@zhin.js/plugin-content-moderation 1.0.0

package/lib/extract.d.ts

@@ -0,0 +1,18 @@
+import type { ExtractedImage, ScanContext, TextMatch } from './types.js';
+export interface ExtractedContent {
+    readonly text: string;
+    readonly images: readonly ExtractedImage[];
+    /** Original segment list when payload was structured; undefined for plain string. */
+    readonly segments?: readonly Record<string, unknown>[];
+}
+export declare function extractFromTextAndSegments(content: string, segments: readonly unknown[] | undefined): ExtractedContent;
+export declare function extractFromOutboundPayload(payload: unknown): ExtractedContent;
+export declare function buildScanContext(input: {
+    readonly adapter?: string;
+    readonly endpoint?: string;
+    readonly conversationKind?: string;
+    readonly conversationId?: string;
+    readonly sender?: string;
+}): ScanContext;
+export declare function mergeMatches(...lists: Array<readonly TextMatch[] | undefined>): readonly TextMatch[];
+//# sourceMappingURL=extract.d.ts.map

package/lib/extract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../src/extract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEzE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACxD;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,GACvC,gBAAgB,CAQlB;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAiB7E;AA2ED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,WAAW,CAQd;AAED,wBAAgB,YAAY,CAC1B,GAAG,KAAK,EAAE,KAAK,CAAC,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC,GAChD,SAAS,SAAS,EAAE,CAgBtB"}

package/lib/extract.js

@@ -0,0 +1,121 @@
+export function extractFromTextAndSegments(content, segments) {
+    if (Array.isArray(segments) && segments.length > 0) {
+        return extractFromSegments(segments);
+    }
+    return Object.freeze({
+        text: content ?? '',
+        images: Object.freeze([]),
+    });
+}
+export function extractFromOutboundPayload(payload) {
+    if (typeof payload === 'string') {
+        return Object.freeze({
+            text: payload,
+            images: Object.freeze([]),
+        });
+    }
+    if (Array.isArray(payload)) {
+        return extractFromSegments(payload);
+    }
+    if (payload && typeof payload === 'object' && 'type' in payload) {
+        return extractFromSegments([payload]);
+    }
+    return Object.freeze({
+        text: payload == null ? '' : String(payload),
+        images: Object.freeze([]),
+    });
+}
+function extractFromSegments(segments) {
+    const texts = [];
+    const images = [];
+    const normalized = [];
+    for (let i = 0; i < segments.length; i++) {
+        const seg = segments[i];
+        if (!seg || typeof seg !== 'object')
+            continue;
+        const record = seg;
+        normalized.push(record);
+        const type = String(record.type ?? '');
+        const data = asRecord(record.data);
+        if (type === 'text') {
+            const text = typeof data.text === 'string' ? data.text : '';
+            if (text)
+                texts.push(text);
+            continue;
+        }
+        if (type === 'image') {
+            const media = asRecord(data.media);
+            const image = mediaToImage(images.length, i, media, data);
+            if (image)
+                images.push(image);
+        }
+    }
+    return Object.freeze({
+        text: texts.join(''),
+        images: Object.freeze(images),
+        segments: Object.freeze(normalized),
+    });
+}
+function mediaToImage(index, segmentIndex, media, data) {
+    // Canonical MediaRef
+    if (typeof media.kind === 'string' && typeof media.value === 'string') {
+        const mime = typeof media.mime_type === 'string' ? media.mime_type : undefined;
+        if (media.kind === 'url') {
+            return Object.freeze({ index, segmentIndex, url: media.value, mime });
+        }
+        if (media.kind === 'base64') {
+            return Object.freeze({ index, segmentIndex, base64: media.value, mime });
+        }
+        if (media.kind === 'path') {
+            return Object.freeze({ index, segmentIndex, path: media.value, mime });
+        }
+        // kind=file: opaque platform ref — no fetchable URL
+        return Object.freeze({ index, segmentIndex, mime });
+    }
+    // Legacy wire fields
+    if (typeof data.url === 'string' && data.url) {
+        return Object.freeze({ index, segmentIndex, url: data.url });
+    }
+    if (typeof data.base64 === 'string' && data.base64) {
+        return Object.freeze({ index, segmentIndex, base64: data.base64 });
+    }
+    if (typeof data.file === 'string' && data.file) {
+        const file = data.file;
+        if (/^https?:\/\//i.test(file)) {
+            return Object.freeze({ index, segmentIndex, url: file });
+        }
+        return Object.freeze({ index, segmentIndex, path: file });
+    }
+    return null;
+}
+export function buildScanContext(input) {
+    return Object.freeze({
+        adapter: input.adapter ?? '',
+        endpoint: input.endpoint ?? '',
+        conversationKind: input.conversationKind ?? '',
+        conversationId: input.conversationId ?? '',
+        ...(input.sender != null ? { sender: input.sender } : {}),
+    });
+}
+export function mergeMatches(...lists) {
+    const out = [];
+    for (const list of lists) {
+        if (!list)
+            continue;
+        for (const m of list) {
+            if (Number.isFinite(m.start)
+                && Number.isFinite(m.end)
+                && m.end > m.start
+                && m.start >= 0) {
+                out.push({ start: Math.trunc(m.start), end: Math.trunc(m.end) });
+            }
+        }
+    }
+    return Object.freeze(out);
+}
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : {};
+}
+//# sourceMappingURL=extract.js.map

