@datasynx/agentic-crm 0.1.0 → 1.1.0

package/dist/{compliance-CKSBoQUe.js → compliance-Bc12Hn9a.js}

@@ -76,7 +76,7 @@ const DISCLOSURES = {
 	en: "Note: This content was generated with the help of AI (EU AI Act Art. 50)."
 };
 /** Localized Art. 50 disclosure string. */
-function aiDisclosure(lang = "de") {
+function aiDisclosure(lang = "en") {
 	return DISCLOSURES[lang] ?? DISCLOSURES.en;
 }
 /** Disclosure is ON by default (Art. 50); opt out with DXCRM_AI_DISCLOSURE=off. */
@@ -86,7 +86,7 @@ function aiDisclosureEnabled() {
 /** Prepend the Art. 50 disclosure to generated content (unless disabled). */
 function labelAiContent(text, opts = {}) {
 	if (!(opts.enabled ?? aiDisclosureEnabled())) return text;
-	return `${aiDisclosure(opts.lang ?? (process.env["DXCRM_AI_DISCLOSURE_LANG"] || "de"))}\n\n${text}`;
+	return `${aiDisclosure(opts.lang ?? (process.env["DXCRM_AI_DISCLOSURE_LANG"] || "en"))}\n\n${text}`;
 }
 /** Resolve the configured LLM provider (default Anthropic). */
 function llmProvider() {
@@ -115,4 +115,4 @@ function complianceConfig() {
 //#endregion
 export { llmProvider as a, neutralizeUntrusted as c, labelAiContent as i, maskPii as l, aiDisclosureEnabled as n, localLlmConfig as o, complianceConfig as r, guardrailsEnabled as s, aiDisclosure as t, piiMaskingEnabled as u };
 
-//# sourceMappingURL=compliance-CKSBoQUe.js.map
+//# sourceMappingURL=compliance-Bc12Hn9a.js.map

package/dist/{compliance-CKSBoQUe.js.map → compliance-Bc12Hn9a.js.map}

@@ -1 +1 @@
-{"version":3,"file":"compliance-CKSBoQUe.js","names":[],"sources":["../src/core/pii.ts","../src/core/guardrails.ts","../src/core/compliance.ts"],"sourcesContent":["/**\n * Lightweight PII masking for LLM calls (Einstein-Trust-Layer-style).\n * Replaces emails and phone numbers with stable placeholders before text is\n * sent to an LLM, and can restore them in the response. Opt-in via\n * DXCRM_PII_MASKING=on so default behaviour and quality are unchanged.\n */\n\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}/g;\n// Phone: optional +, then 7+ digits possibly grouped by spaces/dashes/parens.\nconst PHONE_RE = /\\+?\\d[\\d\\s().-]{6,}\\d/g;\n\nexport interface MaskedText {\n  masked: string;\n  unmask: (text: string) => string;\n}\n\nexport function piiMaskingEnabled(): boolean {\n  return process.env[\"DXCRM_PII_MASKING\"] === \"on\";\n}\n\nexport function maskPii(input: string): MaskedText {\n  const mapping = new Map<string, string>(); // original -> placeholder\n  let emailCount = 0;\n  let phoneCount = 0;\n\n  let masked = input.replace(EMAIL_RE, (match) => {\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[EMAIL_${emailCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  masked = masked.replace(PHONE_RE, (match) => {\n    // Ignore very short numeric runs that slipped through (already handled by {6,}).\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[PHONE_${phoneCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  const reverse = new Map<string, string>(); // placeholder -> original\n  for (const [orig, ph] of mapping) reverse.set(ph, orig);\n\n  const unmask = (text: string): string => {\n    let out = text;\n    for (const [ph, orig] of reverse) out = out.split(ph).join(orig);\n    return out;\n  };\n\n  return { masked, unmask };\n}\n","/**\n * Guardrails against (indirect) prompt injection in untrusted CRM content\n * (emails, transcripts, imported notes). Detection is always available;\n * neutralization is applied to LLM inputs when DXCRM_GUARDRAILS=on.\n */\n\nconst INJECTION_PATTERNS: RegExp[] = [\n  /ignore\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)\\s+(instructions?|prompts?|messages?)/gi,\n  /disregard\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)/gi,\n  /forget\\s+(all\\s+|the\\s+|everything\\s+)?(previous|above|prior|you were told)/gi,\n  /you\\s+are\\s+now\\b/gi,\n  /reveal\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt|prompts?)/gi,\n  /(print|show|repeat)\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt)/gi,\n  /act\\s+as\\s+(an?\\s+)?(system|admin|administrator|developer|root)\\b/gi,\n  /<\\/?(system|assistant|tool)\\b[^>]*>/gi,\n  /\\bBEGIN\\s+SYSTEM\\b/gi,\n];\n\nexport function guardrailsEnabled(): boolean {\n  return process.env[\"DXCRM_GUARDRAILS\"] === \"on\";\n}\n\nexport function detectPromptInjection(text: string): { flagged: boolean; matches: string[] } {\n  const matches: string[] = [];\n  for (const re of INJECTION_PATTERNS) {\n    re.lastIndex = 0;\n    const found = text.match(re);\n    if (found) matches.push(...found);\n  }\n  return { flagged: matches.length > 0, matches };\n}\n\n/** Replace known injection spans with a [filtered] marker, keeping other text. */\nexport function neutralizeUntrusted(text: string): string {\n  let out = text;\n  for (const re of INJECTION_PATTERNS) {\n    out = out.replace(re, \"[filtered]\");\n  }\n  return out;\n}\n","import { piiMaskingEnabled } from \"./pii.js\";\nimport { guardrailsEnabled } from \"./guardrails.js\";\n\n/**\n * Compliance hardening (domino D17 / §3): the cross-cutting governance layer.\n *  - EU-AI-Act Art. 50 transparency: a localized disclosure that AI generated\n *    the content, on by default (opt-out), wrappable around any generated text.\n *  - Provider-agnostic LLM selection so the workspace can run against a local,\n *    self-hosted model (Ollama / OpenAI-compatible) as a data-residency moat —\n *    no customer data leaves the machine. The provider runtime itself stays in\n *    the agent framework; here we only resolve and expose the configuration.\n *  - A single read-out of the active privacy/compliance posture.\n */\nexport type DisclosureLang = \"de\" | \"en\";\n\nexport type LlmProviderName = \"anthropic\" | \"ollama\" | \"openai\" | \"local\";\n\nconst DISCLOSURES: Record<DisclosureLang, string> = {\n  de: \"Hinweis: Dieser Inhalt wurde mithilfe von KI erstellt (EU-AI-Act Art. 50).\",\n  en: \"Note: This content was generated with the help of AI (EU AI Act Art. 50).\",\n};\n\n/** Localized Art. 50 disclosure string. */\nexport function aiDisclosure(lang: DisclosureLang = \"de\"): string {\n  return DISCLOSURES[lang] ?? DISCLOSURES.en;\n}\n\n/** Disclosure is ON by default (Art. 50); opt out with DXCRM_AI_DISCLOSURE=off. */\nexport function aiDisclosureEnabled(): boolean {\n  return process.env[\"DXCRM_AI_DISCLOSURE\"] !== \"off\";\n}\n\n/** Prepend the Art. 50 disclosure to generated content (unless disabled). */\nexport function labelAiContent(\n  text: string,\n  opts: { lang?: DisclosureLang; enabled?: boolean } = {}\n): string {\n  const enabled = opts.enabled ?? aiDisclosureEnabled();\n  if (!enabled) return text;\n  const lang = opts.lang ?? ((process.env[\"DXCRM_AI_DISCLOSURE_LANG\"] as DisclosureLang) || \"de\");\n  return `${aiDisclosure(lang)}\\n\\n${text}`;\n}\n\n/** Resolve the configured LLM provider (default Anthropic). */\nexport function llmProvider(): LlmProviderName {\n  const p = (process.env[\"DXCRM_LLM_PROVIDER\"] ?? \"anthropic\").toLowerCase();\n  if (p === \"ollama\" || p === \"openai\" || p === \"local\") return p;\n  return \"anthropic\";\n}\n\nexport interface LocalLlmConfig {\n  baseUrl: string;\n  model: string;\n}\n\n/** OpenAI-compatible local endpoint config (Ollama defaults), env-overridable. */\nexport function localLlmConfig(): LocalLlmConfig {\n  return {\n    baseUrl: process.env[\"DXCRM_LLM_BASE_URL\"] ?? \"http://127.0.0.1:11434/v1\",\n    model: process.env[\"DXCRM_LLM_MODEL\"] ?? \"llama3.1\",\n  };\n}\n\nexport interface ComplianceConfig {\n  provider: LlmProviderName;\n  local: LocalLlmConfig | null;\n  aiDisclosure: boolean;\n  piiMasking: boolean;\n  guardrails: boolean;\n}\n\n/** A single read-out of the active privacy/compliance posture. */\nexport function complianceConfig(): ComplianceConfig {\n  const provider = llmProvider();\n  return {\n    provider,\n    local: provider === \"anthropic\" ? null : localLlmConfig(),\n    aiDisclosure: aiDisclosureEnabled(),\n    piiMasking: piiMaskingEnabled(),\n    guardrails: guardrailsEnabled(),\n  };\n}\n"],"mappings":";;;;;;;AAOA,MAAM,WAAW;AAEjB,MAAM,WAAW;AAOjB,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,yBAAyB;AAC9C;AAEA,SAAgB,QAAQ,OAA2B;CACjD,MAAM,0BAAU,IAAI,IAAoB;CACxC,IAAI,aAAa;CACjB,IAAI,aAAa;CAEjB,IAAI,SAAS,MAAM,QAAQ,WAAW,UAAU;EAC9C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,SAAS,OAAO,QAAQ,WAAW,UAAU;EAE3C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,MAAM,0BAAU,IAAI,IAAoB;CACxC,KAAK,MAAM,CAAC,MAAM,OAAO,SAAS,QAAQ,IAAI,IAAI,IAAI;CAEtD,MAAM,UAAU,SAAyB;EACvC,IAAI,MAAM;EACV,KAAK,MAAM,CAAC,IAAI,SAAS,SAAS,MAAM,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI;EAC/D,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAO;AAC1B;;;;;;;;AChDA,MAAM,qBAA+B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;;AAaA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,MAAM;CACV,KAAK,MAAM,MAAM,oBACf,MAAM,IAAI,QAAQ,IAAI,YAAY;CAEpC,OAAO;AACT;;;ACtBA,MAAM,cAA8C;CAClD,IAAI;CACJ,IAAI;AACN;;AAGA,SAAgB,aAAa,OAAuB,MAAc;CAChE,OAAO,YAAY,SAAS,YAAY;AAC1C;;AAGA,SAAgB,sBAA+B;CAC7C,OAAO,QAAQ,IAAI,2BAA2B;AAChD;;AAGA,SAAgB,eACd,MACA,OAAqD,CAAC,GAC9C;CAER,IAAI,EADY,KAAK,WAAW,oBAAoB,IACtC,OAAO;CAErB,OAAO,GAAG,aADG,KAAK,SAAU,QAAQ,IAAI,+BAAkD,KAC/D,EAAE,MAAM;AACrC;;AAGA,SAAgB,cAA+B;CAC7C,MAAM,KAAK,QAAQ,IAAI,yBAAyB,aAAa,YAAY;CACzE,IAAI,MAAM,YAAY,MAAM,YAAY,MAAM,SAAS,OAAO;CAC9D,OAAO;AACT;;AAQA,SAAgB,iBAAiC;CAC/C,OAAO;EACL,SAAS,QAAQ,IAAI,yBAAyB;EAC9C,OAAO,QAAQ,IAAI,sBAAsB;CAC3C;AACF;;AAWA,SAAgB,mBAAqC;CACnD,MAAM,WAAW,YAAY;CAC7B,OAAO;EACL;EACA,OAAO,aAAa,cAAc,OAAO,eAAe;EACxD,cAAc,oBAAoB;EAClC,YAAY,kBAAkB;EAC9B,YAAY,kBAAkB;CAChC;AACF"}
+{"version":3,"file":"compliance-Bc12Hn9a.js","names":[],"sources":["../src/core/pii.ts","../src/core/guardrails.ts","../src/core/compliance.ts"],"sourcesContent":["/**\n * Lightweight PII masking for LLM calls (Einstein-Trust-Layer-style).\n * Replaces emails and phone numbers with stable placeholders before text is\n * sent to an LLM, and can restore them in the response. Opt-in via\n * DXCRM_PII_MASKING=on so default behaviour and quality are unchanged.\n */\n\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}/g;\n// Phone: optional +, then 7+ digits possibly grouped by spaces/dashes/parens.\nconst PHONE_RE = /\\+?\\d[\\d\\s().-]{6,}\\d/g;\n\nexport interface MaskedText {\n  masked: string;\n  unmask: (text: string) => string;\n}\n\nexport function piiMaskingEnabled(): boolean {\n  return process.env[\"DXCRM_PII_MASKING\"] === \"on\";\n}\n\nexport function maskPii(input: string): MaskedText {\n  const mapping = new Map<string, string>(); // original -> placeholder\n  let emailCount = 0;\n  let phoneCount = 0;\n\n  let masked = input.replace(EMAIL_RE, (match) => {\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[EMAIL_${emailCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  masked = masked.replace(PHONE_RE, (match) => {\n    // Ignore very short numeric runs that slipped through (already handled by {6,}).\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[PHONE_${phoneCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  const reverse = new Map<string, string>(); // placeholder -> original\n  for (const [orig, ph] of mapping) reverse.set(ph, orig);\n\n  const unmask = (text: string): string => {\n    let out = text;\n    for (const [ph, orig] of reverse) out = out.split(ph).join(orig);\n    return out;\n  };\n\n  return { masked, unmask };\n}\n","/**\n * Guardrails against (indirect) prompt injection in untrusted CRM content\n * (emails, transcripts, imported notes). Detection is always available;\n * neutralization is applied to LLM inputs when DXCRM_GUARDRAILS=on.\n */\n\nconst INJECTION_PATTERNS: RegExp[] = [\n  /ignore\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)\\s+(instructions?|prompts?|messages?)/gi,\n  /disregard\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)/gi,\n  /forget\\s+(all\\s+|the\\s+|everything\\s+)?(previous|above|prior|you were told)/gi,\n  /you\\s+are\\s+now\\b/gi,\n  /reveal\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt|prompts?)/gi,\n  /(print|show|repeat)\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt)/gi,\n  /act\\s+as\\s+(an?\\s+)?(system|admin|administrator|developer|root)\\b/gi,\n  /<\\/?(system|assistant|tool)\\b[^>]*>/gi,\n  /\\bBEGIN\\s+SYSTEM\\b/gi,\n];\n\nexport function guardrailsEnabled(): boolean {\n  return process.env[\"DXCRM_GUARDRAILS\"] === \"on\";\n}\n\nexport function detectPromptInjection(text: string): { flagged: boolean; matches: string[] } {\n  const matches: string[] = [];\n  for (const re of INJECTION_PATTERNS) {\n    re.lastIndex = 0;\n    const found = text.match(re);\n    if (found) matches.push(...found);\n  }\n  return { flagged: matches.length > 0, matches };\n}\n\n/** Replace known injection spans with a [filtered] marker, keeping other text. */\nexport function neutralizeUntrusted(text: string): string {\n  let out = text;\n  for (const re of INJECTION_PATTERNS) {\n    out = out.replace(re, \"[filtered]\");\n  }\n  return out;\n}\n","import { piiMaskingEnabled } from \"./pii.js\";\nimport { guardrailsEnabled } from \"./guardrails.js\";\n\n/**\n * Compliance hardening (domino D17 / §3): the cross-cutting governance layer.\n *  - EU-AI-Act Art. 50 transparency: a localized disclosure that AI generated\n *    the content, on by default (opt-out), wrappable around any generated text.\n *  - Provider-agnostic LLM selection so the workspace can run against a local,\n *    self-hosted model (Ollama / OpenAI-compatible) as a data-residency moat —\n *    no customer data leaves the machine. The provider runtime itself stays in\n *    the agent framework; here we only resolve and expose the configuration.\n *  - A single read-out of the active privacy/compliance posture.\n */\nexport type DisclosureLang = \"de\" | \"en\";\n\nexport type LlmProviderName = \"anthropic\" | \"ollama\" | \"openai\" | \"local\";\n\nconst DISCLOSURES: Record<DisclosureLang, string> = {\n  de: \"Hinweis: Dieser Inhalt wurde mithilfe von KI erstellt (EU-AI-Act Art. 50).\",\n  en: \"Note: This content was generated with the help of AI (EU AI Act Art. 50).\",\n};\n\n/** Localized Art. 50 disclosure string. */\nexport function aiDisclosure(lang: DisclosureLang = \"en\"): string {\n  return DISCLOSURES[lang] ?? DISCLOSURES.en;\n}\n\n/** Disclosure is ON by default (Art. 50); opt out with DXCRM_AI_DISCLOSURE=off. */\nexport function aiDisclosureEnabled(): boolean {\n  return process.env[\"DXCRM_AI_DISCLOSURE\"] !== \"off\";\n}\n\n/** Prepend the Art. 50 disclosure to generated content (unless disabled). */\nexport function labelAiContent(\n  text: string,\n  opts: { lang?: DisclosureLang; enabled?: boolean } = {}\n): string {\n  const enabled = opts.enabled ?? aiDisclosureEnabled();\n  if (!enabled) return text;\n  const lang = opts.lang ?? ((process.env[\"DXCRM_AI_DISCLOSURE_LANG\"] as DisclosureLang) || \"en\");\n  return `${aiDisclosure(lang)}\\n\\n${text}`;\n}\n\n/** Resolve the configured LLM provider (default Anthropic). */\nexport function llmProvider(): LlmProviderName {\n  const p = (process.env[\"DXCRM_LLM_PROVIDER\"] ?? \"anthropic\").toLowerCase();\n  if (p === \"ollama\" || p === \"openai\" || p === \"local\") return p;\n  return \"anthropic\";\n}\n\nexport interface LocalLlmConfig {\n  baseUrl: string;\n  model: string;\n}\n\n/** OpenAI-compatible local endpoint config (Ollama defaults), env-overridable. */\nexport function localLlmConfig(): LocalLlmConfig {\n  return {\n    baseUrl: process.env[\"DXCRM_LLM_BASE_URL\"] ?? \"http://127.0.0.1:11434/v1\",\n    model: process.env[\"DXCRM_LLM_MODEL\"] ?? \"llama3.1\",\n  };\n}\n\nexport interface ComplianceConfig {\n  provider: LlmProviderName;\n  local: LocalLlmConfig | null;\n  aiDisclosure: boolean;\n  piiMasking: boolean;\n  guardrails: boolean;\n}\n\n/** A single read-out of the active privacy/compliance posture. */\nexport function complianceConfig(): ComplianceConfig {\n  const provider = llmProvider();\n  return {\n    provider,\n    local: provider === \"anthropic\" ? null : localLlmConfig(),\n    aiDisclosure: aiDisclosureEnabled(),\n    piiMasking: piiMaskingEnabled(),\n    guardrails: guardrailsEnabled(),\n  };\n}\n"],"mappings":";;;;;;;AAOA,MAAM,WAAW;AAEjB,MAAM,WAAW;AAOjB,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,yBAAyB;AAC9C;AAEA,SAAgB,QAAQ,OAA2B;CACjD,MAAM,0BAAU,IAAI,IAAoB;CACxC,IAAI,aAAa;CACjB,IAAI,aAAa;CAEjB,IAAI,SAAS,MAAM,QAAQ,WAAW,UAAU;EAC9C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,SAAS,OAAO,QAAQ,WAAW,UAAU;EAE3C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,MAAM,0BAAU,IAAI,IAAoB;CACxC,KAAK,MAAM,CAAC,MAAM,OAAO,SAAS,QAAQ,IAAI,IAAI,IAAI;CAEtD,MAAM,UAAU,SAAyB;EACvC,IAAI,MAAM;EACV,KAAK,MAAM,CAAC,IAAI,SAAS,SAAS,MAAM,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI;EAC/D,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAO;AAC1B;;;;;;;;AChDA,MAAM,qBAA+B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;;AAaA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,MAAM;CACV,KAAK,MAAM,MAAM,oBACf,MAAM,IAAI,QAAQ,IAAI,YAAY;CAEpC,OAAO;AACT;;;ACtBA,MAAM,cAA8C;CAClD,IAAI;CACJ,IAAI;AACN;;AAGA,SAAgB,aAAa,OAAuB,MAAc;CAChE,OAAO,YAAY,SAAS,YAAY;AAC1C;;AAGA,SAAgB,sBAA+B;CAC7C,OAAO,QAAQ,IAAI,2BAA2B;AAChD;;AAGA,SAAgB,eACd,MACA,OAAqD,CAAC,GAC9C;CAER,IAAI,EADY,KAAK,WAAW,oBAAoB,IACtC,OAAO;CAErB,OAAO,GAAG,aADG,KAAK,SAAU,QAAQ,IAAI,+BAAkD,KAC/D,EAAE,MAAM;AACrC;;AAGA,SAAgB,cAA+B;CAC7C,MAAM,KAAK,QAAQ,IAAI,yBAAyB,aAAa,YAAY;CACzE,IAAI,MAAM,YAAY,MAAM,YAAY,MAAM,SAAS,OAAO;CAC9D,OAAO;AACT;;AAQA,SAAgB,iBAAiC;CAC/C,OAAO;EACL,SAAS,QAAQ,IAAI,yBAAyB;EAC9C,OAAO,QAAQ,IAAI,sBAAsB;CAC3C;AACF;;AAWA,SAAgB,mBAAqC;CACnD,MAAM,WAAW,YAAY;CAC7B,OAAO;EACL;EACA,OAAO,aAAa,cAAc,OAAO,eAAe;EACxD,cAAc,oBAAoB;EAClC,YAAY,kBAAkB;EAC9B,YAAY,kBAAkB;CAChC;AACF"}

