@llm-dev-ops/agentics-cli 1.4.26 → 1.4.29

package/dist/bundled-agents/data-vault-agents/dist/functions/anonymization-function.js

@@ -0,0 +1,414 @@
+/**
+ * LLM-Data-Vault: Anonymization Edge Function
+ *
+ * Google Cloud Edge Function handler for the Dataset Anonymization Agent.
+ *
+ * DEPLOYMENT MODEL:
+ * - Deploys as Google Cloud Edge Function
+ * - Part of unified Data-Vault service
+ * - Stateless execution
+ * - Deterministic behavior
+ * - No orchestration logic
+ * - Async, non-blocking writes via ruvector-service only
+ *
+ * ENDPOINTS:
+ * - POST /anonymize - Apply anonymization to dataset content
+ * - POST /inspect - Inspect content for PII without modifying
+ * - GET /health - Health check
+ *
+ * @module functions/anonymization-function
+ */
+import { v4 as uuidv4 } from 'uuid';
+import { createAnonymizationAgent, } from '../agents/dataset-anonymization-agent.js';
+import { validateAnonymizationRequest, } from '../contracts/index.js';
+import { RuVectorClient } from '../ruvector-client/index.js';
+import { getTelemetry, initTelemetry } from '../telemetry/index.js';
+/**
+ * Load configuration from environment
+ */
+function loadConfig() {
+    return {
+        agentId: process.env['AGENT_ID'] ?? 'data-vault.anonymization.v1',
+        agentVersion: process.env['AGENT_VERSION'] ?? '0.1.0',
+        environment: process.env['NODE_ENV'] ?? 'production',
+        ruvectorEndpoint: process.env['RUVECTOR_SERVICE_ENDPOINT'] ?? 'http://localhost:8080',
+        ruvectorApiKey: process.env['RUVECTOR_SERVICE_API_KEY'] ?? '',
+        otlpEndpoint: process.env['OTLP_ENDPOINT'],
+    };
+}
+/**
+ * Anonymization Edge Function Handler
+ */
+export class AnonymizationFunctionHandler {
+    agent;
+    ruvectorClient;
+    config;
+    constructor(config) {
+        this.config = { ...loadConfig(), ...config };
+        // Initialize telemetry
+        initTelemetry({
+            service_name: 'llm-data-vault-anonymization',
+            environment: this.config.environment,
+            version: this.config.agentVersion,
+            otlp_endpoint: this.config.otlpEndpoint,
+        });
+        // Create agent instance
+        this.agent = createAnonymizationAgent();
+        // Create ruvector client
+        this.ruvectorClient = new RuVectorClient({
+            endpoint: this.config.ruvectorEndpoint,
+            apiKey: this.config.ruvectorApiKey,
+        });
+    }
+    /**
+     * Main entry point for Edge Function
+     */
+    async handle(request) {
+        const telemetry = getTelemetry();
+        const executionRef = uuidv4();
+        // Set CORS headers
+        const corsHeaders = {
+            'Access-Control-Allow-Origin': '*',
+            'Access-Control-Allow-Methods': 'POST, GET, OPTIONS',
+            'Access-Control-Allow-Headers': 'Content-Type, Authorization, X-Correlation-ID',
+        };
+        // Handle preflight
+        if (request.method === 'OPTIONS') {
+            return {
+                status: 204,
+                headers: corsHeaders,
+                body: null,
+            };
+        }
+        // Route request
+        try {
+            const path = request.path.replace(/^\/+/, '').split('?')[0];
+            switch (path) {
+                case 'anonymize':
+                    if (request.method !== 'POST') {
+                        return this.methodNotAllowed(corsHeaders);
+                    }
+                    return await this.handleAnonymize(request, executionRef, corsHeaders);
+                case 'inspect':
+                    if (request.method !== 'POST') {
+                        return this.methodNotAllowed(corsHeaders);
+                    }
+                    return await this.handleInspect(request, executionRef, corsHeaders);
+                case 'health':
+                    return await this.handleHealth(corsHeaders);
+                case 'metadata':
+                    return this.handleMetadata(corsHeaders);
+                default:
+                    return {
+                        status: 404,
+                        headers: { ...corsHeaders, 'Content-Type': 'application/json' },
+                        body: {
+                            error: 'NOT_FOUND',
+                            message: `Endpoint not found: ${path}`,
