@iflow-mcp/jkheadley-instar 0.26.2

package/dist/threadline/ComputeMeter.js

@@ -0,0 +1,350 @@
+/**
+ * ComputeMeter — Per-agent and global compute budget tracking.
+ *
+ * Part of Threadline Protocol Phase 6A (A2A Gateway). Prevents cost overrun
+ * from inbound A2A messages by enforcing hourly/daily token limits per agent
+ * (tied to trust level) and a global daily cap across all network agents.
+ *
+ * Rolling windows: hourly resets when the hour changes, daily resets at midnight UTC.
+ *
+ * Storage: {stateDir}/threadline/compute-meters.json
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+// ── Constants ────────────────────────────────────────────────────────
+const DEFAULT_GLOBAL_DAILY_CAP = 5_000_000;
+const BUDGET_TIERS = {
+    untrusted: { hourlyTokenLimit: 10_000, dailyTokenLimit: 50_000, maxConcurrentSessions: 1 },
+    verified: { hourlyTokenLimit: 50_000, dailyTokenLimit: 250_000, maxConcurrentSessions: 3 },
+    trusted: { hourlyTokenLimit: 200_000, dailyTokenLimit: 1_000_000, maxConcurrentSessions: 5 },
+    autonomous: { hourlyTokenLimit: 500_000, dailyTokenLimit: 2_000_000, maxConcurrentSessions: 10 },
+};
+// ── Helpers ──────────────────────────────────────────────────────────
+function atomicWrite(filePath, data) {
+    const tmpPath = `${filePath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
+    try {
+        fs.writeFileSync(tmpPath, data);
+        fs.renameSync(tmpPath, filePath);
+    }
+    catch (err) {
+        try {
+            fs.unlinkSync(tmpPath);
+        }
+        catch { /* ignore */ }
+        throw err;
+    }
+}
+/** Get the start of the current UTC hour as ISO string */
+function currentHourStart(now) {
+    const d = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate(), now.getUTCHours()));
+    return d.toISOString();
+}
+/** Get the start of the current UTC day as ISO string */
+function currentDayStart(now) {
+    const d = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate()));
+    return d.toISOString();
+}
+/** Seconds until the next UTC hour boundary */
+function secondsUntilNextHour(now) {
+    const nextHour = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate(), now.getUTCHours() + 1));
+    return Math.max(1, Math.ceil((nextHour.getTime() - now.getTime()) / 1000));
+}
+/** Seconds until the next UTC midnight */
+function secondsUntilNextDay(now) {
+    const nextDay = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate() + 1));
+    return Math.max(1, Math.ceil((nextDay.getTime() - now.getTime()) / 1000));
+}
+// ── Implementation ───────────────────────────────────────────────────
+export class ComputeMeter {
+    threadlineDir;
+    filePath;
+    globalDailyCap;
+    budgetOverrides;
+    agents;
+    global;
+    constructor(config) {
+        this.threadlineDir = path.join(config.stateDir, 'threadline');
+        fs.mkdirSync(this.threadlineDir, { recursive: true });
+        this.filePath = path.join(this.threadlineDir, 'compute-meters.json');
+        this.globalDailyCap = config.globalDailyCap ?? DEFAULT_GLOBAL_DAILY_CAP;
+        this.budgetOverrides = config.budgetOverrides ?? {};
+        this.agents = new Map();
+        const now = new Date();
+        this.global = {
+            dailyTokens: 0,
+            dayWindowStart: currentDayStart(now),
+            lastUpdated: now.toISOString(),
+        };
+        this.reload();
+    }
+    // ── Budget Resolution ──────────────────────────────────────────────
+    /**
+     * Get the compute budget for a given trust level.
+     * Applies any configured overrides on top of the default tier.
+     */
+    getBudget(trustLevel) {
+        const base = BUDGET_TIERS[trustLevel];
+        const overrides = this.budgetOverrides[trustLevel];
+        if (!overrides)
+            return { ...base };
+        return {
+            hourlyTokenLimit: overrides.hourlyTokenLimit ?? base.hourlyTokenLimit,
+            dailyTokenLimit: overrides.dailyTokenLimit ?? base.dailyTokenLimit,
+            maxConcurrentSessions: overrides.maxConcurrentSessions ?? base.maxConcurrentSessions,
+        };
+    }
+    // ── Check & Record ─────────────────────────────────────────────────
+    /**
+     * Check if a request with the given token count would be allowed.
+     * Does NOT consume tokens — use `record()` for that.
