@stonekeep/ai 0.0.0-stage → 0.8.0

package/dist/heuristic.js

@@ -0,0 +1,106 @@
+import { normalizeName } from '@stonekeep/core';
+const SUBJECT_NAMES = /^(users?|customers?|members?|accounts?|people|persons?|patients?|clients?|profiles?|contacts?)$/;
+const RETAIN_NAMES = /(invoice|payment|transaction|ledger|receipt|credit_note|tax)/;
+const BOOKKEEPING = /^(_?prisma_migrations|schema_migrations|knex_migrations|flyway_schema_history|migrations|typeorm_metadata)$/;
+/** Column-level strategy from name, type and classification. Deterministic, offline. */
+export function heuristicStrategy(column, type, rule) {
+    const n = normalizeName(column);
+    const t = (type ?? '').toLowerCase();
+    // Not classified as personal data: only free text gets masked.
+    if (rule === null)
+        return /(^|_)(notes?|comments?|body|message|description|bio)$/.test(n) ? 'token' : 'keep';
+    if (/\b(inet|cidr)\b/.test(t))
+        return 'ip';
+    if (/\b(date|timestamp|datetime)\b/.test(t))
+        return 'date';
+    if (/\buuid\b/.test(t))
+        return 'uuid';
+    if (/\bjsonb?\b/.test(t))
+        return 'json-empty';
+    const numeric = /\b(int|integer|bigint|numeric|decimal|float|double|number)\b/.test(t);
+    switch (rule) {
+        case 'email':
+            return 'email';
+        case 'phone':
+            return numeric ? 'number' : 'phone';
+        case 'person-name':
+            if (/(^|_)(first|given|fore)/.test(n))
+                return 'first-name';
+            if (/(^|_)(last|family|sur|maiden)/.test(n))
+                return 'last-name';
+            return 'full-name';
+        case 'username':
+            return 'username';
+        case 'online-identifier':
+            return /(^|_)ip(_|$)|addr/.test(n) ? 'ip' : 'token';
+        case 'postal-address':
+            if (/zip|post_?code|postal/.test(n))
+                return 'zip';
+            if (/(^|_)(city|town)($|_)/.test(n))
+                return 'city';
+            if (/lat|lon|lng|geo|coord|gps/.test(n))
+                return 'geo';
+            return 'street';
+        case 'date-of-birth':
+            return 'date';
+        default:
+            return numeric ? 'number' : 'token';
+    }
+}
+/** A rule-based proposal (no LLM): used offline, as the MCP planning tool, and as the eval baseline. */
+export function heuristicProposal(metadata) {
+    const scored = metadata.entities.map((e) => ({
+        e,
+        pii: e.columns.filter((c) => c.pii).length,
+        named: SUBJECT_NAMES.test(normalizeName(e.name)),
+    }));
+    const subject = scored.find((s) => s.named && s.pii > 0) ?? [...scored].sort((a, b) => b.pii - a.pii)[0];
+    const subjectName = subject?.e.name ?? 'users';
+    const key = subject?.e.columns.find((c) => c.name === 'id')?.name ?? 'id';
+    const subjectRef = normalizeName(subjectName).replace(/s$/, '');
+    const mask = [];
+    const retain = [];
+    const foreignKeys = [];
+    const exclude = [];
+    for (const e of metadata.entities) {
+        const n = normalizeName(e.name);
+        if (BOOKKEEPING.test(n)) {
+            exclude.push(e.name);
+            continue;
+        }
+        for (const c of e.columns) {
+            const s = heuristicStrategy(c.name, c.type, c.pii?.rule ?? null);
+            if (s !== 'keep')
+                mask.push({ table: e.name, column: c.name, strategy: s });
+            const cn = normalizeName(c.name);
+            if (e.name !== subjectName &&
+                /_(id|ref)$/.test(cn) &&
+                (cn.startsWith(`${subjectRef}_`) ||
+                    /^(requester|owner|author|customer|account)_(id|ref)$/.test(cn))) {
+                foreignKeys.push({ table: e.name, column: c.name, references: `${subjectName}.${key}` });
+            }
+        }
+        if (RETAIN_NAMES.test(n) && e.name !== subjectName) {
+            retain.push({
+                table: e.name,
+                reason: 'Accounting records are usually subject to statutory retention (verify the period)',
+                anonymize: e.columns
+                    .filter((c) => c.pii?.rule === 'email' || c.pii?.rule === 'phone')
+                    .map((c) => c.name),
+            });
+        }
+    }
+    return {
+        subject: { table: subjectName, key },
+        retain,
+        foreignKeys,
+        mask,
+        exclude,
+        notes: ['Generated by the offline heuristic planner: review every entry before use.'],
+    };
+}
+export const heuristicProvider = (metadata) => ({
+    name: 'heuristic',
+    propose: () => Promise.resolve(heuristicProposal(metadata)),
+});
+//# sourceMappingURL=heuristic.js.map

