@yan162/changewayguard 6.8.25

package/dist/agent/sanitizer.js

@@ -0,0 +1,175 @@
+/**
+ * Local content sanitizer — strips PII and secrets before sending to API.
+ *
+ * Inspired by n8n's guardrails implementation (MIT).
+ * Replaces sensitive data with category placeholders while preserving
+ * the structure and context needed for injection detection.
+ */
+const ENTITIES = [
+    // URLs (must come before email to avoid partial matches on domain parts)
+    {
+        category: "URL",
+        placeholder: "<URL>",
+        pattern: /https?:\/\/[^\s<>"{}|\\^`\[\]]+/g,
+    },
+    // Email
+    {
+        category: "EMAIL",
+        placeholder: "<EMAIL>",
+        pattern: /[A-Za-z0-9._%+\-]+@[A-Za-z0-9.\-]+\.[A-Za-z]{2,}/g,
+    },
+    // Credit Card (4 groups of 4 digits)
+    {
+        category: "CREDIT_CARD",
+        placeholder: "<CREDIT_CARD>",
+        pattern: /\b\d{4}[-\s]?\d{4}[-\s]?\d{4}[-\s]?\d{4}\b/g,
+    },
+    // SSN (###-##-####)
+    {
+        category: "SSN",
+        placeholder: "<SSN>",
+        pattern: /\b\d{3}-\d{2}-\d{4}\b/g,
+    },
+    // IBAN
+    {
+        category: "IBAN",
+        placeholder: "<IBAN>",
+        pattern: /\b[A-Z]{2}\d{2}[A-Z0-9]{4}\d{7}[A-Z0-9]{0,16}\b/g,
+    },
+    // IP Address
+    {
+        category: "IP_ADDRESS",
+        placeholder: "<IP_ADDRESS>",
+        pattern: /\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b/g,
+    },
+    // Phone numbers (US/intl formats)
+    {
+        category: "PHONE",
+        placeholder: "<PHONE>",
+        pattern: /[+]?[(]?[0-9]{3}[)]?[-\s.][0-9]{3}[-\s.][0-9]{4,6}\b/g,
+    },
+];
+// Known secret prefixes
+const SECRET_PREFIXES = [
+    "sk-",
+    "sk_",
+    "pk_",
+    "ghp_",
+    "AKIA",
+    "xox",
+    "SG.",
+    "hf_",
+    "api-",
+    "token-",
+    "secret-",
+];
+const BEARER_PATTERN = /Bearer\s+[A-Za-z0-9\-_.~+/]+=*/g;
+// Secret-like tokens: known prefix followed by alphanumeric/special chars
+const SECRET_PREFIX_PATTERN = new RegExp(`(?:${SECRET_PREFIXES.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|")})[A-Za-z0-9\\-_.~+/]{8,}=*`, "g");
+// =============================================================================
+// Shannon Entropy
+// =============================================================================
+function shannonEntropy(s) {
+    if (s.length === 0)
+        return 0;
+    const freq = new Map();
+    for (const ch of s) {
+        freq.set(ch, (freq.get(ch) ?? 0) + 1);
+    }
+    let entropy = 0;
+    for (const count of freq.values()) {
+        const p = count / s.length;
+        entropy -= p * Math.log2(p);
+    }
+    return entropy;
+}
+function collectMatches(content) {
+    const matches = [];
+    // Regex-based entities
+    for (const entity of ENTITIES) {
+        // Reset lastIndex for global regexes
+        entity.pattern.lastIndex = 0;
+        let m;
+        while ((m = entity.pattern.exec(content)) !== null) {
+            matches.push({
+                text: m[0],
+                category: entity.category,
+                placeholder: entity.placeholder,
+            });
+        }
+    }
+    // Secret prefixes
+    SECRET_PREFIX_PATTERN.lastIndex = 0;
+    let m;
+    while ((m = SECRET_PREFIX_PATTERN.exec(content)) !== null) {
+        matches.push({
+            text: m[0],
+            category: "SECRET",
+            placeholder: "<SECRET>",
+        });
+    }
+    // Bearer tokens
+    BEARER_PATTERN.lastIndex = 0;
+    while ((m = BEARER_PATTERN.exec(content)) !== null) {
+        matches.push({
+            text: m[0],
+            category: "SECRET",
+            placeholder: "<SECRET>",
+        });
+    }
+    // High-entropy tokens (catch API keys/secrets that don't have known prefixes)
+    // Look for standalone tokens that look like secrets: 20+ chars, high entropy
+    const tokenPattern = /\b[A-Za-z0-9\-_.~+/]{20,}={0,3}\b/g;
+    tokenPattern.lastIndex = 0;
+    while ((m = tokenPattern.exec(content)) !== null) {
+        const token = m[0];
+        // Skip if already matched by another pattern
+        if (matches.some((existing) => existing.text === token))
+            continue;
+        // Skip if it looks like a normal word (all lowercase alpha, no digits/special)
+        if (/^[a-z]+$/.test(token))
+            continue;
+        // High entropy threshold (typical for random keys/tokens)
+        if (shannonEntropy(token) >= 4.0) {
+            matches.push({
+                text: token,
+                category: "SECRET",
+                placeholder: "<SECRET>",
+            });
+        }
+    }
+    return matches;
+}
+// =============================================================================
+// Main Sanitizer
+// =============================================================================
+export function sanitizeContent(content) {
+    const matches = collectMatches(content);
+    if (matches.length === 0) {
+        return { sanitized: content, redactions: {}, totalRedactions: 0 };
+    }
+    // Deduplicate matches by text
+    const unique = new Map();
+    for (const match of matches) {
+        // Keep the first match for each text (preserves priority from entity order)
+        if (!unique.has(match.text)) {
+            unique.set(match.text, match);
+        }
+    }
+    // Sort by length descending — prevents partial matches corrupting longer ones
+    const sorted = [...unique.values()].sort((a, b) => b.text.length - a.text.length);
+    // Replace using split/join — safe against regex special chars in matched text
+    let sanitized = content;
+    const redactions = {};
+    for (const match of sorted) {
+        const parts = sanitized.split(match.text);
+        const count = parts.length - 1;
+        if (count > 0) {
+            sanitized = parts.join(match.placeholder);
+            redactions[match.category] = (redactions[match.category] ?? 0) + count;
+        }
+    }
+    const totalRedactions = Object.values(redactions).reduce((a, b) => a + b, 0);
+    return { sanitized, redactions, totalRedactions };
+}
+//# sourceMappingURL=sanitizer.js.map

