
+ * The built-in detectors. Ordered original-six-first so redaction output is byte-identical for
+ * pre-existing payloads. `registerDetector` appends to this list (custom detectors run last).
+ */
+export const DETECTORS = [
+    // -- the original six (order preserved; email first) ------------------------------------------
+    {
+        category: 'email',
+        group: 'pii',
+        severity: 'warning',
+        pattern: c('\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}\\b'),
+    },
+    // openai/anthropic sk- keys incl. the hyphenated modern forms (sk-ant-…, sk-proj-…) + legacy
+    {
+        category: 'api_key',
+        group: 'secret',
+        severity: 'critical',
+        pattern: c('\\bsk-[A-Za-z0-9_-]{8,}'),
+    },
+    {
+        category: 'aws_key',
+        group: 'secret',
+        severity: 'critical',
+        pattern: c('\\bAKIA[0-9A-Z]{16}\\b'),
+    },
+    {
+        category: 'google_api_key',
+        group: 'secret',
+        severity: 'critical',
+        pattern: c('\\bAIza[0-9A-Za-z_-]{35}\\b'),
+    },
+    {
+        category: 'jwt',
+        group: 'secret',
+        severity: 'critical',
+        pattern: c('\\beyJ[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}'),
+    },
+    {
+        category: 'bearer_token',
+        group: 'secret',
+        severity: 'critical',
+        pattern: c('\\b[Bb]earer\\s+[A-Za-z0-9._-]+\\b'),
+    },
+    // -- additional secrets ----------------------------------------------------------------------
+    {
+        category: 'github_token',
+        group: 'secret',
+        severity: 'critical',
+        pattern: c('\\bgh[pousr]_[A-Za-z0-9]{36,}\\b'),
+    },
+    {
+        category: 'slack_token',
+        group: 'secret',
+        severity: 'critical',
+        pattern: c('\\bxox[baprs]-[A-Za-z0-9-]{10,}\\b'),
+    },
+    {
+        category: 'private_key',
+        group: 'secret',
+        severity: 'critical',
+        pattern: c('-----BEGIN (?:[A-Z0-9 ]+ )?PRIVATE KEY-----'),
+    },
+    // -- free-text credentials -------------------------------------------------------------------
+    {
+        category: 'password',
+        group: 'credential',
+        severity: 'critical',
+        pattern: c('\\b(?:password|passphrase|passwd|pwd)\\b\\s*(?:is|:|=)\\s*\\S+', true),
+    },
+    // -- financial (validator-gated) -------------------------------------------------------------
+    {
+        category: 'credit_card',
+        group: 'financial',
+        severity: 'critical',
+        pattern: c('\\b\\d(?:[ -]?\\d){12,18}\\b'),
+        validator: luhn,
+    },
+    {
+        category: 'iban',
+        group: 'financial',
+        severity: 'critical',
+        pattern: c('\\b[A-Z]{2}\\d{2}[A-Z0-9]{11,30}\\b'),
+        validator: ibanMod97,
+    },
+    {
+        category: 'us_routing',
+        group: 'financial',
+        severity: 'critical',
+        pattern: c('\\b\\d{9}\\b'),
+        validator: abaValid,
+    },
+    {
+        category: 'swift_bic',
+        group: 'financial',
+        severity: 'critical',
+        pattern: c('\\b[A-Z]{4}[A-Z]{2}[A-Z0-9]{2}(?:[A-Z0-9]{3})?\\b'),
+        validator: bicValid,
+    },
+    // -- government IDs (validator-gated) --------------------------------------------------------
+    {
+        category: 'us_ssn',
+        group: 'gov_id',
+        severity: 'critical',
+        pattern: c('\\b\\d{3}-\\d{2}-\\d{4}\\b'),
+        validator: ssnValid,
+    },
+    // -- remaining PII ---------------------------------------------------------------------------
+    {
+        category: 'phone',
+        group: 'pii',
+        severity: 'warning',
+        pattern: c('(?<!\\w)(?:\\+?1[ .\\-]?)?(?:\\(\\d{3}\\)[ .\\-]?|\\d{3}[ .\\-])\\d{3}[ .\\-]\\d{4}(?!\\d)' +
+            '|(?<!\\w)\\+\\d{9,15}(?!\\d)'),
+        validator: phoneValid,
+    },
+    {
+        category: 'ipv4',
+        group: 'pii',
+        severity: 'warning',
+        pattern: c('\\b(?:(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)\\.){3}' +
+            '(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)\\b'),
+    },
+    {
+        category: 'ipv6',
+        group: 'pii',
+        severity: 'warning',
