@plumbus/core 0.6.4 → 0.6.6

package/dist/cli/mcp-serve-context.js

@@ -1,13 +1,13 @@
 import { PromptRegistry } from "../ai/prompt-registry.js";
-import { createAuditService } from "../audit/service.js";
 import { createJwtAdapter } from "../auth/adapter.js";
 import { loadConfig } from "../config/loader.js";
 import { closeDatabaseConnection, resolveDatabaseConnection } from "../data/connection.js";
+import { resolveEncryptionKey } from "../data/field-encryption.js";
 import { EntityRegistry } from "../data/registry.js";
-import { createEventEmitter } from "../events/emitter.js";
 import { EventRegistry } from "../events/registry.js";
 import { CapabilityRegistry } from "../execution/capability-registry.js";
 import { buildCapabilityRuntimeDeps } from "../execution/capability-invocation.js";
+import { wireContextDependencies } from "../execution/context-deps.js";
 import {
   createInvocationEmitScope,
   resolveInvocationCausationId
@@ -16,6 +16,7 @@ import { createFlowEngine } from "../flows/engine.js";
 import { createFlowService } from "../flows/flow-service.js";
 import { FlowRegistry } from "../flows/registry.js";
 import { createTranslationService, TranslationRegistry } from "../translations/index.js";
+import { createStructuredLogger, withLogMasking } from "../observability/metrics.js";
 import { buildWorkerAiService } from "../runtime/bootstrap.js";
 import { loadServerExtensions } from "../runtime/load-extensions.js";
 import { resolveRuntimeQueues } from "../runtime/queue-factory.js";
@@ -56,21 +57,20 @@ async function buildMcpServeContext() {
   const dbConnection = await resolveDatabaseConnection(config.database, {});
   const db = dbConnection.db;
   const queues = await resolveRuntimeQueues(config);
-  const logger = {
-    info: (msg) => console.log(msg),
-    warn: (msg) => console.warn(msg),
-    error: (msg) => console.error(msg),
-    debug: (msg) => console.debug(msg)
-  };
   const translationRegistry = new TranslationRegistry();
   translationRegistry.registerAll(resources.translations ?? []);
   const defaultLocale = resources.translations?.[0]?.defaultLocale ?? "en";
+  const supportedLocales = translationRegistry.getSupportedLocales();
+  const resolvedSupportedLocales = supportedLocales.length > 0 ? supportedLocales : [defaultLocale];
+  const maskKeys = entities.getMaskedFieldNames();
+  const encryptionKey = resolveEncryptionKey();
   const authAdapter = await resolveMcpServeAuthAdapter(config);
   const extensions = await loadServerExtensions();
   const aiService = buildWorkerAiService({
     config,
     db,
     promptRegistry,
+    entities,
     onAICostRecorded: extensions.onAICostRecorded,
     resolveAiOverrides: extensions.resolveAiOverrides,
     enableStrictStructuredOutputs: extensions.enableStrictStructuredOutputs
@@ -93,35 +93,40 @@ async function buildMcpServeContext() {
   const routeConfig = {
     db,
     authAdapter,
+    defaultLocale,
+    supportedLocales: resolvedSupportedLocales,
     createDependencies: (auth, options) => {
-      const audit = createAuditService({ db, auth });
-      const data = entities.createDataService({
-        db,
-        auth,
-        audit,
-        bypassTenantScope: options?.bypassTenantScope
-      });
       const invocationEmitScope = createInvocationEmitScope();
-      const eventService = createEventEmitter({
-        db,
-        auth,
-        registry: events,
-        audit,
-        getCausationId: () => resolveInvocationCausationId(invocationEmitScope)
-      });
-      return {
-        auth,
-        data,
-        events: eventService,
-        flows: createFlowService(requestFlowEngine, auth),
-        ai: aiService,
-        audit,
-        logger,
-        config,
-        translations: createTranslationService(translationRegistry, defaultLocale),
-        invocationEmitScope,
-        ...buildCapabilityRuntimeDeps(capabilities)
-      };
+      const locale = options?.locale ?? defaultLocale;
+      const requestLogger = withLogMasking(
+        createStructuredLogger({
+          component: "mcp-capability",
+          tenantId: auth.tenantId,
+          actorId: auth.userId,
+          maskKeys
+        }),
+        maskKeys
+      );
+      return wireContextDependencies(
+        {
+          db,
+          auth,
+          entities,
+          events,
+          bypassTenantScope: options?.bypassTenantScope,
+          getCausationId: () => resolveInvocationCausationId(invocationEmitScope),
+          encryptionKey
+        },
+        {
+          flows: createFlowService(requestFlowEngine, auth),
+          ai: aiService,
+          logger: requestLogger,
+          config,
+          translations: createTranslationService(translationRegistry, locale),
+          invocationEmitScope,
+          ...buildCapabilityRuntimeDeps(capabilities)
+        }
+      );
     }
   };
   return {

