@guardbee/guard-core 0.1.0

package/README.md

@@ -0,0 +1,26 @@
+# @guardbee/guard-core
+
+Shared detectors used by other GuardBee MCP packages. Not an MCP server on its own, just a library — you don't need to install this package directly.
+
+It exists so the same rule runs everywhere: a static scanner flagging a pattern and the runtime proxy blocking it use one implementation.
+
+## What's inside
+
+| Export | Used by | Purpose |
+|---|---|---|
+| `maskPiiInText`, `maskPiiInValue`, `PII_PATTERNS` | security-proxy | Mask TC Kimlik No, IBAN, card, email, phone, API keys, JWTs in tool results |
+| `isValidTcKimlik`, `isValidIban`, `isValidLuhn` | security-proxy, prompt-leak-scanner | Checksum validation after a regex match |
+| `scanForPromptInjection`, `scanToolResult` | security-proxy | Direct and indirect prompt injection patterns |
+| `classifyTool`, `CAPABILITY_RULES` | toxic-flow-auditor | Label a tool as untrusted-content / sensitive-data / exfiltration / destructive (lethal trifecta) |
+
+## Checksum-validated masking
+
+A regex alone masks any 11-digit number as a TC Kimlik No and any 16-digit number as a card. Each match is now checked before it is masked:
+
+| Pattern | Check |
+|---|---|
+| TC Kimlik No | Official 10th/11th digit algorithm |
+| IBAN | ISO 7064 MOD97-10 |
+| Card number | Luhn |
+
+A match that fails its check (an order number, a tracking code) is left unchanged.

package/dist/cjs/classify.d.ts

@@ -0,0 +1,12 @@
+export type Capability = "untrusted-content" | "sensitive-data" | "exfiltration" | "destructive";
+export type FlowCategory = "toxic-flow" | "dangerous-pair" | "capability";
+export interface ToolRecord {
+    name: string;
+    description?: string;
+    inputSchema?: unknown;
+}
+/** Name/description/schema heuristics for Simon Willison's lethal trifecta. */
+export declare const CAPABILITY_RULES: Record<Capability, RegExp>;
+export declare function textOf(tool: ToolRecord): string;
+export declare function classifyTool(tool: ToolRecord): Capability[];
+//# sourceMappingURL=classify.d.ts.map

package/dist/cjs/classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../src/classify.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,gBAAgB,GAAG,YAAY,CAAC;AAE1E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CASvD,CAAC;AAWF,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAG/C;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,CAqB3D"}

package/dist/cjs/classify.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CAPABILITY_RULES = void 0;
+exports.textOf = textOf;
+exports.classifyTool = classifyTool;
+/** Name/description/schema heuristics for Simon Willison's lethal trifecta. */
+exports.CAPABILITY_RULES = {
+    "untrusted-content": /\b(fetch|scrape|browse|crawl|http|https?|url|web[_-]?search|search[_-]?web|read[_-]?page|download|wiki|rss|feed|issue|ticket|inbox|comment|tweet|reddit|html|screenshot)\b/i,
+    "sensitive-data": /\b(secret|credential|token|api[_-]?key|password|passwd|vault|private[_-]?key|ssh|env|database|sql|postgres|mysql|mongo|payment|card|iban|kvkk|pii|tc[_-]?kimlik|identity|müşteri|musteri|kullanıcı|kullanici|email|e-mail|mailbox|inbox|read[_-]?file|read[_-]?secret|get[_-]?secret|list[_-]?secret|dump|export[_-]?user)\b/i,
+    "exfiltration": /\b(send|post|publish|upload|email|mail|notify|webhook|export|sync|push|transfer|message|slack|discord|telegram|http[_-]?request|fetch[_-]?post|write[_-]?url|relay|forward|pull[_ -]?request)\b/i,
+    destructive: /\b(delete|remove|drop|destroy|purge|reset|truncate|revoke|kill|terminate|overwrite|wipe|rm\b|unlink)\b/i,
+};
+/**
+ * `\b` treats `_` as a word character, so `\bvault\b` never matches inside
+ * `read_vault_secret`. Append a copy with `_`/`-` turned into spaces; the
+ * original stays so compound rules like `api[_-]?key` still match.
+ */
+function withWordBreaks(text) {
+    return `${text}\n${text.replace(/[_-]+/g, " ")}`;
+}
+function textOf(tool) {
+    const schema = tool.inputSchema ? JSON.stringify(tool.inputSchema) : "";
+    return withWordBreaks(`${tool.name}\n${tool.description ?? ""}\n${schema}`);
+}
+function classifyTool(tool) {
+    const text = textOf(tool);
+    const name = withWordBreaks(tool.name);
+    const found = [];
+    // Untrusted / exfil / destructive: name is primary (CheckMCP-style); description reinforces.
+    if (exports.CAPABILITY_RULES["untrusted-content"].test(name) || exports.CAPABILITY_RULES["untrusted-content"].test(text)) {
+        found.push("untrusted-content");
+    }
+    if (exports.CAPABILITY_RULES.exfiltration.test(name) || exports.CAPABILITY_RULES.exfiltration.test(text)) {
+        found.push("exfiltration");
+    }
+    if (exports.CAPABILITY_RULES.destructive.test(name) || exports.CAPABILITY_RULES.destructive.test(text)) {
+        found.push("destructive");
+    }
+    // Sensitive: name + description + schema (secrets often hide in schema field names).
+    if (exports.CAPABILITY_RULES["sensitive-data"].test(text)) {
+        found.push("sensitive-data");
+    }
+    return found;
+}
+//# sourceMappingURL=classify.js.map

