@adonis-agora/agent 0.34.1 → 0.36.0

package/dist/src/guardrails/detectors/injection.js

@@ -0,0 +1,208 @@
+const W = String.raw `[\s\S]{0,40}?`;
+export const INJECTION_SIGNALS = [
+    // Instruction override.
+    {
+        id: 'ignore_previous',
+        re: new RegExp(String.raw `\b(?:ignore|disregard|forget|override|bypass|skip)\b${W}\b(?:all\s+|any\s+|the\s+|your\s+|my\s+)?(?:previous|prior|above|earlier|preceding|original|system|initial)\b${W}\b(?:instructions?|prompts?|rules?|directions?|guidelines?|messages?|context)\b`, 'gi'),
+        weight: 0.75,
+    },
+    {
+        id: 'ignore_previous_pt',
+        re: new RegExp(String.raw `\b(?:ignore|ignora|desconsidere|desconsidera|esque[çc]a|esquece|descarte)\b${W}\b(?:as\s+|todas\s+as\s+|suas\s+|tuas\s+)?(?:instru[çc][õo]es|regras|orienta[çc][õo]es|mensagens|prompts?)\b${W}\b(?:anteriores|acima|pr[ée]vias|do\s+sistema|originais)\b`, 'gi'),
+        weight: 0.75,
+    },
+    {
+        id: 'ignore_previous_es',
+        re: new RegExp(String.raw `\b(?:ignora|ignore|olvida|olvide|descarta)\b${W}\b(?:las\s+|todas\s+las\s+|tus\s+)?(?:instrucciones|reglas|indicaciones)\b${W}\b(?:anteriores|previas|del\s+sistema)\b`, 'gi'),
+        weight: 0.75,
+    },
+    {
+        id: 'new_instructions',
+        re: /\b(?:new|updated|real|actual|true)\s+(?:system\s+)?instructions?\s*(?::|follow|are)|\bnovas\s+instru[çc][õo]es\s*:|\bnuevas\s+instrucciones\s*:/gi,
+        weight: 0.45,
+    },
+    // Role hijack / persona jailbreaks.
+    {
+        id: 'role_hijack',
+        re: /\b(?:you\s+are\s+now|from\s+now\s+on\s+you\s+(?:are|will)|act\s+as\s+(?:an?\s+)?(?:unrestricted|unfiltered|evil|jailbroken)|pretend\s+(?:to\s+be|you\s+are)\s+(?:an?\s+)?(?:unrestricted|unfiltered|different\s+ai)|a\s+partir\s+de\s+agora\s+voc[êe]\s+(?:[ée]|ser[áa])|voc[êe]\s+agora\s+[ée]|ahora\s+eres)\b/gi,
+        weight: 0.45,
+    },
+    {
+        id: 'jailbreak_persona',
+        re: /\b(?:DAN|do\s+anything\s+now|developer\s+mode|god\s+mode|jailbreak(?:ed)?|STAN|DUDE\s+mode|AIM\s+mode|no\s+(?:restrictions|filters|guidelines|limits)\s+mode|modo\s+desenvolvedor|sem\s+restri[çc][õo]es)\b/g,
+        weight: 0.55,
+    },
+    // Prompt / secret extraction.
+    {
+        id: 'prompt_leak',
+        re: /\b(?:reveal|print|show|repeat|output|display|leak|tell\s+me|write\s+out)\b[\s\S]{0,30}?\b(?:your|the)\s+(?:system\s+prompt|initial\s+(?:prompt|instructions)|hidden\s+(?:prompt|instructions)|instructions\s+above|developer\s+message)\b|\b(?:mostre|revele|repita|imprima)\b[\s\S]{0,30}?\b(?:seu|o)\s+prompt\s+(?:do\s+sistema|inicial)\b/gi,
+        weight: 0.6,
+    },
+    // Role / delimiter spoofing: chat-template tokens and fake headers.
+    {
+        id: 'role_tokens',
+        re: /<\|(?:im_start|im_end|system|endoftext|start_header_id|end_header_id|eot_id)\|>|\[\/?INST\]|<<\/?SYS>>|<\/?(?:system|assistant|developer)>|^\s*#{2,}\s*(?:system|assistant|developer)\s*(?:prompt|message)?\s*:?\s*$/gim,
+        weight: 0.55,
+    },
+    {
+        id: 'fake_system',
+        re: /^\s*(?:system|assistant|developer)\s*(?:message|prompt|note|override)?\s*:\s*\S/gim,
+        weight: 0.3,
+    },
+    // Indirect injection aimed at the agent reading the content.
