@promptev/context-engine 0.0.0

package/dist/migrations/sql/0003_tools.sql

@@ -0,0 +1,61 @@
+-- 0003_tools — tools, approvals, calls, oauth pending
+
+CREATE TABLE context_engine_tools (
+  id UUID PRIMARY KEY,
+  name TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  source_id TEXT,
+  acl TEXT[],
+  config_encrypted TEXT,
+  requires_approval BOOLEAN NOT NULL DEFAULT false,
+  approval_policy JSONB NOT NULL DEFAULT '{}'::jsonb,
+  enabled BOOLEAN NOT NULL DEFAULT true,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX ix_context_engine_tools_source_id ON context_engine_tools (source_id);
+
+CREATE TABLE context_engine_tool_approvals (
+  id UUID PRIMARY KEY,
+  tool_name TEXT NOT NULL,
+  tool_args_frozen JSONB NOT NULL DEFAULT '{}'::jsonb,
+  source_id TEXT,
+  principals JSONB,
+  status TEXT NOT NULL DEFAULT 'pending',
+  approver TEXT,
+  approver_meta JSONB,
+  expires_at TIMESTAMPTZ,
+  resolved_at TIMESTAMPTZ,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX ix_context_engine_tool_approvals_status ON context_engine_tool_approvals (status);
+
+CREATE TABLE context_engine_tool_calls (
+  id UUID PRIMARY KEY,
+  tool_id UUID REFERENCES context_engine_tools(id) ON DELETE SET NULL,
+  tool_name TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  actor_type TEXT,
+  actor_id TEXT,
+  source TEXT,
+  input_args JSONB NOT NULL DEFAULT '{}'::jsonb,
+  output_result JSONB,
+  output_truncated BOOLEAN NOT NULL DEFAULT false,
+  success BOOLEAN,
+  error_message TEXT,
+  duration_ms INTEGER,
+  units INTEGER,
+  approval_id UUID REFERENCES context_engine_tool_approvals(id) ON DELETE SET NULL,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX ix_context_engine_tool_calls_tool_id ON context_engine_tool_calls (tool_id);
+CREATE INDEX ix_context_engine_tool_calls_created_at ON context_engine_tool_calls (created_at);
+
+CREATE TABLE context_engine_oauth_pending (
+  state TEXT PRIMARY KEY,
+  data JSONB NOT NULL,
+  expires_at TIMESTAMPTZ NOT NULL,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX ix_context_engine_oauth_pending_expires_at ON context_engine_oauth_pending (expires_at);

package/dist/migrations/sql/0004_acl_indexes.sql

@@ -0,0 +1,4 @@
+-- 0004_acl_indexes
+
+CREATE INDEX ix_context_engine_chunks_acl_gin ON context_engine_chunks USING gin (acl);
+CREATE INDEX ix_context_engine_documents_acl_gin ON context_engine_documents USING gin (acl);

package/dist/redaction-BmDSWJ7h.d.cts

@@ -0,0 +1,98 @@
+type UsageKind = "ingest" | "search" | "tool";
+interface UsageEvent {
+    kind: UsageKind;
+    units: number;
+    detail?: Record<string, unknown>;
+    providerTokens?: Record<string, number>;
+}
+interface DocumentReport {
+    documentId: string;
+    name: string;
+    status: string;
+    pages: number | null;
+    chunks: number;
+    units: number;
+    graphUnits: number;
+    providerTokens: Record<string, number>;
+    error: string | null;
+    redactionFailed: string[];
+}
+interface IngestReport {
+    documents: DocumentReport[];
+    totals: {
+        files: number;
+        failed: number;
+        units: number;
+        graphUnits: number;
+        [key: string]: number;
+    };
+}
+declare function unitsForFile(mime: string, opts: {
+    pages: number | null;
+    slides: number | null;
+    sizeBytes: number;
+}): number;
+declare function graphUnits(chunkCount: number, primaryCommunityCount: number): number;
+
+interface Hooks {
+    onUsage?: ((event: UsageEvent) => void) | null;
+    onError?: ((exc: unknown, ctx: Record<string, unknown>) => void) | null;
+    onToolCall?: ((event: Record<string, unknown>) => void) | null;
+}
+declare function emitUsage(hooks: Hooks | null | undefined, event: UsageEvent): void;
+declare function emitError(hooks: Hooks | null | undefined, exc: unknown, ctx: Record<string, unknown>): void;
+declare function emitToolCall(hooks: Hooks | null | undefined, event: Record<string, unknown>): void;
+
+type Span = [number, number];
+type DetectorFn = (text: string) => Span[];
+type RedactionAction = "mask" | "hash" | "remove";
+type ApplyAt = "ingest" | "output" | "both";
+type RedactionPhase = "ingest" | "output";
+interface RedactionRuleInit {
+    name: string;
+    detector?: string | null;
+    pattern?: string | null;
+    field?: string | null;
+    action?: RedactionAction;
+    placeholder?: string | null;
+    applyAt?: ApplyAt;
+    unless?: string[];
+}
+declare class RedactionRule {
+    name: string;
+    detector: string | null;
+    pattern: string | null;
+    field: string | null;
+    action: RedactionAction;
+    placeholder: string | null;
+    applyAt: ApplyAt;
+    unless: string[];
+    private compiled;
+    constructor(init: RedactionRuleInit);
+    private validate;
+    patternRe(): RegExp | null;
+    effectivePlaceholder(): string;
+}
+interface RedactionPolicyInit {
+    rules?: RedactionRule[] | RedactionRuleInit[];
+    customDetectors?: Record<string, DetectorFn>;
+}
+declare class RedactionPolicy {
+    rules: RedactionRule[];
+    customDetectors: Record<string, DetectorFn>;
+    constructor(init?: RedactionPolicyInit);
+    isEmpty(): boolean;
+}
+interface RedactionNote {
+    rules_fired?: string[];
+    spans?: number;
+    rules_failed?: string[];
+}
+declare function applyRedaction(text: string, policy: RedactionPolicy, opts: {
+    phase: RedactionPhase;
+    principals?: readonly string[] | null;
+    secretKey?: string | Buffer | null;
+    hooks?: Hooks | null;
+}): [string, RedactionNote];
+
+export { type DocumentReport as D, type Hooks as H, type IngestReport as I, RedactionPolicy as R, type UsageEvent as U, RedactionRule as a, type RedactionRuleInit as b, applyRedaction as c, emitToolCall as d, emitError as e, emitUsage as f, graphUnits as g, type DetectorFn as h, unitsForFile as u };