package/dist/cli/mcp-serve-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-serve-context.js","sourceRoot":"","sources":["../../src/cli/mcp-serve-context.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,yFAAyF;AAGzF,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAKzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAYlD,KAAK,UAAU,0BAA0B,CAAC,MAAqB;IAC7D,IAAI,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QAC9D,OAAO,oBAAoB,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM;YACzB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;SACxC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CACF,kLAAkL,CACnL,CAAC;IACF,OAAO,gBAAgB,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,4CAA4C;QAC1E,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;QAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAE5C,MAAM,YAAY,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC9C,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAEjD,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEzC,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IACnC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IACjC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEnC,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;IAE3B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAElD,MAAM,MAAM,GAAkB;QAC5B,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QACvC,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QACxC,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1C,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;KAC3C,CAAC;IACF,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACtD,mBAAmB,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;IAEzE,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAEhD,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,MAAM;QACN,EAAE;QACF,cAAc;QACd,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,6BAA6B,EAAE,UAAU,CAAC,6BAA6B;KACxE,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;QACzC,EAAE;QACF,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE;YACR,KAAK,CAAC,iBAAiB;gBACrB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,uDAAuD;iBAC/D,CAAC;YACJ,CAAC;YACD,iBAAiB;gBACf,OAAO,KAAK,CAAC;YACf,CAAC;SACF;KACF,CAAC,CAAC;IAEH,MAAM,WAAW,GAAyB;QACxC,EAAE;QACF,WAAW;QACX,kBAAkB,EAAE,CAAC,IAAiB,EAAE,OAAQ,EAAuB,EAAE;YACvE,MAAM,KAAK,GAAG,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,iBAAiB,CAAC;gBACtC,EAAE;gBACF,IAAI;gBACJ,KAAK;gBACL,iBAAiB,EAAE,OAAO,EAAE,iBAAiB;aAC9C,CAAC,CAAC;YACH,MAAM,mBAAmB,GAAG,yBAAyB,EAAE,CAAC;YACxD,MAAM,YAAY,GAAG,kBAAkB,CAAC;gBACtC,EAAE;gBACF,IAAI;gBACJ,QAAQ,EAAE,MAAM;gBAChB,KAAK;gBACL,cAAc,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,mBAAmB,CAAC;aACxE,CAAC,CAAC;YAEH,OAAO;gBACL,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,YAAY;gBACpB,KAAK,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,IAAI,CAAC;gBACjD,EAAE,EAAE,SAAS;gBACb,KAAK;gBACL,MAAM;gBACN,MAAM,EAAE,MAA4C;gBACpD,YAAY,EAAE,wBAAwB,CAAC,mBAAmB,EAAE,aAAa,CAAC;gBAC1E,mBAAmB;gBACnB,GAAG,0BAA0B,CAAC,YAAY,CAAC;aAC5C,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO;QACL,MAAM;QACN,EAAE;QACF,YAAY;QACZ,WAAW;QACX,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"mcp-serve-context.js","sourceRoot":"","sources":["../../src/cli/mcp-serve-context.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,yFAAyF;AAGzF,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAIrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAYlD,KAAK,UAAU,0BAA0B,CAAC,MAAqB;IAC7D,IAAI,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QAC9D,OAAO,oBAAoB,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM;YACzB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;SACxC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CACF,kLAAkL,CACnL,CAAC;IACF,OAAO,gBAAgB,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,4CAA4C;QAC1E,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;QAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAE5C,MAAM,YAAY,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC9C,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAEjD,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEzC,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IACnC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IACjC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEnC,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;IAE3B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAElD,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACtD,mBAAmB,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;IACzE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,mBAAmB,EAAE,CAAC;IACnE,MAAM,wBAAwB,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,QAAQ,CAAC,mBAAmB,EAAE,CAAC;IAChD,MAAM,aAAa,GAAG,oBAAoB,EAAE,CAAC;IAE7C,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAEhD,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,MAAM;QACN,EAAE;QACF,cAAc;QACd,QAAQ;QACR,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,6BAA6B,EAAE,UAAU,CAAC,6BAA6B;KACxE,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;QACzC,EAAE;QACF,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE;YACR,KAAK,CAAC,iBAAiB;gBACrB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,uDAAuD;iBAC/D,CAAC;YACJ,CAAC;YACD,iBAAiB;gBACf,OAAO,KAAK,CAAC;YACf,CAAC;SACF;KACF,CAAC,CAAC;IAEH,MAAM,WAAW,GAAyB;QACxC,EAAE;QACF,WAAW;QACX,aAAa;QACb,gBAAgB,EAAE,wBAAwB;QAC1C,kBAAkB,EAAE,CAAC,IAAiB,EAAE,OAAQ,EAAuB,EAAE;YACvE,MAAM,mBAAmB,GAAG,yBAAyB,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,aAAa,CAAC;YAChD,MAAM,aAAa,GAAG,cAAc,CAClC,sBAAsB,CAAC;gBACrB,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,MAAM;gBACpB,QAAQ;aACT,CAAC,EACF,QAAQ,CACT,CAAC;YACF,OAAO,uBAAuB,CAC5B;gBACE,EAAE;gBACF,IAAI;gBACJ,QAAQ;gBACR,MAAM;gBACN,iBAAiB,EAAE,OAAO,EAAE,iBAAiB;gBAC7C,cAAc,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,mBAAmB,CAAC;gBACvE,aAAa;aACd,EACD;gBACE,KAAK,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,IAAI,CAAC;gBACjD,EAAE,EAAE,SAAS;gBACb,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,MAA4C;gBACpD,YAAY,EAAE,wBAAwB,CAAC,mBAAmB,EAAE,MAAM,CAAC;gBACnE,mBAAmB;gBACnB,GAAG,0BAA0B,CAAC,YAAY,CAAC;aAC5C,CACF,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO;QACL,MAAM;QACN,EAAE;QACF,YAAY;QACZ,WAAW;QACX,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/scaffold-write.d.ts

@@ -7,7 +7,7 @@ export interface ScaffoldWriteResult {
     skipped: string[];
     overwritten: string[];
 }
-/** Always write generated contract files. */
+/** Always write generated contract files (overwrite existing). */
 export declare function writeGeneratedFiles(outputRoot: string, files: GeneratedFile[]): string[];
 /**
  * Write scaffold/template files with overwrite protection.

package/dist/cli/scaffold-write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold-write.d.ts","sourceRoot":"","sources":["../../src/cli/scaffold-write.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,6CAA6C;AAC7C,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,EAAE,CAQxF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,aAAa,EAAE,EACtB,KAAK,CAAC,EAAE,OAAO,GACd,mBAAmB,CAqBrB"}
+{"version":3,"file":"scaffold-write.d.ts","sourceRoot":"","sources":["../../src/cli/scaffold-write.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,EAAE,CAQxF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,aAAa,EAAE,EACtB,KAAK,CAAC,EAAE,OAAO,GACd,mBAAmB,CAqBrB"}

package/dist/cli/scaffold-write.js

@@ -2,7 +2,7 @@
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { writeFile } from './utils.js';
-/** Always write generated contract files. */
+/** Always write generated contract files (overwrite existing). */
 export function writeGeneratedFiles(outputRoot, files) {
     const written = [];
     for (const file of files) {