+    {
+        id: 'addressed_to_ai',
+        re: /\b(?:(?:note|message|instructions?)\s+(?:to|for)\s+(?:the\s+)?(?:ai|assistant|llm|agent|model|chatbot)|(?:ai|assistant|llm|agent)s?\s*(?:reading|processing|summari[sz]ing)\s+this|if\s+you\s+are\s+an?\s+(?:ai|assistant|llm|language\s+model|agent)|aten[çc][ãa]o\s*,?\s*(?:ia|assistente|agente)|se\s+voc[êe]\s+[ée]\s+(?:uma\s+)?(?:ia|intelig[êe]ncia\s+artificial|assistente))\b/gi,
+        weight: 0.55,
+    },
+    {
+        id: 'tool_directive',
+        re: /\b(?:call|invoke|use|run|execute|chame|use|execute)\s+(?:the\s+|a\s+|o\s+|a\s+ferramenta\s+)?[`'"]?[\w-]+(?:__[\w-]+)[`'"]?\s*(?:tool|function|ferramenta)?|\b(?:send|forward|email|post|upload|exfiltrate|envie|encaminhe)\b[\s\S]{0,40}?\b(?:(?:all|every|the)\s+)?(?:(?:user'?s?|their|this|todos\s+os|os)\s+)?(?:emails?|files?|documents?|credentials?|passwords?|secrets?|tokens?|keys?|conversation|chat\s+history|dados|arquivos|senhas)\b[\s\S]{0,40}?\b(?:to|para)\s+\S+@\S+|\bto\s+https?:\/\//gi,
+        weight: 0.45,
+    },
+    {
+        id: 'secrecy',
+        re: /\b(?:do\s+not|don'?t|never)\s+(?:tell|inform|mention|reveal|show|alert|notify)\s+(?:this\s+to\s+)?(?:the\s+)?user\b|\bwithout\s+(?:telling|informing|notifying)\s+the\s+user\b|\bn[ãa]o\s+(?:conte|informe|mencione|avise)\s+(?:ao|o)\s+usu[áa]rio\b/gi,
+        weight: 0.5,
+    },
+    // Exfiltration through rendered markdown/HTML.
+    {
+        id: 'exfil_markdown',
+        re: /!\[[^\]]*\]\(\s*https?:\/\/[^)\s]+\?[^)\s]*=[^)\s]*(?:\{|%7B|\$|<)?[^)]*\)|<img\b[^>]*\bsrc\s*=\s*["']?https?:\/\/[^"'>\s]+\?[^"'>\s]*=/gi,
+        weight: 0.4,
+    },
+    {
+        id: 'html_comment_instructions',
+        re: /<!--[\s\S]{0,500}?\b(?:ignore|instruction|assistant|ai|agent|system|prompt|instru[çc][ãa]o|assistente)\b[\s\S]{0,500}?-->/gi,
+        weight: 0.45,
+    },
+    // Encoded payloads that decode to instructions are checked separately (see scoreEncoded).
+];
+/** Characters used to hide instructions from people while models still read them. */
+const TAG_CHARS = /[\u{E0000}-\u{E007F}]+/gu;
+const BIDI = /[\u202A-\u202E\u2066-\u2069]/g;
+const ZERO_WIDTH_RUN = /[\u200B-\u200D\u2060\uFEFF]{3,}/g;
+/**
+ * Base64 to text, byte per character. Only printable ASCII is ever acted upon, so no UTF-8 decoding
+ * is needed — and `atob` keeps this free of Node's `Buffer`.