package/dist/redaction-BmDSWJ7h.d.ts

@@ -0,0 +1,98 @@
+type UsageKind = "ingest" | "search" | "tool";
+interface UsageEvent {
+    kind: UsageKind;
+    units: number;
+    detail?: Record<string, unknown>;
+    providerTokens?: Record<string, number>;
+}
+interface DocumentReport {
+    documentId: string;
+    name: string;
+    status: string;
+    pages: number | null;
+    chunks: number;
+    units: number;
+    graphUnits: number;
+    providerTokens: Record<string, number>;
+    error: string | null;
+    redactionFailed: string[];
+}
+interface IngestReport {
+    documents: DocumentReport[];
+    totals: {
+        files: number;
+        failed: number;
+        units: number;
+        graphUnits: number;
+        [key: string]: number;
+    };
+}
+declare function unitsForFile(mime: string, opts: {
+    pages: number | null;
+    slides: number | null;
+    sizeBytes: number;
+}): number;
+declare function graphUnits(chunkCount: number, primaryCommunityCount: number): number;
+
+interface Hooks {
+    onUsage?: ((event: UsageEvent) => void) | null;
+    onError?: ((exc: unknown, ctx: Record<string, unknown>) => void) | null;
+    onToolCall?: ((event: Record<string, unknown>) => void) | null;
+}
+declare function emitUsage(hooks: Hooks | null | undefined, event: UsageEvent): void;
+declare function emitError(hooks: Hooks | null | undefined, exc: unknown, ctx: Record<string, unknown>): void;
+declare function emitToolCall(hooks: Hooks | null | undefined, event: Record<string, unknown>): void;
+
+type Span = [number, number];
+type DetectorFn = (text: string) => Span[];
+type RedactionAction = "mask" | "hash" | "remove";
+type ApplyAt = "ingest" | "output" | "both";
+type RedactionPhase = "ingest" | "output";
+interface RedactionRuleInit {
+    name: string;
+    detector?: string | null;
+    pattern?: string | null;
+    field?: string | null;
+    action?: RedactionAction;
+    placeholder?: string | null;
+    applyAt?: ApplyAt;
+    unless?: string[];
+}
+declare class RedactionRule {
+    name: string;
+    detector: string | null;
+    pattern: string | null;
+    field: string | null;
+    action: RedactionAction;
+    placeholder: string | null;
+    applyAt: ApplyAt;
+    unless: string[];
+    private compiled;
+    constructor(init: RedactionRuleInit);
+    private validate;
+    patternRe(): RegExp | null;
+    effectivePlaceholder(): string;
+}
+interface RedactionPolicyInit {
+    rules?: RedactionRule[] | RedactionRuleInit[];
+    customDetectors?: Record<string, DetectorFn>;
+}
+declare class RedactionPolicy {
+    rules: RedactionRule[];
+    customDetectors: Record<string, DetectorFn>;
+    constructor(init?: RedactionPolicyInit);
+    isEmpty(): boolean;
+}
+interface RedactionNote {
+    rules_fired?: string[];
+    spans?: number;
+    rules_failed?: string[];
+}
+declare function applyRedaction(text: string, policy: RedactionPolicy, opts: {
+    phase: RedactionPhase;
+    principals?: readonly string[] | null;
+    secretKey?: string | Buffer | null;
+    hooks?: Hooks | null;
+}): [string, RedactionNote];
+
+export { type DocumentReport as D, type Hooks as H, type IngestReport as I, RedactionPolicy as R, type UsageEvent as U, RedactionRule as a, type RedactionRuleInit as b, applyRedaction as c, emitToolCall as d, emitError as e, emitUsage as f, graphUnits as g, type DetectorFn as h, unitsForFile as u };

