@opentrust/gateway 7.1.0

package/dist/config.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Gateway configuration management
+ */
+import type { GatewayConfig } from "./types.js";
+export declare function loadConfig(configPath?: string): GatewayConfig;
+export declare function validateConfig(config: GatewayConfig): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKhD,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,aAAa,CAmB7D;AAqDD,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAM1D"}

package/dist/config.js

@@ -0,0 +1,81 @@
+/**
+ * Gateway configuration management
+ */
+import { readFileSync, existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+const CONFIG_PATH = join(homedir(), ".opentrust", "gateway.json");
+const LEGACY_CONFIG_PATH = join(homedir(), ".opentrust-legacy", "gateway.json");
+export function loadConfig(configPath) {
+    const defaults = {
+        port: parseInt(process.env.GATEWAY_PORT || "8900", 10),
+        backends: {},
+    };
+    // Try explicit path, then new path, then legacy path
+    for (const p of [configPath, CONFIG_PATH, LEGACY_CONFIG_PATH]) {
+        if (p && existsSync(p)) {
+            try {
+                const file = JSON.parse(readFileSync(p, "utf-8"));
+                return applyEnvOverrides(merge(defaults, file));
+            }
+            catch (err) {
+                console.warn(`[opentrust-gateway] Failed to load config from ${p}:`, err);
+            }
+        }
+    }
+    return applyEnvOverrides(defaults);
+}
+function applyEnvOverrides(config) {
+    const env = process.env;
+    if (env.ANTHROPIC_API_KEY) {
+        config.backends.anthropic = {
+            baseUrl: env.ANTHROPIC_BASE_URL || "https://api.anthropic.com",
+            apiKey: env.ANTHROPIC_API_KEY,
+        };
+    }
+    if (env.OPENAI_API_KEY) {
+        config.backends.openai = {
+            baseUrl: env.OPENAI_BASE_URL || "https://api.openai.com",
+            apiKey: env.OPENAI_API_KEY,
+        };
+    }
+    if ((env.KIMI_API_KEY || env.MOONSHOT_API_KEY) && !config.backends.openai) {
+        config.backends.openai = {
+            baseUrl: env.KIMI_BASE_URL || "https://api.moonshot.cn",
+            apiKey: env.KIMI_API_KEY || env.MOONSHOT_API_KEY || "",
+        };
+    }
+    if (env.GEMINI_API_KEY || env.GOOGLE_API_KEY) {
+        config.backends.gemini = {
+            baseUrl: env.GEMINI_BASE_URL || "https://generativelanguage.googleapis.com",
+            apiKey: env.GEMINI_API_KEY || env.GOOGLE_API_KEY || "",
+        };
+    }
+    if (env.OPENROUTER_API_KEY) {
+        config.backends.openrouter = {
+            baseUrl: env.OPENROUTER_BASE_URL || "https://openrouter.ai/api",
+            apiKey: env.OPENROUTER_API_KEY,
+            ...(env.OPENROUTER_REFERER && { referer: env.OPENROUTER_REFERER }),
+            ...(env.OPENROUTER_TITLE && { title: env.OPENROUTER_TITLE }),
+        };
+    }
+    return config;
+}
+function merge(base, file) {
+    return {
+        port: file.port ?? base.port,
+        backends: { ...base.backends, ...file.backends },
+        routing: file.routing,
+    };
+}
+export function validateConfig(config) {
+    if (config.port < 1 || config.port > 65535)
+        throw new Error(`Invalid port: ${config.port}`);
+    for (const [name, backend] of Object.entries(config.backends)) {
+        if (!backend.baseUrl)
+            throw new Error(`Backend ${name} missing baseUrl`);
+        if (!backend.apiKey)
+            throw new Error(`Backend ${name} missing apiKey`);
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;AAClE,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;AAEhF,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,MAAM,QAAQ,GAAkB;QAC9B,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,EAAE,EAAE,CAAC;QACtD,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,qDAAqD;IACrD,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;gBAClD,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAqB;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAExB,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,SAAS,GAAG;YAC1B,OAAO,EAAE,GAAG,CAAC,kBAAkB,IAAI,2BAA2B;YAC9D,MAAM,EAAE,GAAG,CAAC,iBAAiB;SAC9B,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG;YACvB,OAAO,EAAE,GAAG,CAAC,eAAe,IAAI,wBAAwB;YACxD,MAAM,EAAE,GAAG,CAAC,cAAc;SAC3B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG;YACvB,OAAO,EAAE,GAAG,CAAC,aAAa,IAAI,yBAAyB;YACvD,MAAM,EAAE,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,gBAAgB,IAAI,EAAE;SACvD,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG;YACvB,OAAO,EAAE,GAAG,CAAC,eAAe,IAAI,2CAA2C;YAC3E,MAAM,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,IAAI,EAAE;SACvD,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAC3B,MAAM,CAAC,QAAQ,CAAC,UAAU,GAAG;YAC3B,OAAO,EAAE,GAAG,CAAC,mBAAmB,IAAI,2BAA2B;YAC/D,MAAM,EAAE,GAAG,CAAC,kBAAkB;YAC9B,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAClE,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CAAC,IAAmB,EAAE,IAA4B;IAC9D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI;QAC5B,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE;QAChD,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5F,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,iBAAiB,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/handlers/anthropic.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Anthropic Messages API handler — POST /v1/messages
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { GatewayConfig } from "../types.js";
+export declare function handleAnthropicRequest(req: IncomingMessage, res: ServerResponse, config: GatewayConfig): Promise<void>;
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/handlers/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/handlers/anthropic.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAKjD,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAsCf"}