package/dist/heuristic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heuristic.js","sourceRoot":"","sources":["../src/heuristic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAMhD,MAAM,aAAa,GACjB,iGAAiG,CAAC;AACpG,MAAM,YAAY,GAAG,8DAA8D,CAAC;AACpF,MAAM,WAAW,GACf,6GAA6G,CAAC;AAEhH,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,IAAmB,EACnB,IAAmB;IAEnB,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,+DAA+D;IAC/D,IAAI,IAAI,KAAK,IAAI;QACf,OAAO,uDAAuD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5F,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC;IAC9C,MAAM,OAAO,GAAG,8DAA8D,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QACtC,KAAK,aAAa;YAChB,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,YAAY,CAAC;YAC3D,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,WAAW,CAAC;YAChE,OAAO,WAAW,CAAC;QACrB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,mBAAmB;YACtB,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,KAAK,gBAAgB;YACnB,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAClD,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC;YACnD,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtD,OAAO,QAAQ,CAAC;QAClB,KAAK,eAAe;YAClB,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IACxC,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,iBAAiB,CAAC,QAAwB;IACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM;QAC1C,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KACjD,CAAC,CAAC,CAAC;IACJ,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;IAC1E,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAEhE,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,MAAM,WAAW,GAA4B,EAAE,CAAC;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5E,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjC,IACE,CAAC,CAAC,IAAI,KAAK,WAAW;gBACtB,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC;oBAC9B,sDAAsD,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAClE,CAAC;gBACD,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,WAAW,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,CAAC,CAAC,IAAI;gBACb,MAAM,EAAE,mFAAmF;gBAC3F,SAAS,EAAE,CAAC,CAAC,OAAO;qBACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,OAAO,CAAC;qBACjE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE;QACpC,MAAM;QACN,WAAW;QACX,IAAI;QACJ,OAAO;QACP,KAAK,EAAE,CAAC,4EAA4E,CAAC;KACtF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAwB,EAAoB,EAAE,CAAC,CAAC;IAChF,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;CAC5D,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { PrivacyGuardError, assertSafeToSend, inspectPayload, type FindingKind, type GuardFinding, } from './guard.js';
+export { buildSchemaMetadata, type MetadataInput, type SchemaMetadata } from './metadata.js';
+export { ProposalSchema, type Proposal } from './proposal.js';
+export { SYSTEM_PROMPT, buildPrompt } from './prompt.js';
+export { DEFAULT_MODEL, GuardedProvider, createAnthropicProvider, type AnthropicProviderOptions, type PromptPayload, type ProposalProvider, } from './providers.js';
+export { heuristicProposal, heuristicProvider, heuristicStrategy } from './heuristic.js';
+export { renderProposal, type RenderedProposal } from './render.js';
+export { diffLines, renderDiff, type DiffLine } from './diff.js';
+export { runSetup, type SetupIo, type SetupOptions, type SetupResult } from './setup.js';
+export { formatReport, goldenMetadata, loadGolden, runEval, scoreProposal, type EvalReport, type GoldenSet, } from './eval.js';
+export { renderSkillMd } from './skill.js';

