@guardbee/guard-core 0.1.0 → 0.2.1

package/dist/injection.js

@@ -1,43 +1,330 @@
-// Common prompt injection patterns
-export const INJECTION_PATTERNS = [
-    /ignore\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
-    /disregard\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
-    /forget\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
-    /you\s+are\s+now\s+(a\s+)?(?!an?\s+AI|a\s+language)/i,
-    /act\s+as\s+(if\s+you\s+are\s+)?(?!an?\s+AI|a\s+language)/i,
-    /pretend\s+(you\s+are|to\s+be)\s+(?!an?\s+AI|a\s+language)/i,
-    /jailbreak/i,
-    /DAN\s+mode/i,
-    /developer\s+mode/i,
-    /system\s+prompt\s*:/i,
-    /<\s*system\s*>/i,
-    /\[SYSTEM\]/i,
-    /bypass\s+(safety|filter|restriction|policy)/i,
-    /override\s+(safety|filter|restriction|policy)/i,
-    /reveal\s+(your\s+)?(system\s+prompt|instructions|prompt)/i,
-    /print\s+(your\s+)?(system\s+prompt|instructions)/i,
+/**
+ * Content that will reach a model: a tool result, a RAG chunk, a scraped page.
+ * Regexes are heuristics that aim for few false positives, not an intent model.
+ * The precise rules come from prompt-injection-scanner; the broad ones are the
+ * phrases security-proxy 0.x blocked on.
+ */
+export const INJECTION_RULES = [
+    // ── Instruction override ────────────────────────────────────────────────────
+    {
+        id: "instruction_override_phrase",
+        name: "Content tells the model to ignore its prior instructions",
+        category: "instruction-override",
+        pattern: /\b(?:ignore|disregard|forget)\s+(?:all\s+|any\s+)?(?:previous|prior|above|earlier)\s+(?:instructions?|prompts?|rules?|context|directives?)\b/gi,
+        severity: "high",
+        recommendation: "This document contains a classic instruction-override phrase. If it enters a model's context via RAG retrieval or a tool result, it can hijack the model's behavior for the rest of the turn. Strip or quarantine this content before it reaches the model, or wrap retrieved content in clear data delimiters the model is instructed to never treat as commands.",
+    },
+    {
+        id: "instruction_override_tr",
+        name: "Content tells the model, in Turkish, to ignore its prior instructions",
+        category: "instruction-override",
+        pattern: /(?<!\p{L})(?:önceki|yukarıdaki|tüm|bütün)\s+(?:talimatları|talimatlar[ıi]n[ıi]|kuralları|yönergeleri|komutları)\s+(?:yok\s+say|unut|görmezden\s+gel|dikkate\s+alma|umursama)/giu,
+        severity: "high",
+        recommendation: "The Turkish form of an instruction-override phrase ('önceki talimatları yok say'). Pattern lists written only in English miss it. Treat the content as untrusted input and keep it out of the model's instructions.",
+    },
+    {
+        id: "dan_mode",
+        name: "Content switches the model into 'DAN mode'",
+        category: "instruction-override",
+        pattern: /\bDAN\s+mode\b/gi,
+        severity: "high",
+        recommendation: "'DAN mode' is a well-known jailbreak persona with no use in ordinary content. Quarantine content that asks for it.",
+    },
+    {
+        id: "you_are_now",
+        name: "Content assigns the model a new identity ('you are now …')",
+        category: "instruction-override",
+        pattern: /\byou\s+are\s+now\s+(?:a\s+)?(?!an?\s+AI\b|a\s+language\b)/gi,
+        severity: "medium",
+        broad: true,
+        recommendation: "Often part of a role-override injection, but also common in ordinary writing. Review the surrounding text.",
+    },
+    {
+        id: "act_as",
+        name: "Content asks the model to act as something else",
+        category: "instruction-override",
+        pattern: /\bact\s+as\s+(?:if\s+you\s+are\s+)?(?!an?\s+AI\b|a\s+language\b)/gi,
+        severity: "medium",
+        broad: true,
+        recommendation: "Often part of a role-override injection, but also common in ordinary writing ('act as a proxy'). Review the surrounding text.",
+    },
+    {
+        id: "pretend_to_be",
+        name: "Content asks the model to pretend to be something else",
+        category: "instruction-override",
+        pattern: /\bpretend\s+(?:you\s+are|to\s+be)\s+(?!an?\s+AI\b|a\s+language\b)/gi,
+        severity: "medium",
+        broad: true,
+        recommendation: "Often part of a role-override injection. Review the surrounding text.",
+    },
+    {
+        id: "role_override_tr",
+        name: "Content assigns the model a new identity, in Turkish ('sen artık …')",
+        category: "instruction-override",
+        pattern: /(?<!\p{L})(?:sen\s+artık|bundan\s+sonra\s+sen)\s+(?=\p{L})/giu,
+        severity: "medium",
+        broad: true,
+        recommendation: "Often part of a role-override injection, but also ordinary Turkish. Review the surrounding text.",
+    },
+    {
+        id: "jailbreak_word",
+        name: "Content mentions a jailbreak",
