glirastes 0.1.0

package/dist/server/lancer/errors.js

@@ -0,0 +1,18 @@
+/**
+ * Thrown by the Lancer client when a service is unreachable and the configured
+ * degradation action for that service is 'block'.
+ *
+ * Consumers (e.g. server-pro pipeline) should catch this error and treat the
+ * request as blocked rather than falling back silently.
+ */
+export class ServiceBlockedError extends Error {
+    service;
+    cause;
+    constructor(service, cause) {
+        super(`Service '${service}' blocked the request due to degradation policy`);
+        this.service = service;
+        this.name = 'ServiceBlockedError';
+        this.cause = cause;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/server/lancer/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/server/lancer/errors.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAI1B;IAHO,KAAK,CAAoB;IAElD,YACkB,OAA0B,EAC1C,KAAa;QAEb,KAAK,CAAC,YAAY,OAAO,iDAAiD,CAAC,CAAC;QAH5D,YAAO,GAAP,OAAO,CAAmB;QAI1C,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF"}

package/dist/server/lancer/index.d.ts

@@ -0,0 +1,3 @@
+export { createLancer } from './client.js';
+export { ServiceBlockedError } from './errors.js';
+export type { AegisNamespace, AnalyzeOptions, AnalyzeResult, ApprovalCheckResult, ApprovalDecideResult, ApprovalResolveResult, ApprovalsNamespace, CheckResult, ClassifyResult, ConfigNamespace, ConfigResult, DegradationAction, DegradationContext, DegradationDefaults, Lancer, LancerConfig, LancerServiceName, LeakageResult, OnServiceUnavailable, PiiEntity, PrimusNamespace, PromptOverride, TelemetryEvent, TelemetryNamespace, Violation, WardenNamespace, } from './types.js';

package/dist/server/lancer/index.js

@@ -0,0 +1,3 @@
+export { createLancer } from './client.js';
+export { ServiceBlockedError } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/server/lancer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/lancer/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC"}

package/dist/server/lancer/telemetry-buffer.d.ts

@@ -0,0 +1,15 @@
+import type { TelemetryEvent } from './types.js';
+export declare class TelemetryBuffer {
+    private readonly endpoint;
+    private readonly headers;
+    private readonly maxRetries;
+    private buffer;
+    private timer;
+    constructor(endpoint: string, headers: Record<string, string>, maxRetries: number);
+    /** Add an event to the buffer. Auto-flushes at threshold. */
+    add(event: TelemetryEvent): void;
+    /** Flush buffered events to the Proctor API. */
+    flush(): Promise<void>;
+    /** Tear down the auto-flush interval. */
+    destroy(): void;
+}

package/dist/server/lancer/telemetry-buffer.js

@@ -0,0 +1,61 @@
+// ---------------------------------------------------------------------------
+// Telemetry event buffer — batches events and flushes to the Proctor API
+// ---------------------------------------------------------------------------
+const FLUSH_THRESHOLD = 50;
+const FLUSH_INTERVAL_MS = 5_000;
+export class TelemetryBuffer {
+    endpoint;
+    headers;
+    maxRetries;
+    buffer = [];
+    timer = null;
+    constructor(endpoint, headers, maxRetries) {
+        this.endpoint = endpoint;
+        this.headers = headers;
+        this.maxRetries = maxRetries;
+        this.timer = setInterval(() => {
+            if (this.buffer.length > 0)
+                this.flush().catch(() => { });
+        }, FLUSH_INTERVAL_MS);
+    }
+    /** Add an event to the buffer. Auto-flushes at threshold. */
+    add(event) {
+        this.buffer.push(event);
+        if (this.buffer.length >= FLUSH_THRESHOLD) {
+            this.flush().catch(() => { });
+        }
+    }
+    /** Flush buffered events to the Proctor API. */
+    async flush() {
+        if (this.buffer.length === 0)
+            return;
+        const batch = this.buffer.splice(0);
+        let lastError;
+        for (let attempt = 0; attempt <= this.maxRetries; attempt++) {
+            try {
+                const res = await fetch(this.endpoint, {
+                    method: 'POST',
+                    headers: this.headers,
+                    body: JSON.stringify({ events: batch }),
+                });
+                if (res.ok)
+                    return;
+                lastError = new Error(`HTTP ${res.status}`);
+            }
+            catch (err) {
+                lastError = err;
+            }
+        }
+        // All retries exhausted — push events back to the buffer
+        this.buffer.unshift(...batch);
+        throw lastError;
+    }
+    /** Tear down the auto-flush interval. */
+    destroy() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+}
+//# sourceMappingURL=telemetry-buffer.js.map