+                            available_endpoints: ['anonymize', 'inspect', 'health', 'metadata'],
+                        },
+                    };
+            }
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            telemetry.emit({
+                event_type: 'agent_invocation_failed',
+                timestamp: new Date().toISOString(),
+                agent_id: this.config.agentId,
+                agent_version: this.config.agentVersion,
+                execution_ref: executionRef,
+                metadata: { error: errorMessage },
+            });
+            return {
+                status: 500,
+                headers: { ...corsHeaders, 'Content-Type': 'application/json' },
+                body: {
+                    error: 'INTERNAL_ERROR',
+                    message: errorMessage,
+                    execution_ref: executionRef,
+                },
+            };
+        }
+    }
+    /**
+     * Handle /anonymize endpoint
+     */
+    async handleAnonymize(request, executionRef, corsHeaders) {
+        const telemetry = getTelemetry();
+        const correlationId = request.headers['x-correlation-id'] ?? uuidv4();
+        const startTime = performance.now();
+        // Record invocation start
+        telemetry.recordInvocationStart(this.config.agentId, this.config.agentVersion, executionRef, correlationId);
+        try {
+            // Parse and validate request
+            const body = typeof request.body === 'string'
+                ? JSON.parse(request.body)
+                : request.body;
+            // Build anonymization request
+            const anonymizationRequest = this.buildAnonymizationRequest(body, executionRef);
+            // Build execution context
+            const context = {
+                execution_ref: executionRef,
+                correlation_id: correlationId,
+                tenant_id: anonymizationRequest.tenant_id,
+                request_source: this.getRequestSource(request.headers),
+                timestamp: new Date().toISOString(),
+            };
+            // Invoke agent
+            const result = await this.agent.invoke(anonymizationRequest, context);
+            // Persist DecisionEvent to ruvector-service (async, non-blocking)
+            this.persistDecisionEvent(result.decision_event).catch(err => {
+                telemetry.emit({
+                    event_type: 'decision_event_persist_failed',
+                    timestamp: new Date().toISOString(),
+                    agent_id: this.config.agentId,
+                    agent_version: this.config.agentVersion,
+                    execution_ref: executionRef,
+                    metadata: { error: String(err) },
+                });
+            });
+            // Record completion
+            telemetry.recordInvocationComplete(this.config.agentId, this.config.agentVersion, executionRef, result.execution_time_ms, result.success, result.success
+                ? { fields_anonymized: result.data?.results?.fields_anonymized }
+                : { error: result.error?.message });
+            if (result.success) {
+                return {
+                    status: 200,
+                    headers: {
+                        ...corsHeaders,
+                        'Content-Type': 'application/json',
+                        'X-Execution-Ref': executionRef,
+                        'X-Correlation-ID': correlationId,
+                    },
+                    body: {
+                        success: true,
+                        data: result.data,
+                        metadata: {
+                            execution_ref: executionRef,
+                            execution_time_ms: result.execution_time_ms,
+                            agent_id: this.config.agentId,
+                            agent_version: this.config.agentVersion,
+                        },
+                    },
+                };
+            }
+            else {
+                return {
+                    status: 400,
+                    headers: {
+                        ...corsHeaders,
+                        'Content-Type': 'application/json',
+                        'X-Execution-Ref': executionRef,
+                    },
+                    body: {
+                        success: false,
+                        error: result.error,
