glirastes 0.4.0 → 0.5.0

package/dist/server/local-pipeline.js

@@ -0,0 +1,152 @@
+import { createAiRouter, createAdaptiveFastPath, createIntentClassifier, createModelSelector, createModelSelectorFromMap, } from './core/index.js';
+import { createLocalGuardrails } from './core/local-guardrails.js';
+const CONTINUATION_TTL_MS = 10 * 60 * 1000;
+const CONTINUATION_MAX_ENTRIES = 200;
+/** The request and the user messages before it; assistant text added by a continuation does not count. */
+function continuationKeyOf(input, conversationHistory) {
+    return JSON.stringify([
+        input,
+        (conversationHistory ?? []).filter((message) => message.role === 'user').map((message) => message.content),
+    ]);
+}
+/**
+ * Target-app pipeline for content-bearing guardrails, intent classification,
+ * routing, and model selection. No request or user content leaves the local
+ * runtime unless the configured local model provider itself receives it.
+ */
+export function createLocalAiPipeline(config) {
+    const guardrails = createLocalGuardrails(config.guardrails);
+    const fastPath = createAdaptiveFastPath(config.fastPath, config.fastPathStorage);
+    let fastPathReady;
+    const ensureFastPathReady = () => {
+        fastPathReady ??= fastPath.loadFromStorage();
+        return fastPathReady;
+    };
+    const router = createAiRouter({
+        modules: config.modules,
+        relatedModules: config.relatedModules,
+        confidenceThresholds: config.confidenceThresholds,
+        routingMode: config.routingMode ?? 'focused',
+    });
+    const modelSelector = config.models && config.modelInstanceFactory
+        ? createModelSelectorFromMap(config.models, config.modelInstanceFactory, config.modules)
+        : config.modelSelector
+            ? createModelSelector(config.modelSelector, config.modules)
+            : undefined;
+    const classifierModel = config.classifier?.model
+        ?? config.modelSelector?.fast.instance
+        ?? (config.models && config.modelInstanceFactory
+            ? config.modelInstanceFactory(config.models.fast
+                ?? config.models.standard
+                ?? 'default')
+            : undefined);
+    const classifier = createIntentClassifier({
+        ...config.classifier,
+        modules: config.modules,
+        model: classifierModel,
+        generateText: config.generateText,
+    });
+    const followupsEnabled = config.followups?.enabled ?? false;
+    const defaultModel = { modelId: 'default' };
+    // A request reaches the pipeline again when it continues after an approval:
+    // same words, same earlier user messages. It keeps its classification, so
+    // the continuation saves the classifier call and stays in its module.
+    const recentIntents = new Map();
+    const selectModel = (intent, context) => modelSelector?.select(intent, context) ?? defaultModel;
+    return {
+        async process(input, context, conversationHistory) {
+            const validation = guardrails.validate(input);
+            config.onAudit?.({
+                type: validation.blocked ? 'guardrail.blocked' : 'guardrail.passed',
+                timestamp: new Date().toISOString(),
+                sessionId: '',
+                source: 'server-core',
+                details: {
+                    inputLength: input.length,
+                    blocked: validation.blocked,
+                    reason: validation.reason,
+                },
+            });
+            if (validation.blocked) {
+                const intent = { intent: 'ambiguous', confidence: 0 };
+                return {
+                    model: selectModel(intent, context),
+                    tools: [],
+                    toolSelection: 'explicit',
+                    sanitizedInput: validation.sanitized,
+                    intent,
+                    module: null,
+                    followupsEnabled,
+                    blocked: true,
+                };
+            }
+            const startedAt = Date.now();
+            await ensureFastPathReady();
+            const hasConversationHistory = Boolean(conversationHistory?.length);
+            let intent = hasConversationHistory
+                ? null
+                : fastPath.match(validation.sanitized);
+            const fastPathHit = intent !== null;
+            const continuationKey = continuationKeyOf(validation.sanitized, conversationHistory);
+            const continued = intent ? undefined : recentIntents.get(continuationKey);
+            const continuationHit = !!continued && Date.now() - continued.at < CONTINUATION_TTL_MS;
+            if (continuationHit)
+                intent = continued.intent;
+            if (!intent) {
+                intent = await classifier.classify(validation.sanitized, context, conversationHistory);
+                if (!hasConversationHistory) {
+                    fastPath.learn(validation.sanitized, intent);
+                }
+                if (intent.intent !== 'ambiguous') {
+                    recentIntents.delete(continuationKey);
+                    recentIntents.set(continuationKey, { intent, at: Date.now() });
+                    if (recentIntents.size > CONTINUATION_MAX_ENTRIES) {
+                        recentIntents.delete(recentIntents.keys().next().value);
+                    }
+                }
+            }
+            void fastPath.saveToStorage();
+            config.onAudit?.({
+                type: 'intent.classified',
+                timestamp: new Date().toISOString(),
+                sessionId: '',
+                source: 'server-core',
+                details: {
+                    intent: intent.intent,
+                    confidence: intent.confidence,
+                    latencyMs: Date.now() - startedAt,
+                    fastPathHit,
+                },
+            });
+            const selected = router.route(intent, config.modules.flatMap((module) => [
+                ...module.tools,
+                ...(module.sharedTools ?? []),
+            ]));
+            config.onAudit?.({
+                type: 'routing.resolved',
+                timestamp: new Date().toISOString(),
+                sessionId: '',
+                source: 'server-core',
+                details: {
+                    module: selected.module?.id ?? null,
+                    strategy: selected.strategy,
+                    toolCount: selected.tools.length,
+                },
+            });
+            const tools = [...selected.tools];
+            if (followupsEnabled)
+                tools.push('suggest_followups');
+            return {
+                model: selectModel(intent, context),
+                tools: [...new Set(tools)],
+                ...(config.routingMode === 'legacy' ? {} : { toolSelection: 'explicit' }),
+                sanitizedInput: validation.sanitized,
+                intent,
+                module: selected.module,
+                followupsEnabled,
+                blocked: false,
+            };
+        },
+    };
+}
+//# sourceMappingURL=local-pipeline.js.map

