theorum 0.1.3 → 0.1.4

package/esm/src/guardrails/injection.js

@@ -1,220 +0,0 @@
-/**
- * Prompt-injection span detection.
- *
- * These utilities return spans that can be redacted from untrusted user text
- * before provider submission.
- *
- * @module
- */
-import { blobAt, spansFromPatterns } from '../observability/spans.js';
-const IGNORE_PREVIOUS = /ignore\s+(all\s+)?(previous|prior)\s+((?:safety|security|system|operational|internal|core|original|initial|existing|given|stated|provided|defined|specified|established)\s+)?(instructions?|rules?|guidelines?|constraints?|directives?)/gi;
-const DISREGARD_INSTRUCTIONS = /disregard\s+(all\s+)?(previous|prior|above)\s+(instructions?|rules?|guidelines?|constraints?|directives?)/gi;
-const FORGET_INSTRUCTIONS = /forget\s+(all\s+)?(previous|prior|above)\s+(instructions?|rules?|guidelines?|constraints?|directives?)/gi;
-const NEW_INSTRUCTIONS = /new\s+instructions?:/gi;
-const DO_NOT_FOLLOW = /do\s+not\s+follow\s+(the\s+)?(system|developer|previous|original)/gi;
-const SUPERSEDE_INSTRUCTIONS = /supersedes?\s+(all\s+)?(prior|previous)\s+(instructions?|rules?|guidelines?|constraints?|directives?)/gi;
-const VOID_INSTRUCTIONS = /(all\s+)?(previous|prior)\s+instructions?\s+(are|is)\s+(void|invalid|null|obsolete|cancelled|revoked)/gi;
-const DEVELOPER_MODE = /you\s+are\s+now\s+(in\s+)?developer\s+mode/gi;
-const ENTER_SPECIAL_MODE = /enter\s+(developer|admin|debug|maintenance)\s+mode/gi;
-const ACTIVATE_SPECIAL_MODE = /activate\s+(developer|admin|debug|jailbreak)\s+mode/gi;
-const SYSTEM_OVERRIDE = /\bsystem\s+override\b/gi;
-const OVERRIDE_INSTRUCTIONS = /override\s+(your\s+)?(instructions?|rules?|guidelines?|constraints?|directives?)/gi;
-const REVEAL_PROMPT = /reveal\s+((?:your?|yoru|yuor|the|my|its|his|her|our|their)\s+)?((?:(?:full|hidden|complete|internal|secret|original|entire|exact|actual|real)\s+){0,2})((?:system|systme|sysetm|systemp?)\s+)?prompt\b/gi;
-const SHOW_PROMPT = /show\s+(me\s+)?((?:your?|yoru|yuor|the|my|its|his|her|our|their)\s+)((?:system|systme|sysetm|systemp?)\s+)?prompt\b/gi;
-const WHAT_INSTRUCTIONS = /what\s+(are|were)\s+(your\s+)?(exact\s+)?instructions/gi;
-const REPEAT_INSTRUCTIONS = /repeat\s+(the\s+)?(text|instructions?)\s+(above|before)/gi;
-const OUTPUT_PROMPT = /output\s+(your\s+)?(initial|original|system)\s+(prompt|instructions?)/gi;
-const REMOVE_RESTRICTIONS = /you\s+are\s+no\s+longer\s+(bound|restricted|limited)/gi;
-const ACT_UNBOUND = /act\s+as\s+if\s+(you('re|\s+are)\s+)?not\s+bound/gi;
-const PRETEND_DIFFERENT = /pretend\s+(you('re|\s+are)\s+)?(a\s+)?different\s+(ai|assistant|model)/gi;
-const IDENTITY_HIJACK = /you\s+are\s+now\s+(?:(?:a|an)\s+)?\w+.{0,40}(without\s+(any\s+)?restrict|ignor\w*\s+(all|any|every|prev)|bypass|unrestrict|unlimit|obey\s+only|no\s+(rules|limits|restrict|boundari))/gi;
-const DAN_JAILBREAK = /\bDAN\b[\s\S]{0,120}\bdo\s+anything\s+now\b/g;
-const JAILBREAK_MODE = /jailbreak(ed)?\s+(mode|prompt)/gi;
-const DO_ANYTHING_NOW = /\bdo\s+anything\s+now\b/gi;
