@zhin.js/plugin-content-moderation 1.0.0

package/lib/providers/local-lexicon.js

@@ -0,0 +1,129 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { maxSeverity } from '../types.js';
+import { BUILTIN_LEXICON, mergeLexiconEntries } from './builtin-lexicon.js';
+export class LocalLexiconProvider {
+    id;
+    #entries;
+    #onError;
+    constructor(config, cwd = process.cwd()) {
+        this.id = config.id;
+        this.#onError = config.onError;
+        this.#entries = Object.freeze(loadLexiconEntries(config, cwd));
+    }
+    async scan(input) {
+        try {
+            const matches = findGradedMatches(input.text, this.#entries);
+            if (matches.length === 0) {
+                return Object.freeze({
+                    sourceId: this.id,
+                    severity: 'pass',
+                });
+            }
+            let severity = matches[0].severity;
+            for (const match of matches) {
+                severity = maxSeverity(severity, match.severity);
+            }
+            return Object.freeze({
+                sourceId: this.id,
+                severity,
+                matches: Object.freeze(matches.map(({ start, end }) => ({ start, end }))),
+                reason: `lexicon hit (${matches.length}, max=${severity})`,
+            });
+        }
+        catch (error) {
+            return Object.freeze({
+                sourceId: this.id,
+                severity: this.#onError === 'closed' ? 'critical' : 'pass',
+                error: true,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+}
+export function loadLexiconEntries(config, cwd) {
+    const custom = [];
+    for (const item of config.words) {
+        custom.push({ word: item.word, severity: item.severity });
+    }
+    for (const file of config.wordFiles) {
+        custom.push(...parseWordFile(readFileSync(resolve(cwd, file), 'utf8'), config.defaultSeverity));
+    }
+    const builtin = config.includeBuiltin ? BUILTIN_LEXICON : undefined;
+    return mergeLexiconEntries(builtin, custom);
+}
+/** @deprecated Use loadLexiconEntries; kept for tests that only need bare words. */
+export function loadWords(config, cwd) {
+    return loadLexiconEntries(config, cwd).map((e) => e.word);
+}
+export function findMatches(text, words) {
+    const entries = words.map((word) => ({ word, severity: 'high' }));
+    return findGradedMatches(text, entries).map(({ start, end }) => ({ start, end }));
+}
+export function findGradedMatches(text, entries) {
+    if (!text || entries.length === 0)
+        return Object.freeze([]);
+    const matches = [];
+    for (const entry of entries) {
+        if (!entry.word)
+            continue;
+        let from = 0;
+        while (from < text.length) {
+            const idx = text.indexOf(entry.word, from);
+            if (idx < 0)
+                break;
+            matches.push({
+                start: idx,
+                end: idx + entry.word.length,
+                word: entry.word,
+                severity: entry.severity,
+            });
+            from = idx + entry.word.length;
+        }
+    }
+    matches.sort((a, b) => a.start - b.start || b.end - a.end);
+    return Object.freeze(matches);
+}
+/**
+ * Word-file lines:
+ * - `# comment`
+ * - `word`                         → defaultSeverity
+ * - `severity:word`                 → graded（low|medium|high|critical）
+ * - `word|severity`                 → graded
+ */
+export function parseWordFile(content, defaultSeverity) {
+    const out = [];
+    for (const line of content.split(/\r?\n/u)) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        const parsed = parseWordLine(trimmed, defaultSeverity);
+        if (parsed)
+            out.push(parsed);
+    }
+    return out;
+}
+export function parseWordLine(line, defaultSeverity) {
+    const pipe = line.indexOf('|');
+    if (pipe > 0) {
+        const word = line.slice(0, pipe).trim();
+        const severity = parseSeverityToken(line.slice(pipe + 1).trim()) ?? defaultSeverity;
+        return word ? { word, severity } : null;
+    }
+    const colon = line.indexOf(':');
+    if (colon > 0) {
+        const maybeSeverity = parseSeverityToken(line.slice(0, colon).trim());
+        if (maybeSeverity) {
+            const word = line.slice(colon + 1).trim();
+            return word ? { word, severity: maybeSeverity } : null;
+        }
+    }
+    return { word: line, severity: defaultSeverity };
+}
+function parseSeverityToken(value) {
+    if (value === 'low' || value === 'medium' || value === 'high' || value === 'critical') {
+        return value;
+    }
+    return null;
+}
+//# sourceMappingURL=local-lexicon.js.map

