@kilnai/core 0.23.2 → 1.0.1

package/dist/orchestrator/task-registry.js

@@ -0,0 +1,167 @@
+/**
+ * Task Registry: shared task-state substrate for multi-agent teams.
+ *
+ * Agents query the registry to find work. Results are published as concise
+ * summaries, not full tool call logs (prevents context contamination).
+ *
+ * Design principles (from research):
+ * - Publish only results, not process (Workforce isolation)
+ * - Registry is the coordination medium (no direct agent-to-agent messaging)
+ * - Tasks carry demand signal for demand-based allocation
+ */
+export class TaskRegistry {
+    tasks;
+    constructor() {
+        this.tasks = new Map();
+    }
+    /**
+     * Publish a new task to the channel. Status starts as "open"
+     * unless it has unresolved dependencies (then "blocked").
+     */
+    register(options) {
+        const deps = options.dependencies ?? [];
+        const hasUnresolvedDeps = deps.some((depId) => {
+            const dep = this.tasks.get(depId);
+            return !dep || dep.status !== "completed";
+        });
+        const now = Date.now();
+        const task = {
+            id: options.id,
+            description: options.description,
+            category: options.category,
+            demand: options.demand,
+            status: hasUnresolvedDeps ? "blocked" : "open",
+            dependencies: [...deps],
+            createdAt: now,
+            updatedAt: now,
+            parentId: options.parentId,
+        };
+        this.tasks.set(task.id, task);
+        return task;
+    }
+    /**
+     * Claim a task for an agent. Only "open" tasks can be claimed.
+     * Returns the updated task, or null if the task is not claimable.
+     */
+    claim(taskId, agentId) {
+        const task = this.tasks.get(taskId);
+        if (!task || task.status !== "open")
+            return null;
+        const updated = {
+            ...task,
+            status: "claimed",
+            assignee: agentId,
+            updatedAt: Date.now(),
+        };
+        this.tasks.set(taskId, updated);
+        return updated;
+    }
+    /**
+     * Complete a task with a concise result summary.
+     * Only "claimed" tasks can be completed.
+     * After completion, unblocks dependent tasks whose deps are all resolved.
+     */
+    complete(taskId, options) {
+        const task = this.tasks.get(taskId);
+        if (!task || task.status !== "claimed")
+            return null;
+        const updated = {
+            ...task,
+            status: "completed",
+            result: options.result,
+            updatedAt: Date.now(),
+        };
+        this.tasks.set(taskId, updated);
+        // Unblock dependent tasks
+        this.unblockDependents(taskId);
+        return updated;
+    }
+    /**
+     * Mark a task as failed with an error description.
+     * Only "claimed" tasks can be failed.
+     */
+    fail(taskId, options) {
+        const task = this.tasks.get(taskId);
+        if (!task || task.status !== "claimed")
+            return null;
+        const updated = {
+            ...task,
+            status: "failed",
+            error: options.error,
+            updatedAt: Date.now(),
+        };
+        this.tasks.set(taskId, updated);
+        return updated;
+    }
+    /**
+     * Release a claimed task back to "open" (agent gave up or was reassigned).
+     * Only "claimed" tasks can be released.
+     */
+    release(taskId) {
+        const task = this.tasks.get(taskId);
+        if (!task || task.status !== "claimed")
+            return null;
+        const updated = {
+            ...task,
+            status: "open",
+            assignee: undefined,
+            updatedAt: Date.now(),
+        };
+        this.tasks.set(taskId, updated);
+        return updated;
+    }
+    /** Get a task by ID */
+    get(taskId) {
+        return this.tasks.get(taskId);
+    }
+    /** Get all tasks with a specific status */
+    byStatus(status) {
+        return [...this.tasks.values()].filter((t) => t.status === status);
+    }
+    /** Get all open tasks (available for claim) */
+    open() {
+        return this.byStatus("open");
+    }
+    /** Get all tasks assigned to a specific agent */
+    byAssignee(agentId) {
+        return [...this.tasks.values()].filter((t) => t.assignee === agentId);
+    }
+    /** Get all tasks in the channel */
+    all() {
+        return [...this.tasks.values()];
+    }
+    /** Get count of tasks by status */
+    counts() {
+        const counts = {
+            open: 0,
+            claimed: 0,
+            completed: 0,
+            failed: 0,
+            blocked: 0,
+        };
+        for (const task of this.tasks.values()) {
+            counts[task.status]++;
+        }
+        return counts;
+    }
+    /**
+     * Check blocked tasks and unblock any whose dependencies are all completed.
+     * Called internally after task completion, but can also be called externally.
+     */
+    unblockDependents(completedTaskId) {
+        for (const [id, task] of this.tasks) {
+            if (task.status !== "blocked")
+                continue;
+            if (!task.dependencies.includes(completedTaskId))
+                continue;
+            const allDepsCompleted = task.dependencies.every((depId) => {
+                const dep = this.tasks.get(depId);
+                return dep !== undefined && dep.status === "completed";
+            });
+            if (allDepsCompleted) {
+                this.tasks.set(id, { ...task, status: "open", updatedAt: Date.now() });
+            }
+        }
+    }
+}
+//# sourceMappingURL=task-registry.js.map