package/dist/index.js

@@ -0,0 +1,12 @@
+export { PrivacyGuardError, assertSafeToSend, inspectPayload, } from './guard.js';
+export { buildSchemaMetadata } from './metadata.js';
+export { ProposalSchema } from './proposal.js';
+export { SYSTEM_PROMPT, buildPrompt } from './prompt.js';
+export { DEFAULT_MODEL, GuardedProvider, createAnthropicProvider, } from './providers.js';
+export { heuristicProposal, heuristicProvider, heuristicStrategy } from './heuristic.js';
+export { renderProposal } from './render.js';
+export { diffLines, renderDiff } from './diff.js';
+export { runSetup } from './setup.js';
+export { formatReport, goldenMetadata, loadGolden, runEval, scoreProposal, } from './eval.js';
+export { renderSkillMd } from './skill.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,GAGf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAA2C,MAAM,eAAe,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAiB,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,aAAa,EACb,eAAe,EACf,uBAAuB,GAIxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,cAAc,EAAyB,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAqD,MAAM,YAAY,CAAC;AACzF,OAAO,EACL,YAAY,EACZ,cAAc,EACd,UAAU,EACV,OAAO,EACP,aAAa,GAGd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/metadata.d.ts

@@ -0,0 +1,31 @@
+import type { DataMap, SchemaField } from '@stonekeep/core';
+/**
+ * The ONLY data the setup assistant sends to an LLM: names, types and
+ * classifications. No values, file contents, or comments.
+ */
+export interface SchemaMetadata {
+    entities: {
+        name: string;
+        columns: {
+            name: string;
+            type: string | null;
+            pii: {
+                category: string;
+                rule: string;
+                confidence: number;
+            } | null;
+        }[];
+    }[];
+}
+export interface MetadataInput {
+    datamap: DataMap;
+    /** All schema fields from `collectSchemaFields` (PII or not), for context. */
+    fields?: readonly SchemaField[];
+}
+/**
+ * Build the metadata payload from the datamap (+ optional full field list).
+ * Strict allowlist: every identifier and type name must match a narrow
+ * pattern, nested JSON paths are skipped, and the result is re-checked by the
+ * privacy guard. Throws PrivacyGuardError rather than silently dropping data.
+ */
+export declare function buildSchemaMetadata(input: MetadataInput): SchemaMetadata;

package/dist/metadata.js

@@ -0,0 +1,55 @@
+import { IDENTIFIER, PrivacyGuardError, TYPE_NAME, assertSafeToSend, } from './guard.js';
+/**
+ * Build the metadata payload from the datamap (+ optional full field list).
+ * Strict allowlist: every identifier and type name must match a narrow
+ * pattern, nested JSON paths are skipped, and the result is re-checked by the
+ * privacy guard. Throws PrivacyGuardError rather than silently dropping data.
+ */
+export function buildSchemaMetadata(input) {
+    const findings = [];
+    const entities = new Map();
+    const column = (entity, field, path) => {
+        // Validate first: an unsafe name fails loudly even if it would be skipped below.
+        if (!IDENTIFIER.test(entity))
+            findings.push({ kind: 'identifier', path: `${path}.entity` });
+        if (!IDENTIFIER.test(field))
+            findings.push({ kind: 'identifier', path: `${path}.field` });
+        if (field.includes('.'))
+            return undefined; // nested JSON/OpenAPI paths are not database columns
+        let cols = entities.get(entity);
+        if (!cols) {
+            cols = new Map();
+            entities.set(entity, cols);
+        }
+        let col = cols.get(field);
+        if (!col) {
+            col = { name: field, type: null, pii: null };
+            cols.set(field, col);
+        }
+        return col;
+    };
+    (input.fields ?? []).forEach((f, i) => {
+        const col = column(f.entity, f.field, `$.fields[${i}]`);
+        if (col && f.rawType !== undefined) {
+            if (TYPE_NAME.test(f.rawType))
+                col.type = f.rawType;
+            else
+                findings.push({ kind: 'identifier', path: `$.fields[${i}].rawType` });
+        }
+    });
+    input.datamap.fields.forEach((f, i) => {
+        const col = column(f.entity, f.field, `$.datamap.fields[${i}]`);
+        if (col)
+            col.pii = { category: f.category, rule: f.rule, confidence: f.confidence };
+    });
+    if (findings.length > 0)
+        throw new PrivacyGuardError(findings);
+    const metadata = {
+        entities: [...entities.entries()]
+            .sort(([a], [b]) => (a < b ? -1 : 1))
+            .map(([name, cols]) => ({ name, columns: [...cols.values()] })),
+    };
+    assertSafeToSend(metadata);
+    return metadata;
+}
+//# sourceMappingURL=metadata.js.map