package/dist/agent/sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.js","sourceRoot":"","sources":["../../agent/sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAcH,MAAM,QAAQ,GAAa;IACzB,yEAAyE;IACzE;QACE,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,kCAAkC;KAC5C;IACD,QAAQ;IACR;QACE,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,mDAAmD;KAC7D;IACD,qCAAqC;IACrC;QACE,QAAQ,EAAE,aAAa;QACvB,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,6CAA6C;KACvD;IACD,oBAAoB;IACpB;QACE,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,wBAAwB;KAClC;IACD,OAAO;IACP;QACE,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,kDAAkD;KAC5D;IACD,aAAa;IACb;QACE,QAAQ,EAAE,YAAY;QACtB,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,oCAAoC;KAC9C;IACD,kCAAkC;IAClC;QACE,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,uDAAuD;KACjE;CACF,CAAC;AAEF,wBAAwB;AACxB,MAAM,eAAe,GAAG;IACtB,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,QAAQ;IACR,SAAS;CACV,CAAC;AAEF,MAAM,cAAc,GAAG,iCAAiC,CAAC;AAEzD,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG,IAAI,MAAM,CACtC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAChH,GAAG,CACJ,CAAC;AAEF,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;QAC3B,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAYD,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,OAAO,GAAY,EAAE,CAAC;IAE5B,uBAAuB;IACvB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,qCAAqC;QACrC,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,qBAAqB,CAAC,SAAS,GAAG,CAAC,CAAC;IACpC,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB;IAChB,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,YAAY,GAAG,oCAAoC,CAAC;IAC1D,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,6CAA6C;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC;YAAE,SAAS;QAClE,+EAA+E;QAC/E,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACrC,0DAA0D;QAC1D,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,UAAU;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,4EAA4E;QAC5E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CACxC,CAAC;IAEF,8EAA8E;IAC9E,IAAI,SAAS,GAAG,OAAO,CAAC;IACxB,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC1C,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QACzE,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AACpD,CAAC"}

