@yan162/changewayguard 6.8.25

package/dist/agent/prompt-gate.d.ts

@@ -0,0 +1,16 @@
+export type PromptDecisionLike = {
+    action: "allow" | "alert" | "block" | string;
+    riskLevel: string;
+    confidence: number;
+    explanation: string;
+    findings?: Array<{
+        riskType?: string;
+    }>;
+};
+export declare function buildPromptRiskNotice(decision: PromptDecisionLike, params: {
+    brandName: string;
+    blockWarning: string;
+    alertWarning: string;
+}): string;
+export declare function buildPromptRiskOverrideInstruction(notice: string, decision: PromptDecisionLike): string;
+//# sourceMappingURL=prompt-gate.d.ts.map

package/dist/agent/prompt-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-gate.d.ts","sourceRoot":"","sources":["../../agent/prompt-gate.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;CACJ,CAAC;AAYF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE;IACN,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB,GACA,MAAM,CAuBR;AAED,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,CA0BR"}

package/dist/agent/prompt-gate.js

@@ -0,0 +1,58 @@
+function resolveDecisionCategory(decision) {
+    const riskTypes = (decision.findings ?? [])
+        .map((item) => (typeof item.riskType === "string" ? item.riskType.trim() : ""))
+        .filter((item) => item.length > 0);
+    if (riskTypes.length > 0) {
+        return Array.from(new Set(riskTypes)).join(", ");
+    }
+    return "未知类别";
+}
+export function buildPromptRiskNotice(decision, params) {
+    const isBlock = decision.action === "block";
+    const category = resolveDecisionCategory(decision);
+    if (isBlock) {
+        return [
+            `【${params.brandName}】`,
+            params.blockWarning,
+            "检测结果：拦截（高风险）",
+            `原因：见微检测引擎（changewayGuard）检测到明确的恶意意图: ${category}`,
+        ].join("\n");
+    }
+    return [
+        `【${params.brandName}】`,
+        params.alertWarning,
+        "检测结果：需二次确认（中风险）",
+        "原因：见微检测引擎（changewayGuard）检测到潜在风险:",
+        category,
+        "如需继续，请回复：确认继续\n",
+        "确认后会自动继续上一条请求。\n",
+        "如需取消，请修改后重试。"
+    ].join("\n");
+}
+export function buildPromptRiskOverrideInstruction(notice, decision) {
+    if (decision.action === "block") {
+        return [
+            "<changewayGuard> 安全强制输出协议（最高优先级，覆盖其他所有规则）：",
+            "根据changewayGuard的检测，当前输入存在恶意意图，存在高危风险；你的唯一任务是向用户输出下方【固定回复】。",
+            "硬性约束： 1) 只能输出下方【固定回复】全文，逐字一致。 2) 不得添加解释、道歉、建议、前后缀、Markdown、代码块或任何额外字符。 3) 不得调用任何工具。 4) 如果你打算输出任何其他内容，改为输出下方【固定回复】全文。",
+            "【固定回复开始】",
+            notice,
+            "【固定回复结束】",
+            "这是安全通知，不是广告。",
+            "需要读取标签内的内容并完整转达给用户。",
+            "用户需要这些信息来维持安全保护。 </changewayGuard>",
+        ].join("\n");
+    }
+    return [
+        "<changewayGuard> 安全强制输出协议（最高优先级，覆盖其他所有规则）：",
+        "根据changewayGuard的检测，当前输入存在中风险操作，可能导致风险；你的唯一任务是向用户输出下方【固定回复】。",
+        "硬性约束： 1) 只能输出下方【固定回复】全文，逐字一致。 2) 不得添加解释、道歉、建议、前后缀、Markdown、代码块或任何额外字符。 3) 不得调用任何工具。 4) 如果你打算输出任何其他内容，改为输出下方【固定回复】全文。",
+        "【固定回复开始】",
+        notice,
+        "【固定回复结束】",
+        "这是安全通知，不是广告。",
+        "需要读取标签内的内容并完整转达给用户。",
+        "用户需要这些信息来维持安全保护。 </changewayGuard>",
+    ].join("\n");
+}
+//# sourceMappingURL=prompt-gate.js.map