+        pattern: c('\\b(?:[A-Fa-f0-9]{1,4}:){7}[A-Fa-f0-9]{1,4}\\b' +
+            '|\\b(?:[A-Fa-f0-9]{1,4}:){1,7}:(?:[A-Fa-f0-9]{1,4}\\b)?'),
+    },
+    {
+        category: 'mac_address',
+        group: 'pii',
+        severity: 'warning',
+        pattern: c('\\b(?:[0-9A-Fa-f]{2}[:-]){5}[0-9A-Fa-f]{2}\\b'),
+    },
+    // -- GDPR Art.9 special categories (best-effort keyword lexicon) -----------------------------
+    {
+        category: 'special_category',
+        group: 'special_category',
+        severity: 'warning',
+        pattern: c('\\b(?:diagnos(?:is|es|ed)?|hiv|pregnan(?:t|cy)|disab(?:led|ility)|biometric|' +
+            'fingerprints?|genetic|ethnicity|religio(?:n|us))\\b', true),
+    },
+];
+/** Add a custom {@link Detector} to the global registry (it runs after the built-ins). */
+export function registerDetector(detector) {
+    DETECTORS.push(detector);
+}
+/** A copy of the active detector registry (built-ins plus anything registered). */
+export function detectors() {
+    return [...DETECTORS];
+}
+/** The group a category belongs to per the active registry (`null` if unknown). */
+export function groupOf(category) {
+    for (const d of DETECTORS) {
+        if (d.category === category)
+            return d.group;
+    }
+    return null;
+}
+// --------------------------------------------------------------------------- scan / scrub
+/** A plain `{}`-shaped object (a JSON dict), not a wrapper instance like `PyFloat` or a Date. */
+function isPlainObject(o) {
+    if (o === null || typeof o !== 'object')
+        return false;
+    const proto = Object.getPrototypeOf(o);
+    return proto === Object.prototype || proto === null;
+}
+/**
+ * Walk `obj` (str/dict/list) and count validated matches per category. Returns an insertion-ordered
+ * map `category -> [detector, occurrences]` accumulated across the walk. Never returns raw values.
+ */
+export function scanCounts(obj) {
+    const counts = new Map();
+    const walk = (o) => {
+        if (typeof o === 'string') {
+            for (const det of DETECTORS) {
+                let n = 0;
+                for (const match of o.matchAll(det.pattern)) {
+                    const value = match[0];
+                    if (det.validator === undefined || det.validator(value))
+                        n += 1;
+                }
+                if (n) {
+                    const slot = counts.get(det.category);
+                    if (slot === undefined)
+                        counts.set(det.category, [det, n]);
+                    else
+                        slot[1] += n;
+                }
+            }
+        }
+        else if (Array.isArray(o)) {
+            for (const v of o)
+                walk(v);
+        }
+        else if (isPlainObject(o)) {
+            for (const v of Object.values(o))
+                walk(v);
+        }
+    };
+    walk(obj);
+    return counts;
+}
+/**
+ * Return a copy of `obj` with every span matching a category in `categories` replaced. Applies
+ * detectors in **registry order** (original six first), so output is byte-identical to the historical
+ * redactor. Validator-gated detectors only scrub the spans that actually validate.
+ */
+export function scrub(obj, categories) {
+    const wanted = new Set(categories);
+    const active = DETECTORS.filter((d) => wanted.has(d.category));
+    if (active.length === 0)
+        return obj;
+    const subs = active.map((det) => {
+        const validator = det.validator;
+        if (validator === undefined)
+            return [det.pattern, () => REDACTED];
+        return [det.pattern, (m) => (validator(m) ? REDACTED : m)];
+    });
+    const go = (o) => {
+        if (typeof o === 'string') {
+            let out = o;
+            for (const [pattern, repl] of subs) {
+                out = out.replace(pattern, (m) => repl(m));
+            }
+            return out;
+        }
+        if (Array.isArray(o))
+            return o.map(go);
+        if (isPlainObject(o)) {
+            const result = {};
+            for (const [k, v] of Object.entries(o))
+                result[k] = go(v);
+            return result;
+        }
+        return o;
+    };
+    return go(obj);
+}
+//# sourceMappingURL=detectors.js.map