-const BYPASS_SAFETY = /bypass\s+(your\s+)?(safety|security|content|ethical)\s+(filters?|measures?|guidelines?|restrictions?)/gi;
-const DISABLE_SAFETY = /disable\s+(your\s+)?(safety|security|content)\s+(filters?|measures?)/gi;
-const IGNORE_SAFETY = /(ignore|disregard)\s+(all\s+)?(your\s+)?(safety|security|ethical|content)\s+(guidelines?|rules?|restrictions?|measures?|filters?|polic(?:y|ies)|protocols?)/gi;
-const SYSTEM_TAG = /<\s*\/?\s*system\s*\/?>/gi;
-const ROLE_TAG = /<\s*\/?\s*(assistant|developer|tool|function)\s*\/?>/gi;
-const ROLE_DELIMITER = /\]\s*\n\s*\[?(system|assistant|user)\]?:/gi;
-const BRACKETED_ROLE = /\[\s*(System\s*Message|System|Assistant|Internal)\s*\]/gi;
-const SYSTEM_YOU_ARE = /^\s*System:\s+(you\s+are|ignore|override)/gim;
-const CONTROL_TOKEN = /<\|(?:im_start|im_end|eot_id|start_header_id|end_header_id|endoftext)\|>/g;
-const DEEPSEEK_CONTROL = /<\uFF5C(?:end\u2581of\u2581sentence|begin\u2581of\u2581sentence)\uFF5C>/g;
-const LLAMA_INST = /\[\/?INST\]/gi;
-const IGNORE_YOUR_INSTRUCTIONS = /ignore\s+(all\s+)?(your\s+)?(instructions?|rules?)\b/gi;
-const UNRESTRICTED_MODE = /\bunrestricted\s+(ai|mode|model)\b/gi;
-const INJECTION_PATTERNS = [
-    IGNORE_PREVIOUS,
-    DISREGARD_INSTRUCTIONS,
-    FORGET_INSTRUCTIONS,
-    NEW_INSTRUCTIONS,
-    DO_NOT_FOLLOW,
-    SUPERSEDE_INSTRUCTIONS,
-    VOID_INSTRUCTIONS,
-    DEVELOPER_MODE,
-    ENTER_SPECIAL_MODE,
-    ACTIVATE_SPECIAL_MODE,
-    SYSTEM_OVERRIDE,
-    OVERRIDE_INSTRUCTIONS,
-    REVEAL_PROMPT,
-    SHOW_PROMPT,
-    WHAT_INSTRUCTIONS,
-    REPEAT_INSTRUCTIONS,
-    OUTPUT_PROMPT,
-    REMOVE_RESTRICTIONS,
-    ACT_UNBOUND,
-    PRETEND_DIFFERENT,
-    IDENTITY_HIJACK,
-    DAN_JAILBREAK,
-    JAILBREAK_MODE,
-    DO_ANYTHING_NOW,
-    BYPASS_SAFETY,
-    DISABLE_SAFETY,
-    IGNORE_SAFETY,
-    SYSTEM_TAG,
-    ROLE_TAG,
-    ROLE_DELIMITER,
-    BRACKETED_ROLE,
-    SYSTEM_YOU_ARE,
-    CONTROL_TOKEN,
-    DEEPSEEK_CONTROL,
-    LLAMA_INST,
-    IGNORE_YOUR_INSTRUCTIONS,
-    UNRESTRICTED_MODE,
-];
-const TYPO_TARGETS = [
-    'ignore',
-    'bypass',
-    'override',
-    'reveal',
-    'delete',
-    'system',
-    'prompt',
-    'instructions',
-];
-const BASE64_BLOB = /[A-Za-z0-9+/]{16,}={0,2}/g;
-const HEX_BLOB = /(?:[0-9a-f]{2}[\s]?){8,}/gi;
-const SPACED_LETTERS = /\b(?:[A-Za-z] ){3,}[A-Za-z]\b/g;
-const WORD = /\b[A-Za-z]{4,}\b/g;
-const PRINTABLE_MIN = 0.85;
-const CODE_TAB = 9;
-const CODE_LF = 10;
-const CODE_CR = 13;
-const CODE_SPACE = 32;
-const CODE_DEL = 127;
-const HEX_RADIX = 16;
-const HEX_STEP = 2;
-function injectionSpansOn(text) {
-    return spansFromPatterns(text, INJECTION_PATTERNS, 'injection');
-}
-function sortedLetters(value) {
-    return [...value].sort().join('');
-}
-function firstLast(word) {
-    return { first: word.at(0), last: word.at(-1) };
-}
-function isTypoglycemia(word, target) {
-    if (word.length !== target.length) {
-        return false;
-    }
-    const lower = word.toLowerCase();
-    if (lower === target) {
-        return false;
-    }