+     */
+    check(agentIdentity, trustLevel, tokenCount) {
+        const now = new Date();
+        const budget = this.getBudget(trustLevel);
+        // Roll windows for the agent
+        const agent = this.getOrCreateAgent(agentIdentity, now);
+        this.rollWindows(agent, now);
+        // Roll global window
+        this.rollGlobalWindow(now);
+        // Check session limit (sessions aren't consumed by check, but report remaining)
+        const sessionsRemaining = budget.maxConcurrentSessions - agent.activeSessions;
+        // Check hourly
+        const hourlyRemaining = budget.hourlyTokenLimit - agent.hourlyTokens;
+        if (agent.hourlyTokens + tokenCount > budget.hourlyTokenLimit) {
+            return {
+                allowed: false,
+                reason: 'hourly_limit_exceeded',
+                remaining: {
+                    hourlyTokens: Math.max(0, hourlyRemaining),
+                    dailyTokens: Math.max(0, budget.dailyTokenLimit - agent.dailyTokens),
+                    globalDailyTokens: Math.max(0, this.globalDailyCap - this.global.dailyTokens),
+                    sessions: Math.max(0, sessionsRemaining),
+                },
+                retryAfterSeconds: secondsUntilNextHour(now),
+            };
+        }
+        // Check daily
+        const dailyRemaining = budget.dailyTokenLimit - agent.dailyTokens;
+        if (agent.dailyTokens + tokenCount > budget.dailyTokenLimit) {
+            return {
+                allowed: false,
+                reason: 'daily_limit_exceeded',
+                remaining: {
+                    hourlyTokens: Math.max(0, hourlyRemaining),
+                    dailyTokens: Math.max(0, dailyRemaining),
+                    globalDailyTokens: Math.max(0, this.globalDailyCap - this.global.dailyTokens),
+                    sessions: Math.max(0, sessionsRemaining),
+                },
+                retryAfterSeconds: secondsUntilNextDay(now),
+            };
+        }
+        // Check global daily cap
+        const globalRemaining = this.globalDailyCap - this.global.dailyTokens;
+        if (this.global.dailyTokens + tokenCount > this.globalDailyCap) {
+            return {
+                allowed: false,
+                reason: 'global_cap_exceeded',
+                remaining: {
+                    hourlyTokens: Math.max(0, hourlyRemaining),
+                    dailyTokens: Math.max(0, dailyRemaining),
+                    globalDailyTokens: Math.max(0, globalRemaining),
+                    sessions: Math.max(0, sessionsRemaining),
+                },
+                retryAfterSeconds: secondsUntilNextDay(now),
+            };
+        }
+        return {
+            allowed: true,
+            remaining: {
+                hourlyTokens: Math.max(0, hourlyRemaining - tokenCount),
+                dailyTokens: Math.max(0, dailyRemaining - tokenCount),
+                globalDailyTokens: Math.max(0, globalRemaining - tokenCount),
+                sessions: Math.max(0, sessionsRemaining),
+            },
+        };
+    }
+    /**
+     * Record token consumption for an agent.
+     * Returns the check result after recording. Fails if budget would be exceeded.
+     */
+    record(agentIdentity, trustLevel, tokenCount) {
+        const result = this.check(agentIdentity, trustLevel, tokenCount);
+        if (!result.allowed)
+            return result;
+        const now = new Date();
+        const agent = this.getOrCreateAgent(agentIdentity, now);
+        this.rollWindows(agent, now);
+        this.rollGlobalWindow(now);
+        // Consume tokens
+        agent.hourlyTokens += tokenCount;
+        agent.dailyTokens += tokenCount;
+        agent.lastUpdated = now.toISOString();
+        this.global.dailyTokens += tokenCount;
+        this.global.lastUpdated = now.toISOString();
+        return result;
+    }
+    // ── Session Management ─────────────────────────────────────────────
+    /**
+     * Increment the active session count for an agent.
+     * Returns false if the agent is already at the maximum for their trust level.
+     */
+    incrementSessions(agentIdentity, trustLevel) {
+        const now = new Date();
+        const budget = this.getBudget(trustLevel);
+        const agent = this.getOrCreateAgent(agentIdentity, now);
+        if (agent.activeSessions >= budget.maxConcurrentSessions) {
+            return false;
+        }
+        agent.activeSessions += 1;
+        agent.lastUpdated = now.toISOString();
+        return true;
+    }
+    /**
+     * Decrement the active session count for an agent.
+     * Clamps to zero — never goes negative.