package/dist/agent/scan-activity.d.ts

@@ -0,0 +1,19 @@
+import type { ToolCallObservationRequest } from "../platform-client/types.js";
+type ScanSource = "prompt" | "content";
+type ScanAction = "allow" | "alert" | "block" | string | undefined;
+export type ScanActivityInput = {
+    source: ScanSource;
+    action: ScanAction;
+    agentId: string;
+    sessionKey?: string;
+    riskLevel?: string;
+    confidence?: number;
+    categories?: string[];
+    explanation?: string;
+    latencyMs?: number;
+    scannedToolName?: string;
+    violatingInput?: string;
+};
+export declare function buildScanActivityObservation(input: ScanActivityInput): ToolCallObservationRequest | null;
+export {};
+//# sourceMappingURL=scan-activity.d.ts.map

package/dist/agent/scan-activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-activity.d.ts","sourceRoot":"","sources":["../../agent/scan-activity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAE9E,KAAK,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AACvC,KAAK,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAEnE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,iBAAiB,GAAG,0BAA0B,GAAG,IAAI,CAmCxG"}

package/dist/agent/scan-activity.js

@@ -0,0 +1,34 @@
+export function buildScanActivityObservation(input) {
+    if (input.action !== "block" && input.action !== "alert") {
+        return null;
+    }
+    const confidencePercent = typeof input.confidence === "number"
+        ? `${Math.round(input.confidence * 100)}%`
+        : null;
+    const reasonParts = [
+        `${input.source}_scan`,
+        `action=${input.action}`,
+        input.riskLevel ? `risk=${input.riskLevel}` : null,
+        confidencePercent ? `confidence=${confidencePercent}` : null,
+        input.explanation ? `reason=${input.explanation}` : null,
+        input.source === "prompt" && input.violatingInput ? `input=${input.violatingInput}` : null,
+    ].filter((part) => !!part);
+    return {
+        agentId: input.agentId,
+        sessionKey: input.sessionKey,
+        toolName: input.source === "prompt" ? "security_prompt_scan" : "security_content_scan",
+        params: {
+            source: input.source,
+            scanAction: input.action,
+            riskLevel: input.riskLevel ?? null,
+            categories: input.categories ?? [],
+            ...(input.source === "prompt" && input.violatingInput ? { violatingInput: input.violatingInput } : {}),
+            ...(input.scannedToolName ? { scannedToolName: input.scannedToolName } : {}),
+        },
+        phase: "after",
+        blocked: true,
+        blockReason: reasonParts.join(" | "),
+        durationMs: input.latencyMs,
+    };
+}
+//# sourceMappingURL=scan-activity.js.map

package/dist/agent/scan-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-activity.js","sourceRoot":"","sources":["../../agent/scan-activity.ts"],"names":[],"mappings":"AAmBA,MAAM,UAAU,4BAA4B,CAAC,KAAwB;IACnE,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QAC5D,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG;QAC1C,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,WAAW,GAAG;QAClB,GAAG,KAAK,CAAC,MAAM,OAAO;QACtB,UAAU,KAAK,CAAC,MAAM,EAAE;QACxB,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI;QAClD,iBAAiB,CAAC,CAAC,CAAC,cAAc,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI;QAC5D,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QACxD,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI;KAC3F,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE3C,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB;QACtF,MAAM,EAAE;YACN,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;YAClC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E;QACD,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QACpC,UAAU,EAAE,KAAK,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/dist/agent/types.d.ts