-    const wordEnds = firstLast(lower);
-    const targetEnds = firstLast(target);
-    if (wordEnds.first !== targetEnds.first || wordEnds.last !== targetEnds.last) {
-        return false;
-    }
-    return sortedLetters(lower.slice(1, -1)) === sortedLetters(target.slice(1, -1));
-}
-function typoNormalize(text) {
-    return text.replace(WORD, (word) => {
-        for (const target of TYPO_TARGETS) {
-            if (isTypoglycemia(word, target)) {
-                return target;
-            }
-        }
-        return word;
-    });
-}
-function isMostlyPrintable(value) {
-    if (!value) {
-        return false;
-    }
-    let ok = 0;
-    for (const ch of value) {
-        const code = ch.codePointAt(0) ?? 0;
-        const control = code === CODE_TAB || code === CODE_LF || code === CODE_CR;
-        const visible = code >= CODE_SPACE && code < CODE_DEL;
-        if (control || visible) {
-            ok += 1;
-        }
-    }
-    return ok / value.length >= PRINTABLE_MIN;
-}
-function decodedHits(decoded) {
-    if (!isMostlyPrintable(decoded)) {
-        return false;
-    }
-    return injectionSpansOn(decoded).length > 0;
-}
-function tryBase64(blob) {
-    try {
-        return atob(blob);
-    }
-    catch {
-        return undefined;
-    }
-}
-function tryHex(blob) {
-    const hex = blob.replaceAll(/\s/g, '');
-    if (hex.length % HEX_STEP !== 0) {
-        return undefined;
-    }
-    let out = '';
-    for (let i = 0; i < hex.length; i += HEX_STEP) {
-        out += String.fromCodePoint(Number.parseInt(hex.slice(i, i + HEX_STEP), HEX_RADIX));
-    }
-    return out;
-}
-function encodedFrom(text, pattern, decode) {
-    const spans = [];
-    for (const match of text.matchAll(pattern)) {
-        const found = blobAt(match);
-        if (found) {
-            const decoded = decode(found.blob);
-            if (decoded && decodedHits(decoded)) {
-                spans.push({ start: found.index, end: found.index + found.blob.length, kind: 'injection' });
-            }
-        }
-    }
-    return spans;
-}
-function encodedSpans(text) {
-    return [...encodedFrom(text, BASE64_BLOB, tryBase64), ...encodedFrom(text, HEX_BLOB, tryHex)];
-}
-function spacedSpans(text) {
-    const spans = [];
-    for (const match of text.matchAll(SPACED_LETTERS)) {
-        const found = blobAt(match);
-        if (found) {
-            const collapsed = found.blob.replaceAll(' ', '');
-            if (injectionSpansOn(`${collapsed} previous instructions`).length > 0) {
-                spans.push({ start: found.index, end: found.index + found.blob.length, kind: 'injection' });
-            }
-        }
-    }
-    return spans;
-}
-/** Detect prompt-injection spans in a string. */
-function injectionSpans(text) {
-    const shadow = typoNormalize(text);
-    let typo = [];
-    if (shadow !== text) {
-        typo = injectionSpansOn(shadow);
-    }
-    return [...injectionSpansOn(text), ...typo, ...encodedSpans(text), ...spacedSpans(text)];
-}
-export { injectionSpans };