package/dist/detectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectors.js","sourceRoot":"","sources":["../src/detectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAgBrC,yFAAyF;AAEzF,SAAS,MAAM,CAAC,CAAS;IACvB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,IAAI,CAAC,MAAc;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAChB,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,CAAC;gBAAE,KAAK,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,IAAI,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,gDAAgD;QAChD,OAAO,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,GAAmC;IACjD,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;CAC/B,CAAC;AACF,MAAM,UAAU,GAAmC;IACjD,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;CAC/B,CAAC;AAEF,6FAA6F;AAC7F,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,CAAE,CAAE,CAAE,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,QAAQ,GACZ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACtF,OAAO,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC/D,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,KAAK,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,+FAA+F;AAC/F,2DAA2D;AAC3D,MAAM,UAAU,GAAwB,IAAI,GAAG,CAC7C,CACE,4FAA4F;IAC5F,4FAA4F;IAC5F,4FAA4F;IAC5F,4FAA4F;IAC5F,4FAA4F;IAC5F,4FAA4F;IAC5F,4FAA4F;IAC5F,4FAA4F;IAC5F,4BAA4B,CAC7B,CAAC,KAAK,CAAC,GAAG,CAAC,CACb,CAAC;AAEF,2FAA2F;AAC3F,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,uFAAuF;AAEvF,sGAAsG;AACtG,SAAS,CAAC,CAAC,OAAe,EAAE,UAAU,GAAG,KAAK;IAC5C,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAe;IACnC,gGAAgG;IAChG;QACE,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,CAAC,CAAC,uDAAuD,CAAC;KACpE;IACD,6FAA6F;IAC7F;QACE,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,yBAAyB,CAAC;KACtC;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,wBAAwB,CAAC;KACrC;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,6BAA6B,CAAC;KAC1C;IACD;QACE,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,oEAAoE,CAAC;KACjF;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,oCAAoC,CAAC;KACjD;IACD,+FAA+F;IAC/F;QACE,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,kCAAkC,CAAC;KAC/C;IACD;QACE,QAAQ,EAAE,aAAa;QACvB,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,oCAAoC,CAAC;KACjD;IACD;QACE,QAAQ,EAAE,aAAa;QACvB,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,6CAA6C,CAAC;KAC1D;IACD,+FAA+F;IAC/F;QACE,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,gEAAgE,EAAE,IAAI,CAAC;KACnF;IACD,+FAA+F;IAC/F;QACE,QAAQ,EAAE,aAAa;QACvB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,8BAA8B,CAAC;QAC1C,SAAS,EAAE,IAAI;KAChB;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,qCAAqC,CAAC;QACjD,SAAS,EAAE,SAAS;KACrB;IACD;QACE,QAAQ,EAAE,YAAY;QACtB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC;QAC1B,SAAS,EAAE,QAAQ;KACpB;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,mDAAmD,CAAC;QAC/D,SAAS,EAAE,QAAQ;KACpB;IACD,+FAA+F;IAC/F;QACE,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,CAAC,4BAA4B,CAAC;QACxC,SAAS,EAAE,QAAQ;KACpB;IACD,+FAA+F;IAC/F;QACE,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,CAAC,CACR,4FAA4F;YAC1F,8BAA8B,CACjC;QACD,SAAS,EAAE,UAAU;KACtB;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,CAAC,CACR,sDAAsD;YACpD,4CAA4C,CAC/C;KACF;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,CAAC,CACR,gDAAgD;YAC9C,yDAAyD,CAC5D;KACF;IACD;QACE,QAAQ,EAAE,aAAa;QACvB,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,CAAC,CAAC,+CAA+C,CAAC;KAC5D;IACD,+FAA+F;IAC/F;QACE,QAAQ,EAAE,kBAAkB;QAC5B,KAAK,EAAE,kBAAkB;QACzB,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,CAAC,CACR,8EAA8E;YAC5E,qDAAqD,EACvD,IAAI,CACL;KACF;CACF,CAAC;AAEF,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,QAAkB;IACjD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,SAAS;IACvB,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;AACxB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAE3F,iGAAiG;AACjG,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IAErD,MAAM,IAAI,GAAG,CAAC,CAAU,EAAQ,EAAE;QAChC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;gBACV,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACvB,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC;wBAAE,CAAC,IAAI,CAAC,CAAC;gBAClE,CAAC;gBACD,IAAI,CAAC,EAAE,CAAC;oBACN,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBACtC,IAAI,IAAI,KAAK,SAAS;wBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;;wBACtD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAI,GAAM,EAAE,UAA4B;IAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAEpC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAmC,EAAE;QAC/D,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAChC,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,CAAC,CAAU,EAAW,EAAE;QACjC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;gBACnC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,OAAO,EAAE,CAAC,GAAG,CAAM,CAAC;AACtB,CAAC"}