package/dist/server/local-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-pipeline.js","sourceRoot":"","sources":["../../src/server/local-pipeline.ts"],"names":[],"mappings":"AASA,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,GAE3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AASnE,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,0GAA0G;AAC1G,SAAS,iBAAiB,CACxB,KAAa,EACb,mBAAiF;IAEjF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK;QACL,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;KAC3G,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA6B;IAE7B,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,sBAAsB,CACrC,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,eAAe,CACvB,CAAC;IACF,IAAI,aAAwC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,GAAG,EAAE;QAC/B,aAAa,KAAK,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC7C,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,cAAc,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS;KAC7C,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,oBAAoB;QAChE,CAAC,CAAC,0BAA0B,CACxB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,oBAAoB,EAC3B,MAAM,CAAC,OAAO,CACf;QACH,CAAC,CAAC,MAAM,CAAC,aAAa;YACpB,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC;YAC3D,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK;WAC3C,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ;WACnC,CACD,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,oBAAoB;YAC1C,CAAC,CAAC,MAAM,CAAC,oBAAoB,CACzB,MAAM,CAAC,MAAM,CAAC,IAAI;mBACb,MAAM,CAAC,MAAM,CAAC,QAAQ;mBACtB,SAAS,CACf;YACH,CAAC,CAAC,SAAS,CACd,CAAC;IACJ,MAAM,UAAU,GAAG,sBAAsB,CAAC;QACxC,GAAG,MAAM,CAAC,UAAU;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,eAAe;QACtB,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,SAAS,EAAE,OAAO,IAAI,KAAK,CAAC;IAC5D,MAAM,YAAY,GAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACzD,4EAA4E;IAC5E,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAwD,CAAC;IAEtF,MAAM,WAAW,GAAG,CAClB,MAA4B,EAC5B,OAAoB,EACpB,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,YAAY,CAAC;IAE5D,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB;YAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9C,MAAM,CAAC,OAAO,EAAE,CAAC;gBACf,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB;gBACnE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,EAAE;gBACb,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE;oBACP,WAAW,EAAE,KAAK,CAAC,MAAM;oBACzB,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B;aACF,CAAC,CAAC;YAEH,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;gBACtD,OAAO;oBACL,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC;oBACnC,KAAK,EAAE,EAAE;oBACT,aAAa,EAAE,UAAU;oBACzB,cAAc,EAAE,UAAU,CAAC,SAAS;oBACpC,MAAM;oBACN,MAAM,EAAE,IAAI;oBACZ,gBAAgB;oBAChB,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,mBAAmB,EAAE,CAAC;YAC5B,MAAM,sBAAsB,GAAG,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;YACpE,IAAI,MAAM,GAAG,sBAAsB;gBACjC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,KAAK,IAAI,CAAC;YACpC,MAAM,eAAe,GAAG,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YACrF,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC1E,MAAM,eAAe,GAAG,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,EAAE,GAAG,mBAAmB,CAAC;YACvF,IAAI,eAAe;gBAAE,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;YAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAChC,UAAU,CAAC,SAAS,EACpB,OAAO,EACP,mBAAmB,CACpB,CAAC;gBACF,IAAI,CAAC,sBAAsB,EAAE,CAAC;oBAC5B,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBAClC,aAAa,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;oBACtC,aAAa,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC/D,IAAI,aAAa,CAAC,IAAI,GAAG,wBAAwB,EAAE,CAAC;wBAClD,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;YACH,CAAC;YACD,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC9B,MAAM,CAAC,OAAO,EAAE,CAAC;gBACf,IAAI,EAAE,mBAAmB;gBACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,EAAE;gBACb,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE;oBACP,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBACjC,WAAW;iBACZ;aACF,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAC3B,MAAM,EACN,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjC,GAAG,MAAM,CAAC,KAAK;gBACf,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;aAC9B,CAAC,CACH,CAAC;YACF,MAAM,CAAC,OAAO,EAAE,CAAC;gBACf,IAAI,EAAE,kBAAkB;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,EAAE;gBACb,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;oBACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;iBACjC;aACF,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,gBAAgB;gBAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAEtD,OAAO;gBACL,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC;gBACnC,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC1B,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAmB,EAAE,CAAC;gBAClF,cAAc,EAAE,UAAU,CAAC,SAAS;gBACpC,MAAM;gBACN,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,gBAAgB;gBAChB,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/pii-shield/index.d.ts