package/lib/providers/local-lexicon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-lexicon.js","sourceRoot":"","sources":["../../src/providers/local-lexicon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAA+E,MAAM,aAAa,CAAC;AAEvH,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAQ5E,MAAM,OAAO,oBAAoB;IACtB,EAAE,CAAS;IACX,QAAQ,CAA0B;IAClC,QAAQ,CAA+B;IAEhD,YAAY,MAAyB,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;QAChE,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAgB;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,QAAQ,EAAE,IAAI,CAAC,EAAE;oBACjB,QAAQ,EAAE,MAAe;iBAC1B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAAQ,GAAoB,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC;YACrD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAoB,CAAC;YACtE,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,QAAQ,EAAE,IAAI,CAAC,EAAE;gBACjB,QAAQ;gBACR,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBACzE,MAAM,EAAE,gBAAgB,OAAO,CAAC,MAAM,SAAS,QAAQ,GAAG;aAC3D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,QAAQ,EAAE,IAAI,CAAC,EAAE;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAmB,CAAC,CAAC,CAAC,MAAe;gBAC5E,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAyB,EAAE,GAAW;IACvE,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,OAAO,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,SAAS,CAAC,MAAyB,EAAE,GAAW;IAC9D,OAAO,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAwB;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,OAAgC;IAEhC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,SAAS;QAC1B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,GAAG,GAAG,CAAC;gBAAE,MAAM;YACnB,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,GAAG;gBACV,GAAG,EAAE,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM;gBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YACH,IAAI,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,eAAgC;IAEhC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACvD,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,eAAgC;IAEhC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,eAAe,CAAC;QACpF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/lib/providers/registry.d.ts

@@ -0,0 +1,8 @@
+import type { ModerationConfig } from '../types.js';
+import type { ModerationProvider } from './types.js';
+export interface CreateProvidersOptions {
+    readonly cwd?: string;
+    readonly fetch?: typeof fetch;
+}
+export declare function createProviders(config: ModerationConfig, options?: CreateProvidersOptions): readonly ModerationProvider[];
+//# sourceMappingURL=registry.d.ts.map

package/lib/providers/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/providers/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAgB,MAAM,aAAa,CAAC;AAGlE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,sBAA2B,GACnC,SAAS,kBAAkB,EAAE,CAS/B"}

package/lib/providers/registry.js

@@ -0,0 +1,24 @@
+import { HttpModerationProvider } from './http.js';
+import { LocalLexiconProvider } from './local-lexicon.js';
+export function createProviders(config, options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const providers = [];
+    for (const source of config.sources) {
+        if (!source.enabled)
+            continue;
+        const provider = createProvider(source, cwd, options.fetch);
+        if (provider)
+            providers.push(provider);
+    }
+    return Object.freeze(providers);
+}
+function createProvider(source, cwd, fetchImpl) {
+    if (source.type === 'local') {
+        return new LocalLexiconProvider(source, cwd);
+    }
+    if (source.type === 'http') {
+        return new HttpModerationProvider(source, { fetch: fetchImpl });
+    }
+    return null;
+}
+//# sourceMappingURL=registry.js.map

package/lib/providers/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/providers/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAQ1D,MAAM,UAAU,eAAe,CAC7B,MAAwB,EACxB,UAAkC,EAAE;IAEpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,SAAS;QAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CACrB,MAAoB,EACpB,GAAW,EACX,SAAwB;IAExB,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,IAAI,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,IAAI,sBAAsB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/lib/providers/types.d.ts

@@ -0,0 +1,6 @@
+import type { ProviderResult, ScanInput } from '../types.js';
+export interface ModerationProvider {
+    readonly id: string;
+    scan(input: ScanInput): Promise<ProviderResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/providers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/providers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACjD"}

package/lib/providers/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/lib/providers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/providers/types.ts"],"names":[],"mappings":""}

package/lib/redact.d.ts

@@ -0,0 +1,18 @@
+import type { ExtractedContent } from './extract.js';
+import type { ExtractedImage, TextMatch } from './types.js';
+export interface RedactOptions {
+    readonly maskChar: string;
+    readonly matches: readonly TextMatch[];
+    readonly flaggedImageIndexes: readonly number[];
+}
+/**
+ * Mask matched spans in text. When there are no spans but redact is requested
+ * for non-empty text, replace the whole string with mask chars.
+ */
+export declare function redactText(text: string, matches: readonly TextMatch[], maskChar: string): string;
+/**
+ * Apply text masking + remove flagged image segments from outbound payload.
+ */
+export declare function redactOutboundPayload(payload: unknown, extracted: ExtractedContent, options: RedactOptions): unknown;
+export declare function flaggedImagesFromIndexes(images: readonly ExtractedImage[], indexes: readonly number[]): readonly ExtractedImage[];
+//# sourceMappingURL=redact.d.ts.map