package/lib/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../src/extract.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,QAAwC;IAExC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,OAAO,IAAI,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAsB,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAsB,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;QAChE,OAAO,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAsB,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,QAA4B;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,UAAU,GAA8B,EAAE,CAAC;IAEjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,MAAM,GAAG,GAA8B,CAAC;QAC9C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEnC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1D,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,KAAa,EACb,YAAoB,EACpB,KAA8B,EAC9B,IAA6B;IAE7B,qBAAqB;IACrB,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/E,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,oDAAoD;QACpD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,qBAAqB;IACrB,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAMhC;IACC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;QAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,EAAE;QAC9C,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;QAC1C,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAAG,KAA8C;IAEjD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IACE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;mBACrB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;mBACtB,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK;mBACf,CAAC,CAAC,KAAK,IAAI,CAAC,EACf,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/lib/index.d.ts

@@ -0,0 +1,13 @@
+export { DEFAULT_ACTIONS, DEFAULT_MODERATION_CONFIG, resolveModerationConfig, } from './config.js';
+export { shouldBypassInbound, shouldBypassOutbound, } from './bypass.js';
+export { extractFromOutboundPayload, extractFromTextAndSegments, buildScanContext, } from './extract.js';
+export { redactText, redactOutboundPayload, } from './redact.js';
+export { ModerationEngine, getModerationEngine, resetModerationEngine, mergeResults, } from './engine.js';
+export type { Severity, Action, OnErrorPolicy, Direction, ModerationConfig, ProviderResult, MergedResult, ScanInput, SourceConfig, } from './types.js';
+export { maxSeverity, SEVERITY_RANK } from './types.js';
+export { LocalLexiconProvider, findMatches, findGradedMatches, loadWords, loadLexiconEntries, parseWordFile, parseWordLine, } from './providers/local-lexicon.js';
+export { BUILTIN_LEXICON, mergeLexiconEntries } from './providers/builtin-lexicon.js';
+export type { LexiconEntry, LexiconSeverity } from './providers/builtin-lexicon.js';
+export { HttpModerationProvider, parseHttpResult, isPublicHttpUrl } from './providers/http.js';
+export { createProviders } from './providers/registry.js';
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,qBAAqB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,QAAQ,EACR,MAAM,EACN,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,SAAS,EACT,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,SAAS,EACT,kBAAkB,EAClB,aAAa,EACb,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACtF,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC"}