package/dist/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../src/metadata.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,SAAS,EACT,gBAAgB,GAEjB,MAAM,YAAY,CAAC;AAuBpB;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAoB;IACtD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;IACJ,MAAM,MAAM,GAAG,CACb,MAAc,EACd,KAAa,EACb,IAAY,EACuD,EAAE;QACrE,iFAAiF;QACjF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,IAAI,SAAS,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,CAAC,qDAAqD;QAChG,IAAI,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;YACjB,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC;;gBAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACtF,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE/D,MAAM,QAAQ,GAAmB;QAC/B,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;aAC9B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;KAClE,CAAC;IACF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/prompt.d.ts

@@ -0,0 +1,6 @@
+import type { SchemaMetadata } from './metadata.js';
+export declare const SYSTEM_PROMPT: string;
+export declare function buildPrompt(metadata: SchemaMetadata): {
+    system: string;
+    user: string;
+};

package/dist/prompt.js

@@ -0,0 +1,20 @@
+import { MASK_STRATEGIES } from '@stonekeep/core/engine';
+export const SYSTEM_PROMPT = `You help engineers configure Stonekeep, a tool that exports, deletes, anonymizes and masks personal data.
+You receive schema metadata only: entity (table) names, column names, column types, and the classification Stonekeep's scanner assigned to personal-data columns. You never see data values.
+
+Propose a connector configuration:
+- subject: the entity that represents an individual person (customer, user, member, patient...) and the column that identifies one person, normally its primary key (often "id").
+- retain: entities holding records that law or accounting typically requires keeping after a person is erased, such as invoices, payments, tax or ledger records. Give a short reason and list only the personal-data columns in that entity that can be anonymized without breaking the record's purpose. Do not retain ordinary application data.
+- foreignKeys: only relations that a database likely does not enforce, where a column name clearly points at the subject (for example "requester_id" or "customer_ref" referencing "users.id"). Leave the list empty when unsure: Stonekeep discovers enforced foreign keys itself.
+- mask: one entry for every column classified as personal data, plus free-text columns that may contain it (notes, comments, bodies, messages). Strategies: ${MASK_STRATEGIES.join(', ')}. Match the strategy to the column type and meaning: emails -> email, phone numbers -> phone, first/last/full names -> first-name/last-name/full-name, IP addresses -> ip, postal address parts -> street/city/zip, coordinates -> geo, dates of birth -> date, numeric identifiers -> number, UUIDs -> uuid, free text and opaque identifiers (government ids, card numbers, tokens, external account ids) -> token, JSON blobs -> json-empty. Use keep only for columns that are not personal data.
+- exclude: bookkeeping tables such as schema migrations.
+- notes: up to 5 short points a reviewer should check. Never claim the result guarantees legal compliance.
+
+Use only entity and column names that appear in the metadata, spelled exactly as given.`;
+export function buildPrompt(metadata) {
+    return {
+        system: SYSTEM_PROMPT,
+        user: `Schema metadata (JSON):\n${JSON.stringify(metadata)}`,
+    };
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAGzD,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;8JAOiI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;;;;wFAIhG,CAAC;AAEzF,MAAM,UAAU,WAAW,CAAC,QAAwB;IAClD,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;KAC7D,CAAC;AACJ,CAAC"}