package/dist/guard.d.ts

@@ -0,0 +1,36 @@
+/**
+ * `guard()` — a batteries-included enforcement callable for `@cendor/core`'s interceptor seam. The
+ * TS port of `cendor.acttrace.guard`.
+ *
+ * The recorder/enforcer split stays intact: acttrace still only *records*. `guard()` returns a plain
+ * callable you install via `addInterceptor` — it is core that stops the call. Per call, the active
+ * {@link Policy} resolves each detected category to an action:
+ *
+ * - **block** → record `policy_flag(action="blocked")` → **throw** (the call never runs).
+ * - **redact** → scrub the outbound messages via `Reroute(messages=…)` so the *provider* receives
+ *   cleaned content, record `action="redacted"` → proceed. Tools have no message-rewrite seam, so a
+ *   redact on tool arguments stays record-only.
+ * - **flag** → record `policy_flag(action="flagged")` → proceed.
+ * - nothing → proceed untouched.
+ */
+import type { AuditLog } from './index.js';
+import { type Finding, Policy } from './policy.js';
+/**
+ * Raised by a {@link guard} to block an outbound call whose content a policy forbids. Carries the
+ * offending {@link Finding} list on `findings` (categories and counts only — never raw values).
+ */
+export declare class PolicyViolation extends Error {
+    findings: Finding[];
+    constructor(message?: string, findings?: Finding[] | null);
+}
+/** An exception class (called with a message) or a factory `findings -> Error`. */
+export type OnBlock = (new (message: string) => Error) | ((findings: Finding[]) => Error);
+/**
+ * Return a pre-call interceptor that enforces `policy` and records refusals via `audit`. Install it
+ * on core's seam via `addInterceptor(guard(Policy.gdpr(), log))`.
+ *
+ * Note that `Policy.default()` never blocks — use `Policy.gdpr()` / `pci()` / `strict()` (or a custom
+ * policy) to make a category `block`. `audit` is optional — without it the guard still enforces.
+ */
+export declare function guard(policy?: Policy | null, audit?: AuditLog | null, onBlock?: OnBlock): (call: unknown) => unknown;
+//# sourceMappingURL=guard.d.ts.map

package/dist/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,EAAQ,MAAM,aAAa,CAAC;AAKzD;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACR,OAAO,SAAqB,EAAE,QAAQ,GAAE,OAAO,EAAE,GAAG,IAAW;CAK5E;AAED,mFAAmF;AACnF,MAAM,MAAM,OAAO,GAAG,CAAC,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,KAAK,CAAC,CAAC;AA0C1F;;;;;;GAMG;AACH,wBAAgB,KAAK,CACnB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,KAAK,CAAC,EAAE,QAAQ,GAAG,IAAI,EACvB,OAAO,GAAE,OAAyB,GACjC,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CA+C5B"}

