@aion0/bastion 0.1.7

package/dist/dlp/message-cache.js

@@ -0,0 +1,251 @@
+"use strict";
+/**
+ * Message-level DLP cache.
+ *
+ * LLM API requests carry the full conversation history in a `messages[]` array.
+ * Without caching, every turn re-scans ALL previous messages — O(N²) cumulative.
+ *
+ * This module hashes individual messages and caches their DLP findings so that
+ * only new/unseen messages are scanned. Complexity drops to O(N).
+ *
+ * Cache also distinguishes between "new findings" (first detection) and
+ * "cached findings" (repeated from history) so the caller can decide
+ * whether to record duplicate DLP events.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DlpMessageCache = void 0;
+const hash_js_1 = require("../utils/hash.js");
+const engine_js_1 = require("./engine.js");
+const logger_js_1 = require("../utils/logger.js");
+const log = (0, logger_js_1.createLogger)('dlp-cache');
+// ── LRU Cache ──
+class LRUCache {
+    maxSize;
+    cache = new Map();
+    constructor(maxSize) {
+        this.maxSize = maxSize;
+    }
+    get(key) {
+        const v = this.cache.get(key);
+        if (v !== undefined) {
+            // Move to end (most recently used)
+            this.cache.delete(key);
+            this.cache.set(key, v);
+        }
+        return v;
+    }
+    set(key, value) {
+        this.cache.delete(key);
+        this.cache.set(key, value);
+        if (this.cache.size > this.maxSize) {
+            const first = this.cache.keys().next().value;
+            this.cache.delete(first);
+        }
+    }
+    get size() { return this.cache.size; }
+    clear() { this.cache.clear(); }
+}
+function preview(text, maxLen = 60) {
+    const oneLine = text.replace(/\n/g, '\\n');
+    return oneLine.length > maxLen ? oneLine.slice(0, maxLen) + '...' : oneLine;
+}
+/** Extract the text content of a single message for DLP scanning */
+function messageText(msg) {
+    if (typeof msg.content === 'string')
+        return msg.content;
+    // Content blocks array (Anthropic multimodal: [{type:"text", text:"..."}, ...])
+    if (Array.isArray(msg.content)) {
+        return msg.content
+            .filter((b) => typeof b.text === 'string')
+            .map((b) => b.text)
+            .join('\n');
+    }
+    return '';
+}
+/** Compute a stable hash for message content */
+function messageHash(msg) {
+    const raw = typeof msg.content === 'string'
+        ? msg.content
+        : JSON.stringify(msg.content ?? '');
+    return (0, hash_js_1.sha256)(raw);
+}
+class DlpMessageCache {
+    cache;
+    hits = 0;
+    misses = 0;
+    constructor(maxSize = 5000) {
+        this.cache = new LRUCache(maxSize);
+    }
+    get stats() {
+        return { hits: this.hits, misses: this.misses, size: this.cache.size };
+    }
+    /**
+     * Scan a request body with message-level caching.
+     *
+     * If parsedBody has a `messages[]` array, each message is individually
+     * hashed and checked against the cache. Only new messages are scanned.
+     *
+     * Falls back to full-body scan for non-messages payloads.
+     */
+    scanWithCache(body, parsedBody, patterns, action) {
+        const messages = parsedBody.messages;
+        if (!Array.isArray(messages) || messages.length === 0) {
+            // Not a messages-format request — full scan
+            const t0 = performance.now();
+            const result = (0, engine_js_1.scanText)(body, patterns, action);
+            log.info('DLP scan (full body)', {
+                bodyBytes: body.length,
+                patterns: patterns.length,
+                findings: result.findings.length,
+                action: result.action,
+                durationMs: +(performance.now() - t0).toFixed(2),
+            });
+            return { ...result, newFindings: result.findings, cachedFindings: [] };
+        }
+        const t0 = performance.now();
+        const newFindings = [];
+        const cachedFindings = [];
+        const details = [];
+        let scannedNew = 0;
+        let scannedNewBytes = 0;
+        let cacheHit = 0;
+        let skippedEmpty = 0;
+        let cachedFindingsCount = 0;
+        // Scan system prompt (Anthropic format)
+        const system = parsedBody.system;
+        if (system) {
+            const sysText = typeof system === 'string' ? system : JSON.stringify(system);
+            const sysHash = (0, hash_js_1.sha256)(sysText);
+            const cached = this.cache.get(sysHash);
+            if (cached !== undefined) {
+                cachedFindings.push(...cached);
+                cachedFindingsCount += cached.length;
+                cacheHit++;
+                this.hits++;
+                details.push({
+                    index: -1, role: 'system', bytes: sysText.length,
+                    source: 'cache', hash: sysHash.slice(0, 8),
+                    findings: cached.map(f => f.patternName),
+                    preview: preview(sysText),