package/dist/orchestrator/task-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-registry.js","sourceRoot":"","sources":["../../src/orchestrator/task-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAgDH,MAAM,OAAO,YAAY;IACN,KAAK,CAA8B;IAEpD;QACE,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,OAA4B;QACnC,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QACxC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAmB;YAC3B,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YAC9C,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC;YACvB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAc,EAAE,OAAe;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAEjD,MAAM,OAAO,GAAmB;YAC9B,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,MAAc,EAAE,OAA4B;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAEpD,MAAM,OAAO,GAAmB;YAC9B,GAAG,IAAI;YACP,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEhC,0BAA0B;QAC1B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,MAAc,EAAE,OAAwB;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAEpD,MAAM,OAAO,GAAmB;YAC9B,GAAG,IAAI;YACP,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,MAAc;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAEpD,MAAM,OAAO,GAAmB;YAC9B,GAAG,IAAI;YACP,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,uBAAuB;IACvB,GAAG,CAAC,MAAc;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,2CAA2C;IAC3C,QAAQ,CAAC,MAA4B;QACnC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,+CAA+C;IAC/C,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,iDAAiD;IACjD,UAAU,CAAC,OAAe;QACxB,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,mCAAmC;IACnC,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,mCAAmC;IACnC,MAAM;QACJ,MAAM,MAAM,GAAyC;YACnD,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;SACX,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,eAAuB;QACvC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAAE,SAAS;YAE3D,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAClC,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC;YACzD,CAAC,CAAC,CAAC;YAEH,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/safety/pii-scanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pii-scanner.d.ts","sourceRoot":"","sources":["../../src/safety/pii-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1D,UAAU,UAAU;IAClB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,gDAAgD;AAChD,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAO7C,CAAC;AAEF,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;CAC1C;AAkBD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;gBAEvB,MAAM,EAAE,SAAS;IAI7B,oEAAoE;IACpE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa;IA4B3C,iEAAiE;IAC3D,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAYpF,sEAAsE;IAChE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAmBjF,uFAAuF;IACvF,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,QAAQ,EAAE,GAAG,MAAM;CAa5D"}
+{"version":3,"file":"pii-scanner.d.ts","sourceRoot":"","sources":["../../src/safety/pii-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1D,UAAU,UAAU;IAClB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,gDAAgD;AAChD,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAO7C,CAAC;AAEF,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;CAC1C;AAkBD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;gBAEvB,MAAM,EAAE,SAAS;IAI7B,oEAAoE;IACpE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa;IA4B3C,iEAAiE;IAC3D,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAYpF,sEAAsE;IAChE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAmBjF,uFAAuF;IACvF,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,QAAQ,EAAE,GAAG,MAAM;CAY5D"}

package/dist/safety/pii-scanner.js

@@ -31,15 +31,15 @@ export class PiiScanner {
     }
     /** Tier 1: regex-based scanning, filtered to config.detect types */
     scanHeuristic(input) {
+        const normalized = input.normalize("NFKC");
         const matches = [];
         const allowlist = new Set(this.config.allowlist ?? []);
         for (const pattern of PII_PATTERNS) {
             if (!this.config.detect.includes(pattern.type))
                 continue;
-            // Reset regex lastIndex for global patterns
             const regex = new RegExp(pattern.regex.source, pattern.regex.flags);
             let match;
-            while ((match = regex.exec(input)) !== null) {
+            while ((match = regex.exec(normalized)) !== null) {
                 const value = match[0];
                 if (allowlist.has(value))
                     continue;
@@ -57,23 +57,23 @@ export class PiiScanner {
     }
     /** Tier 2: LLM-based deep scan for named entities (fail-open) */
     async scanDeep(input, provider) {
+        const normalized = input.normalize("NFKC");
         try {
-            const matches = await provider.scan(input);
+            const matches = await provider.scan(normalized);
             const allowlist = new Set(this.config.allowlist ?? []);
             const filtered = matches.filter((m) => !allowlist.has(m.value));
             return { matches: filtered, tier: "deep", scannedAt: new Date() };
         }
         catch {
-            // Fail-open: return empty on error
             return { matches: [], tier: "deep", scannedAt: new Date() };
         }
     }
     /** Combined scan: always Tier 1, Tier 2 if config.deepScan is true */
     async scan(input, provider) {
-        const heuristic = this.scanHeuristic(input);
+        const normalized = input.normalize("NFKC");
+        const heuristic = this.scanHeuristic(normalized);
         if (this.config.deepScan && provider) {
-            const deep = await this.scanDeep(input, provider);
-            // Merge: heuristic matches + deep matches, deduplicated by position
+            const deep = await this.scanDeep(normalized, provider);
             const allMatches = [...heuristic.matches];
             for (const dm of deep.matches) {
                 const exists = allMatches.some((m) => m.startIndex === dm.startIndex && m.endIndex === dm.endIndex);
@@ -88,7 +88,6 @@ export class PiiScanner {
     redact(input, matches) {
         if (matches.length === 0)
             return input;
-        // Sort by startIndex descending to preserve earlier indices
         const sorted = [...matches].sort((a, b) => b.startIndex - a.startIndex);
         let result = input;
         for (const match of sorted) {