@@ -0,0 +1,177 @@
+/**
+ * Type definitions for OpenGuardrails Plugin
+ */
+export type OpenClawGuardConfig = {
+    enabled?: boolean;
+    blockOnRisk?: boolean;
+    /** Optional API key override for configured Core endpoint. */
+    apiKey?: string;
+    timeoutMs?: number;
+    /** Core API URL (behavior detection).
+     *  Default: http://10.16.148.67:53666 */
+    coreUrl?: string;
+    /** Agent name for dashboard metadata */
+    agentName?: string;
+    /** Deployment plan. Set to "enterprise" for self-hosted enterprise deployment.
+     *  When "enterprise", coreUrl must point to the enterprise Core instance.
+     *  Core API calls go to the enterprise coreUrl; dashboard reports to both
+     *  local and enterprise Core for centralized security management. */
+    plan?: "enterprise";
+};
+export type AnalysisTarget = {
+    type: "message" | "tool_call" | "tool_result";
+    content: string;
+    toolName?: string;
+    toolParams?: Record<string, unknown>;
+    metadata?: Record<string, unknown>;
+};
+export type Finding = {
+    suspiciousContent: string;
+    reason: string;
+    confidence: number;
+    location?: {
+        start: number;
+        end: number;
+    };
+};
+export type AnalysisVerdict = {
+    isInjection: boolean;
+    confidence: number;
+    reason: string;
+    findings: Finding[];
+    chunksAnalyzed: number;
+};
+export type OpenGuardrailsApiResponse = {
+    ok: boolean;
+    verdict: {
+        isInjection: boolean;
+        confidence: number;
+        reason: string;
+        findings: Array<{
+            suspiciousContent: string;
+            reason: string;
+            confidence: number;
+        }>;
+    };
+    error?: string;
+};
+export type AnalysisLogEntry = {
+    id: number;
+    timestamp: string;
+    targetType: string;
+    contentLength: number;
+    chunksAnalyzed: number;
+    verdict: AnalysisVerdict;
+    durationMs: number;
+    blocked: boolean;
+};
+export type Logger = {
+    info: (msg: string) => void;
+    warn: (msg: string) => void;
+    error: (msg: string) => void;
+    debug?: (msg: string) => void;
+};
+export type SanitizeResult = {
+    sanitized: string;
+    redactions: Record<string, number>;
+    totalRedactions: number;
+};
+export type RiskLevel = "no_risk" | "low" | "medium" | "high" | "critical";
+export type AssessAction = "allow" | "alert" | "block";
+export type DetectionRiskType = "PROMPT_INJECTION" | "DATA_EXFILTRATION" | "COMMAND_EXECUTION";
+export type DetectionFinding = {
+    riskLevel: RiskLevel;
+    riskType: DetectionRiskType;
+    riskContent: string;
+    reason: string;
+};
+export type ToolChainEntry = {
+    seq: number;
+    toolName: string;
+    sanitizedParams: Record<string, string>;
+    outcome: "success" | "error" | "timeout";
+    durationMs: number;
+    resultCategory: "text_small" | "text_large" | "binary" | "empty" | "error";
+    resultSizeBytes: number;
+    dataFlowFrom?: string;
+};
+export type PendingToolCall = {
+    toolName: string;
+    params: Record<string, string>;
+};
+export type ContentInjectionFinding = {
+    category: string;
+    confidence: "high" | "medium";
+    matchedText: string;
+    pattern: string;
+};
+export type BehaviorAssessRequest = {
+    agentId: string;
+    sessionKey: string;
+    runId: string;
+    userIntent: string;
+    toolChain: ToolChainEntry[];
+    /** The tool call about to execute — Core classifies and evaluates it. */
+    pendingTool?: PendingToolCall;
+    /** Content injection findings from local regex scanner. */
+    contentFindings?: ContentInjectionFinding[];
+    context: {
+        messageHistoryLength: number;
+        recentUserMessages: string[];
+    };
+    /**
+     * Client-supplied metadata for server-side correlation.
+     * Server merges these with its own fields (sourceIp, apiKey ref, serverTimestamp)
+     * before storing in behavior_events and surfacing in the dashboard.
+     */
+    meta: {
+        pluginVersion: string;
+        clientTimestamp: string;
+    };
+};
+export type BehaviorAssessResponse = {
+    behaviorId: string;
+    riskLevel: RiskLevel;
+    anomalyTypes: string[];
+    confidence: number;
+    action: AssessAction;
+    explanation: string;
+    affectedTools: number[];
+    findings?: DetectionFinding[];
+};
+export type PromptScanRequest = {
+    agentId: string;
+    sessionKey: string;
+    runId: string;
+    prompt: string;
+    role: "user";
+    source: "message_received";
+    context: {
+        messageHistoryLength: number;
+        recentUserMessages: string[];
+        userIntent: string;
+    };
+    meta: {
+        pluginVersion: string;
+        clientTimestamp: string;
+    };
+};
+export type PromptScanFinding = {
+    riskType: DetectionRiskType | string;
+    reason: string;
+    matchedText?: string;
+    confidence?: "high" | "medium" | "low" | number;
+};
+export type PromptScanResponse = {
+    promptId: string;
+    riskLevel: RiskLevel;
+    action: AssessAction;
+    confidence: number;
+    categories: string[];
+    findings?: PromptScanFinding[];
+    explanation: string;
+    latency_ms: number;
+};
+export type { HookType, HookEvent, HookEventData, EventStreamRequest, EventStreamResponse, BeforeAgentStartData, AgentEndData, SessionStartData, SessionEndData, MessageReceivedData, MessageSendingData, MessageSentData, BeforeMessageWriteData, BeforeModelResolveData, BeforePromptBuildData, LlmInputData, LlmOutputData, BeforeToolCallData, AfterToolCallData, ToolResultPersistData, BeforeCompactionData, AfterCompactionData, BeforeResetData, SubagentSpawningData, SubagentDeliveryTargetData, SubagentSpawnedData, SubagentEndedData, GatewayStartData, GatewayStopData, } from "./hook-types.js";
+export { isBlockingHook, BLOCKING_HOOKS } from "./hook-types.js";
+//# sourceMappingURL=types.d.ts.map