+     */
+    decrementSessions(agentIdentity) {
+        const agent = this.agents.get(agentIdentity);
+        if (!agent)
+            return;
+        agent.activeSessions = Math.max(0, agent.activeSessions - 1);
+        agent.lastUpdated = new Date().toISOString();
+    }
+    // ── State Accessors ────────────────────────────────────────────────
+    /**
+     * Get current meter state for a specific agent, or null if unknown.
+     */
+    getAgentState(agentIdentity) {
+        const agent = this.agents.get(agentIdentity);
+        if (!agent)
+            return null;
+        // Roll windows before returning so caller sees fresh state
+        const now = new Date();
+        this.rollWindows(agent, now);
+        return { ...agent };
+    }
+    /**
+     * Get the global meter state.
+     */
+    getGlobalState() {
+        const now = new Date();
+        this.rollGlobalWindow(now);
+        return { ...this.global };
+    }
+    // ── Reset ──────────────────────────────────────────────────────────
+    /**
+     * Reset meters. If agentIdentity is provided, resets only that agent.
+     * If omitted, resets all agents and the global counter.
+     */
+    reset(agentIdentity) {
+        if (agentIdentity) {
+            this.agents.delete(agentIdentity);
+        }
+        else {
+            this.agents.clear();
+            const now = new Date();
+            this.global = {
+                dailyTokens: 0,
+                dayWindowStart: currentDayStart(now),
+                lastUpdated: now.toISOString(),
+            };
+        }
+    }
+    // ── Persistence ────────────────────────────────────────────────────
+    /**
+     * Persist current meter state to disk.
+     * Uses atomic write (tmp file + rename) to prevent corruption.
+     */
+    persist() {
+        try {
+            const agents = {};
+            for (const [key, state] of this.agents) {
+                agents[key] = { ...state };
+            }
+            const data = {
+                agents,
+                global: { ...this.global },
+                updatedAt: new Date().toISOString(),
+            };
+            atomicWrite(this.filePath, JSON.stringify(data, null, 2));
+        }
+        catch {
+            // Persistence failure should not break metering
+        }
+    }
+    /**
+     * Reload meter state from disk.
+     * Rolls any stale windows after loading.
+     */
+    reload() {
+        try {
+            if (!fs.existsSync(this.filePath))
+                return;
+            const raw = JSON.parse(fs.readFileSync(this.filePath, 'utf-8'));
+            if (!raw)
+                return;
+            const now = new Date();
+            // Restore agent states
+            if (raw.agents) {
+                for (const [key, state] of Object.entries(raw.agents)) {
+                    const agent = { ...state };
+                    this.rollWindows(agent, now);
+                    this.agents.set(key, agent);
+                }
+            }
+            // Restore global state
+            if (raw.global) {
+                this.global = { ...raw.global };
+                this.rollGlobalWindow(now);
+            }
+        }
+        catch {
+            // Load failure — start fresh
+        }
+    }
+    // ── Private ────────────────────────────────────────────────────────
+    getOrCreateAgent(agentIdentity, now) {
+        let agent = this.agents.get(agentIdentity);
+        if (!agent) {
+            agent = {
+                agentIdentity,
+                hourlyTokens: 0,
+                dailyTokens: 0,
+                activeSessions: 0,
+                hourWindowStart: currentHourStart(now),
+                dayWindowStart: currentDayStart(now),
+                lastUpdated: now.toISOString(),
+            };
+            this.agents.set(agentIdentity, agent);
+        }
+        return agent;
+    }
+    /**
+     * Roll agent windows if the hour or day has changed since window start.
+     */
+    rollWindows(agent, now) {
+        const nowHourStart = currentHourStart(now);
+        const nowDayStart = currentDayStart(now);
+        // Roll hourly window
+        if (agent.hourWindowStart !== nowHourStart) {
+            agent.hourlyTokens = 0;
+            agent.hourWindowStart = nowHourStart;
+        }
+        // Roll daily window
+        if (agent.dayWindowStart !== nowDayStart) {
+            agent.dailyTokens = 0;
+            agent.dayWindowStart = nowDayStart;
+        }
+    }
+    /**
+     * Roll the global daily window if the UTC date has changed.