+                });
+            }
+            else {
+                const result = (0, engine_js_1.scanText)(sysText, patterns, 'warn');
+                this.cache.set(sysHash, result.findings);
+                newFindings.push(...result.findings);
+                scannedNew++;
+                scannedNewBytes += sysText.length;
+                this.misses++;
+                details.push({
+                    index: -1, role: 'system', bytes: sysText.length,
+                    source: 'scanned', hash: sysHash.slice(0, 8),
+                    findings: result.findings.map(f => f.patternName),
+                    preview: preview(sysText),
+                });
+            }
+        }
+        // Scan each message individually
+        for (let i = 0; i < messages.length; i++) {
+            const msg = messages[i];
+            const text = messageText(msg);
+            const role = msg.role ?? 'unknown';
+            if (!text) {
+                skippedEmpty++;
+                details.push({
+                    index: i, role, bytes: 0,
+                    source: 'empty', hash: '-',
+                    findings: [],
+                    preview: '(empty)',
+                });
+                continue;
+            }
+            const hash = messageHash(msg);
+            const cached = this.cache.get(hash);
+            if (cached !== undefined) {
+                cachedFindings.push(...cached);
+                cachedFindingsCount += cached.length;
+                cacheHit++;
+                this.hits++;
+                details.push({
+                    index: i, role, bytes: text.length,
+                    source: 'cache', hash: hash.slice(0, 8),
+                    findings: cached.map(f => f.patternName),
+                    preview: preview(text),
+                });
+            }
+            else {
+                const result = (0, engine_js_1.scanText)(text, patterns, 'warn');
+                this.cache.set(hash, result.findings);
+                newFindings.push(...result.findings);
+                scannedNew++;
+                scannedNewBytes += text.length;
+                this.misses++;
+                details.push({
+                    index: i, role, bytes: text.length,
+                    source: 'scanned', hash: hash.slice(0, 8),
+                    findings: result.findings.map(f => f.patternName),
+                    preview: preview(text),
+                });
+            }
+        }
+        const allFindings = [...newFindings, ...cachedFindings];
+        const totalMessages = messages.length + (system ? 1 : 0);
+        const durationMs = +(performance.now() - t0).toFixed(2);
+        const hitRate = totalMessages > 0 ? +((cacheHit / totalMessages) * 100).toFixed(1) : 0;
+        // Summary log
+        log.info('DLP scan (message cache)', {
+            messages: totalMessages,
+            cacheHit,
+            scannedNew,
+            skippedEmpty,
+            hitRate: `${hitRate}%`,
+            scannedNewBytes,
+            bodyBytes: body.length,
+            savedBytes: body.length - scannedNewBytes,
+            newFindings: newFindings.length,
+            cachedFindings: cachedFindingsCount,
+            totalFindings: allFindings.length,
+            action,
+            durationMs,
+            cacheTotal: this.cache.size,
+            cacheHitsTotal: this.hits,
+            cacheMissesTotal: this.misses,
+        });
+        // Per-message detail log
+        for (const d of details) {
+            const tag = d.source === 'cache'
+                ? (d.findings.length > 0 ? 'HIT+FINDING' : 'HIT')
+                : d.source === 'scanned'
+                    ? (d.findings.length > 0 ? 'SCAN+FINDING' : 'SCAN')
+                    : 'SKIP';
+            log.info(`  msg[${d.index}] ${d.role} ${tag}`, {
+                bytes: d.bytes,
+                hash: d.hash,
+                findings: d.findings.length > 0 ? d.findings : undefined,
+                preview: d.preview,
+            });
+        }
+        if (allFindings.length === 0) {
+            return { action: 'pass', findings: [], newFindings: [], cachedFindings: [] };
+        }
+        // Apply redaction on the original body string
+        let redactedBody;
+        if (action === 'redact') {
+            redactedBody = body;
+            for (const f of allFindings) {
+                for (const m of f.matches) {
+                    redactedBody = redactedBody.replaceAll(m, `[${f.patternName.toUpperCase()}_REDACTED]`);
+                }
+            }
+        }
+        return { action, findings: allFindings, redactedBody, newFindings, cachedFindings };
+    }
+    /** Clear the cache (for testing or config changes) */
+    clear() {
+        this.cache.clear();
+        this.hits = 0;
+        this.misses = 0;
+    }
+}
+exports.DlpMessageCache = DlpMessageCache;
+//# sourceMappingURL=message-cache.js.map