package/dist/server/lancer/telemetry-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-buffer.js","sourceRoot":"","sources":["../../../src/server/lancer/telemetry-buffer.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAI9E,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,OAAO,eAAe;IAKP;IACA;IACA;IANX,MAAM,GAAqB,EAAE,CAAC;IAC9B,KAAK,GAA0C,IAAI,CAAC;IAE5D,YACmB,QAAgB,EAChB,OAA+B,EAC/B,UAAkB;QAFlB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAwB;QAC/B,eAAU,GAAV,UAAU,CAAQ;QAEnC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAyC,CAAC,CAAC,CAAC;QAClG,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACxB,CAAC;IAED,6DAA6D;IAC7D,GAAG,CAAC,KAAqB;QACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAkD,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAEpC,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;oBACrC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;iBACxC,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,EAAE;oBAAE,OAAO;gBACnB,SAAS,GAAG,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QAC9B,MAAM,SAAS,CAAC;IAClB,CAAC;IAED,yCAAyC;IACzC,OAAO;QACL,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;CACF"}

package/dist/server/lancer/types.d.ts

@@ -0,0 +1,201 @@
+/**
+ * Names of Glirastes services that can be called by the Lancer client.
+ * Used to identify which service failed in degradation callbacks.
+ */
+export type LancerServiceName = 'warden' | 'primus' | 'aegis' | 'proctor' | 'config' | 'approvals';
+/**
+ * What to do when a Glirastes service is unavailable:
+ * - 'fallback': Return the safe default value (calls onDegraded if set).
+ * - 'block':    Throw a ServiceBlockedError — use for critical guardrails.
+ * - 'silent':   Return the safe default value without calling onDegraded.
+ */
+export type DegradationAction = 'fallback' | 'block' | 'silent';
+/** Context passed to the onServiceUnavailable callback. */
+export interface DegradationContext {
+    /** Which Glirastes service could not be reached. */
+    service: LancerServiceName;
+    /** The underlying error from the failed API call. */
+    error: Error;
+    /** Arbitrary request context (e.g. ToolContext) forwarded by the caller, if available. */
+    requestContext?: Record<string, unknown>;
+}
+/**
+ * Static per-service degradation action overrides.
+ * Any service not listed falls back to the built-in default
+ * ('fallback' for all services except proctor, which defaults to 'silent').
+ */
+export interface DegradationDefaults {
+    warden?: DegradationAction;
+    primus?: DegradationAction;
+    aegis?: DegradationAction;
+    proctor?: DegradationAction;
+    config?: DegradationAction;
+    approvals?: DegradationAction;
+}
+/**
+ * Dynamic per-request degradation decision.
+ * Called after static defaults are resolved; its return value takes precedence.
+ * May be async (e.g. for remote policy lookups).
+ */
+export type OnServiceUnavailable = (ctx: DegradationContext) => DegradationAction | Promise<DegradationAction>;
+/** Configuration for creating a Lancer client instance. */
+export interface LancerConfig {
+    apiKey: string;
+    baseUrl?: string;
+    cache?: {
+        ttl: number;
+    };
+    retry?: {
+        maxRetries: number;
+    };
+    /** Called whenever any service falls back (action='fallback'). */
+    onDegraded?: () => void;
+    /**
+     * Static per-service degradation action overrides.
+     * Overrides the built-in defaults ('fallback' / 'silent') per service.
+     */
+    degradation?: DegradationDefaults;
+    /**
+     * Dynamic degradation callback. Invoked on every service failure;
+     * its return value overrides both built-in and static defaults.
+     */
+    onServiceUnavailable?: OnServiceUnavailable;
+    /** Identifies which agent is calling (e.g. "claude-code", "gpt-4o"). Sent as X-Agent-Id header. */
+    agentId?: string;
+    /** Broad agent category. Sent as X-Agent-Type header. */
+    agentType?: 'claude' | 'openai' | 'open-source' | 'custom';
+}
+export interface PromptOverride {
+    moduleId: string;