package/dist/cjs/classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../src/classify.ts"],"names":[],"mappings":";;;AAmCA,wBAGC;AAED,oCAqBC;AA/CD,+EAA+E;AAClE,QAAA,gBAAgB,GAA+B;IAC1D,mBAAmB,EACjB,6KAA6K;IAC/K,gBAAgB,EACd,+TAA+T;IACjU,cAAc,EACZ,kMAAkM;IACpM,WAAW,EACT,yGAAyG;CAC5G,CAAC;AAEF;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,SAAgB,MAAM,CAAC,IAAgB;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,cAAc,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAgB,YAAY,CAAC,IAAgB;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,6FAA6F;IAC7F,IAAI,wBAAgB,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAgB,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzG,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,wBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,wBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvF,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC;IACD,qFAAqF;IACrF,IAAI,wBAAgB,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cjs/index.d.ts

@@ -0,0 +1,8 @@
+export { isValidTcKimlik, isValidLuhn, isValidIban } from "./validators.js";
+export { PII_PATTERNS, maskPiiInText, maskPiiInValue } from "./pii.js";
+export type { PiiPattern, PiiReplacer } from "./pii.js";
+export { INJECTION_PATTERNS, scanForPromptInjection, scanToolResult } from "./injection.js";
+export type { ScanResult } from "./injection.js";
+export { CAPABILITY_RULES, classifyTool, textOf } from "./classify.js";
+export type { Capability, FlowCategory, ToolRecord } from "./classify.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACvE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC5F,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC"}

package/dist/cjs/index.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.textOf = exports.classifyTool = exports.CAPABILITY_RULES = exports.scanToolResult = exports.scanForPromptInjection = exports.INJECTION_PATTERNS = exports.maskPiiInValue = exports.maskPiiInText = exports.PII_PATTERNS = exports.isValidIban = exports.isValidLuhn = exports.isValidTcKimlik = void 0;
+var validators_js_1 = require("./validators.js");
+Object.defineProperty(exports, "isValidTcKimlik", { enumerable: true, get: function () { return validators_js_1.isValidTcKimlik; } });
+Object.defineProperty(exports, "isValidLuhn", { enumerable: true, get: function () { return validators_js_1.isValidLuhn; } });
+Object.defineProperty(exports, "isValidIban", { enumerable: true, get: function () { return validators_js_1.isValidIban; } });
+var pii_js_1 = require("./pii.js");
+Object.defineProperty(exports, "PII_PATTERNS", { enumerable: true, get: function () { return pii_js_1.PII_PATTERNS; } });
+Object.defineProperty(exports, "maskPiiInText", { enumerable: true, get: function () { return pii_js_1.maskPiiInText; } });
+Object.defineProperty(exports, "maskPiiInValue", { enumerable: true, get: function () { return pii_js_1.maskPiiInValue; } });
+var injection_js_1 = require("./injection.js");
+Object.defineProperty(exports, "INJECTION_PATTERNS", { enumerable: true, get: function () { return injection_js_1.INJECTION_PATTERNS; } });
+Object.defineProperty(exports, "scanForPromptInjection", { enumerable: true, get: function () { return injection_js_1.scanForPromptInjection; } });
+Object.defineProperty(exports, "scanToolResult", { enumerable: true, get: function () { return injection_js_1.scanToolResult; } });
+var classify_js_1 = require("./classify.js");
+Object.defineProperty(exports, "CAPABILITY_RULES", { enumerable: true, get: function () { return classify_js_1.CAPABILITY_RULES; } });
+Object.defineProperty(exports, "classifyTool", { enumerable: true, get: function () { return classify_js_1.classifyTool; } });
+Object.defineProperty(exports, "textOf", { enumerable: true, get: function () { return classify_js_1.textOf; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAAA,iDAA4E;AAAnE,gHAAA,eAAe,OAAA;AAAE,4GAAA,WAAW,OAAA;AAAE,4GAAA,WAAW,OAAA;AAClD,mCAAuE;AAA9D,sGAAA,YAAY,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,wGAAA,cAAc,OAAA;AAEpD,+CAA4F;AAAnF,kHAAA,kBAAkB,OAAA;AAAE,sHAAA,sBAAsB,OAAA;AAAE,8GAAA,cAAc,OAAA;AAEnE,6CAAuE;AAA9D,+GAAA,gBAAgB,OAAA;AAAE,2GAAA,YAAY,OAAA;AAAE,qGAAA,MAAM,OAAA"}