package/lib/index.js

@@ -0,0 +1,11 @@
+export { DEFAULT_ACTIONS, DEFAULT_MODERATION_CONFIG, resolveModerationConfig, } from './config.js';
+export { shouldBypassInbound, shouldBypassOutbound, } from './bypass.js';
+export { extractFromOutboundPayload, extractFromTextAndSegments, buildScanContext, } from './extract.js';
+export { redactText, redactOutboundPayload, } from './redact.js';
+export { ModerationEngine, getModerationEngine, resetModerationEngine, mergeResults, } from './engine.js';
+export { maxSeverity, SEVERITY_RANK } from './types.js';
+export { LocalLexiconProvider, findMatches, findGradedMatches, loadWords, loadLexiconEntries, parseWordFile, parseWordLine, } from './providers/local-lexicon.js';
+export { BUILTIN_LEXICON, mergeLexiconEntries } from './providers/builtin-lexicon.js';
+export { HttpModerationProvider, parseHttpResult, isPublicHttpUrl } from './providers/http.js';
+export { createProviders } from './providers/registry.js';
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,qBAAqB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,YAAY,GACb,MAAM,aAAa,CAAC;AAYrB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,SAAS,EACT,kBAAkB,EAClB,aAAa,EACb,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAEtF,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC"}

package/lib/providers/builtin-lexicon.d.ts

@@ -0,0 +1,15 @@
+import type { Severity } from '../types.js';
+export type LexiconSeverity = Exclude<Severity, 'pass'>;
+export interface LexiconEntry {
+    readonly word: string;
+    readonly severity: LexiconSeverity;
+}
+/**
+ * Built-in graded lexicon for IM bots (starter set).
+ * Users can extend / override via `words` / `wordFiles`; same word keeps the
+ * higher severity when merging.
+ */
+export declare const BUILTIN_LEXICON: readonly LexiconEntry[];
+/** Merge entries; duplicate words keep the higher severity. */
+export declare function mergeLexiconEntries(...lists: Array<readonly LexiconEntry[] | undefined>): readonly LexiconEntry[];
+//# sourceMappingURL=builtin-lexicon.d.ts.map

package/lib/providers/builtin-lexicon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-lexicon.d.ts","sourceRoot":"","sources":["../../src/providers/builtin-lexicon.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAExD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAqGjD,CAAC;AAMH,+DAA+D;AAC/D,wBAAgB,mBAAmB,CACjC,GAAG,KAAK,EAAE,KAAK,CAAC,SAAS,YAAY,EAAE,GAAG,SAAS,CAAC,GACnD,SAAS,YAAY,EAAE,CAwBzB"}