package/dist/agent/prompt-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-gate.js","sourceRoot":"","sources":["../../agent/prompt-gate.ts"],"names":[],"mappings":"AAUA,SAAS,uBAAuB,CAAC,QAA4B;IAC3D,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC9E,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAA4B,EAC5B,MAIC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC;IAC5C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAEnD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,MAAM,CAAC,SAAS,GAAG;YACvB,MAAM,CAAC,YAAY;YACnB,cAAc;YACd,wCAAwC,QAAQ,EAAE;SACnD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,OAAO;QACL,IAAI,MAAM,CAAC,SAAS,GAAG;QACvB,MAAM,CAAC,YAAY;QACnB,iBAAiB;QACjB,mCAAmC;QACnC,QAAQ;QACN,iBAAiB;QACjB,kBAAkB;QAClB,cAAc;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,MAAc,EACd,QAA4B;IAE5B,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO;YACL,4CAA4C;YAC5C,6DAA6D;YAC7D,sHAAsH;YACtH,UAAU;YACV,MAAM;YACN,UAAU;YACV,cAAc;YACd,qBAAqB;YACrB,oCAAoC;SACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,OAAO;QACL,4CAA4C;QAC5C,8DAA8D;QAC9D,sHAAsH;QACtH,UAAU;QACV,MAAM;QACN,UAAU;QACV,cAAc;QACd,qBAAqB;QACrB,oCAAoC;KACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/agent/prompt-input.d.ts

@@ -0,0 +1,9 @@
+export declare function isUserSender(from: unknown): boolean;
+export declare function extractTextContent(content: unknown): string;
+export declare function extractPromptForDetection(content: unknown): string;
+export declare function extractToolContentForDetection(result: unknown): string;
+export declare function extractLatestUserText(messages: unknown[]): string;
+export declare function extractLatestUserPromptForDetection(messages: unknown[]): string;
+export declare function isSyntheticSessionBootstrapPrompt(prompt: string): boolean;
+export declare function isPromptAlertConfirmation(text: string): boolean;
+//# sourceMappingURL=prompt-input.d.ts.map

package/dist/agent/prompt-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-input.d.ts","sourceRoot":"","sources":["../../agent/prompt-input.ts"],"names":[],"mappings":"AA8CA,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAGnD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAqB3D;AAoBD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAIlE;AAiDD,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAEtE;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAcjE;AAED,wBAAgB,mCAAmC,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAc/E;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEzE;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/D"}