package/esm/src/guardrails/mod.d.ts

@@ -1,14 +0,0 @@
-/**
- * Generic inbound and outbound guardrail primitives.
- *
- * This entrypoint exposes public-safe error mapping, prompt-injection span
- * detection, sensitive-data span detection, and request sanitization. App-
- * specific policy remains host-owned.
- *
- * @module
- */
-import "../../_dnt.polyfills.js";
-export { PUBLIC_ACTION, PUBLIC_CANARY, PUBLIC_FILE_COUNT, PUBLIC_FILE_SIZE, PUBLIC_FILE_TYPE, PUBLIC_GENERIC, PUBLIC_IMAGE_SIZE, PUBLIC_UNAVAILABLE, publicError, TheorumError, UPSTREAM_FAILED, } from './error.js';
-export { injectionSpans } from './injection.js';
-export { PROJECT_ID_MAX, sanitizeProjectId, sanitizeText, sanitizeTurnRequest, } from './sanitize.js';
-export { sensitiveSpans } from './sensitive.js';

package/esm/src/guardrails/mod.js

@@ -1,14 +0,0 @@
-/**
- * Generic inbound and outbound guardrail primitives.
- *
- * This entrypoint exposes public-safe error mapping, prompt-injection span
- * detection, sensitive-data span detection, and request sanitization. App-
- * specific policy remains host-owned.
- *
- * @module
- */
-import "../../_dnt.polyfills.js";
-export { PUBLIC_ACTION, PUBLIC_CANARY, PUBLIC_FILE_COUNT, PUBLIC_FILE_SIZE, PUBLIC_FILE_TYPE, PUBLIC_GENERIC, PUBLIC_IMAGE_SIZE, PUBLIC_UNAVAILABLE, publicError, TheorumError, UPSTREAM_FAILED, } from './error.js';
-export { injectionSpans } from './injection.js';
-export { PROJECT_ID_MAX, sanitizeProjectId, sanitizeText, sanitizeTurnRequest, } from './sanitize.js';
-export { sensitiveSpans } from './sensitive.js';

package/esm/src/guardrails/sanitize.d.ts

@@ -1,22 +0,0 @@
-/**
- * Request sanitization utilities for THEORUM.
- *
- * Sanitization removes inbound prompt-injection spans and sensitive-data spans
- * according to the active profile guardrail flags. The host remains responsible
- * for domain policy.
- *
- * @module
- */
-import type { NormalizedTurnRequest, TurnRequest } from '../kernel/types.js';
-/** Sanitize one text value using prompt-injection and sensitive-data detectors. */
-declare function sanitizeText(text: string, options?: {
-    sanitizeInput?: boolean;
-    redactSensitive?: boolean;
-}): string;
-/** Maximum retained length for trace-safe host project ids. */
-declare const PROJECT_ID_MAX = 128;
-/** Return a trace-safe project id or `undefined` when the input is unsafe. */
-declare function sanitizeProjectId(id: string | undefined): string | undefined;
-/** Sanitize all user-controlled text and blobs in a turn request. */
-declare function sanitizeTurnRequest(req: TurnRequest): NormalizedTurnRequest;
-export { PROJECT_ID_MAX, sanitizeProjectId, sanitizeText, sanitizeTurnRequest };