@@ -1,4 +1,5 @@
 export { createPiiShield } from './create-pii-shield.js';
+export { createRegexPiiDetector, type RegexPiiDetectorConfig, } from './regex-detector.js';
 export { createAegisDetector } from './aegis-detector.js';
 export type { AegisLike } from './aegis-detector.js';
 export type { PiiCategory, PiiEntity, PiiDetector, PiiShield, PiiShieldConfig, PiiAuditEntry, ComplianceSummary, MappingEntry, } from '../../types.js';

package/dist/server/pii-shield/index.js

@@ -1,5 +1,6 @@
 // Factory
 export { createPiiShield } from './create-pii-shield.js';
+export { createRegexPiiDetector, } from './regex-detector.js';
 // Aegis (Pro) detector adapter
 export { createAegisDetector } from './aegis-detector.js';
 //# sourceMappingURL=index.js.map

package/dist/server/pii-shield/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/pii-shield/index.ts"],"names":[],"mappings":"AAAA,UAAU;AACV,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,+BAA+B;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/pii-shield/index.ts"],"names":[],"mappings":"AAAA,UAAU;AACV,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACL,sBAAsB,GAEvB,MAAM,qBAAqB,CAAC;AAE7B,+BAA+B;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/server/pii-shield/regex-detector.d.ts

@@ -0,0 +1,13 @@
+import type { PiiCategory, PiiDetector } from '../../types.js';
+interface RegexPattern {
+    type: PiiCategory;
+    pattern: RegExp;
+    score: number;
+    validate?: (match: string) => boolean;
+}
+export interface RegexPiiDetectorConfig {
+    categories?: PiiCategory[];
+    customPatterns?: RegexPattern[];
+}
+export declare function createRegexPiiDetector(config?: RegexPiiDetectorConfig): PiiDetector;
+export {};

package/dist/server/pii-shield/regex-detector.js

@@ -0,0 +1,109 @@
+const COMMON_PATTERNS = [
+    {
+        type: 'email',
+        pattern: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g,
+        score: 0.95,
+    },
+    {
+        type: 'iban',
+        pattern: /\b[A-Z]{2}\d{2}(?:\s?[A-Z0-9]{4}){3,7}\s?[A-Z0-9]{0,2}\b/g,
+        score: 0.9,
+        validate: (match) => {
+            const length = match.replace(/\s/g, '').length;
+            return length >= 15 && length <= 34;
+        },
+    },
+    {
+        type: 'ip_address',
+        pattern: /\b(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\b/g,
+        score: 0.7,
+    },
+    {
+        type: 'url',
+        pattern: /https?:\/\/[^\s<>"{}|\\^`[\]]+/g,
+        score: 0.8,
+    },
+];
+const GERMAN_PATTERNS = [
+    {
+        type: 'phone',
+        pattern: /(?:\+49|0049)[\s.-]?\(?\d{2,5}\)?[\s.-]?\d{3,10}(?:[\s.-]?\d{1,8})?/g,
+        score: 0.8,
+        validate: (match) => {
+            const length = match.replace(/\D/g, '').length;
+            return length >= 7 && length <= 15;
+        },
+    },
+    {
+        type: 'phone',
+        pattern: /\b0\d{2,4}[\s/.-]\d{3,8}(?:[\s/.-]?\d{1,6})?\b/g,
+        score: 0.7,
+    },
+    {
+        type: 'date_of_birth',
+        pattern: /\b(?:0[1-9]|[12]\d|3[01])\.(?:0[1-9]|1[0-2])\.(?:19|20)\d{2}\b/g,
+        score: 0.6,
+    },
+    {
+        type: 'tax_id',
+        pattern: /\b\d{2,3}\/\d{3,4}\/\d{4,5}\b/g,
+        score: 0.6,
+    },
+    {
+        type: 'address',
+        pattern: /\b\d{5}\s+[A-ZÄÖÜ][a-zäöüß]+/g,
+        score: 0.6,
+    },
+];
+function deduplicate(entities) {
+    const sorted = [...entities].sort((left, right) => (left.start - right.start
+        || right.score - left.score
+        || (right.end - right.start) - (left.end - left.start)));
+    const result = [];
+    for (const entity of sorted) {
+        const previous = result.at(-1);
+        if (!previous || entity.start >= previous.end) {
+            result.push(entity);
+        }
+    }
+    return result;
+}
+export function createRegexPiiDetector(config = {}) {
+    return {
+        detect(text, locales = []) {
+            const locale = locales[0]?.split('-')[0]?.toLowerCase();
+            let patterns = [
+                ...COMMON_PATTERNS,
+                ...(locale === 'de' ? GERMAN_PATTERNS : []),
+                ...(config.customPatterns ?? []),
+            ];
+            if (config.categories?.length) {
+                const allowed = new Set(config.categories);
+                patterns = patterns.filter((pattern) => allowed.has(pattern.type));
+            }
+            const entities = [];
+            for (const definition of patterns) {
+                const pattern = new RegExp(definition.pattern.source, definition.pattern.flags.includes('g')
+                    ? definition.pattern.flags
+                    : `${definition.pattern.flags}g`);
+                for (const match of text.matchAll(pattern)) {
+                    const value = match[0];
+                    const start = match.index;
+                    if (start === undefined || !value)
+                        continue;
+                    if (definition.validate && !definition.validate(value))
+                        continue;
+                    entities.push({
+                        type: definition.type,
+                        start,
+                        end: start + value.length,
+                        score: definition.score,
+                        text: value,
+                    });
+                }
+            }
+            return deduplicate(entities);
+        },
+    };
+}
+//# sourceMappingURL=regex-detector.js.map