package/dist/cjs/injection.d.ts

@@ -0,0 +1,14 @@
+export type ScanResult = {
+    action: "allow";
+} | {
+    action: "block";
+    reason: string;
+} | {
+    action: "warn";
+    reason: string;
+};
+export declare const INJECTION_PATTERNS: RegExp[];
+export declare function scanForPromptInjection(input: unknown, mode?: "block" | "warn"): ScanResult;
+/** Same patterns as request scanning, applied to a tool result the model will read. */
+export declare function scanToolResult(content: unknown, mode?: "block" | "warn"): ScanResult;
+//# sourceMappingURL=injection.d.ts.map

package/dist/cjs/injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.d.ts","sourceRoot":"","sources":["../../src/injection.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAGvC,eAAO,MAAM,kBAAkB,EAAE,MAAM,EAiBtC,CAAC;AAUF,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,IAAI,GAAE,OAAO,GAAG,MAAgB,GAC/B,UAAU,CAaZ;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE,OAAO,GAAG,MAAgB,GAAG,UAAU,CAO7F"}

package/dist/cjs/injection.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INJECTION_PATTERNS = void 0;
+exports.scanForPromptInjection = scanForPromptInjection;
+exports.scanToolResult = scanToolResult;
+// Common prompt injection patterns
+exports.INJECTION_PATTERNS = [
+    /ignore\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
+    /disregard\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
+    /forget\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
+    /you\s+are\s+now\s+(a\s+)?(?!an?\s+AI|a\s+language)/i,
+    /act\s+as\s+(if\s+you\s+are\s+)?(?!an?\s+AI|a\s+language)/i,
+    /pretend\s+(you\s+are|to\s+be)\s+(?!an?\s+AI|a\s+language)/i,
+    /jailbreak/i,
+    /DAN\s+mode/i,
+    /developer\s+mode/i,
+    /system\s+prompt\s*:/i,
+    /<\s*system\s*>/i,
+    /\[SYSTEM\]/i,
+    /bypass\s+(safety|filter|restriction|policy)/i,
+    /override\s+(safety|filter|restriction|policy)/i,
+    /reveal\s+(your\s+)?(system\s+prompt|instructions|prompt)/i,
+    /print\s+(your\s+)?(system\s+prompt|instructions)/i,
+];
+function flattenValue(value) {
+    if (typeof value === "string")
+        return value;
+    if (typeof value === "object" && value !== null) {
+        return JSON.stringify(value);
+    }
+    return String(value ?? "");
+}
+function scanForPromptInjection(input, mode = "block") {
+    const text = flattenValue(input);
+    for (const pattern of exports.INJECTION_PATTERNS) {
+        if (pattern.test(text)) {
+            return {
+                action: mode,
+                reason: `Prompt injection pattern detected: ${pattern.toString()}`,
+            };
+        }
+    }
+    return { action: "allow" };
+}
+/** Same patterns as request scanning, applied to a tool result the model will read. */
+function scanToolResult(content, mode = "block") {
+    const result = scanForPromptInjection(content, mode);
+    if (result.action === "allow")
+        return result;
+    return {
+        action: result.action,
+        reason: `Indirect prompt injection in tool result (MCP06:2025): ${result.reason}`,
+    };
+}
+//# sourceMappingURL=injection.js.map

package/dist/cjs/injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.js","sourceRoot":"","sources":["../../src/injection.ts"],"names":[],"mappings":";;;AAiCA,wDAgBC;AAGD,wCAOC;AAtDD,mCAAmC;AACtB,QAAA,kBAAkB,GAAa;IAC1C,2DAA2D;IAC3D,8DAA8D;IAC9D,2DAA2D;IAC3D,qDAAqD;IACrD,2DAA2D;IAC3D,4DAA4D;IAC5D,YAAY;IACZ,aAAa;IACb,mBAAmB;IACnB,sBAAsB;IACtB,iBAAiB;IACjB,aAAa;IACb,8CAA8C;IAC9C,gDAAgD;IAChD,2DAA2D;IAC3D,mDAAmD;CACpD,CAAC;AAEF,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAgB,sBAAsB,CACpC,KAAc,EACd,OAAyB,OAAO;IAEhC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEjC,KAAK,MAAM,OAAO,IAAI,0BAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,sCAAsC,OAAO,CAAC,QAAQ,EAAE,EAAE;aACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,uFAAuF;AACvF,SAAgB,cAAc,CAAC,OAAgB,EAAE,OAAyB,OAAO;IAC/E,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,0DAA0D,MAAM,CAAC,MAAM,EAAE;KAClF,CAAC;AACJ,CAAC"}

package/dist/cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/dist/cjs/pii.d.ts