package/lib/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,SAAS,SAAS,EAAE,EAC7B,QAAQ,EAAE,MAAM,GACf,MAAM,CAgBR;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE,aAAa,GACrB,OAAO,CAyBT;AA6DD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,SAAS,cAAc,EAAE,CAG3B"}

package/lib/redact.js

@@ -0,0 +1,102 @@
+/**
+ * Mask matched spans in text. When there are no spans but redact is requested
+ * for non-empty text, replace the whole string with mask chars.
+ */
+export function redactText(text, matches, maskChar) {
+    const ch = maskChar.slice(0, 1) || '*';
+    if (!text)
+        return text;
+    if (!matches.length) {
+        const len = Math.max(3, Math.min(text.length, 16));
+        return ch.repeat(len);
+    }
+    const chars = [...text];
+    const sorted = [...matches].sort((a, b) => a.start - b.start);
+    for (const match of sorted) {
+        const start = Math.max(0, Math.min(chars.length, match.start));
+        const end = Math.max(start, Math.min(chars.length, match.end));
+        for (let i = start; i < end; i++)
+            chars[i] = ch;
+    }
+    return chars.join('');
+}
+/**
+ * Apply text masking + remove flagged image segments from outbound payload.
+ */
+export function redactOutboundPayload(payload, extracted, options) {
+    const flagged = new Set(options.flaggedImageIndexes);
+    const flaggedSegmentIndexes = new Set(extracted.images
+        .filter((img) => flagged.has(img.index) && img.segmentIndex != null)
+        .map((img) => img.segmentIndex));
+    if (typeof payload === 'string') {
+        return redactText(payload, options.matches, options.maskChar);
+    }
+    if (Array.isArray(payload)) {
+        return redactSegmentList(payload, options, flaggedSegmentIndexes);
+    }
+    if (payload && typeof payload === 'object' && 'type' in payload) {
+        const list = redactSegmentList([payload], options, flaggedSegmentIndexes);
+        return list.length === 1 ? list[0] : list;
+    }
+    if (extracted.text) {
+        return redactText(extracted.text, options.matches, options.maskChar);
+    }
+    return payload;
+}
+function redactSegmentList(segments, options, flaggedSegmentIndexes) {
+    const out = [];
+    let textCursor = 0;
+    for (let i = 0; i < segments.length; i++) {
+        const seg = segments[i];
+        if (!seg || typeof seg !== 'object') {
+            out.push(seg);
+            continue;
+        }
+        if (flaggedSegmentIndexes.has(i))
+            continue;
+        const record = seg;
+        const type = String(record.type ?? '');
+        if (type === 'text') {
+            const data = asRecord(record.data);
+            const text = typeof data.text === 'string' ? data.text : '';
+            const localMatches = shiftMatches(options.matches, textCursor, text.length);
+            // No spans overall → whole-segment mask; otherwise only mask local hits.
+            const nextText = options.matches.length === 0
+                ? redactText(text, [], options.maskChar)
+                : localMatches.length > 0
+                    ? redactText(text, localMatches, options.maskChar)
+                    : text;
+            out.push({
+                ...record,
+                data: { ...data, text: nextText },
+            });
+            textCursor += text.length;
+            continue;
+        }
+        out.push(seg);
+    }
+    return out;
+}
+function shiftMatches(matches, offset, length) {
+    const end = offset + length;
+    const out = [];
+    for (const m of matches) {
+        if (m.end <= offset || m.start >= end)
+            continue;
+        out.push({
+            start: Math.max(0, m.start - offset),
+            end: Math.min(length, m.end - offset),
+        });
+    }
+    return out;
+}
+export function flaggedImagesFromIndexes(images, indexes) {
+    const set = new Set(indexes);
+    return Object.freeze(images.filter((img) => set.has(img.index)));
+}
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : {};
+}
+//# sourceMappingURL=redact.js.map

package/lib/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,OAA6B,EAC7B,QAAgB;IAEhB,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAgB,EAChB,SAA2B,EAC3B,OAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,SAAS,CAAC,MAAM;SACb,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC;SACnE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAsB,CAAC,CAC5C,CAAC;IAEF,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CACxB,QAA4B,EAC5B,OAAsB,EACtB,qBAA0C;IAE1C,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAE3C,MAAM,MAAM,GAAG,GAA8B,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5E,yEAAyE;YACzE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAC3C,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC;gBACxC,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;oBACvB,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC;oBAClD,CAAC,CAAC,IAAI,CAAC;YACX,GAAG,CAAC,IAAI,CAAC;gBACP,GAAG,MAAM;gBACT,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;aAClC,CAAC,CAAC;YACH,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CACnB,OAA6B,EAC7B,MAAc,EACd,MAAc;IAEd,MAAM,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC;IAC5B,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG;YAAE,SAAS;QAChD,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC;YACpC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,OAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/lib/types.d.ts