package/dist/{compliance-CujOqAKk.js → compliance-TqYQXhBj.js}

@@ -1,2 +1,2 @@
-import { i as labelAiContent, r as complianceConfig, t as aiDisclosure } from "./compliance-CKSBoQUe.js";
+import { i as labelAiContent, r as complianceConfig, t as aiDisclosure } from "./compliance-Bc12Hn9a.js";
 export { aiDisclosure, complianceConfig, labelAiContent };

package/dist/{compliance-B1kk5-YS.js → compliance-kq0xHRw3.js}

@@ -84,7 +84,7 @@ const DISCLOSURES = {
 	en: "Note: This content was generated with the help of AI (EU AI Act Art. 50)."
 };
 /** Localized Art. 50 disclosure string. */
-function aiDisclosure(lang = "de") {
+function aiDisclosure(lang = "en") {
 	return DISCLOSURES[lang] ?? DISCLOSURES.en;
 }
 /** Disclosure is ON by default (Art. 50); opt out with DXCRM_AI_DISCLOSURE=off. */
@@ -94,7 +94,7 @@ function aiDisclosureEnabled() {
 /** Prepend the Art. 50 disclosure to generated content (unless disabled). */
 function labelAiContent(text, opts = {}) {
 	if (!(opts.enabled ?? aiDisclosureEnabled())) return text;
-	return `${aiDisclosure(opts.lang ?? (process.env["DXCRM_AI_DISCLOSURE_LANG"] || "de"))}\n\n${text}`;
+	return `${aiDisclosure(opts.lang ?? (process.env["DXCRM_AI_DISCLOSURE_LANG"] || "en"))}\n\n${text}`;
 }
 /** Resolve the configured LLM provider (default Anthropic). */
 function llmProvider() {
@@ -112,4 +112,4 @@ function localLlmConfig() {
 //#endregion
 export { neutralizeUntrusted as a, guardrailsEnabled as i, llmProvider as n, maskPii as o, localLlmConfig as r, piiMaskingEnabled as s, compliance_exports as t };
 
-//# sourceMappingURL=compliance-B1kk5-YS.js.map
+//# sourceMappingURL=compliance-kq0xHRw3.js.map

