Graphorin

Appearance

Graphorin API reference v0.12.1

Graphorin API reference / @graphorin/agent / filters

filters ​

Handoff filter library - a small set of pure, composable functions that take the parent agent's message history and return a filtered subset suitable for forwarding to a child agent.

Every filter pairs a HandoffFilter runtime function with a serializable HandoffInputFilterDescriptor so the JSONL session export (@graphorin/sessions) can replay the filter stack even after the runtime implementations evolve.

Reasoning content is always stripped at the handoff boundary - filters.compose(...) guarantees stripReasoning() runs last so a caller-supplied filter cannot accidentally forward reasoning to a child agent. This is the confidentiality + token-economy default documented in the agent-loop reference.

Interfaces ​

InterfaceDescription
DescribedFilterA HandoffFilter paired with the serializable descriptor that round-trips through the JSONL session export. Authors of custom filters return one of these via filters.custom({...}).

Variables ​

VariableDescription
FILTER_KIND_CUSTOMPure HandoffInputFilterDescriptor for callers that just need the descriptor without instantiating the runtime function (e.g. the sessions package's lenient-forward-parse path).
filtersAggregate module export.

Functions ​

FunctionDescription
bySensitivityDrop messages that carry the literal [REDACTED:secret] redaction token when maxTier sits below 'secret'.
composeCompose multiple filters left-to-right. The composer always appends stripReasoning() at the end so reasoning content never crosses a handoff boundary regardless of caller intent.
customWrap a caller-supplied function as a DescribedFilter with the canonical 'custom' descriptor.
defaultHandoffFilterThe canonical default applied by the agent runtime to every Agent.toTool(...) and handoff(...) invocation when the caller does not supply an explicit filter.
fullThe full unfiltered history. Discouraged - security-conscious callers should pick lastN or bySensitivity instead (a sub-agent rarely needs the parent's entire conversation).
lastNKeep the parent's system prompt and the last n non-system messages. Default n = 10 per DEC-146 / RB-40 security-first compose.
lastUserKeep only the parent's system prompt and the most recent user message. Useful for simple sub-agents that only need the question.
stripReasoningStrip every ReasoningContent part from each message. Always applied at the handoff boundary (the compose(...) helper appends this filter automatically).
stripSensitiveOutputsStrip tool messages whose content carries a literal [REDACTED: redaction token - ANY redaction tier trips it, not only secret (AGENT-FIL-02). There is no secret annotation on the message surface in the current slice; the token stamped by the redaction layer at session-write time is the only signal this filter scans, so an output that was never redaction-stamped passes through. Same weak-contract caveat as bySensitivity.
stripToolCallsDrop every assistant toolCalls array AND every tool message. Useful when a sub-agent should only see the textual conversation.
summaryReplace the parent's history with a single system message carrying the supplied summary. Used by callers that wire in an LLM-based summarizer outside the framework.