package/dist/dlp/message-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-cache.js","sourceRoot":"","sources":["../../src/dlp/message-cache.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,8CAA0C;AAC1C,2CAAwD;AAExD,kDAAkD;AAElD,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,WAAW,CAAC,CAAC;AAEtC,kBAAkB;AAElB,MAAM,QAAQ;IAEQ;IADZ,KAAK,GAAG,IAAI,GAAG,EAAa,CAAC;IACrC,YAAoB,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;IAEvC,GAAG,CAAC,GAAW;QACb,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,mCAAmC;YACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAQ;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAa,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,KAAK,KAAW,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CACtC;AASD,SAAS,OAAO,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9E,CAAC;AAED,oEAAoE;AACpE,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IACxD,gFAAgF;IAChF,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,OAAO;aACf,MAAM,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;aAClE,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,IAAc,CAAC;aACrD,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,gDAAgD;AAChD,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QACzC,CAAC,CAAC,GAAG,CAAC,OAAO;QACb,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACtC,OAAO,IAAA,gBAAM,EAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AA4BD,MAAa,eAAe;IAClB,KAAK,CAAyB;IAC9B,IAAI,GAAG,CAAC,CAAC;IACT,MAAM,GAAG,CAAC,CAAC;IAEnB,YAAY,OAAO,GAAG,IAAI;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,KAAK;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACzE,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CACX,IAAY,EACZ,UAAmC,EACnC,QAAsB,EACtB,MAAiB;QAEjB,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,4CAA4C;YAC5C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBAC/B,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;aACjD,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,cAAc,GAAiB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAE5B,wCAAwC;QACxC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,IAAA,gBAAM,EAAC,OAAO,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,cAAc,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;gBAC/B,mBAAmB,IAAI,MAAM,CAAC,MAAM,CAAC;gBACrC,QAAQ,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM;oBAChD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC1C,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;oBACxC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;iBAC1B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,IAAA,oBAAQ,EAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACnD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACzC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACrC,UAAU,EAAE,CAAC;gBACb,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;gBAClC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM;oBAChD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;oBACjD,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAY,CAAC;YACnC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC;YAEnC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,YAAY,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;oBACxB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG;oBAC1B,QAAQ,EAAE,EAAE;oBACZ,OAAO,EAAE,SAAS;iBACnB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,cAAc,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;gBAC/B,mBAAmB,IAAI,MAAM,CAAC,MAAM,CAAC;gBACrC,QAAQ,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM;oBAClC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBACvC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;oBACxC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;iBACvB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAChD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACrC,UAAU,EAAE,CAAC;gBACb,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC;gBAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM;oBAClC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;oBACjD,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,cAAc,CAAC,CAAC;QACxD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvF,cAAc;QACd,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE;YACnC,QAAQ,EAAE,aAAa;YACvB,QAAQ;YACR,UAAU;YACV,YAAY;YACZ,OAAO,EAAE,GAAG,OAAO,GAAG;YACtB,eAAe;YACf,SAAS,EAAE,IAAI,CAAC,MAAM;YACtB,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,eAAe;YACzC,WAAW,EAAE,WAAW,CAAC,MAAM;YAC/B,cAAc,EAAE,mBAAmB;YACnC,aAAa,EAAE,WAAW,CAAC,MAAM;YACjC,MAAM;YACN,UAAU;YACV,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YAC3B,cAAc,EAAE,IAAI,CAAC,IAAI;YACzB,gBAAgB,EAAE,IAAI,CAAC,MAAM;SAC9B,CAAC,CAAC;QAEH,yBAAyB;QACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,OAAO;gBAC9B,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;gBACjD,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS;oBACtB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;oBACnD,CAAC,CAAC,MAAM,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,EAAE;gBAC7C,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBACxD,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QAC/E,CAAC;QAED,8CAA8C;QAC9C,IAAI,YAAgC,CAAC;QACrC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,YAAY,GAAG,IAAI,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC1B,YAAY,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACtF,CAAC;IAED,sDAAsD;IACtD,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,CAAC;CACF;AApMD,0CAoMC"}