package/dist/{compliance-B1kk5-YS.js.map → compliance-kq0xHRw3.js.map}

@@ -1 +1 @@
-{"version":3,"file":"compliance-B1kk5-YS.js","names":[],"sources":["../src/core/pii.ts","../src/core/guardrails.ts","../src/core/compliance.ts"],"sourcesContent":["/**\n * Lightweight PII masking for LLM calls (Einstein-Trust-Layer-style).\n * Replaces emails and phone numbers with stable placeholders before text is\n * sent to an LLM, and can restore them in the response. Opt-in via\n * DXCRM_PII_MASKING=on so default behaviour and quality are unchanged.\n */\n\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}/g;\n// Phone: optional +, then 7+ digits possibly grouped by spaces/dashes/parens.\nconst PHONE_RE = /\\+?\\d[\\d\\s().-]{6,}\\d/g;\n\nexport interface MaskedText {\n  masked: string;\n  unmask: (text: string) => string;\n}\n\nexport function piiMaskingEnabled(): boolean {\n  return process.env[\"DXCRM_PII_MASKING\"] === \"on\";\n}\n\nexport function maskPii(input: string): MaskedText {\n  const mapping = new Map<string, string>(); // original -> placeholder\n  let emailCount = 0;\n  let phoneCount = 0;\n\n  let masked = input.replace(EMAIL_RE, (match) => {\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[EMAIL_${emailCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  masked = masked.replace(PHONE_RE, (match) => {\n    // Ignore very short numeric runs that slipped through (already handled by {6,}).\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[PHONE_${phoneCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  const reverse = new Map<string, string>(); // placeholder -> original\n  for (const [orig, ph] of mapping) reverse.set(ph, orig);\n\n  const unmask = (text: string): string => {\n    let out = text;\n    for (const [ph, orig] of reverse) out = out.split(ph).join(orig);\n    return out;\n  };\n\n  return { masked, unmask };\n}\n","/**\n * Guardrails against (indirect) prompt injection in untrusted CRM content\n * (emails, transcripts, imported notes). Detection is always available;\n * neutralization is applied to LLM inputs when DXCRM_GUARDRAILS=on.\n */\n\nconst INJECTION_PATTERNS: RegExp[] = [\n  /ignore\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)\\s+(instructions?|prompts?|messages?)/gi,\n  /disregard\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)/gi,\n  /forget\\s+(all\\s+|the\\s+|everything\\s+)?(previous|above|prior|you were told)/gi,\n  /you\\s+are\\s+now\\b/gi,\n  /reveal\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt|prompts?)/gi,\n  /(print|show|repeat)\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt)/gi,\n  /act\\s+as\\s+(an?\\s+)?(system|admin|administrator|developer|root)\\b/gi,\n  /<\\/?(system|assistant|tool)\\b[^>]*>/gi,\n  /\\bBEGIN\\s+SYSTEM\\b/gi,\n];\n\nexport function guardrailsEnabled(): boolean {\n  return process.env[\"DXCRM_GUARDRAILS\"] === \"on\";\n}\n\nexport function detectPromptInjection(text: string): { flagged: boolean; matches: string[] } {\n  const matches: string[] = [];\n  for (const re of INJECTION_PATTERNS) {\n    re.lastIndex = 0;\n    const found = text.match(re);\n    if (found) matches.push(...found);\n  }\n  return { flagged: matches.length > 0, matches };\n}\n\n/** Replace known injection spans with a [filtered] marker, keeping other text. */\nexport function neutralizeUntrusted(text: string): string {\n  let out = text;\n  for (const re of INJECTION_PATTERNS) {\n    out = out.replace(re, \"[filtered]\");\n  }\n  return out;\n}\n","import { piiMaskingEnabled } from \"./pii.js\";\nimport { guardrailsEnabled } from \"./guardrails.js\";\n\n/**\n * Compliance hardening (domino D17 / §3): the cross-cutting governance layer.\n *  - EU-AI-Act Art. 50 transparency: a localized disclosure that AI generated\n *    the content, on by default (opt-out), wrappable around any generated text.\n *  - Provider-agnostic LLM selection so the workspace can run against a local,\n *    self-hosted model (Ollama / OpenAI-compatible) as a data-residency moat —\n *    no customer data leaves the machine. The provider runtime itself stays in\n *    the agent framework; here we only resolve and expose the configuration.\n *  - A single read-out of the active privacy/compliance posture.\n */\nexport type DisclosureLang = \"de\" | \"en\";\n\nexport type LlmProviderName = \"anthropic\" | \"ollama\" | \"openai\" | \"local\";\n\nconst DISCLOSURES: Record<DisclosureLang, string> = {\n  de: \"Hinweis: Dieser Inhalt wurde mithilfe von KI erstellt (EU-AI-Act Art. 50).\",\n  en: \"Note: This content was generated with the help of AI (EU AI Act Art. 50).\",\n};\n\n/** Localized Art. 50 disclosure string. */\nexport function aiDisclosure(lang: DisclosureLang = \"de\"): string {\n  return DISCLOSURES[lang] ?? DISCLOSURES.en;\n}\n\n/** Disclosure is ON by default (Art. 50); opt out with DXCRM_AI_DISCLOSURE=off. */\nexport function aiDisclosureEnabled(): boolean {\n  return process.env[\"DXCRM_AI_DISCLOSURE\"] !== \"off\";\n}\n\n/** Prepend the Art. 50 disclosure to generated content (unless disabled). */\nexport function labelAiContent(\n  text: string,\n  opts: { lang?: DisclosureLang; enabled?: boolean } = {}\n): string {\n  const enabled = opts.enabled ?? aiDisclosureEnabled();\n  if (!enabled) return text;\n  const lang = opts.lang ?? ((process.env[\"DXCRM_AI_DISCLOSURE_LANG\"] as DisclosureLang) || \"de\");\n  return `${aiDisclosure(lang)}\\n\\n${text}`;\n}\n\n/** Resolve the configured LLM provider (default Anthropic). */\nexport function llmProvider(): LlmProviderName {\n  const p = (process.env[\"DXCRM_LLM_PROVIDER\"] ?? \"anthropic\").toLowerCase();\n  if (p === \"ollama\" || p === \"openai\" || p === \"local\") return p;\n  return \"anthropic\";\n}\n\nexport interface LocalLlmConfig {\n  baseUrl: string;\n  model: string;\n}\n\n/** OpenAI-compatible local endpoint config (Ollama defaults), env-overridable. */\nexport function localLlmConfig(): LocalLlmConfig {\n  return {\n    baseUrl: process.env[\"DXCRM_LLM_BASE_URL\"] ?? \"http://127.0.0.1:11434/v1\",\n    model: process.env[\"DXCRM_LLM_MODEL\"] ?? \"llama3.1\",\n  };\n}\n\nexport interface ComplianceConfig {\n  provider: LlmProviderName;\n  local: LocalLlmConfig | null;\n  aiDisclosure: boolean;\n  piiMasking: boolean;\n  guardrails: boolean;\n}\n\n/** A single read-out of the active privacy/compliance posture. */\nexport function complianceConfig(): ComplianceConfig {\n  const provider = llmProvider();\n  return {\n    provider,\n    local: provider === \"anthropic\" ? null : localLlmConfig(),\n    aiDisclosure: aiDisclosureEnabled(),\n    piiMasking: piiMaskingEnabled(),\n    guardrails: guardrailsEnabled(),\n  };\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,WAAW;AAEjB,MAAM,WAAW;AAOjB,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,yBAAyB;AAC9C;AAEA,SAAgB,QAAQ,OAA2B;CACjD,MAAM,0BAAU,IAAI,IAAoB;CACxC,IAAI,aAAa;CACjB,IAAI,aAAa;CAEjB,IAAI,SAAS,MAAM,QAAQ,WAAW,UAAU;EAC9C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,SAAS,OAAO,QAAQ,WAAW,UAAU;EAE3C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,MAAM,0BAAU,IAAI,IAAoB;CACxC,KAAK,MAAM,CAAC,MAAM,OAAO,SAAS,QAAQ,IAAI,IAAI,IAAI;CAEtD,MAAM,UAAU,SAAyB;EACvC,IAAI,MAAM;EACV,KAAK,MAAM,CAAC,IAAI,SAAS,SAAS,MAAM,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI;EAC/D,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAO;AAC1B;;;;;;;;AChDA,MAAM,qBAA+B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;;AAaA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,MAAM;CACV,KAAK,MAAM,MAAM,oBACf,MAAM,IAAI,QAAQ,IAAI,YAAY;CAEpC,OAAO;AACT;;;;;;;;;;ACtBA,MAAM,cAA8C;CAClD,IAAI;CACJ,IAAI;AACN;;AAGA,SAAgB,aAAa,OAAuB,MAAc;CAChE,OAAO,YAAY,SAAS,YAAY;AAC1C;;AAGA,SAAgB,sBAA+B;CAC7C,OAAO,QAAQ,IAAI,2BAA2B;AAChD;;AAGA,SAAgB,eACd,MACA,OAAqD,CAAC,GAC9C;CAER,IAAI,EADY,KAAK,WAAW,oBAAoB,IACtC,OAAO;CAErB,OAAO,GAAG,aADG,KAAK,SAAU,QAAQ,IAAI,+BAAkD,KAC/D,EAAE,MAAM;AACrC;;AAGA,SAAgB,cAA+B;CAC7C,MAAM,KAAK,QAAQ,IAAI,yBAAyB,aAAa,YAAY;CACzE,IAAI,MAAM,YAAY,MAAM,YAAY,MAAM,SAAS,OAAO;CAC9D,OAAO;AACT;;AAQA,SAAgB,iBAAiC;CAC/C,OAAO;EACL,SAAS,QAAQ,IAAI,yBAAyB;EAC9C,OAAO,QAAQ,IAAI,sBAAsB;CAC3C;AACF"}
+{"version":3,"file":"compliance-kq0xHRw3.js","names":[],"sources":["../src/core/pii.ts","../src/core/guardrails.ts","../src/core/compliance.ts"],"sourcesContent":["/**\n * Lightweight PII masking for LLM calls (Einstein-Trust-Layer-style).\n * Replaces emails and phone numbers with stable placeholders before text is\n * sent to an LLM, and can restore them in the response. Opt-in via\n * DXCRM_PII_MASKING=on so default behaviour and quality are unchanged.\n */\n\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}/g;\n// Phone: optional +, then 7+ digits possibly grouped by spaces/dashes/parens.\nconst PHONE_RE = /\\+?\\d[\\d\\s().-]{6,}\\d/g;\n\nexport interface MaskedText {\n  masked: string;\n  unmask: (text: string) => string;\n}\n\nexport function piiMaskingEnabled(): boolean {\n  return process.env[\"DXCRM_PII_MASKING\"] === \"on\";\n}\n\nexport function maskPii(input: string): MaskedText {\n  const mapping = new Map<string, string>(); // original -> placeholder\n  let emailCount = 0;\n  let phoneCount = 0;\n\n  let masked = input.replace(EMAIL_RE, (match) => {\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[EMAIL_${emailCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  masked = masked.replace(PHONE_RE, (match) => {\n    // Ignore very short numeric runs that slipped through (already handled by {6,}).\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[PHONE_${phoneCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  const reverse = new Map<string, string>(); // placeholder -> original\n  for (const [orig, ph] of mapping) reverse.set(ph, orig);\n\n  const unmask = (text: string): string => {\n    let out = text;\n    for (const [ph, orig] of reverse) out = out.split(ph).join(orig);\n    return out;\n  };\n\n  return { masked, unmask };\n}\n","/**\n * Guardrails against (indirect) prompt injection in untrusted CRM content\n * (emails, transcripts, imported notes). Detection is always available;\n * neutralization is applied to LLM inputs when DXCRM_GUARDRAILS=on.\n */\n\nconst INJECTION_PATTERNS: RegExp[] = [\n  /ignore\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)\\s+(instructions?|prompts?|messages?)/gi,\n  /disregard\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)/gi,\n  /forget\\s+(all\\s+|the\\s+|everything\\s+)?(previous|above|prior|you were told)/gi,\n  /you\\s+are\\s+now\\b/gi,\n  /reveal\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt|prompts?)/gi,\n  /(print|show|repeat)\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt)/gi,\n  /act\\s+as\\s+(an?\\s+)?(system|admin|administrator|developer|root)\\b/gi,\n  /<\\/?(system|assistant|tool)\\b[^>]*>/gi,\n  /\\bBEGIN\\s+SYSTEM\\b/gi,\n];\n\nexport function guardrailsEnabled(): boolean {\n  return process.env[\"DXCRM_GUARDRAILS\"] === \"on\";\n}\n\nexport function detectPromptInjection(text: string): { flagged: boolean; matches: string[] } {\n  const matches: string[] = [];\n  for (const re of INJECTION_PATTERNS) {\n    re.lastIndex = 0;\n    const found = text.match(re);\n    if (found) matches.push(...found);\n  }\n  return { flagged: matches.length > 0, matches };\n}\n\n/** Replace known injection spans with a [filtered] marker, keeping other text. */\nexport function neutralizeUntrusted(text: string): string {\n  let out = text;\n  for (const re of INJECTION_PATTERNS) {\n    out = out.replace(re, \"[filtered]\");\n  }\n  return out;\n}\n","import { piiMaskingEnabled } from \"./pii.js\";\nimport { guardrailsEnabled } from \"./guardrails.js\";\n\n/**\n * Compliance hardening (domino D17 / §3): the cross-cutting governance layer.\n *  - EU-AI-Act Art. 50 transparency: a localized disclosure that AI generated\n *    the content, on by default (opt-out), wrappable around any generated text.\n *  - Provider-agnostic LLM selection so the workspace can run against a local,\n *    self-hosted model (Ollama / OpenAI-compatible) as a data-residency moat —\n *    no customer data leaves the machine. The provider runtime itself stays in\n *    the agent framework; here we only resolve and expose the configuration.\n *  - A single read-out of the active privacy/compliance posture.\n */\nexport type DisclosureLang = \"de\" | \"en\";\n\nexport type LlmProviderName = \"anthropic\" | \"ollama\" | \"openai\" | \"local\";\n\nconst DISCLOSURES: Record<DisclosureLang, string> = {\n  de: \"Hinweis: Dieser Inhalt wurde mithilfe von KI erstellt (EU-AI-Act Art. 50).\",\n  en: \"Note: This content was generated with the help of AI (EU AI Act Art. 50).\",\n};\n\n/** Localized Art. 50 disclosure string. */\nexport function aiDisclosure(lang: DisclosureLang = \"en\"): string {\n  return DISCLOSURES[lang] ?? DISCLOSURES.en;\n}\n\n/** Disclosure is ON by default (Art. 50); opt out with DXCRM_AI_DISCLOSURE=off. */\nexport function aiDisclosureEnabled(): boolean {\n  return process.env[\"DXCRM_AI_DISCLOSURE\"] !== \"off\";\n}\n\n/** Prepend the Art. 50 disclosure to generated content (unless disabled). */\nexport function labelAiContent(\n  text: string,\n  opts: { lang?: DisclosureLang; enabled?: boolean } = {}\n): string {\n  const enabled = opts.enabled ?? aiDisclosureEnabled();\n  if (!enabled) return text;\n  const lang = opts.lang ?? ((process.env[\"DXCRM_AI_DISCLOSURE_LANG\"] as DisclosureLang) || \"en\");\n  return `${aiDisclosure(lang)}\\n\\n${text}`;\n}\n\n/** Resolve the configured LLM provider (default Anthropic). */\nexport function llmProvider(): LlmProviderName {\n  const p = (process.env[\"DXCRM_LLM_PROVIDER\"] ?? \"anthropic\").toLowerCase();\n  if (p === \"ollama\" || p === \"openai\" || p === \"local\") return p;\n  return \"anthropic\";\n}\n\nexport interface LocalLlmConfig {\n  baseUrl: string;\n  model: string;\n}\n\n/** OpenAI-compatible local endpoint config (Ollama defaults), env-overridable. */\nexport function localLlmConfig(): LocalLlmConfig {\n  return {\n    baseUrl: process.env[\"DXCRM_LLM_BASE_URL\"] ?? \"http://127.0.0.1:11434/v1\",\n    model: process.env[\"DXCRM_LLM_MODEL\"] ?? \"llama3.1\",\n  };\n}\n\nexport interface ComplianceConfig {\n  provider: LlmProviderName;\n  local: LocalLlmConfig | null;\n  aiDisclosure: boolean;\n  piiMasking: boolean;\n  guardrails: boolean;\n}\n\n/** A single read-out of the active privacy/compliance posture. */\nexport function complianceConfig(): ComplianceConfig {\n  const provider = llmProvider();\n  return {\n    provider,\n    local: provider === \"anthropic\" ? null : localLlmConfig(),\n    aiDisclosure: aiDisclosureEnabled(),\n    piiMasking: piiMaskingEnabled(),\n    guardrails: guardrailsEnabled(),\n  };\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,WAAW;AAEjB,MAAM,WAAW;AAOjB,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,yBAAyB;AAC9C;AAEA,SAAgB,QAAQ,OAA2B;CACjD,MAAM,0BAAU,IAAI,IAAoB;CACxC,IAAI,aAAa;CACjB,IAAI,aAAa;CAEjB,IAAI,SAAS,MAAM,QAAQ,WAAW,UAAU;EAC9C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,SAAS,OAAO,QAAQ,WAAW,UAAU;EAE3C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,MAAM,0BAAU,IAAI,IAAoB;CACxC,KAAK,MAAM,CAAC,MAAM,OAAO,SAAS,QAAQ,IAAI,IAAI,IAAI;CAEtD,MAAM,UAAU,SAAyB;EACvC,IAAI,MAAM;EACV,KAAK,MAAM,CAAC,IAAI,SAAS,SAAS,MAAM,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI;EAC/D,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAO;AAC1B;;;;;;;;AChDA,MAAM,qBAA+B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;;AAaA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,MAAM;CACV,KAAK,MAAM,MAAM,oBACf,MAAM,IAAI,QAAQ,IAAI,YAAY;CAEpC,OAAO;AACT;;;;;;;;;;ACtBA,MAAM,cAA8C;CAClD,IAAI;CACJ,IAAI;AACN;;AAGA,SAAgB,aAAa,OAAuB,MAAc;CAChE,OAAO,YAAY,SAAS,YAAY;AAC1C;;AAGA,SAAgB,sBAA+B;CAC7C,OAAO,QAAQ,IAAI,2BAA2B;AAChD;;AAGA,SAAgB,eACd,MACA,OAAqD,CAAC,GAC9C;CAER,IAAI,EADY,KAAK,WAAW,oBAAoB,IACtC,OAAO;CAErB,OAAO,GAAG,aADG,KAAK,SAAU,QAAQ,IAAI,+BAAkD,KAC/D,EAAE,MAAM;AACrC;;AAGA,SAAgB,cAA+B;CAC7C,MAAM,KAAK,QAAQ,IAAI,yBAAyB,aAAa,YAAY;CACzE,IAAI,MAAM,YAAY,MAAM,YAAY,MAAM,SAAS,OAAO;CAC9D,OAAO;AACT;;AAQA,SAAgB,iBAAiC;CAC/C,OAAO;EACL,SAAS,QAAQ,IAAI,yBAAyB;EAC9C,OAAO,QAAQ,IAAI,sBAAsB;CAC3C;AACF"}