+ */
+function decodeBase64Ascii(b64) {
+    try {
+        return atob(b64);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Decodes Unicode tag characters ("ASCII smuggling") back to the ASCII they encode. */
+export function decodeTagChars(s) {
+    let out = '';
+    for (const ch of s) {
+        const cp = ch.codePointAt(0) ?? 0;
+        if (cp >= 0xe0020 && cp <= 0xe007e)
+            out += String.fromCharCode(cp - 0xe0000);
+    }
+    return out;
+}
+function matchSignals(text, offset, into, weights) {
+    for (const s of INJECTION_SIGNALS) {
+        s.re.lastIndex = 0;
+        for (let m = s.re.exec(text); m; m = s.re.exec(text)) {
+            if (m[0].length === 0) {
+                s.re.lastIndex++;
+                continue;
+            }
+            weights.set(s.id, Math.max(weights.get(s.id) ?? 0, s.weight));
+            const list = into.get(s.id) ?? [];
+            list.push({
+                detector: 'injection',
+                category: `injection.${s.id}`,
+                start: offset < 0 ? m.index : offset,
+                end: offset < 0 ? m.index + m[0].length : offset,
+                score: s.weight,
+                value: m[0],
+                spanned: offset < 0,
+            });
+            into.set(s.id, list);
+        }
+    }
+}
+/** Scores a text; findings are returned only when the score reaches `threshold`. */
+export function scoreInjection(text, threshold = 0.5) {
+    const byId = new Map();
+    const weights = new Map();
+    matchSignals(text, -1, byId, weights);
+    // Hidden Unicode: suspicious on its own; the decoded text is scanned too.
+    TAG_CHARS.lastIndex = 0;
+    for (let m = TAG_CHARS.exec(text); m; m = TAG_CHARS.exec(text)) {
+        weights.set('hidden_unicode', 0.8);
+        const list = byId.get('hidden_unicode') ?? [];
+        list.push({
+            detector: 'injection',
+            category: 'injection.hidden_unicode',
+            start: m.index,
+            end: m.index + m[0].length,
+            score: 0.8,
+            value: m[0],
+            spanned: true,
+        });
+        byId.set('hidden_unicode', list);
+        const decoded = decodeTagChars(m[0]);
+        if (decoded)
+            matchSignals(decoded, m.index, byId, weights);
+    }
+    for (const re of [BIDI, ZERO_WIDTH_RUN]) {
+        re.lastIndex = 0;
+        for (let m = re.exec(text); m; m = re.exec(text)) {
+            weights.set('invisible_chars', Math.max(weights.get('invisible_chars') ?? 0, 0.3));
+            const list = byId.get('invisible_chars') ?? [];
+            list.push({
+                detector: 'injection',
+                category: 'injection.invisible_chars',
+                start: m.index,
+                end: m.index + m[0].length,
+                score: 0.3,
+                value: m[0],
+                spanned: true,
+            });
+            byId.set('invisible_chars', list);
+        }
+    }
+    // Base64 blobs that decode to instructions.
+    const B64 = /(?<![A-Za-z0-9+/=])[A-Za-z0-9+/]{40,}={0,2}(?![A-Za-z0-9+/=])/g;
+    for (let m = B64.exec(text); m; m = B64.exec(text)) {
+        const decoded = decodeBase64Ascii(m[0]);
+        if (decoded === undefined)
+            continue;
+        if (!/^[\x20-\x7E\s]+$/.test(decoded))
+            continue;
+        const inner = new Map();
+        const innerWeights = new Map();
+        matchSignals(decoded, m.index, inner, innerWeights);
+        if (innerWeights.size > 0) {
+            weights.set('encoded_instructions', 0.6);
+            byId.set('encoded_instructions', [
+                {
+                    detector: 'injection',
+                    category: 'injection.encoded_instructions',
+                    start: m.index,
+                    end: m.index + m[0].length,
+                    score: 0.6,
+                    value: m[0],
+                    spanned: true,
+                },
+            ]);
+        }
+    }
+    let keep = 1;
+    for (const w of weights.values())
+        keep *= 1 - w;
+    const score = Math.round((1 - keep) * 1000) / 1000;
+    if (score < threshold)
+        return { score, findings: [] };
+    const findings = [...byId.values()]
+        .flat()
+        .map((f) => ({ ...f, score: Math.max(f.score, score) }));
+    return { score, findings };
+}
+//# sourceMappingURL=injection.js.map