package/dist/guard.js

@@ -0,0 +1,124 @@
+/**
+ * `guard()` — a batteries-included enforcement callable for `@cendor/core`'s interceptor seam. The
+ * TS port of `cendor.acttrace.guard`.
+ *
+ * The recorder/enforcer split stays intact: acttrace still only *records*. `guard()` returns a plain
+ * callable you install via `addInterceptor` — it is core that stops the call. Per call, the active
+ * {@link Policy} resolves each detected category to an action:
+ *
+ * - **block** → record `policy_flag(action="blocked")` → **throw** (the call never runs).
+ * - **redact** → scrub the outbound messages via `Reroute(messages=…)` so the *provider* receives
+ *   cleaned content, record `action="redacted"` → proceed. Tools have no message-rewrite seam, so a
+ *   redact on tool arguments stays record-only.
+ * - **flag** → record `policy_flag(action="flagged")` → proceed.
+ * - nothing → proceed untouched.
+ */
+import { LLMCall, MISS, Reroute, ToolCall } from '@cendor/core';
+import { scrub } from './detectors.js';
+import { Policy, scan } from './policy.js';
+/** Severity ordering, so a grouped flag carries the strongest severity in the group. */
+const SEVERITY_RANK = { info: 0, warning: 1, critical: 2 };
+/**
+ * Raised by a {@link guard} to block an outbound call whose content a policy forbids. Carries the
+ * offending {@link Finding} list on `findings` (categories and counts only — never raw values).
+ */
+export class PolicyViolation extends Error {
+    findings;
+    constructor(message = 'policy violation', findings = null) {
+        super(message);
+        this.name = 'PolicyViolation';
+        this.findings = findings ?? [];
+    }
+}
+/** The caller-supplied content of a call to scan (messages for LLMs, arguments for tools). */
+function content(call) {
+    if (call instanceof LLMCall)
+        return call.messages;
+    if (call instanceof ToolCall)
+        return call.arguments;
+    return null;
+}
+function maxSeverity(findings) {
+    let best = 'warning';
+    let bestRank = -1;
+    for (const f of findings) {
+        const rank = SEVERITY_RANK[f.severity] ?? 0;
+        if (rank > bestRank) {
+            bestRank = rank;
+            best = f.severity;
+        }
+    }
+    return best;
+}
+/** ES6-class detection: distinguishes an exception class from a `findings -> Error` factory. */
+function isClass(fn) {
+    return typeof fn === 'function' && /^class[\s{]/.test(Function.prototype.toString.call(fn));
+}
+function makeBlockException(onBlock, findings) {
+    const cats = [...new Set(findings.map((f) => f.category))].sort();
+    const message = `policy blocked outbound call: ${cats.join(', ')}`;
+    if (isClass(onBlock)) {
+        const exc = new onBlock(message);
+        try {
+            exc.findings = findings;
+        }
+        catch {
+            // exception type doesn't tolerate a findings attribute — ignore
+        }
+        return exc;
+    }
+    return onBlock(findings);
+}
+/**
+ * Return a pre-call interceptor that enforces `policy` and records refusals via `audit`. Install it
+ * on core's seam via `addInterceptor(guard(Policy.gdpr(), log))`.
+ *
+ * Note that `Policy.default()` never blocks — use `Policy.gdpr()` / `pci()` / `strict()` (or a custom
+ * policy) to make a category `block`. `audit` is optional — without it the guard still enforces.
+ */
+export function guard(policy, audit, onBlock = PolicyViolation) {
+    const p = policy ?? Policy.default();
+    const auditLog = audit ?? null;
+    const record = (action, findings, call, note = '') => {
+        if (auditLog === null)
+            return;
+        const cats = [...new Set(findings.map((f) => f.category))].sort();
+        const kind = call instanceof LLMCall ? 'llm_call' : 'tool_call';
+        let reason = `${action} ${cats.join(', ')} in outbound ${kind}`;
+        if (note)
+            reason = `${reason} (${note})`;
+        const severity = action === 'redacted' ? 'info' : maxSeverity(findings);
+        auditLog.flag(reason, { action, severity, data: cats, extra: { auto: true } });
+    };
+    return (call) => {
+        const c = content(call);
+        if (c === null)
+            return MISS;
+        const findings = scan(c, p);
+        if (findings.length === 0)
+            return MISS;
+        const blocked = findings.filter((f) => f.action === 'block');
+        const toRedact = findings.filter((f) => f.action === 'redact');
+        const flagged = findings.filter((f) => f.action === 'flag');
+        if (blocked.length > 0) {
+            record('blocked', blocked, call); // record the refusal *before* throwing
+            throw makeBlockException(onBlock, blocked);
+        }
+        if (flagged.length > 0) {
+            record('flagged', flagged, call);
+        }
+        if (toRedact.length > 0) {
+            if (call instanceof LLMCall) {
+                // Redact-before-send: scrub the outbound messages and reroute so the provider receives the
+                // cleaned content, then record that we did.
+                const cleaned = scrub(call.messages, new Set(toRedact.map((f) => f.category)));
+                record('redacted', toRedact, call);
+                return new Reroute({ messages: cleaned });
+            }
+            // Tools have no message-rewrite seam, so a redact on tool arguments stays record-only.
+            record('flagged', toRedact, call, 'redact-before-send applies to model calls; tool arguments unchanged');
+        }
+        return MISS;
+    };
+}
+//# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAa,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,OAAO,EAAgB,MAAM,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEzD,wFAAwF;AACxF,MAAM,aAAa,GAA2B,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAEnF;;;GAGG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAY;IACpB,YAAY,OAAO,GAAG,kBAAkB,EAAE,WAA6B,IAAI;QACzE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,EAAE,CAAC;IACjC,CAAC;CACF;AAKD,8FAA8F;AAC9F,SAAS,OAAO,CAAC,IAAa;IAC5B,IAAI,IAAI,YAAY,OAAO;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;IAClD,IAAI,IAAI,YAAY,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,QAAmB;IACtC,IAAI,IAAI,GAAG,SAAS,CAAC;IACrB,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;YACpB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,SAAS,OAAO,CAAC,EAAW;IAC1B,OAAO,OAAO,EAAE,KAAK,UAAU,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB,EAAE,QAAmB;IAC/D,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,iCAAiC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACnE,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC;YACF,GAAgC,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,KAAK,CACnB,MAAsB,EACtB,KAAuB,EACvB,UAAmB,eAAe;IAElC,MAAM,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,KAAK,IAAI,IAAI,CAAC;IAE/B,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,QAAmB,EAAE,IAAa,EAAE,IAAI,GAAG,EAAE,EAAQ,EAAE;QACrF,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO;QAC9B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,YAAY,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;QAChE,IAAI,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAChE,IAAI,IAAI;YAAE,MAAM,GAAG,GAAG,MAAM,KAAK,IAAI,GAAG,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC;IAEF,OAAO,CAAC,IAAa,EAAW,EAAE;QAChC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,uCAAuC;YACzE,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,IAAI,YAAY,OAAO,EAAE,CAAC;gBAC5B,2FAA2F;gBAC3F,4CAA4C;gBAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC/E,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACnC,OAAO,IAAI,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5C,CAAC;YACD,uFAAuF;YACvF,MAAM,CACJ,SAAS,EACT,QAAQ,EACR,IAAI,EACJ,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,OAAO,IAAY,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC"}