package/dist/{compliance-B91zNvCR.cjs → compliance-pAj9FcGI.cjs}

@@ -84,7 +84,7 @@ const DISCLOSURES = {
 	en: "Note: This content was generated with the help of AI (EU AI Act Art. 50)."
 };
 /** Localized Art. 50 disclosure string. */
-function aiDisclosure(lang = "de") {
+function aiDisclosure(lang = "en") {
 	return DISCLOSURES[lang] ?? DISCLOSURES.en;
 }
 /** Disclosure is ON by default (Art. 50); opt out with DXCRM_AI_DISCLOSURE=off. */
@@ -94,7 +94,7 @@ function aiDisclosureEnabled() {
 /** Prepend the Art. 50 disclosure to generated content (unless disabled). */
 function labelAiContent(text, opts = {}) {
 	if (!(opts.enabled ?? aiDisclosureEnabled())) return text;
-	return `${aiDisclosure(opts.lang ?? (process.env["DXCRM_AI_DISCLOSURE_LANG"] || "de"))}\n\n${text}`;
+	return `${aiDisclosure(opts.lang ?? (process.env["DXCRM_AI_DISCLOSURE_LANG"] || "en"))}\n\n${text}`;
 }
 /** Resolve the configured LLM provider (default Anthropic). */
 function llmProvider() {
@@ -153,4 +153,4 @@ Object.defineProperty(exports, "piiMaskingEnabled", {
 	}
 });
 
-//# sourceMappingURL=compliance-B91zNvCR.cjs.map
+//# sourceMappingURL=compliance-pAj9FcGI.cjs.map