package/dist/cli/scaffold-write.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold-write.js","sourceRoot":"","sources":["../../src/cli/scaffold-write.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAErE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAavC,6CAA6C;AAC7C,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,KAAsB;IAC5E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,KAAsB,EACtB,KAAe;IAEf,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;gBACrB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"scaffold-write.js","sourceRoot":"","sources":["../../src/cli/scaffold-write.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAErE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAavC,kEAAkE;AAClE,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,KAAsB;IAC5E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,KAAsB,EACtB,KAAe;IAEf,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;gBACrB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC3C,CAAC"}

package/dist/cli/templates/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../src/cli/templates/resources.ts"],"names":[],"mappings":"AAKA,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAuDrF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAW5E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBnD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAqBjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CA0BtE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYlD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAsBnD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAexD;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAK/C;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAcpE"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../src/cli/templates/resources.ts"],"names":[],"mappings":"AAKA,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAuDrF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAW5E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBnD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAqBjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CA0BtE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYlD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAqBnD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAexD;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAK/C;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAcpE"}

package/dist/cli/templates/resources.js

@@ -4,7 +4,7 @@ import { toCamelCase, toKebabCase, toPascalCase } from '../utils.js';
 export function capabilityTemplate(name, kind, domain) {
     const pascal = toPascalCase(name);
     return `import { defineCapability } from "@plumbus/core";
-import { z } from "zod";
+import { z } from "@plumbus/core/zod";
 
 export const ${toCamelCase(name)} = defineCapability({
   name: "${name}",
@@ -88,7 +88,7 @@ export const ${toCamelCase(name)}Entity = defineEntity({
 }
 export function flowTemplate(name, domain) {
     return `import { defineFlow } from "@plumbus/core";
-import { z } from "zod";
+import { z } from "@plumbus/core/zod";
 
 export const ${toCamelCase(name)}Flow = defineFlow({
   name: "${name}",
@@ -137,7 +137,7 @@ describe("${toPascalCase(name)} Flow", () => {
 }
 export function eventTemplate(name) {
     return `import { defineEvent } from "@plumbus/core";
-import { z } from "zod";
+import { z } from "@plumbus/core/zod";
 
 export const ${toCamelCase(name)}Event = defineEvent({
   name: "${name}",
@@ -150,7 +150,7 @@ export const ${toCamelCase(name)}Event = defineEvent({
 }
 export function promptTemplate(name) {
     return `import { definePrompt } from "@plumbus/core";
-import { z } from "zod";
+import { z } from "@plumbus/core/zod";
 
 export const ${toCamelCase(name)}Prompt = definePrompt({
   name: "${name}",
@@ -164,8 +164,7 @@ export const ${toCamelCase(name)}Prompt = definePrompt({
   }),
 
   model: {
-    provider: "openai",
-    model: "gpt-4o-mini",
+    name: "gpt-4o-mini",
     temperature: 0.7,
   },
 });

package/dist/cli/templates/resources.js.map

@@ -1 +1 @@
-{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../src/cli/templates/resources.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,+CAA+C;AAE/C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAErE,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc;IAC3E,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;;;eAGM,WAAW,CAAC,IAAI,CAAC;WACrB,IAAI;WACJ,IAAI;aACF,MAAM;;;;;;wDAMqC,IAAI;;;;;;yBAMnC,MAAM,IAAI,IAAI;;;;;;;;;;;;;;;;;;;;;;;yBAuBd,MAAM;;MAG3B,IAAI,KAAK,cAAc;QACrB,CAAC,CAAC;;;8CAGsC;QACxC,CAAC,CAAC,EACN;;CAED,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAe;IAClE,OAAO;cACK,WAAW,CAAC,IAAI,CAAC;;YAEnB,YAAY,CAAC,IAAI,CAAC;;;;;;CAM7B,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;;eAEM,WAAW,CAAC,IAAI,CAAC;WACrB,MAAM;;;;;;;;;;;;CAYhB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAc;IACvD,OAAO;;;eAGM,WAAW,CAAC,IAAI,CAAC;WACrB,IAAI;aACF,MAAM;;;;;;;;;;qBAUE,MAAM;;;;CAI1B,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,OAAO;;WAEE,WAAW,CAAC,IAAI,CAAC;;YAEhB,YAAY,CAAC,IAAI,CAAC;;wCAEU,WAAW,CAAC,IAAI,CAAC;;;;;;;;wCAQjB,WAAW,CAAC,IAAI,CAAC;;;;;;;;;;CAUxD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO;;;eAGM,WAAW,CAAC,IAAI,CAAC;WACrB,IAAI;;;;;;CAMd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO;;;eAGM,WAAW,CAAC,IAAI,CAAC;WACrB,IAAI;;;;;;;;;;;;;;;;CAgBd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO;;eAEM,WAAW,CAAC,IAAI,CAAC;WACrB,IAAI;;;;;;;;;;CAUd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO;;;CAGR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAY;IAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO;uCAC8B,KAAK;uCACL,KAAK;;eAE7B,KAAK;WACT,IAAI;;;;;CAKd,CAAC;AACF,CAAC"}
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../src/cli/templates/resources.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,+CAA+C;AAE/C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAErE,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc;IAC3E,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;;;eAGM,WAAW,CAAC,IAAI,CAAC;WACrB,IAAI;WACJ,IAAI;aACF,MAAM;;;;;;wDAMqC,IAAI;;;;;;yBAMnC,MAAM,IAAI,IAAI;;;;;;;;;;;;;;;;;;;;;;;yBAuBd,MAAM;;MAG3B,IAAI,KAAK,cAAc;QACrB,CAAC,CAAC;;;8CAGsC;QACxC,CAAC,CAAC,EACN;;CAED,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAe;IAClE,OAAO;cACK,WAAW,CAAC,IAAI,CAAC;;YAEnB,YAAY,CAAC,IAAI,CAAC;;;;;;CAM7B,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;;eAEM,WAAW,CAAC,IAAI,CAAC;WACrB,MAAM;;;;;;;;;;;;CAYhB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAc;IACvD,OAAO;;;eAGM,WAAW,CAAC,IAAI,CAAC;WACrB,IAAI;aACF,MAAM;;;;;;;;;;qBAUE,MAAM;;;;CAI1B,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,OAAO;;WAEE,WAAW,CAAC,IAAI,CAAC;;YAEhB,YAAY,CAAC,IAAI,CAAC;;wCAEU,WAAW,CAAC,IAAI,CAAC;;;;;;;;wCAQjB,WAAW,CAAC,IAAI,CAAC;;;;;;;;;;CAUxD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO;;;eAGM,WAAW,CAAC,IAAI,CAAC;WACrB,IAAI;;;;;;CAMd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO;;;eAGM,WAAW,CAAC,IAAI,CAAC;WACrB,IAAI;;;;;;;;;;;;;;;CAed,CAAC;AACF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO;;eAEM,WAAW,CAAC,IAAI,CAAC;WACrB,IAAI;;;;;;;;;;CAUd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO;;;CAGR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAY;IAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO;uCAC8B,KAAK;uCACL,KAAK;;eAE7B,KAAK;WACT,IAAI;;;;;CAKd,CAAC;AACF,CAAC"}