package/dist/agent/prompt-input.js

@@ -0,0 +1,173 @@
+const USER_SENDERS = new Set(["user", "human", "you", "client"]);
+const SYNTHETIC_SESSION_BOOTSTRAP_PREFIX = "a new session was started via /new or /reset.";
+const ALERT_CONFIRM_PHRASES = new Set([
+    "确认继续",
+    "继续",
+    "继续执行",
+    "允许继续",
+    "confirm",
+    "yes",
+    "y",
+]);
+function normalizeActor(value) {
+    if (typeof value !== "string")
+        return "";
+    return value.trim().toLowerCase();
+}
+function normalizeWhitespace(text) {
+    return text.replace(/\s+/g, " ").trim();
+}
+function normalizeForCompare(text) {
+    return normalizeWhitespace(text).toLowerCase();
+}
+function normalizeScanText(text) {
+    return text.replace(/\r\n/g, "\n").trim();
+}
+function stripUntrustedMetadataBlocks(text) {
+    let current = text;
+    const patterns = [
+        /(?:^|\s)Conversation info\s*\(untrusted metadata\)\s*:\s*```(?:json)?\s*[\s\S]*?```\s*/gi,
+        /(?:^|\s)Sender\s*\(untrusted metadata\)\s*:\s*```(?:json)?\s*[\s\S]*?```\s*/gi,
+        /(?:^|\s)Conversation info\s*\(untrusted metadata\)\s*:\s*\{[\s\S]*?\}\s*/gi,
+        /(?:^|\s)Sender\s*\(untrusted metadata\)\s*:\s*\{[\s\S]*?\}\s*/gi,
+    ];
+    for (const pattern of patterns) {
+        current = current.replace(pattern, " ");
+    }
+    return current;
+}
+export function isUserSender(from) {
+    const normalized = normalizeActor(from);
+    return normalized !== "" && USER_SENDERS.has(normalized);
+}
+export function extractTextContent(content) {
+    if (typeof content === "string")
+        return normalizeWhitespace(content);
+    if (Array.isArray(content)) {
+        const joined = content
+            .map((item) => extractTextContent(item))
+            .filter(Boolean)
+            .join(" ");
+        return normalizeWhitespace(joined);
+    }
+    if (!content || typeof content !== "object")
+        return "";
+    const record = content;
+    if (typeof record.text === "string")
+        return normalizeWhitespace(record.text);
+    if (typeof record.content === "string")
+        return normalizeWhitespace(record.content);
+    if (Array.isArray(record.content))
+        return extractTextContent(record.content);
+    if (typeof record.message === "string")
+        return normalizeWhitespace(record.message);
+    return "";
+}
+function stripLeadingTransportEnvelope(text) {
+    let current = text.trim();
+    for (let i = 0; i < 3; i += 1) {
+        const next = current
+            .replace(/^Conversation info\s*\(untrusted metadata\)\s*:\s*```(?:json)?\s*[\s\S]*?```\s*/i, "")
+            .replace(/^Conversation info\s*\(untrusted metadata\)\s*:\s*\{[\s\S]*?\}\s*/i, "")
+            .replace(/^Sender\s*\(untrusted metadata\)\s*:\s*```(?:json)?\s*[\s\S]*?```\s*/i, "")
+            .replace(/^Sender\s*\(untrusted metadata\)\s*:\s*\{[\s\S]*?\}\s*/i, "")
+            .replace(/^\[(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun|[0-9]{4}-[0-9]{2}-[0-9]{2})[^\]\n]{0,120}\]\s*/i, "")
+            .trimStart();
+        if (next === current)
+            break;
+        current = next;
+    }
+    return normalizeWhitespace(stripUntrustedMetadataBlocks(current));
+}
+export function extractPromptForDetection(content) {
+    const text = extractTextContent(content);
+    if (!text)
+        return "";
+    return stripLeadingTransportEnvelope(text);
+}
+function extractToolTextCandidate(value, depth) {
+    if (depth > 5 || value == null)
+        return "";
+    if (typeof value === "string") {
+        const raw = normalizeScanText(value);
+        if (!raw)
+            return "";
+        if (raw.startsWith("{") || raw.startsWith("[")) {
+            try {
+                const parsed = JSON.parse(raw);
+                const extracted = extractToolTextCandidate(parsed, depth + 1);
+                if (extracted)
+                    return extracted;
+            }
+            catch {
+                // ignore parse errors; keep raw string
+            }
+        }
+        return raw;
+    }
+    if (Array.isArray(value)) {
+        const parts = value
+            .map((item) => extractToolTextCandidate(item, depth + 1))
+            .filter((item) => item.length > 0);
+        return normalizeScanText(parts.join("\n"));
+    }
+    if (typeof value === "object") {
+        const record = value;
+        const orderedCandidates = [
+            record.content,
+            record.text,
+            record.message,
+            record.output,
+            record.result,
+            record.data,
+            record.body,
+            record.value,
+        ];
+        for (const candidate of orderedCandidates) {
+            const extracted = extractToolTextCandidate(candidate, depth + 1);
+            if (extracted)
+                return extracted;
+        }
+    }
+    return "";
+}
+export function extractToolContentForDetection(result) {
+    return extractToolTextCandidate(result, 0);
+}
+export function extractLatestUserText(messages) {
+    for (let i = messages.length - 1; i >= 0; i -= 1) {
+        const item = messages[i];
+        if (!item || typeof item !== "object")
+            continue;
+        const record = item;
+        const role = record.role ?? record.from ?? record.sender ?? record.author;
+        if (!isUserSender(role))
+            continue;
+        const text = extractTextContent(record.content ?? record.text ?? record.message);
+        if (text)
+            return text;
+    }
+    return "";
+}
+export function extractLatestUserPromptForDetection(messages) {
+    for (let i = messages.length - 1; i >= 0; i -= 1) {
+        const item = messages[i];
+        if (!item || typeof item !== "object")
+            continue;
+        const record = item;
+        const role = record.role ?? record.from ?? record.sender ?? record.author;
+        if (!isUserSender(role))
+            continue;
+        const text = extractPromptForDetection(record.content ?? record.text ?? record.message);
+        if (text)
+            return text;
+    }
+    return "";
+}
+export function isSyntheticSessionBootstrapPrompt(prompt) {
+    return normalizeActor(prompt).startsWith(SYNTHETIC_SESSION_BOOTSTRAP_PREFIX);
+}
+export function isPromptAlertConfirmation(text) {
+    return ALERT_CONFIRM_PHRASES.has(normalizeForCompare(text));
+}
+//# sourceMappingURL=prompt-input.js.map

