agentid-sdk 0.1.18 → 0.1.20

package/dist/{langchain-BykeB2WB.d.mts → langchain-BipmisU1.d.mts}

@@ -2,6 +2,8 @@ import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
 
 type CapabilityConfig = {
     shadow_mode: boolean;
+    strict_security_mode: boolean;
+    failure_mode: "fail_open" | "fail_close";
     block_pii_leakage: boolean;
     block_db_access: boolean;
     block_code_execution: boolean;
@@ -58,7 +60,7 @@ interface LogParams {
     };
 }
 type AgentIDConfig = {
-    apiKey: string;
+    apiKey?: string;
     baseUrl?: string;
     piiMasking?: boolean;
     checkInjection?: boolean;
@@ -66,12 +68,17 @@ type AgentIDConfig = {
     storePii?: boolean;
     strictMode?: boolean;
     guardTimeoutMs?: number;
+    ingestTimeoutMs?: number;
 };
 
 type PreparedInput = {
     sanitizedInput: string;
     capabilityConfig: CapabilityConfig;
 };
+declare class SecurityBlockError extends Error {
+    reason: string;
+    constructor(reason?: string);
+}
 declare class AgentID {
     private baseUrl;
     private apiKey;
@@ -81,11 +88,12 @@ declare class AgentID {
     private storePii;
     private strictMode;
     private guardTimeoutMs;
+    private ingestTimeoutMs;
     private pii;
     private localEnforcer;
     private injectionScanner;
     private recentGuardVerdicts;
-    constructor(config: AgentIDConfig);
+    constructor(config?: AgentIDConfig);
     private buildClientCapabilities;
     private resolveApiKey;
     private resolveClientEventId;
@@ -94,6 +102,7 @@ declare class AgentID {
     private cacheGuardVerdict;
     getCapabilityConfig(force?: boolean, options?: RequestOptions): Promise<CapabilityConfig>;
     private getCachedCapabilityConfig;
+    private resolveEffectiveStrictMode;
     prepareInputForDispatch(params: {
         input: string;
         systemId: string;
@@ -167,4 +176,4 @@ declare class AgentIDCallbackHandler extends BaseCallbackHandler {
     handleLLMError(err: unknown, runId?: string): Promise<void>;
 }
 
-export { AgentID as A, type GuardParams as G, type LogParams as L, type PreparedInput as P, type RequestOptions as R, AgentIDCallbackHandler as a, type GuardResponse as b };
+export { AgentID as A, type GuardParams as G, type LogParams as L, type PreparedInput as P, type RequestOptions as R, SecurityBlockError as S, AgentIDCallbackHandler as a, type GuardResponse as b };

package/dist/{langchain-BykeB2WB.d.ts → langchain-BipmisU1.d.ts}

@@ -2,6 +2,8 @@ import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
 
 type CapabilityConfig = {
     shadow_mode: boolean;
+    strict_security_mode: boolean;
+    failure_mode: "fail_open" | "fail_close";
     block_pii_leakage: boolean;
     block_db_access: boolean;
     block_code_execution: boolean;
@@ -58,7 +60,7 @@ interface LogParams {
     };
 }
 type AgentIDConfig = {
-    apiKey: string;
+    apiKey?: string;
     baseUrl?: string;
     piiMasking?: boolean;
     checkInjection?: boolean;
@@ -66,12 +68,17 @@ type AgentIDConfig = {
     storePii?: boolean;
     strictMode?: boolean;
     guardTimeoutMs?: number;
+    ingestTimeoutMs?: number;
 };
 
 type PreparedInput = {
     sanitizedInput: string;
     capabilityConfig: CapabilityConfig;
 };
+declare class SecurityBlockError extends Error {
+    reason: string;
+    constructor(reason?: string);
+}
 declare class AgentID {
     private baseUrl;
     private apiKey;
@@ -81,11 +88,12 @@ declare class AgentID {
     private storePii;
     private strictMode;
     private guardTimeoutMs;
+    private ingestTimeoutMs;
     private pii;
     private localEnforcer;
     private injectionScanner;
     private recentGuardVerdicts;
-    constructor(config: AgentIDConfig);
+    constructor(config?: AgentIDConfig);
     private buildClientCapabilities;
     private resolveApiKey;
     private resolveClientEventId;
@@ -94,6 +102,7 @@ declare class AgentID {
     private cacheGuardVerdict;
     getCapabilityConfig(force?: boolean, options?: RequestOptions): Promise<CapabilityConfig>;
     private getCachedCapabilityConfig;
+    private resolveEffectiveStrictMode;
     prepareInputForDispatch(params: {
         input: string;
         systemId: string;
@@ -167,4 +176,4 @@ declare class AgentIDCallbackHandler extends BaseCallbackHandler {
     handleLLMError(err: unknown, runId?: string): Promise<void>;
 }
 