@@ -0,0 +1,13 @@
+export interface PiiPattern {
+    name: string;
+    pattern: RegExp;
+    replacement: string;
+    /** Checksum run on each regex match; a match that fails it is left as-is. */
+    validate?: (rawMatch: string) => boolean;
+}
+export declare const PII_PATTERNS: PiiPattern[];
+/** Returns what a validated match is replaced with; defaults to the pattern's fixed placeholder. */
+export type PiiReplacer = (patternName: string, match: string) => string;
+export declare function maskPiiInText(text: string, replace?: PiiReplacer): string;
+export declare function maskPiiInValue(value: unknown, replace?: PiiReplacer): unknown;
+//# sourceMappingURL=pii.d.ts.map

package/dist/cjs/pii.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii.d.ts","sourceRoot":"","sources":["../../src/pii.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;CAC1C;AAGD,eAAO,MAAM,YAAY,EAAE,UAAU,EAuCpC,CAAC;AAEF,oGAAoG;AACpG,MAAM,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;AAEzE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,CAQzE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAe7E"}

package/dist/cjs/pii.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PII_PATTERNS = void 0;
+exports.maskPiiInText = maskPiiInText;
+exports.maskPiiInValue = maskPiiInValue;
+const validators_js_1 = require("./validators.js");
+// Order matters: earlier patterns mask first, so later ones never see their digits.
+exports.PII_PATTERNS = [
+    {
+        name: "tc_kimlik",
+        pattern: /\b[1-9]\d{10}\b/g,
+        replacement: "[TC-KİMLİK]",
+        validate: validators_js_1.isValidTcKimlik,
+    },
+    {
+        name: "iban",
+        pattern: /\bTR\d{2}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{2}\b/gi,
+        replacement: "TR**[IBAN]",
+        validate: validators_js_1.isValidIban,
+    },
+    {
+        name: "credit_card",
+        pattern: /\b(?:\d{4}[\s-]?){3}\d{4}\b/g,
+        replacement: "****-****-****-[KART]",
+        validate: validators_js_1.isValidLuhn,
+    },
+    {
+        name: "email",
+        pattern: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b/g,
+        replacement: "***@[EMAIL]",
+    },
+    {
+        name: "phone_tr",
+        pattern: /\b(?:\+90|0090|0)?[\s-]?(?:\d{3})[\s-]?\d{3}[\s-]?\d{2}[\s-]?\d{2}\b/g,
+        replacement: "+90-***-***-**[TELEFON]",
+    },
+    {
+        name: "api_key",
+        pattern: /\b(?:sk|pk|api|key|token|secret)[-_]?[A-Za-z0-9]{16,}\b/gi,
+        replacement: "[API-KEY]",
+    },
+    {
+        name: "jwt",
+        pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g,
+        replacement: "[JWT-TOKEN]",
+    },
+];
+function maskPiiInText(text, replace) {
+    let result = text;
+    for (const { name, pattern, replacement, validate } of exports.PII_PATTERNS) {
+        result = result.replace(pattern, (match) => validate && !validate(match) ? match : replace ? replace(name, match) : replacement);
+    }
+    return result;
+}
+function maskPiiInValue(value, replace) {
+    if (typeof value === "string") {
+        return maskPiiInText(value, replace);
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => maskPiiInValue(item, replace));
+    }
+    if (typeof value === "object" && value !== null) {
+        const result = {};
+        for (const [k, v] of Object.entries(value)) {
+            result[k] = maskPiiInValue(v, replace);
+        }
+        return result;
+    }
+    return value;
+}
+//# sourceMappingURL=pii.js.map

package/dist/cjs/pii.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii.js","sourceRoot":"","sources":["../../src/pii.ts"],"names":[],"mappings":";;;AAuDA,sCAQC;AAED,wCAeC;AAhFD,mDAA4E;AAU5E,oFAAoF;AACvE,QAAA,YAAY,GAAiB;IACxC;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,aAAa;QAC1B,QAAQ,EAAE,+BAAe;KAC1B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,iFAAiF;QAC1F,WAAW,EAAE,YAAY;QACzB,QAAQ,EAAE,2BAAW;KACtB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,2BAAW;KACtB;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,uEAAuE;QAChF,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,2DAA2D;QACpE,WAAW,EAAE,WAAW;KACzB;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,aAAa;KAC3B;CACF,CAAC;AAKF,SAAgB,aAAa,CAAC,IAAY,EAAE,OAAqB;IAC/D,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,oBAAY,EAAE,CAAC;QACpE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACzC,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,cAAc,CAAC,KAAc,EAAE,OAAqB;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cjs/validators.d.ts

@@ -0,0 +1,7 @@
+/** Turkish national ID (TC Kimlik No) checksum — the standard 11-digit algorithm. */
+export declare function isValidTcKimlik(raw: string): boolean;
+/** Luhn checksum for credit card numbers. */
+export declare function isValidLuhn(raw: string): boolean;
+/** IBAN mod-97 checksum (ISO 7064 MOD97-10), computed in chunks to avoid precision loss. */
+export declare function isValidIban(raw: string): boolean;
+//# sourceMappingURL=validators.d.ts.map

package/dist/cjs/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../src/validators.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUpD;AAED,6CAA6C;AAC7C,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAehD;AAED,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUhD"}