+    mode: 'replace' | 'patch';
+    systemPrompt: string | null;
+    promptPrefix: string | null;
+    promptSuffix: string | null;
+    modelTierOverride: string | null;
+}
+export interface ConfigResult {
+    modules: Record<string, unknown>;
+    prompts?: PromptOverride[];
+    models?: Record<string, string>;
+    etag?: string;
+}
+export interface ClassifyResult {
+    moduleId: string;
+    confidence: number;
+    modelTier: string;
+}
+export interface PiiEntity {
+    type: string;
+    value: string;
+    start: number;
+    end: number;
+    confidence?: number;
+}
+export interface AnalyzeResult {
+    entities: PiiEntity[];
+    anonymized: string;
+    mappingToken: string | null;
+    detector?: 'regex' | 'presidio';
+}
+export interface AnalyzeOptions {
+    locales?: string[];
+    mode?: 'anonymize' | 'pseudonymize';
+    sessionId?: string;
+}
+export interface LeakageResult {
+    leaked: boolean;
+    entities: PiiEntity[];
+    totalDetected: number;
+    filteredAsKnown: number;
+}
+export interface Violation {
+    rule: string;
+    severity: string;
+    message: string;
+}
+export interface CheckResult {
+    passed: boolean;
+    violations: Violation[];
+}
+export interface TelemetryEvent {
+    eventType: string;
+    traceId?: string;
+    toolId?: string;
+    tokensIn?: number;
+    tokensOut?: number;
+    latencyMs?: number;
+    modelId?: string;
+    modelTier?: string;
+    /** ISO-8601 timestamp of when the event occurred on the client. Used for accurate timeline ordering. */
+    timestamp?: string;
+    payload?: Record<string, unknown>;
+    actor?: Record<string, unknown>;
+}
+export interface PrimusNamespace {
+    classify(message: string, modules: {
+        moduleId: string;
+    }[]): Promise<ClassifyResult>;
+}
+export interface WardenNamespace {
+    check(input: string, policies: string[]): Promise<CheckResult>;
+}
+export interface AegisNamespace {
+    analyze(text: string, options?: AnalyzeOptions): Promise<AnalyzeResult>;
+    rehydrate(text: string, mappingToken: string): Promise<string>;
+    checkLeakage(text: string, mappingToken: string, locales?: string[]): Promise<LeakageResult>;
+}
+export interface ConfigNamespace {
+    fetch(modules: string[]): Promise<ConfigResult>;
+    /**
+     * Report the app's default model configuration to Glirastes.
+     * Fire-and-forget — errors are silently ignored.
+     * Called automatically by the SDK adapter on first request.
+     */
+    reportModels(models: Record<string, string>): Promise<void>;
+}
+export interface TelemetryNamespace {
+    emit(event: TelemetryEvent): void;
+    flush(): Promise<void>;
+}
+export interface ApprovalCheckResult {
+    required: boolean;
+    requestId?: string | null;
+    status?: string;
+}
+export interface ApprovalDecideResult {
+    ok: boolean;
+}
+export interface ApprovalResolveResult {
+    resolved: boolean;
+    requestId?: string;
+}
+export interface ApprovalsNamespace {
+    check(req: {
+        toolId: string;
+        inputHash: string;
+        /** Optional trace/session ID forwarded to Glirastes for approval audit correlation. */
+        traceId?: string;
+    }): Promise<ApprovalCheckResult>;
+    decide(requestId: string, decision: {
+        decision: 'approved' | 'denied';
+        decidedBy: string;
+    }): Promise<ApprovalDecideResult>;
+    /** Resolve a pending approval by toolId + inputHash (no requestId needed). */
+    resolve(req: {
+        toolId: string;
+        inputHash: string;
+        decision: 'approved' | 'denied';
+        decidedBy: string;
+    }): Promise<ApprovalResolveResult>;
+    hashInput(args: Record<string, unknown>): string;
+}
+export interface Lancer {
+    primus: PrimusNamespace;
+    warden: WardenNamespace;
+    aegis: AegisNamespace;
+    config: ConfigNamespace;
+    telemetry: TelemetryNamespace;
+    /** Approval flows managed by Glirastes. Optional — only present when the Glirastes API supports approvals. */
+    approvals?: ApprovalsNamespace;
+    destroy(): void;
+}