package/dist/dlp/patterns/context-aware.d.ts

@@ -0,0 +1,4 @@
+import type { DlpPattern } from '../engine.js';
+/** Context-aware patterns: only flag when surrounding text confirms the match */
+export declare const contextAwarePatterns: DlpPattern[];
+//# sourceMappingURL=context-aware.d.ts.map

package/dist/dlp/patterns/context-aware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-aware.d.ts","sourceRoot":"","sources":["../../../src/dlp/patterns/context-aware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,iFAAiF;AACjF,eAAO,MAAM,oBAAoB,EAAE,UAAU,EAuC5C,CAAC"}

package/dist/dlp/patterns/context-aware.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.contextAwarePatterns = void 0;
+/** Context-aware patterns: only flag when surrounding text confirms the match */
+exports.contextAwarePatterns = [
+    {
+        name: 'email-address',
+        category: 'context-aware',
+        regex: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g,
+        description: 'Email Address',
+        requireContext: ['email', 'contact', 'user', 'customer', 'address', 'send to', 'mailto'],
+    },
+    {
+        name: 'phone-number',
+        category: 'context-aware',
+        regex: /\b(?:\+1[-.\s]?)?(?:\(?[0-9]{3}\)?[-.\s]?)?[0-9]{3}[-.\s]?[0-9]{4}\b/g,
+        description: 'US Phone Number',
+        requireContext: ['phone', 'call', 'tel', 'mobile', 'cell', 'fax', 'contact'],
+    },
+    {
+        name: 'ip-address',
+        category: 'context-aware',
+        regex: /\b(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b/g,
+        description: 'IPv4 Address',
+        requireContext: ['ip', 'server', 'host', 'address', 'connect', 'network'],
+    },
+    {
+        name: 'drivers-license',
+        category: 'context-aware',
+        regex: /(?<![A-Za-z0-9_-])[A-Z][0-9]{7,12}(?![A-Za-z0-9_-])/g,
+        description: 'Driver License Number (letter prefix + 7-12 digits)',
+        requireContext: ['driver', 'license', 'licence', 'DL', 'driving'],
+        contextVerify: {
+            antiPatterns: [/(?:version|v\d|build|release|commit|sha|hash|ref)/i],
+        },
+    },
+    {
+        name: 'passport-number',
+        category: 'context-aware',
+        regex: /(?<![A-Za-z0-9_-])[A-Z]{1,2}[0-9]{6,9}(?![A-Za-z0-9_-])/g,
+        description: 'Passport Number',
+        requireContext: ['passport'],
+    },
+];
+//# sourceMappingURL=context-aware.js.map

package/dist/dlp/patterns/context-aware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-aware.js","sourceRoot":"","sources":["../../../src/dlp/patterns/context-aware.ts"],"names":[],"mappings":";;;AAEA,iFAAiF;AACpE,QAAA,oBAAoB,GAAiB;IAChD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,eAAe;QACzB,KAAK,EAAE,qDAAqD;QAC5D,WAAW,EAAE,eAAe;QAC5B,cAAc,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;KACzF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,eAAe;QACzB,KAAK,EAAE,uEAAuE;QAC9E,WAAW,EAAE,iBAAiB;QAC9B,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;KAC7E;IACD;QACE,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,eAAe;QACzB,KAAK,EAAE,gGAAgG;QACvG,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;KAC1E;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,eAAe;QACzB,KAAK,EAAE,sDAAsD;QAC7D,WAAW,EAAE,qDAAqD;QAClE,cAAc,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC;QACjE,aAAa,EAAE;YACb,YAAY,EAAE,CAAC,oDAAoD,CAAC;SACrE;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,eAAe;QACzB,KAAK,EAAE,0DAA0D;QACjE,WAAW,EAAE,iBAAiB;QAC9B,cAAc,EAAE,CAAC,UAAU,CAAC;KAC7B;CACF,CAAC"}

package/dist/dlp/patterns/high-confidence.d.ts

@@ -0,0 +1,4 @@
+import type { DlpPattern } from '../engine.js';
+/** High-confidence patterns: very low false positive rate */
+export declare const highConfidencePatterns: DlpPattern[];
+//# sourceMappingURL=high-confidence.d.ts.map

package/dist/dlp/patterns/high-confidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"high-confidence.d.ts","sourceRoot":"","sources":["../../../src/dlp/patterns/high-confidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,EAAE,UAAU,EAwI9C,CAAC"}