package/dist/config/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAEV,iBAAiB,EAGjB,WAAW,EACX,aAAa,EACb,mBAAmB,EAEpB,MAAM,oBAAoB,CAAC;AAI5B,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,0DAA0D;IAC1D,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,oDAAoD;AACpD,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,aAAa,CAiBrE;AAkGD,4DAA4D;AAC5D,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,iBAAiB,GAAG,SAAS,CAiC/B;AAID,6EAA6E;AAC7E,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAAG,SAAS,CA0BjD;AAgCD,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,sBAAsB,CA0C5E"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAEV,iBAAiB,EAGjB,WAAW,EAEX,aAAa,EACb,mBAAmB,EAEpB,MAAM,oBAAoB,CAAC;AAO5B,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,0DAA0D;IAC1D,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,oDAAoD;AACpD,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,aAAa,CAkBrE;AA2GD,4DAA4D;AAC5D,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,iBAAiB,GAAG,SAAS,CAkC/B;AAkDD,6EAA6E;AAC7E,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAAG,SAAS,CA0BjD;AAgCD,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,sBAAsB,CA0C5E"}

package/dist/config/loader.js

@@ -2,6 +2,7 @@
 // Loads PlumbusConfig from environment variables with defaults per environment.
 // Secrets from env vars (never hardcoded in source).
 import { ErrorDocUrls, ErrorHints } from '../errors/hints.js';
+import { FieldClassification } from '../types/enums.js';
 /** Load PlumbusConfig from environment variables */
 export function loadConfig(options) {
     const env = options?.env ?? process.env;
@@ -13,12 +14,20 @@ export function loadConfig(options) {
         environment,
         database: loadDatabaseConfig(env, environment),
         queue: loadQueueConfig(env, environment),
+        execution: loadExecutionConfig(env),
         ai: loadAIConfig(env),
         aiProviders: loadMultiProviderConfig(env),
         auth: loadAuthConfig(env, environment),
         complianceProfiles: loadComplianceProfiles(env),
     };
 }
+// ── Execution Config ──
+function loadExecutionConfig(env) {
+    const raw = env.PLUMBUS_TRANSACTIONAL_OUTBOX;
+    return {
+        transactionalOutbox: raw === undefined ? true : raw !== 'false',
+    };
+}
 // ── Database Config ──
 function loadDatabaseConfig(env, environment) {
     const defaults = environment === 'development'
@@ -118,6 +127,34 @@ export function loadMultiProviderConfig(env) {
         defaultModel: env.AI_DEFAULT_MODEL ?? undefined,
         providers,
         promptOverrides: loadPromptOverrides(env),
+        security: loadAiSecurityConfig(env),
+    };
+}
+function parseFieldClassificationEnv(raw, envName) {
+    const trimmed = raw?.trim();
+    if (!trimmed)
+        return undefined;
+    const values = Object.values(FieldClassification);
+    if (!values.includes(trimmed)) {
+        console.warn(`[plumbus] Invalid ${envName}="${trimmed}" — expected one of: ${values.join(', ')}`);
+        return undefined;
+    }
+    return trimmed;
+}
+function loadAiSecurityConfig(env) {
+    const modeRaw = env.AI_SECURITY_MODE?.trim().toLowerCase();
+    const warnThreshold = parseFieldClassificationEnv(env.AI_SECURITY_WARN_THRESHOLD, 'AI_SECURITY_WARN_THRESHOLD');
+    const redactThreshold = parseFieldClassificationEnv(env.AI_SECURITY_REDACT_THRESHOLD, 'AI_SECURITY_REDACT_THRESHOLD');
+    if (!modeRaw && !warnThreshold && !redactThreshold) {
+        return undefined;
+    }
+    if (modeRaw && modeRaw !== 'block' && modeRaw !== 'redact') {
+        console.warn(`[plumbus] Invalid AI_SECURITY_MODE="${modeRaw}" — expected "block" or "redact"; defaulting to "redact"`);
+    }
+    return {
+        mode: modeRaw === 'block' ? 'block' : 'redact',
+        warnThreshold,
+        redactThreshold,
     };
 }
 // \u2500\u2500 Prompt Model Overrides \u2500\u2500