package/dist/safety/pii-scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"pii-scanner.js","sourceRoot":"","sources":["../../src/safety/pii-scanner.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAU7E,gDAAgD;AAChD,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE;IAC3E,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sDAAsD,EAAE;IAChF,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE;IAChD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC9D,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC7D,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,iEAAiE,EAAE;CACpG,CAAC;AAOF,gEAAgE;AAChE,SAAS,SAAS,CAAC,MAAc;IAC/B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,SAAS,EAAE,CAAC;YACd,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,SAAS,GAAG,CAAC,SAAS,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,OAAO,UAAU;IACJ,MAAM,CAAY;IAEnC,YAAY,MAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,oEAAoE;IACpE,aAAa,CAAC,KAAa;QACzB,MAAM,OAAO,GAAe,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAEvD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEzD,4CAA4C;YAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,KAA6B,CAAC;YAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACnC,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAAE,SAAS;gBAErF,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK;oBACL,UAAU,EAAE,KAAK,CAAC,KAAK;oBACvB,QAAQ,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;IAC/D,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,QAA6B;QACzD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;YACnC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,QAA8B;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClD,oEAAoE;YACpE,MAAM,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1C,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,QAAQ,CACpE,CAAC;gBACF,IAAI,CAAC,MAAM;oBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACtE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,uFAAuF;IACvF,MAAM,CAAC,KAAa,EAAE,OAA4B;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAEvC,4DAA4D;QAC5D,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;QACxE,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}
+{"version":3,"file":"pii-scanner.js","sourceRoot":"","sources":["../../src/safety/pii-scanner.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAU7E,gDAAgD;AAChD,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE;IAC3E,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sDAAsD,EAAE;IAChF,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE;IAChD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC9D,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC7D,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,iEAAiE,EAAE;CACpG,CAAC;AAOF,gEAAgE;AAChE,SAAS,SAAS,CAAC,MAAc;IAC/B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,SAAS,EAAE,CAAC;YACd,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,SAAS,GAAG,CAAC,SAAS,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,OAAO,UAAU;IACJ,MAAM,CAAY;IAEnC,YAAY,MAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,oEAAoE;IACpE,aAAa,CAAC,KAAa;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAe,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAEvD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEzD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,KAA6B,CAAC;YAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACnC,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAAE,SAAS;gBAErF,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK;oBACL,UAAU,EAAE,KAAK,CAAC,KAAK;oBACvB,QAAQ,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;IAC/D,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,QAA6B;QACzD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,QAA8B;QACtD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAEjD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1C,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,QAAQ,CACpE,CAAC;gBACF,IAAI,CAAC,MAAM;oBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACtE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,uFAAuF;IACvF,MAAM,CAAC,KAAa,EAAE,OAA4B;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAEvC,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;QACxE,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/safety/rails.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rails.d.ts","sourceRoot":"","sources":["../../src/safety/rails.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACvJ,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEhE,0DAA0D;AAC1D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,GAAG,YAAY,CAAC;CAClE;AAED,mEAAmE;AACnE,qBAAa,SAAU,YAAW,UAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAE7B,MAAM,EAAE,eAAe;IAInC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,YAAY;CAgClE;AAED,6CAA6C;AAC7C,qBAAa,cAAe,YAAW,UAAU;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;gBAElC,MAAM,EAAE,oBAAoB;IAIxC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,YAAY;CAgBlE;AAED,iEAAiE;AACjE,qBAAa,cAAe,YAAW,UAAU;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;gBAElC,MAAM,EAAE,oBAAoB;IAIxC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,YAAY;CAgBlE;AAED,mFAAmF;AACnF,qBAAa,cAAe,YAAW,UAAU;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;gBAElC,MAAM,EAAE,oBAAoB;IAIxC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,GAAG,YAAY;CAqCjE;AAED,wDAAwD;AACxD,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAWzD"}
+{"version":3,"file":"rails.d.ts","sourceRoot":"","sources":["../../src/safety/rails.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACvJ,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEhE,0DAA0D;AAC1D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,GAAG,YAAY,CAAC;CAClE;AAED,mEAAmE;AACnE,qBAAa,SAAU,YAAW,UAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAE7B,MAAM,EAAE,eAAe;IAInC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,YAAY;CAiClE;AAED,6CAA6C;AAC7C,qBAAa,cAAe,YAAW,UAAU;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;gBAElC,MAAM,EAAE,oBAAoB;IAIxC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,YAAY;CAiBlE;AAED,iEAAiE;AACjE,qBAAa,cAAe,YAAW,UAAU;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;gBAElC,MAAM,EAAE,oBAAoB;IAIxC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,YAAY;CAiBlE;AAED,mFAAmF;AACnF,qBAAa,cAAe,YAAW,UAAU;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;gBAElC,MAAM,EAAE,oBAAoB;IAIxC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,GAAG,YAAY;CAuCjE;AAED,wDAAwD;AACxD,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAWzD"}