+                        execution_ref: executionRef,
+                    },
+                };
+            }
+        }
+        catch (error) {
+            const duration = performance.now() - startTime;
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            telemetry.recordInvocationComplete(this.config.agentId, this.config.agentVersion, executionRef, duration, false, { error: errorMessage });
+            return {
+                status: 400,
+                headers: {
+                    ...corsHeaders,
+                    'Content-Type': 'application/json',
+                    'X-Execution-Ref': executionRef,
+                },
+                body: {
+                    success: false,
+                    error: {
+                        code: 'VALIDATION_ERROR',
+                        message: errorMessage,
+                    },
+                    execution_ref: executionRef,
+                },
+            };
+        }
+    }
+    /**
+     * Handle /inspect endpoint (dry-run mode)
+     */
+    async handleInspect(request, executionRef, corsHeaders) {
+        // Reuse anonymize handler with dry_run = true
+        const body = typeof request.body === 'string'
+            ? JSON.parse(request.body)
+            : request.body;
+        const modifiedRequest = {
+            ...request,
+            body: {
+                ...body,
+                options: {
+                    ...body['options'],
+                    dry_run: true,
+                    include_detection_details: true,
+                },
+            },
+        };
+        return this.handleAnonymize(modifiedRequest, executionRef, corsHeaders);
+    }
+    /**
+     * Handle /health endpoint
+     */
+    async handleHealth(corsHeaders) {
+        const ruvectorHealth = await this.ruvectorClient.healthCheck();
+        const healthy = ruvectorHealth.healthy;
+        return {
+            status: healthy ? 200 : 503,
+            headers: { ...corsHeaders, 'Content-Type': 'application/json' },
+            body: {
+                status: healthy ? 'healthy' : 'degraded',
+                agent: {
+                    id: this.config.agentId,
+                    version: this.config.agentVersion,
+                },
+                dependencies: {
+                    ruvector_service: {
+                        healthy: ruvectorHealth.healthy,
+                        latency_ms: ruvectorHealth.latency_ms,
+                    },
+                },
+                timestamp: new Date().toISOString(),
+            },
+        };
+    }
+    /**
+     * Handle /metadata endpoint
+     */
+    handleMetadata(corsHeaders) {
+        const metadata = this.agent.getMetadata();
+        return {
+            status: 200,
+            headers: { ...corsHeaders, 'Content-Type': 'application/json' },
+            body: {
+                ...metadata,
+                endpoints: {
+                    anonymize: {
+                        method: 'POST',
+                        description: 'Apply anonymization to dataset content',
+                    },
+                    inspect: {
+                        method: 'POST',
+                        description: 'Inspect content for PII without modifying',
+                    },
+                    health: {
+                        method: 'GET',
+                        description: 'Health check',
+                    },
+                    metadata: {
+                        method: 'GET',
+                        description: 'Agent metadata and capabilities',
+                    },
+                },
+            },
+        };
+    }
+    /**
+     * Build anonymization request from incoming body
+     */
+    buildAnonymizationRequest(body, executionRef) {
+        // Ensure required fields
+        const requestId = body['request_id'] ?? executionRef;
+        const tenantId = body['tenant_id'] ?? 'default';
+        const content = body['content'];
+        const requester = body['requester'] ?? {
+            service: 'unknown',
+        };
+        if (content === undefined) {
+            throw new Error('content field is required');
+        }
+        return validateAnonymizationRequest({
+            request_id: requestId,
+            correlation_id: body['correlation_id'],
+            dataset_id: body['dataset_id'] ?? 'ephemeral',