package/dist/proposal.d.ts

@@ -0,0 +1,48 @@
+import { z } from 'zod/v4';
+/**
+ * What the assistant must return (enforced with structured outputs). Arrays
+ * instead of maps keep the JSON Schema strict-mode friendly.
+ */
+export declare const ProposalSchema: z.ZodObject<{
+    subject: z.ZodObject<{
+        table: z.ZodString;
+        key: z.ZodString;
+    }, z.core.$strip>;
+    retain: z.ZodArray<z.ZodObject<{
+        table: z.ZodString;
+        reason: z.ZodString;
+        anonymize: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    foreignKeys: z.ZodArray<z.ZodObject<{
+        table: z.ZodString;
+        column: z.ZodString;
+        references: z.ZodString;
+    }, z.core.$strip>>;
+    mask: z.ZodArray<z.ZodObject<{
+        table: z.ZodString;
+        column: z.ZodString;
+        strategy: z.ZodEnum<{
+            number: "number";
+            email: "email";
+            phone: "phone";
+            date: "date";
+            "first-name": "first-name";
+            "last-name": "last-name";
+            "full-name": "full-name";
+            username: "username";
+            ip: "ip";
+            street: "street";
+            city: "city";
+            zip: "zip";
+            geo: "geo";
+            uuid: "uuid";
+            token: "token";
+            "json-empty": "json-empty";
+            null: "null";
+            keep: "keep";
+        }>;
+    }, z.core.$strip>>;
+    exclude: z.ZodArray<z.ZodString>;
+    notes: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type Proposal = z.infer<typeof ProposalSchema>;

package/dist/proposal.js

@@ -0,0 +1,38 @@
+import { MASK_STRATEGIES } from '@stonekeep/core/engine';
+import { z } from 'zod/v4';
+/**
+ * What the assistant must return (enforced with structured outputs). Arrays
+ * instead of maps keep the JSON Schema strict-mode friendly.
+ */
+export const ProposalSchema = z.object({
+    subject: z.object({
+        table: z.string().describe('Entity that represents the person (data subject), e.g. users'),
+        key: z.string().describe('Column that identifies the subject, usually its primary key'),
+    }),
+    retain: z
+        .array(z.object({
+        table: z.string(),
+        reason: z
+            .string()
+            .describe('Short legal/business reason, e.g. "Invoices must be kept for tax purposes"'),
+        anonymize: z
+            .array(z.string())
+            .describe('Personal-data columns to anonymize in retained rows'),
+    }))
+        .describe('Tables whose rows must be kept (e.g. accounting records) and detached from the person'),
+    foreignKeys: z
+        .array(z.object({
+        table: z.string(),
+        column: z.string(),
+        references: z.string().describe('"parent_table.column"'),
+    }))
+        .describe('Only relations the database probably does NOT enforce (soft references such as requester_id)'),
+    mask: z
+        .array(z.object({ table: z.string(), column: z.string(), strategy: z.enum(MASK_STRATEGIES) }))
+        .describe('Staging masking strategy per personal-data column'),
+    exclude: z
+        .array(z.string())
+        .describe('Tables Stonekeep should never touch (e.g. migration bookkeeping)'),
+    notes: z.array(z.string()).describe('Short review notes for the human; no personal data'),
+});
+//# sourceMappingURL=proposal.js.map

package/dist/proposal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal.js","sourceRoot":"","sources":["../src/proposal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;QAC1F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;KACxF,CAAC;IACF,MAAM,EAAE,CAAC;SACN,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,QAAQ,CAAC,4EAA4E,CAAC;QACzF,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,CAAC,qDAAqD,CAAC;KACnE,CAAC,CACH;SACA,QAAQ,CACP,uFAAuF,CACxF;IACH,WAAW,EAAE,CAAC;SACX,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KACzD,CAAC,CACH;SACA,QAAQ,CACP,8FAA8F,CAC/F;IACH,IAAI,EAAE,CAAC;SACJ,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;SAC7F,QAAQ,CAAC,mDAAmD,CAAC;IAChE,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,kEAAkE,CAAC;IAC/E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;CAC1F,CAAC,CAAC"}

