avantgate 1.6.1 → 1.8.0

package/dist/{chunk-5VA3EKPJ.mjs → chunk-W27A25DK.mjs}

@@ -6,7 +6,7 @@ var SPI_LABELLED_REGEX = /(?:(?:num[ée]ro\s+fiscal|spi|n[°o]\s*fiscal|d[ée]cl
 var SPI_FORMATTED_REGEX = /\b[0-3]\d(?:\s+\d{2}){5}\s+\d\b/g;
 var IBAN_REGEX = /\b[A-Z]{2}\s*[0-9]{2}(?:[\s\r\n.-]*[A-Z0-9]){11,30}\b/g;
 var BIC_LABELLED_REGEX = /(?:(?:bic|swift)\s*[:=]?\s*)\b([A-Z]{4}[A-Z]{2}[A-Z0-9]{2}(?:[A-Z0-9]{3})?)\b/gi;
-function sanitizePII(input) {
+var sanitizePII = (input) => {
   let count = 0;
   let result = input;
   result = result.replace(EMAIL_REGEX, () => {
@@ -49,7 +49,7 @@ function sanitizePII(input) {
     return match;
   });
   return { text: result, maskedCount: count };
-}
+};
 
 // src/agent/errors.ts
 var StepSuspendedError = class extends Error {
@@ -204,7 +204,23 @@ function auditToolResult(data, options) {
 }
 