package/dist/redaction-presidio.cjs

@@ -0,0 +1,79 @@
+'use strict';
+
+var child_process = require('child_process');
+
+// src/redaction-presidio.ts
+
+// src/errors.ts
+var ExtraMissingError = class extends Error {
+  constructor(extra, pkg, what) {
+    super(`${what} requires the '${pkg}' package (optional extra: ${extra}): npm install ${pkg}`);
+    this.name = "ExtraMissingError";
+  }
+};
+
+// src/redaction-presidio.ts
+var DEFAULT_SCORE_THRESHOLD = 0.5;
+function analyzerUrl() {
+  const url = process.env.CE_PRESIDIO_URL || process.env.PRESIDIO_URL;
+  if (!url) {
+    throw new ExtraMissingError(
+      "presidio",
+      "CE_PRESIDIO_URL",
+      "Presidio detectors (set CE_PRESIDIO_URL to a Presidio Analyzer HTTP endpoint)"
+    );
+  }
+  return url.replace(/\/$/, "");
+}
+function analyzeSync(text, entity, opts) {
+  if (!text) return [];
+  const base = analyzerUrl();
+  try {
+    const raw = child_process.execFileSync(
+      "curl",
+      [
+        "-sS",
+        "-X",
+        "POST",
+        `${base}/analyze`,
+        "-H",
+        "Content-Type: application/json",
+        "--max-time",
+        "10",
+        "-d",
+        JSON.stringify({ text, language: opts.language, entities: [entity] })
+      ],
+      { encoding: "utf8", timeout: 12e3 }
+    );
+    const results = JSON.parse(raw);
+    const spans = [];
+    for (const r of results) {
+      if ((r.score ?? 1) < opts.scoreThreshold) continue;
+      spans.push([Number(r.start), Number(r.end)]);
+    }
+    return spans.sort((a, b) => a[0] - b[0]);
+  } catch {
+    return [];
+  }
+}
+function presidioDetector(entity, opts = {}) {
+  const language = opts.language ?? "en";
+  const scoreThreshold = opts.scoreThreshold ?? DEFAULT_SCORE_THRESHOLD;
+  const fn = (text) => analyzeSync(text, entity, { language, scoreThreshold });
+  Object.defineProperty(fn, "name", { value: `presidio_${entity.toLowerCase()}` });
+  return fn;
+}
+function presidioDetectors(entities, opts = {}) {
+  analyzerUrl();
+  const out = {};
+  for (const entity of entities) out[entity] = presidioDetector(entity, opts);
+  return out;
+}
+
+exports.DEFAULT_SCORE_THRESHOLD = DEFAULT_SCORE_THRESHOLD;
+exports.presidioDetector = presidioDetector;
+exports.presidioDetectors = presidioDetectors;
+exports.presidio_detector = presidioDetector;
+exports.presidio_detectors = presidioDetectors;
+//# sourceMappingURL=redaction-presidio.cjs.map
+//# sourceMappingURL=redaction-presidio.cjs.map