package/dist/providers.d.ts

@@ -0,0 +1,32 @@
+import Anthropic from '@anthropic-ai/sdk';
+import { type Proposal } from './proposal.js';
+export interface PromptPayload {
+    system: string;
+    user: string;
+}
+/** Something that turns a prompt about schema metadata into a proposal. */
+export interface ProposalProvider {
+    readonly name: string;
+    propose(prompt: PromptPayload): Promise<Proposal>;
+}
+/**
+ * Wraps a provider so the privacy guard runs on the exact payload
+ * immediately before any network request. Providers that talk to an LLM are
+ * only ever handed out wrapped in this.
+ */
+export declare class GuardedProvider implements ProposalProvider {
+    readonly name: string;
+    private readonly inner;
+    constructor(inner: ProposalProvider);
+    propose(prompt: PromptPayload): Promise<Proposal>;
+}
+export declare const DEFAULT_MODEL = "claude-opus-5-5";
+export interface AnthropicProviderOptions {
+    model?: string;
+    apiKey?: string;
+    /** Inject fetch (tests). Default: global fetch. */
+    fetch?: typeof fetch;
+    client?: Anthropic;
+}
+/** The only way to obtain the Anthropic provider: always behind the privacy guard. */
+export declare function createAnthropicProvider(options?: AnthropicProviderOptions): ProposalProvider;

package/dist/providers.js

@@ -0,0 +1,66 @@
+import Anthropic from '@anthropic-ai/sdk';
+import { betaZodOutputFormat } from '@anthropic-ai/sdk/helpers/beta/zod';
+import { StonekeepError } from '@stonekeep/core';
+import { assertSafeToSend } from './guard.js';
+import { ProposalSchema } from './proposal.js';
+/**
+ * Wraps a provider so the privacy guard runs on the exact payload
+ * immediately before any network request. Providers that talk to an LLM are
+ * only ever handed out wrapped in this.
+ */
+export class GuardedProvider {
+    name;
+    inner;
+    constructor(inner) {
+        this.inner = inner;
+        this.name = inner.name;
+    }
+    async propose(prompt) {
+        assertSafeToSend(prompt); // rejects before the inner provider can open a connection
+        return this.inner.propose(prompt);
+    }
+}
+export const DEFAULT_MODEL = 'claude-opus-5-5';
+/** Claude via the official SDK with structured outputs (validated against ProposalSchema). */
+class AnthropicProposalProvider {
+    name;
+    client;
+    model;
+    constructor(options) {
+        this.model = options.model ?? DEFAULT_MODEL;
+        this.name = `anthropic:${this.model}`;
+        this.client =
+            options.client ??
+                new Anthropic({
+                    ...(options.apiKey !== undefined ? { apiKey: options.apiKey } : {}),
+                    ...(options.fetch !== undefined ? { fetch: options.fetch } : {}),
+                });
+    }
+    async propose(prompt) {
+        const response = await this.client.beta.messages.parse({
+            model: this.model,
+            max_tokens: 16000,
+            // Server-side fallback if a safety classifier declines the request.
+            betas: ['server-side-fallback-2026-07-01'],
+            fallbacks: 'default',
+            output_config: { effort: 'high', format: betaZodOutputFormat(ProposalSchema) },
+            system: prompt.system,
+            messages: [{ role: 'user', content: prompt.user }],
+        });
+        if (response.stop_reason === 'refusal') {
+            throw new StonekeepError('CONFIG', 'The model declined to produce a proposal; configure Stonekeep manually or try again');
+        }
+        if (response.stop_reason === 'max_tokens') {
+            throw new StonekeepError('CONFIG', 'The proposal was cut off (max_tokens); the schema may be too large for one request');
+        }
+        if (response.parsed_output === null) {
+            throw new StonekeepError('CONFIG', 'The model response did not match the proposal schema');
+        }
+        return response.parsed_output;
+    }
+}
+/** The only way to obtain the Anthropic provider: always behind the privacy guard. */
+export function createAnthropicProvider(options = {}) {
+    return new GuardedProvider(new AnthropicProposalProvider(options));
+}
+//# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAiB,MAAM,eAAe,CAAC;AAa9D;;;;GAIG;AACH,MAAM,OAAO,eAAe;IACjB,IAAI,CAAS;IACL,KAAK,CAAmB;IAEzC,YAAY,KAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAqB;QACjC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,0DAA0D;QACpF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAU/C,8FAA8F;AAC9F,MAAM,yBAAyB;IACpB,IAAI,CAAS;IACL,MAAM,CAAY;IAClB,KAAK,CAAS;IAE/B,YAAY,OAAiC;QAC3C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,aAAa,IAAI,CAAC,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM;YACT,OAAO,CAAC,MAAM;gBACd,IAAI,SAAS,CAAC;oBACZ,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAqB;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YACrD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,oEAAoE;YACpE,KAAK,EAAE,CAAC,iCAAiC,CAAC;YAC1C,SAAS,EAAE,SAAS;YACpB,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC,cAAc,CAAC,EAAE;YAC9E,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,cAAc,CACtB,QAAQ,EACR,qFAAqF,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YAC1C,MAAM,IAAI,cAAc,CACtB,QAAQ,EACR,oFAAoF,CACrF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,sDAAsD,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,QAAQ,CAAC,aAAa,CAAC;IAChC,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CAAC,UAAoC,EAAE;IAC5E,OAAO,IAAI,eAAe,CAAC,IAAI,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/render.d.ts