package/dist/handlers/anthropic.js

@@ -0,0 +1,49 @@
+/**
+ * Anthropic Messages API handler — POST /v1/messages
+ */
+import { sanitize } from "../sanitizer/index.js";
+import { readBody, sendError, forwardError } from "../utils/http.js";
+import { handleSSEStream, handleJSONResponse } from "../utils/stream.js";
+export async function handleAnthropicRequest(req, res, config) {
+    try {
+        const { model, messages, system, tools, max_tokens, temperature, stream = false, ...rest } = JSON.parse(await readBody(req));
+        const { sanitized: sanitizedMessages, mappingTable } = sanitize(messages);
+        const sanitizedSystem = system ? sanitize(system).sanitized : system;
+        const backend = config.backends.anthropic;
+        if (!backend) {
+            sendError(res, 500, "Anthropic backend not configured");
+            return;
+        }
+        const response = await fetch(`${backend.baseUrl}/v1/messages`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "anthropic-version": req.headers["anthropic-version"] || "2023-06-01",
+                "x-api-key": backend.apiKey,
+            },
+            body: JSON.stringify({
+                model,
+                messages: sanitizedMessages,
+                ...(system && { system: sanitizedSystem }),
+                ...(tools && { tools }),
+                max_tokens,
+                ...(temperature !== undefined && { temperature }),
+                stream,
+                ...rest,
+            }),
+        });
+        if (!response.ok) {
+            await forwardError(res, response);
+            return;
+        }
+        if (stream)
+            await handleSSEStream(response, res, mappingTable);
+        else
+            await handleJSONResponse(response, res, mappingTable);
+    }
+    catch (error) {
+        console.error("[opentrust-gateway] Anthropic handler error:", error);
+        sendError(res, 500, error instanceof Error ? error.message : String(error));
+    }
+}
+//# sourceMappingURL=anthropic.js.map

package/dist/handlers/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../src/handlers/anthropic.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAoB,EACpB,GAAmB,EACnB,MAAqB;IAErB,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,IAAI,EAAE,GACxF,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAElC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1E,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QAErE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,kCAAkC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAElF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,cAAc,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAY,IAAI,YAAY;gBACjF,WAAW,EAAE,OAAO,CAAC,MAAM;aAC5B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;gBAC1C,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC;gBACvB,UAAU;gBACV,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;gBACjD,MAAM;gBACN,GAAG,IAAI;aACR,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAAC,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAEhE,IAAI,MAAM;YAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;;YAC1D,MAAM,kBAAkB,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAC;QACrE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/handlers/gemini.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Google Gemini handler — POST /v1/models/:model:generateContent
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { GatewayConfig } from "../types.js";
+export declare function handleGeminiRequest(req: IncomingMessage, res: ServerResponse, config: GatewayConfig, modelName: string): Promise<void>;
+//# sourceMappingURL=gemini.d.ts.map

package/dist/handlers/gemini.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.d.ts","sourceRoot":"","sources":["../../src/handlers/gemini.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAKjD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA8Bf"}