package/dist/server/lancer/types.js

@@ -0,0 +1,5 @@
+// ---------------------------------------------------------------------------
+// Lancer SDK Types
+// ---------------------------------------------------------------------------
+export {};
+//# sourceMappingURL=types.js.map

package/dist/server/lancer/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/server/lancer/types.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E"}

package/dist/server/pii-shield/aegis-detector.d.ts

@@ -0,0 +1,26 @@
+import type { PiiDetector } from '../../types.js';
+/**
+ * Shape of an Aegis-compatible analyze method (duck-typed, no Lancer dep).
+ * Matches `lancer.aegis.analyze()`.
+ */
+export interface AegisLike {
+    analyze(text: string, locales: string[]): Promise<{
+        entities: Array<{
+            type: string;
+            start: number;
+            end: number;
+            value: string;
+            confidence?: number;
+        }>;
+    }>;
+}
+/**
+ * Creates a PiiDetector that delegates to a Lancer Aegis namespace.
+ *
+ * Usage:
+ * ```ts
+ * import { createAegisDetector } from './index.js';
+ * const detector = createAegisDetector(lancer.aegis);
+ * ```
+ */
+export declare function createAegisDetector(aegis: AegisLike): PiiDetector;

package/dist/server/pii-shield/aegis-detector.js

@@ -0,0 +1,24 @@
+/**
+ * Creates a PiiDetector that delegates to a Lancer Aegis namespace.
+ *
+ * Usage:
+ * ```ts
+ * import { createAegisDetector } from './index.js';
+ * const detector = createAegisDetector(lancer.aegis);
+ * ```
+ */
+export function createAegisDetector(aegis) {
+    return {
+        async detect(text, locales) {
+            const result = await aegis.analyze(text, locales ?? ['de', 'en']);
+            return result.entities.map((e) => ({
+                type: e.type,
+                start: e.start,
+                end: e.end,
+                score: e.confidence ?? 1.0,
+                text: e.value,
+            }));
+        },
+    };
+}
+//# sourceMappingURL=aegis-detector.js.map

package/dist/server/pii-shield/aegis-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aegis-detector.js","sourceRoot":"","sources":["../../../src/server/pii-shield/aegis-detector.ts"],"names":[],"mappings":"AAkBA;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAgB;IAClD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAAkB;YAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAClE,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,UAAU,IAAI,GAAG;gBAC1B,IAAI,EAAE,CAAC,CAAC,KAAK;aACd,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/pii-shield/create-pii-shield.d.ts