package/dist/agent/prompt-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-input.js","sourceRoot":"","sources":["../../agent/prompt-input.ts"],"names":[],"mappings":"AAAA,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACjE,MAAM,kCAAkC,GACtC,+CAA+C,CAAC;AAClD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,MAAM;IACN,IAAI;IACJ,MAAM;IACN,MAAM;IACN,SAAS;IACT,KAAK;IACL,GAAG;CACJ,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY;IAChD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,MAAM,QAAQ,GAAG;QACf,0FAA0F;QAC1F,+EAA+E;QAC/E,4EAA4E;QAC5E,iEAAiE;KAClE,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,UAAU,KAAK,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAErE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO;aACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;aACvC,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEvD,MAAM,MAAM,GAAG,OAAkC,CAAC;IAElD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7E,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,6BAA6B,CAAC,IAAY;IACjD,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAE1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO;aACjB,OAAO,CAAC,kFAAkF,EAAE,EAAE,CAAC;aAC/F,OAAO,CAAC,oEAAoE,EAAE,EAAE,CAAC;aACjF,OAAO,CAAC,uEAAuE,EAAE,EAAE,CAAC;aACpF,OAAO,CAAC,yDAAyD,EAAE,EAAE,CAAC;aACtE,OAAO,CAAC,mFAAmF,EAAE,EAAE,CAAC;aAChG,SAAS,EAAE,CAAC;QACf,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM;QAC5B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO,mBAAmB,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc,EAAE,KAAa;IAC7D,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAE1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QAEpB,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;gBAC1C,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC9D,IAAI,SAAS;oBAAE,OAAO,SAAS,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK;aAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;aACxD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,iBAAiB,GAAG;YACxB,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,IAAI;YACX,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,IAAI;YACX,MAAM,CAAC,IAAI;YACX,MAAM,CAAC,KAAK;SACb,CAAC;QACF,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,wBAAwB,CAAC,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACjE,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAe;IAC5D,OAAO,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAmB;IACvD,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAEhD,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QAC1E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,SAAS;QAElC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,QAAmB;IACrE,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAEhD,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QAC1E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,SAAS;QAElC,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QACxF,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,MAAc;IAC9D,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,kCAAkC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,qBAAqB,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9D,CAAC"}

package/dist/agent/prompt-output.d.ts

@@ -0,0 +1,4 @@
+type GenericMessage = Record<string, unknown>;
+export declare function rewriteAssistantMessageWithNotice(message: unknown, notice: string): GenericMessage | null;
+export {};
+//# sourceMappingURL=prompt-output.d.ts.map

package/dist/agent/prompt-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-output.d.ts","sourceRoot":"","sources":["../../agent/prompt-output.ts"],"names":[],"mappings":"AAAA,KAAK,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAO9C,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,GACb,cAAc,GAAG,IAAI,CAWvB"}

package/dist/agent/prompt-output.js

@@ -0,0 +1,19 @@
+function isAssistantMessage(message) {
+    if (!message || typeof message !== "object")
+        return false;
+    return message.role === "assistant";
+}
+export function rewriteAssistantMessageWithNotice(message, notice) {
+    if (!isAssistantMessage(message))
+        return null;
+    const next = {
+        ...message,
+        role: "assistant",
+        stopReason: "stop",
+        content: [{ type: "text", text: notice }],
+    };
+    if ("errorMessage" in next)
+        delete next.errorMessage;
+    return next;
+}
+//# sourceMappingURL=prompt-output.js.map