package/dist/handlers/gemini.js

@@ -0,0 +1,41 @@
+/**
+ * Google Gemini handler — POST /v1/models/:model:generateContent
+ */
+import { sanitize } from "../sanitizer/index.js";
+import { restore } from "../restorer.js";
+import { readBody, sendError, forwardError, sendJSON } from "../utils/http.js";
+export async function handleGeminiRequest(req, res, config, modelName) {
+    try {
+        const { contents, tools, generationConfig, ...rest } = JSON.parse(await readBody(req));
+        const { sanitized: sanitizedContents, mappingTable } = sanitize(contents);
+        const backend = config.backends.gemini;
+        if (!backend) {
+            sendError(res, 500, "Gemini backend not configured");
+            return;
+        }
+        const response = await fetch(`${backend.baseUrl}/v1/models/${modelName}:generateContent`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "x-goog-api-key": backend.apiKey,
+            },
+            body: JSON.stringify({
+                contents: sanitizedContents,
+                ...(tools && { tools }),
+                ...(generationConfig && { generationConfig }),
+                ...rest,
+            }),
+        });
+        if (!response.ok) {
+            await forwardError(res, response);
+            return;
+        }
+        const data = JSON.parse(await response.text());
+        sendJSON(res, 200, restore(data, mappingTable));
+    }
+    catch (error) {
+        console.error("[opentrust-gateway] Gemini handler error:", error);
+        sendError(res, 500, error instanceof Error ? error.message : String(error));
+    }
+}
+//# sourceMappingURL=gemini.js.map

package/dist/handlers/gemini.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.js","sourceRoot":"","sources":["../../src/handlers/gemini.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE/E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAoB,EACpB,GAAmB,EACnB,MAAqB,EACrB,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACvF,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE1E,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,+BAA+B,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAE/E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,cAAc,SAAS,kBAAkB,EAAE;YACxF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,OAAO,CAAC,MAAM;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,QAAQ,EAAE,iBAAiB;gBAC3B,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC;gBACvB,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,CAAC;gBAC7C,GAAG,IAAI;aACR,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAAC,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAEhE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;QAClE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/handlers/models.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Model list proxy — GET /v1/models
+ */
+import type { ServerResponse } from "node:http";
+import type { GatewayConfig } from "../types.js";
+export declare function handleModelsRequest(res: ServerResponse, config: GatewayConfig): Promise<void>;
+//# sourceMappingURL=models.d.ts.map

package/dist/handlers/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/handlers/models.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAmBf"}

package/dist/handlers/models.js

@@ -0,0 +1,29 @@
+/**
+ * Model list proxy — GET /v1/models
+ */
+import { sendError } from "../utils/http.js";
+export async function handleModelsRequest(res, config) {
+    try {
+        const backend = config.backends.openrouter ?? config.backends.openai;
+        if (!backend) {
+            sendError(res, 500, "No OpenAI-compatible backend configured");
+            return;
+        }
+        const headers = { Authorization: `Bearer ${backend.apiKey}` };
+        if (config.backends.openrouter) {
+            const or = config.backends.openrouter;
+            if (or.referer)
+                headers["HTTP-Referer"] = or.referer;
+            if (or.title)
+                headers["X-Title"] = or.title;
+        }
+        const response = await fetch(`${backend.baseUrl}/v1/models`, { headers });
+        res.writeHead(response.status, { "Content-Type": "application/json" });
+        res.end(await response.text());
+    }
+    catch (error) {
+        console.error("[opentrust-gateway] Models request error:", error);
+        sendError(res, 500, error instanceof Error ? error.message : String(error));
+    }
+}
+//# sourceMappingURL=models.js.map

package/dist/handlers/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/handlers/models.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAmB,EACnB,MAAqB;IAErB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrE,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,yCAAyC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAEzF,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACtF,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YACtC,IAAI,EAAE,CAAC,OAAO;gBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;YACrD,IAAI,EAAE,CAAC,KAAK;gBAAE,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;QAC9C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;QAClE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/handlers/openai.d.ts