+            dataset_version: body['dataset_version'],
+            content,
+            content_format: body['content_format'] ?? 'json',
+            policy_id: body['policy_id'],
+            policy: body['policy'],
+            strategies: body['strategies'],
+            options: body['options'] ?? {},
+            tenant_id: tenantId,
+            requester: {
+                service: requester['service'] ?? 'unknown',
+                user_id: requester['user_id'],
+                roles: requester['roles'] ?? [],
+            },
+        });
+    }
+    /**
+     * Get request source from headers
+     */
+    getRequestSource(headers) {
+        const source = headers['x-request-source']?.toLowerCase();
+        switch (source) {
+            case 'orchestrator':
+                return 'orchestrator';
+            case 'inference_gateway':
+            case 'inference-gateway':
+                return 'inference_gateway';
+            case 'policy_engine':
+            case 'policy-engine':
+                return 'policy_engine';
+            case 'governance':
+                return 'governance';
+            case 'cli':
+                return 'cli';
+            default:
+                return 'api';
+        }
+    }
+    /**
+     * Persist DecisionEvent (async, non-blocking)
+     */
+    async persistDecisionEvent(event) {
+        await this.ruvectorClient.persistDecisionEvent(event);
+    }
+    /**
+     * Method not allowed response
+     */
+    methodNotAllowed(corsHeaders) {
+        return {
+            status: 405,
+            headers: { ...corsHeaders, 'Content-Type': 'application/json' },
+            body: {
+                error: 'METHOD_NOT_ALLOWED',
+                message: 'Only POST method is allowed for this endpoint',
+            },
+        };
+    }
+}
+/**
+ * Create and export handler for Google Cloud Functions
+ */
+let handler = null;
+export function getHandler() {
+    if (!handler) {
+        handler = new AnonymizationFunctionHandler();
+    }
+    return handler;
+}
+/**
+ * Google Cloud Functions entry point
+ */
+export async function anonymizationFunction(req, res) {
+    const handler = getHandler();
+    const response = await handler.handle({
+        method: req.method,
+        path: req.path,
+        headers: req.headers,
+        body: req.body,
+        query: req.query,
+    });
+    res.status(response.status).set(response.headers).json(response.body);
+}
+/**
+ * Export for testing
+ */
+export { AnonymizationFunctionHandler as TestableHandler };
+//# sourceMappingURL=anonymization-function.js.map

package/dist/bundled-agents/data-vault-agents/dist/functions/anonymization-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymization-function.js","sourceRoot":"","sources":["../../src/functions/anonymization-function.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EACL,wBAAwB,GAEzB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAEL,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAmCpE;;GAEG;AACH,SAAS,UAAU;IACjB,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,6BAA6B;QACjE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,OAAO;QACrD,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,YAAY;QACpD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,uBAAuB;QACrF,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE;QAC7D,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,4BAA4B;IACtB,KAAK,CAA4B;IACjC,cAAc,CAAiB;IAC/B,MAAM,CAAiB;IAExC,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC;QAE7C,uBAAuB;QACvB,aAAa,CAAC;YACZ,YAAY,EAAE,8BAA8B;YAC5C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;SACxC,CAAC,CAAC;QAEH,wBAAwB;QACxB,IAAI,CAAC,KAAK,GAAG,wBAAwB,EAAE,CAAC;QAExC,yBAAyB;QACzB,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC;YACvC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;SACnC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,OAAoB;QAC/B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC;QAE9B,mBAAmB;QACnB,MAAM,WAAW,GAAG;YAClB,6BAA6B,EAAE,GAAG;YAClC,8BAA8B,EAAE,oBAAoB;YACpD,8BAA8B,EAAE,+CAA+C;SAChF,CAAC;QAEF,mBAAmB;QACnB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,IAAI;aACX,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAE5D,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW;oBACd,