package/dist/server/pii-shield/regex-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regex-detector.js","sourceRoot":"","sources":["../../../src/server/pii-shield/regex-detector.ts"],"names":[],"mappings":"AAkBA,MAAM,eAAe,GAAmB;IACtC;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,iDAAiD;QAC1D,KAAK,EAAE,IAAI;KACZ;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,2DAA2D;QACpE,KAAK,EAAE,GAAG;QACV,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;YAC/C,OAAO,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,CAAC;QACtC,CAAC;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,8EAA8E;QACvF,KAAK,EAAE,GAAG;KACX;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,iCAAiC;QAC1C,KAAK,EAAE,GAAG;KACX;CACF,CAAC;AAEF,MAAM,eAAe,GAAmB;IACtC;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,sEAAsE;QAC/E,KAAK,EAAE,GAAG;QACV,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;YAC/C,OAAO,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE,CAAC;QACrC,CAAC;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,iDAAiD;QAC1D,KAAK,EAAE,GAAG;KACX;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,iEAAiE;QAC1E,KAAK,EAAE,GAAG;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,gCAAgC;QACzC,KAAK,EAAE,GAAG;KACX;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,+BAA+B;QACxC,KAAK,EAAE,GAAG;KACX;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,QAAqB;IACxC,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CACjD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK;WACrB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;WACxB,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CACvD,CAAC,CAAC;IACH,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAiC,EAAE;IAEnC,OAAO;QACL,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,EAAE;YACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACxD,IAAI,QAAQ,GAAG;gBACb,GAAG,eAAe;gBAClB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;aACjC,CAAC;YACF,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC3C,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,QAAQ,GAAgB,EAAE,CAAC;YACjC,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,UAAU,CAAC,OAAO,CAAC,MAAM,EACzB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACpC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK;oBAC1B,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,GAAG,CACnC,CAAC;gBACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;oBAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK;wBAAE,SAAS;oBAC5C,IAAI,UAAU,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAAE,SAAS;oBACjE,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,KAAK;wBACL,GAAG,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM;wBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;wBACvB,IAAI,EAAE,KAAK;qBACZ,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/testing/guardrails.js

@@ -1,69 +1,5 @@
 import { describe, it, expect } from 'vitest';
-// ============================================================================
-// Local guardrails implementation for testing (basic input validation only).
-// Full guardrails with Lancer Warden delegation live in server-pro.
-// ============================================================================
-const DEFAULT_INJECTION_PATTERNS = [
-    /ignore\s+(all\s+)?previous\s+instructions/i,
-    /tell\s+me\s+your\s+(system\s+)?prompt/i,
-    /you\s+are\s+now\s+a\s+different/i,
-    /act\s+as\s+an?\s+(admin|root|system)/i,
-    /bypass\s+(security|auth)/i,
-];
-function createLocalGuardrails(config) {
-    const maxLength = config?.maxInputLength ?? 4000;
-    const injectionEnabled = config?.enableInjectionDetection ?? true;
-    const patterns = [
-        ...DEFAULT_INJECTION_PATTERNS,
-        ...(config?.injectionPatterns ?? []),
-    ];
-    function validate(input) {
-        const trimmed = input.trim();
-        // Block empty / whitespace-only
-        if (trimmed.length === 0) {
-            return { valid: false, blocked: true, reason: 'empty_input', sanitized: '' };
-        }
-        // Block oversized
-        if (trimmed.length > maxLength) {
-            return {
-                valid: false,
-                blocked: true,
-                reason: 'input_too_long',
-                sanitized: trimmed.slice(0, maxLength),
-            };
-        }
-        // Injection detection (signal only, not blocked)
-        if (injectionEnabled) {
-            for (const pattern of patterns) {
-                if (pattern.test(trimmed)) {
-                    return {
-                        valid: true,
-                        blocked: false,
-                        reason: 'prompt_injection_signal',
-                        sanitized: trimmed,
-                    };
-                }
-            }
-        }
-        // Custom validators
-        if (config?.customValidators) {
-            for (const validator of config.customValidators) {
-                const result = validator.validate(trimmed);
-                if (!result.valid)
-                    return result;
-            }
-        }
-        return { valid: true, blocked: false, sanitized: trimmed };
-    }
-    function sanitize(input) {
-        const trimmed = input.trim();
-        if (trimmed.length > maxLength) {
-            return trimmed.slice(0, maxLength);
-        }
-        return trimmed;
-    }
-    return { validate, sanitize };
-}
+import { createLocalGuardrails } from '../core/local-guardrails.js';
 const DEFAULT_VALID_INPUTS = [
     'show my tasks',
     'create a task called Shopping',