package/dist/safety/rails.js

@@ -6,7 +6,8 @@ export class TopicRail {
         this.config = config;
     }
     evaluate(text, _direction) {
-        const lower = text.toLowerCase();
+        const normalized = text.normalize("NFKC");
+        const lower = normalized.toLowerCase();
         // Check blocked topics
         if (this.config.block) {
             for (const topic of this.config.block) {
@@ -42,7 +43,8 @@ export class CompetitorRail {
         this.config = config;
     }
     evaluate(text, _direction) {
-        const lower = text.toLowerCase();
+        const normalized = text.normalize("NFKC");
+        const lower = normalized.toLowerCase();
         for (const competitor of this.config.competitors) {
             if (lower.includes(competitor.toLowerCase())) {
                 return {
@@ -63,7 +65,8 @@ export class EscalationRail {
         this.config = config;
     }
     evaluate(text, _direction) {
-        const lower = text.toLowerCase();
+        const normalized = text.normalize("NFKC");
+        const lower = normalized.toLowerCase();
         for (const trigger of this.config.triggers) {
             if (lower.includes(trigger.toLowerCase())) {
                 return {
@@ -88,9 +91,10 @@ export class ComplianceRail {
         if (direction === "input") {
             return { allowed: true, railType: "compliance" };
         }
+        const normalized = text.normalize("NFKC");
         // Check forbidden phrases
         if (this.config.forbid) {
-            const lower = text.toLowerCase();
+            const lower = normalized.toLowerCase();
             for (const phrase of this.config.forbid) {
                 if (lower.includes(phrase.toLowerCase())) {
                     return {
@@ -103,7 +107,7 @@ export class ComplianceRail {
         }
         // Check required phrases
         if (this.config.required) {
-            const lower = text.toLowerCase();
+            const lower = normalized.toLowerCase();
             for (const phrase of this.config.required) {
                 if (!lower.includes(phrase.toLowerCase())) {
                     return {