package/dist/src/guardrails/detectors/injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.js","sourceRoot":"","sources":["../../../../src/guardrails/detectors/injection.ts"],"names":[],"mappings":"AAeA,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAA,eAAe,CAAC;AAEpC,MAAM,CAAC,MAAM,iBAAiB,GAAa;IACzC,wBAAwB;IACxB;QACE,EAAE,EAAE,iBAAiB;QACrB,EAAE,EAAE,IAAI,MAAM,CACZ,MAAM,CAAC,GAAG,CAAA,uDAAuD,CAAC,gHAAgH,CAAC,iFAAiF,EACpQ,IAAI,CACL;QACD,MAAM,EAAE,IAAI;KACb;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,EAAE,EAAE,IAAI,MAAM,CACZ,MAAM,CAAC,GAAG,CAAA,8EAA8E,CAAC,+GAA+G,CAAC,4DAA4D,EACrQ,IAAI,CACL;QACD,MAAM,EAAE,IAAI;KACb;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,EAAE,EAAE,IAAI,MAAM,CACZ,MAAM,CAAC,GAAG,CAAA,+CAA+C,CAAC,6EAA6E,CAAC,0CAA0C,EAClL,IAAI,CACL;QACD,MAAM,EAAE,IAAI;KACb;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,EAAE,EAAE,mJAAmJ;QACvJ,MAAM,EAAE,IAAI;KACb;IACD,oCAAoC;IACpC;QACE,EAAE,EAAE,aAAa;QACjB,EAAE,EAAE,mTAAmT;QACvT,MAAM,EAAE,IAAI;KACb;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,EAAE,EAAE,8MAA8M;QAClN,MAAM,EAAE,IAAI;KACb;IACD,8BAA8B;IAC9B;QACE,EAAE,EAAE,aAAa;QACjB,EAAE,EAAE,gVAAgV;QACpV,MAAM,EAAE,GAAG;KACZ;IACD,oEAAoE;IACpE;QACE,EAAE,EAAE,aAAa;QACjB,EAAE,EAAE,yNAAyN;QAC7N,MAAM,EAAE,IAAI;KACb;IACD;QACE,EAAE,EAAE,aAAa;QACjB,EAAE,EAAE,oFAAoF;QACxF,MAAM,EAAE,GAAG;KACZ;IACD,6DAA6D;IAC7D;QACE,EAAE,EAAE,iBAAiB;QACrB,EAAE,EAAE,0XAA0X;QAC9X,MAAM,EAAE,IAAI;KACb;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,EAAE,EAAE,6eAA6e;QACjf,MAAM,EAAE,IAAI;KACb;IACD;QACE,EAAE,EAAE,SAAS;QACb,EAAE,EAAE,wPAAwP;QAC5P,MAAM,EAAE,GAAG;KACZ;IACD,+CAA+C;IAC/C;QACE,EAAE,EAAE,gBAAgB;QACpB,EAAE,EAAE,2IAA2I;QAC/I,MAAM,EAAE,GAAG;KACZ;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,EAAE,EAAE,6HAA6H;QACjI,MAAM,EAAE,IAAI;KACb;IACD,0FAA0F;CAC3F,CAAC;AAEF,qFAAqF;AACrF,MAAM,SAAS,GAAG,0BAA0B,CAAC;AAC7C,MAAM,IAAI,GAAG,+BAA+B,CAAC;AAC7C,MAAM,cAAc,GAAG,kCAAkC,CAAC;AAE1D;;;GAGG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,EAAE,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO;YAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CACnB,IAAY,EACZ,MAAc,EACd,IAA4B,EAC5B,OAA4B;IAE5B,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;QAClC,CAAC,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,EAAE;gBAC7B,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;gBACpC,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAChD,KAAK,EAAE,CAAC,CAAC,MAAM;gBACf,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;gBACX,OAAO,EAAE,MAAM,GAAG,CAAC;aACpB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC;AAOD,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,SAAS,GAAG,GAAG;IAC1D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAEtC,0EAA0E;IAC1E,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC;YACR,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,0BAA0B;YACpC,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;YAC1B,KAAK,EAAE,GAAG;YACV,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACX,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,OAAO;YAAE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;QACxC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACnF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,2BAA2B;gBACrC,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;gBAC1B,KAAK,EAAE,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;gBACX,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,MAAM,GAAG,GAAG,gEAAgE,CAAC;IAC7E,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAChD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE;gBAC/B;oBACE,QAAQ,EAAE,WAAW;oBACrB,QAAQ,EAAE,gCAAgC;oBAC1C,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;oBAC1B,KAAK,EAAE,GAAG;oBACV,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;oBACX,OAAO,EAAE,IAAI;iBACd;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE;QAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACnD,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;SAChC,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC"}

package/dist/src/guardrails/detectors/pii.d.ts

@@ -0,0 +1,23 @@
+import type { Finding, PiiType } from '../types.js';
+/** Dotted-quad IPv4 with every octet in 0-255 and no leading zeros. */
+export declare function isIPv4(raw: string): boolean;
+/** Luhn (mod 10) checksum over a digit string. */
+export declare function luhnValid(digits: string): boolean;
+/** Card brands by IIN prefix (digits only). Unknown prefixes are not treated as cards. */
+export declare function cardBrand(digits: string): string | undefined;
+/** CPF (Brazilian individual taxpayer id): 11 digits, two mod-11 check digits. */
+export declare function cpfValid(raw: string): boolean;
+/**
+ * CNPJ (Brazilian company id), numeric or the alphanumeric format in use since July 2026: 12
+ * characters [0-9A-Z] + 2 check digits, each character valued at its ASCII code minus 48.