package/dist/cjs/validators.js

@@ -0,0 +1,52 @@
+"use strict";
+// Checksum validators — run after a regex match to keep false positives low.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isValidTcKimlik = isValidTcKimlik;
+exports.isValidLuhn = isValidLuhn;
+exports.isValidIban = isValidIban;
+/** Turkish national ID (TC Kimlik No) checksum — the standard 11-digit algorithm. */
+function isValidTcKimlik(raw) {
+    const d = raw.replace(/\D/g, "");
+    if (d.length !== 11 || d[0] === "0")
+        return false;
+    const digits = d.split("").map(Number);
+    const oddSum = digits[0] + digits[2] + digits[4] + digits[6] + digits[8];
+    const evenSum = digits[1] + digits[3] + digits[5] + digits[7];
+    const d10 = ((oddSum * 7 - evenSum) % 10 + 10) % 10;
+    const first10Sum = digits.slice(0, 10).reduce((a, b) => a + b, 0);
+    const d11 = first10Sum % 10;
+    return d10 === digits[9] && d11 === digits[10];
+}
+/** Luhn checksum for credit card numbers. */
+function isValidLuhn(raw) {
+    const d = raw.replace(/[\s-]/g, "");
+    if (!/^\d{13,19}$/.test(d))
+        return false;
+    let sum = 0;
+    let double = false;
+    for (let i = d.length - 1; i >= 0; i--) {
+        let digit = Number(d[i]);
+        if (double) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+        double = !double;
+    }
+    return sum % 10 === 0;
+}
+/** IBAN mod-97 checksum (ISO 7064 MOD97-10), computed in chunks to avoid precision loss. */
+function isValidIban(raw) {
+    const iban = raw.replace(/[\s-]/g, "").toUpperCase();
+    if (!/^[A-Z]{2}\d{2}[A-Z0-9]{10,30}$/.test(iban))
+        return false;
+    const rearranged = iban.slice(4) + iban.slice(0, 4);
+    const numeric = rearranged.replace(/[A-Z]/g, (c) => String(c.charCodeAt(0) - 55));
+    let remainder = "";
+    for (const ch of numeric) {
+        remainder = (Number(remainder + ch) % 97).toString();
+    }
+    return Number(remainder) === 1;
+}
+//# sourceMappingURL=validators.js.map

package/dist/cjs/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../src/validators.ts"],"names":[],"mappings":";AAAA,6EAA6E;;AAG7E,0CAUC;AAGD,kCAeC;AAGD,kCAUC;AA1CD,qFAAqF;AACrF,SAAgB,eAAe,CAAC,GAAW;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,UAAU,GAAG,EAAE,CAAC;IAC5B,OAAO,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,6CAA6C;AAC7C,SAAgB,WAAW,CAAC,GAAW;IACrC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,CAAC;gBAAE,KAAK,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,GAAG,IAAI,KAAK,CAAC;QACb,MAAM,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,4FAA4F;AAC5F,SAAgB,WAAW,CAAC,GAAW;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClF,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC"}

package/dist/classify.d.ts

@@ -0,0 +1,12 @@
+export type Capability = "untrusted-content" | "sensitive-data" | "exfiltration" | "destructive";
+export type FlowCategory = "toxic-flow" | "dangerous-pair" | "capability";
+export interface ToolRecord {
+    name: string;
+    description?: string;
+    inputSchema?: unknown;
+}
+/** Name/description/schema heuristics for Simon Willison's lethal trifecta. */
+export declare const CAPABILITY_RULES: Record<Capability, RegExp>;
+export declare function textOf(tool: ToolRecord): string;
+export declare function classifyTool(tool: ToolRecord): Capability[];
+//# sourceMappingURL=classify.d.ts.map

package/dist/classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../src/classify.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,gBAAgB,GAAG,YAAY,CAAC;AAE1E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CASvD,CAAC;AAWF,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAG/C;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,CAqB3D"}

package/dist/classify.js

@@ -0,0 +1,40 @@
+/** Name/description/schema heuristics for Simon Willison's lethal trifecta. */
+export const CAPABILITY_RULES = {
+    "untrusted-content": /\b(fetch|scrape|browse|crawl|http|https?|url|web[_-]?search|search[_-]?web|read[_-]?page|download|wiki|rss|feed|issue|ticket|inbox|comment|tweet|reddit|html|screenshot)\b/i,
+    "sensitive-data": /\b(secret|credential|token|api[_-]?key|password|passwd|vault|private[_-]?key|ssh|env|database|sql|postgres|mysql|mongo|payment|card|iban|kvkk|pii|tc[_-]?kimlik|identity|müşteri|musteri|kullanıcı|kullanici|email|e-mail|mailbox|inbox|read[_-]?file|read[_-]?secret|get[_-]?secret|list[_-]?secret|dump|export[_-]?user)\b/i,
+    "exfiltration": /\b(send|post|publish|upload|email|mail|notify|webhook|export|sync|push|transfer|message|slack|discord|telegram|http[_-]?request|fetch[_-]?post|write[_-]?url|relay|forward|pull[_ -]?request)\b/i,
+    destructive: /\b(delete|remove|drop|destroy|purge|reset|truncate|revoke|kill|terminate|overwrite|wipe|rm\b|unlink)\b/i,
+};
+/**
+ * `\b` treats `_` as a word character, so `\bvault\b` never matches inside
+ * `read_vault_secret`. Append a copy with `_`/`-` turned into spaces; the
+ * original stays so compound rules like `api[_-]?key` still match.
+ */
+function withWordBreaks(text) {
+    return `${text}\n${text.replace(/[_-]+/g, " ")}`;
+}
+export function textOf(tool) {
+    const schema = tool.inputSchema ? JSON.stringify(tool.inputSchema) : "";
+    return withWordBreaks(`${tool.name}\n${tool.description ?? ""}\n${schema}`);
+}
+export function classifyTool(tool) {
+    const text = textOf(tool);
+    const name = withWordBreaks(tool.name);
+    const found = [];
+    // Untrusted / exfil / destructive: name is primary (CheckMCP-style); description reinforces.
+    if (CAPABILITY_RULES["untrusted-content"].test(name) || CAPABILITY_RULES["untrusted-content"].test(text)) {
+        found.push("untrusted-content");
+    }
+    if (CAPABILITY_RULES.exfiltration.test(name) || CAPABILITY_RULES.exfiltration.test(text)) {
+        found.push("exfiltration");
+    }
+    if (CAPABILITY_RULES.destructive.test(name) || CAPABILITY_RULES.destructive.test(text)) {
+        found.push("destructive");
+    }
+    // Sensitive: name + description + schema (secrets often hide in schema field names).
+    if (CAPABILITY_RULES["sensitive-data"].test(text)) {
+        found.push("sensitive-data");
+    }
+    return found;
+}
+//# sourceMappingURL=classify.js.map