+     */
+    rollGlobalWindow(now) {
+        const nowDayStart = currentDayStart(now);
+        if (this.global.dayWindowStart !== nowDayStart) {
+            this.global.dailyTokens = 0;
+            this.global.dayWindowStart = nowDayStart;
+        }
+    }
+}
+//# sourceMappingURL=ComputeMeter.js.map

package/dist/threadline/ComputeMeter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ComputeMeter.js","sourceRoot":"","sources":["../../src/threadline/ComputeMeter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA8C7B,wEAAwE;AAExE,MAAM,wBAAwB,GAAG,SAAS,CAAC;AAE3C,MAAM,YAAY,GAAsC;IACtD,SAAS,EAAG,EAAE,gBAAgB,EAAE,MAAM,EAAG,eAAe,EAAE,MAAM,EAAK,qBAAqB,EAAE,CAAC,EAAG;IAChG,QAAQ,EAAI,EAAE,gBAAgB,EAAE,MAAM,EAAG,eAAe,EAAE,OAAO,EAAI,qBAAqB,EAAE,CAAC,EAAG;IAChG,OAAO,EAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,EAAG;IAChG,UAAU,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,qBAAqB,EAAE,EAAE,EAAE;CACjG,CAAC;AAEF,wEAAwE;AAExE,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAY;IACjD,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACxF,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,SAAS,gBAAgB,CAAC,GAAS;IACjC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC3G,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AACzB,CAAC;AAED,yDAAyD;AACzD,SAAS,eAAe,CAAC,GAAS;IAChC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AACzB,CAAC;AAED,+CAA+C;AAC/C,SAAS,oBAAoB,CAAC,GAAS;IACrC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACtH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,0CAA0C;AAC1C,SAAS,mBAAmB,CAAC,GAAS;IACpC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC;AAUD,wEAAwE;AAExE,MAAM,OAAO,YAAY;IACN,aAAa,CAAS;IACtB,QAAQ,CAAS;IACjB,cAAc,CAAS;IACvB,eAAe,CAAsD;IAE9E,MAAM,CAA+B;IACrC,MAAM,CAAmB;IAEjC,YAAY,MAA0B;QACpC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC9D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;QACrE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACxE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;QAEpD,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG;YACZ,WAAW,EAAE,CAAC;YACd,cAAc,EAAE,eAAe,CAAC,GAAG,CAAC;YACpC,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;SAC/B,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,sEAAsE;IAEtE;;;OAGG;IACH,SAAS,CAAC,UAAsB;QAC9B,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;QACnC,OAAO;YACL,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB;YACrE,eAAe,EAAE,SAAS,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe;YAClE,qBAAqB,EAAE,SAAS,CAAC,qBAAqB,IAAI,IAAI,CAAC,qBAAqB;SACrF,CAAC;IACJ,CAAC;IAED,sEAAsE;IAEtE;;;OAGG;IACH,KAAK,CAAC,aAAqB,EAAE,UAAsB,EAAE,UAAkB;QACrE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAE1C,6BAA6B;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAE7B,qBAAqB;QACrB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAE3B,gFAAgF;QAChF,MAAM,iBAAiB,GAAG,MAAM,CAAC,qBAAqB,GAAG,KAAK,CAAC,cAAc,CAAC;QAE9E,eAAe;QACf,MAAM,eAAe,GAAG,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,YAAY,CAAC;QACrE,IAAI,KAAK,CAAC,YAAY,GAAG,UAAU,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC9D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,uBAAuB;gBAC/B,SAAS,EAAE;oBACT,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC;oBAC1C,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,WAAW,CAAC;oBACpE,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;oBAC7E,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC;iBACzC;gBACD,iBAAiB,EAAE,oBAAoB,CAAC,GAAG,CAAC;aAC7C,CAAC;QACJ,CAAC;QAED,cAAc;QACd,MAAM,cAAc,GAAG,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,WAAW,CAAC;QAClE,IAAI,KAAK,CAAC,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,sBAAsB;gBAC9B,SAAS,EAAE;oBACT,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC;oBAC1C,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC;oBACxC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;oBAC7E,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC;iBACzC;gBACD,iBAAiB,EAAE,mBAAmB,CAAC,GAAG,CAAC;aAC5C,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACtE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,qBAAqB;gBAC7B,SAAS,EAAE;oBACT,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC;oBAC1C,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC;oBACxC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC;oBAC/C,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC;iBACzC;gBACD,iBAAiB,EAAE,mBAAmB,CAAC,GAAG,CAAC;aAC5C,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE;gBACT,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,GAAG,UAAU,CAAC;gBACvD,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC;gBACrD,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,GAAG,UAAU,CAAC;gBAC5D,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC;aACzC;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,aAAqB,EAAE,UAAsB,EAAE,UAAkB;