+ */
+export declare function cnpjValid(raw: string): boolean;
+/** US Social Security Number structure (no 000/666/9xx area, no 00 group, no 0000 serial). */
+export declare function ssnValid(raw: string): boolean;
+/** IBAN: known country length and ISO 7064 mod 97-10 checksum. */
+export declare function ibanValid(raw: string): boolean;
+/** Phone numbers: international (+CC), Brazilian and North American formats with separators. */
+export declare function phoneValid(raw: string): boolean;
+/** PII with format + checksum validation. Overlaps are resolved by the caller (longest, earliest). */
+export declare function detectPii(text: string, types?: readonly PiiType[]): Finding[];
+//# sourceMappingURL=pii.d.ts.map

package/dist/src/guardrails/detectors/pii.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii.d.ts","sourceRoot":"","sources":["../../../../src/guardrails/detectors/pii.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAGpD,uEAAuE;AACvE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAK3C;AAED,kDAAkD;AAClD,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAcjD;AAED,0FAA0F;AAC1F,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAkC5D;AAED,kFAAkF;AAClF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAU7C;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAa9C;AAED,8FAA8F;AAC9F,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAY7C;AAsED,kEAAkE;AAClE,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAa9C;AAED,gGAAgG;AAChG,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAS/C;AAkED,sGAAsG;AACtG,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,OAAO,EAAc,GAAG,OAAO,EAAE,CAqBxF"}

package/dist/src/guardrails/detectors/pii.js

@@ -0,0 +1,295 @@
+import { PII_TYPES } from '../types.js';
+/** Dotted-quad IPv4 with every octet in 0-255 and no leading zeros. */
+export function isIPv4(raw) {
+    const parts = raw.split('.');
+    return (parts.length === 4 && parts.every((p) => /^(?:0|[1-9]\d{0,2})$/.test(p) && Number(p) <= 255));
+}
+/** Luhn (mod 10) checksum over a digit string. */
+export function luhnValid(digits) {
+    if (!/^\d+$/.test(digits))
+        return false;
+    let sum = 0;
+    let double = false;
+    for (let i = digits.length - 1; i >= 0; i--) {
+        let d = digits.charCodeAt(i) - 48;
+        if (double) {
+            d *= 2;
+            if (d > 9)
+                d -= 9;
+        }
+        sum += d;
+        double = !double;
+    }
+    return sum % 10 === 0;
+}
+/** Card brands by IIN prefix (digits only). Unknown prefixes are not treated as cards. */
+export function cardBrand(digits) {
+    const p2 = Number(digits.slice(0, 2));
+    const p3 = Number(digits.slice(0, 3));
+    const p4 = Number(digits.slice(0, 4));
+    const p6 = Number(digits.slice(0, 6));
+    const len = digits.length;
+    // Brazilian brands first: their ranges overlap Visa/Discover/Mastercard prefixes.