@@ -0,0 +1,2 @@
+import type { PiiShield, PiiShieldConfig } from '../../types.js';
+export declare function createPiiShield(config: PiiShieldConfig): PiiShield;

package/dist/server/pii-shield/create-pii-shield.js

@@ -0,0 +1,189 @@
+import { createSessionStore } from './session-mapping.js';
+import { deepWalkReplace } from './deep-walk.js';
+import { detectLeakage } from './leakage.js';
+export function createPiiShield(config) {
+    const store = createSessionStore(config.locale);
+    const auditLog = new Map();
+    const sessionStats = new Map();
+    function getStats(sessionId) {
+        let stats = sessionStats.get(sessionId);
+        if (!stats) {
+            stats = { startedAt: Date.now(), totalMessages: 0, totalToolCalls: 0, leakageDetected: 0 };
+            sessionStats.set(sessionId, stats);
+        }
+        return stats;
+    }
+    function addAuditEntry(entry) {
+        let entries = auditLog.get(entry.sessionId);
+        if (!entries) {
+            entries = [];
+            auditLog.set(entry.sessionId, entries);
+        }
+        entries.push(entry);
+        config.onAudit?.(entry);
+    }
+    function buildAuditEntry(sessionId, direction, entities, opts) {
+        return {
+            sessionId,
+            timestamp: new Date().toISOString(),
+            direction,
+            leakage: opts?.leakage,
+            detections: entities.map((e) => ({
+                type: e.type,
+                detector: 'pii-shield',
+                confidence: e.score,
+                position: { start: e.start, end: e.end },
+                length: e.text.length,
+            })),
+            totalDetected: entities.length,
+            totalAnonymized: entities.length,
+            mode: 'pseudonymize',
+            locale: config.locale,
+        };
+    }
+    async function outbound(text, sessionId) {
+        const session = store.getOrCreate(sessionId);
+        const stats = getStats(sessionId);
+        stats.totalMessages++;
+        const detected = await config.detector.detect(text, [config.locale]);
+        if (detected.length === 0) {
+            addAuditEntry(buildAuditEntry(sessionId, 'outbound', []));
+            return text;
+        }
+        // Sort by start descending so replacements don't shift indices
+        const sorted = [...detected].sort((a, b) => b.start - a.start);
+        let result = text;
+        for (const entity of sorted) {
+            const pseudonym = session.getOrCreatePseudonym(entity.text, entity.type);
+            result = result.slice(0, entity.start) + pseudonym + result.slice(entity.end);
+        }
+        addAuditEntry(buildAuditEntry(sessionId, 'outbound', detected));
+        return result;
+    }
+    function inbound(text, sessionId) {
+        const session = store.getOrCreate(sessionId);
+        // Check for leakage BEFORE de-pseudonymization
+        if (config.leakageDetection) {
+            const originals = session.allOriginals();
+            const leaked = detectLeakage(text, originals);
+            if (leaked.length > 0) {
+                const stats = getStats(sessionId);
+                stats.leakageDetected += leaked.length;
+                const leakEntities = leaked.map((l) => ({
+                    type: 'custom',
+                    start: text.indexOf(l),
+                    end: text.indexOf(l) + l.length,
+                    score: 1.0,
+                    text: l,
+                }));
+                addAuditEntry(buildAuditEntry(sessionId, 'inbound', leakEntities, { leakage: true }));
+            }
+        }
+        // Replace pseudonyms with originals
+        const originals = session.allOriginals();
+        let result = text;
+        for (const original of originals) {
+            const pseudonym = session.getPseudonym(original);
+            if (!pseudonym)
+                continue;
+            result = result.split(pseudonym).join(original);
+        }