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAEnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAE3B,iBAAiB;QACjB,KAAK,CAAC,YAAY,IAAI,UAAU,CAAC;QACjC,KAAK,CAAC,WAAW,IAAI,UAAU,CAAC;QAChC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAE5C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sEAAsE;IAEtE;;;OAGG;IACH,iBAAiB,CAAC,aAAqB,EAAE,UAAsB;QAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAExD,IAAI,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;QAC1B,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,aAAqB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QAC7D,KAAK,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IAED,sEAAsE;IAEtE;;OAEG;IACH,aAAa,CAAC,aAAqB;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,2DAA2D;QAC3D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,sEAAsE;IAEtE;;;OAGG;IACH,KAAK,CAAC,aAAsB;QAC1B,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG;gBACZ,WAAW,EAAE,CAAC;gBACd,cAAc,EAAE,eAAe,CAAC,GAAG,CAAC;gBACpC,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;aAC/B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sEAAsE;IAEtE;;;OAGG;IACH,OAAO;QACL,IAAI,CAAC;YACH,MAAM,MAAM,GAAoC,EAAE,CAAC;YACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;YAC7B,CAAC;YACD,MAAM,IAAI,GAAmB;gBAC3B,MAAM;gBACN,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;gBAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAC1C,MAAM,GAAG,GAAmB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAChF,IAAI,CAAC,GAAG;gBAAE,OAAO;YAEjB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YAEvB,uBAAuB;YACvB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtD,MAAM,KAAK,GAAoB,EAAE,GAAG,KAAK,EAAE,CAAC;oBAC5C,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YAED,uBAAuB;YACvB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBAChC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED,sEAAsE;IAE9D,gBAAgB,CAAC,aAAqB,EAAE,GAAS;QACvD,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG;gBACN,aAAa;gBACb,YAAY,EAAE,CAAC;gBACf,WAAW,EAAE,CAAC;gBACd,cAAc,EAAE,CAAC;gBACjB,eAAe,EAAE,gBAAgB,CAAC,GAAG,CAAC;gBACtC,cAAc,EAAE,eAAe,CAAC,GAAG,CAAC;gBACpC,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;aAC/B,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,KAAsB,EAAE,GAAS;QACnD,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAEzC,qBAAqB;QACrB,IAAI,KAAK,CAAC,eAAe,KAAK,YAAY,EAAE,CAAC;YAC3C,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC;YACvB,KAAK,CAAC,eAAe,GAAG,YAAY,CAAC;QACvC,CAAC;QAED,oBAAoB;QACpB,IAAI,KAAK,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;YACzC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;YACtB,KAAK,CAAC,cAAc,GAAG,WAAW,CAAC;QACrC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,GAAS;QAChC,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,WAAW,CAAC;QAC3C,CAAC;IACH,CAAC;CACF"}

package/dist/threadline/ContentClassifier.d.ts

@@ -0,0 +1,83 @@
+/**
+ * ContentClassifier — Optional outbound content filter for relay responses.
+ *
+ * Evaluates outbound messages before they're sent to detect sensitive data:
+ *   - API keys, tokens, credentials
+ *   - Database queries or internal data
+ *   - System prompts or internal instructions
+ *   - Personal user information
+ *
+ * Default: disabled. Operators enable via config for agents handling
+ * sensitive data. Layer 4 (grounding preamble) is behavioral guidance;
+ * Layer 5 (this) is the actual outbound enforcement.
+ *
+ * Part of PROP-relay-auto-connect, Layer 5.
+ */
+export type ContentClassification = 'safe' | 'sensitive' | 'blocked';
+export interface ClassificationResult {
+    /** Overall classification */
+    classification: ContentClassification;
+    /** Why it was flagged (if not safe) */
+    reason?: string;
+    /** Sanitized version (if sensitive and redaction is available) */
+    redacted?: string;
+}
+export interface ContentClassifierConfig {
+    /** Enable the classifier (default: false) */
+    enabled: boolean;
+    /** Block sensitive content outright, or just flag it (default: false — flag only) */
+    blockSensitive?: boolean;
+    /** Custom patterns to detect (in addition to defaults) */
+    customPatterns?: Array<{
+        pattern: string;
+        label: string;
+    }>;
+    /** LLM classifier function — if provided, used for deep classification */
+    llmClassify?: (content: string, systemPrompt: string) => Promise<string>;
+}
+export interface ThreadContext {
+    /** Trust level of the conversation partner */
+    trustLevel: string;
+    /** Thread ID */
+    threadId?: string;
+    /** Remote agent name */
+    remoteAgent?: string;
+}
+export declare class ContentClassifier {
+    private readonly config;
+    private metrics;
+    constructor(config: ContentClassifierConfig);
+    /**
+     * Whether the classifier is active.
+     */
+    get enabled(): boolean;
+    /**
+     * Classify outbound content before sending.