-export { AgentID as A, type GuardParams as G, type LogParams as L, type PreparedInput as P, type RequestOptions as R, AgentIDCallbackHandler as a, type GuardResponse as b };
+export { AgentID as A, type GuardParams as G, type LogParams as L, type PreparedInput as P, type RequestOptions as R, SecurityBlockError as S, AgentIDCallbackHandler as a, type GuardResponse as b };

package/dist/langchain.d.mts

@@ -1,2 +1,2 @@
 import '@langchain/core/callbacks/base';
-export { a as AgentIDCallbackHandler } from './langchain-BykeB2WB.mjs';
+export { a as AgentIDCallbackHandler } from './langchain-BipmisU1.mjs';

package/dist/langchain.d.ts

@@ -1,2 +1,2 @@
 import '@langchain/core/callbacks/base';
-export { a as AgentIDCallbackHandler } from './langchain-BykeB2WB.js';
+export { a as AgentIDCallbackHandler } from './langchain-BipmisU1.js';

package/dist/langchain.js

@@ -24,6 +24,194 @@ __export(langchain_exports, {
 });
 module.exports = __toCommonJS(langchain_exports);
 var import_base = require("@langchain/core/callbacks/base");
+
+// src/sdk-version.ts
+var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.20".trim().length > 0 ? "js-0.1.20" : FALLBACK_SDK_VERSION;
+
+// src/pii-national-identifiers.ts
+var REGION_ANCHORS = {
+  czsk: ["rodne cislo", "rc", "cislo", "birth number", "personal number"],
+  pl: ["pesel", "nip", "dowod", "poland"],
+  ro: ["cnp", "romania"],
+  de: ["steuer id", "steuer-id", "steueridentifikationsnummer", "ust-idnr", "deutschland"],
+  hu: ["taj", "szemelyi", "hungary"],
+  gb: ["nino", "national insurance", "gb", "great britain", "driving licence", "driver licence"],
+  fr: ["insee", "nir", "securite sociale", "france"],
+  es: ["dni", "nie", "nif", "cif", "espana", "spain"],
+  it: ["codice fiscale", "fiscal code", "italia", "italy"],
+  nl: ["bsn", "burgerservicenummer", "nederland", "netherlands"],
+  at: ["svnr", "sozialversicherung", "sozialversicherungsnummer", "austria", "oesterreich"]
+};
+var TAX_ANCHORS = [
+  "vat",
+  "vat number",
+  "tax",
+  "tax id",
+  "tin",
+  "dic",
+  "nip",
+  "nino",
+  "steuernummer",
+  "steuer id",
+  "steuer-id",
+  "ust-idnr",
+  "insee",
+  "nir",
+  "dni",
+  "nie",
+  "nif",
+  "cif",
+  "codice fiscale",
+  "fiscal code",
+  "bsn",
+  "burgerservicenummer",
+  "svnr",
+  "sozialversicherung",
+  "sozialversicherungsnummer",
+  "fiscal"
+];
+var NL_BSN_ANCHORS = ["bsn", "burgerservicenummer"];
+var AT_SVNR_ANCHORS = ["svnr", "sozialversicherung", "sozialversicherungsnummer", "ssn"];
+var DRIVER_ANCHORS = [
+  "driver licence",
+  "driving licence",
+  "drivers license",
+  "driving license",
+  "ridicsky prukaz",
+  "vodicsky preukaz",
+  "prawo jazdy",
+  "fuhrerschein",
+  "fuehrerschein",
+  "permis",
+  "driving permit"
+];
+var ADDRESS_ANCHORS = [
+  "street",
+  "st.",
+  "strasse",
+  "str.",
+  "ulice",
+  "ul.",
+  "ulica",
+  "road",
+  "rd.",
+  "avenue",
+  "ave.",
+  "postcode",
+  "postal code",
+  "zip",
+  "psc",
+  "plz"
+];
+var MRZ_ANCHORS = ["mrz", "machine readable zone", "passport", "id card", "travel document"];
+var ALL_ANCHORS = dedupeAnchors([
+  ...TAX_ANCHORS,
+  ...DRIVER_ANCHORS,
+  ...ADDRESS_ANCHORS,
+  ...MRZ_ANCHORS,
+  ...REGION_ANCHORS.czsk,
+  ...REGION_ANCHORS.pl,
+  ...REGION_ANCHORS.ro,
+  ...REGION_ANCHORS.de,
+  ...REGION_ANCHORS.hu,
+  ...REGION_ANCHORS.gb,
+  ...REGION_ANCHORS.fr,
+  ...REGION_ANCHORS.es,
+  ...REGION_ANCHORS.it,
+  ...REGION_ANCHORS.nl,
+  ...REGION_ANCHORS.at
+]);
+var TAX_ANCHOR_SET = new Set(TAX_ANCHORS.map(normalizeAnchorWord));
+var DRIVER_ANCHOR_SET = new Set(DRIVER_ANCHORS.map(normalizeAnchorWord));
+var ADDRESS_ANCHOR_SET = new Set(ADDRESS_ANCHORS.map(normalizeAnchorWord));
+var MRZ_ANCHOR_SET = new Set(MRZ_ANCHORS.map(normalizeAnchorWord));
+var NL_BSN_ANCHOR_SET = new Set(NL_BSN_ANCHORS.map(normalizeAnchorWord));