@@ -0,0 +1,11 @@
+/**
+ * OpenAI Chat Completions handler — POST /v1/chat/completions
+ * Also compatible with OpenRouter, Kimi, DeepSeek, etc.
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+export type OpenAICompatibleBackend = {
+    baseUrl: string;
+    apiKey: string;
+};
+export declare function handleOpenAIRequest(req: IncomingMessage, res: ServerResponse, backend: OpenAICompatibleBackend, extraHeaders?: Record<string, string>): Promise<void>;
+//# sourceMappingURL=openai.d.ts.map

package/dist/handlers/openai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../src/handlers/openai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,MAAM,MAAM,uBAAuB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1E,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,uBAAuB,EAChC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAoCf"}

package/dist/handlers/openai.js

@@ -0,0 +1,45 @@
+/**
+ * OpenAI Chat Completions handler — POST /v1/chat/completions
+ * Also compatible with OpenRouter, Kimi, DeepSeek, etc.
+ */
+import { sanitize } from "../sanitizer/index.js";
+import { readBody, sendError, forwardError } from "../utils/http.js";
+import { handleSSEStream, handleJSONResponse } from "../utils/stream.js";
+export async function handleOpenAIRequest(req, res, backend, extraHeaders) {
+    try {
+        const { model, messages, tools, tool_choice, temperature, max_tokens, stream = false, ...rest } = JSON.parse(await readBody(req));
+        const { sanitized: sanitizedMessages, mappingTable } = sanitize(messages);
+        const headers = {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${backend.apiKey}`,
+            ...extraHeaders,
+        };
+        const response = await fetch(`${backend.baseUrl}/v1/chat/completions`, {
+            method: "POST",
+            headers,
+            body: JSON.stringify({
+                model,
+                messages: sanitizedMessages,
+                ...(tools && { tools }),
+                ...(tool_choice && { tool_choice }),
+                ...(temperature !== undefined && { temperature }),
+                ...(max_tokens && { max_tokens }),
+                stream,
+                ...rest,
+            }),
+        });
+        if (!response.ok) {
+            await forwardError(res, response);
+            return;
+        }
+        if (stream)
+            await handleSSEStream(response, res, mappingTable);
+        else
+            await handleJSONResponse(response, res, mappingTable);
+    }
+    catch (error) {
+        console.error("[opentrust-gateway] OpenAI handler error:", error);
+        sendError(res, 500, error instanceof Error ? error.message : String(error));
+    }
+}
+//# sourceMappingURL=openai.js.map