package/dist/agent/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../agent/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;6CACyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;yEAGqE;IACrE,IAAI,CAAC,EAAE,YAAY,CAAC;CACrB,CAAC;AAMF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,aAAa,CAAC;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAMF,MAAM,MAAM,yBAAyB,GAAG;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE;QACP,WAAW,EAAE,OAAO,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,KAAK,CAAC;YACd,iBAAiB,EAAE,MAAM,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC;YACf,UAAU,EAAE,MAAM,CAAC;SACpB,CAAC,CAAC;KACJ,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAMF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,eAAe,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAMF,MAAM,MAAM,MAAM,GAAG;IACnB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B,CAAC;AAMF,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAMF,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAC3E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvD,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAE/F,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;IAC3E,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,yEAAyE;IACzE,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,2DAA2D;IAC3D,eAAe,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAC5C,OAAO,EAAE;QACP,oBAAoB,EAAE,MAAM,CAAC;QAC7B,kBAAkB,EAAE,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF;;;;OAIG;IACH,IAAI,EAAE;QACJ,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE;QACP,oBAAoB,EAAE,MAAM,CAAC;QAC7B,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC7B,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,IAAI,EAAE;QACJ,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAMF,YAAY,EACV,QAAQ,EACR,SAAS,EACT,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EAEnB,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/agent/types.js

@@ -0,0 +1,5 @@
+/**
+ * Type definitions for OpenGuardrails Plugin
+ */
+export { isBlockingHook, BLOCKING_HOOKS } from "./hook-types.js";
+//# sourceMappingURL=types.js.map

package/dist/agent/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../agent/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAiQH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/agent/workspace-scanner.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Workspace MD File Scanner
+ *
+ * Scans OpenClaw workspace for all .md files and categorizes them:
+ * - soul.md (agent personality)
+ * - agent.md (agent configuration)
+ * - memories/*.md (conversation memories)
+ * - heartbeat.md (task scheduler)
+ * - Other md files in workspace root
+ */
+export type FileType = "soul" | "agent" | "memory" | "task" | "skill" | "plugin" | "other";
+export interface WorkspaceFile {
+    path: string;
+    absolutePath: string;
+    content: string;
+    type: FileType;
+    sizeBytes: number;
+}
+/**
+ * Scan workspace for all .md files
+ */
+export declare function scanWorkspaceMdFiles(): Promise<WorkspaceFile[]>;
+/**
+ * Scan specific file types
+ */
+export declare function scanFilesByType(types: FileType[]): Promise<WorkspaceFile[]>;
+/**
+ * Get summary of workspace files
+ */
+export declare function getWorkspaceSummary(): Promise<{
+    totalFiles: number;
+    byType: Record<FileType, number>;
+    totalSizeBytes: number;
+}>;
+//# sourceMappingURL=workspace-scanner.d.ts.map

package/dist/agent/workspace-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-scanner.d.ts","sourceRoot":"","sources":["../../agent/workspace-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE3F,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAqED;;GAEG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CA2BrE;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAGjF;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC,CAyBD"}