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC9B,OAAO,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;oBAC5C,CAAC;oBACD,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBAExE,KAAK,SAAS;oBACZ,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC9B,OAAO,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;oBAC5C,CAAC;oBACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;gBAEtE,KAAK,QAAQ;oBACX,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;gBAE9C,KAAK,UAAU;oBACb,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBAE1C;oBACE,OAAO;wBACL,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE;wBAC/D,IAAI,EAAE;4BACJ,KAAK,EAAE,WAAW;4BAClB,OAAO,EAAE,uBAAuB,IAAI,EAAE;4BACtC,mBAAmB,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC;yBACpE;qBACF,CAAC;YACN,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,SAAS,CAAC,IAAI,CAAC;gBACb,UAAU,EAAE,yBAAyB;gBACrC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC7B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACvC,aAAa,EAAE,YAAY;gBAC3B,QAAQ,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;aAClC,CAAC,CAAC;YAEH,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/D,IAAI,EAAE;oBACJ,KAAK,EAAE,gBAAgB;oBACvB,OAAO,EAAE,YAAY;oBACrB,aAAa,EAAE,YAAY;iBAC5B;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAC3B,OAAoB,EACpB,YAAoB,EACpB,WAAmC;QAEnC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,MAAM,EAAE,CAAC;QACtE,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,0BAA0B;QAC1B,SAAS,CAAC,qBAAqB,CAC7B,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,MAAM,CAAC,YAAY,EACxB,YAAY,EACZ,aAAa,CACd,CAAC;QAEF,IAAI,CAAC;YACH,6BAA6B;YAC7B,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAC3C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC1B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YAEjB,8BAA8B;YAC9B,MAAM,oBAAoB,GAAG,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAEhF,0BAA0B;YAC1B,MAAM,OAAO,GAAqB;gBAChC,aAAa,EAAE,YAAY;gBAC3B,cAAc,EAAE,aAAa;gBAC7B,SAAS,EAAE,oBAAoB,CAAC,SAAS;gBACzC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;gBACtD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,eAAe;YACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;YAEtE,kEAAkE;YAClE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBAC3D,SAAS,CAAC,IAAI,CAAC;oBACb,UAAU,EAAE,+BAA+B;oBAC3C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBAC7B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;oBACvC,aAAa,EAAE,YAAY;oBAC3B,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;iBACjC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,oBAAoB;YACpB,SAAS,CAAC,wBAAwB,CAChC,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,MAAM,CAAC,YAAY,EACxB,YAAY,EACZ,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,OAAO;gBACZ,CAAC,CAAC,EAAE,iBAAiB,EAAG,MAAM,CAAC,IAAqD,EAAE,OAAO,EAAE,iBAAiB,EAAE;gBAClH,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CACrC,CAAC;YAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,GAAG,WAAW;wBACd,cAAc,EAAE,kBAAkB;wBAClC,iBAAiB,EAAE,YAAY;wBAC/B,kBAAkB,EAAE,aAAa;qBAClC;oBACD,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,QAAQ,EAAE;4BACR,aAAa,EAAE,YAAY;4BAC3B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;4BAC3C,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;4BAC7B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;yBACxC;qBACF;iBACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,GAAG,WAAW;wBACd,cAAc,EAAE,kBAAkB;wBAClC,iBAAiB,EAAE,YAAY;qBAChC;oBACD,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,aAAa,EAAE,YAAY;qBAC5B;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC/C,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAE9E,SAAS,CAAC,wBAAwB,CAChC,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,MAAM,CAAC,YAAY,EACxB,YAAY,EACZ,QAAQ,EACR,KAAK,EACL,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;YAEF,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,GAAG,WAAW;oBACd,cAAc,EAAE,kBAAkB;oBAClC,iBAAiB,EAAE,YAAY;iBAChC;gBACD,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE,YAAY;qBACtB;oBACD,aAAa,EAAE,YAAY;iBAC5B;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,OAAoB,EACpB,YAAoB,EACpB,WAAmC;QAEnC,8CAA8C;QAC9C,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAC3C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,IAA+B,CAAC;QAE5C,MAAM,eAAe,GAAgB;YACnC,GAAG,OAAO;YACV,IAAI,EAAE;gBACJ,GAAG,IAAI;gBACP,OAAO,EAAE;oBACP,GAAI,IAAI,CAAC,SAAS,CAAyC;oBAC3D,OAAO,EAAE,IAAI;oBACb,yBAAyB,EAAE,IAAI;iBAChC;aACF;SACF,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,WAAmC;QAC5D,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;QAE/D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC;QAEvC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAC3B,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/D,IAAI,EAAE;gBACJ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;gBACxC,KAAK,EAAE;oBACL,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBACvB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;iBAClC;gBACD,YAAY,EAAE;oBACZ,gBAAgB,EAAE;wBAChB,OAAO,EAAE,cAAc,CAAC,OAAO;wBAC/B,UAAU,EAAE,cAAc,CAAC,UAAU;qBACtC;iBACF;gBACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,WAAmC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAE1C,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/D,IAAI,EAAE;gBACJ,GAAG,QAAQ;gBACX,SAAS,EAAE;oBACT,SAAS,EAAE;wBACT,MAAM,EAAE,MAAM;wBACd,WAAW,EAAE,wCAAwC;qBACtD;oBACD,OAAO,EAAE;wBACP,MAAM,EAAE,MAAM;wBACd,WAAW,EAAE,2CAA2C;qBACzD;oBACD,MAAM,EAAE;wBACN,MAAM,EAAE,KAAK;wBACb,WAAW,EAAE,cAAc;qBAC5B;oBACD,QAAQ,EAAE;wBACR,MAAM,EAAE,KAAK;wBACb,WAAW,EAAE,iCAAiC;qBAC/C;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,yBAAyB,CAC/B,IAA6B,EAC7B,YAAoB;QAEpB,yBAAyB;QACzB,MAAM,SAAS,GAAI,IAAI,CAAC,YAAY,CAAY,IAAI,YAAY,CAAC;QACjE,MAAM,QAAQ,GAAI,IAAI,CAAC,WAAW,CAAY,IAAI,SAAS,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,SAAS,GAAI,IAAI,CAAC,WAAW,CAA6B,IAAI;YAClE,OAAO,EAAE,SAAS;SACnB,CAAC;QAEF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,4BAA4B,CAAC;YAClC,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC;YACtC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,WAAW;YAC7C,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC;YACxC,OAAO;YACP,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,MAAM;YAChD,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;YAC5B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;YACtB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC;YAC9B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;YAC9B,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE;gBACT,OAAO,EAAG,SAAS,CAAC,SAAS,CAAY,IAAI,SAAS;gBACtD,OAAO,EAAE,SAAS,CAAC,SAAS,CAAuB;gBACnD,KAAK,EAAG,SAAS,CAAC,OAAO,CAAc,IAAI,EAAE;aAC9C;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,OAA2C;QAE3C,MAAM,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,CAAC;QAE1D,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,cAAc;gBACjB,OAAO,cAAc,CAAC;YACxB,KAAK,mBAAmB,CAAC;YACzB,KAAK,mBAAmB;gBACtB,OAAO,mBAAmB,CAAC;YAC7B,KAAK,eAAe,CAAC;YACrB,KAAK,eAAe;gBAClB,OAAO,eAAe,CAAC;YACzB,KAAK,YAAY;gBACf,OAAO,YAAY,CAAC;YACtB,KAAK,KAAK;gBACR,OAAO,KAAK,CAAC;YACf;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,KAAc;QAC/C,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,KAA8D,CAAC,CAAC;IACjH,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,WAAmC;QAC1D,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/D,IAAI,EAAE;gBACJ,KAAK,EAAE,oBAAoB;gBAC3B,OAAO,EAAE,+CAA+C;aACzD;SACF,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,IAAI,OAAO,GAAwC,IAAI,CAAC;AAExD,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,IAAI,4BAA4B,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAoH,EACpH,GAAkH;IAElH,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;QACpC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,OAAO,EAAE,4BAA4B,IAAI,eAAe,EAAE,CAAC"}

package/dist/bundled-agents/data-vault-agents/dist/functions/cloud-function.d.ts

@@ -0,0 +1,26 @@
+/**
+ * LLM-Data-Vault: Cloud Functions Entry Point
+ *
+ * Unified Google Cloud Functions HTTP handler for the data-vault-agents function.
+ * Routes requests to the appropriate agent based on URL path.
+ *
+ * Routes:
+ *   POST /v1/data-vault/access-control → Data Access Control Agent
+ *   POST /v1/data-vault/anonymize      → Dataset Anonymization Agent
+ *   GET  /v1/data-vault/health          → Health check
+ *
+ * Deploy:
+ *   gcloud functions deploy data-vault-agents --runtime nodejs20 --trigger-http \
+ *     --region us-central1 --project agentics-dev --entry-point handler \
+ *     --memory 512MB --timeout 60s --no-allow-unauthenticated
+ *
+ * @module functions/cloud-function
+ */
+import type { HttpFunction } from '@google-cloud/functions-framework';
+/**
+ * Unified Cloud Functions handler for data-vault-agents.