+     *
+     * Two-stage pipeline:
+     *   1. Fast regex pattern matching (catches obvious leaks)
+     *   2. LLM classification (catches subtle leaks, if llmClassify is provided)
+     *
+     * If regex catches something definitive (API key, private key), we skip
+     * the LLM call for speed and cost savings.
+     */
+    classify(content: string, context: ThreadContext): Promise<ClassificationResult>;
+    /**
+     * Get classifier metrics for observability.
+     */
+    getMetrics(): {
+        classified: number;
+        safe: number;
+        sensitive: number;
+        blocked: number;
+        errors: number;
+        patternDetections: number;
+        llmClassifications: number;
+    };
+}
+/**
+ * Create a disabled (no-op) classifier.
+ * Used as default when content classification is not configured.
+ */
+export declare function createDisabledClassifier(): ContentClassifier;
+//# sourceMappingURL=ContentClassifier.d.ts.map

package/dist/threadline/ContentClassifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContentClassifier.d.ts","sourceRoot":"","sources":["../../src/threadline/ContentClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAErE,MAAM,WAAW,oBAAoB;IACnC,6BAA6B;IAC7B,cAAc,EAAE,qBAAqB,CAAC;IACtC,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,qFAAqF;IACrF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,0EAA0E;IAC1E,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1E;AAED,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAuGD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IAGjD,OAAO,CAAC,OAAO,CAQb;gBAEU,MAAM,EAAE,uBAAuB;IAI3C;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;;;;;OASG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAyEtF;;OAEG;IACH,UAAU;;;;;;;;;CAGX;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,iBAAiB,CAE5D"}

package/dist/threadline/ContentClassifier.js

@@ -0,0 +1,201 @@
+/**
+ * ContentClassifier — Optional outbound content filter for relay responses.
+ *
+ * Evaluates outbound messages before they're sent to detect sensitive data:
+ *   - API keys, tokens, credentials
+ *   - Database queries or internal data
+ *   - System prompts or internal instructions
+ *   - Personal user information
+ *
+ * Default: disabled. Operators enable via config for agents handling
+ * sensitive data. Layer 4 (grounding preamble) is behavioral guidance;
+ * Layer 5 (this) is the actual outbound enforcement.
+ *
+ * Part of PROP-relay-auto-connect, Layer 5.
+ */
+/**
+ * Fast regex-based detection for common sensitive patterns.
+ * This runs before (and sometimes instead of) the LLM classifier.
+ */
+const BUILTIN_PATTERNS = [
+    // API keys and tokens
+    { regex: /sk-[a-zA-Z0-9]{20,}/, label: 'API key (sk-* pattern)' },
+    { regex: /sk-ant-api[a-zA-Z0-9-]{20,}/, label: 'Anthropic API key' },
+    { regex: /ghp_[a-zA-Z0-9]{36,}/, label: 'GitHub personal access token' },
+    { regex: /gho_[a-zA-Z0-9]{36,}/, label: 'GitHub OAuth token' },
+    { regex: /xoxb-[0-9]{10,}-[a-zA-Z0-9-]+/, label: 'Slack bot token' },
+    { regex: /xoxp-[0-9]{10,}-[a-zA-Z0-9-]+/, label: 'Slack user token' },
+    { regex: /Bearer\s+[a-zA-Z0-9._\-]{20,}/, label: 'Bearer token' },
+    { regex: /AKIA[0-9A-Z]{16}/, label: 'AWS access key' },
+    { regex: /-----BEGIN (RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/, label: 'Private key' },
+    // Database content
+    { regex: /(?:postgres|mysql|mongodb|redis):\/\/[^\s]+:[^\s]+@/, label: 'Database connection string' },
+    { regex: /SELECT\s+.+\s+FROM\s+\w+\s+WHERE/i, label: 'SQL query with data' },
+    // Internal instructions
+    { regex: /system\s*prompt\s*[:=]/i, label: 'System prompt reference' },
+    { regex: /\[INTERNAL\].*(?:instruction|directive|config)/i, label: 'Internal instruction' },
+    // PII patterns
+    { regex: /\b\d{3}[-.]?\d{2}[-.]?\d{4}\b/, label: 'Possible SSN' },
+    { regex: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b.*(?:password|passwd|pwd)/i, label: 'Email with password context' },
+];
+function detectPatterns(content, customPatterns) {
+    const matches = [];
+    for (const { regex, label } of BUILTIN_PATTERNS) {
+        const match = content.match(regex);
+        if (match) {
+            matches.push({ label, match: match[0].slice(0, 30) + (match[0].length > 30 ? '...' : '') });
+        }
+    }
+    if (customPatterns) {
+        for (const { pattern, label } of customPatterns) {
+            try {
+                const regex = new RegExp(pattern);
+                const match = content.match(regex);
+                if (match) {
+                    matches.push({ label, match: match[0].slice(0, 30) + (match[0].length > 30 ? '...' : '') });
+                }
+            }
+            catch {
+                // Invalid regex — skip
+            }
+        }
+    }
+    return matches;
+}
+// ── LLM Classification Prompt ────────────────────────────────────────
+const LLM_CLASSIFIER_PROMPT = `You are a content safety classifier for an AI agent's outbound messages.