package/lib/providers/builtin-lexicon.js

@@ -0,0 +1,133 @@
+/**
+ * Built-in graded lexicon for IM bots (starter set).
+ * Users can extend / override via `words` / `wordFiles`; same word keeps the
+ * higher severity when merging.
+ */
+export const BUILTIN_LEXICON = Object.freeze([
+    // —— low：轻度不当 / 骚扰语气 ——
+    entry('脑残', 'low'),
+    entry('智障', 'low'),
+    entry('废物', 'low'),
+    entry('垃圾人', 'low'),
+    entry('滚蛋', 'low'),
+    entry('去死', 'low'),
+    entry('找死', 'low'),
+    entry('闭嘴', 'low'),
+    entry('恶心', 'low'),
+    entry('变态', 'low'),
+    // —— medium：辱骂 / 粗口 ——
+    entry('傻逼', 'medium'),
+    entry('傻B', 'medium'),
+    entry('傻b', 'medium'),
+    entry('傻叉', 'medium'),
+    entry('操逼', 'medium'),
+    entry('草泥马', 'medium'),
+    entry('妈的', 'medium'),
+    entry('他妈的', 'medium'),
+    entry('你妈的', 'medium'),
+    entry('卧槽', 'medium'),
+    entry('日你', 'medium'),
+    entry('操你', 'medium'),
+    entry('操他', 'medium'),
+    entry('狗日的', 'medium'),
+    entry('混蛋', 'medium'),
+    entry('王八蛋', 'medium'),
+    entry('白痴', 'medium'),
+    entry('去死吧', 'medium'),
+    // —— high：色情 / 引流诈骗常见话术 ——
+    entry('约炮', 'high'),
+    entry('裸聊', 'high'),
+    entry('色情', 'high'),
+    entry('黄色网站', 'high'),
+    entry('看片加', 'high'),
+    entry('援交', 'high'),
+    entry('包养', 'high'),
+    entry('上门服务', 'high'),
+    entry('加微信领', 'high'),
+    entry('刷单返利', 'high'),
+    entry('刷单赚钱', 'high'),
+    entry('日赚千元', 'high'),
+    entry('稳赚不赔', 'high'),
+    entry('内幕消息', 'high'),
+    entry('代开发票', 'high'),
+    entry('办假证', 'high'),
+    entry('假钞', 'high'),
+    entry('色情服务', 'high'),
+    entry('一夜情', 'high'),
+    // —— high：中国政治敏感（常见审查词，可按业务在配置中覆盖/关闭内置）——
+    entry('台独', 'high'),
+    entry('藏独', 'high'),
+    entry('疆独', 'high'),
+    entry('港独', 'high'),
+    entry('分裂国家', 'high'),
+    entry('民族分裂', 'high'),
+    entry('法轮功', 'high'),
+    entry('法轮大法', 'high'),
+    entry('六四事件', 'high'),
+    entry('六四屠城', 'high'),
+    entry('天安门事件', 'high'),
+    entry('坦克人', 'high'),
+    entry('学潮动乱', 'high'),
+    entry('政治风波', 'high'),
+    entry('打倒共产党', 'high'),
+    entry('推翻共产党', 'high'),
+    entry('颠覆国家政权', 'high'),
+    entry('占中运动', 'high'),
+    entry('反送中', 'high'),
+    entry('香港独立', 'high'),
+    entry('台湾独立', 'high'),
+    entry('西藏独立', 'high'),
+    entry('新疆独立', 'high'),
+    entry('东突厥斯坦', 'high'),
+    entry('民运人士', 'high'),
+    entry('零八宪章', 'high'),
+    entry('煽动颠覆', 'high'),
+    entry('颜色革命', 'high'),
+    entry('大跃进饿死', 'high'),
+    entry('文革迫害', 'high'),
+    // —— critical：毒品 / 极端违法 / 煽动暴力颠覆 ——
+    entry('冰毒', 'critical'),
+    entry('海洛因', 'critical'),
+    entry('可卡因', 'critical'),
+    entry('大麻走私', 'critical'),
+    entry('售卖枪支', 'critical'),
+    entry('买卖枪支', 'critical'),
+    entry('制毒', 'critical'),
+    entry('贩毒', 'critical'),
+    entry('炸药制作', 'critical'),
+    entry('儿童色情', 'critical'),
+    entry('幼女援交', 'critical'),
+    entry('武装暴动', 'critical'),
+    entry('暴力推翻政权', 'critical'),
+    entry('刺杀国家领导人', 'critical'),
+]);
+function entry(word, severity) {
+    return Object.freeze({ word, severity });
+}
+/** Merge entries; duplicate words keep the higher severity. */
+export function mergeLexiconEntries(...lists) {
+    const map = new Map();
+    const rank = {
+        low: 1,
+        medium: 2,
+        high: 3,
+        critical: 4,
+    };
+    for (const list of lists) {
+        if (!list)
+            continue;
+        for (const item of list) {
+            const word = item.word.trim();
+            if (!word)
+                continue;
+            const prev = map.get(word);
+            if (!prev || rank[item.severity] > rank[prev]) {
+                map.set(word, item.severity);
+            }
+        }
+    }
+    return Object.freeze([...map.entries()]
+        .map(([word, severity]) => Object.freeze({ word, severity }))
+        .sort((a, b) => b.word.length - a.word.length || a.word.localeCompare(b.word)));
+}
+//# sourceMappingURL=builtin-lexicon.js.map

package/lib/providers/builtin-lexicon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-lexicon.js","sourceRoot":"","sources":["../../src/providers/builtin-lexicon.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAA4B,MAAM,CAAC,MAAM,CAAC;IACpE,wBAAwB;IACxB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAClB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAClB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAClB,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;IACnB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAClB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAClB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAClB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAClB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAClB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAElB,uBAAuB;IACvB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;IACtB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;IACtB,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;IACtB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;IACtB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;IACtB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;IAEtB,2BAA2B;IAC3B,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC;IAEpB,0CAA0C;IAC1C,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IAErB,oCAAoC;IACpC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC;IACvB,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC;IACxB,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC;IACxB,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;IACzB,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;IACzB,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;IACzB,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC;IACvB,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC;IACvB,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;IACzB,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;IACzB,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;IACzB,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;IACzB,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC3B,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC;CAC7B,CAAC,CAAC;AAEH,SAAS,KAAK,CAAC,IAAY,EAAE,QAAyB;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,mBAAmB,CACjC,GAAG,KAAiD;IAEpD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC/C,MAAM,IAAI,GAAoC;QAC5C,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;SAC5D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CACjF,CAAC;AACJ,CAAC"}