package/dist/server/testing/guardrails.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../../../src/server/testing/guardrails.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAI9C,+EAA+E;AAC/E,6EAA6E;AAC7E,oEAAoE;AACpE,+EAA+E;AAE/E,MAAM,0BAA0B,GAAa;IAC3C,4CAA4C;IAC5C,wCAAwC;IACxC,kCAAkC;IAClC,uCAAuC;IACvC,2BAA2B;CAC5B,CAAC;AAEF,SAAS,qBAAqB,CAAC,MAAyB;IACtD,MAAM,SAAS,GAAG,MAAM,EAAE,cAAc,IAAI,IAAI,CAAC;IACjD,MAAM,gBAAgB,GAAG,MAAM,EAAE,wBAAwB,IAAI,IAAI,CAAC;IAClE,MAAM,QAAQ,GAAG;QACf,GAAG,0BAA0B;QAC7B,GAAG,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;KACrC,CAAC;IAEF,SAAS,QAAQ,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAE7B,gCAAgC;QAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC/E,CAAC;QAED,kBAAkB;QAClB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC/B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,gBAAgB;gBACxB,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;aACvC,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,IAAI,gBAAgB,EAAE,CAAC;YACrB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1B,OAAO;wBACL,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,yBAAyB;wBACjC,SAAS,EAAE,OAAO;qBACnB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,IAAI,MAAM,EAAE,gBAAgB,EAAE,CAAC;YAC7B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,KAAK;oBAAE,OAAO,MAAM,CAAC;YACnC,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC7D,CAAC;IAED,SAAS,QAAQ,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,oBAAoB,GAAG;IAC3B,eAAe;IACf,+BAA+B;IAC/B,mBAAmB;IACnB,iBAAiB;IACjB,qBAAqB;CACtB,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,yCAAyC;IACzC,8BAA8B;IAC9B,4BAA4B;IAC5B,mCAAmC;IACnC,qCAAqC;CACtC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,gBAAmC,EACnC,OAA+B;IAE/B,MAAM,SAAS,GAAG,gBAAgB,EAAE,cAAc,IAAI,IAAI,CAAC;IAC3D,MAAM,UAAU,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG;QAClB,GAAG,oBAAoB;QACvB,GAAG,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;KACrC,CAAC;IAEF,MAAM,eAAe,GAAG;QACtB,GAAG,wBAAwB;QAC3B,GAAG,CAAC,OAAO,EAAE,oBAAoB,IAAI,EAAE,CAAC;KACzC,CAAC;IAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;YAC5B,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,4BAA4B,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;YACnC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CACtB,+BAA+B,EAC/B,CAAC,KAAK,EAAE,EAAE;gBACR,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACtD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;YACnC,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;gBAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACvC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;gBACtC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;gBAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;gBAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC/C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;YAC5B,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;gBAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;gBACtD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;gBACvD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC;gBACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../../../src/server/testing/guardrails.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,MAAM,oBAAoB,GAAG;IAC3B,eAAe;IACf,+BAA+B;IAC/B,mBAAmB;IACnB,iBAAiB;IACjB,qBAAqB;CACtB,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,yCAAyC;IACzC,8BAA8B;IAC9B,4BAA4B;IAC5B,mCAAmC;IACnC,qCAAqC;CACtC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,gBAAmC,EACnC,OAA+B;IAE/B,MAAM,SAAS,GAAG,gBAAgB,EAAE,cAAc,IAAI,IAAI,CAAC;IAC3D,MAAM,UAAU,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG;QAClB,GAAG,oBAAoB;QACvB,GAAG,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;KACrC,CAAC;IAEF,MAAM,eAAe,GAAG;QACtB,GAAG,wBAAwB;QAC3B,GAAG,CAAC,OAAO,EAAE,oBAAoB,IAAI,EAAE,CAAC;KACzC,CAAC;IAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;YAC5B,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,4BAA4B,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;YACnC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CACtB,+BAA+B,EAC/B,CAAC,KAAK,EAAE,EAAE;gBACR,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACtD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;YACnC,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;gBAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACvC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;gBACtC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;gBAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;gBAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC/C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;YAC5B,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;gBAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;gBACtD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;gBACvD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC;gBACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/testing/helpers.js