+
+Evaluate whether the following message contains any sensitive information that should NOT be shared with an external agent:
+
+1. API keys, tokens, secrets, or credentials
+2. Database contents, queries, or connection strings
+3. System prompts, internal instructions, or configuration details
+4. Personal user information (emails with passwords, SSNs, financial data)
+5. Proprietary business logic or trade secrets
+
+Respond with EXACTLY one line in this format:
+CLASSIFICATION: safe|sensitive|blocked
+REASON: [brief reason if not safe]
+
+"safe" = no sensitive content detected
+"sensitive" = contains information that could be sensitive in context
+"blocked" = contains clearly dangerous content (credentials, keys, PII)`;
+function parseLLMResponse(response) {
+    const classLine = response.match(/CLASSIFICATION:\s*(safe|sensitive|blocked)/i);
+    const reasonLine = response.match(/REASON:\s*(.+)/i);
+    if (!classLine) {
+        // If LLM didn't follow format, default to safe (fail-open for availability)
+        return { classification: 'safe' };
+    }
+    const classification = classLine[1].toLowerCase();
+    return {
+        classification,
+        reason: reasonLine?.[1]?.trim(),
+    };
+}
+// ── Implementation ───────────────────────────────────────────────────
+export class ContentClassifier {
+    config;
+    // Metrics
+    metrics = {
+        classified: 0,
+        safe: 0,
+        sensitive: 0,
+        blocked: 0,
+        errors: 0,
+        patternDetections: 0,
+        llmClassifications: 0,
+    };
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Whether the classifier is active.
+     */
+    get enabled() {
+        return this.config.enabled;
+    }
+    /**
+     * Classify outbound content before sending.
+     *
+     * Two-stage pipeline:
+     *   1. Fast regex pattern matching (catches obvious leaks)
+     *   2. LLM classification (catches subtle leaks, if llmClassify is provided)
+     *
+     * If regex catches something definitive (API key, private key), we skip
+     * the LLM call for speed and cost savings.
+     */
+    async classify(content, context) {
+        if (!this.config.enabled) {
+            return { classification: 'safe' };
+        }
+        this.metrics.classified++;
+        try {
+            // Stage 1: Fast pattern detection
+            const patterns = detectPatterns(content, this.config.customPatterns);
+            if (patterns.length > 0) {
+                this.metrics.patternDetections++;
+                // Definitive blocks: private keys, API keys, connection strings
+                const definitiveLabels = ['Private key', 'Database connection string', 'AWS access key'];
+                const isDefinitive = patterns.some(p => definitiveLabels.some(d => p.label.includes(d)));
+                if (isDefinitive) {
+                    this.metrics.blocked++;
+                    return {
+                        classification: 'blocked',
+                        reason: `Pattern detected: ${patterns.map(p => p.label).join(', ')}`,
+                    };
+                }
+                // Non-definitive patterns → sensitive
+                const result = {
+                    classification: this.config.blockSensitive ? 'blocked' : 'sensitive',
+                    reason: `Potential sensitive content: ${patterns.map(p => p.label).join(', ')}`,
+                };
+                if (this.config.blockSensitive) {
+                    this.metrics.blocked++;
+                }
+                else {
+                    this.metrics.sensitive++;
+                }
+                return result;
+            }
+            // Stage 2: LLM classification (if available and no patterns found)
+            if (this.config.llmClassify) {
+                this.metrics.llmClassifications++;
+                const llmResponse = await this.config.llmClassify(content, LLM_CLASSIFIER_PROMPT);
+                const result = parseLLMResponse(llmResponse);
+                // Apply blockSensitive policy
+                if (result.classification === 'sensitive' && this.config.blockSensitive) {
+                    result.classification = 'blocked';
+                }
+                this.metrics[result.classification]++;
+                return result;
+            }
+            // No patterns, no LLM → safe
+            this.metrics.safe++;
+            return { classification: 'safe' };
+        }
+        catch (err) {
+            this.metrics.errors++;
+            // Fail-open: classification errors don't block messages
+            // (availability > perfect security for a behavioral layer)
+            return {
+                classification: 'safe',
+                reason: `Classification error (fail-open): ${err instanceof Error ? err.message : 'unknown'}`,
+            };
+        }
+    }
+    /**
+     * Get classifier metrics for observability.