package/dist/safety/rails.js.map

@@ -1 +1 @@
-{"version":3,"file":"rails.js","sourceRoot":"","sources":["../../src/safety/rails.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAUrE,mEAAmE;AACnE,MAAM,OAAO,SAAS;IACH,MAAM,CAAkB;IAEzC,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,UAA2B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEjC,uBAAuB;QACvB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACxC,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,QAAQ,EAAE,OAAO;wBACjB,MAAM,EAAE,2BAA2B,KAAK,EAAE;qBAC3C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACxC,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,OAAO;wBACjB,MAAM,EAAE,8BAA8B,KAAK,EAAE;wBAC7C,QAAQ,EAAE,IAAI;qBACf,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC;CACF;AAED,6CAA6C;AAC7C,MAAM,OAAO,cAAc;IACR,MAAM,CAAuB;IAE9C,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,UAA2B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEjC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC7C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,yBAAyB,UAAU,EAAE;oBAC7C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACjC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;CACF;AAED,iEAAiE;AACjE,MAAM,OAAO,cAAc;IACR,MAAM,CAAuB;IAE9C,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,UAA2B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEjC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1C,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,gCAAgC,OAAO,EAAE;oBACjD,QAAQ,EAAE,IAAI;iBACf,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,cAAc;IACR,MAAM,CAAuB;IAE9C,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,SAA0B;QAC/C,oCAAoC;QACpC,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QACnD,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACzC,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,QAAQ,EAAE,YAAY;wBACtB,MAAM,EAAE,8BAA8B,MAAM,EAAE;qBAC/C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAC1C,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,QAAQ,EAAE,YAAY;wBACtB,MAAM,EAAE,4BAA4B,MAAM,EAAE;wBAC5C,UAAU,EAAE,aAAa,MAAM,GAAG;qBACnC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;CACF;AAED,wDAAwD;AACxD,MAAM,UAAU,UAAU,CAAC,MAAkB;IAC3C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/B,KAAK,YAAY;YACf,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}
+{"version":3,"file":"rails.js","sourceRoot":"","sources":["../../src/safety/rails.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAUrE,mEAAmE;AACnE,MAAM,OAAO,SAAS;IACH,MAAM,CAAkB;IAEzC,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,UAA2B;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QAEvC,uBAAuB;QACvB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACxC,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,QAAQ,EAAE,OAAO;wBACjB,MAAM,EAAE,2BAA2B,KAAK,EAAE;qBAC3C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACxC,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,OAAO;wBACjB,MAAM,EAAE,8BAA8B,KAAK,EAAE;wBAC7C,QAAQ,EAAE,IAAI;qBACf,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC;CACF;AAED,6CAA6C;AAC7C,MAAM,OAAO,cAAc;IACR,MAAM,CAAuB;IAE9C,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,UAA2B;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QAEvC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC7C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,yBAAyB,UAAU,EAAE;oBAC7C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACjC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;CACF;AAED,iEAAiE;AACjE,MAAM,OAAO,cAAc;IACR,MAAM,CAAuB;IAE9C,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,UAA2B;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QAEvC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1C,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,gCAAgC,OAAO,EAAE;oBACjD,QAAQ,EAAE,IAAI;iBACf,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,cAAc;IACR,MAAM,CAAuB;IAE9C,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,SAA0B;QAC/C,oCAAoC;QACpC,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE1C,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;YACvC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACzC,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,QAAQ,EAAE,YAAY;wBACtB,MAAM,EAAE,8BAA8B,MAAM,EAAE;qBAC/C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;YACvC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAC1C,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,QAAQ,EAAE,YAAY;wBACtB,MAAM,EAAE,4BAA4B,MAAM,EAAE;wBAC5C,UAAU,EAAE,aAAa,MAAM,GAAG;qBACnC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;CACF;AAED,wDAAwD;AACxD,MAAM,UAAU,UAAU,CAAC,MAAkB;IAC3C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/B,KAAK,YAAY;YACf,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/dist/security/dangerous-command-detector.d.ts

@@ -0,0 +1,5 @@
+import type { DangerousCommandDecision, DangerousCommandDetector, DangerousCommandRequest } from "../engine/domain/tool-execution.js";
+export declare class DeterministicDangerousCommandDetector implements DangerousCommandDetector {
+    evaluate(request: DangerousCommandRequest): DangerousCommandDecision;
+}
+//# sourceMappingURL=dangerous-command-detector.d.ts.map

package/dist/security/dangerous-command-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dangerous-command-detector.d.ts","sourceRoot":"","sources":["../../src/security/dangerous-command-detector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACxB,MAAM,oCAAoC,CAAC;AA0F5C,qBAAa,qCAAsC,YAAW,wBAAwB;IACpF,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,wBAAwB;CAwBrE"}