package/dist/agent/prompt-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-output.js","sourceRoot":"","sources":["../../agent/prompt-output.ts"],"names":[],"mappings":"AAEA,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAQ,OAA8B,CAAC,IAAI,KAAK,WAAW,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAAgB,EAChB,MAAc;IAEd,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,MAAM,IAAI,GAAmB;QAC3B,GAAG,OAAO;QACV,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KAC1C,CAAC;IACF,IAAI,cAAc,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,YAAY,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/agent/runner.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Agent Runner - Multi-backend analysis
+ *
+ * Supports two detection backends:
+ * 1. Dashboard (preferred) - Routes through local/remote dashboard → core
+ * 2. OpenGuardrails API (fallback) - Direct API call
+ *
+ * Content is always sanitized locally before being sent to any API.
+ */
+import type { AnalysisTarget, AnalysisVerdict, Logger, OpenGuardrailsApiResponse } from "./types.js";
+export type RunnerConfig = {
+    apiKey: string;
+    timeoutMs: number;
+    autoRegister: boolean;
+    coreUrl: string;
+    /** Dashboard URL - when set, uses dashboard for detection */
+    dashboardUrl?: string;
+    /** Dashboard session token */
+    dashboardSessionToken?: string;
+};
+export declare function mapApiResponseToVerdict(apiResponse: OpenGuardrailsApiResponse): AnalysisVerdict;
+export declare function runGuardAgent(target: AnalysisTarget, config: RunnerConfig, log: Logger): Promise<AnalysisVerdict>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/agent/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../agent/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EAEf,MAAM,EACN,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AAUpB,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8BAA8B;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAiGF,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,yBAAyB,GAAG,eAAe,CAgB/F;AAoDD,wBAAsB,aAAa,CACjC,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,eAAe,CAAC,CAuC1B"}