@@ -0,0 +1,16 @@
+import type { SchemaMetadata } from './metadata.js';
+import type { Proposal } from './proposal.js';
+export interface RenderedProposal {
+    /** Connector config object (validated). */
+    config: Record<string, unknown>;
+    yaml: string;
+    /** Entries dropped because they reference names absent from the metadata, etc. */
+    warnings: string[];
+}
+/**
+ * Turn a proposal into a connector config. Unknown entities/columns are
+ * dropped (models can hallucinate names). `connection`, `saas`, `consent`
+ * and other settings in an existing config are kept as they are — the
+ * assistant never touches credentials or connections.
+ */
+export declare function renderProposal(proposal: Proposal, metadata: SchemaMetadata, existing?: Record<string, unknown>): RenderedProposal;

package/dist/render.js

@@ -0,0 +1,86 @@
+import { connectorConfigSchema } from '@stonekeep/core/engine';
+import { stringify } from 'yaml';
+const HEADER = `# stonekeep.connector.yaml — proposed by \`stonekeep setup\` from schema metadata only.
+# Review every entry: the proposal is a starting point, not legal advice.
+`;
+/**
+ * Turn a proposal into a connector config. Unknown entities/columns are
+ * dropped (models can hallucinate names). `connection`, `saas`, `consent`
+ * and other settings in an existing config are kept as they are — the
+ * assistant never touches credentials or connections.
+ */
+export function renderProposal(proposal, metadata, existing) {
+    const warnings = [];
+    const cols = new Map(metadata.entities.map((e) => [e.name, new Set(e.columns.map((c) => c.name))]));
+    const hasTable = (t, where) => {
+        if (cols.has(t))
+            return true;
+        warnings.push(`${where}: unknown table "${t}" dropped`);
+        return false;
+    };
+    const hasColumn = (t, c, where) => {
+        if (cols.get(t)?.has(c) === true)
+            return true;
+        warnings.push(`${where}: unknown column "${t}.${c}" dropped`);
+        return false;
+    };
+    const tables = {};
+    const table = (t) => (tables[t] ??= {});
+    for (const r of proposal.retain) {
+        if (!hasTable(r.table, 'retain') || r.table === proposal.subject.table)
+            continue;
+        table(r.table).retain = {
+            reason: r.reason,
+            reference: null,
+            anonymize: r.anonymize.filter((c) => hasColumn(r.table, c, 'retain.anonymize')),
+        };
+    }
+    for (const fk of proposal.foreignKeys) {
+        const [refTable = '', refCol = ''] = fk.references.split('.');
+        if (!hasTable(fk.table, 'foreignKeys') ||
+            !hasColumn(fk.table, fk.column, 'foreignKeys') ||
+            !hasTable(refTable, 'foreignKeys.references') ||
+            !hasColumn(refTable, refCol, 'foreignKeys.references'))
+            continue;
+        const t = table(fk.table);
+        t.foreignKeys = [
+            ...(t.foreignKeys ?? []),
+            { column: fk.column, references: `${refTable}.${refCol}` },
+        ];
+    }
+    for (const ex of proposal.exclude) {
+        if (hasTable(ex, 'exclude') && ex !== proposal.subject.table)
+            table(ex).exclude = true;
+    }
+    const maskColumns = {};
+    for (const m of proposal.mask) {
+        if (m.strategy !== 'keep' && hasTable(m.table, 'mask') && hasColumn(m.table, m.column, 'mask'))
+            maskColumns[`${m.table}.${m.column}`] = m.strategy;
+    }
+    let subject = proposal.subject;
+    if (!hasTable(subject.table, 'subject') ||
+        !hasColumn(subject.table, subject.key, 'subject.key')) {
+        subject = { table: subject.table, key: subject.key };
+        warnings.push('subject: the proposed subject does not exist in the metadata; fix it before use');
+    }
+    const base = existing ?? {};
+    const existingMask = base.mask ?? {};
+    const config = {
+        version: 1,
+        connector: 'postgres',
+        ...base,
+        subject,
+        tables,
+        mask: { ...existingMask, columns: maskColumns },
+    };
+    const valid = connectorConfigSchema.safeParse(config);
+    if (!valid.success) {
+        for (const i of valid.error.issues)
+            warnings.push(`invalid: ${i.path.join('.')}: ${i.message}`);
+    }
+    const notes = proposal.notes.length > 0
+        ? `# Review notes:\n${proposal.notes.map((n) => `#  - ${n.replace(/\n/g, ' ')}`).join('\n')}\n`
+        : '';
+    return { config, yaml: `${HEADER}${notes}${stringify(config, { lineWidth: 0 })}`, warnings };
+}
+//# sourceMappingURL=render.js.map