+        category: "instruction-override",
+        pattern: /\bjailbreak(?:ing|s)?\b/gi,
+        severity: "medium",
+        broad: true,
+        recommendation: "Articles about LLM security use this word too; on its own it is a weak signal.",
+    },
+    {
+        id: "developer_mode",
+        name: "Content asks for a 'developer mode'",
+        category: "instruction-override",
+        pattern: /\bdeveloper\s+mode\b/gi,
+        severity: "medium",
+        broad: true,
+        recommendation: "A common jailbreak framing, and a common phrase in software documentation.",
+    },
+    {
+        id: "bypass_safety",
+        name: "Content tells the model to bypass its safety measures",
+        category: "instruction-override",
+        pattern: /\b(?:bypass|override|disable)\s+(?:the\s+|your\s+|all\s+)?(?:safety|safeguards?|guardrails?|content\s+filters?)\b/gi,
+        severity: "high",
+        recommendation: "Content that tells a model to switch off its safety measures is an injection attempt. Quarantine it.",
+    },
+    {
+        id: "bypass_policy",
+        name: "Content mentions bypassing a filter, restriction or policy",
+        category: "instruction-override",
+        pattern: /\b(?:bypass|override)\s+(?:the\s+)?(?:filters?|restrictions?|polic(?:y|ies))\b/gi,
+        severity: "medium",
+        broad: true,
+        recommendation: "An injection phrase, but also everyday IT language ('override policy settings').",
+    },
+    // ── Role spoofing ────────────────────────────────────────────────────────────
+    {
+        id: "system_role_spoof",
+        name: "Content fakes a 'System:' role label",
+        category: "role-spoofing",
+        pattern: /(?:^|\n)\s*(?:#{1,3}\s*)?SYSTEM\s*:\s*\S/gim,
+        severity: "medium",
+        recommendation: "A line formatted like a chat-template system turn ('System: ...') inside retrieved content can trick a model (or a naive prompt-assembly step) into treating it as a real system instruction. Verify this is legitimate document content, not an injection attempt, before trusting it in a RAG/context pipeline.",
+    },
+    {
+        id: "chat_template_marker_injection",
+        name: "Raw chat-template control tokens embedded in content",
+        category: "role-spoofing",
+        pattern: /<\|(?:im_start|im_end|system|endoftext)\|>|\[INST\]|\[\/INST\]/g,
+        severity: "high",
+        recommendation: "Literal chat-template control tokens (e.g. <|im_start|>, [INST]) have no legitimate reason to appear in ordinary document content. If a model's tokenizer doesn't strip these, embedded tokens can hijack the conversation structure itself. Strip or escape these sequences before this content enters any model context.",
+    },
+    {
+        id: "system_tag",
+        name: "Content wraps text in a <system> tag",
+        category: "role-spoofing",
+        pattern: /<\s*\/?\s*system\s*>/gi,
+        severity: "high",
+        recommendation: "A <system> tag in data tries to pass the text off as a system message. Strip or escape it before the content reaches a model.",
+    },
+    {
+        id: "system_prompt_label",
+        name: "Content contains a 'system prompt:' label",
+        category: "role-spoofing",
+        pattern: /\bsystem\s+prompt\s*:/gi,
+        severity: "medium",
+        broad: true,
+        recommendation: "May introduce a fake system prompt; also appears in documentation about prompts.",
+    },
+    {
+        id: "system_bracket",
+        name: "Content contains a [SYSTEM] marker",
+        category: "role-spoofing",
+        pattern: /\[SYSTEM\]/gi,
+        severity: "medium",
+        broad: true,
+        recommendation: "May fake a system turn; also used as a log-level tag.",
+    },
+    // ── Hidden text ──────────────────────────────────────────────────────────────
+    {
+        id: "hidden_zero_width_chars",
+        name: "Zero-width characters that hide text from a human reviewer",
+        category: "hidden-text",
+        pattern: /[​⁠]/g,
+        severity: "medium",
+        recommendation: "Zero-width space/word-joiner characters render invisibly but are still read by a model. They're a common way to hide an injection payload from someone eyeballing the document while it still reaches the model. Inspect the surrounding text for hidden content, and consider stripping these characters before ingestion.",
+    },
+    {
+        id: "unicode_tag_smuggling",
+        name: "Invisible Unicode tag characters (ASCII smuggling)",
+        category: "hidden-text",
+        // A run of tag characters, except the one legitimate use: a subdivision flag
+        // emoji (🏴 + 1–6 lowercase/digit tags + CANCEL TAG, e.g. England). A run that
+        // starts after a flag or a tag is part of that flag; text hidden after a
+        // complete flag still matches through the second branch.