@@ -0,0 +1,105 @@
+export type Severity = 'pass' | 'low' | 'medium' | 'high' | 'critical';
+export type Action = 'allow' | 'log' | 'reply' | 'redact' | 'drop' | 'recall';
+export type OnErrorPolicy = 'open' | 'closed';
+export type Direction = 'inbound' | 'outbound';
+export interface TextMatch {
+    readonly start: number;
+    readonly end: number;
+}
+export interface ExtractedImage {
+    /** Index among extracted images (for HTTP / flaggedImageIndexes). */
+    readonly index: number;
+    /** Index in the original segment list when applicable. */
+    readonly segmentIndex?: number;
+    readonly url?: string;
+    readonly base64?: string;
+    readonly mime?: string;
+    readonly path?: string;
+}
+export interface ScanContext {
+    readonly adapter: string;
+    readonly endpoint: string;
+    readonly conversationKind: string;
+    readonly conversationId: string;
+    readonly sender?: string;
+}
+export interface ScanInput {
+    readonly text: string;
+    readonly images: readonly ExtractedImage[];
+    readonly direction: Direction;
+    readonly context: ScanContext;
+}
+export interface ProviderResult {
+    readonly sourceId: string;
+    readonly severity: Severity;
+    readonly matches?: readonly TextMatch[];
+    readonly flaggedImageIndexes?: readonly number[];
+    readonly reason?: string;
+    readonly error?: boolean;
+}
+export interface MergedResult {
+    readonly severity: Severity;
+    readonly matches: readonly TextMatch[];
+    readonly flaggedImageIndexes: readonly number[];
+    readonly sources: readonly ProviderResult[];
+    readonly reason?: string;
+}
+/** Graded lexicon item (config `words` entry). */
+export interface LexiconWordConfig {
+    readonly word: string;
+    /** Per-word severity; falls back to source `defaultSeverity`. */
+    readonly severity: Exclude<Severity, 'pass'>;
+}
+export interface LocalSourceConfig {
+    readonly id: string;
+    readonly type: 'local';
+    readonly enabled: boolean;
+    readonly onError: OnErrorPolicy;
+    /** Custom words with per-entry severity. */
+    readonly words: readonly LexiconWordConfig[];
+    readonly wordFiles: readonly string[];
+    /** Merge built-in graded lexicon (default true). */
+    readonly includeBuiltin: boolean;
+    /**
+     * Default severity for plain string words / ungraded file lines.
+     * (Config key may still be written as `severity` for compatibility.)
+     */
+    readonly defaultSeverity: Exclude<Severity, 'pass'>;
+}
+export interface HttpSourceConfig {
+    readonly id: string;
+    readonly type: 'http';
+    readonly enabled: boolean;
+    readonly onError: OnErrorPolicy;
+    readonly url: string;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly timeoutMs: number;
+    readonly forceUpload: boolean;
+}
+export type SourceConfig = LocalSourceConfig | HttpSourceConfig;
+export interface ModerationConfig {
+    readonly enabled: boolean;
+    readonly onError: OnErrorPolicy;
+    readonly maskChar: string;
+    readonly replyTemplate: string;
+    readonly masters: readonly string[];
+    readonly inbound: {
+        readonly enabled: boolean;
+        readonly bypassMasters: boolean;
+        readonly whitelist: {
+            readonly userIds: readonly string[];
+            readonly conversationIds: readonly string[];
+        };
+    };
+    readonly outbound: {
+        readonly enabled: boolean;
+        readonly bypass: boolean;
+    };
+    readonly actions: Readonly<Record<Severity, readonly Action[]>>;
+    readonly sources: readonly SourceConfig[];
+}
+export declare const SEVERITY_RANK: Readonly<Record<Severity, number>>;
+export declare function maxSeverity(a: Severity, b: Severity): Severity;
+export declare function isSeverity(value: unknown): value is Severity;
+export declare function isAction(value: unknown): value is Action;
+//# sourceMappingURL=types.d.ts.map

package/lib/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEvE,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE9E,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE9C,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE/C,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACxC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,kDAAkD;AAClD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,oDAAoD;IACpD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;QAChC,QAAQ,CAAC,SAAS,EAAE;YAClB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;YACpC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;SAC7C,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;CAC3C;AAED,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAM3D,CAAC;AAEH,wBAAgB,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAE9D;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAM5D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAOxD"}