package/dist/redaction-presidio.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/redaction-presidio.ts"],"names":["execFileSync"],"mappings":";;;;;;;AAqDO,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EAC3C,WAAA,CAAY,KAAA,EAAe,GAAA,EAAa,IAAA,EAAc;AACpD,IAAA,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,eAAA,EAAkB,GAAG,8BAA8B,KAAK,CAAA,eAAA,EAAkB,GAAG,CAAA,CAAE,CAAA;AAC5F,IAAA,IAAA,CAAK,IAAA,GAAO,mBAAA;AAAA,EACd;AACF,CAAA;;;AC7CO,IAAM,uBAAA,GAA0B;AAEvC,SAAS,WAAA,GAAsB;AAC7B,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,QAAQ,GAAA,CAAI,YAAA;AACvD,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,IAAI,iBAAA;AAAA,MACR,UAAA;AAAA,MACA,iBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC9B;AAEA,SAAS,WAAA,CACP,IAAA,EACA,MAAA,EACA,IAAA,EACQ;AACR,EAAA,IAAI,CAAC,IAAA,EAAM,OAAO,EAAC;AACnB,EAAA,MAAM,OAAO,WAAA,EAAY;AACzB,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAMA,0BAAA;AAAA,MACV,MAAA;AAAA,MACA;AAAA,QACE,KAAA;AAAA,QACA,IAAA;AAAA,QACA,MAAA;AAAA,QACA,GAAG,IAAI,CAAA,QAAA,CAAA;AAAA,QACP,IAAA;AAAA,QACA,gCAAA;AAAA,QACA,YAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA,CAAK,SAAA,CAAU,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,QAAA,EAAU,CAAC,MAAM,CAAA,EAAG;AAAA,OACtE;AAAA,MACA,EAAE,QAAA,EAAU,MAAA,EAAQ,OAAA,EAAS,IAAA;AAAO,KACtC;AACA,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC9B,IAAA,MAAM,QAAgB,EAAC;AACvB,IAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,MAAA,IAAA,CAAK,CAAA,CAAE,KAAA,IAAS,CAAA,IAAK,IAAA,CAAK,cAAA,EAAgB;AAC1C,MAAA,KAAA,CAAM,IAAA,CAAK,CAAC,MAAA,CAAO,CAAA,CAAE,KAAK,GAAG,MAAA,CAAO,CAAA,CAAE,GAAG,CAAC,CAAC,CAAA;AAAA,IAC7C;AACA,IAAA,OAAO,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,EAAE,CAAC,CAAA,GAAI,CAAA,CAAE,CAAC,CAAC,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAEO,SAAS,gBAAA,CACd,MAAA,EACA,IAAA,GAAuD,EAAC,EAC5C;AACZ,EAAA,MAAM,QAAA,GAAW,KAAK,QAAA,IAAY,IAAA;AAClC,EAAA,MAAM,cAAA,GAAiB,KAAK,cAAA,IAAkB,uBAAA;AAC9C,EAAA,MAAM,EAAA,GAAiB,CAAC,IAAA,KAAiB,WAAA,CAAY,MAAM,MAAA,EAAQ,EAAE,QAAA,EAAU,cAAA,EAAgB,CAAA;AAC/F,EAAA,MAAA,CAAO,cAAA,CAAe,EAAA,EAAI,MAAA,EAAQ,EAAE,KAAA,EAAO,YAAY,MAAA,CAAO,WAAA,EAAa,CAAA,CAAA,EAAI,CAAA;AAC/E,EAAA,OAAO,EAAA;AACT;AAEO,SAAS,iBAAA,CACd,QAAA,EACA,IAAA,GAAuD,EAAC,EAC5B;AAC5B,EAAA,WAAA,EAAY;AACZ,EAAA,MAAM,MAAkC,EAAC;AACzC,EAAA,KAAA,MAAW,UAAU,QAAA,EAAU,GAAA,CAAI,MAAM,CAAA,GAAI,gBAAA,CAAiB,QAAQ,IAAI,CAAA;AAC1E,EAAA,OAAO,GAAA;AACT","file":"redaction-presidio.cjs","sourcesContent":["/** Action-surface errors — user-facing / data-dependent failures (not found, ACL, bad input).\n *  Config/programming errors stay as TypeError / RangeError / Error.\n */\nexport class EngineActionError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"EngineActionError\";\n  }\n}\n\n/** Missing vs forbidden document: identical message so callers cannot distinguish. */\nexport class DocumentNotFoundError extends Error {\n  constructor(documentId: string) {\n    super(`document not found: ${documentId}`);\n    this.name = \"DocumentNotFoundError\";\n  }\n}\n\nexport class GraphLegUnavailable extends Error {\n  constructor(message = \"graph ranked list was not supplied\") {\n    super(message);\n    this.name = \"GraphLegUnavailable\";\n  }\n}\n\nexport class ApprovalNotPending extends Error {\n  constructor(message = \"approval is not pending\") {\n    super(message);\n    this.name = \"ApprovalNotPending\";\n  }\n}\n\nexport class ApprovalExpired extends Error {\n  constructor(message = \"approval has expired\") {\n    super(message);\n    this.name = \"ApprovalExpired\";\n  }\n}\n\nexport class CodeExecutionError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"CodeExecutionError\";\n  }\n}\n\nexport class CodeExecutionTimeout extends Error {\n  constructor(message = \"code execution timed out\") {\n    super(message);\n    this.name = \"CodeExecutionTimeout\";\n  }\n}\n\nexport class ExtraMissingError extends Error {\n  constructor(extra: string, pkg: string, what: string) {\n    super(`${what} requires the '${pkg}' package (optional extra: ${extra}): npm install ${pkg}`);\n    this.name = \"ExtraMissingError\";\n  }\n}\n","import { execFileSync } from \"node:child_process\";\nimport { ExtraMissingError } from \"./errors.js\";\nimport type { DetectorFn, Span } from \"./redaction.js\";\n\n/**\n * Microsoft Presidio has no JavaScript port. This adapter talks to a\n * Presidio Analyzer HTTP service (`CE_PRESIDIO_URL`) rather than embedding\n * spaCy. Detectors match the Python `customDetectors` shape: `(text) => Span[]`.\n *\n * The Analyzer API is async over HTTP; the sync detector uses a blocking\n * `curl` POST so `applyRedaction` can stay synchronous. Analyzer failures\n * fail-open (return no spans), matching built-in detector policy.\n */\nexport const DEFAULT_SCORE_THRESHOLD = 0.5;\n\nfunction analyzerUrl(): string {\n  const url = process.env.CE_PRESIDIO_URL || process.env.PRESIDIO_URL;\n  if (!url) {\n    throw new ExtraMissingError(\n      \"presidio\",\n      \"CE_PRESIDIO_URL\",\n      \"Presidio detectors (set CE_PRESIDIO_URL to a Presidio Analyzer HTTP endpoint)\",\n    );\n  }\n  return url.replace(/\\/$/, \"\");\n}\n\nfunction analyzeSync(\n  text: string,\n  entity: string,\n  opts: { language: string; scoreThreshold: number },\n): Span[] {\n  if (!text) return [];\n  const base = analyzerUrl();\n  try {\n    const raw = execFileSync(\n      \"curl\",\n      [\n        \"-sS\",\n        \"-X\",\n        \"POST\",\n        `${base}/analyze`,\n        \"-H\",\n        \"Content-Type: application/json\",\n        \"--max-time\",\n        \"10\",\n        \"-d\",\n        JSON.stringify({ text, language: opts.language, entities: [entity] }),\n      ],\n      { encoding: \"utf8\", timeout: 12_000 },\n    );\n    const results = JSON.parse(raw) as Array<{ start: number; end: number; score?: number }>;\n    const spans: Span[] = [];\n    for (const r of results) {\n      if ((r.score ?? 1) < opts.scoreThreshold) continue;\n      spans.push([Number(r.start), Number(r.end)]);\n    }\n    return spans.sort((a, b) => a[0] - b[0]);\n  } catch {\n    return [];\n  }\n}\n\nexport function presidioDetector(\n  entity: string,\n  opts: { language?: string; scoreThreshold?: number } = {},\n): DetectorFn {\n  const language = opts.language ?? \"en\";\n  const scoreThreshold = opts.scoreThreshold ?? DEFAULT_SCORE_THRESHOLD;\n  const fn: DetectorFn = (text: string) => analyzeSync(text, entity, { language, scoreThreshold });\n  Object.defineProperty(fn, \"name\", { value: `presidio_${entity.toLowerCase()}` });\n  return fn;\n}\n\nexport function presidioDetectors(\n  entities: string[],\n  opts: { language?: string; scoreThreshold?: number } = {},\n): Record<string, DetectorFn> {\n  analyzerUrl();\n  const out: Record<string, DetectorFn> = {};\n  for (const entity of entities) out[entity] = presidioDetector(entity, opts);\n  return out;\n}\n\nexport { presidioDetector as presidio_detector, presidioDetectors as presidio_detectors };\n"]}