+ *
+ * Entry point for: gcloud functions deploy --entry-point handler
+ */
+export declare const handler: HttpFunction;
+//# sourceMappingURL=cloud-function.d.ts.map

package/dist/bundled-agents/data-vault-agents/dist/functions/cloud-function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-function.d.ts","sourceRoot":"","sources":["../../src/functions/cloud-function.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAyQtE;;;;GAIG;AACH,eAAO,MAAM,OAAO,EAAE,YAyDrB,CAAC"}

package/dist/bundled-agents/data-vault-agents/dist/functions/cloud-function.js

@@ -0,0 +1,215 @@
+/**
+ * LLM-Data-Vault: Cloud Functions Entry Point
+ *
+ * Unified Google Cloud Functions HTTP handler for the data-vault-agents function.
+ * Routes requests to the appropriate agent based on URL path.
+ *
+ * Routes:
+ *   POST /v1/data-vault/access-control → Data Access Control Agent
+ *   POST /v1/data-vault/anonymize      → Dataset Anonymization Agent
+ *   GET  /v1/data-vault/health          → Health check
+ *
+ * Deploy:
+ *   gcloud functions deploy data-vault-agents --runtime nodejs20 --trigger-http \
+ *     --region us-central1 --project agentics-dev --entry-point handler \
+ *     --memory 512MB --timeout 60s --no-allow-unauthenticated
+ *
+ * @module functions/cloud-function
+ */
+import { AnonymizationFunctionHandler } from './anonymization-function.js';
+import { createDataAccessControlAgent, } from '../agents/data-access-control/agent.js';
+// =============================================================================
+// Constants
+// =============================================================================
+const SERVICE_NAME = 'data-vault-agents';
+const HEALTH_AGENTS = ['access-control', 'anonymize'];
+// =============================================================================
+// Singleton Instances (reused across Cloud Function invocations)
+// =============================================================================
+let anonymizationHandler = null;
+let accessControlAgent = null;
+function getAnonymizationHandler() {
+    if (!anonymizationHandler) {
+        anonymizationHandler = new AnonymizationFunctionHandler();
+    }
+    return anonymizationHandler;
+}
+function getAccessControlAgent() {
+    if (!accessControlAgent) {
+        accessControlAgent = createDataAccessControlAgent([]);
+    }
+    return accessControlAgent;
+}
+function buildExecutionMetadata(headers) {
+    const correlationHeader = headers['x-correlation-id'];
+    const traceId = typeof correlationHeader === 'string'
+        ? correlationHeader
+        : crypto.randomUUID();
+    return {
+        trace_id: traceId,
+        timestamp: new Date().toISOString(),
+        service: SERVICE_NAME,
+        execution_id: crypto.randomUUID(),
+    };
+}
+function wrapResponse(body, metadata, agentLayer, startTime) {
+    const elapsed = Math.round(performance.now() - startTime);
+    const base = typeof body === 'object' && body !== null
+        ? body
+        : { data: body };
+    return {
+        ...base,
+        execution_metadata: metadata,
+        layers_executed: [
+            { layer: 'AGENT_ROUTING', status: 'completed' },
+            { layer: `DATA_VAULT_${agentLayer}`, status: 'completed', duration_ms: elapsed },
+        ],
+    };
+}
+// =============================================================================
+// CORS
+// =============================================================================
+function setCorsHeaders(res) {
+    res.setHeader('Access-Control-Allow-Origin', '*');
+    res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, X-Correlation-ID, X-Request-Source, X-Execution-ID, X-Parent-Span-ID');
+}
+// =============================================================================
+// Route Handlers
+// =============================================================================
+async function handleAnonymize(req, res, metadata, startTime) {
+    if (req.method !== 'POST') {
+        res.status(405).json(wrapResponse({ error: 'METHOD_NOT_ALLOWED', message: 'POST required' }, metadata, 'ANONYMIZE', startTime));
+        return;
+    }
+    const h = getAnonymizationHandler();
+    const response = await h.handle({
+        method: req.method,
+        path: 'anonymize',
+        headers: req.headers,
+        body: req.body,
+        query: (req.query ?? {}),
+    });
+    for (const [key, value] of Object.entries(response.headers)) {
+        res.setHeader(key, value);
+    }
+    res.status(response.status).json(wrapResponse(response.body, metadata, 'ANONYMIZE', startTime));