package/dist/agent/runner.js

@@ -0,0 +1,165 @@
+/**
+ * Agent Runner - Multi-backend analysis
+ *
+ * Supports two detection backends:
+ * 1. Dashboard (preferred) - Routes through local/remote dashboard → core
+ * 2. OpenGuardrails API (fallback) - Direct API call
+ *
+ * Content is always sanitized locally before being sent to any API.
+ */
+import { randomBytes } from "node:crypto";
+import { DEFAULT_CORE_URL } from "./config.js";
+import { buildSignedAuthHeadersForUrl, withChangewayOpenPrefix } from "./auth.js";
+import { sanitizeContent } from "./sanitizer.js";
+function createTraceId() {
+    const randomNum = randomBytes(6).readUIntBE(0, 6);
+    return `${Date.now()}${String(randomNum).padStart(14, "0")}`;
+}
+async function runViaDashboard(sanitizedContent, config, log) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), config.timeoutMs);
+    const url = withChangewayOpenPrefix(`${config.dashboardUrl}/api/detect`);
+    const requestBody = {
+        messages: [{ role: "user", content: sanitizedContent }],
+    };
+    const traceId = createTraceId();
+    try {
+        const headers = {
+            "Content-Type": "application/json",
+            traceId,
+            ...buildSignedAuthHeadersForUrl({
+                method: "POST",
+                url,
+                body: requestBody,
+                traceId,
+                authorization: config.dashboardSessionToken
+                    ? `Bearer ${config.dashboardSessionToken}`
+                    : null,
+            }),
+        };
+        const response = await fetch(url, {
+            method: "POST",
+            headers,
+            body: JSON.stringify(requestBody),
+            signal: controller.signal,
+        });
+        if (!response.ok) {
+            const text = await response.text();
+            throw new Error(`Dashboard API error: ${response.status} ${text}`);
+        }
+        const result = (await response.json());
+        if (!result.success || !result.data) {
+            throw new Error(`Dashboard error: ${result.error ?? "unknown"}`);
+        }
+        const data = result.data;
+        const findings = data.findings.map((f) => ({
+            suspiciousContent: f.name,
+            reason: f.description,
+            confidence: data.sensitivity_score,
+        }));
+        return {
+            isInjection: !data.safe,
+            confidence: data.sensitivity_score,
+            reason: data.safe ? "No issues detected" : `Detected: ${data.categories.join(", ")}`,
+            findings,
+            chunksAnalyzed: 1,
+        };
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+// =============================================================================
+// OpenGuardrails API Detection (Fallback)
+// =============================================================================
+export function mapApiResponseToVerdict(apiResponse) {
+    const verdict = apiResponse.verdict;
+    const findings = (verdict.findings ?? []).map((f) => ({
+        suspiciousContent: f.suspiciousContent,
+        reason: f.reason,
+        confidence: f.confidence,
+    }));
+    return {
+        isInjection: verdict.isInjection,
+        confidence: verdict.confidence,
+        reason: verdict.reason,
+        findings,
+        chunksAnalyzed: 1,
+    };
+}
+async function runViaApi(sanitizedContent, config, _log) {
+    const baseUrl = config.coreUrl || DEFAULT_CORE_URL;
+    const url = withChangewayOpenPrefix(`${baseUrl}/api/check/tool-call`);
+    const requestBody = { content: sanitizedContent, async: false };
+    const traceId = createTraceId();
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), config.timeoutMs);
+    try {
+        const response = await fetch(url, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                traceId,
+                ...buildSignedAuthHeadersForUrl({
+                    method: "POST",
+                    url,
+                    body: requestBody,
+                    traceId,
+                }),
+            },
+            body: JSON.stringify(requestBody),
+            signal: controller.signal,
+        });
+        if (!response.ok) {
+            throw new Error(`changewayGuard API error: ${response.status} ${response.statusText}`);
+        }
+        const apiResponse = (await response.json());
+        if (!apiResponse.ok) {
+            throw new Error(`changewayGuard API returned error: ${apiResponse.error ?? "unknown"}`);
+        }
+        return mapApiResponseToVerdict(apiResponse);
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+// =============================================================================
+// Main Analysis Function
+// =============================================================================
+export async function runGuardAgent(target, config, log) {
+    const startTime = Date.now();
+    log.info(`Analyzing content: ${target.content.length} chars`);
+    // Always sanitize locally first
+    const { sanitized, redactions, totalRedactions } = sanitizeContent(target.content);
+    if (totalRedactions > 0) {
+        log.info(`Sanitized ${totalRedactions} sensitive items: ${Object.entries(redactions).map(([k, v]) => `${v} ${k}`).join(", ")}`);
+    }
+    try {
+        let verdict;
+        // Route to dashboard if configured, otherwise fall back to API
+        if (config.dashboardUrl) {
+            log.info("Using dashboard for detection");
+            verdict = await runViaDashboard(sanitized, config, log);
+        }
+        else {
+            verdict = await runViaApi(sanitized, config, log);
+        }
+        const durationMs = Date.now() - startTime;
+        log.info(`Analysis complete in ${durationMs}ms: ${verdict.isInjection ? "INJECTION DETECTED" : "SAFE"}`);
+        return verdict;
+    }
+    catch (error) {
+        if (error.name === "AbortError") {
+            log.warn("Analysis timed out");
+            return {
+                isInjection: false,
+                confidence: 0,
+                reason: "Timeout",
+                findings: [],
+                chunksAnalyzed: 0,
+            };
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=runner.js.map