package/dist/redaction-presidio.d.cts

@@ -0,0 +1,22 @@
+import { h as DetectorFn } from './redaction-BmDSWJ7h.cjs';
+
+/**
+ * Microsoft Presidio has no JavaScript port. This adapter talks to a
+ * Presidio Analyzer HTTP service (`CE_PRESIDIO_URL`) rather than embedding
+ * spaCy. Detectors match the Python `customDetectors` shape: `(text) => Span[]`.
+ *
+ * The Analyzer API is async over HTTP; the sync detector uses a blocking
+ * `curl` POST so `applyRedaction` can stay synchronous. Analyzer failures
+ * fail-open (return no spans), matching built-in detector policy.
+ */
+declare const DEFAULT_SCORE_THRESHOLD = 0.5;
+declare function presidioDetector(entity: string, opts?: {
+    language?: string;
+    scoreThreshold?: number;
+}): DetectorFn;
+declare function presidioDetectors(entities: string[], opts?: {
+    language?: string;
+    scoreThreshold?: number;
+}): Record<string, DetectorFn>;
+
+export { DEFAULT_SCORE_THRESHOLD, presidioDetector, presidioDetectors, presidioDetector as presidio_detector, presidioDetectors as presidio_detectors };

package/dist/redaction-presidio.d.ts

@@ -0,0 +1,22 @@
+import { h as DetectorFn } from './redaction-BmDSWJ7h.js';
+
+/**
+ * Microsoft Presidio has no JavaScript port. This adapter talks to a
+ * Presidio Analyzer HTTP service (`CE_PRESIDIO_URL`) rather than embedding
+ * spaCy. Detectors match the Python `customDetectors` shape: `(text) => Span[]`.
+ *
+ * The Analyzer API is async over HTTP; the sync detector uses a blocking
+ * `curl` POST so `applyRedaction` can stay synchronous. Analyzer failures
+ * fail-open (return no spans), matching built-in detector policy.
+ */
+declare const DEFAULT_SCORE_THRESHOLD = 0.5;
+declare function presidioDetector(entity: string, opts?: {
+    language?: string;
+    scoreThreshold?: number;
+}): DetectorFn;
+declare function presidioDetectors(entities: string[], opts?: {
+    language?: string;
+    scoreThreshold?: number;
+}): Record<string, DetectorFn>;
+
+export { DEFAULT_SCORE_THRESHOLD, presidioDetector, presidioDetectors, presidioDetector as presidio_detector, presidioDetectors as presidio_detectors };

package/dist/redaction-presidio.js

@@ -0,0 +1,73 @@
+import { execFileSync } from 'child_process';
+
+// src/redaction-presidio.ts
+
+// src/errors.ts
+var ExtraMissingError = class extends Error {
+  constructor(extra, pkg, what) {
+    super(`${what} requires the '${pkg}' package (optional extra: ${extra}): npm install ${pkg}`);
+    this.name = "ExtraMissingError";
+  }
+};
+
+// src/redaction-presidio.ts
+var DEFAULT_SCORE_THRESHOLD = 0.5;
+function analyzerUrl() {
+  const url = process.env.CE_PRESIDIO_URL || process.env.PRESIDIO_URL;
+  if (!url) {
+    throw new ExtraMissingError(
+      "presidio",
+      "CE_PRESIDIO_URL",
+      "Presidio detectors (set CE_PRESIDIO_URL to a Presidio Analyzer HTTP endpoint)"
+    );
+  }
+  return url.replace(/\/$/, "");
+}
+function analyzeSync(text, entity, opts) {
+  if (!text) return [];
+  const base = analyzerUrl();
+  try {
+    const raw = execFileSync(
+      "curl",
+      [
+        "-sS",
+        "-X",
+        "POST",
+        `${base}/analyze`,
+        "-H",
+        "Content-Type: application/json",
+        "--max-time",
+        "10",
+        "-d",
+        JSON.stringify({ text, language: opts.language, entities: [entity] })
+      ],
+      { encoding: "utf8", timeout: 12e3 }
+    );
+    const results = JSON.parse(raw);
+    const spans = [];
+    for (const r of results) {
+      if ((r.score ?? 1) < opts.scoreThreshold) continue;
+      spans.push([Number(r.start), Number(r.end)]);
+    }
+    return spans.sort((a, b) => a[0] - b[0]);
+  } catch {
+    return [];
+  }
+}
+function presidioDetector(entity, opts = {}) {
+  const language = opts.language ?? "en";
+  const scoreThreshold = opts.scoreThreshold ?? DEFAULT_SCORE_THRESHOLD;
+  const fn = (text) => analyzeSync(text, entity, { language, scoreThreshold });
+  Object.defineProperty(fn, "name", { value: `presidio_${entity.toLowerCase()}` });
+  return fn;
+}
+function presidioDetectors(entities, opts = {}) {
+  analyzerUrl();
+  const out = {};
+  for (const entity of entities) out[entity] = presidioDetector(entity, opts);
+  return out;
+}
+
+export { DEFAULT_SCORE_THRESHOLD, presidioDetector, presidioDetectors, presidioDetector as presidio_detector, presidioDetectors as presidio_detectors };
+//# sourceMappingURL=redaction-presidio.js.map
+//# sourceMappingURL=redaction-presidio.js.map