 // src/agent/isolated-tool.ts
-async function verifyDataAccessGuard(guard, args, context, toolIdentifier) {
+var verifyRoles = (configuredRoles, context, toolIdentifier) => {
+  if (!configuredRoles || configuredRoles.length === 0) {
+    return;
+  }
+  const userRoles = [
+    ...context.roles ?? [],
+    ...context.role ? [context.role] : []
+  ];
+  const hasAllowedRole = configuredRoles.some((role) => userRoles.includes(role));
+  if (!hasAllowedRole) {
+    throw new ToolAccessDeniedError(
+      toolIdentifier,
+      "Access denied: insufficient role permissions"
+    );
+  }
+};
+var verifyDataAccessGuard = async (guard, args, context, toolIdentifier) => {
   if (!guard) {
     return;
   }
@@ -212,8 +228,55 @@ async function verifyDataAccessGuard(guard, args, context, toolIdentifier) {
   if (!isAllowed) {
     throw new ToolAccessDeniedError(toolIdentifier, "Access denied by data access guard");
   }
-}
-async function resolveInvalidationTags(config, args, rawResult, context) {
+};
+var verifyTenantIsolation = (assertTenant, rawResult, context, toolIdentifier) => {
+  if (!assertTenant) {
+    return;
+  }
+  if (!context.tenantId) {
+    throw new ToolAccessDeniedError(
+      toolIdentifier,
+      "Access denied: missing session tenantId in execution context for multi-tenant tool"
+    );
+  }
+  const recordTenantId = assertTenant(rawResult);
+  if (recordTenantId && recordTenantId !== context.tenantId) {
+    throw new ToolAccessDeniedError(
+      toolIdentifier,
+      `Cross-tenant IDOR access violation: record tenant '${recordTenantId}' does not match session tenant '${context.tenantId}'`
+    );
+  }
+};
+var verifyResourceOwnership = async (assertOwnership, rawResult, context, toolIdentifier) => {
+  if (!assertOwnership) {
+    return;
+  }
+  const isOwner = await assertOwnership(rawResult, context);
+  if (!isOwner) {
+    throw new ToolAccessDeniedError(
+      toolIdentifier,
+      "Ownership IDOR access violation: user does not own or have access to this resource"
+    );
+  }
+};
+var checkSuspiciousParameters = (parameters, toolName) => {
+  if (!parameters || typeof parameters !== "object") {
+    return;
+  }
+  const zodShape = parameters.shape;
+  if (!zodShape || typeof zodShape !== "object") {
+    return;
+  }
+  const suspiciousKeys = ["tenantId", "tenant_id", "ownerTenantId"];
+  for (const key of suspiciousKeys) {
+    if (key in zodShape) {
+      console.warn(
+        `[avantGate Security Warning] Tool '${toolName}' defines '${key}' as a model parameter. Tenancy should be inferred from the trusted server context (context.tenantId) rather than supplied by the untrusted model to prevent IDOR attacks.`
+      );
+    }
+  }
+};
+var resolveInvalidationTags = async (config, args, rawResult, context) => {
   if (!config.invalidationTags) {
     return void 0;
   }
@@ -222,33 +285,29 @@ async function resolveInvalidationTags(config, args, rawResult, context) {
     await context.onInvalidationTags(tags);
   }
   return tags;
-}
-async function dispatchClientData(rawResult, callback) {
+};
+var dispatchClientData = async (rawResult, callback) => {
   if (!callback) {
     return;
   }
   await callback(rawResult);
-}
-async function produceLlmPayload(rawResult, args, context, transformer) {
+};
+var produceLlmPayload = async (rawResult, args, context, transformer) => {
   if (transformer) {
     return await transformer(rawResult, args, context);
   }
   return rawResult;
-}
-function validateLlmDto(payload, schema, toolIdentifier) {
+};
+var validateLlmDto = (payload, schema, toolIdentifier) => {
   const parseResult = schema.safeParse(payload);
   if (!parseResult.success) {
     const issues = parseResult.error.issues ?? [];
     const errorMessages = issues.map((issue) => `${issue.path.join(".") || "root"}: ${issue.message}`).join(", ");
-    throw new DtoValidationError(
-      toolIdentifier,
-      errorMessages,
-      issues
-    );
+    throw new DtoValidationError(toolIdentifier, errorMessages, issues);
   }
   return parseResult.data;
-}
-function protectLlmPayload(payload, toolIdentifier, sanitizePii = true, throwOnPii = false) {
+};
+var protectLlmPayload = (payload, toolIdentifier, sanitizePii = true, throwOnPii = false) => {
   if (!sanitizePii) {
     return { sanitized: payload, count: 0 };
   }
@@ -257,8 +316,8 @@ function protectLlmPayload(payload, toolIdentifier, sanitizePii = true, throwOnP
     throwOnPii
   });
   return { sanitized: sanitizedData, count: maskedCount };
-}
-async function processLlmPayload(rawResult, args, context, config, toolIdentifier) {
+};
+var processLlmPayload = async (rawResult, args, context, config, toolIdentifier) => {
   let payload = await produceLlmPayload(rawResult, args, context, config.llmDto);
   if (config.llmDtoSchema) {
     payload = validateLlmDto(payload, config.llmDtoSchema, toolIdentifier);
@@ -269,14 +328,15 @@ async function processLlmPayload(rawResult, args, context, config, toolIdentifie
     config.sanitizePii !== false,
     config.throwOnPii === true
   );
-}
-function createIsolatedTool(config) {
+};
+var createIsolatedTool = (config) => {
   const toolId = config.id || config.name;
   const toolAlias = config.alias;
   const clientCallback = config.clientDto;
   const toolIdentifier = toolAlias || config.name;
   const toolImpact = config.impact ?? "READ_ONLY";
   const requireApproval = config.requireApproval ?? toolImpact === "DESTRUCTIVE";
+  checkSuspiciousParameters(config.parameters, config.name);
   const tool = {
     description: config.description,
     parameters: config.parameters,
@@ -292,11 +352,12 @@ function createIsolatedTool(config) {
     _requireApproval: requireApproval,
     _lastPiiFilteredCount: 0,
     _lastInvalidationTags: void 0,
-    async execute(args, context) {
+    execute: async (args, context) => {
       const updatedContext = {
         ...context,
         callChain: context?.callChain ?? Object.freeze([toolId])
       };
+      verifyRoles(config.roles, updatedContext, toolIdentifier);
       await verifyDataAccessGuard(
         config.dataAccessGuard,
         args,
@@ -304,6 +365,13 @@ function createIsolatedTool(config) {
         toolIdentifier
       );
       const rawResult = await config.execute(args, updatedContext);
+      verifyTenantIsolation(config.assertTenant, rawResult, updatedContext, toolIdentifier);
+      await verifyResourceOwnership(
+        config.assertOwnership,
+        rawResult,
+        updatedContext,
+        toolIdentifier
+      );
       const tags = await resolveInvalidationTags(
         config,
         args,
@@ -326,7 +394,10 @@ function createIsolatedTool(config) {
     }
   };
   return tool;
-}
+};
+var createTenantTool = (config) => {
+  return createIsolatedTool(config);
+};
 
 export {
   sanitizePII,
@@ -340,5 +411,6 @@ export {
   ToolNotFoundError,
   DtoValidationError,
   auditToolResult,
-  createIsolatedTool
+  createIsolatedTool,
+  createTenantTool
 };

package/dist/chunk-Y6FXYEAI.mjs

@@ -0,0 +1,10 @@
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+export {
+  __require
+};

package/dist/client/index.mjs

@@ -1,3 +1,5 @@
+import "../chunk-Y6FXYEAI.mjs";
+
 // src/client/browser-exporter.ts
 var DEFAULT_ENDPOINT = "http://localhost:3000/api/v1/ingest/events";
 var DEFAULT_INTERVAL_MS = 3e3;

