Content Moderation & PII Guardrails

import { SkyAI } from "@skyaiapp/sdk";

const sky = new SkyAI({ apiKey: process.env.SKYAIAPP_API_KEY });

const response = await sky.route({
  goal: "stability",
  messages: [{ role: "user", content: userInput }],

  // 1. Input-side guardrails
  guardrails: {
    promptInjection: { action: "block", threshold: 0.7 },
    pii: {
      detector: ["presidio", "llm-judge"],     // dual-path
      entities: ["PERSON", "SSN", "CREDIT_CARD", "PHONE", "ADDRESS"],
      action: "redact",                         // redact | mask | hash | fpe
      strategy: { SSN: "fpe", CREDIT_CARD: "fpe", PHONE: "mask-tail4" },
    },

    // 2. Output-side guardrails
    output: {
      toxicity: { action: "rewrite", threshold: 0.5 },
      hallucination: { action: "warn", citations: "required" },
    },

    // 3. Audit
    audit: { policyVersion: "pol_2026_05_q2", retentionDays: 90 },
  },

  // 4. Tool access (MCP-native)
  tools: [
    {
      name: "lookup_customer",
      mcpServer: "crm.internal",
      scopes: ["customer:read"],     // OPA check injected automatically
    },
  ],
});

console.log(response.guardrails.piiHits);      // entities found
console.log(response.guardrails.actionsTaken); // how each was handled
console.log(response.routing.traceId);         // audit-trail id