+}
+async function handleAccessControl(req, res, metadata, startTime) {
+    if (req.method !== 'POST') {
+        res.status(405).json(wrapResponse({ error: 'METHOD_NOT_ALLOWED', message: 'POST required' }, metadata, 'ACCESS_CONTROL', startTime));
+        return;
+    }
+    const body = req.body;
+    if (!body || typeof body !== 'object') {
+        res.status(400).json(wrapResponse({ error: 'INVALID_REQUEST_BODY', message: 'Request body must be a valid JSON object' }, metadata, 'ACCESS_CONTROL', startTime));
+        return;
+    }
+    const agent = getAccessControlAgent();
+    const record = body;
+    const subject = record['subject'];
+    const context = {
+        execution_ref: metadata.execution_id,
+        correlation_id: metadata.trace_id,
+        tenant_id: record['tenant_id']
+            ?? subject?.['tenant_id']
+            ?? req.headers['x-tenant-id'],
+        request_source: mapRequestSource(req.headers['x-request-source']),
+        timestamp: metadata.timestamp,
+    };
+    const result = await agent.invoke(body, context);
+    const status = result.success
+        ? (result.data?.decision === 'deny' ? 403 : 200)
+        : 500;
+    const responseBody = result.success
+        ? {
+            success: true,
+            data: result.data,
+            metadata: {
+                agent_id: 'data-access-control',
+                agent_version: '1.0.0',
+                execution_ref: metadata.execution_id,
+                execution_time_ms: result.execution_time_ms,
+            },
+        }
+        : {
+            success: false,
+            error: result.error,
+        };
+    res.status(status).json(wrapResponse(responseBody, metadata, 'ACCESS_CONTROL', startTime));
+}
+function handleHealth(_req, res, metadata, startTime) {
+    res.status(200).json(wrapResponse({
+        status: 'healthy',
+        service: SERVICE_NAME,
+        agents: [...HEALTH_AGENTS],
+        timestamp: metadata.timestamp,
+    }, metadata, 'HEALTH', startTime));
+}
+// =============================================================================
+// Helpers
+// =============================================================================
+function mapRequestSource(source) {
+    switch (source?.toLowerCase()) {
+        case 'orchestrator':
+            return 'orchestrator';
+        case 'inference_gateway':
+        case 'inference-gateway':
+            return 'inference_gateway';
+        case 'policy_engine':
+        case 'policy-engine':
+            return 'policy_engine';
+        case 'governance':
+            return 'governance';
+        case 'cli':
+            return 'cli';
+        default:
+            return 'api';
+    }
+}
+// =============================================================================
+// Main Handler (Cloud Functions Entry Point)
+// =============================================================================
+/**
+ * Unified Cloud Functions handler for data-vault-agents.
+ *
+ * Entry point for: gcloud functions deploy --entry-point handler
+ */
+export const handler = async (req, res) => {
+    setCorsHeaders(res);
+    if (req.method === 'OPTIONS') {
+        res.status(204).send('');
+        return;
+    }
+    const startTime = performance.now();
+    const metadata = buildExecutionMetadata(req.headers);
+    const path = (req.path || '/').replace(/^\/+|\/+$/g, '');
+    try {
+        switch (path) {
+            case 'v1/data-vault/anonymize':
+                await handleAnonymize(req, res, metadata, startTime);
+                return;
+            case 'v1/data-vault/access-control':
+                await handleAccessControl(req, res, metadata, startTime);
+                return;
+            case 'v1/data-vault/health':
+                handleHealth(req, res, metadata, startTime);
+                return;
+            default:
+                res.status(404).json(wrapResponse({
+                    error: 'NOT_FOUND',
+                    message: `Route not found: /${path}`,
+                    available_routes: [
+                        '/v1/data-vault/access-control',
+                        '/v1/data-vault/anonymize',
+                        '/v1/data-vault/health',
+                    ],
+                }, metadata, 'ROUTING', startTime));
+        }
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : 'Internal error';
+        res.status(500).json(wrapResponse({ error: 'INTERNAL_ERROR', message }, metadata, 'ERROR', startTime));
+    }
+};
+//# sourceMappingURL=cloud-function.js.map