package/dist/handlers/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../src/handlers/openai.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAIzE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAoB,EACpB,GAAmB,EACnB,OAAgC,EAChC,YAAqC;IAErC,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,IAAI,EAAE,GAC7F,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAElC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE1E,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE;YACzC,GAAG,YAAY;SAChB,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,sBAAsB,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC;gBACvB,GAAG,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,CAAC;gBACnC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;gBACjD,GAAG,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC;gBACjC,MAAM;gBACN,GAAG,IAAI;aACR,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAAC,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAEhE,IAAI,MAAM;YAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;;YAC1D,MAAM,kBAAkB,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;QAClE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+/**
+ * OpenTrust AI Security Gateway
+ *
+ * Local HTTP proxy that intercepts LLM API calls, sanitizes sensitive data
+ * before sending to providers, and restores it in responses.
+ */
+export declare function startGateway(configPath?: string): void;
+export { sanitize, sanitizeMessages } from "./sanitizer/index.js";
+export { restore, restoreJSON, restoreSSELine } from "./restorer.js";
+export type { GatewayConfig, MappingTable, SanitizeResult, EntityMatch } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAqEH,wBAAgB,YAAY,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CA8BtD;AAGD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,126 @@
+#!/usr/bin/env node
+/**
+ * OpenTrust AI Security Gateway
+ *
+ * Local HTTP proxy that intercepts LLM API calls, sanitizes sensitive data
+ * before sending to providers, and restores it in responses.
+ */
+import { createServer } from "node:http";
+import { loadConfig, validateConfig } from "./config.js";
+import { handleAnthropicRequest } from "./handlers/anthropic.js";
+import { handleOpenAIRequest } from "./handlers/openai.js";
+import { handleGeminiRequest } from "./handlers/gemini.js";
+import { handleModelsRequest } from "./handlers/models.js";
+import { sendJSON, sendError } from "./utils/http.js";
+const LOG = "[opentrust-gateway]";
+let config;
+async function handleRequest(req, res) {
+    const { method, url } = req;
+    console.log(`${LOG} ${method} ${url}`);
+    // CORS
+    res.setHeader("Access-Control-Allow-Origin", "*");
+    res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+    res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization, x-api-key, anthropic-version");
+    if (method === "OPTIONS") {
+        res.writeHead(204);
+        res.end();
+        return;
+    }
+    if (url === "/health") {
+        sendJSON(res, 200, { status: "ok", version: "7.0.0" });
+        return;
+    }
+    if (method === "GET" && url === "/v1/models") {
+        await handleModelsRequest(res, config);
+        return;
+    }
+    if (method !== "POST") {
+        sendError(res, 405, "Method not allowed");
+        return;
+    }
+    try {
+        if (url === "/v1/messages") {
+            await handleAnthropicRequest(req, res, config);
+        }
+        else if (url === "/v1/chat/completions") {
+            await routeOpenAI(req, res);
+        }
+        else if (url?.match(/^\/v1\/models\/(.+):generateContent$/)) {
+            const modelName = url.match(/^\/v1\/models\/(.+):generateContent$/)?.[1];
+            if (modelName)
+                await handleGeminiRequest(req, res, config, modelName);
+            else
+                sendError(res, 404, "Model name required");
+        }
+        else {
+            sendError(res, 404, `Not found: ${url}`);
+        }
+    }
+    catch (error) {
+        console.error(`${LOG} Request handler error:`, error);
+        sendError(res, 500, error instanceof Error ? error.message : String(error));
+    }
+}
+async function routeOpenAI(req, res) {
+    const explicit = config.routing?.["/v1/chat/completions"];
+    if (explicit === "openrouter" || (!explicit && config.backends.openrouter)) {
+        const backend = config.backends.openrouter;
+        if (!backend) {
+            sendError(res, 500, "No OpenRouter backend configured");
+            return;
+        }
+        const extra = {};
+        if (backend.referer)
+            extra["HTTP-Referer"] = backend.referer;
+        if (backend.title)
+            extra["X-Title"] = backend.title;
+        await handleOpenAIRequest(req, res, backend, extra);
+    }
+    else if (explicit === "openai" || (!explicit && config.backends.openai)) {
+        const backend = config.backends.openai;
+        if (!backend) {
+            sendError(res, 500, "No OpenAI backend configured");
+            return;
+        }
+        await handleOpenAIRequest(req, res, backend);
+    }
+    else {
+        sendError(res, 500, "No OpenAI-compatible backend configured");
+    }
+}
+export function startGateway(configPath) {
+    try {
+        config = loadConfig(configPath);
+        validateConfig(config);
+        console.log(`${LOG} Configuration loaded:`);
+        console.log(`  Port: ${config.port}`);
+        console.log(`  Backends: ${Object.keys(config.backends).join(", ") || "(none)"}`);
+        const server = createServer(handleRequest);
+        const host = process.env.GATEWAY_HOST || "127.0.0.1";
+        server.listen(config.port, host, () => {
+            console.log(`${LOG} Listening on http://${host}:${config.port}`);
+            console.log(`  POST /v1/messages            — Anthropic`);
+            console.log(`  POST /v1/chat/completions    — OpenAI / OpenRouter`);
+            console.log(`  POST /v1/models/:m:generate  — Gemini`);
+            console.log(`  GET  /v1/models              — List models`);
+            console.log(`  GET  /health                 — Health check`);
+        });
+        const shutdown = () => {
+            console.log(`\n${LOG} Shutting down...`);
+            server.close(() => process.exit(0));
+        };
+        process.on("SIGINT", shutdown);
+        process.on("SIGTERM", shutdown);
+    }
+    catch (error) {
+        console.error(`${LOG} Failed to start:`, error);
+        process.exit(1);
+    }
+}
+// Re-exports
+export { sanitize, sanitizeMessages } from "./sanitizer/index.js";
+export { restore, restoreJSON, restoreSSELine } from "./restorer.js";
+if (import.meta.url === `file://${process.argv[1]}`) {
+    startGateway(process.argv[2]);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,GAAG,GAAG,qBAAqB,CAAC;AAClC,IAAI,MAAqB,CAAC;AAE1B,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,GAAmB;IACpE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;IAEvC,OAAO;IACP,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IAClD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;IACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,2DAA2D,CAAC,CAAC;IAE3G,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IAEpE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE1F,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QAAC,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAEjG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE7E,IAAI,CAAC;QACH,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAC3B,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;YAC1C,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,GAAG,EAAE,KAAK,CAAC,sCAAsC,CAAC,EAAE,CAAC;YAC9D,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzE,IAAI,SAAS;gBAAE,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;;gBACjE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,GAAG,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,yBAAyB,EAAE,KAAK,CAAC,CAAC;QACtD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAoB,EAAE,GAAmB;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,sBAAsB,CAAC,CAAC;IAE1D,IAAI,QAAQ,KAAK,YAAY,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,kCAAkC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAClF,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,OAAO;YAAE,KAAK,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QAC7D,IAAI,OAAO,CAAC,KAAK;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;QACpD,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,8BAA8B,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC9E,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,yCAAyC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAAmB;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,cAAc,CAAC,MAAM,CAAC,CAAC;QAEvB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,wBAAwB,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;QAElF,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,WAAW,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YACpC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,wBAAwB,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,mBAAmB,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,mBAAmB,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,aAAa;AACb,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGrE,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/dist/restorer.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Content restorer — replaces placeholders back to original values.
+ */
+import type { MappingTable } from "./types.js";
+export declare function restore(content: any, map: MappingTable): any;
+export declare function restoreJSON(jsonString: string, map: MappingTable): string;
+export declare function restoreSSELine(line: string, map: MappingTable): string;
+//# sourceMappingURL=restorer.d.ts.map