package/dist/config/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,gFAAgF;AAChF,qDAAqD;AAErD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAuB9D,oDAAoD;AACpD,MAAM,UAAU,UAAU,CAAC,OAA2B;IACpD,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAExC,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,WAAW;QACvC,GAAG,CAAC,WAAW;QACf,GAAG,CAAC,QAAQ;QACZ,aAAa,CAAgB,CAAC;IAEhC,OAAO;QACL,WAAW;QACX,QAAQ,EAAE,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC;QAC9C,KAAK,EAAE,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC;QACxC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC;QACrB,WAAW,EAAE,uBAAuB,CAAC,GAAG,CAAC;QACzC,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC;QACtC,kBAAkB,EAAE,sBAAsB,CAAC,GAAG,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,wBAAwB;AAExB,SAAS,kBAAkB,CACzB,GAAuC,EACvC,WAAwB;IAExB,MAAM,QAAQ,GACZ,WAAW,KAAK,aAAa;QAC3B,CAAC,CAAC;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,aAAa;YACvB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,UAAU;SACrB;QACH,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAE5F,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI;QACrE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC3F,QAAQ,EAAE,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ;QACjF,IAAI,EAAE,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI;QACrE,QAAQ,EAAE,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ;QACzF,GAAG,EAAE,GAAG,CAAC,YAAY,KAAK,MAAM,IAAI,WAAW,KAAK,YAAY;QAChE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;KAC9F,CAAC;AACJ,CAAC;AAED,qBAAqB;AAErB,SAAS,eAAe,CACtB,GAAuC,EACvC,WAAwB;IAExB,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,WAAW;QACrD,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,MAAM,EAAE,EAAE,CAAC;QAC9D,QAAQ,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,IAAI,SAAS;QAC/D,MAAM,EAAE,GAAG,CAAC,YAAY,IAAI,WAAW,WAAW,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,kBAAkB;AAElB,SAAS,YAAY,CAAC,GAAuC;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;IAE9B,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE3C,OAAO;QACL,QAAQ;QACR,MAAM;QACN,KAAK,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;QAChC,OAAO,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACrC,mBAAmB,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACpF,cAAc,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QACzF,cAAc,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1F,CAAC;AACJ,CAAC;AAED,iCAAiC;AAEjC,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAU,CAAC;AAIhE,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAQ,sBAA4C,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAuC,EACvC,IAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC;IACvC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,MAAM,kBAAkB,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;IAEnD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,MAAM;QACN,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,SAAS;QACzC,OAAO,EAAE,GAAG,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,SAAS;QAC9C,mBAAmB,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAClF,cAAc,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3E,cAAc,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,uBAAuB,CACrC,GAAuC;IAEvC,MAAM,eAAe,GAAG,GAAG,CAAC,mBAAmB,CAAC;IAChD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IAEvC,MAAM,SAAS,GAAqC,EAAE,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CACV,sBAAsB,GAAG,KAAK,UAAU,CAAC,aAAa,KAAK,YAAY,CAAC,aAAa,GAAG,CACzF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1D,OAAO;QACL,eAAe;QACf,YAAY,EAAE,GAAG,CAAC,gBAAgB,IAAI,SAAS;QAC/C,SAAS;QACT,eAAe,EAAE,mBAAmB,CAAC,GAAG,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,mDAAmD;AAEnD,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CACjC,GAAuC;IAEvC,MAAM,SAAS,GAAwC,EAAE,CAAC;IAE1D,kEAAkE;IAClE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,oEAAoE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7F,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YACvB,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,UAAU,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC;QAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,MAAM,aAAa,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;QAEhD,SAAS,CAAC,IAAI,CAAC,GAAG;YAChB,QAAQ,EAAE,GAAG,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,SAAS;YAC/C,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,SAAS;YACzC,WAAW,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC9D,SAAS,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,oBAAoB;AAEpB,SAAS,cAAc,CACrB,GAAuC,EACvC,WAAwB;IAExB,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,aAAa,IAAI,KAAK;QACpC,MAAM,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACpC,QAAQ,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;QACxC,OAAO,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;QACvC,MAAM,EACJ,GAAG,CAAC,WAAW;YACf,CAAC,WAAW,KAAK,aAAa,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,SAAS,CAAC;KAC7F,CAAC;AACJ,CAAC;AAED,4BAA4B;AAE5B,SAAS,sBAAsB,CAAC,GAAuC;IACrE,MAAM,GAAG,GAAG,GAAG,CAAC,2BAA2B,CAAC;IAC5C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAUD,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,WAAW;IACX,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAChE,CAAC;IAED,OAAO;IACP,MAAM,qBAAqB,GAAG;QAC5B,oBAAoB;QACpB,4CAA4C;KAC7C,CAAC;IACF,IACE,MAAM,CAAC,WAAW,KAAK,YAAY;QACnC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;QAC1B,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAClD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;IAED,wCAAwC;IACxC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACxF,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,gFAAgF;AAChF,qDAAqD;AAErD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAa9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAcxD,oDAAoD;AACpD,MAAM,UAAU,UAAU,CAAC,OAA2B;IACpD,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAExC,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,WAAW;QACvC,GAAG,CAAC,WAAW;QACf,GAAG,CAAC,QAAQ;QACZ,aAAa,CAAgB,CAAC;IAEhC,OAAO;QACL,WAAW;QACX,QAAQ,EAAE,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC;QAC9C,KAAK,EAAE,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC;QACxC,SAAS,EAAE,mBAAmB,CAAC,GAAG,CAAC;QACnC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC;QACrB,WAAW,EAAE,uBAAuB,CAAC,GAAG,CAAC;QACzC,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC;QACtC,kBAAkB,EAAE,sBAAsB,CAAC,GAAG,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,yBAAyB;AAEzB,SAAS,mBAAmB,CAAC,GAAuC;IAClE,MAAM,GAAG,GAAG,GAAG,CAAC,4BAA4B,CAAC;IAC7C,OAAO;QACL,mBAAmB,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO;KAChE,CAAC;AACJ,CAAC;AAED,wBAAwB;AAExB,SAAS,kBAAkB,CACzB,GAAuC,EACvC,WAAwB;IAExB,MAAM,QAAQ,GACZ,WAAW,KAAK,aAAa;QAC3B,CAAC,CAAC;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,aAAa;YACvB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,UAAU;SACrB;QACH,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAE5F,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI;QACrE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC3F,QAAQ,EAAE,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ;QACjF,IAAI,EAAE,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI;QACrE,QAAQ,EAAE,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ;QACzF,GAAG,EAAE,GAAG,CAAC,YAAY,KAAK,MAAM,IAAI,WAAW,KAAK,YAAY;QAChE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;KAC9F,CAAC;AACJ,CAAC;AAED,qBAAqB;AAErB,SAAS,eAAe,CACtB,GAAuC,EACvC,WAAwB;IAExB,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,WAAW;QACrD,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,MAAM,EAAE,EAAE,CAAC;QAC9D,QAAQ,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,IAAI,SAAS;QAC/D,MAAM,EAAE,GAAG,CAAC,YAAY,IAAI,WAAW,WAAW,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,kBAAkB;AAElB,SAAS,YAAY,CAAC,GAAuC;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;IAE9B,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE3C,OAAO;QACL,QAAQ;QACR,MAAM;QACN,KAAK,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;QAChC,OAAO,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACrC,mBAAmB,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACpF,cAAc,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QACzF,cAAc,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1F,CAAC;AACJ,CAAC;AAED,iCAAiC;AAEjC,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAU,CAAC;AAIhE,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAQ,sBAA4C,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAuC,EACvC,IAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC;IACvC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,MAAM,kBAAkB,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;IAEnD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,MAAM;QACN,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,SAAS;QACzC,OAAO,EAAE,GAAG,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,SAAS;QAC9C,mBAAmB,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAClF,cAAc,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3E,cAAc,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,uBAAuB,CACrC,GAAuC;IAEvC,MAAM,eAAe,GAAG,GAAG,CAAC,mBAAmB,CAAC;IAChD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IAEvC,MAAM,SAAS,GAAqC,EAAE,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CACV,sBAAsB,GAAG,KAAK,UAAU,CAAC,aAAa,KAAK,YAAY,CAAC,aAAa,GAAG,CACzF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1D,OAAO;QACL,eAAe;QACf,YAAY,EAAE,GAAG,CAAC,gBAAgB,IAAI,SAAS;QAC/C,SAAS;QACT,eAAe,EAAE,mBAAmB,CAAC,GAAG,CAAC;QACzC,QAAQ,EAAE,oBAAoB,CAAC,GAAG,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,GAAuB,EACvB,OAAe;IAEf,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAa,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CACV,qBAAqB,OAAO,KAAK,OAAO,wBAAwB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAkC,CAAC;AAC5C,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAuC;IAEvC,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,MAAM,aAAa,GAAG,2BAA2B,CAC/C,GAAG,CAAC,0BAA0B,EAC9B,4BAA4B,CAC7B,CAAC;IACF,MAAM,eAAe,GAAG,2BAA2B,CACjD,GAAG,CAAC,4BAA4B,EAChC,8BAA8B,CAC/B,CAAC;IAEF,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,CAAC,IAAI,CACV,uCAAuC,OAAO,0DAA0D,CACzG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;QAC9C,aAAa;QACb,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,mDAAmD;AAEnD,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CACjC,GAAuC;IAEvC,MAAM,SAAS,GAAwC,EAAE,CAAC;IAE1D,kEAAkE;IAClE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,oEAAoE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7F,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YACvB,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,UAAU,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC;QAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,MAAM,aAAa,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;QAEhD,SAAS,CAAC,IAAI,CAAC,GAAG;YAChB,QAAQ,EAAE,GAAG,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,SAAS;YAC/C,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,SAAS;YACzC,WAAW,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC9D,SAAS,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,oBAAoB;AAEpB,SAAS,cAAc,CACrB,GAAuC,EACvC,WAAwB;IAExB,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,aAAa,IAAI,KAAK;QACpC,MAAM,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACpC,QAAQ,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;QACxC,OAAO,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;QACvC,MAAM,EACJ,GAAG,CAAC,WAAW;YACf,CAAC,WAAW,KAAK,aAAa,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,SAAS,CAAC;KAC7F,CAAC;AACJ,CAAC;AAED,4BAA4B;AAE5B,SAAS,sBAAsB,CAAC,GAAuC;IACrE,MAAM,GAAG,GAAG,GAAG,CAAC,2BAA2B,CAAC;IAC5C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAUD,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,WAAW;IACX,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAChE,CAAC;IAED,OAAO;IACP,MAAM,qBAAqB,GAAG;QAC5B,oBAAoB;QACpB,4CAA4C;KAC7C,CAAC;IACF,IACE,MAAM,CAAC,WAAW,KAAK,YAAY;QACnC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;QAC1B,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAClD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;IAED,wCAAwC;IACxC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACxF,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/data/field-encryption.d.ts