package/dist/control-layer.d.ts

@@ -8,6 +8,7 @@ export declare class AvantGateControlLayer {
     private findProviderConfig;
     private calculateCost;
     private applySecurityGuards;
+    private applyOutputSecurityGuards;
     private checkPreflightBudget;
     private checkPostExecutionBudget;
     private buildMessages;
@@ -21,29 +22,29 @@ export declare class AvantGateControlLayer {
     /**
      * Exécute une requête avec garde d'entrée, masquage PII, garde pré-vol et calcul des coûts.
      */
-    execute(options: {
+    execute: (options: {
         userQuery: string;
         systemPrompt?: string;
         temperature?: number;
         providerOverride?: LLMProviderPort;
-    }): Promise<ExecutionResult>;
+    }) => Promise<ExecutionResult>;
     /**
      * Exécute une requête et valide/répare le résultat selon un schéma Zod.
      */
-    executeStructured<T>(options: {
+    executeStructured: <T>(options: {
         userQuery: string;
         systemPrompt?: string;
         schema: z.ZodType<T>;
         temperature?: number;
         providerOverride?: LLMProviderPort;
-    }): Promise<StructuredExecutionResult<T>>;
+    }) => Promise<StructuredExecutionResult<T>>;
     /**
      * Méthode unifiée de premier niveau pour l'extraction structurée sans code boilerplate.
      * Gère le failover multi-fournisseurs, les retries, la validation Zod et la normalisation financière.
      */
-    generateStructuredOutput<T>(options: GenerateStructuredOutputOptions<T>): Promise<StructuredExecutionResult<T>>;
+    generateStructuredOutput: <T>(options: GenerateStructuredOutputOptions<T>) => Promise<StructuredExecutionResult<T>>;
 }
-export declare function createLLMControlLayer(config: ControlLayerConfig): AvantGateControlLayer;
-export declare const createAvantGate: typeof createLLMControlLayer;
+export declare const createLLMControlLayer: (config: ControlLayerConfig) => AvantGateControlLayer;
+export declare const createAvantGate: (config: ControlLayerConfig) => AvantGateControlLayer;
 export { AvantGateControlLayer as ZenLLMControlLayer };
 //# sourceMappingURL=control-layer.d.ts.map

package/dist/control-layer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-layer.d.ts","sourceRoot":"","sources":["../src/control-layer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EACzB,+BAA+B,EAC/B,eAAe,EAIhB,MAAM,SAAS,CAAC;AAgBjB,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,oBAAoB,CAAC,CAAuB;gBAExC,MAAM,EAAE,kBAAkB;IAgBtC,OAAO,CAAC,qBAAqB;IAY7B,OAAO,CAAC,kBAAkB;IAe1B,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,oBAAoB;IAgC5B,OAAO,CAAC,wBAAwB;IAahC,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,iBAAiB;YAmBX,uBAAuB;YAqBvB,uBAAuB;IAiCrC,OAAO,CAAC,cAAc;YAsBR,eAAe;IAe7B;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,eAAe,CAAC;KACpC,GAAG,OAAO,CAAC,eAAe,CAAC;IA6B5B;;OAEG;IACG,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE;QAClC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,eAAe,CAAC;KACpC,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;IA2BzC;;;OAGG;IACG,wBAAwB,CAAC,CAAC,EAC9B,OAAO,EAAE,+BAA+B,CAAC,CAAC,CAAC,GAC1C,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;CAsHzC;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,qBAAqB,CAEvF;AAED,eAAO,MAAM,eAAe,8BAAwB,CAAC;AACrD,OAAO,EAAE,qBAAqB,IAAI,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"control-layer.d.ts","sourceRoot":"","sources":["../src/control-layer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EACzB,+BAA+B,EAC/B,eAAe,EAIhB,MAAM,SAAS,CAAC;AAiBjB,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,oBAAoB,CAAC,CAAuB;gBAExC,MAAM,EAAE,kBAAkB;IAgBtC,OAAO,CAAC,qBAAqB,CAU3B;IAEF,OAAO,CAAC,kBAAkB,CAaxB;IAEF,OAAO,CAAC,aAAa,CAcnB;IAEF,OAAO,CAAC,mBAAmB,CAezB;IAEF,OAAO,CAAC,yBAAyB,CAe/B;IAEF,OAAO,CAAC,oBAAoB,CAkC1B;IAEF,OAAO,CAAC,wBAAwB,CAW9B;IAEF,OAAO,CAAC,aAAa,CAOnB;IAEF,OAAO,CAAC,aAAa,CAUnB;IAEF,OAAO,CAAC,gBAAgB,CAMtB;IAEF,OAAO,CAAC,iBAAiB,CAiBvB;IAEF,OAAO,CAAC,uBAAuB,CAmB7B;IAEF,OAAO,CAAC,uBAAuB,CA+B7B;IAEF,OAAO,CAAC,cAAc,CAqBpB;IAEF,OAAO,CAAC,eAAe,CAarB;IAEF;;OAEG;IACH,OAAO,GAAU,SAAS;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,eAAe,CAAC;KACpC,KAAG,OAAO,CAAC,eAAe,CAAC,CA2B1B;IAEF;;OAEG;IACH,iBAAiB,GAAU,CAAC,EAAE,SAAS;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,eAAe,CAAC;KACpC,KAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAyBvC;IAEF;;;OAGG;IACH,wBAAwB,GAAU,CAAC,EACjC,SAAS,+BAA+B,CAAC,CAAC,CAAC,KAC1C,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAuHtC;CACH;AAED,eAAO,MAAM,qBAAqB,GAAI,QAAQ,kBAAkB,KAAG,qBAElE,CAAC;AAEF,eAAO,MAAM,eAAe,WAJkB,kBAAkB,KAAG,qBAIf,CAAC;AACrD,OAAO,EAAE,qBAAqB,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/finance/index.js