package/dist/classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../src/classify.ts"],"names":[],"mappings":"AAcA,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAA+B;IAC1D,mBAAmB,EACjB,6KAA6K;IAC/K,gBAAgB,EACd,+TAA+T;IACjU,cAAc,EACZ,kMAAkM;IACpM,WAAW,EACT,yGAAyG;CAC5G,CAAC;AAEF;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAgB;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,cAAc,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,6FAA6F;IAC7F,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzG,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvF,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC;IACD,qFAAqF;IACrF,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { isValidTcKimlik, isValidLuhn, isValidIban } from "./validators.js";
+export { PII_PATTERNS, maskPiiInText, maskPiiInValue } from "./pii.js";
+export type { PiiPattern, PiiReplacer } from "./pii.js";
+export { INJECTION_PATTERNS, scanForPromptInjection, scanToolResult } from "./injection.js";
+export type { ScanResult } from "./injection.js";
+export { CAPABILITY_RULES, classifyTool, textOf } from "./classify.js";
+export type { Capability, FlowCategory, ToolRecord } from "./classify.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACvE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC5F,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { isValidTcKimlik, isValidLuhn, isValidIban } from "./validators.js";
+export { PII_PATTERNS, maskPiiInText, maskPiiInValue } from "./pii.js";
+export { INJECTION_PATTERNS, scanForPromptInjection, scanToolResult } from "./injection.js";
+export { CAPABILITY_RULES, classifyTool, textOf } from "./classify.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAEvE,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE5F,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC"}

package/dist/injection.d.ts

@@ -0,0 +1,14 @@
+export type ScanResult = {
+    action: "allow";
+} | {
+    action: "block";
+    reason: string;
+} | {
+    action: "warn";
+    reason: string;
+};
+export declare const INJECTION_PATTERNS: RegExp[];
+export declare function scanForPromptInjection(input: unknown, mode?: "block" | "warn"): ScanResult;
+/** Same patterns as request scanning, applied to a tool result the model will read. */
+export declare function scanToolResult(content: unknown, mode?: "block" | "warn"): ScanResult;
+//# sourceMappingURL=injection.d.ts.map

package/dist/injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.d.ts","sourceRoot":"","sources":["../src/injection.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAGvC,eAAO,MAAM,kBAAkB,EAAE,MAAM,EAiBtC,CAAC;AAUF,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,IAAI,GAAE,OAAO,GAAG,MAAgB,GAC/B,UAAU,CAaZ;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE,OAAO,GAAG,MAAgB,GAAG,UAAU,CAO7F"}

package/dist/injection.js

@@ -0,0 +1,50 @@
+// Common prompt injection patterns
+export const INJECTION_PATTERNS = [
+    /ignore\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
+    /disregard\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
+    /forget\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
+    /you\s+are\s+now\s+(a\s+)?(?!an?\s+AI|a\s+language)/i,
+    /act\s+as\s+(if\s+you\s+are\s+)?(?!an?\s+AI|a\s+language)/i,
+    /pretend\s+(you\s+are|to\s+be)\s+(?!an?\s+AI|a\s+language)/i,
+    /jailbreak/i,
+    /DAN\s+mode/i,
+    /developer\s+mode/i,
+    /system\s+prompt\s*:/i,
+    /<\s*system\s*>/i,
+    /\[SYSTEM\]/i,
+    /bypass\s+(safety|filter|restriction|policy)/i,
+    /override\s+(safety|filter|restriction|policy)/i,
+    /reveal\s+(your\s+)?(system\s+prompt|instructions|prompt)/i,
+    /print\s+(your\s+)?(system\s+prompt|instructions)/i,
+];
+function flattenValue(value) {
+    if (typeof value === "string")
+        return value;
+    if (typeof value === "object" && value !== null) {
+        return JSON.stringify(value);
+    }
+    return String(value ?? "");
+}
+export function scanForPromptInjection(input, mode = "block") {
+    const text = flattenValue(input);
+    for (const pattern of INJECTION_PATTERNS) {
+        if (pattern.test(text)) {
+            return {
+                action: mode,
+                reason: `Prompt injection pattern detected: ${pattern.toString()}`,
+            };
+        }
+    }
+    return { action: "allow" };
+}
+/** Same patterns as request scanning, applied to a tool result the model will read. */
+export function scanToolResult(content, mode = "block") {
+    const result = scanForPromptInjection(content, mode);
+    if (result.action === "allow")
+        return result;
+    return {
+        action: result.action,
+        reason: `Indirect prompt injection in tool result (MCP06:2025): ${result.reason}`,
+    };
+}
+//# sourceMappingURL=injection.js.map