@@ -0,0 +1,17 @@
+import type { EntityDefinition } from '../types/entity.js';
+export declare const ENCRYPTION_PREFIX = "plumbus:enc:v1:";
+/**
+ * Resolve a 32-byte AES-256 key from `PLUMBUS_ENCRYPTION_KEY`.
+ * Accepts 64-char hex or base64/base64url encoding.
+ */
+export declare function resolveEncryptionKey(env?: Record<string, string | undefined>): Buffer | undefined;
+export declare function isEncryptedValue(value: unknown): value is string;
+/** Encrypt a string field value. Returns ciphertext prefixed with `plumbus:enc:v1:`. */
+export declare function encryptFieldValue(plaintext: string, key: Buffer): string;
+/**
+ * Decrypt a stored field value. Plaintext values (no prefix) pass through unchanged.
+ */
+export declare function decryptFieldValue(value: string, key: Buffer): string;
+/** Extract string field names marked `encrypted: true` on an entity definition. */
+export declare function getEncryptedFields(entity: EntityDefinition): string[];
+//# sourceMappingURL=field-encryption.d.ts.map

package/dist/data/field-encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-encryption.d.ts","sourceRoot":"","sources":["../../src/data/field-encryption.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,eAAO,MAAM,iBAAiB,oBAAoB,CAAC;AAKnD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,GAAG,SAAS,CAyBpB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEhE;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAOxE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAqBpE;AAED,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAQrE"}