+    if ([
+        401178, 401179, 431274, 438935, 451416, 457393, 457631, 457632, 504175, 627780, 636297,
+        636368,
+    ].includes(p6))
+        return 'elo';
+    if ((p6 >= 506699 && p6 <= 506778) ||
+        (p6 >= 509000 && p6 <= 509999) ||
+        (p6 >= 650031 && p6 <= 650051))
+        return 'elo';
+    if (p6 === 606282 || p4 === 3841)
+        return 'hipercard';
+    if (digits.startsWith('4') && (len === 13 || len === 16 || len === 19))
+        return 'visa';
+    if (((p2 >= 51 && p2 <= 55) || (p4 >= 2221 && p4 <= 2720)) && len === 16)
+        return 'mastercard';
+    if ((p2 === 34 || p2 === 37) && len === 15)
+        return 'amex';
+    if ((p4 === 6011 || p2 === 65 || (p3 >= 644 && p3 <= 649)) && len >= 16)
+        return 'discover';
+    if ((p2 === 36 || p2 === 38 || (p3 >= 300 && p3 <= 305)) && len >= 14)
+        return 'diners';
+    if (p4 >= 3528 && p4 <= 3589 && len >= 16)
+        return 'jcb';
+    if ((p2 === 62 || p2 === 81) && len >= 16)
+        return 'unionpay';
+    if ((p4 === 5018 || p4 === 5020 || p4 === 5038 || p4 === 6304 || p4 === 6759 || p4 === 6761) &&
+        len >= 12)
+        return 'maestro';
+    return undefined;
+}
+/** CPF (Brazilian individual taxpayer id): 11 digits, two mod-11 check digits. */
+export function cpfValid(raw) {
+    const d = raw.replace(/\D/g, '');
+    if (d.length !== 11 || /^(\d)\1{10}$/.test(d))
+        return false;
+    const check = (len) => {
+        let sum = 0;
+        for (let i = 0; i < len; i++)
+            sum += (d.charCodeAt(i) - 48) * (len + 1 - i);
+        const r = (sum * 10) % 11;
+        return r === 10 ? 0 : r;
+    };
+    return check(9) === d.charCodeAt(9) - 48 && check(10) === d.charCodeAt(10) - 48;
+}
+/**
+ * CNPJ (Brazilian company id), numeric or the alphanumeric format in use since July 2026: 12
+ * characters [0-9A-Z] + 2 check digits, each character valued at its ASCII code minus 48.
+ */
+export function cnpjValid(raw) {
+    const c = raw.replace(/[.\-/\s]/g, '').toUpperCase();
+    if (!/^[0-9A-Z]{12}\d{2}$/.test(c) || /^(\d)\1{13}$/.test(c))
+        return false;
+    const value = (i) => c.charCodeAt(i) - 48;
+    const check = (len) => {
+        const weights = len === 12 ? [5, 4, 3, 2, 9, 8, 7, 6, 5, 4, 3, 2] : [6, 5, 4, 3, 2, 9, 8, 7, 6, 5, 4, 3, 2];
+        let sum = 0;
+        for (let i = 0; i < len; i++)
+            sum += value(i) * (weights[i] ?? 0);
+        const r = sum % 11;
+        return r < 2 ? 0 : 11 - r;
+    };
+    return check(12) === value(12) && check(13) === value(13);
+}
+/** US Social Security Number structure (no 000/666/9xx area, no 00 group, no 0000 serial). */
+export function ssnValid(raw) {
+    const m = /^(\d{3})[- ](\d{2})[- ](\d{4})$/.exec(raw);
+    if (!m)
+        return false;
+    const area = m[1] ?? '';
+    const group = m[2] ?? '';
+    const serial = m[3] ?? '';
+    if (area === '000' || area === '666' || area.startsWith('9'))
+        return false;
+    if (group === '00' || serial === '0000')
+        return false;
+    // Well-known advertising / sample numbers.
+    if (['078-05-1120', '219-09-9999', '123-45-6789'].includes(`${area}-${group}-${serial}`))
+        return false;
+    return true;
+}
+/** IBAN lengths by country (ISO 13616 registry, main countries). */
+const IBAN_LENGTHS = {
+    AD: 24,
+    AE: 23,
+    AT: 20,
+    BE: 16,