package/dist/injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.js","sourceRoot":"","sources":["../src/injection.ts"],"names":[],"mappings":"AAKA,mCAAmC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAa;IAC1C,2DAA2D;IAC3D,8DAA8D;IAC9D,2DAA2D;IAC3D,qDAAqD;IACrD,2DAA2D;IAC3D,4DAA4D;IAC5D,YAAY;IACZ,aAAa;IACb,mBAAmB;IACnB,sBAAsB;IACtB,iBAAiB;IACjB,aAAa;IACb,8CAA8C;IAC9C,gDAAgD;IAChD,2DAA2D;IAC3D,mDAAmD;CACpD,CAAC;AAEF,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,OAAyB,OAAO;IAEhC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEjC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,sCAAsC,OAAO,CAAC,QAAQ,EAAE,EAAE;aACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,OAAyB,OAAO;IAC/E,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,0DAA0D,MAAM,CAAC,MAAM,EAAE;KAClF,CAAC;AACJ,CAAC"}

package/dist/pii.d.ts

@@ -0,0 +1,13 @@
+export interface PiiPattern {
+    name: string;
+    pattern: RegExp;
+    replacement: string;
+    /** Checksum run on each regex match; a match that fails it is left as-is. */
+    validate?: (rawMatch: string) => boolean;
+}
+export declare const PII_PATTERNS: PiiPattern[];
+/** Returns what a validated match is replaced with; defaults to the pattern's fixed placeholder. */
+export type PiiReplacer = (patternName: string, match: string) => string;
+export declare function maskPiiInText(text: string, replace?: PiiReplacer): string;
+export declare function maskPiiInValue(value: unknown, replace?: PiiReplacer): unknown;
+//# sourceMappingURL=pii.d.ts.map

package/dist/pii.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii.d.ts","sourceRoot":"","sources":["../src/pii.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;CAC1C;AAGD,eAAO,MAAM,YAAY,EAAE,UAAU,EAuCpC,CAAC;AAEF,oGAAoG;AACpG,MAAM,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;AAEzE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,CAQzE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAe7E"}

package/dist/pii.js

@@ -0,0 +1,66 @@
+import { isValidIban, isValidLuhn, isValidTcKimlik } from "./validators.js";
+// Order matters: earlier patterns mask first, so later ones never see their digits.
+export const PII_PATTERNS = [
+    {
+        name: "tc_kimlik",
+        pattern: /\b[1-9]\d{10}\b/g,
+        replacement: "[TC-KİMLİK]",
+        validate: isValidTcKimlik,
+    },
+    {
+        name: "iban",
+        pattern: /\bTR\d{2}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{2}\b/gi,
+        replacement: "TR**[IBAN]",
+        validate: isValidIban,
+    },
+    {
+        name: "credit_card",
+        pattern: /\b(?:\d{4}[\s-]?){3}\d{4}\b/g,
+        replacement: "****-****-****-[KART]",
+        validate: isValidLuhn,
+    },
+    {
+        name: "email",
+        pattern: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b/g,
+        replacement: "***@[EMAIL]",
+    },
+    {
+        name: "phone_tr",
+        pattern: /\b(?:\+90|0090|0)?[\s-]?(?:\d{3})[\s-]?\d{3}[\s-]?\d{2}[\s-]?\d{2}\b/g,
+        replacement: "+90-***-***-**[TELEFON]",
+    },
+    {
+        name: "api_key",
+        pattern: /\b(?:sk|pk|api|key|token|secret)[-_]?[A-Za-z0-9]{16,}\b/gi,
+        replacement: "[API-KEY]",
+    },
+    {
+        name: "jwt",
+        pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g,
+        replacement: "[JWT-TOKEN]",
+    },
+];
+export function maskPiiInText(text, replace) {
+    let result = text;
+    for (const { name, pattern, replacement, validate } of PII_PATTERNS) {
+        result = result.replace(pattern, (match) => validate && !validate(match) ? match : replace ? replace(name, match) : replacement);
+    }
+    return result;
+}
+export function maskPiiInValue(value, replace) {
+    if (typeof value === "string") {
+        return maskPiiInText(value, replace);
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => maskPiiInValue(item, replace));
+    }
+    if (typeof value === "object" && value !== null) {
+        const result = {};
+        for (const [k, v] of Object.entries(value)) {
+            result[k] = maskPiiInValue(v, replace);
+        }
+        return result;
+    }
+    return value;
+}
+//# sourceMappingURL=pii.js.map