package/esm/src/guardrails/sanitize.js

@@ -1,133 +0,0 @@
-/**
- * Request sanitization utilities for THEORUM.
- *
- * Sanitization removes inbound prompt-injection spans and sensitive-data spans
- * according to the active profile guardrail flags. The host remains responsible
- * for domain policy.
- *
- * @module
- */
-import { mapStrings } from '../kernel/engine/tree.js';
-import { sanitizeTurnBlobsForProfile } from '../kernel/registry/attachments.js';
-import { getProfile } from '../kernel/registry/profiles.js';
-import { applySpans } from '../observability/spans.js';
-import { injectionSpans } from './injection.js';
-import { sensitiveSpans } from './sensitive.js';
-/** Sanitize one text value using prompt-injection and sensitive-data detectors. */
-function sanitizeText(text, options) {
-    const sanitizeInput = options?.sanitizeInput ?? true;
-    const redactSensitive = options?.redactSensitive ?? true;
-    if (!sanitizeInput && !redactSensitive) {
-        return text;
-    }
-    const spans = [
-        ...(sanitizeInput ? injectionSpans(text) : []),
-        ...(redactSensitive ? sensitiveSpans(text) : []),
-    ];
-    return applySpans(text, spans);
-}
-function sanitizeSlots(slots, options) {
-    if (!slots) {
-        return slots;
-    }
-    const out = {};
-    for (const [key, value] of Object.entries(slots)) {
-        out[key] = sanitizeText(value, options);
-    }
-    return out;
-}
-function sanitizeArgs(args, options) {
-    const next = mapStrings(args, (t) => sanitizeText(t, options));
-    if (next && typeof next === 'object' && !Array.isArray(next)) {
-        return next;
-    }
-    return args;
-}
-/** Maximum retained length for trace-safe host project ids. */
-const PROJECT_ID_MAX = 128;
-const PROJECT_ID_OK = /^[A-Za-z0-9._-]+$/;
-/** Return a trace-safe project id or `undefined` when the input is unsafe. */
-function sanitizeProjectId(id) {
-    if (!id) {
-        return undefined;
-    }
-    const trimmed = id.trim().slice(0, PROJECT_ID_MAX);
-    if (!PROJECT_ID_OK.test(trimmed)) {
-        return undefined;
-    }
-    return trimmed;
-}
-function sanitizeRepair(repair, options) {
-    if (!repair) {
-        return repair;
-    }
-    return {
-        previousOutput: sanitizeText(repair.previousOutput, options),
-        rejection: sanitizeText(repair.rejection, options),
-        guidance: repair.guidance ? sanitizeText(repair.guidance, options) : undefined,
-    };
-}
-function sanitizeHistory(history, options) {
-    if (!history) {
-        return history;
-    }
-    return history.map((m) => ({
-        role: m.role,
-        ...(m.content !== undefined ? { content: sanitizeText(m.content, options) } : {}),
-        ...(m.parts
-            ? {
-                parts: m.parts.map((p) => p.type === 'text' ? { ...p, text: sanitizeText(p.text, options) } : p),
-            }
-            : {}),
-        ...(m.tool_calls ? { tool_calls: m.tool_calls } : {}),
-        ...(m.tool_call_id ? { tool_call_id: m.tool_call_id } : {}),
-        ...(m.name ? { name: m.name } : {}),
-        ...(m.metadata ? { metadata: m.metadata } : {}),
-    }));
-}
-/** Sanitize all user-controlled text and blobs in a turn request. */
-function sanitizeTurnRequest(req) {
-    let profileGuardrails;
-    try {
-        profileGuardrails = getProfile(req.profile)?.guardrails;
-    }
-    catch {
-        // If profile not registered yet, default to full guardrails
-    }
-    const options = {
-        sanitizeInput: profileGuardrails?.sanitizeInput ?? true,
-        redactSensitive: profileGuardrails?.redactSensitive ?? true,
-    };
-    const input = req.input ?? {};
-    const { toolInvoke } = req;
-    const { text: rawText } = input;
-    let invoke = toolInvoke;
-    if (toolInvoke) {
-        invoke = { ...toolInvoke, arguments: sanitizeArgs(toolInvoke.arguments, options) };
-    }
-    let text = rawText;
-    if (rawText !== undefined) {
-        text = sanitizeText(rawText, options);
-    }
-    let system = req.system;
-    if (system !== undefined) {
-        system = sanitizeText(system, options);
-    }
-    const { attachments, voice } = sanitizeTurnBlobsForProfile(req.profile, input.attachments, input.voice);
-    return {
-        ...req,
-        system,
-        projectId: sanitizeProjectId(req.projectId),
-        input: {
-            ...input,
-            text,
-            slots: sanitizeSlots(input.slots, options),
-            attachments,
-            voice,
-            repair: sanitizeRepair(input.repair, options),
-            history: sanitizeHistory(input.history, options),
-        },
-        toolInvoke: invoke,
-    };
-}
-export { PROJECT_ID_MAX, sanitizeProjectId, sanitizeText, sanitizeTurnRequest };

package/esm/src/guardrails/sensitive.d.ts

@@ -1,12 +0,0 @@
-/**
- * Sensitive-data span detection.
- *
- * Detects common credentials, tokens, card numbers, SSNs, and network secrets
- * so host profiles can redact them before provider submission.
- *
- * @module
- */
-import { type RedactSpan } from '../observability/spans.js';
-/** Detect sensitive-data spans in a string. */
-declare function sensitiveSpans(text: string): RedactSpan[];
-export { sensitiveSpans };