package/dist/data/field-encryption.js

@@ -0,0 +1,80 @@
+import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';
+import { EncryptionConfigError, EncryptionPayloadError } from '../errors/data-errors.js';
+export const ENCRYPTION_PREFIX = 'plumbus:enc:v1:';
+const IV_LENGTH = 12;
+const AUTH_TAG_LENGTH = 16;
+/**
+ * Resolve a 32-byte AES-256 key from `PLUMBUS_ENCRYPTION_KEY`.
+ * Accepts 64-char hex or base64/base64url encoding.
+ */
+export function resolveEncryptionKey(env = process.env) {
+    const raw = env.PLUMBUS_ENCRYPTION_KEY?.trim();
+    if (!raw)
+        return undefined;
+    if (/^[0-9a-fA-F]{64}$/.test(raw)) {
+        return Buffer.from(raw, 'hex');
+    }
+    try {
+        const key = Buffer.from(raw, 'base64url');
+        if (key.length === 32)
+            return key;
+    }
+    catch {
+        // fall through
+    }
+    try {
+        const key = Buffer.from(raw, 'base64');
+        if (key.length === 32)
+            return key;
+    }
+    catch {
+        // fall through
+    }
+    throw new EncryptionConfigError('PLUMBUS_ENCRYPTION_KEY must be 32 bytes encoded as 64-char hex or base64/base64url');
+}
+export function isEncryptedValue(value) {
+    return typeof value === 'string' && value.startsWith(ENCRYPTION_PREFIX);
+}
+/** Encrypt a string field value. Returns ciphertext prefixed with `plumbus:enc:v1:`. */
+export function encryptFieldValue(plaintext, key) {
+    const iv = randomBytes(IV_LENGTH);
+    const cipher = createCipheriv('aes-256-gcm', key, iv);
+    const ciphertext = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+    const authTag = cipher.getAuthTag();
+    const payload = Buffer.concat([iv, authTag, ciphertext]).toString('base64url');
+    return `${ENCRYPTION_PREFIX}${payload}`;
+}
+/**
+ * Decrypt a stored field value. Plaintext values (no prefix) pass through unchanged.
+ */
+export function decryptFieldValue(value, key) {
+    if (!isEncryptedValue(value)) {
+        return value;
+    }
+    const payload = Buffer.from(value.slice(ENCRYPTION_PREFIX.length), 'base64url');
+    if (payload.length < IV_LENGTH + AUTH_TAG_LENGTH) {
+        throw new EncryptionPayloadError('Invalid encrypted field payload');
+    }
+    const iv = payload.subarray(0, IV_LENGTH);
+    const authTag = payload.subarray(IV_LENGTH, IV_LENGTH + AUTH_TAG_LENGTH);
+    const ciphertext = payload.subarray(IV_LENGTH + AUTH_TAG_LENGTH);
+    const decipher = createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(authTag);
+    try {
+        return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString('utf8');
+    }
+    catch {
+        throw new EncryptionPayloadError('Failed to decrypt encrypted field value');
+    }
+}
+/** Extract string field names marked `encrypted: true` on an entity definition. */
+export function getEncryptedFields(entity) {
+    const encrypted = [];
+    for (const [name, descriptor] of Object.entries(entity.fields)) {
+        if (descriptor.type === 'string' && descriptor.options.encrypted) {
+            encrypted.push(name);
+        }
+    }
+    return encrypted;
+}
+//# sourceMappingURL=field-encryption.js.map

package/dist/data/field-encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-encryption.js","sourceRoot":"","sources":["../../src/data/field-encryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAGzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAEnD,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,GAAG,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,GAAG,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,GAAG,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IAED,MAAM,IAAI,qBAAqB,CAC7B,oFAAoF,CACrF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAC1E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,GAAW;IAC9D,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/E,OAAO,GAAG,iBAAiB,GAAG,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,GAAW;IAC1D,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;QACjD,MAAM,IAAI,sBAAsB,CAAC,iCAAiC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,eAAe,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;IAEjE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,CAAC,yCAAyC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CAAC,MAAwB;IACzD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACjE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/data/index.d.ts

@@ -3,6 +3,8 @@ export { applyMigrations, collectSchemas, readPendingMigrations, rollbackLastMig
 export { extractCreateTableNames, formatDriftReport, FRAMEWORK_TABLE_NAMES, getExistingFrameworkTables, inspectFrameworkDrift, type ColumnDrift, type DriftReport, type FrameworkTableName, type TableDrift, } from './drift-inspector.js';
 export { closeDatabaseConnection, connectPostgresDatabase, resolveDatabaseConnection, type DatabaseConnection, } from './connection.js';
 export { EntityRegistry } from './registry.js';
+export { collectMaskedFieldsFromEntities, getMaskedFields, } from './mask-fields.js';
+export { decryptFieldValue, encryptFieldValue, getEncryptedFields, isEncryptedValue, resolveEncryptionKey, ENCRYPTION_PREFIX, } from './field-encryption.js';
 export { createRepository, type RepositoryOptions } from './repository.js';
 export { generateDrizzleSchema, generateSchemas } from './schema-generator.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/data/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,UAAU,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,UAAU,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EACL,+BAA+B,EAC/B,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/data/index.js

@@ -9,6 +9,8 @@ export { applyMigrations, collectSchemas, readPendingMigrations, rollbackLastMig
 export { extractCreateTableNames, formatDriftReport, FRAMEWORK_TABLE_NAMES, getExistingFrameworkTables, inspectFrameworkDrift, } from './drift-inspector.js';
 export { closeDatabaseConnection, connectPostgresDatabase, resolveDatabaseConnection, } from './connection.js';
 export { EntityRegistry } from './registry.js';
+export { collectMaskedFieldsFromEntities, getMaskedFields, } from './mask-fields.js';
+export { decryptFieldValue, encryptFieldValue, getEncryptedFields, isEncryptedValue, resolveEncryptionKey, ENCRYPTION_PREFIX, } from './field-encryption.js';
 export { createRepository } from './repository.js';
 export { generateDrizzleSchema, generateSchemas } from './schema-generator.js';
 //# sourceMappingURL=index.js.map

package/dist/data/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,+EAA+E;AAC/E,oEAAoE;AACpE,EAAE;AACF,wFAAwF;AAExF,0DAA0D;AAC1D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,qBAAqB,GAKtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,GAKtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,GAE1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAA0B,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,+EAA+E;AAC/E,oEAAoE;AACpE,EAAE;AACF,wFAAwF;AAExF,0DAA0D;AAC1D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,qBAAqB,GAKtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,GAKtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,GAE1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EACL,+BAA+B,EAC/B,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAA0B,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/data/mask-fields.d.ts