package/lib/types.js

@@ -0,0 +1,26 @@
+export const SEVERITY_RANK = Object.freeze({
+    pass: 0,
+    low: 1,
+    medium: 2,
+    high: 3,
+    critical: 4,
+});
+export function maxSeverity(a, b) {
+    return SEVERITY_RANK[a] >= SEVERITY_RANK[b] ? a : b;
+}
+export function isSeverity(value) {
+    return value === 'pass'
+        || value === 'low'
+        || value === 'medium'
+        || value === 'high'
+        || value === 'critical';
+}
+export function isAction(value) {
+    return value === 'allow'
+        || value === 'log'
+        || value === 'reply'
+        || value === 'redact'
+        || value === 'drop'
+        || value === 'recall';
+}
+//# sourceMappingURL=types.js.map

package/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAmHA,MAAM,CAAC,MAAM,aAAa,GAAuC,MAAM,CAAC,MAAM,CAAC;IAC7E,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CAAC,CAAW,EAAE,CAAW;IAClD,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,MAAM;WAClB,KAAK,KAAK,KAAK;WACf,KAAK,KAAK,QAAQ;WAClB,KAAK,KAAK,MAAM;WAChB,KAAK,KAAK,UAAU,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,OAAO;WACnB,KAAK,KAAK,KAAK;WACf,KAAK,KAAK,OAAO;WACjB,KAAK,KAAK,QAAQ;WAClB,KAAK,KAAK,MAAM;WAChB,KAAK,KAAK,QAAQ,CAAC;AAC1B,CAAC"}

package/middlewares/inbound.js

@@ -0,0 +1,97 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { defineMiddleware } from '@zhin.js/middleware';
+import { outboundHostToken } from '@zhin.js/plugin-runtime';
+import { buildScanContext, extractFromTextAndSegments, getModerationEngine, resolveModerationConfig, shouldBypassInbound, } from "../lib/index.js";
+/**
+ * Inbound content moderation.
+ * - order -100: run early before commands / other middleware
+ * - inbound redact：无法改写只读 Message，仍 next() 放行
+ */
+export default defineMiddleware({
+    target: 'inbound',
+    phase: 'before-dispatch',
+    order: -100,
+    async handle(context, next) {
+        const config = resolveModerationConfig(context.config);
+        if (!config.enabled || !config.inbound.enabled) {
+            await next();
+            return;
+        }
+        const message = context.input;
+        const sender = message.sender;
+        const conversationId = message.conversation.id;
+        const endpointMasters = resolveEndpointMasters(message, config);
+        if (shouldBypassInbound(config, {
+            sender,
+            conversationId,
+            endpointMasters,
+        })) {
+            await next();
+            return;
+        }
+        const engine = getModerationEngine();
+        engine.configure(config);
+        const extracted = extractFromTextAndSegments(message.content, message.segments);
+        if (!extracted.text && extracted.images.length === 0) {
+            await next();
+            return;
+        }
+        const scanInput = {
+            text: extracted.text,
+            images: extracted.images,
+            direction: 'inbound',
+            context: buildScanContext({
+                adapter: message.conversation.endpoint.adapter,
+                endpoint: message.conversation.endpoint.id,
+                conversationKind: message.conversation.kind,
+                conversationId,
+                sender,
+            }),
+        };
+        const result = await engine.apply({
+            direction: 'inbound',
+            extracted,
+            scanInput,
+            hooks: {
+                reply: async (content) => {
+                    await message.$reply(content);
+                },
+                recall: async () => {
+                    const messageId = message.id;
+                    if (!messageId)
+                        return false;
+                    try {
+                        const host = context.use(outboundHostToken);
+                        if (!host.recall)
+                            return false;
+                        await host.recall({
+                            adapter: message.conversation.endpoint.adapter,
+                            endpointId: message.conversation.endpoint.id,
+                            messageId,
+                        });
+                        return true;
+                    }
+                    catch {
+                        return false;
+                    }
+                },
+            },
+        });
+        if (result.continue) {
+            await next();
+        }
+    },
+});
+/**
+ * Masters from plugin config + optional metadata.endpointMaster / metadata.master.
+ */
+function resolveEndpointMasters(message, config) {
+    const out = [...config.masters];
+    const meta = message.metadata ?? {};
+    for (const key of ['master', 'endpointMaster', 'owner']) {
+        const value = meta[key];
+        if (typeof value === 'string' && value.trim())
+            out.push(value.trim());
+    }
+    return Object.freeze(out);
+}