package/dist/security/dangerous-command-detector.js

@@ -0,0 +1,92 @@
+const DOWNLOAD_EXEC_PATTERN = /\b(?:curl|wget|invoke-webrequest|iwr)\b[^\n|]*\|\s*(?:bash|sh|zsh|iex|invoke-expression)\b/i;
+const UNIX_DESTRUCTIVE_PATTERN = /\brm\b\s+(?:(?:-[^\s]+\s+)*)\S+|\bsudo\s+(?:rm|dd|mkfs(?:\.\S+)?|shutdown|reboot)\b/i;
+const WINDOWS_DESTRUCTIVE_PATTERN = /\b(?:cmd(?:\.exe)?\s+\/c\s+)?del(?:\.exe)?\b(?:\s+\/[a-z]+)*\s+\S+|\b(?:cmd(?:\.exe)?\s+\/c\s+)?(?:rd|rmdir)\b(?=[^\n;|]*\/s\b)[^\n;|]*|\b(?:remove-item|ri)\b(?=[^;\n|]*-(?:force|recurse))[^;\n|]*/i;
+const AMBIGUOUS_EXPANSION_PATTERN = /\$\(|`[^`]*`|%\w+%|\${[^}]+}/;
+const AMBIGUOUS_CHAINING_PATTERN = /&&|\|\||;|\n/;
+const SAFE_READ_ONLY_PATTERNS = [
+    /^\s*(?:ls|dir|pwd|whoami)\b[^\n|&;`$()]*$/i,
+    /^\s*git\s+(?:status|diff|log)\b[^\n|&;`$()]*$/i,
+    /^\s*(?:cat|type)\s+[^|&;`$()<>]+$/i,
+    /^\s*(?:rg|fd|findstr)\b[^\n|&;`$()]*$/i,
+];
+function ask(reasonCode, reason) {
+    return { action: "ask", reasonCode, reason };
+}
+function deny(reasonCode, reason) {
+    return { action: "deny", reasonCode, reason };
+}
+function allow(reason) {
+    return { action: "allow", reasonCode: "safe_read_only", reason };
+}
+function extractNestedShellCommand(command) {
+    const quotedMatch = command.match(/\b(?:bash|sh|zsh)\s+-l?c\s+(['"])([\s\S]*?)\1/i);
+    if (quotedMatch?.[2])
+        return quotedMatch[2];
+    const unquotedMatch = command.match(/\b(?:bash|sh|zsh)\s+-l?c\s+(.+)$/i);
+    return unquotedMatch?.[1]?.trim() ?? null;
+}
+function inferShellFromCommand(command) {
+    const trimmed = command.trim();
+    if (/^(?:cmd(?:\.exe)?\s+\/c|powershell(?:\.exe)?\b|pwsh(?:\.exe)?\b)/i.test(trimmed)
+        || /^(?:del|rd|rmdir|remove-item|ri)\b/i.test(trimmed)) {
+        return "cmd";
+    }
+    if (/^(?:bash|sh|zsh)\b/i.test(trimmed)) {
+        return "bash";
+    }
+    return "any";
+}
+function shouldCheckUnix(shell) {
+    return shell === "any" || shell === "bash" || shell === "sh" || shell === "zsh";
+}
+function shouldCheckWindows(shell) {
+    return shell === "any" || shell === "powershell" || shell === "cmd";
+}
+function normalizeShell(shell) {
+    return shell ?? "any";
+}
+function evaluatePrimitive(command, shell) {
+    if (DOWNLOAD_EXEC_PATTERN.test(command)) {
+        return deny("download_execute", "Detected remote download-and-execute command pipeline.");
+    }
+    if (shouldCheckUnix(shell) && UNIX_DESTRUCTIVE_PATTERN.test(command)) {
+        return deny("destructive_unix", "Detected destructive Unix command pattern.");
+    }
+    if (shouldCheckWindows(shell) && WINDOWS_DESTRUCTIVE_PATTERN.test(command)) {
+        return deny("destructive_windows", "Detected destructive Windows command pattern.");
+    }
+    for (const pattern of SAFE_READ_ONLY_PATTERNS) {
+        if (pattern.test(command)) {
+            return allow("Command matches deterministic read-only allowlist.");
+        }
+    }
+    if (AMBIGUOUS_EXPANSION_PATTERN.test(command)) {
+        return ask("ambiguous_expansion", "Command contains shell expansion/substitution and requires approval.");
+    }
+    if (AMBIGUOUS_CHAINING_PATTERN.test(command)) {
+        return ask("ambiguous_chaining", "Command contains chaining/control operators and requires approval.");
+    }
+    return ask("unknown_command", "Command is not in deterministic allowlist.");
+}
+export class DeterministicDangerousCommandDetector {
+    evaluate(request) {
+        const command = request.command.trim();
+        const shell = normalizeShell(request.shell);
+        if (command.length === 0) {
+            return ask("empty_command", "Command is empty.");
+        }
+        const nested = extractNestedShellCommand(command);
+        if (nested !== null && nested.length > 0) {
+            const nestedShell = inferShellFromCommand(nested);
+            const nestedDecision = evaluatePrimitive(nested, nestedShell);
+            if (nestedDecision.action === "deny") {
+                return nestedDecision;
+            }
+            if (nestedDecision.action === "ask") {
+                return ask(nestedDecision.reasonCode, `Nested shell command requires approval: ${nestedDecision.reason}`);
+            }
+        }
+        return evaluatePrimitive(command, shell);
+    }
+}
+//# sourceMappingURL=dangerous-command-detector.js.map

package/dist/security/dangerous-command-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dangerous-command-detector.js","sourceRoot":"","sources":["../../src/security/dangerous-command-detector.ts"],"names":[],"mappings":"AAOA,MAAM,qBAAqB,GACzB,6FAA6F,CAAC;AAEhG,MAAM,wBAAwB,GAC5B,sFAAsF,CAAC;AAEzF,MAAM,2BAA2B,GAC/B,uMAAuM,CAAC;AAE1M,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AACnE,MAAM,0BAA0B,GAAG,cAAc,CAAC;AAElD,MAAM,uBAAuB,GAAsB;IACjD,4CAA4C;IAC5C,gDAAgD;IAChD,oCAAoC;IACpC,wCAAwC;CACzC,CAAC;AAEF,SAAS,GAAG,CAAC,UAAkD,EAAE,MAAc;IAC7E,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,IAAI,CAAC,UAAkD,EAAE,MAAc;IAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,KAAK,CAAC,MAAc;IAC3B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAe;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpF,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzE,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IACE,mEAAmE,CAAC,IAAI,CAAC,OAAO,CAAC;WAC9E,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC,EACtD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAmB;IAC1C,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,CAAC;AAClF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAmB;IAC7C,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,KAAK,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC1C,OAAO,KAAK,IAAI,KAAK,CAAC;AACxB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,KAAmB;IAC7D,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,kBAAkB,EAAE,wDAAwD,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC,qBAAqB,EAAE,+CAA+C,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,OAAO,GAAG,CAAC,qBAAqB,EAAE,sEAAsE,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,OAAO,GAAG,CAAC,oBAAoB,EAAE,oEAAoE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,GAAG,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,OAAO,qCAAqC;IAChD,QAAQ,CAAC,OAAgC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC9D,IAAI,cAAc,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACrC,OAAO,cAAc,CAAC;YACxB,CAAC;YACD,IAAI,cAAc,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACpC,OAAO,GAAG,CACR,cAAc,CAAC,UAAU,EACzB,2CAA2C,cAAc,CAAC,MAAM,EAAE,CACnE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/security/index.d.ts