package/esm/src/guardrails/sensitive.js

@@ -1,88 +0,0 @@
-/**
- * Sensitive-data span detection.
- *
- * Detects common credentials, tokens, card numbers, SSNs, and network secrets
- * so host profiles can redact them before provider submission.
- *
- * @module
- */
-import { blobAt, spansFromPatterns } from '../observability/spans.js';
-const SSN = /\b\d{3}-\d{2}-\d{4}\b/g;
-const ITIN = /\b9\d{2}-\d{2}-\d{4}\b/g;
-const EIN = /\b\d{2}-\d{7}\b/g;
-const IBAN = /\b[A-Z]{2}\d{2}[A-Z0-9]{13,30}\b/g;
-const IPV4 = /\b(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\b/g;
-const IPV6 = /\b(?:[0-9a-f]{1,4}:){7}[0-9a-f]{1,4}\b/gi;
-const AWS_ACCESS = /\bAKIA[0-9A-Z]{16}\b/g;
-const GOOGLE_API = /\bAIza[0-9A-Za-z_-]{35}\b/g;
-const OPENAI_KEY = /\bsk-[A-Za-z0-9]{20,}\b/g;
-const ANTHROPIC_KEY = /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g;
-const OPENROUTER_KEY = /\bsk-or-[A-Za-z0-9_-]{20,}\b/g;
-const GITHUB_PAT = /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g;
-const GITHUB_TOKEN = /\bghp_[A-Za-z0-9]{36}\b/g;
-const SLACK_TOKEN = /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g;
-const BEARER = /\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi;
-const PEM_KEY = /-----BEGIN (?:RSA )?PRIVATE KEY-----[\s\S]+?-----END (?:RSA )?PRIVATE KEY-----/g;
-const CARD_CANDIDATE = /\b(?:\d[ -]*?){13,19}\b/g;
-const KEY_PATTERNS = [
-    SSN,
-    ITIN,
-    EIN,
-    IBAN,
-    IPV4,
-    IPV6,
-    AWS_ACCESS,
-    GOOGLE_API,
-    OPENAI_KEY,
-    ANTHROPIC_KEY,
-    OPENROUTER_KEY,
-    GITHUB_PAT,
-    GITHUB_TOKEN,
-    SLACK_TOKEN,
-    BEARER,
-    PEM_KEY,
-];
-const LUHN_DOUBLE = 2;
-const LUHN_NINE = 9;
-const LUHN_TEN = 10;
-const CARD_MIN_DIGITS = 13;
-const CARD_MAX_DIGITS = 19;
-function luhnOk(digits) {
-    let sum = 0;
-    let doubleIt = false;
-    for (let i = digits.length - 1; i >= 0; i -= 1) {
-        const ch = digits[i];
-        if (ch === undefined) {
-            return false;
-        }
-        let n = Number(ch);
-        if (doubleIt) {
-            n *= LUHN_DOUBLE;
-            if (n > LUHN_NINE) {
-                n -= LUHN_NINE;
-            }
-        }
-        sum += n;
-        doubleIt = !doubleIt;
-    }
-    return sum % LUHN_TEN === 0;
-}
-function cardSpans(text) {
-    const spans = [];
-    for (const match of text.matchAll(CARD_CANDIDATE)) {
-        const found = blobAt(match);
-        if (found) {
-            const digits = found.blob.replaceAll(/[^\d]/g, '');
-            const inRange = digits.length >= CARD_MIN_DIGITS && digits.length <= CARD_MAX_DIGITS;
-            if (inRange && luhnOk(digits)) {
-                spans.push({ start: found.index, end: found.index + found.blob.length, kind: 'sensitive' });
-            }
-        }
-    }
-    return spans;
-}
-/** Detect sensitive-data spans in a string. */
-function sensitiveSpans(text) {
-    return [...spansFromPatterns(text, KEY_PATTERNS, 'sensitive'), ...cardSpans(text)];
-}
-export { sensitiveSpans };

package/esm/src/host/mint-trace.d.ts

@@ -1,27 +0,0 @@
-/**
- * Host cutout-trace helpers for apps that mint a final audit row after an
- * upstream side effect (for example image cutout).
- *
- * Prefer importing from `theorum/host`.
- *
- * @module
- */
-import { type TraceSink } from '../observability/trace.js';
-import type { TraceRecord } from '../observability/trace-record.js';
-interface CutoutTape {
-    ok: boolean;
-    ms: number;
-    url?: string;
-    inSha256?: string;
-    outSha256?: string;
-    http?: unknown;
-    error?: string;
-}
-declare function flushMintTrace(args: {
-    held: TraceRecord[];
-    app: Record<string, unknown>;
-    cutout: CutoutTape;
-    sink?: TraceSink;
-}): Promise<void>;
-export type { CutoutTape };
-export { flushMintTrace };