package/dist/hash.d.ts

@@ -0,0 +1,7 @@
+/** Lowercase-hex SHA-256 of the UTF-8 bytes of `text`. */
+export declare function sha256Hex(text: string): string;
+/** Lowercase-hex HMAC-SHA256 over the UTF-8 bytes of `text` under `key` (UTF-8 bytes of the passphrase). */
+export declare function hmacSha256Hex(key: string | Uint8Array, text: string): string;
+/** Constant-time string compare (both treated as UTF-8). Returns false on length mismatch. */
+export declare function timingSafeEqualHex(a: string, b: string): boolean;
+//# sourceMappingURL=hash.d.ts.map

package/dist/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AA2BA,0DAA0D;AAC1D,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,4GAA4G;AAC5G,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAKhE"}

package/dist/hash.js

@@ -0,0 +1,32 @@
+/**
+ * Synchronous SHA-256 + HMAC-SHA256, via `node:crypto`. acttrace hashes/signs inside a synchronous
+ * bus subscriber (matching Python), so WebCrypto's async `subtle` is unusable. acttrace is a
+ * server-side governance library (signing keys never belong in a browser), so `node:crypto` is the
+ * correct dependency; it is also available in edge runtimes with `nodejs_compat`. Loaded via
+ * `createRequire` so importing the package does not force `node:crypto` into a browser bundle.
+ */
+import { createRequire } from 'node:module';
+const require = createRequire(import.meta.url);
+let cryptoMod;
+function nodeCrypto() {
+    if (cryptoMod === undefined)
+        cryptoMod = require('node:crypto');
+    return cryptoMod;
+}
+/** Lowercase-hex SHA-256 of the UTF-8 bytes of `text`. */
+export function sha256Hex(text) {
+    return nodeCrypto().createHash('sha256').update(text, 'utf8').digest('hex');
+}
+/** Lowercase-hex HMAC-SHA256 over the UTF-8 bytes of `text` under `key` (UTF-8 bytes of the passphrase). */
+export function hmacSha256Hex(key, text) {
+    return nodeCrypto().createHmac('sha256', key).update(text, 'utf8').digest('hex');
+}
+/** Constant-time string compare (both treated as UTF-8). Returns false on length mismatch. */
+export function timingSafeEqualHex(a, b) {
+    const ba = new TextEncoder().encode(a);
+    const bb = new TextEncoder().encode(b);
+    if (ba.length !== bb.length)
+        return false;
+    return nodeCrypto().timingSafeEqual(ba, bb);
+}
+//# sourceMappingURL=hash.js.map

package/dist/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAY/C,IAAI,SAAiC,CAAC;AACtC,SAAS,UAAU;IACjB,IAAI,SAAS,KAAK,SAAS;QAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAe,CAAC;IAC9E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,UAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,aAAa,CAAC,GAAwB,EAAE,IAAY;IAClE,OAAO,UAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnF,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,CAAS,EAAE,CAAS;IACrD,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,UAAU,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC"}