package/dist/{compliance-B91zNvCR.cjs.map → compliance-pAj9FcGI.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"compliance-B91zNvCR.cjs","names":[],"sources":["../src/core/pii.ts","../src/core/guardrails.ts","../src/core/compliance.ts"],"sourcesContent":["/**\n * Lightweight PII masking for LLM calls (Einstein-Trust-Layer-style).\n * Replaces emails and phone numbers with stable placeholders before text is\n * sent to an LLM, and can restore them in the response. Opt-in via\n * DXCRM_PII_MASKING=on so default behaviour and quality are unchanged.\n */\n\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}/g;\n// Phone: optional +, then 7+ digits possibly grouped by spaces/dashes/parens.\nconst PHONE_RE = /\\+?\\d[\\d\\s().-]{6,}\\d/g;\n\nexport interface MaskedText {\n  masked: string;\n  unmask: (text: string) => string;\n}\n\nexport function piiMaskingEnabled(): boolean {\n  return process.env[\"DXCRM_PII_MASKING\"] === \"on\";\n}\n\nexport function maskPii(input: string): MaskedText {\n  const mapping = new Map<string, string>(); // original -> placeholder\n  let emailCount = 0;\n  let phoneCount = 0;\n\n  let masked = input.replace(EMAIL_RE, (match) => {\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[EMAIL_${emailCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  masked = masked.replace(PHONE_RE, (match) => {\n    // Ignore very short numeric runs that slipped through (already handled by {6,}).\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[PHONE_${phoneCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  const reverse = new Map<string, string>(); // placeholder -> original\n  for (const [orig, ph] of mapping) reverse.set(ph, orig);\n\n  const unmask = (text: string): string => {\n    let out = text;\n    for (const [ph, orig] of reverse) out = out.split(ph).join(orig);\n    return out;\n  };\n\n  return { masked, unmask };\n}\n","/**\n * Guardrails against (indirect) prompt injection in untrusted CRM content\n * (emails, transcripts, imported notes). Detection is always available;\n * neutralization is applied to LLM inputs when DXCRM_GUARDRAILS=on.\n */\n\nconst INJECTION_PATTERNS: RegExp[] = [\n  /ignore\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)\\s+(instructions?|prompts?|messages?)/gi,\n  /disregard\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)/gi,\n  /forget\\s+(all\\s+|the\\s+|everything\\s+)?(previous|above|prior|you were told)/gi,\n  /you\\s+are\\s+now\\b/gi,\n  /reveal\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt|prompts?)/gi,\n  /(print|show|repeat)\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt)/gi,\n  /act\\s+as\\s+(an?\\s+)?(system|admin|administrator|developer|root)\\b/gi,\n  /<\\/?(system|assistant|tool)\\b[^>]*>/gi,\n  /\\bBEGIN\\s+SYSTEM\\b/gi,\n];\n\nexport function guardrailsEnabled(): boolean {\n  return process.env[\"DXCRM_GUARDRAILS\"] === \"on\";\n}\n\nexport function detectPromptInjection(text: string): { flagged: boolean; matches: string[] } {\n  const matches: string[] = [];\n  for (const re of INJECTION_PATTERNS) {\n    re.lastIndex = 0;\n    const found = text.match(re);\n    if (found) matches.push(...found);\n  }\n  return { flagged: matches.length > 0, matches };\n}\n\n/** Replace known injection spans with a [filtered] marker, keeping other text. */\nexport function neutralizeUntrusted(text: string): string {\n  let out = text;\n  for (const re of INJECTION_PATTERNS) {\n    out = out.replace(re, \"[filtered]\");\n  }\n  return out;\n}\n","import { piiMaskingEnabled } from \"./pii.js\";\nimport { guardrailsEnabled } from \"./guardrails.js\";\n\n/**\n * Compliance hardening (domino D17 / §3): the cross-cutting governance layer.\n *  - EU-AI-Act Art. 50 transparency: a localized disclosure that AI generated\n *    the content, on by default (opt-out), wrappable around any generated text.\n *  - Provider-agnostic LLM selection so the workspace can run against a local,\n *    self-hosted model (Ollama / OpenAI-compatible) as a data-residency moat —\n *    no customer data leaves the machine. The provider runtime itself stays in\n *    the agent framework; here we only resolve and expose the configuration.\n *  - A single read-out of the active privacy/compliance posture.\n */\nexport type DisclosureLang = \"de\" | \"en\";\n\nexport type LlmProviderName = \"anthropic\" | \"ollama\" | \"openai\" | \"local\";\n\nconst DISCLOSURES: Record<DisclosureLang, string> = {\n  de: \"Hinweis: Dieser Inhalt wurde mithilfe von KI erstellt (EU-AI-Act Art. 50).\",\n  en: \"Note: This content was generated with the help of AI (EU AI Act Art. 50).\",\n};\n\n/** Localized Art. 50 disclosure string. */\nexport function aiDisclosure(lang: DisclosureLang = \"de\"): string {\n  return DISCLOSURES[lang] ?? DISCLOSURES.en;\n}\n\n/** Disclosure is ON by default (Art. 50); opt out with DXCRM_AI_DISCLOSURE=off. */\nexport function aiDisclosureEnabled(): boolean {\n  return process.env[\"DXCRM_AI_DISCLOSURE\"] !== \"off\";\n}\n\n/** Prepend the Art. 50 disclosure to generated content (unless disabled). */\nexport function labelAiContent(\n  text: string,\n  opts: { lang?: DisclosureLang; enabled?: boolean } = {}\n): string {\n  const enabled = opts.enabled ?? aiDisclosureEnabled();\n  if (!enabled) return text;\n  const lang = opts.lang ?? ((process.env[\"DXCRM_AI_DISCLOSURE_LANG\"] as DisclosureLang) || \"de\");\n  return `${aiDisclosure(lang)}\\n\\n${text}`;\n}\n\n/** Resolve the configured LLM provider (default Anthropic). */\nexport function llmProvider(): LlmProviderName {\n  const p = (process.env[\"DXCRM_LLM_PROVIDER\"] ?? \"anthropic\").toLowerCase();\n  if (p === \"ollama\" || p === \"openai\" || p === \"local\") return p;\n  return \"anthropic\";\n}\n\nexport interface LocalLlmConfig {\n  baseUrl: string;\n  model: string;\n}\n\n/** OpenAI-compatible local endpoint config (Ollama defaults), env-overridable. */\nexport function localLlmConfig(): LocalLlmConfig {\n  return {\n    baseUrl: process.env[\"DXCRM_LLM_BASE_URL\"] ?? \"http://127.0.0.1:11434/v1\",\n    model: process.env[\"DXCRM_LLM_MODEL\"] ?? \"llama3.1\",\n  };\n}\n\nexport interface ComplianceConfig {\n  provider: LlmProviderName;\n  local: LocalLlmConfig | null;\n  aiDisclosure: boolean;\n  piiMasking: boolean;\n  guardrails: boolean;\n}\n\n/** A single read-out of the active privacy/compliance posture. */\nexport function complianceConfig(): ComplianceConfig {\n  const provider = llmProvider();\n  return {\n    provider,\n    local: provider === \"anthropic\" ? null : localLlmConfig(),\n    aiDisclosure: aiDisclosureEnabled(),\n    piiMasking: piiMaskingEnabled(),\n    guardrails: guardrailsEnabled(),\n  };\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,WAAW;AAEjB,MAAM,WAAW;AAOjB,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,yBAAyB;AAC9C;AAEA,SAAgB,QAAQ,OAA2B;CACjD,MAAM,0BAAU,IAAI,IAAoB;CACxC,IAAI,aAAa;CACjB,IAAI,aAAa;CAEjB,IAAI,SAAS,MAAM,QAAQ,WAAW,UAAU;EAC9C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,SAAS,OAAO,QAAQ,WAAW,UAAU;EAE3C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,MAAM,0BAAU,IAAI,IAAoB;CACxC,KAAK,MAAM,CAAC,MAAM,OAAO,SAAS,QAAQ,IAAI,IAAI,IAAI;CAEtD,MAAM,UAAU,SAAyB;EACvC,IAAI,MAAM;EACV,KAAK,MAAM,CAAC,IAAI,SAAS,SAAS,MAAM,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI;EAC/D,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAO;AAC1B;;;;;;;;AChDA,MAAM,qBAA+B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;;AAaA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,MAAM;CACV,KAAK,MAAM,MAAM,oBACf,MAAM,IAAI,QAAQ,IAAI,YAAY;CAEpC,OAAO;AACT;;;;;;;;;;ACtBA,MAAM,cAA8C;CAClD,IAAI;CACJ,IAAI;AACN;;AAGA,SAAgB,aAAa,OAAuB,MAAc;CAChE,OAAO,YAAY,SAAS,YAAY;AAC1C;;AAGA,SAAgB,sBAA+B;CAC7C,OAAO,QAAQ,IAAI,2BAA2B;AAChD;;AAGA,SAAgB,eACd,MACA,OAAqD,CAAC,GAC9C;CAER,IAAI,EADY,KAAK,WAAW,oBAAoB,IACtC,OAAO;CAErB,OAAO,GAAG,aADG,KAAK,SAAU,QAAQ,IAAI,+BAAkD,KAC/D,EAAE,MAAM;AACrC;;AAGA,SAAgB,cAA+B;CAC7C,MAAM,KAAK,QAAQ,IAAI,yBAAyB,aAAa,YAAY;CACzE,IAAI,MAAM,YAAY,MAAM,YAAY,MAAM,SAAS,OAAO;CAC9D,OAAO;AACT;;AAQA,SAAgB,iBAAiC;CAC/C,OAAO;EACL,SAAS,QAAQ,IAAI,yBAAyB;EAC9C,OAAO,QAAQ,IAAI,sBAAsB;CAC3C;AACF"}
+{"version":3,"file":"compliance-pAj9FcGI.cjs","names":[],"sources":["../src/core/pii.ts","../src/core/guardrails.ts","../src/core/compliance.ts"],"sourcesContent":["/**\n * Lightweight PII masking for LLM calls (Einstein-Trust-Layer-style).\n * Replaces emails and phone numbers with stable placeholders before text is\n * sent to an LLM, and can restore them in the response. Opt-in via\n * DXCRM_PII_MASKING=on so default behaviour and quality are unchanged.\n */\n\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}/g;\n// Phone: optional +, then 7+ digits possibly grouped by spaces/dashes/parens.\nconst PHONE_RE = /\\+?\\d[\\d\\s().-]{6,}\\d/g;\n\nexport interface MaskedText {\n  masked: string;\n  unmask: (text: string) => string;\n}\n\nexport function piiMaskingEnabled(): boolean {\n  return process.env[\"DXCRM_PII_MASKING\"] === \"on\";\n}\n\nexport function maskPii(input: string): MaskedText {\n  const mapping = new Map<string, string>(); // original -> placeholder\n  let emailCount = 0;\n  let phoneCount = 0;\n\n  let masked = input.replace(EMAIL_RE, (match) => {\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[EMAIL_${emailCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  masked = masked.replace(PHONE_RE, (match) => {\n    // Ignore very short numeric runs that slipped through (already handled by {6,}).\n    let ph = mapping.get(match);\n    if (!ph) {\n      ph = `[PHONE_${phoneCount++}]`;\n      mapping.set(match, ph);\n    }\n    return ph;\n  });\n\n  const reverse = new Map<string, string>(); // placeholder -> original\n  for (const [orig, ph] of mapping) reverse.set(ph, orig);\n\n  const unmask = (text: string): string => {\n    let out = text;\n    for (const [ph, orig] of reverse) out = out.split(ph).join(orig);\n    return out;\n  };\n\n  return { masked, unmask };\n}\n","/**\n * Guardrails against (indirect) prompt injection in untrusted CRM content\n * (emails, transcripts, imported notes). Detection is always available;\n * neutralization is applied to LLM inputs when DXCRM_GUARDRAILS=on.\n */\n\nconst INJECTION_PATTERNS: RegExp[] = [\n  /ignore\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)\\s+(instructions?|prompts?|messages?)/gi,\n  /disregard\\s+(all\\s+|the\\s+|any\\s+)?(previous|above|prior|preceding)/gi,\n  /forget\\s+(all\\s+|the\\s+|everything\\s+)?(previous|above|prior|you were told)/gi,\n  /you\\s+are\\s+now\\b/gi,\n  /reveal\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt|prompts?)/gi,\n  /(print|show|repeat)\\s+(your|the)\\s+(system\\s+)?(instructions?|prompt)/gi,\n  /act\\s+as\\s+(an?\\s+)?(system|admin|administrator|developer|root)\\b/gi,\n  /<\\/?(system|assistant|tool)\\b[^>]*>/gi,\n  /\\bBEGIN\\s+SYSTEM\\b/gi,\n];\n\nexport function guardrailsEnabled(): boolean {\n  return process.env[\"DXCRM_GUARDRAILS\"] === \"on\";\n}\n\nexport function detectPromptInjection(text: string): { flagged: boolean; matches: string[] } {\n  const matches: string[] = [];\n  for (const re of INJECTION_PATTERNS) {\n    re.lastIndex = 0;\n    const found = text.match(re);\n    if (found) matches.push(...found);\n  }\n  return { flagged: matches.length > 0, matches };\n}\n\n/** Replace known injection spans with a [filtered] marker, keeping other text. */\nexport function neutralizeUntrusted(text: string): string {\n  let out = text;\n  for (const re of INJECTION_PATTERNS) {\n    out = out.replace(re, \"[filtered]\");\n  }\n  return out;\n}\n","import { piiMaskingEnabled } from \"./pii.js\";\nimport { guardrailsEnabled } from \"./guardrails.js\";\n\n/**\n * Compliance hardening (domino D17 / §3): the cross-cutting governance layer.\n *  - EU-AI-Act Art. 50 transparency: a localized disclosure that AI generated\n *    the content, on by default (opt-out), wrappable around any generated text.\n *  - Provider-agnostic LLM selection so the workspace can run against a local,\n *    self-hosted model (Ollama / OpenAI-compatible) as a data-residency moat —\n *    no customer data leaves the machine. The provider runtime itself stays in\n *    the agent framework; here we only resolve and expose the configuration.\n *  - A single read-out of the active privacy/compliance posture.\n */\nexport type DisclosureLang = \"de\" | \"en\";\n\nexport type LlmProviderName = \"anthropic\" | \"ollama\" | \"openai\" | \"local\";\n\nconst DISCLOSURES: Record<DisclosureLang, string> = {\n  de: \"Hinweis: Dieser Inhalt wurde mithilfe von KI erstellt (EU-AI-Act Art. 50).\",\n  en: \"Note: This content was generated with the help of AI (EU AI Act Art. 50).\",\n};\n\n/** Localized Art. 50 disclosure string. */\nexport function aiDisclosure(lang: DisclosureLang = \"en\"): string {\n  return DISCLOSURES[lang] ?? DISCLOSURES.en;\n}\n\n/** Disclosure is ON by default (Art. 50); opt out with DXCRM_AI_DISCLOSURE=off. */\nexport function aiDisclosureEnabled(): boolean {\n  return process.env[\"DXCRM_AI_DISCLOSURE\"] !== \"off\";\n}\n\n/** Prepend the Art. 50 disclosure to generated content (unless disabled). */\nexport function labelAiContent(\n  text: string,\n  opts: { lang?: DisclosureLang; enabled?: boolean } = {}\n): string {\n  const enabled = opts.enabled ?? aiDisclosureEnabled();\n  if (!enabled) return text;\n  const lang = opts.lang ?? ((process.env[\"DXCRM_AI_DISCLOSURE_LANG\"] as DisclosureLang) || \"en\");\n  return `${aiDisclosure(lang)}\\n\\n${text}`;\n}\n\n/** Resolve the configured LLM provider (default Anthropic). */\nexport function llmProvider(): LlmProviderName {\n  const p = (process.env[\"DXCRM_LLM_PROVIDER\"] ?? \"anthropic\").toLowerCase();\n  if (p === \"ollama\" || p === \"openai\" || p === \"local\") return p;\n  return \"anthropic\";\n}\n\nexport interface LocalLlmConfig {\n  baseUrl: string;\n  model: string;\n}\n\n/** OpenAI-compatible local endpoint config (Ollama defaults), env-overridable. */\nexport function localLlmConfig(): LocalLlmConfig {\n  return {\n    baseUrl: process.env[\"DXCRM_LLM_BASE_URL\"] ?? \"http://127.0.0.1:11434/v1\",\n    model: process.env[\"DXCRM_LLM_MODEL\"] ?? \"llama3.1\",\n  };\n}\n\nexport interface ComplianceConfig {\n  provider: LlmProviderName;\n  local: LocalLlmConfig | null;\n  aiDisclosure: boolean;\n  piiMasking: boolean;\n  guardrails: boolean;\n}\n\n/** A single read-out of the active privacy/compliance posture. */\nexport function complianceConfig(): ComplianceConfig {\n  const provider = llmProvider();\n  return {\n    provider,\n    local: provider === \"anthropic\" ? null : localLlmConfig(),\n    aiDisclosure: aiDisclosureEnabled(),\n    piiMasking: piiMaskingEnabled(),\n    guardrails: guardrailsEnabled(),\n  };\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,WAAW;AAEjB,MAAM,WAAW;AAOjB,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,yBAAyB;AAC9C;AAEA,SAAgB,QAAQ,OAA2B;CACjD,MAAM,0BAAU,IAAI,IAAoB;CACxC,IAAI,aAAa;CACjB,IAAI,aAAa;CAEjB,IAAI,SAAS,MAAM,QAAQ,WAAW,UAAU;EAC9C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,SAAS,OAAO,QAAQ,WAAW,UAAU;EAE3C,IAAI,KAAK,QAAQ,IAAI,KAAK;EAC1B,IAAI,CAAC,IAAI;GACP,KAAK,UAAU,aAAa;GAC5B,QAAQ,IAAI,OAAO,EAAE;EACvB;EACA,OAAO;CACT,CAAC;CAED,MAAM,0BAAU,IAAI,IAAoB;CACxC,KAAK,MAAM,CAAC,MAAM,OAAO,SAAS,QAAQ,IAAI,IAAI,IAAI;CAEtD,MAAM,UAAU,SAAyB;EACvC,IAAI,MAAM;EACV,KAAK,MAAM,CAAC,IAAI,SAAS,SAAS,MAAM,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI;EAC/D,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAO;AAC1B;;;;;;;;AChDA,MAAM,qBAA+B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;;AAaA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,MAAM;CACV,KAAK,MAAM,MAAM,oBACf,MAAM,IAAI,QAAQ,IAAI,YAAY;CAEpC,OAAO;AACT;;;;;;;;;;ACtBA,MAAM,cAA8C;CAClD,IAAI;CACJ,IAAI;AACN;;AAGA,SAAgB,aAAa,OAAuB,MAAc;CAChE,OAAO,YAAY,SAAS,YAAY;AAC1C;;AAGA,SAAgB,sBAA+B;CAC7C,OAAO,QAAQ,IAAI,2BAA2B;AAChD;;AAGA,SAAgB,eACd,MACA,OAAqD,CAAC,GAC9C;CAER,IAAI,EADY,KAAK,WAAW,oBAAoB,IACtC,OAAO;CAErB,OAAO,GAAG,aADG,KAAK,SAAU,QAAQ,IAAI,+BAAkD,KAC/D,EAAE,MAAM;AACrC;;AAGA,SAAgB,cAA+B;CAC7C,MAAM,KAAK,QAAQ,IAAI,yBAAyB,aAAa,YAAY;CACzE,IAAI,MAAM,YAAY,MAAM,YAAY,MAAM,SAAS,OAAO;CAC9D,OAAO;AACT;;AAQA,SAAgB,iBAAiC;CAC/C,OAAO;EACL,SAAS,QAAQ,IAAI,yBAAyB;EAC9C,OAAO,QAAQ,IAAI,sBAAsB;CAC3C;AACF"}

package/dist/{context-builder-BzWAp3Zs.js → context-builder-7Uab5-G4.js}

@@ -1,3 +1,4 @@
+import { t as escapeRegExp } from "./regex-Jt5DatPi.js";
 import path from "path";
 import fs from "fs";
 import matter from "gray-matter";
@@ -15,7 +16,7 @@ function parsePipelineContent(filePath) {
 	return fs.readFileSync(filePath, "utf-8").trim();
 }
 function extractSection(content, sectionName) {
-	const match = new RegExp(`## ${sectionName}([\\s\\S]*?)(?=^## |$)`, "m").exec(content);
+	const match = new RegExp(`## ${escapeRegExp(sectionName)}([\\s\\S]*?)(?=^## |$)`, "m").exec(content);
 	return match ? (match[1] ?? "").trim() : "";
 }
 async function buildContext(dataDir, slug) {
@@ -93,4 +94,4 @@ async function buildContext(dataDir, slug) {
 //#endregion
 export { buildContext as t };
 
-//# sourceMappingURL=context-builder-BzWAp3Zs.js.map
+//# sourceMappingURL=context-builder-7Uab5-G4.js.map