+var AT_SVNR_ANCHOR_SET = new Set(AT_SVNR_ANCHORS.map(normalizeAnchorWord));
+var anchorTrie = buildTrie(ALL_ANCHORS);
+function dedupeAnchors(anchors) {
+  const unique = /* @__PURE__ */ new Set();
+  for (const anchor of anchors) {
+    const normalized = normalizeAnchorWord(anchor);
+    if (normalized.length > 0) unique.add(normalized);
+  }
+  return Array.from(unique);
+}
+function foldForMatching(value) {
+  return value.toLowerCase().normalize("NFD").replace(/\p{M}+/gu, "");
+}
+function normalizeAnchorWord(value) {
+  return foldForMatching(value).trim().replace(/\s+/g, " ");
+}
+function createTrieNode() {
+  return { children: /* @__PURE__ */ new Map(), terminalWords: [] };
+}
+function buildTrie(words) {
+  const root = createTrieNode();
+  for (const word of words) {
+    let node = root;
+    for (const char of word) {
+      const next = node.children.get(char);
+      if (next) {
+        node = next;
+      } else {
+        const created = createTrieNode();
+        node.children.set(char, created);
+        node = created;
+      }
+    }
+    node.terminalWords.push(word);
+  }
+  return root;
+}
+
+// src/pii.ts
+var PHONE_CONTEXT_KEYWORDS = [
+  "tel",
+  "phone",
+  "mobile",
+  "cell",
+  "call",
+  "contact",
+  "number",
+  "hotline",
+  "support",
+  "infoline",
+  "customer service",
+  "client service",
+  "telefon",
+  "telefonu",
+  "telefonszam",
+  "telefonnummer",
+  "rufnummer",
+  "zadzwon",
+  "hivas",
+  "wsparcie",
+  "podpora",
+  "kontakt",
+  "dial"
+];
+function escapeRegex(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+var PHONE_CONTEXT_RE = new RegExp(
+  `(?:^|[^\\p{L}])(?:${PHONE_CONTEXT_KEYWORDS.map(escapeRegex).join("|")})(?:$|[^\\p{L}])`,
+  "iu"
+);
+
+// src/capability-config.ts
+var CONFIG_TTL_MS = 5 * 60 * 1e3;
+
+// src/agentid.ts
+var SecurityBlockError = class extends Error {
+  constructor(reason = "guard_denied") {
+    super(`AgentID: Security Blocked (${reason})`);
+    this.name = "SecurityBlockError";
+    this.reason = reason;
+  }
+};
+
+// src/langchain.ts
 function safeString(val) {
   return typeof val === "string" ? val : "";
 }
@@ -303,7 +491,7 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
       client_capabilities: this.getLangchainCapabilities()
     }, this.requestOptions);
     if (!verdict.allowed) {
-      throw new Error(`AgentID: Security Blocked (${verdict.reason ?? "guard_denied"})`);
+      throw new SecurityBlockError(verdict.reason ?? "guard_denied");
     }
     const canonicalClientEventId = isUuidLike(verdict.client_event_id) ? verdict.client_event_id.trim() : requestedClientEventId;
     const guardEventId = typeof verdict.guard_event_id === "string" && verdict.guard_event_id.length > 0 ? verdict.guard_event_id : void 0;
@@ -354,7 +542,7 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
       client_capabilities: this.getLangchainCapabilities()
     }, this.requestOptions);
     if (!verdict.allowed) {
-      throw new Error(`AgentID: Security Blocked (${verdict.reason ?? "guard_denied"})`);
+      throw new SecurityBlockError(verdict.reason ?? "guard_denied");
     }
     const canonicalClientEventId = isUuidLike(verdict.client_event_id) ? verdict.client_event_id.trim() : requestedClientEventId;
     const guardEventId = typeof verdict.guard_event_id === "string" && verdict.guard_event_id.length > 0 ? verdict.guard_event_id : void 0;

package/dist/langchain.mjs

@@ -1,6 +1,6 @@
 import {
   AgentIDCallbackHandler
-} from "./chunk-6YR4ECGB.mjs";
+} from "./chunk-LOZUJLLF.mjs";
 export {
   AgentIDCallbackHandler
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentid-sdk",
-  "version": "0.1.18",
+  "version": "0.1.20",
   "description": "AgentID JavaScript/TypeScript SDK for guard, ingest, tracing, and analytics.",
   "license": "MIT",
   "homepage": "https://agentid.ai",