+    BG: 22,
+    BH: 22,
+    BR: 29,
+    CH: 21,
+    CR: 22,
+    CY: 28,
+    CZ: 24,
+    DE: 22,
+    DK: 18,
+    DO: 28,
+    EE: 20,
+    ES: 24,
+    FI: 18,
+    FO: 18,
+    FR: 27,
+    GB: 22,
+    GI: 23,
+    GL: 18,
+    GR: 27,
+    GT: 28,
+    HR: 21,
+    HU: 28,
+    IE: 22,
+    IL: 23,
+    IS: 26,
+    IT: 27,
+    JO: 30,
+    KW: 30,
+    KZ: 20,
+    LB: 28,
+    LI: 21,
+    LT: 20,
+    LU: 20,
+    LV: 21,
+    MC: 27,
+    MD: 24,
+    ME: 22,
+    MK: 19,
+    MR: 27,
+    MT: 31,
+    MU: 30,
+    NL: 18,
+    NO: 15,
+    PK: 24,
+    PL: 28,
+    PS: 29,
+    PT: 25,
+    QA: 29,
+    RO: 24,
+    RS: 22,
+    SA: 24,
+    SE: 24,
+    SI: 19,
+    SK: 24,
+    SM: 27,
+    TN: 24,
+    TR: 26,
+    UA: 29,
+    VG: 24,
+    XK: 20,
+};
+/** IBAN: known country length and ISO 7064 mod 97-10 checksum. */
+export function ibanValid(raw) {
+    const s = raw.replace(/\s/g, '').toUpperCase();
+    if (!/^[A-Z]{2}\d{2}[A-Z0-9]{11,30}$/.test(s))
+        return false;
+    const expected = IBAN_LENGTHS[s.slice(0, 2)];
+    if (expected !== undefined && s.length !== expected)
+        return false;
+    if (expected === undefined)
+        return false;
+    const rearranged = s.slice(4) + s.slice(0, 4);
+    let rem = 0;
+    for (const ch of rearranged) {
+        const v = ch >= 'A' ? String(ch.charCodeAt(0) - 55) : ch;
+        for (const digit of v)
+            rem = (rem * 10 + (digit.charCodeAt(0) - 48)) % 97;
+    }
+    return rem === 1;
+}
+/** Phone numbers: international (+CC), Brazilian and North American formats with separators. */
+export function phoneValid(raw) {
+    const digits = raw.replace(/\D/g, '');
+    if (raw.trim().startsWith('+'))
+        return digits.length >= 8 && digits.length <= 15;
+    if (digits.length < 10 || digits.length > 11)
+        return false;
+    // Brazil: (11) 91234-5678, 11 91234-5678, (11) 3123-4567
+    if (/^\(?\d{2}\)?[\s.-]?9?\d{4}[\s.-]\d{4}$/.test(raw.trim()))
+        return true;
+    // North America: (415) 555-0132, 415-555-0132, 415.555.0132
+    if (/^\(?\d{3}\)?[\s.-]?\d{3}[\s.-]\d{4}$/.test(raw.trim()))
+        return true;
+    return false;
+}
+// Boundaries are explicit look-arounds instead of \b so formatted numbers ("(11) 9…") are whole.
+const PATTERNS = [
+    {
+        type: 'email',
+        re: /(?<![\w.+-])[A-Za-z0-9](?:[A-Za-z0-9._%+-]{0,63})@(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,62})\.)+[A-Za-z]{2,24}(?![\w-])/g,
+        score: 0.99,
+    },
+    {
+        type: 'iban',
+        re: /(?<![A-Za-z0-9])[A-Z]{2}\d{2}(?: ?[A-Z0-9]){11,30}(?![A-Za-z0-9])/g,
+        valid: ibanValid,
+        score: 0.99,
+    },
+    {
+        type: 'cnpj',
+        re: /(?<![\w./-])[0-9A-Z]{2}\.?[0-9A-Z]{3}\.?[0-9A-Z]{3}\/?[0-9A-Z]{4}-?\d{2}(?![\w/-])/g,
+        valid: (m) => cnpjValid(m) && (/^\d/.test(m.replace(/\D/g, '')) || /[./-]/.test(m)) && !/^[A-Z]+$/.test(m),
+        score: 0.98,
+    },
+    {
+        type: 'cpf',
+        re: /(?<![\w./-])\d{3}\.?\d{3}\.?\d{3}-?\d{2}(?![\w/-])/g,
+        valid: cpfValid,
+        score: 0.95,
+    },
+    {
+        type: 'credit_card',
+        re: /(?<![\d-])\d(?:[ -]?\d){11,18}(?![\d-])/g,
+        valid: (m) => {
+            const digits = m.replace(/\D/g, '');
+            // Mixed separators ("4111 1111-1111 1111") are unusual for cards; accept one kind.