package/dist/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAYjC,MAAM,MAAM,GAAG;;CAEd,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAkB,EAClB,QAAwB,EACxB,QAAkC;IAElC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAC9E,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,KAAa,EAAW,EAAE;QACrD,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,KAAa,EAAW,EAAE;QACjE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,CAAS,EAA2B,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAEzE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,OAAO,CAAC,KAAK;YAAE,SAAS;QACjF,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;SAChF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,CAAC,QAAQ,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,IACE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC;YAClC,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC;YAC9C,CAAC,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;YAC7C,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,wBAAwB,CAAC;YAEtD,SAAS;QACX,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,WAAW,GAAG;YACd,GAAG,CAAE,CAAC,CAAC,WAAqC,IAAI,EAAE,CAAC;YACnD,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,IAAI,MAAM,EAAE,EAAE;SAC3D,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,KAAK;YAAE,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;IACzF,CAAC;IACD,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC;YAC5F,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACvD,CAAC;IAED,IAAI,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC/B,IACE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC;QACnC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,EACrD,CAAC;QACD,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CACX,iFAAiF,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,IAAI,EAAE,CAAC;IAC5B,MAAM,YAAY,GAAI,IAAI,CAAC,IAA4C,IAAI,EAAE,CAAC;IAC9E,MAAM,MAAM,GAA4B;QACtC,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,UAAU;QACrB,GAAG,IAAI;QACP,OAAO;QACP,MAAM;QACN,IAAI,EAAE,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE;KAChD,CAAC;IACF,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,KAAK,GACT,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,oBAAoB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QAC/F,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;AAC/F,CAAC"}

package/dist/setup.d.ts

@@ -0,0 +1,29 @@
+import { type SchemaMetadata } from './metadata.js';
+import type { ProposalProvider } from './providers.js';
+export interface SetupIo {
+    stdout: (text: string) => void;
+    stderr: (text: string) => void;
+    /** Ask the user; resolves with their raw answer. Absent when not interactive. */
+    ask?: (question: string) => Promise<string>;
+    color?: boolean;
+}
+export interface SetupOptions {
+    /** Repository root (for schema field context and stonekeep.config.json). */
+    root: string;
+    datamapPath: string;
+    connectorPath: string;
+    provider: ProposalProvider | ((metadata: SchemaMetadata) => ProposalProvider);
+    io: SetupIo;
+}
+export interface SetupResult {
+    saved: boolean;
+    yaml: string;
+    warnings: string[];
+    changed: boolean;
+}
+/**
+ * `stonekeep setup`: datamap -> schema metadata (guarded) -> provider ->
+ * validated YAML -> diff -> explicit "Y" -> save. Never saves without an
+ * explicit yes, and never in a non-interactive session.
+ */
+export declare function runSetup(options: SetupOptions): Promise<SetupResult>;