package/dist/context-builder-7Uab5-G4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-builder-7Uab5-G4.js","names":[],"sources":["../src/core/context-builder.ts"],"sourcesContent":["import fs from \"fs\";\nimport path from \"path\";\nimport matter from \"gray-matter\";\nimport { escapeRegExp } from \"./regex.js\";\n\nconst MAX_INTERACTIONS = 10;\n\nfunction estimateTokens(text: string): number {\n  return Math.ceil(text.length / 4);\n}\n\nfunction parseRecentInteractions(filePath: string, limit: number): string {\n  if (!fs.existsSync(filePath)) return \"\";\n  const content = fs.readFileSync(filePath, \"utf-8\") as string;\n\n  // Split on ## date headings\n  const entries = content.split(/(?=^## \\d{4}-\\d{2}-\\d{2})/m).filter((e) => e.trim());\n  const recent = entries.slice(0, limit);\n  return recent.join(\"\\n\").trim();\n}\n\nfunction parsePipelineContent(filePath: string): string {\n  if (!fs.existsSync(filePath)) return \"\";\n  const content = fs.readFileSync(filePath, \"utf-8\") as string;\n  return content.trim();\n}\n\nfunction extractSection(content: string, sectionName: string): string {\n  const regex = new RegExp(`## ${escapeRegExp(sectionName)}([\\\\s\\\\S]*?)(?=^## |$)`, \"m\");\n  const match = regex.exec(content);\n  return match ? (match[1] ?? \"\").trim() : \"\";\n}\n\nexport async function buildContext(dataDir: string, slug: string): Promise<string> {\n  const customerDir = path.join(dataDir, \"customers\", slug);\n\n  if (!fs.existsSync(customerDir)) {\n    throw new Error(`Customer '${slug}' not found`);\n  }\n\n  const mainFactsPath = path.join(customerDir, \"main_facts.md\");\n  const interactionsPath = path.join(customerDir, \"interactions.md\");\n  const pipelinePath = path.join(customerDir, \"pipeline.md\");\n\n  // Read main_facts.md\n  let mainContent = \"\";\n  let frontmatterStr = \"\";\n  if (fs.existsSync(mainFactsPath)) {\n    const fileContent = fs.readFileSync(mainFactsPath, \"utf-8\") as string;\n    const raw = matter(fileContent);\n    mainContent = raw.content ?? \"\";\n    frontmatterStr = Object.entries(raw.data as Record<string, unknown>)\n      .map(([k, v]) => `${k}: ${JSON.stringify(v)}`)\n      .join(\"\\n\");\n  }\n\n  const quickRef = extractSection(mainContent, \"Quick Reference\");\n  const contacts = extractSection(mainContent, \"Contacts\");\n  const criticalContext = extractSection(mainContent, \"Critical Context\");\n  const openQuestions = extractSection(mainContent, \"Open Questions\");\n\n  const recentActivity = parseRecentInteractions(interactionsPath, MAX_INTERACTIONS);\n  const pipelineContent = parsePipelineContent(pipelinePath);\n\n  const sections: string[] = [\n    `# Customer Context: ${slug}`,\n    \"\",\n    \"## Metadata\",\n    frontmatterStr || \"(no metadata)\",\n    \"\",\n    \"## Quick Reference\",\n    quickRef || \"(not set)\",\n    \"\",\n    \"## Contacts\",\n    contacts || \"(not set)\",\n    \"\",\n    \"## Critical Context\",\n    criticalContext || \"(not set)\",\n    \"\",\n    \"## Recent Activity (last 10 interactions)\",\n    recentActivity || \"(no interactions yet)\",\n    \"\",\n    \"## Pipeline\",\n    pipelineContent || \"(no deals)\",\n    \"\",\n    \"## Open Questions\",\n    openQuestions || \"(none)\",\n  ];\n\n  const raw = sections.join(\"\\n\");\n  const tokenEstimate = estimateTokens(raw);\n\n  // If over 3000 tokens, trim interactions\n  if (tokenEstimate > 3000) {\n    const trimmedActivity = parseRecentInteractions(interactionsPath, 5);\n    const trimmedSections: string[] = [\n      `# Customer Context: ${slug}`,\n      \"\",\n      \"## Metadata\",\n      frontmatterStr || \"(no metadata)\",\n      \"\",\n      \"## Quick Reference\",\n      quickRef || \"(not set)\",\n      \"\",\n      \"## Contacts\",\n      contacts || \"(not set)\",\n      \"\",\n      \"## Critical Context\",\n      criticalContext || \"(not set)\",\n      \"\",\n      \"## Recent Activity (last 5 interactions — trimmed for token budget)\",\n      trimmedActivity || \"(no interactions yet)\",\n      \"\",\n      \"## Pipeline\",\n      pipelineContent || \"(no deals)\",\n      \"\",\n      \"## Open Questions\",\n      openQuestions || \"(none)\",\n    ];\n    return trimmedSections.join(\"\\n\");\n  }\n\n  return raw;\n}\n\n/** Robust section-body extractor: from a `## Name` heading to the next `## ` heading. */\nfunction sectionBody(content: string, name: string): string {\n  const lines = content.split(\"\\n\");\n  const start = lines.findIndex((l) => l.trim() === `## ${name}`);\n  if (start < 0) return \"\";\n  const body: string[] = [];\n  for (let i = start + 1; i < lines.length; i++) {\n    if (lines[i]!.startsWith(\"## \")) break;\n    body.push(lines[i]!);\n  }\n  return body.join(\"\\n\").trim();\n}\n\nexport interface ContextBlock {\n  slug: string;\n  metadata: Record<string, unknown>;\n  quickReference: string;\n  contacts: string;\n  criticalContext: string;\n  openQuestions: string;\n  recentActivity: string;\n  pipeline: string;\n}\n\n/**\n * Structured variant of buildContext (REF-2): returns a typed object instead of\n * a markdown string, for callers that need fields programmatically (e.g. MCP\n * responses, SDK consumers). buildContext remains the token-budgeted string form.\n */\nexport async function buildContextBlock(\n  dataDir: string,\n  slug: string,\n  role?: \"admin\" | \"manager\" | \"rep\"\n): Promise<ContextBlock> {\n  const customerDir = path.join(dataDir, \"customers\", slug);\n  if (!fs.existsSync(customerDir)) {\n    throw new Error(`Customer '${slug}' not found`);\n  }\n\n  const mainFactsPath = path.join(customerDir, \"main_facts.md\");\n  const interactionsPath = path.join(customerDir, \"interactions.md\");\n  const pipelinePath = path.join(customerDir, \"pipeline.md\");\n\n  let mainContent = \"\";\n  let metadata: Record<string, unknown> = {};\n  if (fs.existsSync(mainFactsPath)) {\n    const raw = matter(fs.readFileSync(mainFactsPath, \"utf-8\") as string);\n    mainContent = raw.content ?? \"\";\n    metadata = raw.data as Record<string, unknown>;\n  }\n\n  // Field-level security: redact metadata fields the role may not see.\n  if (role) {\n    const { loadFieldAcl, redactFields } = await import(\"./rbac.js\");\n    metadata = redactFields(metadata, role, loadFieldAcl(dataDir));\n  }\n\n  return {\n    slug,\n    metadata,\n    quickReference: sectionBody(mainContent, \"Quick Reference\"),\n    contacts: sectionBody(mainContent, \"Contacts\"),\n    criticalContext: sectionBody(mainContent, \"Critical Context\"),\n    openQuestions: sectionBody(mainContent, \"Open Questions\"),\n    recentActivity: parseRecentInteractions(interactionsPath, MAX_INTERACTIONS),\n    pipeline: parsePipelineContent(pipelinePath),\n  };\n}\n"],"mappings":";;;;;AAKA,MAAM,mBAAmB;AAEzB,SAAS,eAAe,MAAsB;CAC5C,OAAO,KAAK,KAAK,KAAK,SAAS,CAAC;AAClC;AAEA,SAAS,wBAAwB,UAAkB,OAAuB;CACxE,IAAI,CAAC,GAAG,WAAW,QAAQ,GAAG,OAAO;CAMrC,OALgB,GAAG,aAAa,UAAU,OAGpB,EAAE,MAAM,4BAA4B,EAAE,QAAQ,MAAM,EAAE,KAAK,CAC5D,EAAE,MAAM,GAAG,KACpB,EAAE,KAAK,IAAI,EAAE,KAAK;AAChC;AAEA,SAAS,qBAAqB,UAA0B;CACtD,IAAI,CAAC,GAAG,WAAW,QAAQ,GAAG,OAAO;CAErC,OADgB,GAAG,aAAa,UAAU,OAC7B,EAAE,KAAK;AACtB;AAEA,SAAS,eAAe,SAAiB,aAA6B;CAEpE,MAAM,QAAQ,IADI,OAAO,MAAM,aAAa,WAAW,EAAE,yBAAyB,GAChE,EAAE,KAAK,OAAO;CAChC,OAAO,SAAS,MAAM,MAAM,IAAI,KAAK,IAAI;AAC3C;AAEA,eAAsB,aAAa,SAAiB,MAA+B;CACjF,MAAM,cAAc,KAAK,KAAK,SAAS,aAAa,IAAI;CAExD,IAAI,CAAC,GAAG,WAAW,WAAW,GAC5B,MAAM,IAAI,MAAM,aAAa,KAAK,YAAY;CAGhD,MAAM,gBAAgB,KAAK,KAAK,aAAa,eAAe;CAC5D,MAAM,mBAAmB,KAAK,KAAK,aAAa,iBAAiB;CACjE,MAAM,eAAe,KAAK,KAAK,aAAa,aAAa;CAGzD,IAAI,cAAc;CAClB,IAAI,iBAAiB;CACrB,IAAI,GAAG,WAAW,aAAa,GAAG;EAEhC,MAAM,MAAM,OADQ,GAAG,aAAa,eAAe,OACtB,CAAC;EAC9B,cAAc,IAAI,WAAW;EAC7B,iBAAiB,OAAO,QAAQ,IAAI,IAA+B,EAChE,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,IAAI,KAAK,UAAU,CAAC,GAAG,EAC5C,KAAK,IAAI;CACd;CAEA,MAAM,WAAW,eAAe,aAAa,iBAAiB;CAC9D,MAAM,WAAW,eAAe,aAAa,UAAU;CACvD,MAAM,kBAAkB,eAAe,aAAa,kBAAkB;CACtE,MAAM,gBAAgB,eAAe,aAAa,gBAAgB;CAElE,MAAM,iBAAiB,wBAAwB,kBAAkB,gBAAgB;CACjF,MAAM,kBAAkB,qBAAqB,YAAY;CA2BzD,MAAM,MAAM;EAxBV,uBAAuB;EACvB;EACA;EACA,kBAAkB;EAClB;EACA;EACA,YAAY;EACZ;EACA;EACA,YAAY;EACZ;EACA;EACA,mBAAmB;EACnB;EACA;EACA,kBAAkB;EAClB;EACA;EACA,mBAAmB;EACnB;EACA;EACA,iBAAiB;CAGA,EAAE,KAAK,IAAI;CAI9B,IAHsB,eAAe,GAGrB,IAAI,KAAM;EACxB,MAAM,kBAAkB,wBAAwB,kBAAkB,CAAC;EAyBnE,OAAO;GAvBL,uBAAuB;GACvB;GACA;GACA,kBAAkB;GAClB;GACA;GACA,YAAY;GACZ;GACA;GACA,YAAY;GACZ;GACA;GACA,mBAAmB;GACnB;GACA;GACA,mBAAmB;GACnB;GACA;GACA,mBAAmB;GACnB;GACA;GACA,iBAAiB;EAEE,EAAE,KAAK,IAAI;CAClC;CAEA,OAAO;AACT"}

package/dist/context-builder-hmOPvgso.js

@@ -0,0 +1,2 @@
+import { t as buildContext } from "./context-builder-7Uab5-G4.js";
+export { buildContext };

package/dist/{custom-fields-CzNeD3_v.js → custom-fields-BMyz5Ruh.js}

@@ -1,2 +1,2 @@
-import { n as loadFieldDefinitions, t as defineCustomField } from "./custom-fields-Pl2t9xzp.js";
+import { n as loadFieldDefinitions, t as defineCustomField } from "./custom-fields-GzpOHW_2.js";
 export { defineCustomField, loadFieldDefinitions };

package/dist/{custom-fields-Pl2t9xzp.js → custom-fields-GzpOHW_2.js}

@@ -1,18 +1,11 @@
+import { r as writeJsonArray, t as readJsonArray } from "./json-store-WWsFzXub.js";
 import path from "path";
-import fs from "fs";
 //#region src/core/custom-fields.ts
 function schemaPath(dataDir) {
 	return path.join(dataDir, ".agentic", "schema", "custom-fields.json");
 }
 function loadFieldDefinitions(dataDir) {
-	const p = schemaPath(dataDir);
-	if (!fs.existsSync(p)) return [];
-	try {
-		const data = JSON.parse(fs.readFileSync(p, "utf-8"));
-		return Array.isArray(data.fields) ? data.fields : [];
-	} catch {
-		return [];
-	}
+	return readJsonArray(schemaPath(dataDir), "fields");
 }
 /** Add or update (by name) a custom field definition. */
 function defineCustomField(dataDir, def) {
@@ -20,9 +13,7 @@ function defineCustomField(dataDir, def) {
 	const idx = defs.findIndex((d) => d.name === def.name);
 	if (idx >= 0) defs[idx] = def;
 	else defs.push(def);
-	const p = schemaPath(dataDir);
-	fs.mkdirSync(path.dirname(p), { recursive: true });
-	fs.writeFileSync(p, JSON.stringify({ fields: defs }, null, 2), "utf-8");
+	writeJsonArray(schemaPath(dataDir), "fields", defs);
 	return defs;
 }
 const DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
@@ -70,4 +61,4 @@ function validateCustomFields(input, defs) {
 //#endregion
 export { loadFieldDefinitions as n, validateCustomFields as r, defineCustomField as t };
 