+     */
+    getMetrics() {
+        return { ...this.metrics };
+    }
+}
+/**
+ * Create a disabled (no-op) classifier.
+ * Used as default when content classification is not configured.
+ */
+export function createDisabledClassifier() {
+    return new ContentClassifier({ enabled: false });
+}
+//# sourceMappingURL=ContentClassifier.js.map

package/dist/threadline/ContentClassifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContentClassifier.js","sourceRoot":"","sources":["../../src/threadline/ContentClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA0CH;;;GAGG;AACH,MAAM,gBAAgB,GAA4C;IAChE,sBAAsB;IACtB,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,wBAAwB,EAAE;IACjE,EAAE,KAAK,EAAE,6BAA6B,EAAE,KAAK,EAAE,mBAAmB,EAAE;IACpE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACxE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC9D,EAAE,KAAK,EAAE,+BAA+B,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACpE,EAAE,KAAK,EAAE,+BAA+B,EAAE,KAAK,EAAE,kBAAkB,EAAE;IACrE,EAAE,KAAK,EAAE,+BAA+B,EAAE,KAAK,EAAE,cAAc,EAAE;IACjE,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE;IACtD,EAAE,KAAK,EAAE,sDAAsD,EAAE,KAAK,EAAE,aAAa,EAAE;IAEvF,mBAAmB;IACnB,EAAE,KAAK,EAAE,qDAAqD,EAAE,KAAK,EAAE,4BAA4B,EAAE;IACrG,EAAE,KAAK,EAAE,mCAAmC,EAAE,KAAK,EAAE,qBAAqB,EAAE;IAE5E,wBAAwB;IACxB,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,yBAAyB,EAAE;IACtE,EAAE,KAAK,EAAE,iDAAiD,EAAE,KAAK,EAAE,sBAAsB,EAAE;IAE3F,eAAe;IACf,EAAE,KAAK,EAAE,+BAA+B,EAAE,KAAK,EAAE,cAAc,EAAE;IACjE,EAAE,KAAK,EAAE,+EAA+E,EAAE,KAAK,EAAE,6BAA6B,EAAE;CACjI,CAAC;AAEF,SAAS,cAAc,CAAC,OAAe,EAAE,cAA0D;IACjG,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,cAAc,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9F,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wEAAwE;AAExE,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;wEAgB0C,CAAC;AAEzE,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAErD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,4EAA4E;QAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAA2B,CAAC;IAC3E,OAAO;QACL,cAAc;QACd,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;KAChC,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,MAAM,OAAO,iBAAiB;IACX,MAAM,CAA0B;IAEjD,UAAU;IACF,OAAO,GAAG;QAChB,UAAU,EAAE,CAAC;QACb,IAAI,EAAE,CAAC;QACP,SAAS,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,CAAC;QACT,iBAAiB,EAAE,CAAC;QACpB,kBAAkB,EAAE,CAAC;KACtB,CAAC;IAEF,YAAY,MAA+B;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,OAAsB;QACpD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAE1B,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAErE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBAEjC,gEAAgE;gBAChE,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,4BAA4B,EAAE,gBAAgB,CAAC,CAAC;gBACzF,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACrC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAChD,CAAC;gBAEF,IAAI,YAAY,EAAE,CAAC;oBACjB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBACvB,OAAO;wBACL,cAAc,EAAE,SAAS;wBACzB,MAAM,EAAE,qBAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACrE,CAAC;gBACJ,CAAC;gBAED,sCAAsC;gBACtC,MAAM,MAAM,GAAyB;oBACnC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;oBACpE,MAAM,EAAE,gCAAgC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAChF,CAAC;gBAEF,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,mEAAmE;YACnE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;gBAElC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;gBAClF,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAE7C,8BAA8B;gBAC9B,IAAI,MAAM,CAAC,cAAc,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxE,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;gBACpC,CAAC;gBAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtC,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,6BAA6B;YAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACtB,wDAAwD;YACxD,2DAA2D;YAC3D,OAAO;gBACL,cAAc,EAAE,MAAM;gBACtB,MAAM,EAAE,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE;aAC9F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AACnD,CAAC"}