package/dist/dlp/patterns/high-confidence.js

@@ -0,0 +1,140 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.highConfidencePatterns = void 0;
+/** High-confidence patterns: very low false positive rate */
+exports.highConfidencePatterns = [
+    {
+        name: 'aws-access-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Z0-9])AKIA[0-9A-Z]{16}(?![A-Z0-9])/g,
+        description: 'AWS Access Key ID',
+        contextVerify: {
+            confirmPatterns: [/(?:aws|amazon|iam|access.?key|secret.?key|credential)/i],
+        },
+    },
+    {
+        name: 'aws-secret-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9/+_-])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+_-])/g,
+        description: 'AWS Secret Access Key (40-char base64)',
+        // This is broad — only used when near "aws" or "secret" context
+        requireContext: ['aws', 'AWS_SECRET', 'AWS_SECRET_ACCESS_KEY'],
+        contextVerify: { minEntropy: 3.5 },
+    },
+    {
+        name: 'github-token',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])(?:ghp|gho|ghs|ghr)_[A-Za-z0-9]{36}(?![A-Za-z0-9_-])/g,
+        description: 'GitHub Personal Access Token (ghp_/gho_/ghs_/ghr_)',
+    },
+    {
+        name: 'github-fine-grained-token',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])github_pat_[A-Za-z0-9]{22}_[A-Za-z0-9]{59}(?![A-Za-z0-9_-])/g,
+        description: 'GitHub Fine-grained PAT',
+    },
+    {
+        name: 'slack-token',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])xox[bporas]-[0-9]{10,13}-[A-Za-z0-9-]{20,}(?![A-Za-z0-9_-])/g,
+        description: 'Slack Token',
+    },
+    {
+        name: 'stripe-secret-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9_-])/g,
+        description: 'Stripe Secret Key (sk_live_/sk_test_)',
+    },
+    {
+        name: 'private-key',
+        category: 'high-confidence',
+        regex: /-----BEGIN (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/g,
+        description: 'Private Key Header',
+    },
+    // ── LLM Provider API Keys ──
+    {
+        name: 'openai-api-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])sk-(?!ant-)[A-Za-z0-9_-]{40,}(?![A-Za-z0-9_-])/g,
+        description: 'OpenAI API Key (also matches DeepSeek, Moonshot, Tongyi, and other sk- prefixed keys)',
+        contextVerify: {
+            confirmPatterns: [/(?:api|key|token|secret|openai|deepseek|moonshot|credential|bearer)/i],
+            minEntropy: 3.5,
+        },
+    },
+    {
+        name: 'anthropic-api-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])sk-ant-[A-Za-z0-9_-]{36,}(?![A-Za-z0-9_-])/g,
+        description: 'Anthropic API Key',
+    },
+    {
+        name: 'google-ai-api-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])AIzaSy[A-Za-z0-9_-]{33}(?![A-Za-z0-9_-])/g,
+        description: 'Google AI / Gemini API Key',
+    },
+    {
+        name: 'huggingface-token',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])hf_[A-Za-z0-9]{20,}(?![A-Za-z0-9_-])/g,
+        description: 'Hugging Face Access Token',
+    },
+    {
+        name: 'replicate-api-token',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])r8_[A-Za-z0-9]{37,}(?![A-Za-z0-9_-])/g,
+        description: 'Replicate API Token',
+        requireContext: ['replicate', 'REPLICATE', 'REPLICATE_API_TOKEN'],
+    },
+    {
+        name: 'groq-api-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])gsk_[A-Za-z0-9]{48,}(?![A-Za-z0-9_-])/g,
+        description: 'Groq API Key',
+    },
+    {
+        name: 'perplexity-api-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])pplx-[A-Za-z0-9]{48,}(?![A-Za-z0-9_-])/g,
+        description: 'Perplexity API Key',
+    },
+    {
+        name: 'xai-api-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])xai-[A-Za-z0-9]{48,}(?![A-Za-z0-9_-])/g,
+        description: 'xAI (Grok) API Key',
+    },
+    {
+        name: 'cohere-api-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])[A-Za-z0-9]{40}(?![A-Za-z0-9_-])/g,
+        description: 'Cohere / Mistral / Together AI API Key (40-char token)',
+        requireContext: ['cohere', 'CO_API_KEY', 'mistral', 'MISTRAL_API_KEY', 'TOGETHER_API_KEY', 'TOGETHER_AI'],
+        contextVerify: { minEntropy: 3.5 },
+    },
+    {
+        name: 'azure-openai-api-key',
+        category: 'high-confidence',
+        regex: /(?<![A-Za-z0-9_-])[a-f0-9]{32}(?![A-Za-z0-9_-])/g,
+        description: 'Azure OpenAI API Key (32-char hex)',
+        requireContext: ['azure', 'AZURE_OPENAI', 'openai.azure.com'],
+        contextVerify: { minEntropy: 3.5 },
+    },
+    {
+        name: 'telegram-bot-token',
+        category: 'high-confidence',
+        regex: /\b\d{8,10}:AA[A-Za-z0-9_-]{33,35}\b/g,
+        description: 'Telegram Bot Token',
+    },
+    {
+        name: 'password-assignment',
+        category: 'high-confidence',
+        regex: /(?:password|passwd|pwd|pass_?word|secret_?key|auth_?token|access_?token|api_?key|apikey|credential)[\s]*=\s*['"]?(?!(?:localStorage|document|window|console|JSON|Object|Array|Math|Date|String|Number|Boolean|null\b|undefined\b|true\b|false\b|function\b|new |this\.|self\.|require|import|export|return |typeof |void |os\.|config\.|process\.env|getenv|settings\.|env\[|environ|\$\{|System\.))([^\s'"(]{6,})/gi,
+        description: 'Password or secret assignment (key=value pattern)',
+        contextVerify: {
+            antiPatterns: [/(?:example|placeholder|your[_-]?|xxx|test[_-]?|sample|dummy|changeme)/i],
+        },
+    },
+];
+//# sourceMappingURL=high-confidence.js.map