package/dist/pii.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii.js","sourceRoot":"","sources":["../src/pii.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAU5E,oFAAoF;AACpF,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,aAAa;QAC1B,QAAQ,EAAE,eAAe;KAC1B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,iFAAiF;QAC1F,WAAW,EAAE,YAAY;QACzB,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,uEAAuE;QAChF,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,2DAA2D;QACpE,WAAW,EAAE,WAAW;KACzB;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,aAAa;KAC3B;CACF,CAAC;AAKF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAqB;IAC/D,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,YAAY,EAAE,CAAC;QACpE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACzC,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,OAAqB;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/validators.d.ts

@@ -0,0 +1,7 @@
+/** Turkish national ID (TC Kimlik No) checksum — the standard 11-digit algorithm. */
+export declare function isValidTcKimlik(raw: string): boolean;
+/** Luhn checksum for credit card numbers. */
+export declare function isValidLuhn(raw: string): boolean;
+/** IBAN mod-97 checksum (ISO 7064 MOD97-10), computed in chunks to avoid precision loss. */
+export declare function isValidIban(raw: string): boolean;
+//# sourceMappingURL=validators.d.ts.map

package/dist/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../src/validators.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUpD;AAED,6CAA6C;AAC7C,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAehD;AAED,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUhD"}

package/dist/validators.js

@@ -0,0 +1,47 @@
+// Checksum validators — run after a regex match to keep false positives low.
+/** Turkish national ID (TC Kimlik No) checksum — the standard 11-digit algorithm. */
+export function isValidTcKimlik(raw) {
+    const d = raw.replace(/\D/g, "");
+    if (d.length !== 11 || d[0] === "0")
+        return false;
+    const digits = d.split("").map(Number);
+    const oddSum = digits[0] + digits[2] + digits[4] + digits[6] + digits[8];
+    const evenSum = digits[1] + digits[3] + digits[5] + digits[7];
+    const d10 = ((oddSum * 7 - evenSum) % 10 + 10) % 10;
+    const first10Sum = digits.slice(0, 10).reduce((a, b) => a + b, 0);
+    const d11 = first10Sum % 10;
+    return d10 === digits[9] && d11 === digits[10];
+}
+/** Luhn checksum for credit card numbers. */
+export function isValidLuhn(raw) {
+    const d = raw.replace(/[\s-]/g, "");
+    if (!/^\d{13,19}$/.test(d))
+        return false;
+    let sum = 0;
+    let double = false;
+    for (let i = d.length - 1; i >= 0; i--) {
+        let digit = Number(d[i]);
+        if (double) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+        double = !double;
+    }
+    return sum % 10 === 0;
+}
+/** IBAN mod-97 checksum (ISO 7064 MOD97-10), computed in chunks to avoid precision loss. */
+export function isValidIban(raw) {
+    const iban = raw.replace(/[\s-]/g, "").toUpperCase();
+    if (!/^[A-Z]{2}\d{2}[A-Z0-9]{10,30}$/.test(iban))
+        return false;
+    const rearranged = iban.slice(4) + iban.slice(0, 4);
+    const numeric = rearranged.replace(/[A-Z]/g, (c) => String(c.charCodeAt(0) - 55));
+    let remainder = "";
+    for (const ch of numeric) {
+        remainder = (Number(remainder + ch) % 97).toString();
+    }
+    return Number(remainder) === 1;
+}
+//# sourceMappingURL=validators.js.map

package/dist/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../src/validators.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,UAAU,GAAG,EAAE,CAAC;IAC5B,OAAO,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,CAAC;gBAAE,KAAK,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,GAAG,IAAI,KAAK,CAAC;QACb,MAAM,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClF,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@guardbee/guard-core",
+  "version": "0.1.0",
+  "description": "Shared detectors for GuardBee MCP packages — checksum-validated PII masking, prompt injection patterns, and lethal-trifecta tool classification",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/index.d.ts",
+        "default": "./dist/cjs/index.js"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "keywords": [
+    "mcp",
+    "guardbee",
+    "pii",
+    "kvkk",
+    "prompt-injection",
+    "lethal-trifecta"
+  ],
+  "author": "GuardBee <hello@guardbee.ai>",
+  "license": "MIT",
+  "engines": {
+    "node": ">=18"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/GuardBee/guardbee-mcp.git",
+    "directory": "packages/guard-core"
+  },
+  "homepage": "https://github.com/GuardBee/guardbee-mcp/tree/main/packages/guard-core#readme",
+  "bugs": {
+    "url": "https://github.com/GuardBee/guardbee-mcp/issues"
+  },
+  "scripts": {
+    "build": "tsc && tsc -p tsconfig.cjs.json && node -e \"require('fs').mkdirSync('dist/cjs',{recursive:true});require('fs').writeFileSync('dist/cjs/package.json','{\\\"type\\\":\\\"commonjs\\\"}\\n')\"",
+    "dev": "tsc --watch",
+    "type-check": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}