-//# sourceMappingURL=custom-fields-Pl2t9xzp.js.map
+//# sourceMappingURL=custom-fields-GzpOHW_2.js.map

package/dist/custom-fields-GzpOHW_2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-fields-GzpOHW_2.js","names":[],"sources":["../src/core/custom-fields.ts"],"sourcesContent":["import path from \"path\";\nimport { readJsonArray, writeJsonArray } from \"../fs/json-store.js\";\n\n/**\n * Metadata-driven custom fields — the first increment of the metadata model\n * (next-plan N1-7). Definitions live in .agentic/schema/custom-fields.json and\n * extend customers without code changes. Core schemas stay strict; custom\n * fields are validated separately against this registry.\n */\nexport type CustomFieldType = \"text\" | \"number\" | \"boolean\" | \"date\" | \"select\";\n\nexport interface FieldDefinition {\n  name: string;\n  type: CustomFieldType;\n  label?: string;\n  options?: string[];\n}\n\nfunction schemaPath(dataDir: string): string {\n  return path.join(dataDir, \".agentic\", \"schema\", \"custom-fields.json\");\n}\n\nexport function loadFieldDefinitions(dataDir: string): FieldDefinition[] {\n  return readJsonArray<FieldDefinition>(schemaPath(dataDir), \"fields\");\n}\n\n/** Add or update (by name) a custom field definition. */\nexport function defineCustomField(dataDir: string, def: FieldDefinition): FieldDefinition[] {\n  const defs = loadFieldDefinitions(dataDir);\n  const idx = defs.findIndex((d) => d.name === def.name);\n  if (idx >= 0) defs[idx] = def;\n  else defs.push(def);\n  writeJsonArray(schemaPath(dataDir), \"fields\", defs);\n  return defs;\n}\n\nexport interface ValidationResult {\n  valid: boolean;\n  values: Record<string, string | number | boolean>;\n  errors: string[];\n}\n\nconst DATE_RE = /^\\d{4}-\\d{2}-\\d{2}$/;\n\n/** Validate + coerce a record of raw values against custom field definitions. */\nexport function validateCustomFields(\n  input: Record<string, unknown>,\n  defs: FieldDefinition[]\n): ValidationResult {\n  const byName = new Map(defs.map((d) => [d.name, d]));\n  const values: Record<string, string | number | boolean> = {};\n  const errors: string[] = [];\n\n  for (const [key, raw] of Object.entries(input)) {\n    const def = byName.get(key);\n    if (!def) {\n      errors.push(`Unknown custom field: ${key}`);\n      continue;\n    }\n    const str = String(raw).trim();\n    switch (def.type) {\n      case \"number\": {\n        const n = Number(str);\n        if (!Number.isFinite(n)) errors.push(`${key}: not a number`);\n        else values[key] = n;\n        break;\n      }\n      case \"boolean\": {\n        if (/^(true|yes|1)$/i.test(str)) values[key] = true;\n        else if (/^(false|no|0)$/i.test(str)) values[key] = false;\n        else errors.push(`${key}: not a boolean`);\n        break;\n      }\n      case \"date\": {\n        if (DATE_RE.test(str)) values[key] = str;\n        else errors.push(`${key}: expected YYYY-MM-DD`);\n        break;\n      }\n      case \"select\": {\n        if (def.options && def.options.includes(str)) values[key] = str;\n        else errors.push(`${key}: must be one of ${(def.options ?? []).join(\", \")}`);\n        break;\n      }\n      default:\n        values[key] = str;\n    }\n  }\n\n  return { valid: errors.length === 0, values, errors };\n}\n"],"mappings":";;;AAkBA,SAAS,WAAW,SAAyB;CAC3C,OAAO,KAAK,KAAK,SAAS,YAAY,UAAU,oBAAoB;AACtE;AAEA,SAAgB,qBAAqB,SAAoC;CACvE,OAAO,cAA+B,WAAW,OAAO,GAAG,QAAQ;AACrE;;AAGA,SAAgB,kBAAkB,SAAiB,KAAyC;CAC1F,MAAM,OAAO,qBAAqB,OAAO;CACzC,MAAM,MAAM,KAAK,WAAW,MAAM,EAAE,SAAS,IAAI,IAAI;CACrD,IAAI,OAAO,GAAG,KAAK,OAAO;MACrB,KAAK,KAAK,GAAG;CAClB,eAAe,WAAW,OAAO,GAAG,UAAU,IAAI;CAClD,OAAO;AACT;AAQA,MAAM,UAAU;;AAGhB,SAAgB,qBACd,OACA,MACkB;CAClB,MAAM,SAAS,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD,MAAM,SAAoD,CAAC;CAC3D,MAAM,SAAmB,CAAC;CAE1B,KAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,KAAK,GAAG;EAC9C,MAAM,MAAM,OAAO,IAAI,GAAG;EAC1B,IAAI,CAAC,KAAK;GACR,OAAO,KAAK,yBAAyB,KAAK;GAC1C;EACF;EACA,MAAM,MAAM,OAAO,GAAG,EAAE,KAAK;EAC7B,QAAQ,IAAI,MAAZ;GACE,KAAK,UAAU;IACb,MAAM,IAAI,OAAO,GAAG;IACpB,IAAI,CAAC,OAAO,SAAS,CAAC,GAAG,OAAO,KAAK,GAAG,IAAI,eAAe;SACtD,OAAO,OAAO;IACnB;GACF;GACA,KAAK;IACH,IAAI,kBAAkB,KAAK,GAAG,GAAG,OAAO,OAAO;SAC1C,IAAI,kBAAkB,KAAK,GAAG,GAAG,OAAO,OAAO;SAC/C,OAAO,KAAK,GAAG,IAAI,gBAAgB;IACxC;GAEF,KAAK;IACH,IAAI,QAAQ,KAAK,GAAG,GAAG,OAAO,OAAO;SAChC,OAAO,KAAK,GAAG,IAAI,sBAAsB;IAC9C;GAEF,KAAK;IACH,IAAI,IAAI,WAAW,IAAI,QAAQ,SAAS,GAAG,GAAG,OAAO,OAAO;SACvD,OAAO,KAAK,GAAG,IAAI,oBAAoB,IAAI,WAAW,CAAC,GAAG,KAAK,IAAI,GAAG;IAC3E;GAEF,SACE,OAAO,OAAO;EAClB;CACF;CAEA,OAAO;EAAE,OAAO,OAAO,WAAW;EAAG;EAAQ;CAAO;AACtD"}

package/dist/{custom-objects-CIFrmQ2V.js → custom-objects-BNy-ayR-.js}

@@ -1,2 +1,2 @@
-import { i as listRecords, n as defineCustomObject, t as createRecord } from "./custom-objects-BHgn1GEX.js";
+import { i as listRecords, n as defineCustomObject, t as createRecord } from "./custom-objects-CxW1gHwJ.js";
 export { createRecord, defineCustomObject, listRecords };

package/dist/{custom-objects-BHgn1GEX.js → custom-objects-CxW1gHwJ.js}

@@ -1,52 +1,37 @@
-import { r as validateCustomFields } from "./custom-fields-Pl2t9xzp.js";
+import { t as assertSafePathSegment } from "./safe-path-mpp0dKtO.js";
+import { r as writeJsonArray, t as readJsonArray } from "./json-store-WWsFzXub.js";
+import { r as validateCustomFields } from "./custom-fields-GzpOHW_2.js";
 import path from "path";
-import fs from "fs";
 import { randomBytes } from "crypto";
 //#region src/core/custom-objects.ts
 function objectsSchemaPath(dataDir) {
 	return path.join(dataDir, ".agentic", "schema", "custom-objects.json");
 }
 function recordsPath(dataDir, name) {
+	assertSafePathSegment(name, "custom object name");
 	return path.join(dataDir, ".agentic", "objects", `${name}.json`);
 }
 function loadCustomObjects(dataDir) {
-	const p = objectsSchemaPath(dataDir);
-	if (!fs.existsSync(p)) return [];
-	try {
-		const data = JSON.parse(fs.readFileSync(p, "utf-8"));
-		return Array.isArray(data.objects) ? data.objects : [];
-	} catch {
-		return [];
-	}
+	return readJsonArray(objectsSchemaPath(dataDir), "objects");
 }
 function getObjectDefinition(dataDir, name) {
 	return loadCustomObjects(dataDir).find((o) => o.name === name);
 }
 /** Add or update (by name) a custom object definition. */
 function defineCustomObject(dataDir, def) {
+	assertSafePathSegment(def.name, "custom object name");
 	const objs = loadCustomObjects(dataDir);
 	const idx = objs.findIndex((o) => o.name === def.name);
 	if (idx >= 0) objs[idx] = def;
 	else objs.push(def);
-	const p = objectsSchemaPath(dataDir);
-	fs.mkdirSync(path.dirname(p), { recursive: true });
-	fs.writeFileSync(p, JSON.stringify({ objects: objs }, null, 2), "utf-8");
+	writeJsonArray(objectsSchemaPath(dataDir), "objects", objs);
 	return objs;
 }
 function listRecords(dataDir, name) {
-	const p = recordsPath(dataDir, name);
-	if (!fs.existsSync(p)) return [];
-	try {
-		const data = JSON.parse(fs.readFileSync(p, "utf-8"));
-		return Array.isArray(data.records) ? data.records : [];
-	} catch {
-		return [];
-	}
+	return readJsonArray(recordsPath(dataDir, name), "records");
 }
 function writeRecords(dataDir, name, records) {
-	const p = recordsPath(dataDir, name);
-	fs.mkdirSync(path.dirname(p), { recursive: true });
-	fs.writeFileSync(p, JSON.stringify({ records }, null, 2), "utf-8");
+	writeJsonArray(recordsPath(dataDir, name), "records", records);
 }
 function createRecord(dataDir, name, values) {
 	const def = getObjectDefinition(dataDir, name);
@@ -75,4 +60,4 @@ function createRecord(dataDir, name, values) {
 //#endregion
 export { loadCustomObjects as a, listRecords as i, defineCustomObject as n, getObjectDefinition as r, createRecord as t };
 
-//# sourceMappingURL=custom-objects-BHgn1GEX.js.map
+//# sourceMappingURL=custom-objects-CxW1gHwJ.js.map

package/dist/custom-objects-CxW1gHwJ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-objects-CxW1gHwJ.js","names":[],"sources":["../src/core/custom-objects.ts"],"sourcesContent":["import { randomBytes } from \"crypto\";\nimport path from \"path\";\nimport { validateCustomFields, type FieldDefinition } from \"./custom-fields.js\";\nimport { readJsonArray, writeJsonArray } from \"../fs/json-store.js\";\nimport { assertSafePathSegment } from \"../fs/safe-path.js\";\n\n/**\n * Custom objects — runtime-defined entity types with their own fields, stored\n * as JSON without code migrations (Twenty-style \"no-migration\" model, the\n * N5-1 increment of the metadata layer). Definitions live in\n * .agentic/schema/custom-objects.json; records in .agentic/objects/<name>.json.\n */\nexport interface ObjectDefinition {\n  name: string;\n  label?: string;\n  fields: FieldDefinition[];\n}\n\nexport interface ObjectRecord {\n  id: string;\n  createdAt: string;\n  updatedAt: string;\n  values: Record<string, string | number | boolean>;\n}\n\nexport interface RecordResult {\n  ok: boolean;\n  record?: ObjectRecord;\n  errors?: string[];\n}\n\nfunction objectsSchemaPath(dataDir: string): string {\n  return path.join(dataDir, \".agentic\", \"schema\", \"custom-objects.json\");\n}\nfunction recordsPath(dataDir: string, name: string): string {\n  assertSafePathSegment(name, \"custom object name\");\n  return path.join(dataDir, \".agentic\", \"objects\", `${name}.json`);\n}\n\nexport function loadCustomObjects(dataDir: string): ObjectDefinition[] {\n  return readJsonArray<ObjectDefinition>(objectsSchemaPath(dataDir), \"objects\");\n}\n\nexport function getObjectDefinition(dataDir: string, name: string): ObjectDefinition | undefined {\n  return loadCustomObjects(dataDir).find((o) => o.name === name);\n}\n\n/** Add or update (by name) a custom object definition. */\nexport function defineCustomObject(dataDir: string, def: ObjectDefinition): ObjectDefinition[] {\n  assertSafePathSegment(def.name, \"custom object name\");\n  const objs = loadCustomObjects(dataDir);\n  const idx = objs.findIndex((o) => o.name === def.name);\n  if (idx >= 0) objs[idx] = def;\n  else objs.push(def);\n  writeJsonArray(objectsSchemaPath(dataDir), \"objects\", objs);\n  return objs;\n}\n\nexport function listRecords(dataDir: string, name: string): ObjectRecord[] {\n  return readJsonArray<ObjectRecord>(recordsPath(dataDir, name), \"records\");\n}\n\nfunction writeRecords(dataDir: string, name: string, records: ObjectRecord[]): void {\n  writeJsonArray(recordsPath(dataDir, name), \"records\", records);\n}\n\nexport function getRecord(dataDir: string, name: string, id: string): ObjectRecord | undefined {\n  return listRecords(dataDir, name).find((r) => r.id === id);\n}\n\nexport function createRecord(\n  dataDir: string,\n  name: string,\n  values: Record<string, unknown>\n): RecordResult {\n  const def = getObjectDefinition(dataDir, name);\n  if (!def) return { ok: false, errors: [`Unknown object: ${name}`] };\n\n  const validation = validateCustomFields(values, def.fields);\n  if (!validation.valid) return { ok: false, errors: validation.errors };\n\n  const now = new Date().toISOString();\n  const record: ObjectRecord = {\n    id: `${name}_${randomBytes(6).toString(\"hex\")}`,\n    createdAt: now,\n    updatedAt: now,\n    values: validation.values,\n  };\n  writeRecords(dataDir, name, [...listRecords(dataDir, name), record]);\n  return { ok: true, record };\n}\n\nexport function updateRecord(\n  dataDir: string,\n  name: string,\n  id: string,\n  values: Record<string, unknown>\n): RecordResult {\n  const def = getObjectDefinition(dataDir, name);\n  if (!def) return { ok: false, errors: [`Unknown object: ${name}`] };\n\n  const records = listRecords(dataDir, name);\n  const idx = records.findIndex((r) => r.id === id);\n  if (idx < 0) return { ok: false, errors: [`Record not found: ${id}`] };\n\n  const validation = validateCustomFields(values, def.fields);\n  if (!validation.valid) return { ok: false, errors: validation.errors };\n\n  const updated: ObjectRecord = {\n    ...records[idx]!,\n    updatedAt: new Date().toISOString(),\n    values: { ...records[idx]!.values, ...validation.values },\n  };\n  records[idx] = updated;\n  writeRecords(dataDir, name, records);\n  return { ok: true, record: updated };\n}\n\nexport function deleteRecord(dataDir: string, name: string, id: string): boolean {\n  const records = listRecords(dataDir, name);\n  const next = records.filter((r) => r.id !== id);\n  if (next.length === records.length) return false;\n  writeRecords(dataDir, name, next);\n  return true;\n}\n"],"mappings":";;;;;;AA+BA,SAAS,kBAAkB,SAAyB;CAClD,OAAO,KAAK,KAAK,SAAS,YAAY,UAAU,qBAAqB;AACvE;AACA,SAAS,YAAY,SAAiB,MAAsB;CAC1D,sBAAsB,MAAM,oBAAoB;CAChD,OAAO,KAAK,KAAK,SAAS,YAAY,WAAW,GAAG,KAAK,MAAM;AACjE;AAEA,SAAgB,kBAAkB,SAAqC;CACrE,OAAO,cAAgC,kBAAkB,OAAO,GAAG,SAAS;AAC9E;AAEA,SAAgB,oBAAoB,SAAiB,MAA4C;CAC/F,OAAO,kBAAkB,OAAO,EAAE,MAAM,MAAM,EAAE,SAAS,IAAI;AAC/D;;AAGA,SAAgB,mBAAmB,SAAiB,KAA2C;CAC7F,sBAAsB,IAAI,MAAM,oBAAoB;CACpD,MAAM,OAAO,kBAAkB,OAAO;CACtC,MAAM,MAAM,KAAK,WAAW,MAAM,EAAE,SAAS,IAAI,IAAI;CACrD,IAAI,OAAO,GAAG,KAAK,OAAO;MACrB,KAAK,KAAK,GAAG;CAClB,eAAe,kBAAkB,OAAO,GAAG,WAAW,IAAI;CAC1D,OAAO;AACT;AAEA,SAAgB,YAAY,SAAiB,MAA8B;CACzE,OAAO,cAA4B,YAAY,SAAS,IAAI,GAAG,SAAS;AAC1E;AAEA,SAAS,aAAa,SAAiB,MAAc,SAA+B;CAClF,eAAe,YAAY,SAAS,IAAI,GAAG,WAAW,OAAO;AAC/D;AAMA,SAAgB,aACd,SACA,MACA,QACc;CACd,MAAM,MAAM,oBAAoB,SAAS,IAAI;CAC7C,IAAI,CAAC,KAAK,OAAO;EAAE,IAAI;EAAO,QAAQ,CAAC,mBAAmB,MAAM;CAAE;CAElE,MAAM,aAAa,qBAAqB,QAAQ,IAAI,MAAM;CAC1D,IAAI,CAAC,WAAW,OAAO,OAAO;EAAE,IAAI;EAAO,QAAQ,WAAW;CAAO;CAErE,MAAM,uBAAM,IAAI,KAAK,GAAE,YAAY;CACnC,MAAM,SAAuB;EAC3B,IAAI,GAAG,KAAK,GAAG,YAAY,CAAC,EAAE,SAAS,KAAK;EAC5C,WAAW;EACX,WAAW;EACX,QAAQ,WAAW;CACrB;CACA,aAAa,SAAS,MAAM,CAAC,GAAG,YAAY,SAAS,IAAI,GAAG,MAAM,CAAC;CACnE,OAAO;EAAE,IAAI;EAAM;CAAO;AAC5B"}