@@ -9,4 +9,5 @@ export { SelfAudit } from "./self-audit.js";
 export type { SecurityCheckName, SecurityCheckResult, SecurityAuditReport, SelfAuditOptions, } from "./self-audit.js";
 export { AnnotationAuthorizer } from "./annotation-authorizer.js";
 export type { AuthorizationPolicy } from "./annotation-authorizer.js";
+export { DeterministicDangerousCommandDetector } from "./dangerous-command-detector.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,WAAW,EACX,UAAU,EACV,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACxE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,WAAW,EACX,UAAU,EACV,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACxE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,qCAAqC,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/security/index.js

@@ -5,4 +5,5 @@ export { PromptScanner, INJECTION_PATTERNS } from "./prompt-scanner.js";
 export { Guardian } from "./guardian.js";
 export { SelfAudit } from "./self-audit.js";
 export { AnnotationAuthorizer } from "./annotation-authorizer.js";
+export { DeterministicDangerousCommandDetector } from "./dangerous-command-detector.js";
 //# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAoB7E,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAO5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAoB7E,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAO5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,EAAE,qCAAqC,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/security/prompt-scanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-scanner.d.ts","sourceRoot":"","sources":["../../src/security/prompt-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAgB,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG1D,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,kDAAkD;AAClD,eAAO,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EA6OzD,CAAC;AA0CF,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAEnC,MAAM,CAAC,EAAE,qBAAqB;IAQ1C,8DAA8D;IAC9D,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB;IAuC9C,oDAAoD;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkDnF,qFAAqF;IAC/E,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAmBjF"}
+{"version":3,"file":"prompt-scanner.d.ts","sourceRoot":"","sources":["../../src/security/prompt-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAgB,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG1D,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,kDAAkD;AAClD,eAAO,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EA6OzD,CAAC;AAyKF,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAEnC,MAAM,CAAC,EAAE,qBAAqB;IAQ1C,8DAA8D;IAC9D,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB;IA+C9C,oDAAoD;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkDnF,qFAAqF;IAC/E,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAmBjF"}