@@ -1,65 +1,4 @@
-import { createAiRouter } from '../core/index.js';
-// ============================================================================
-// Local guardrails for pipeline simulation (basic input validation only).
-// Full guardrails with Lancer Warden delegation live in server-pro.
-// ============================================================================
-const DEFAULT_INJECTION_PATTERNS = [
-    /ignore\s+(all\s+)?previous\s+instructions/i,
-    /tell\s+me\s+your\s+(system\s+)?prompt/i,
-    /you\s+are\s+now\s+a\s+different/i,
-    /act\s+as\s+an?\s+(admin|root|system)/i,
-    /bypass\s+(security|auth)/i,
-];
-function createLocalGuardrails(config) {
-    const maxLength = config?.maxInputLength ?? 4000;
-    const injectionEnabled = config?.enableInjectionDetection ?? true;
-    const patterns = [
-        ...DEFAULT_INJECTION_PATTERNS,
-        ...(config?.injectionPatterns ?? []),
-    ];
-    function validate(input) {
-        const trimmed = input.trim();
-        if (trimmed.length === 0) {
-            return { valid: false, blocked: true, reason: 'empty_input', sanitized: '' };
-        }
-        if (trimmed.length > maxLength) {
-            return {
-                valid: false,
-                blocked: true,
-                reason: 'input_too_long',
-                sanitized: trimmed.slice(0, maxLength),
-            };
-        }
-        if (injectionEnabled) {
-            for (const pattern of patterns) {
-                if (pattern.test(trimmed)) {
-                    return {
-                        valid: true,
-                        blocked: false,
-                        reason: 'prompt_injection_signal',
-                        sanitized: trimmed,
-                    };
-                }
-            }
-        }
-        if (config?.customValidators) {
-            for (const validator of config.customValidators) {
-                const result = validator.validate(trimmed);
-                if (!result.valid)
-                    return result;
-            }
-        }
-        return { valid: true, blocked: false, sanitized: trimmed };
-    }
-    function sanitize(input) {
-        const trimmed = input.trim();
-        if (trimmed.length > maxLength) {
-            return trimmed.slice(0, maxLength);
-        }
-        return trimmed;
-    }
-    return { validate, sanitize };
-}
+import { createAiRouter, createLocalGuardrails, } from '../core/index.js';
 export function buildPipelineComponents(modules, guardrailsConfig, confidenceThresholds) {
     const guardrails = createLocalGuardrails(guardrailsConfig);
     const router = createAiRouter({ modules, confidenceThresholds });

package/dist/server/testing/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/server/testing/helpers.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,+EAA+E;AAC/E,0EAA0E;AAC1E,oEAAoE;AACpE,+EAA+E;AAE/E,MAAM,0BAA0B,GAAa;IAC3C,4CAA4C;IAC5C,wCAAwC;IACxC,kCAAkC;IAClC,uCAAuC;IACvC,2BAA2B;CAC5B,CAAC;AAEF,SAAS,qBAAqB,CAAC,MAAyB;IACtD,MAAM,SAAS,GAAG,MAAM,EAAE,cAAc,IAAI,IAAI,CAAC;IACjD,MAAM,gBAAgB,GAAG,MAAM,EAAE,wBAAwB,IAAI,IAAI,CAAC;IAClE,MAAM,QAAQ,GAAG;QACf,GAAG,0BAA0B;QAC7B,GAAG,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;KACrC,CAAC;IAEF,SAAS,QAAQ,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAE7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC/E,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC/B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,gBAAgB;gBACxB,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;aACvC,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,EAAE,CAAC;YACrB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1B,OAAO;wBACL,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,yBAAyB;wBACjC,SAAS,EAAE,OAAO;qBACnB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,MAAM,EAAE,gBAAgB,EAAE,CAAC;YAC7B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,KAAK;oBAAE,OAAO,MAAM,CAAC;YACnC,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC7D,CAAC;IAED,SAAS,QAAQ,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAYD,MAAM,UAAU,uBAAuB,CACrC,OAA2B,EAC3B,gBAAmC,EACnC,oBAAyD;IAEzD,MAAM,UAAU,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACjE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,MAAM,UAAU,gBAAgB,CAC9B,UAA8B,EAC9B,KAAa,EACb,MAA4B;IAE5B,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEzD,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAErE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;QACnC,MAAM;QACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,4CAA4C;AAC5C,+EAA+E;AAE/E,MAAM,UAAU,qBAAqB,CAAC,OAA2B;IAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC1D,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/server/testing/helpers.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,cAAc,EACd,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAa1B,MAAM,UAAU,uBAAuB,CACrC,OAA2B,EAC3B,gBAAmC,EACnC,oBAAyD;IAEzD,MAAM,UAAU,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACjE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,MAAM,UAAU,gBAAgB,CAC9B,UAA8B,EAC9B,KAAa,EACb,MAA4B;IAE5B,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEzD,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAErE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;QACnC,MAAM;QACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,4CAA4C;AAC5C,+EAA+E;AAE/E,MAAM,UAAU,qBAAqB,CAAC,OAA2B;IAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC1D,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/testing/index.d.ts