package/lib/providers/http.d.ts

@@ -0,0 +1,14 @@
+import type { HttpSourceConfig, ProviderResult, ScanInput } from '../types.js';
+import type { ModerationProvider } from './types.js';
+export interface HttpProviderDeps {
+    readonly fetch?: typeof fetch;
+}
+export declare class HttpModerationProvider implements ModerationProvider {
+    #private;
+    readonly id: string;
+    constructor(config: HttpSourceConfig, deps?: HttpProviderDeps);
+    scan(input: ScanInput): Promise<ProviderResult>;
+}
+export declare function isPublicHttpUrl(url: string): boolean;
+export declare function parseHttpResult(sourceId: string, body: unknown): ProviderResult;
+//# sourceMappingURL=http.d.ts.map

package/lib/providers/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/providers/http.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,gBAAgB,EAChB,cAAc,EACd,SAAS,EAGV,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AAED,qBAAa,sBAAuB,YAAW,kBAAkB;;IAC/D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAIR,MAAM,EAAE,gBAAgB,EAAE,IAAI,GAAE,gBAAqB;IAM3D,IAAI,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC;CAmFtD;AAmDD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOpD;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,cAAc,CAkB/E"}

package/lib/providers/http.js

@@ -0,0 +1,191 @@
+import { readFileSync } from 'node:fs';
+import { isSeverity } from '../types.js';
+export class HttpModerationProvider {
+    id;
+    #config;
+    #fetch;
+    constructor(config, deps = {}) {
+        this.id = config.id;
+        this.#config = config;
+        this.#fetch = deps.fetch ?? globalThis.fetch.bind(globalThis);
+    }
+    async scan(input) {
+        try {
+            const images = await prepareImages(input.images, this.#config.forceUpload, this.#fetch);
+            const useMultipart = images.some((img) => img.mode === 'upload');
+            const controller = new AbortController();
+            const timer = setTimeout(() => controller.abort(), this.#config.timeoutMs);
+            try {
+                const response = useMultipart
+                    ? await this.#postMultipart(input, images, controller.signal)
+                    : await this.#postJson(input, images, controller.signal);
+                if (!response.ok) {
+                    throw new Error(`HTTP ${response.status}`);
+                }
+                const body = await response.json();
+                return parseHttpResult(this.id, body);
+            }
+            finally {
+                clearTimeout(timer);
+            }
+        }
+        catch (error) {
+            return Object.freeze({
+                sourceId: this.id,
+                severity: this.#config.onError === 'closed' ? 'critical' : 'pass',
+                error: true,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    async #postJson(input, images, signal) {
+        const body = {
+            text: input.text,
+            images: images.map((img) => (img.mode === 'url'
+                ? { url: img.url }
+                : { base64: img.base64, mime: img.mime })),
+            direction: input.direction,
+            context: input.context,
+        };
+        return this.#fetch(this.#config.url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                ...this.#config.headers,
+            },
+            body: JSON.stringify(body),
+            signal,
+        });
+    }
+    async #postMultipart(input, images, signal) {
+        const form = new FormData();
+        form.set('text', input.text);
+        form.set('direction', input.direction);
+        form.set('context', JSON.stringify(input.context));
+        for (const [i, img] of images.entries()) {
+            if (img.mode === 'url') {
+                form.append('images', JSON.stringify({ index: i, url: img.url }));
+            }
+            else {
+                const bytes = Uint8Array.from(Buffer.from(img.base64, 'base64'));
+                const mime = img.mime || 'application/octet-stream';