+        return result;
+    }
+    function rehydrateArgs(args, sessionId) {
+        const session = store.getOrCreate(sessionId);
+        const result = deepWalkReplace(args, (s) => {
+            // Check if the entire string is a known pseudonym
+            const original = session.resolveOriginal(s);
+            if (original)
+                return original;
+            // Check if any known pseudonyms appear as substrings
+            const originals = session.allOriginals();
+            let replaced = s;
+            for (const orig of originals) {
+                const pseudonym = session.getPseudonym(orig);
+                if (!pseudonym)
+                    continue;
+                replaced = replaced.split(pseudonym).join(orig);
+            }
+            return replaced;
+        });
+        addAuditEntry(buildAuditEntry(sessionId, 'rehydrate-args', []));
+        return result;
+    }
+    async function anonymizeResult(result, sessionId) {
+        const session = store.getOrCreate(sessionId);
+        const stats = getStats(sessionId);
+        stats.totalToolCalls++;
+        // Detect PII in stringified result
+        const text = typeof result === 'string' ? result : JSON.stringify(result);
+        const detected = await config.detector.detect(text, [config.locale]);
+        // Ensure pseudonyms exist for all detected entities
+        for (const entity of detected) {
+            session.getOrCreatePseudonym(entity.text, entity.type);
+        }
+        // Deep-walk and replace originals with pseudonyms
+        const originals = session.allOriginals();
+        const anonymized = deepWalkReplace(result, (s) => {
+            let replaced = s;
+            for (const original of originals) {
+                const pseudonym = session.getPseudonym(original);
+                if (!pseudonym)
+                    continue;
+                replaced = replaced.split(original).join(pseudonym);
+            }
+            return replaced;
+        });
+        addAuditEntry(buildAuditEntry(sessionId, 'anonymize-result', detected));
+        return anonymized;
+    }
+    function getComplianceSummary(sessionId) {
+        const stats = getStats(sessionId);
+        const entries = auditLog.get(sessionId) ?? [];
+        const byType = {};
+        const byDetector = {};
+        const byDirection = {};
+        let totalDetected = 0;
+        for (const entry of entries) {
+            totalDetected += entry.totalDetected;
+            byDirection[entry.direction] = (byDirection[entry.direction] ?? 0) + entry.totalDetected;
+            for (const det of entry.detections) {
+                byType[det.type] = (byType[det.type] ?? 0) + 1;
+                byDetector[det.detector] = (byDetector[det.detector] ?? 0) + 1;
+            }
+        }
+        const durationMs = Date.now() - stats.startedAt;
+        const durationSec = Math.floor(durationMs / 1000);
+        const minutes = Math.floor(durationSec / 60);
+        const seconds = durationSec % 60;
+        return {
+            sessionId,
+            duration: `${minutes}m ${seconds}s`,
+            totalMessages: stats.totalMessages,
+            totalToolCalls: stats.totalToolCalls,
+            piiStats: {
+                totalDetected,
+                byType,
+                byDetector,
+                byDirection,
+            },
+            mode: 'pseudonymize',
+            leakageDetected: stats.leakageDetected,
+            verdict: stats.leakageDetected > 0 ? 'LEAKAGE_DETECTED' : 'COMPLIANT',
+        };
+    }
+    function clearSession(sessionId) {
+        store.clear(sessionId);
+        auditLog.delete(sessionId);
+        sessionStats.delete(sessionId);
+    }
+    return {
+        outbound,
+        inbound,
+        rehydrateArgs,
+        anonymizeResult,
+        getComplianceSummary,
+        clearSession,
+    };
+}
+//# sourceMappingURL=create-pii-shield.js.map