package/dist/redaction-presidio.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/redaction-presidio.ts"],"names":[],"mappings":";;;;;AAqDO,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EAC3C,WAAA,CAAY,KAAA,EAAe,GAAA,EAAa,IAAA,EAAc;AACpD,IAAA,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,eAAA,EAAkB,GAAG,8BAA8B,KAAK,CAAA,eAAA,EAAkB,GAAG,CAAA,CAAE,CAAA;AAC5F,IAAA,IAAA,CAAK,IAAA,GAAO,mBAAA;AAAA,EACd;AACF,CAAA;;;AC7CO,IAAM,uBAAA,GAA0B;AAEvC,SAAS,WAAA,GAAsB;AAC7B,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,QAAQ,GAAA,CAAI,YAAA;AACvD,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,IAAI,iBAAA;AAAA,MACR,UAAA;AAAA,MACA,iBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC9B;AAEA,SAAS,WAAA,CACP,IAAA,EACA,MAAA,EACA,IAAA,EACQ;AACR,EAAA,IAAI,CAAC,IAAA,EAAM,OAAO,EAAC;AACnB,EAAA,MAAM,OAAO,WAAA,EAAY;AACzB,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,YAAA;AAAA,MACV,MAAA;AAAA,MACA;AAAA,QACE,KAAA;AAAA,QACA,IAAA;AAAA,QACA,MAAA;AAAA,QACA,GAAG,IAAI,CAAA,QAAA,CAAA;AAAA,QACP,IAAA;AAAA,QACA,gCAAA;AAAA,QACA,YAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA,CAAK,SAAA,CAAU,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,QAAA,EAAU,CAAC,MAAM,CAAA,EAAG;AAAA,OACtE;AAAA,MACA,EAAE,QAAA,EAAU,MAAA,EAAQ,OAAA,EAAS,IAAA;AAAO,KACtC;AACA,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC9B,IAAA,MAAM,QAAgB,EAAC;AACvB,IAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,MAAA,IAAA,CAAK,CAAA,CAAE,KAAA,IAAS,CAAA,IAAK,IAAA,CAAK,cAAA,EAAgB;AAC1C,MAAA,KAAA,CAAM,IAAA,CAAK,CAAC,MAAA,CAAO,CAAA,CAAE,KAAK,GAAG,MAAA,CAAO,CAAA,CAAE,GAAG,CAAC,CAAC,CAAA;AAAA,IAC7C;AACA,IAAA,OAAO,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,EAAE,CAAC,CAAA,GAAI,CAAA,CAAE,CAAC,CAAC,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAEO,SAAS,gBAAA,CACd,MAAA,EACA,IAAA,GAAuD,EAAC,EAC5C;AACZ,EAAA,MAAM,QAAA,GAAW,KAAK,QAAA,IAAY,IAAA;AAClC,EAAA,MAAM,cAAA,GAAiB,KAAK,cAAA,IAAkB,uBAAA;AAC9C,EAAA,MAAM,EAAA,GAAiB,CAAC,IAAA,KAAiB,WAAA,CAAY,MAAM,MAAA,EAAQ,EAAE,QAAA,EAAU,cAAA,EAAgB,CAAA;AAC/F,EAAA,MAAA,CAAO,cAAA,CAAe,EAAA,EAAI,MAAA,EAAQ,EAAE,KAAA,EAAO,YAAY,MAAA,CAAO,WAAA,EAAa,CAAA,CAAA,EAAI,CAAA;AAC/E,EAAA,OAAO,EAAA;AACT;AAEO,SAAS,iBAAA,CACd,QAAA,EACA,IAAA,GAAuD,EAAC,EAC5B;AAC5B,EAAA,WAAA,EAAY;AACZ,EAAA,MAAM,MAAkC,EAAC;AACzC,EAAA,KAAA,MAAW,UAAU,QAAA,EAAU,GAAA,CAAI,MAAM,CAAA,GAAI,gBAAA,CAAiB,QAAQ,IAAI,CAAA;AAC1E,EAAA,OAAO,GAAA;AACT","file":"redaction-presidio.js","sourcesContent":["/** Action-surface errors — user-facing / data-dependent failures (not found, ACL, bad input).\n *  Config/programming errors stay as TypeError / RangeError / Error.\n */\nexport class EngineActionError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"EngineActionError\";\n  }\n}\n\n/** Missing vs forbidden document: identical message so callers cannot distinguish. */\nexport class DocumentNotFoundError extends Error {\n  constructor(documentId: string) {\n    super(`document not found: ${documentId}`);\n    this.name = \"DocumentNotFoundError\";\n  }\n}\n\nexport class GraphLegUnavailable extends Error {\n  constructor(message = \"graph ranked list was not supplied\") {\n    super(message);\n    this.name = \"GraphLegUnavailable\";\n  }\n}\n\nexport class ApprovalNotPending extends Error {\n  constructor(message = \"approval is not pending\") {\n    super(message);\n    this.name = \"ApprovalNotPending\";\n  }\n}\n\nexport class ApprovalExpired extends Error {\n  constructor(message = \"approval has expired\") {\n    super(message);\n    this.name = \"ApprovalExpired\";\n  }\n}\n\nexport class CodeExecutionError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"CodeExecutionError\";\n  }\n}\n\nexport class CodeExecutionTimeout extends Error {\n  constructor(message = \"code execution timed out\") {\n    super(message);\n    this.name = \"CodeExecutionTimeout\";\n  }\n}\n\nexport class ExtraMissingError extends Error {\n  constructor(extra: string, pkg: string, what: string) {\n    super(`${what} requires the '${pkg}' package (optional extra: ${extra}): npm install ${pkg}`);\n    this.name = \"ExtraMissingError\";\n  }\n}\n","import { execFileSync } from \"node:child_process\";\nimport { ExtraMissingError } from \"./errors.js\";\nimport type { DetectorFn, Span } from \"./redaction.js\";\n\n/**\n * Microsoft Presidio has no JavaScript port. This adapter talks to a\n * Presidio Analyzer HTTP service (`CE_PRESIDIO_URL`) rather than embedding\n * spaCy. Detectors match the Python `customDetectors` shape: `(text) => Span[]`.\n *\n * The Analyzer API is async over HTTP; the sync detector uses a blocking\n * `curl` POST so `applyRedaction` can stay synchronous. Analyzer failures\n * fail-open (return no spans), matching built-in detector policy.\n */\nexport const DEFAULT_SCORE_THRESHOLD = 0.5;\n\nfunction analyzerUrl(): string {\n  const url = process.env.CE_PRESIDIO_URL || process.env.PRESIDIO_URL;\n  if (!url) {\n    throw new ExtraMissingError(\n      \"presidio\",\n      \"CE_PRESIDIO_URL\",\n      \"Presidio detectors (set CE_PRESIDIO_URL to a Presidio Analyzer HTTP endpoint)\",\n    );\n  }\n  return url.replace(/\\/$/, \"\");\n}\n\nfunction analyzeSync(\n  text: string,\n  entity: string,\n  opts: { language: string; scoreThreshold: number },\n): Span[] {\n  if (!text) return [];\n  const base = analyzerUrl();\n  try {\n    const raw = execFileSync(\n      \"curl\",\n      [\n        \"-sS\",\n        \"-X\",\n        \"POST\",\n        `${base}/analyze`,\n        \"-H\",\n        \"Content-Type: application/json\",\n        \"--max-time\",\n        \"10\",\n        \"-d\",\n        JSON.stringify({ text, language: opts.language, entities: [entity] }),\n      ],\n      { encoding: \"utf8\", timeout: 12_000 },\n    );\n    const results = JSON.parse(raw) as Array<{ start: number; end: number; score?: number }>;\n    const spans: Span[] = [];\n    for (const r of results) {\n      if ((r.score ?? 1) < opts.scoreThreshold) continue;\n      spans.push([Number(r.start), Number(r.end)]);\n    }\n    return spans.sort((a, b) => a[0] - b[0]);\n  } catch {\n    return [];\n  }\n}\n\nexport function presidioDetector(\n  entity: string,\n  opts: { language?: string; scoreThreshold?: number } = {},\n): DetectorFn {\n  const language = opts.language ?? \"en\";\n  const scoreThreshold = opts.scoreThreshold ?? DEFAULT_SCORE_THRESHOLD;\n  const fn: DetectorFn = (text: string) => analyzeSync(text, entity, { language, scoreThreshold });\n  Object.defineProperty(fn, \"name\", { value: `presidio_${entity.toLowerCase()}` });\n  return fn;\n}\n\nexport function presidioDetectors(\n  entities: string[],\n  opts: { language?: string; scoreThreshold?: number } = {},\n): Record<string, DetectorFn> {\n  analyzerUrl();\n  const out: Record<string, DetectorFn> = {};\n  for (const entity of entities) out[entity] = presidioDetector(entity, opts);\n  return out;\n}\n\nexport { presidioDetector as presidio_detector, presidioDetectors as presidio_detectors };\n"]}