package/dist/security/prompt-scanner.js

@@ -243,6 +243,111 @@ const SEVERITY_ORDER = [
     "high",
     "critical",
 ];
+// Detection-time only normalization for common obfuscation vectors.
+// Original input is preserved for reporting/audit paths.
+const INVISIBLE_CHAR_DETECTION_PATTERN = /[\u200B\u200C\u200D\uFEFF\u2060\u00AD\u200E\u200F\u202A-\u202E]/u;
+const WHITESPACE_CHAR_PATTERN = /\s/u;
+const CONFUSABLE_CHAR_MAP = {
+    // Cyrillic lowercase
+    "\u0430": "a", // а
+    "\u0435": "e", // е
+    "\u043E": "o", // о
+    "\u0440": "p", // р
+    "\u0441": "c", // с
+    "\u0445": "x", // х
+    "\u0456": "i", // і
+    "\u0458": "j", // ј
+    "\u0455": "s", // ѕ
+    // Cyrillic uppercase
+    "\u0410": "a", // А
+    "\u0415": "e", // Е
+    "\u041E": "o", // О
+    "\u0420": "p", // Р
+    "\u0421": "c", // С
+    "\u0425": "x", // Х
+    "\u0406": "i", // І
+    "\u0408": "j", // Ј
+    // Greek
+    "\u03B1": "a", // α
+    "\u03B5": "e", // ε
+    "\u03BF": "o", // ο
+    "\u03C1": "p", // ρ
+    "\u03C4": "t", // τ
+    "\u03C5": "y", // υ
+    "\u03C7": "x", // χ
+    "\u03B9": "i", // ι
+    "\u0391": "a", // Α
+    "\u0395": "e", // Ε
+    "\u039F": "o", // Ο
+    "\u03A1": "p", // Ρ
+    "\u03A4": "t", // Τ
+    "\u03A5": "y", // Υ
+    "\u03A7": "x", // Χ
+    "\u0399": "i", // Ι
+};
+function normalizeForDetection(input) {
+    const rawChars = [];
+    const rawSourceMap = [];
+    for (let i = 0; i < input.length;) {
+        const codePoint = input.codePointAt(i);
+        if (codePoint === undefined)
+            break;
+        const originalChar = String.fromCodePoint(codePoint);
+        const normalizedChars = originalChar.normalize("NFKC");
+        for (const normalizedChar of normalizedChars) {
+            const replacedInvisible = INVISIBLE_CHAR_DETECTION_PATTERN.test(normalizedChar) ? " " : normalizedChar;
+            const mappedChar = CONFUSABLE_CHAR_MAP[replacedInvisible] ?? replacedInvisible;
+            for (const outChar of mappedChar) {
+                rawChars.push(outChar);
+                rawSourceMap.push(i);
+            }
+        }
+        i += originalChar.length;
+    }
+    const compactChars = [];
+    const compactSourceMap = [];
+    let previousWasWhitespace = false;
+    for (let idx = 0; idx < rawChars.length; idx++) {
+        const ch = rawChars[idx];
+        const isWhitespace = WHITESPACE_CHAR_PATTERN.test(ch);
+        if (isWhitespace) {
+            if (!previousWasWhitespace) {
+                compactChars.push(" ");
+                compactSourceMap.push(rawSourceMap[idx]);
+                previousWasWhitespace = true;
+            }
+            continue;
+        }
+        compactChars.push(ch);
+        compactSourceMap.push(rawSourceMap[idx]);
+        previousWasWhitespace = false;
+    }
+    let start = 0;
+    let end = compactChars.length;
+    while (start < end && compactChars[start] === " ")
+        start++;
+    while (end > start && compactChars[end - 1] === " ")
+        end--;
+    return {
+        text: compactChars.slice(start, end).join(""),
+        sourceMap: compactSourceMap.slice(start, end),
+    };
+}
+function normalizedMatchStartInOriginal(normalizedMatch, normalizedInput) {
+    if (normalizedInput.sourceMap.length === 0)
+        return 0;
+    const normalizedIndex = Math.min(normalizedMatch.index, normalizedInput.sourceMap.length - 1);
+    return normalizedInput.sourceMap[normalizedIndex] ?? 0;
+}
+function normalizedMatchInOriginal(input, normalizedMatch, normalizedInput) {
+    if (normalizedInput.sourceMap.length === 0)
+        return "";
+    const normalizedStart = Math.min(normalizedMatch.index, normalizedInput.sourceMap.length - 1);
+    const normalizedEnd = Math.min(normalizedMatch.index + Math.max(1, normalizedMatch[0].length) - 1, normalizedInput.sourceMap.length - 1);
+    const sourceStart = normalizedInput.sourceMap[normalizedStart] ?? 0;
+    const sourceEnd = normalizedInput.sourceMap[normalizedEnd] ?? sourceStart;
+    return input.slice(sourceStart, Math.min(input.length, sourceEnd + 1));
+}
 function lowerSeverity(severity) {
     const idx = SEVERITY_ORDER.indexOf(severity);
     return SEVERITY_ORDER[Math.max(0, idx - 1)];
@@ -279,25 +384,33 @@ export class PromptScanner {
         const threats = [];
         const educational = isEducationalContext(input);
         const allowedPatterns = this.config.allowedPatterns ?? [];
+        const normalizedInput = normalizeForDetection(input);
         for (const p of INJECTION_PATTERNS) {
             // Check if this pattern name is in the whitelist
             if (allowedPatterns.includes(p.name))
                 continue;
-            const match = p.pattern.exec(input);
-            if (!match)
+            const directMatch = p.pattern.exec(input);
+            const normalizedMatch = directMatch ? null : p.pattern.exec(normalizedInput.text);
+            if (!directMatch && !normalizedMatch)
                 continue;
+            const matchStart = directMatch
+                ? directMatch.index
+                : normalizedMatchStartInOriginal(normalizedMatch, normalizedInput);
             let severity = p.severity;
             // False positive mitigation
             if (educational) {
                 severity = lowerSeverity(severity);
             }
-            else if (isInCodeBlock(input, match.index)) {
+            else if (isInCodeBlock(input, matchStart)) {
                 severity = "low";
             }
+            const matchedSnippet = directMatch
+                ? directMatch[0]
+                : normalizedMatchInOriginal(input, normalizedMatch, normalizedInput);
             threats.push({
                 pattern: p.name,
                 severity,
-                matched: match[0].slice(0, 100),
+                matched: matchedSnippet.slice(0, 100),
                 description: p.description,
             });
         }