package/esm/src/host/mint-trace.js

@@ -1,33 +0,0 @@
-/**
- * Host cutout-trace helpers for apps that mint a final audit row after an
- * upstream side effect (for example image cutout).
- *
- * Prefer importing from `theorum/host`.
- *
- * @module
- */
-import { publicError, UPSTREAM_FAILED } from '../guardrails/error.js';
-import { noopSink, writeTrace } from '../observability/trace.js';
-function attachMint(row, app, cutout) {
-    row.app = app;
-    row.cutout = cutout;
-    row.ms = Date.now() - row.ts;
-    if (!cutout.ok) {
-        row.ok = false;
-        const { error: cutoutError } = cutout;
-        let error = cutoutError;
-        if (!error) {
-            error = publicError(UPSTREAM_FAILED);
-        }
-        row.error = error;
-    }
-}
-async function flushMintTrace(args) {
-    const [row] = args.held;
-    if (!row) {
-        return;
-    }
-    attachMint(row, args.app, args.cutout);
-    await writeTrace(args.sink ?? noopSink(), Promise.resolve(row));
-}
-export { flushMintTrace };

package/esm/src/host/mod.d.ts

@@ -1,13 +0,0 @@
-/**
- * Optional host-application helpers.
- *
- * These are not part of the turn kernel. They exist for Deno HTTP hosts that
- * want shared reply status mapping and cutout-trace flushing without re-
- * implementing the same glue in every app route.
- *
- * @module
- */
-import "../../_dnt.polyfills.js";
-export type { CutoutTape } from './mint-trace.js';
-export { flushMintTrace } from './mint-trace.js';
-export { caughtStatus, HTTP_BUSY, HTTP_METHOD, HTTP_NOT_FOUND, HTTP_OK, json, } from './reply.js';

package/esm/src/host/reply.d.ts

@@ -1,14 +0,0 @@
-/**
- * Optional Deno HTTP reply helpers for host applications.
- *
- * Not part of the turn kernel. Prefer importing from `theorum/host`.
- *
- * @module
- */
-declare const HTTP_BUSY = 429;
-declare const HTTP_OK = 200;
-declare const HTTP_NOT_FOUND = 404;
-declare const HTTP_METHOD = 405;
-declare function json(status: number, body: unknown, cors: Record<string, string>): Response;
-declare function caughtStatus(err: unknown): number;
-export { caughtStatus, HTTP_BUSY, HTTP_METHOD, HTTP_NOT_FOUND, HTTP_OK, json };

package/esm/src/host/reply.js

@@ -1,27 +0,0 @@
-/**
- * Optional Deno HTTP reply helpers for host applications.
- *
- * Not part of the turn kernel. Prefer importing from `theorum/host`.
- *
- * @module
- */
-import { TheorumError } from '../guardrails/error.js';
-const HTTP_BAD = 400;
-const HTTP_BUSY = 429;
-const HTTP_ERR = 500;
-const HTTP_OK = 200;
-const HTTP_NOT_FOUND = 404;
-const HTTP_METHOD = 405;
-function json(status, body, cors) {
-    return new Response(JSON.stringify(body), {
-        status,
-        headers: { ...cors, 'Content-Type': 'application/json' },
-    });
-}
-function caughtStatus(err) {
-    if (err instanceof TheorumError) {
-        return HTTP_BAD;
-    }
-    return HTTP_ERR;
-}
-export { caughtStatus, HTTP_BUSY, HTTP_METHOD, HTTP_NOT_FOUND, HTTP_OK, json };

package/esm/src/kernel/engine/boundary.d.ts

@@ -1,10 +0,0 @@
-import type { TurnEvent } from '../types.js';
-declare const USER_OPEN = "<user_data>";
-declare const USER_CLOSE = "</user_data>";
-declare const OMIT_CANARY = "[omitted - canary]";
-declare function mintCanary(): string;
-declare function wrapUserData(text: string): string;
-declare function bindCanary(system: string, canary: string): string;
-declare function eventHasCanary(event: TurnEvent, canary: string): boolean;
-declare function redactCanary(event: TurnEvent, canary: string): TurnEvent;
-export { bindCanary, eventHasCanary, mintCanary, OMIT_CANARY, redactCanary, USER_CLOSE, USER_OPEN, wrapUserData, };