+            if (/ /.test(m) && /-/.test(m))
+                return false;
+            return digits.length >= 13 && digits.length <= 19 && luhnValid(digits) && !!cardBrand(digits);
+        },
+        score: 0.97,
+    },
+    {
+        type: 'ssn',
+        re: /(?<![\d-])\d{3}[- ]\d{2}[- ]\d{4}(?![\d-])/g,
+        valid: ssnValid,
+        score: 0.85,
+    },
+    {
+        type: 'phone',
+        re: /(?<![\w+])(?:\+\d{1,3}[\s.-]?)?\(?\d{2,4}\)?[\s.-]?\d{3,5}[\s.-]\d{4}(?![\w])/g,
+        valid: phoneValid,
+        score: 0.75,
+    },
+    {
+        type: 'ip_address',
+        re: /(?<![\d.])(?:\d{1,3}\.){3}\d{1,3}(?![\d.])/g,
+        valid: (m) => isIPv4(m) && !m.startsWith('0.') && m !== '127.0.0.1',
+        score: 0.6,
+    },
+];
+/** PII with format + checksum validation. Overlaps are resolved by the caller (longest, earliest). */
+export function detectPii(text, types = PII_TYPES) {
+    const want = new Set(types);
+    const out = [];
+    for (const p of PATTERNS) {
+        if (!want.has(p.type))
+            continue;
+        p.re.lastIndex = 0;
+        for (let m = p.re.exec(text); m; m = p.re.exec(text)) {
+            const value = m[0];
+            if (p.valid && !p.valid(value))
+                continue;
+            out.push({
+                detector: 'pii',
+                category: `pii.${p.type}`,
+                start: m.index,
+                end: m.index + value.length,
+                score: p.score,
+                value,
+                spanned: true,
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=pii.js.map

package/dist/src/guardrails/detectors/pii.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii.js","sourceRoot":"","sources":["../../../../src/guardrails/detectors/pii.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,uEAAuE;AACvE,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,MAAM,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1B,kFAAkF;IAClF,IACE;QACE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;QACtF,MAAM;KACP,CAAC,QAAQ,CAAC,EAAE,CAAC;QAEd,OAAO,KAAK,CAAC;IACf,IACE,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;QAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;QAC9B,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;QAE9B,OAAO,KAAK,CAAC;IACf,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IACrD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC;IACtF,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,YAAY,CAAC;IAC9F,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAC1D,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC;IAC3F,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IACvF,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,GAAG,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC;IAC7D,IACE,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;QACxF,GAAG,IAAI,EAAE;QAET,OAAO,SAAS,CAAC;IACnB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE;QAC5B,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE;QAC5B,MAAM,OAAO,GACX,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9F,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,CAAC,GAAG,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACtD,2CAA2C;IAC3C,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oEAAoE;AACp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kEAAkE;AAClE,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,CAAC;YAAE,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACjF,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3D,yDAAyD;IACzD,IAAI,wCAAwC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,4DAA4D;IAC5D,IAAI,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,OAAO,KAAK,CAAC;AACf,CAAC;AASD,iGAAiG;AACjG,MAAM,QAAQ,GAAiB;IAC7B;QACE,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,oHAAoH;QACxH,KAAK,EAAE,IAAI;KACZ;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,oEAAoE;QACxE,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,IAAI;KACZ;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,qFAAqF;QACzF,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9F,KAAK,EAAE,IAAI;KACZ;IACD;QACE,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,qDAAqD;QACzD,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,IAAI;KACZ;IACD;QACE,IAAI,EAAE,aAAa;QACnB,EAAE,EAAE,0CAA0C;QAC9C,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;YACX,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpC,mFAAmF;YACnF,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7C,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChG,CAAC;QACD,KAAK,EAAE,IAAI;KACZ;IACD;QACE,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,6CAA6C;QACjD,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,IAAI;KACZ;IACD;QACE,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,gFAAgF;QACpF,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,IAAI;KACZ;IACD;QACE,IAAI,EAAE,YAAY;QAClB,EAAE,EAAE,6CAA6C;QACjD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,WAAW;QACnE,KAAK,EAAE,GAAG;KACX;CACF,CAAC;AAEF,sGAAsG;AACtG,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,KAAK,GAAuB,SAAS;IAC3E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,CAAC,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,SAAS;YACzC,GAAG,CAAC,IAAI,CAAC;gBACP,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE;gBACzB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM;gBAC3B,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK;gBACL,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/guardrails/detectors/secrets.d.ts

@@ -0,0 +1,5 @@
+import type { Finding, SecretType } from '../types.js';
+/** Shannon entropy in bits per character: tells random tokens from words ("password=changeme"). */
+export declare function entropy(s: string): number;
+export declare function detectSecrets(text: string, types?: readonly SecretType[]): Finding[];
+//# sourceMappingURL=secrets.d.ts.map

package/dist/src/guardrails/detectors/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../../src/guardrails/detectors/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYvD,mGAAmG;AACnG,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAUzC;AAiED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,SAAS,UAAU,EAAiB,GAC1C,OAAO,EAAE,CA4BX"}