package/dist/{customer-dir-DIylZ8Q6.js → customer-dir-CkMMXhb0.js}

@@ -1,3 +1,5 @@
+import { t as writeFileAtomic } from "./atomic-write-8yjqqLtS.js";
+import { t as assertSafePathSegment } from "./safe-path-mpp0dKtO.js";
 import path from "path";
 import fs from "fs";
 import matter from "gray-matter";
@@ -26,7 +28,11 @@ const MainFactsSchema = z.object({
 });
 //#endregion
 //#region src/fs/customer-dir.ts
+function assertSafeSlug(slug) {
+	assertSafePathSegment(slug, "customer slug");
+}
 function getCustomerDir(dataDir, slug) {
+	assertSafeSlug(slug);
 	return path.join(dataDir, "customers", slug);
 }
 function customerExists(dataDir, slug) {
@@ -53,8 +59,7 @@ async function ensureCustomerDir(dataDir, slug) {
 async function writeMainFacts(dataDir, slug, facts) {
 	const filePath = path.join(getCustomerDir(dataDir, slug), "main_facts.md");
 	const clean = Object.fromEntries(Object.entries(facts).filter(([, v]) => v !== void 0));
-	const content = matter.stringify("", clean);
-	fs.writeFileSync(filePath, content, "utf-8");
+	writeFileAtomic(filePath, matter.stringify("", clean));
 }
 async function readMainFacts(dataDir, slug) {
 	const filePath = path.join(getCustomerDir(dataDir, slug), "main_facts.md");
@@ -70,6 +75,6 @@ async function readMainFacts(dataDir, slug) {
 	return result.data;
 }
 //#endregion
-export { writeMainFacts as a, readMainFacts as i, ensureCustomerDir as n, MainFactsSchema as o, listCustomerSlugs as r, customerExists as t };
+export { readMainFacts as a, listCustomerSlugs as i, customerExists as n, writeMainFacts as o, ensureCustomerDir as r, MainFactsSchema as s, assertSafeSlug as t };
 
-//# sourceMappingURL=customer-dir-DIylZ8Q6.js.map
+//# sourceMappingURL=customer-dir-CkMMXhb0.js.map

package/dist/customer-dir-CkMMXhb0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-dir-CkMMXhb0.js","names":[],"sources":["../src/schemas/main-facts.ts","../src/fs/customer-dir.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const MainFactsSchema = z.object({\n  name: z.string().min(1),\n  domain: z.string().optional(),\n  email: z.string().optional(),\n  phone: z.string().optional(),\n  industry: z.string().optional(),\n  relationship_stage: z.enum([\"prospect\", \"active\", \"churned\", \"paused\"]),\n  deal_value: z.number().optional(),\n  currency: z.string().default(\"EUR\"),\n  primary_contact: z.string().optional(),\n  timezone: z.string().optional(),\n  tags: z.array(z.string()).default([]),\n  created: z.preprocess(\n    (v) => (v instanceof Date ? v.toISOString().slice(0, 10) : v),\n    z.string().regex(/^\\d{4}-\\d{2}-\\d{2}$/, \"YYYY-MM-DD required\")\n  ),\n  updated: z.preprocess(\n    (v) => (v instanceof Date ? v.toISOString().slice(0, 10) : v),\n    z.string().regex(/^\\d{4}-\\d{2}-\\d{2}$/, \"YYYY-MM-DD required\")\n  ),\n});\n\nexport type MainFacts = z.infer<typeof MainFactsSchema>;\n","import fs from \"fs\";\nimport path from \"path\";\nimport matter from \"gray-matter\";\nimport { fromZodError } from \"zod-validation-error\";\nimport { MainFactsSchema, type MainFacts } from \"../schemas/main-facts.js\";\nimport { writeFileAtomic } from \"./atomic-write.js\";\nimport { isSafePathSegment, assertSafePathSegment } from \"./safe-path.js\";\n\n/** A customer slug is safe iff it is a safe filesystem path segment. */\nexport function isSafeSlug(slug: unknown): slug is string {\n  return isSafePathSegment(slug);\n}\n\nexport function assertSafeSlug(slug: string): void {\n  assertSafePathSegment(slug, \"customer slug\");\n}\n\nexport function getCustomerDir(dataDir: string, slug: string): string {\n  assertSafeSlug(slug);\n  return path.join(dataDir, \"customers\", slug);\n}\n\nexport function customerExists(dataDir: string, slug: string): boolean {\n  return fs.existsSync(getCustomerDir(dataDir, slug));\n}\n\n/** List all customer slugs (immediate subdirectories of customers/). */\nexport function listCustomerSlugs(dataDir: string): string[] {\n  const dir = path.join(dataDir, \"customers\");\n  if (!fs.existsSync(dir)) return [];\n  return fs.readdirSync(dir).filter((s) => {\n    try {\n      return fs.statSync(path.join(dir, s)).isDirectory();\n    } catch {\n      return false;\n    }\n  });\n}\n\nexport async function ensureCustomerDir(dataDir: string, slug: string): Promise<void> {\n  const customerDir = getCustomerDir(dataDir, slug);\n  fs.mkdirSync(customerDir, { recursive: true });\n  fs.mkdirSync(path.join(customerDir, \"attachments\"), { recursive: true });\n  fs.mkdirSync(path.join(customerDir, \"transcripts\"), { recursive: true });\n}\n\nexport async function writeMainFacts(\n  dataDir: string,\n  slug: string,\n  facts: MainFacts\n): Promise<void> {\n  const filePath = path.join(getCustomerDir(dataDir, slug), \"main_facts.md\");\n  // Strip undefined values — gray-matter YAML serializer rejects them\n  const clean = Object.fromEntries(\n    Object.entries(facts as Record<string, unknown>).filter(([, v]) => v !== undefined)\n  );\n  const content = matter.stringify(\"\", clean);\n  writeFileAtomic(filePath, content);\n}\n\nexport async function readMainFacts(dataDir: string, slug: string): Promise<MainFacts> {\n  const filePath = path.join(getCustomerDir(dataDir, slug), \"main_facts.md\");\n  if (!fs.existsSync(filePath)) {\n    throw new Error(`main_facts.md not found for customer '${slug}'`);\n  }\n  // Use fs.readFileSync so the memfs mock is respected in tests,\n  // then parse the string with matter.\n  const content = fs.readFileSync(filePath, \"utf-8\") as string;\n  const raw = matter(content);\n  // gray-matter parses YYYY-MM-DD as Date objects; coerce back to strings for Zod\n  const data = raw.data as Record<string, unknown>;\n  for (const key of [\"created\", \"updated\"] as const) {\n    if (data[key] instanceof Date) {\n      data[key] = (data[key] as Date).toISOString().slice(0, 10);\n    }\n  }\n  const result = MainFactsSchema.safeParse(data);\n  if (!result.success) {\n    throw new Error(\n      fromZodError(result.error, {\n        prefix: `Schema error in ${filePath}`,\n        prefixSeparator: \":\\n  - \",\n        issueSeparator: \"\\n  - \",\n      }).message\n    );\n  }\n  return result.data;\n}\n"],"mappings":";;;;;;;;AAEA,MAAa,kBAAkB,EAAE,OAAO;CACtC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;CACtB,QAAQ,EAAE,OAAO,EAAE,SAAS;CAC5B,OAAO,EAAE,OAAO,EAAE,SAAS;CAC3B,OAAO,EAAE,OAAO,EAAE,SAAS;CAC3B,UAAU,EAAE,OAAO,EAAE,SAAS;CAC9B,oBAAoB,EAAE,KAAK;EAAC;EAAY;EAAU;EAAW;CAAQ,CAAC;CACtE,YAAY,EAAE,OAAO,EAAE,SAAS;CAChC,UAAU,EAAE,OAAO,EAAE,QAAQ,KAAK;CAClC,iBAAiB,EAAE,OAAO,EAAE,SAAS;CACrC,UAAU,EAAE,OAAO,EAAE,SAAS;CAC9B,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;CACpC,SAAS,EAAE,YACR,MAAO,aAAa,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,IAAI,GAC3D,EAAE,OAAO,EAAE,MAAM,uBAAuB,qBAAqB,CAC/D;CACA,SAAS,EAAE,YACR,MAAO,aAAa,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,IAAI,GAC3D,EAAE,OAAO,EAAE,MAAM,uBAAuB,qBAAqB,CAC/D;AACF,CAAC;;;ACTD,SAAgB,eAAe,MAAoB;CACjD,sBAAsB,MAAM,eAAe;AAC7C;AAEA,SAAgB,eAAe,SAAiB,MAAsB;CACpE,eAAe,IAAI;CACnB,OAAO,KAAK,KAAK,SAAS,aAAa,IAAI;AAC7C;AAEA,SAAgB,eAAe,SAAiB,MAAuB;CACrE,OAAO,GAAG,WAAW,eAAe,SAAS,IAAI,CAAC;AACpD;;AAGA,SAAgB,kBAAkB,SAA2B;CAC3D,MAAM,MAAM,KAAK,KAAK,SAAS,WAAW;CAC1C,IAAI,CAAC,GAAG,WAAW,GAAG,GAAG,OAAO,CAAC;CACjC,OAAO,GAAG,YAAY,GAAG,EAAE,QAAQ,MAAM;EACvC,IAAI;GACF,OAAO,GAAG,SAAS,KAAK,KAAK,KAAK,CAAC,CAAC,EAAE,YAAY;EACpD,QAAQ;GACN,OAAO;EACT;CACF,CAAC;AACH;AAEA,eAAsB,kBAAkB,SAAiB,MAA6B;CACpF,MAAM,cAAc,eAAe,SAAS,IAAI;CAChD,GAAG,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;CAC7C,GAAG,UAAU,KAAK,KAAK,aAAa,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;CACvE,GAAG,UAAU,KAAK,KAAK,aAAa,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;AACzE;AAEA,eAAsB,eACpB,SACA,MACA,OACe;CACf,MAAM,WAAW,KAAK,KAAK,eAAe,SAAS,IAAI,GAAG,eAAe;CAEzE,MAAM,QAAQ,OAAO,YACnB,OAAO,QAAQ,KAAgC,EAAE,QAAQ,GAAG,OAAO,MAAM,KAAA,CAAS,CACpF;CAEA,gBAAgB,UADA,OAAO,UAAU,IAAI,KACL,CAAC;AACnC;AAEA,eAAsB,cAAc,SAAiB,MAAkC;CACrF,MAAM,WAAW,KAAK,KAAK,eAAe,SAAS,IAAI,GAAG,eAAe;CACzE,IAAI,CAAC,GAAG,WAAW,QAAQ,GACzB,MAAM,IAAI,MAAM,yCAAyC,KAAK,EAAE;CAOlE,MAAM,OAFM,OADI,GAAG,aAAa,UAAU,OACjB,CAEV,EAAE;CACjB,KAAK,MAAM,OAAO,CAAC,WAAW,SAAS,GACrC,IAAI,KAAK,gBAAgB,MACvB,KAAK,OAAQ,KAAK,KAAc,YAAY,EAAE,MAAM,GAAG,EAAE;CAG7D,MAAM,SAAS,gBAAgB,UAAU,IAAI;CAC7C,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MACR,aAAa,OAAO,OAAO;EACzB,QAAQ,mBAAmB;EAC3B,iBAAiB;EACjB,gBAAgB;CAClB,CAAC,EAAE,OACL;CAEF,OAAO,OAAO;AAChB"}