package/dist/restorer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restorer.d.ts","sourceRoot":"","sources":["../src/restorer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAoB/C,wBAAgB,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,GAAG,GAAG,CAG5D;AAED,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,MAAM,CAOzE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,MAAM,CAUtE"}

package/dist/restorer.js

@@ -0,0 +1,54 @@
+/**
+ * Content restorer — replaces placeholders back to original values.
+ */
+function restoreText(text, map) {
+    let out = text;
+    const keys = Array.from(map.keys()).sort((a, b) => b.length - a.length);
+    for (const k of keys)
+        out = out.split(k).join(map.get(k));
+    return out;
+}
+function restoreValue(value, map) {
+    if (typeof value === "string")
+        return restoreText(value, map);
+    if (Array.isArray(value))
+        return value.map((v) => restoreValue(v, map));
+    if (value !== null && typeof value === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(value))
+            out[k] = restoreValue(v, map);
+        return out;
+    }
+    return value;
+}
+export function restore(content, map) {
+    if (map.size === 0)
+        return content;
+    return restoreValue(content, map);
+}
+export function restoreJSON(jsonString, map) {
+    if (map.size === 0)
+        return jsonString;
+    try {
+        return JSON.stringify(restore(JSON.parse(jsonString), map));
+    }
+    catch {
+        return restoreText(jsonString, map);
+    }
+}
+export function restoreSSELine(line, map) {
+    if (map.size === 0)
+        return line;
+    if (!line.startsWith("data: "))
+        return line;
+    const data = line.slice(6);
+    if (data === "[DONE]")
+        return line;
+    try {
+        return `data: ${JSON.stringify(restore(JSON.parse(data), map))}\n`;
+    }
+    catch {
+        return `data: ${restoreText(data, map)}\n`;
+    }
+}
+//# sourceMappingURL=restorer.js.map

package/dist/restorer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restorer.js","sourceRoot":"","sources":["../src/restorer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,SAAS,WAAW,CAAC,IAAY,EAAE,GAAiB;IAClD,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACxE,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,KAAU,EAAE,GAAiB;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAAQ,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1E,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAY,EAAE,GAAiB;IACrD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,OAAO,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,GAAiB;IAC/D,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,GAAiB;IAC5D,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/sanitizer/core.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Sanitizer core — entity definitions, pattern matching, entropy detection.
+ * Shared between gateway (reversible) and guards (one-way).
+ */
+import type { EntityMatch } from "../types.js";
+type Entity = {
+    category: string;
+    categoryKey: string;
+    pattern: RegExp;
+};
+declare const ENTITIES: Entity[];
+export declare const SECRET_PREFIXES: string[];
+export declare function shannonEntropy(s: string): number;
+export declare function collectMatches(content: string): EntityMatch[];
+export { ENTITIES };
+//# sourceMappingURL=core.d.ts.map

package/dist/sanitizer/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/sanitizer/core.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C,KAAK,MAAM,GAAG;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,QAAA,MAAM,QAAQ,EAAE,MAAM,EASrB,CAAC;AAMF,eAAO,MAAM,eAAe,UAG3B,CAAC;AAaF,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAUhD;AAMD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,EAAE,CAmC7D;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC"}