+                form.append('images', new Blob([bytes], { type: mime }), `image-${i}.${extensionForMime(mime)}`);
+            }
+        }
+        return this.#fetch(this.#config.url, {
+            method: 'POST',
+            headers: { ...this.#config.headers },
+            body: form,
+            signal,
+        });
+    }
+}
+async function prepareImages(images, forceUpload, fetchImpl) {
+    const out = [];
+    for (const image of images) {
+        if (!forceUpload && image.url && isPublicHttpUrl(image.url)) {
+            out.push({ mode: 'url', url: image.url });
+            continue;
+        }
+        if (image.base64) {
+            out.push({ mode: 'upload', base64: image.base64, mime: image.mime });
+            continue;
+        }
+        if (image.path) {
+            const buf = readFileSync(image.path);
+            out.push({
+                mode: 'upload',
+                base64: buf.toString('base64'),
+                mime: image.mime,
+            });
+            continue;
+        }
+        if (image.url) {
+            const downloaded = await downloadAsBase64(image.url, fetchImpl);
+            out.push({ mode: 'upload', base64: downloaded.base64, mime: downloaded.mime ?? image.mime });
+            continue;
+        }
+        // Opaque file refs: skip (cannot fetch without platform API)
+    }
+    return out;
+}
+async function downloadAsBase64(url, fetchImpl) {
+    const response = await fetchImpl(url);
+    if (!response.ok)
+        throw new Error(`download failed: HTTP ${response.status}`);
+    const mime = response.headers.get('content-type') ?? undefined;
+    const buf = Buffer.from(await response.arrayBuffer());
+    return { base64: buf.toString('base64'), mime };
+}
+export function isPublicHttpUrl(url) {
+    try {
+        const parsed = new URL(url);
+        return parsed.protocol === 'http:' || parsed.protocol === 'https:';
+    }
+    catch {
+        return false;
+    }
+}
+export function parseHttpResult(sourceId, body) {
+    if (!body || typeof body !== 'object') {
+        throw new Error('invalid moderation response');
+    }
+    const record = body;
+    if (!isSeverity(record.severity)) {
+        throw new Error('invalid severity in moderation response');
+    }
+    const severity = record.severity;
+    const matches = parseMatches(record.matches);
+    const flaggedImageIndexes = parseFlaggedImages(record.images);
+    return Object.freeze({
+        sourceId,
+        severity,
+        ...(matches.length ? { matches } : {}),
+        ...(flaggedImageIndexes.length ? { flaggedImageIndexes } : {}),
+        ...(typeof record.reason === 'string' ? { reason: record.reason } : {}),
+    });
+}
+function parseMatches(raw) {
+    if (!Array.isArray(raw))
+        return Object.freeze([]);
+    const out = [];
+    for (const item of raw) {
+        if (!item || typeof item !== 'object')
+            continue;
+        const start = item.start;
+        const end = item.end;
+        if (typeof start !== 'number' || typeof end !== 'number')
+            continue;
+        if (!(end > start) || start < 0)
+            continue;
+        out.push({ start: Math.trunc(start), end: Math.trunc(end) });
+    }
+    return Object.freeze(out);
+}
+function parseFlaggedImages(raw) {
+    if (!Array.isArray(raw))
+        return Object.freeze([]);
+    const out = [];
+    for (const item of raw) {
+        if (!item || typeof item !== 'object')
+            continue;
+        const index = item.index;
+        const flagged = item.flagged;
+        if (typeof index === 'number' && Number.isFinite(index) && flagged === true) {
+            out.push(Math.trunc(index));
+        }
+    }
+    return Object.freeze(out);
+}
+function extensionForMime(mime) {
+    if (mime.includes('png'))
+        return 'png';
+    if (mime.includes('jpeg') || mime.includes('jpg'))
+        return 'jpg';
+    if (mime.includes('gif'))
+        return 'gif';
+    if (mime.includes('webp'))
+        return 'webp';
+    return 'bin';
+}
+//# sourceMappingURL=http.js.map