@@ -0,0 +1,17 @@
+import type { EntityDefinition } from '../types/entity.js';
+/**
+ * Field names that should be masked in audit logs and structured log metadata,
+ * based on `maskedInLogs` or sensitive field classifications.
+ */
+export declare function getMaskedFields(entity: EntityDefinition): string[];
+/** Token substituted for redacted structured log metadata. */
+export declare const LOG_MASK_TOKEN = "***MASKED***";
+/** Token substituted for redacted audit-record field values (stored-data compat). */
+export declare const AUDIT_MASK_TOKEN = "***";
+/**
+ * Deep-mask values whose keys appear in `maskKeys` (top-level or nested objects).
+ */
+export declare function maskSensitiveValues(value: unknown, maskKeys: string[], token?: string): unknown;
+/** Collect unique masked field names across all registered entities. */
+export declare function collectMaskedFieldsFromEntities(entities: EntityDefinition[]): string[];
+//# sourceMappingURL=mask-fields.d.ts.map

package/dist/data/mask-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mask-fields.d.ts","sourceRoot":"","sources":["../../src/data/mask-fields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAS3D;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAYlE;AAED,8DAA8D;AAC9D,eAAO,MAAM,cAAc,iBAAiB,CAAC;AAE7C,qFAAqF;AACrF,eAAO,MAAM,gBAAgB,QAAQ,CAAC;AAEtC;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,MAAM,EAAE,EAClB,KAAK,GAAE,MAAuB,GAC7B,OAAO,CAaT;AAED,wEAAwE;AACxE,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,MAAM,EAAE,CAQtF"}

package/dist/data/mask-fields.js

@@ -0,0 +1,56 @@
+const SENSITIVE_CLASSIFICATIONS = new Set([
+    'sensitive',
+    'highly_sensitive',
+    'personal',
+]);
+/**
+ * Field names that should be masked in audit logs and structured log metadata,
+ * based on `maskedInLogs` or sensitive field classifications.
+ */
+export function getMaskedFields(entity) {
+    const masked = [];
+    for (const [name, descriptor] of Object.entries(entity.fields)) {
+        const opts = descriptor.options;
+        if (opts.maskedInLogs) {
+            masked.push(name);
+        }
+        else if (opts.classification && SENSITIVE_CLASSIFICATIONS.has(opts.classification)) {
+            masked.push(name);
+        }
+    }
+    return masked;
+}
+/** Token substituted for redacted structured log metadata. */
+export const LOG_MASK_TOKEN = '***MASKED***';
+/** Token substituted for redacted audit-record field values (stored-data compat). */
+export const AUDIT_MASK_TOKEN = '***';
+/**
+ * Deep-mask values whose keys appear in `maskKeys` (top-level or nested objects).
+ */
+export function maskSensitiveValues(value, maskKeys, token = LOG_MASK_TOKEN) {
+    if (!maskKeys.length)
+        return value;
+    const keySet = new Set(maskKeys);
+    if (value === null || typeof value !== 'object')
+        return value;
+    if (Array.isArray(value)) {
+        return value.map((entry) => maskSensitiveValues(entry, maskKeys, token));
+    }
+    const record = value;
+    const masked = {};
+    for (const [key, entry] of Object.entries(record)) {
+        masked[key] = keySet.has(key) ? token : maskSensitiveValues(entry, maskKeys, token);
+    }
+    return masked;
+}
+/** Collect unique masked field names across all registered entities. */
+export function collectMaskedFieldsFromEntities(entities) {
+    const names = new Set();
+    for (const entity of entities) {
+        for (const field of getMaskedFields(entity)) {
+            names.add(field);
+        }
+    }
+    return Array.from(names);
+}
+//# sourceMappingURL=mask-fields.js.map

package/dist/data/mask-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mask-fields.js","sourceRoot":"","sources":["../../src/data/mask-fields.ts"],"names":[],"mappings":"AAGA,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAsB;IAC7D,WAAW;IACX,kBAAkB;IAClB,UAAU;CACX,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAwB;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;QAChC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,IAAI,CAAC,cAAc,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC;AAE7C,qFAAqF;AACrF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAEtC;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAc,EACd,QAAkB,EAClB,QAAgB,cAAc;IAE9B,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,+BAA+B,CAAC,QAA4B;IAC1E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/dist/data/registry.d.ts

@@ -32,6 +32,8 @@ export declare class EntityRegistry {
      * Get all registered entity definitions.
      */
     getAllEntities(): EntityDefinition[];
+    /** Unique field names masked in logs across all registered entities. */
+    getMaskedFieldNames(): string[];
     /**
      * Get all Drizzle table schemas (for migration generation).
      */
@@ -46,6 +48,8 @@ export declare class EntityRegistry {
         audit?: AuditService;
         /** Bypass tenant-scope filtering for cross-tenant admin access */
         bypassTenantScope?: boolean;
+        /** AES-256-GCM key for encrypted string fields */
+        encryptionKey?: Buffer;
     }): DataService;
 }
 //# sourceMappingURL=registry.d.ts.map

package/dist/data/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/data/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,qBAAqB,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAIxD;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,MAAM,CAA8C;IAE5D;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAQxC;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,IAAI;IAM/C;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIrD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,SAAS;IAI3D;;OAEG;IACH,cAAc,IAAI,gBAAgB,EAAE;IAIpC;;OAEG;IACH,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAIvD;;;OAGG;IACH,iBAAiB,CAAC,OAAO,EAAE;QACzB,EAAE,EAAE,kBAAkB,CAAC;QACvB,IAAI,EAAE,WAAW,CAAC;QAClB,KAAK,CAAC,EAAE,YAAY,CAAC;QACrB,kEAAkE;QAClE,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,GAAG,WAAW;CAkBhB"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/data/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,qBAAqB,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAKxD;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,MAAM,CAA8C;IAE5D;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAQxC;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,IAAI;IAM/C;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIrD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,SAAS;IAI3D;;OAEG;IACH,cAAc,IAAI,gBAAgB,EAAE;IAIpC,wEAAwE;IACxE,mBAAmB,IAAI,MAAM,EAAE;IAI/B;;OAEG;IACH,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAIvD;;;OAGG;IACH,iBAAiB,CAAC,OAAO,EAAE;QACzB,EAAE,EAAE,kBAAkB,CAAC;QACvB,IAAI,EAAE,WAAW,CAAC;QAClB,KAAK,CAAC,EAAE,YAAY,CAAC;QACrB,kEAAkE;QAClE,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,kDAAkD;QAClD,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,WAAW;CAmBhB"}