package/dist/router-CrxZ2y_Z.d.ts

@@ -0,0 +1,82 @@
+import { T as ToolEngine, a as ToolConfig } from './governance-XIScatRO.js';
+
+type ContextEngineLike = {
+    ingest: (args: Record<string, unknown>) => Promise<unknown>;
+    search: (query: string, opts?: Record<string, unknown>) => Promise<{
+        hits?: unknown[];
+        usage?: unknown;
+    }>;
+    listDocuments: (opts: Record<string, unknown>) => Promise<unknown>;
+    getDocument: (id: string, opts?: Record<string, unknown>) => Promise<unknown>;
+    deleteDocument: (id: string, opts?: Record<string, unknown>) => Promise<unknown>;
+    updateDocument: (id: string, opts?: Record<string, unknown>) => Promise<unknown>;
+    stats: (sourceId?: string | null) => Promise<unknown>;
+};
+declare function handleIngestJson(engine: ContextEngineLike, payload: unknown, principals: unknown): Promise<unknown>;
+
+interface PendingStore {
+    put(state: string, data: Record<string, unknown>, ttlSeconds?: number): void | Promise<void>;
+    pop(state: string): Record<string, unknown> | null | Promise<Record<string, unknown> | null>;
+}
+
+type ToolsHandlerEngine = ToolEngine & {
+    registerTool?: (tc: ToolConfig) => Promise<string>;
+    updateTool?: (id: string, opts: Record<string, unknown>) => Promise<ToolConfig>;
+    deleteTool?: (id: string, opts?: Record<string, unknown>) => Promise<void>;
+    testTool?: (tc: ToolConfig) => Promise<Record<string, unknown>>;
+    executeTool?: (callName: string, args: Record<string, unknown> | null, opts?: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    hooks?: ToolEngine["hooks"];
+};
+declare function createToolsHandlers(engine: ToolsHandlerEngine, opts?: {
+    redirectBaseUrl?: string;
+    pendingStore?: PendingStore | null;
+}): {
+    createTool(body: unknown, principals: unknown): Promise<Record<string, unknown>>;
+    listToolsAdmin(query: {
+        source_id?: string | null;
+    }, principals: unknown): Promise<Record<string, unknown>>;
+    getTool(toolId: string, principals: unknown): Promise<Record<string, unknown>>;
+    updateToolRoute(toolId: string, body: Record<string, unknown>, principals: unknown): Promise<Record<string, unknown>>;
+    deleteToolRoute(toolId: string, principals: unknown): Promise<Record<string, unknown>>;
+    testToolRoute(body: unknown): Promise<Record<string, unknown>>;
+    toolSchemaRoute(kind: string): Record<string, unknown>;
+    executeToolRoute(body: {
+        call_name?: string;
+        args?: Record<string, unknown> | null;
+        source_id?: string | null;
+    }, principals: unknown): Promise<Record<string, unknown>>;
+    mcpConnectAndList(body: {
+        server_name: string;
+        url: string;
+        token?: string | null;
+        headers?: Record<string, string> | null;
+        include_resources?: boolean;
+    }): Promise<Record<string, unknown>>;
+    mcpOauthStart(body: {
+        server_url: string;
+        tool_id?: string | null;
+        client_id?: string | null;
+        client_secret?: string | null;
+        scopes?: string | null;
+    }): Promise<Record<string, unknown>>;
+    mcpOauthCallback(query: {
+        code?: string | null;
+        state?: string | null;
+        error?: string | null;
+        error_description?: string | null;
+    }): Promise<{
+        html: string;
+        contentType: string;
+    }>;
+    listApprovalsRoute(query: {
+        status?: string | null;
+        source_id?: string | null;
+    }, principals: unknown): Promise<Record<string, unknown>>;
+    resolveApprovalRoute(approvalId: string, body: {
+        decision: "approved" | "rejected";
+        approver: string;
+        meta?: Record<string, unknown> | null;
+    }, principals: unknown): Promise<Record<string, unknown>>;
+};
+
+export { createToolsHandlers as c, handleIngestJson as h };