package/lib/providers/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/providers/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AASvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,MAAM,OAAO,sBAAsB;IACxB,EAAE,CAAS;IACX,OAAO,CAAmB;IAC1B,MAAM,CAAe;IAE9B,YAAY,MAAwB,EAAE,OAAyB,EAAE;QAC/D,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAgB;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACxF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YACjE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,YAAY;oBAC3B,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC;oBAC7D,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC7C,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAa,CAAC;gBAC9C,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACxC,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,QAAQ,EAAE,IAAI,CAAC,EAAE;gBACjB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAmB,CAAC,CAAC,CAAC,MAAe;gBACnF,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAAgB,EAChB,MAAgC,EAChC,MAAmB;QAEnB,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAC1B,GAAG,CAAC,IAAI,KAAK,KAAK;gBAChB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;gBAClB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAC3C,CAAC;YACF,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO;aACxB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAgB,EAChB,MAAgC,EAChC,MAAmB;QAEnB,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACjE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,0BAA0B,CAAC;gBACpD,IAAI,CAAC,MAAM,CACT,QAAQ,EACR,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EACjC,SAAS,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CACvC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YACpC,IAAI,EAAE,IAAI;YACV,MAAM;SACP,CAAC,CAAC;IACL,CAAC;CACF;AAMD,KAAK,UAAU,aAAa,CAC1B,MAAiC,EACjC,WAAoB,EACpB,SAAuB;IAEvB,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QACD,6DAA6D;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,GAAW,EACX,SAAuB;IAEvB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAa;IAC7D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAoB,CAAC;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,QAAQ;QACR,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,KAAK,GAAI,IAA4B,CAAC,KAAK,CAAC;QAClD,MAAM,GAAG,GAAI,IAA0B,CAAC,GAAG,CAAC;QAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACnE,IAAI,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,SAAS;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,KAAK,GAAI,IAA4B,CAAC,KAAK,CAAC;QAClD,MAAM,OAAO,GAAI,IAA8B,CAAC,OAAO,CAAC;QACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC5E,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/lib/providers/local-lexicon.d.ts

@@ -0,0 +1,28 @@
+import { type LocalSourceConfig, type ProviderResult, type ScanInput, type TextMatch } from '../types.js';
+import type { LexiconEntry, LexiconSeverity } from './builtin-lexicon.js';
+import type { ModerationProvider } from './types.js';
+export interface GradedMatch extends TextMatch {
+    readonly word: string;
+    readonly severity: LexiconSeverity;
+}
+export declare class LocalLexiconProvider implements ModerationProvider {
+    #private;
+    readonly id: string;
+    constructor(config: LocalSourceConfig, cwd?: string);
+    scan(input: ScanInput): Promise<ProviderResult>;
+}
+export declare function loadLexiconEntries(config: LocalSourceConfig, cwd: string): readonly LexiconEntry[];
+/** @deprecated Use loadLexiconEntries; kept for tests that only need bare words. */
+export declare function loadWords(config: LocalSourceConfig, cwd: string): string[];
+export declare function findMatches(text: string, words: readonly string[]): readonly TextMatch[];
+export declare function findGradedMatches(text: string, entries: readonly LexiconEntry[]): readonly GradedMatch[];
+/**
+ * Word-file lines:
+ * - `# comment`
+ * - `word`                         → defaultSeverity
+ * - `severity:word`                 → graded（low|medium|high|critical）
+ * - `word|severity`                 → graded
+ */
+export declare function parseWordFile(content: string, defaultSeverity: LexiconSeverity): LexiconEntry[];
+export declare function parseWordLine(line: string, defaultSeverity: LexiconSeverity): LexiconEntry | null;
+//# sourceMappingURL=local-lexicon.d.ts.map

package/lib/providers/local-lexicon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-lexicon.d.ts","sourceRoot":"","sources":["../../src/providers/local-lexicon.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AACvH,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC;AAED,qBAAa,oBAAqB,YAAW,kBAAkB;;IAC7D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAIR,MAAM,EAAE,iBAAiB,EAAE,GAAG,GAAE,MAAsB;IAM5D,IAAI,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC;CA4BtD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,YAAY,EAAE,CAUlG;AAED,oFAAoF;AACpF,wBAAgB,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAE1E;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,SAAS,EAAE,CAGxF;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,SAAS,WAAW,EAAE,CAoBxB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,eAAe,GAC/B,YAAY,EAAE,CAShB;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,eAAe,GAC/B,YAAY,GAAG,IAAI,CAgBrB"}