package/dist/dlp/patterns/high-confidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"high-confidence.js","sourceRoot":"","sources":["../../../src/dlp/patterns/high-confidence.ts"],"names":[],"mappings":";;;AAEA,6DAA6D;AAChD,QAAA,sBAAsB,GAAiB;IAClD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,4CAA4C;QACnD,WAAW,EAAE,mBAAmB;QAChC,aAAa,EAAE;YACb,eAAe,EAAE,CAAC,wDAAwD,CAAC;SAC5E;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,4DAA4D;QACnE,WAAW,EAAE,wCAAwC;QACrD,gEAAgE;QAChE,cAAc,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,uBAAuB,CAAC;QAC9D,aAAa,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;KACnC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,yEAAyE;QAChF,WAAW,EAAE,oDAAoD;KAClE;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,gFAAgF;QACvF,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,gFAAgF;QACvF,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,uEAAuE;QAC9E,WAAW,EAAE,uCAAuC;KACrD;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,yDAAyD;QAChE,WAAW,EAAE,oBAAoB;KAClC;IAED,8BAA8B;IAE9B;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,mEAAmE;QAC1E,WAAW,EAAE,uFAAuF;QACpG,aAAa,EAAE;YACb,eAAe,EAAE,CAAC,sEAAsE,CAAC;YACzF,UAAU,EAAE,GAAG;SAChB;KACF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,+DAA+D;QACtE,WAAW,EAAE,mBAAmB;KACjC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,6DAA6D;QACpE,WAAW,EAAE,4BAA4B;KAC1C;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,yDAAyD;QAChE,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,yDAAyD;QAChE,WAAW,EAAE,qBAAqB;QAClC,cAAc,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,qBAAqB,CAAC;KAClE;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,0DAA0D;QACjE,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,2DAA2D;QAClE,WAAW,EAAE,oBAAoB;KAClC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,0DAA0D;QACjE,WAAW,EAAE,oBAAoB;KAClC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,qDAAqD;QAC5D,WAAW,EAAE,wDAAwD;QACrE,cAAc,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,aAAa,CAAC;QACzG,aAAa,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;KACnC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,kDAAkD;QACzD,WAAW,EAAE,oCAAoC;QACjD,cAAc,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,kBAAkB,CAAC;QAC7D,aAAa,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;KACnC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,oBAAoB;KAClC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,sZAAsZ;QAC7Z,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE;YACb,YAAY,EAAE,CAAC,wEAAwE,CAAC;SACzF;KACF;CACF,CAAC"}

package/dist/dlp/patterns/prompt-injection.d.ts

@@ -0,0 +1,4 @@
+import type { DlpPattern } from '../engine.js';
+/** Prompt injection detection patterns (OWASP LLM01) */
+export declare const promptInjectionPatterns: DlpPattern[];
+//# sourceMappingURL=prompt-injection.d.ts.map

package/dist/dlp/patterns/prompt-injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-injection.d.ts","sourceRoot":"","sources":["../../../src/dlp/patterns/prompt-injection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,wDAAwD;AACxD,eAAO,MAAM,uBAAuB,EAAE,UAAU,EAqP/C,CAAC"}