@@ -1,6 +1,7 @@
 export { createAiTestSuite } from './create-test-suite.js';
 export type { TestSuiteConfig, RoutingTestCase, GuardrailsTestOptions, SimulatedPipelineResult, AiTestSuite, CombinationTestCase, CombinationTestOptions, ExecutionStep, EdgeCaseTestOptions, CustomEdgeCase, SchemaConsistencyChain, SchemaConsistencyOptions, RegressionTestCase, RegressionContext, MockToolExecutor, ToolDefinitionForTest, } from './types.js';
 export { runSmokeTest } from './smoke.js';
+export { assertModuleRegistryParity } from './registry-parity.js';
 export { runRoutingTest } from './routing.js';
 export { runGuardrailsTest } from './guardrails.js';
 export { runApprovalTest } from './approvals.js';

package/dist/server/testing/index.js

@@ -9,6 +9,7 @@
 export { createAiTestSuite } from './create-test-suite.js';
 // Low-level building blocks (for advanced usage)
 export { runSmokeTest } from './smoke.js';
+export { assertModuleRegistryParity } from './registry-parity.js';
 export { runRoutingTest } from './routing.js';
 export { runGuardrailsTest } from './guardrails.js';
 export { runApprovalTest } from './approvals.js';

package/dist/server/testing/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/testing/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2BAA2B;AAC3B,EAAE;AACF,iEAAiE;AACjE,2DAA2D;AAC3D,uBAAuB;AACvB,+EAA+E;AAE/E,WAAW;AACX,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAsB3D,iDAAiD;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/testing/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2BAA2B;AAC3B,EAAE;AACF,iEAAiE;AACjE,2DAA2D;AAC3D,uBAAuB;AACvB,+EAA+E;AAE/E,WAAW;AACX,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAsB3D,iDAAiD;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,cAAc,CAAC"}

package/dist/server/testing/registry-parity.d.ts

@@ -0,0 +1,18 @@
+import type { ModuleDefinition } from '../../types.js';
+/**
+ * Assert that every tool a module references is actually served by the
+ * execution registry / manifest. Modules referencing retired names once
+ * shipped an app whose model could not call a single domain tool while every
+ * fixture-based probe stayed green — this check must always run against the
+ * real served names, never against a test fixture.
+ *
+ * `servedToolNames` accepts manifest names in either spelling: the signed
+ * dotted definitionId (`ui.navigate`) or its model-safe encoding
+ * (`ui_navigate`). `extraToolNames` covers locally added tools such as
+ * `suggest_followups`.
+ */
+export declare function assertModuleRegistryParity(options: {
+    modules: ReadonlyArray<ModuleDefinition>;
+    servedToolNames: Iterable<string>;
+    extraToolNames?: Iterable<string>;
+}): void;

package/dist/server/testing/registry-parity.js

@@ -0,0 +1,38 @@
+import { modelFacingToolName } from '../../runtime/local-tool-bindings.js';
+/**
+ * Assert that every tool a module references is actually served by the
+ * execution registry / manifest. Modules referencing retired names once
+ * shipped an app whose model could not call a single domain tool while every
+ * fixture-based probe stayed green — this check must always run against the
+ * real served names, never against a test fixture.
+ *
+ * `servedToolNames` accepts manifest names in either spelling: the signed
+ * dotted definitionId (`ui.navigate`) or its model-safe encoding
+ * (`ui_navigate`). `extraToolNames` covers locally added tools such as
+ * `suggest_followups`.
+ */
+export function assertModuleRegistryParity(options) {
+    const served = new Set();
+    for (const name of options.servedToolNames) {
+        served.add(name);
+        served.add(modelFacingToolName(name));
+    }
+    for (const name of options.extraToolNames ?? []) {
+        served.add(name);
+        served.add(modelFacingToolName(name));
+    }
+    const offenders = [];
+    for (const module of options.modules) {
+        for (const tool of module.tools) {
+            if (!served.has(tool) && !served.has(modelFacingToolName(tool))) {
+                offenders.push(`${module.id}: ${tool}`);
+            }
+        }
+    }
+    if (offenders.length > 0) {
+        throw new Error('Module tools unknown to the served registry '
+            + '(module configuration drift):\n'
+            + offenders.join('\n'));
+    }
+}
+//# sourceMappingURL=registry-parity.js.map

package/dist/server/testing/registry-parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-parity.js","sourceRoot":"","sources":["../../../src/server/testing/registry-parity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAI1C;IACC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAChE,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,8CAA8C;cAC5C,iCAAiC;cACjC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CACvB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/server/testing/smoke.d.ts