package/dist/router-OPgSoYAB.d.cts

@@ -0,0 +1,82 @@
+import { T as ToolEngine, a as ToolConfig } from './governance-BDkcv4qZ.cjs';
+
+type ContextEngineLike = {
+    ingest: (args: Record<string, unknown>) => Promise<unknown>;
+    search: (query: string, opts?: Record<string, unknown>) => Promise<{
+        hits?: unknown[];
+        usage?: unknown;
+    }>;
+    listDocuments: (opts: Record<string, unknown>) => Promise<unknown>;
+    getDocument: (id: string, opts?: Record<string, unknown>) => Promise<unknown>;
+    deleteDocument: (id: string, opts?: Record<string, unknown>) => Promise<unknown>;
+    updateDocument: (id: string, opts?: Record<string, unknown>) => Promise<unknown>;
+    stats: (sourceId?: string | null) => Promise<unknown>;
+};
+declare function handleIngestJson(engine: ContextEngineLike, payload: unknown, principals: unknown): Promise<unknown>;
+
+interface PendingStore {
+    put(state: string, data: Record<string, unknown>, ttlSeconds?: number): void | Promise<void>;
+    pop(state: string): Record<string, unknown> | null | Promise<Record<string, unknown> | null>;
+}
+
+type ToolsHandlerEngine = ToolEngine & {
+    registerTool?: (tc: ToolConfig) => Promise<string>;
+    updateTool?: (id: string, opts: Record<string, unknown>) => Promise<ToolConfig>;
+    deleteTool?: (id: string, opts?: Record<string, unknown>) => Promise<void>;
+    testTool?: (tc: ToolConfig) => Promise<Record<string, unknown>>;
+    executeTool?: (callName: string, args: Record<string, unknown> | null, opts?: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    hooks?: ToolEngine["hooks"];
+};
+declare function createToolsHandlers(engine: ToolsHandlerEngine, opts?: {
+    redirectBaseUrl?: string;
+    pendingStore?: PendingStore | null;
+}): {
+    createTool(body: unknown, principals: unknown): Promise<Record<string, unknown>>;
+    listToolsAdmin(query: {
+        source_id?: string | null;
+    }, principals: unknown): Promise<Record<string, unknown>>;
+    getTool(toolId: string, principals: unknown): Promise<Record<string, unknown>>;
+    updateToolRoute(toolId: string, body: Record<string, unknown>, principals: unknown): Promise<Record<string, unknown>>;
+    deleteToolRoute(toolId: string, principals: unknown): Promise<Record<string, unknown>>;
+    testToolRoute(body: unknown): Promise<Record<string, unknown>>;
+    toolSchemaRoute(kind: string): Record<string, unknown>;
+    executeToolRoute(body: {
+        call_name?: string;
+        args?: Record<string, unknown> | null;
+        source_id?: string | null;
+    }, principals: unknown): Promise<Record<string, unknown>>;
+    mcpConnectAndList(body: {
+        server_name: string;
+        url: string;
+        token?: string | null;
+        headers?: Record<string, string> | null;
+        include_resources?: boolean;
+    }): Promise<Record<string, unknown>>;
+    mcpOauthStart(body: {
+        server_url: string;
+        tool_id?: string | null;
+        client_id?: string | null;
+        client_secret?: string | null;
+        scopes?: string | null;
+    }): Promise<Record<string, unknown>>;
+    mcpOauthCallback(query: {
+        code?: string | null;
+        state?: string | null;
+        error?: string | null;
+        error_description?: string | null;
+    }): Promise<{
+        html: string;
+        contentType: string;
+    }>;
+    listApprovalsRoute(query: {
+        status?: string | null;
+        source_id?: string | null;
+    }, principals: unknown): Promise<Record<string, unknown>>;
+    resolveApprovalRoute(approvalId: string, body: {
+        decision: "approved" | "rejected";
+        approver: string;
+        meta?: Record<string, unknown> | null;
+    }, principals: unknown): Promise<Record<string, unknown>>;
+};
+
+export { createToolsHandlers as c, handleIngestJson as h };