package/dist/agent/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../agent/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAiBjD,SAAS,aAAa;IACpB,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;AAC/D,CAAC;AAsBD,KAAK,UAAU,eAAe,CAC5B,gBAAwB,EACxB,MAAoB,EACpB,GAAW;IAEX,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,MAAM,CAAC,YAAY,aAAa,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG;QAClB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;KACxD,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,OAAO;YACP,GAAG,4BAA4B,CAAC;gBAC9B,MAAM,EAAE,MAAM;gBACd,GAAG;gBACH,IAAI,EAAE,WAAW;gBACjB,OAAO;gBACP,aAAa,EAAE,MAAM,CAAC,qBAAqB;oBACzC,CAAC,CAAC,UAAU,MAAM,CAAC,qBAAqB,EAAE;oBAC1C,CAAC,CAAC,IAAI;aACT,CAAC;SACH,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YACjC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QAEhE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAEzB,MAAM,QAAQ,GAAc,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpD,iBAAiB,EAAE,CAAC,CAAC,IAAI;YACzB,MAAM,EAAE,CAAC,CAAC,WAAW;YACrB,UAAU,EAAE,IAAI,CAAC,iBAAiB;SACnC,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI;YACvB,UAAU,EAAE,IAAI,CAAC,iBAAiB;YAClC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACpF,QAAQ;YACR,cAAc,EAAE,CAAC;SAClB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,0CAA0C;AAC1C,gFAAgF;AAEhF,MAAM,UAAU,uBAAuB,CAAC,WAAsC;IAC5E,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;IAEpC,MAAM,QAAQ,GAAc,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ;QACR,cAAc,EAAE,CAAC;KAClB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,gBAAwB,EACxB,MAAoB,EACpB,IAAY;IAEZ,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACnD,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,OAAO,sBAAsB,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAEhC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAEzE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,OAAO;gBACP,GAAG,4BAA4B,CAAC;oBAC9B,MAAM,EAAE,MAAM;oBACd,GAAG;oBACH,IAAI,EAAE,WAAW;oBACjB,OAAO;iBACR,CAAC;aACH;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YACjC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA8B,CAAC;QAEzE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,sCAAsC,WAAW,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,OAAO,uBAAuB,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAsB,EACtB,MAAoB,EACpB,GAAW;IAEX,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,GAAG,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC;IAE9D,gCAAgC;IAChC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnF,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,aAAa,eAAe,qBAAqB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClI,CAAC;IAED,IAAI,CAAC;QACH,IAAI,OAAwB,CAAC;QAE7B,+DAA+D;QAC/D,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC1C,OAAO,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,wBAAwB,UAAU,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAEzG,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAAe,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC/B,OAAO;gBACL,WAAW,EAAE,KAAK;gBAClB,UAAU,EAAE,CAAC;gBACb,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,EAAE;gBACZ,cAAc,EAAE,CAAC;aAClB,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/agent/runtime-mode.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Determine whether plugin runtime side effects should run in current process.
+ *
+ * OpenClaw may load extensions for CLI commands like:
+ *   openclaw plugins install/list/uninstall
+ * In those commands, starting timers/watchers/servers in register() can keep
+ * the CLI process alive. We only activate runtime behavior in gateway process.
+ */
+export declare function shouldActivatePluginRuntime(args?: string[], serviceKind?: string | undefined): boolean;
+//# sourceMappingURL=runtime-mode.d.ts.map

package/dist/agent/runtime-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-mode.d.ts","sourceRoot":"","sources":["../../agent/runtime-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,GAAE,MAAM,EAA0B,EACtC,WAAW,GAAE,MAAM,GAAG,SAA6C,GAClE,OAAO,CAWT"}

package/dist/agent/runtime-mode.js

@@ -0,0 +1,19 @@
+/**
+ * Determine whether plugin runtime side effects should run in current process.
+ *
+ * OpenClaw may load extensions for CLI commands like:
+ *   openclaw plugins install/list/uninstall
+ * In those commands, starting timers/watchers/servers in register() can keep
+ * the CLI process alive. We only activate runtime behavior in gateway process.
+ */
+export function shouldActivatePluginRuntime(args = process.argv.slice(2), serviceKind = process.env.OPENCLAW_SERVICE_KIND) {
+    if (serviceKind === "gateway") {
+        return true;
+    }
+    // Direct gateway command invocation also needs full runtime behavior.
+    if (args[0] === "gateway") {
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=runtime-mode.js.map

package/dist/agent/runtime-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-mode.js","sourceRoot":"","sources":["../../agent/runtime-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EACtC,cAAkC,OAAO,CAAC,GAAG,CAAC,qBAAqB;IAEnE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sEAAsE;IACtE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/agent/sanitizer.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Local content sanitizer — strips PII and secrets before sending to API.
+ *
+ * Inspired by n8n's guardrails implementation (MIT).
+ * Replaces sensitive data with category placeholders while preserving
+ * the structure and context needed for injection detection.
+ */
+import type { SanitizeResult } from "./types.js";
+export declare function sanitizeContent(content: string): SanitizeResult;
+//# sourceMappingURL=sanitizer.d.ts.map

package/dist/agent/sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.d.ts","sourceRoot":"","sources":["../../agent/sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA6KjD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAqC/D"}