package/dist/server/pii-shield/create-pii-shield.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-pii-shield.js","sourceRoot":"","sources":["../../../src/server/pii-shield/create-pii-shield.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAS7C,MAAM,UAAU,eAAe,CAAC,MAAuB;IACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAwB,CAAC;IAErD,SAAS,QAAQ,CAAC,SAAiB;QACjC,IAAI,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;YAC3F,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,aAAa,CAAC,KAAoB;QACzC,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,SAAS,eAAe,CACtB,SAAiB,EACjB,SAAqC,EACrC,QAAqB,EACrB,IAA4B;QAE5B,OAAO;YACL,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS;YACT,OAAO,EAAE,IAAI,EAAE,OAAO;YACtB,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,YAAY;gBACtB,UAAU,EAAE,CAAC,CAAC,KAAK;gBACnB,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;gBACxC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,eAAe,EAAE,QAAQ,CAAC,MAAM;YAChC,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,SAAiB;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAClC,KAAK,CAAC,aAAa,EAAE,CAAC;QAEtB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAErE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,aAAa,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+DAA+D;QAC/D,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAE/D,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChF,CAAC;QAED,aAAa,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,OAAO,CAAC,IAAY,EAAE,SAAiB;QAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAE7C,+CAA+C;QAC/C,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAClC,KAAK,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC;gBACvC,MAAM,YAAY,GAAgB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnD,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;oBACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM;oBAC/B,KAAK,EAAE,GAAG;oBACV,IAAI,EAAE,CAAC;iBACR,CAAC,CAAC,CAAC;gBACJ,aAAa,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACzC,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,aAAa,CACpB,IAA6B,EAC7B,SAAiB;QAEjB,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE;YACjD,kDAAkD;YAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAE9B,qDAAqD;YACrD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;YACzC,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC7C,IAAI,CAAC,SAAS;oBAAE,SAAS;gBACzB,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAA4B,CAAC;QAE9B,aAAa,CAAC,eAAe,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,eAAe,CAAC,MAAe,EAAE,SAAiB;QAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAClC,KAAK,CAAC,cAAc,EAAE,CAAC;QAEvB,mCAAmC;QACnC,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAErE,oDAAoD;QACpD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,kDAAkD;QAClD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACvD,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACjD,IAAI,CAAC,SAAS;oBAAE,SAAS;gBACzB,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,aAAa,CAAC,eAAe,CAAC,SAAS,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,SAAS,oBAAoB,CAAC,SAAiB;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAE9C,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,MAAM,WAAW,GAA2B,EAAE,CAAC;QAC/C,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC;YACrC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC;YACzF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC/C,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,WAAW,GAAG,EAAE,CAAC;QAEjC,OAAO;YACL,SAAS;YACT,QAAQ,EAAE,GAAG,OAAO,KAAK,OAAO,GAAG;YACnC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE;gBACR,aAAa;gBACb,MAAM;gBACN,UAAU;gBACV,WAAW;aACZ;YACD,IAAI,EAAE,cAAc;YACpB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,OAAO,EAAE,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW;SACtE,CAAC;IACJ,CAAC;IAED,SAAS,YAAY,CAAC,SAAiB;QACrC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED,OAAO;QACL,QAAQ;QACR,OAAO;QACP,aAAa;QACb,eAAe;QACf,oBAAoB;QACpB,YAAY;KACb,CAAC;AACJ,CAAC"}

package/dist/server/pii-shield/deep-walk.d.ts

@@ -0,0 +1 @@
+export declare function deepWalkReplace(value: unknown, replacer: (s: string) => string): unknown;

package/dist/server/pii-shield/deep-walk.js

@@ -0,0 +1,17 @@
+export function deepWalkReplace(value, replacer) {
+    if (typeof value === 'string') {
+        return replacer(value);
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => deepWalkReplace(item, replacer));
+    }
+    if (value !== null && typeof value === 'object') {
+        const result = {};
+        for (const [key, val] of Object.entries(value)) {
+            result[key] = deepWalkReplace(val, replacer);
+        }
+        return result;
+    }
+    return value;
+}
+//# sourceMappingURL=deep-walk.js.map

package/dist/server/pii-shield/deep-walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deep-walk.js","sourceRoot":"","sources":["../../../src/server/pii-shield/deep-walk.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,QAA+B;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/server/pii-shield/fake-data.d.ts

@@ -0,0 +1,5 @@
+import type { PiiCategory } from '../../types.js';
+export interface FakeDataGenerator {
+    generate(category: PiiCategory | string): string;
+}
+export declare function createFakeDataGenerator(seed: number, locale: string): FakeDataGenerator;