@@ -485,7 +485,7 @@ var AccountingFactory = class {
 };
 
 // src/response-validator.ts
-function extractAndCleanJSON(rawText) {
+var extractAndCleanJSON = (rawText) => {
   let cleaned = rawText.trim();
   cleaned = cleaned.replace(/<think>[\s\S]*?<\/think>/gi, "").trim();
   const codeBlockMatch = cleaned.match(/```(?:json)?\s*([\s\S]*?)\s*```/i);
@@ -509,20 +509,20 @@ function extractAndCleanJSON(rawText) {
     cleaned = cleaned.slice(startIndex, endIndex + 1);
   }
   return cleaned;
-}
+};
 
 // src/finance/normalizer.ts
-function cleanFinancialJSON(rawText, options) {
+var cleanFinancialJSON = (rawText, options) => {
   if (!rawText) {
     return "";
   }
   const jsonBlock = extractAndCleanJSON(rawText);
   const strategy = options?.jurisdiction ? AccountingFactory.getStrategy(options.jurisdiction) : options?.autoDetect !== false ? AccountingFactory.detectStrategy(rawText) : AccountingFactory.getStrategy("FR");
   return strategy.cleanJSON(jsonBlock);
-}
-function withFinancialNormalizer(options) {
+};
+var withFinancialNormalizer = (options) => {
   return (rawText) => cleanFinancialJSON(rawText, options);
-}
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AccountingFactory,

package/dist/finance/index.mjs

@@ -7,7 +7,8 @@ import {
   UsGAAPStrategy,
   cleanFinancialJSON,
   withFinancialNormalizer
-} from "../chunk-CO26LNFD.mjs";
+} from "../chunk-36ULFTM2.mjs";
+import "../chunk-Y6FXYEAI.mjs";
 export {
   AccountingFactory,
   FrenchPCGStrategy,

package/dist/finance/normalizer.d.ts

@@ -11,9 +11,9 @@ export interface FinancialNormalizerOptions {
  * - Suppression des symboles de devises dans les positions numériques
  * - Préservation stricte des chaînes descriptives normales contenant des parenthèses
  */
-export declare function cleanFinancialJSON(rawText: string, options?: FinancialNormalizerOptions): string;
+export declare const cleanFinancialJSON: (rawText: string, options?: FinancialNormalizerOptions) => string;
 /**
  * Crée une fonction de transformation financière réutilisable.
  */
-export declare function withFinancialNormalizer(options?: FinancialNormalizerOptions): (rawText: string) => string;
+export declare const withFinancialNormalizer: (options?: FinancialNormalizerOptions) => ((rawText: string) => string);
 //# sourceMappingURL=normalizer.d.ts.map

package/dist/finance/normalizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalizer.d.ts","sourceRoot":"","sources":["../../src/finance/normalizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAItE,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,0BAA0B,GACnC,MAAM,CAiBR;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,CAAC,EAAE,0BAA0B,GACnC,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAE7B"}
+{"version":3,"file":"normalizer.d.ts","sourceRoot":"","sources":["../../src/finance/normalizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAItE,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,GAC7B,SAAS,MAAM,EACf,UAAU,0BAA0B,KACnC,MAiBF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,uBAAuB,GAClC,UAAU,0BAA0B,KACnC,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAE9B,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export * from "./types";
 export * from "./pricing";
+export * from "./sqlite-pricing-adapter";
 export * from "./sanitizer";
 export * from "./input-guard";
 export * from "./response-validator";
@@ -7,4 +8,5 @@ export * from "./control-layer";
 export * from "./prompts";
 export * from "./providers/http-client";
 export * from "./workflow";
+export * from "./secret-guard";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}