package/dist/agent/workspace-scanner.js

@@ -0,0 +1,137 @@
+/**
+ * Workspace MD File Scanner
+ *
+ * Scans OpenClaw workspace for all .md files and categorizes them:
+ * - soul.md (agent personality)
+ * - agent.md (agent configuration)
+ * - memories/*.md (conversation memories)
+ * - heartbeat.md (task scheduler)
+ * - Other md files in workspace root
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { openclawHome } from "./env.js";
+/**
+ * Get OpenClaw workspace directory
+ */
+function getWorkspaceDir() {
+    return openclawHome;
+}
+/**
+ * Categorize file by path
+ */
+function categorizeFile(relativePath) {
+    const lower = relativePath.toLowerCase();
+    if (lower === "soul.md")
+        return "soul";
+    if (lower === "agent.md")
+        return "agent";
+    if (lower === "heartbeat.md")
+        return "task";
+    if (lower.startsWith("memories/") || lower.startsWith("memories\\"))
+        return "memory";
+    if (lower.startsWith("skills/") || lower.startsWith("skills\\"))
+        return "skill";
+    if (lower.startsWith("plugins/") || lower.startsWith("plugins\\"))
+        return "plugin";
+    return "other";
+}
+/**
+ * Recursively find all .md files in a directory
+ */
+async function findMdFiles(dir, baseDir) {
+    const files = [];
+    try {
+        const entries = await fs.promises.readdir(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            const fullPath = path.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                // Skip node_modules, .git, dist, build directories
+                if (["node_modules", ".git", "dist", "build", ".cache"].includes(entry.name)) {
+                    continue;
+                }
+                // Recursively scan subdirectories
+                const subFiles = await findMdFiles(fullPath, baseDir);
+                files.push(...subFiles);
+            }
+            else if (entry.isFile() && entry.name.endsWith(".md")) {
+                const relativePath = path.relative(baseDir, fullPath);
+                files.push(relativePath);
+            }
+        }
+    }
+    catch {
+        // Ignore permission errors, etc.
+    }
+    return files;
+}
+/**
+ * Read file content safely
+ */
+async function readFileSafe(filePath) {
+    try {
+        return await fs.promises.readFile(filePath, "utf-8");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Scan workspace for all .md files
+ */
+export async function scanWorkspaceMdFiles() {
+    const workspaceDir = getWorkspaceDir();
+    const files = [];
+    // Find all .md files
+    const mdFiles = await findMdFiles(workspaceDir, workspaceDir);
+    // Read each file
+    for (const relativePath of mdFiles) {
+        const absolutePath = path.join(workspaceDir, relativePath);
+        const content = await readFileSafe(absolutePath);
+        if (content === null)
+            continue; // Skip unreadable files
+        const type = categorizeFile(relativePath);
+        const sizeBytes = Buffer.byteLength(content, "utf-8");
+        files.push({
+            path: relativePath,
+            absolutePath,
+            content,
+            type,
+            sizeBytes,
+        });
+    }
+    return files;
+}
+/**
+ * Scan specific file types
+ */
+export async function scanFilesByType(types) {
+    const allFiles = await scanWorkspaceMdFiles();
+    return allFiles.filter(f => types.includes(f.type));
+}
+/**
+ * Get summary of workspace files
+ */
+export async function getWorkspaceSummary() {
+    const files = await scanWorkspaceMdFiles();
+    const byType = {
+        soul: 0,
+        agent: 0,
+        memory: 0,
+        task: 0,
+        skill: 0,
+        plugin: 0,
+        other: 0,
+    };
+    let totalSizeBytes = 0;
+    for (const file of files) {
+        byType[file.type]++;
+        totalSizeBytes += file.sizeBytes;
+    }
+    return {
+        totalFiles: files.length,
+        byType,
+        totalSizeBytes,
+    };
+}
+//# sourceMappingURL=workspace-scanner.js.map

package/dist/agent/workspace-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-scanner.js","sourceRoot":"","sources":["../../agent/workspace-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAYxC;;GAEG;AACH,SAAS,eAAe;IACtB,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,YAAoB;IAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IAEzC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC;IACzC,IAAI,KAAK,KAAK,cAAc;QAAE,OAAO,MAAM,CAAC;IAC5C,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrF,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC;IAChF,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEnF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,OAAe;IACrD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAExE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,mDAAmD;gBACnD,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7E,SAAS;gBACX,CAAC;gBAED,kCAAkC;gBAClC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACtD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YAC1B,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACtD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,KAAK,GAAoB,EAAE,CAAC;IAElC,qBAAqB;IACrB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAE9D,iBAAiB;IACjB,KAAK,MAAM,YAAY,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;QAEjD,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS,CAAC,wBAAwB;QAExD,MAAM,IAAI,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEtD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,YAAY;YAClB,YAAY;YACZ,OAAO;YACP,IAAI;YACJ,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAiB;IACrD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC9C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IAKvC,MAAM,KAAK,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAE3C,MAAM,MAAM,GAA6B;QACvC,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,CAAC;KACT,CAAC;IAEF,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,cAAc,IAAI,IAAI,CAAC,SAAS,CAAC;IACnC,CAAC;IAED,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,MAAM;QACN,cAAc;KACf,CAAC;AACJ,CAAC"}