@@ -1,10 +1,11 @@
 import type { ModuleDefinition } from '../../types.js';
+export { TOOL_NAME_PATTERN } from '../../runtime/local-tool-bindings.js';
 /**
  * Auto-generates smoke tests from module definitions.
  *
  * Tests:
  * - Every module has at least 1 tool
- * - All tool names use snake_case
+ * - All tool names follow the naming convention
  * - No duplicate tool names within a module
  * - If a tool registry is provided, all module tools exist in it
  */

package/dist/server/testing/smoke.js

@@ -1,11 +1,13 @@
 import { describe, it, expect } from 'vitest';
 import { getToolsByModule } from './helpers.js';
+export { TOOL_NAME_PATTERN } from '../../runtime/local-tool-bindings.js';
+import { TOOL_NAME_PATTERN } from '../../runtime/local-tool-bindings.js';
 /**
  * Auto-generates smoke tests from module definitions.
  *
  * Tests:
  * - Every module has at least 1 tool
- * - All tool names use snake_case
+ * - All tool names follow the naming convention
  * - No duplicate tool names within a module
  * - If a tool registry is provided, all module tools exist in it
  */
@@ -28,9 +30,9 @@ export function runSmokeTest(modules, toolRegistry) {
         });
         describe('tool naming conventions', () => {
             const allTools = Object.values(toolsByModule).flat();
-            it('all tool names use snake_case', () => {
+            it('all tool names follow the naming convention', () => {
                 for (const tool of allTools) {
-                    expect(tool, `Tool "${tool}" should be snake_case`).toMatch(/^[a-z][a-z0-9_]*$/);
+                    expect(tool, `Tool "${tool}" should be a definitionId or snake_case name`).toMatch(TOOL_NAME_PATTERN);
                 }
             });
             it('no duplicate tool names within a module', () => {

package/dist/server/testing/smoke.js.map

@@ -1 +1 @@
-{"version":3,"file":"smoke.js","sourceRoot":"","sources":["../../../src/server/testing/smoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,OAA2B,EAC3B,YAAsC;IAEtC,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE3C,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;YACnC,EAAE,CAAC,OAAO,OAAO,CAAC,MAAM,iBAAiB,EAAE,GAAG,EAAE;gBAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC/C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;gBAC1C,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;oBAC3B,MAAM,CACJ,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,EACxB,GAAG,EAAE,oBAAoB,CAC1B,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;YAErD,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;gBACvC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;oBAC5B,MAAM,CACJ,IAAI,EACJ,SAAS,IAAI,wBAAwB,CACtC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;gBACjD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;oBAC3B,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;oBAChC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,YAAY,EAAE,CAAC;YACjB,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;gBACrC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;gBAE7D,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;oBACrD,MAAM,OAAO,GAAa,EAAE,CAAC;oBAC7B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;wBAC3B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;4BACrC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gCACjC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;4BAChC,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,MAAM,CACJ,OAAO,EACP,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnD,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACpB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"smoke.js","sourceRoot":"","sources":["../../../src/server/testing/smoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAEzE;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,OAA2B,EAC3B,YAAsC;IAEtC,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE3C,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;YACnC,EAAE,CAAC,OAAO,OAAO,CAAC,MAAM,iBAAiB,EAAE,GAAG,EAAE;gBAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC/C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;gBAC1C,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;oBAC3B,MAAM,CACJ,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,EACxB,GAAG,EAAE,oBAAoB,CAC1B,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;YAErD,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;gBACrD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;oBAC5B,MAAM,CACJ,IAAI,EACJ,SAAS,IAAI,+CAA+C,CAC7D,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;gBACjD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;oBAC3B,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;oBAChC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,YAAY,EAAE,CAAC;YACjB,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;gBACrC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;gBAE7D,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;oBACrD,MAAM,OAAO,GAAa,EAAE,CAAC;oBAC7B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;wBAC3B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;4BACrC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gCACjC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;4BAChC,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,MAAM,CACJ,OAAO,EACP,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnD,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACpB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/testing/types.d.ts

@@ -47,7 +47,7 @@ export interface SimulatedPipelineResult {
     tools: string[];
     module: string | null;
     intent: IntentClassification;
-    strategy?: 'single' | 'expanded' | 'all';
+    strategy?: 'single' | 'expanded' | 'all' | 'none';
 }
 export interface AiTestSuite {
     /** Auto-generated smoke tests: module completeness, tool naming, no duplicates */