+        pattern: /(?<![\u{1F3F4}\u{E0000}-\u{E007F}])[\u{E0000}-\u{E007F}]+|\u{1F3F4}(?![\u{E0030}-\u{E0039}\u{E0061}-\u{E007A}]{1,6}\u{E007F}(?![\u{E0000}-\u{E007F}]))[\u{E0000}-\u{E007F}]+/gu,
+        severity: "critical",
+        recommendation: "Unicode tag characters (U+E0000–U+E007F) mirror ASCII but render as nothing. Text encoded in them is invisible to a person and readable by many models — a known way to smuggle instructions. Apart from subdivision flag emoji, ordinary text never needs them; strip them before the content reaches a model.",
+    },
+    {
+        id: "bidi_control_chars",
+        name: "Bidirectional control characters that reorder displayed text",
+        category: "hidden-text",
+        pattern: /[‪-‮⁦-⁩]/g,
+        severity: "medium",
+        recommendation: "Bidi embedding/override characters make text display in a different order than it is read (the 'Trojan Source' technique). Right-to-left languages rarely need the override forms; check what the text says once the controls are removed.",
+    },
+    {
+        id: "css_hidden_text_with_instruction",
+        name: "CSS-hidden element containing injection-flavored language",
+        category: "hidden-text",
+        // `color` alone, not `background-color`; the language must read as an instruction,
+        // not just contain "ignore" (as in `<!-- prettier-ignore -->`).
+        pattern: /style\s*=\s*["'][^"']*(?:display\s*:\s*none|visibility\s*:\s*hidden|font-size\s*:\s*0(?:px)?|(?<![\w-])color\s*:\s*(?:white|#fff(?:fff)?\b|transparent))[^"']*["'][\s\S]{0,200}?(?:(?<![\w-])(?:ignore|disregard)\s+(?:all|any|the|previous|prior|above|earlier|your|these|those|everything)\b|\bsystem\s+prompt\b|\b(?:your|previous|prior)\s+instructions\b|\b(?:AI|assistant|LLM|chatbot)\s*:|\b(?:you|the)\s+(?:AI|assistant|LLM|model)\b)/gi,
+        severity: "high",
+        recommendation: "This element is hidden from a rendered page (display:none / zero font-size / white-on-white) but a scraper feeding a RAG pipeline still extracts its text — and it contains injection-flavored language. Strip hidden elements before extracting text for a model, or render the page and use only the visible text.",
+    },
+    {
+        id: "html_comment_instruction",
+        name: "HTML comment containing injection-flavored language",
+        category: "hidden-text",
+        pattern: /<!--[\s\S]{0,300}?(?:(?<![\w-])(?:ignore|disregard)\s+(?:all|any|the|previous|prior|above|earlier|your|these|those|everything)\b|\bsystem\s+prompt\b|\b(?:your|previous|prior)\s+instructions\b|\b(?:AI|assistant|LLM|chatbot)\s*:|\b(?:you|the)\s+(?:AI|assistant|LLM|model)\b)[\s\S]{0,300}?-->/gi,
+        severity: "high",
+        recommendation: "HTML comments are invisible when a page is rendered but are usually still present in scraped/extracted text. This comment contains language associated with instruction injection. Strip HTML comments before feeding scraped content to a model.",
+    },
+    // ── Direct address ────────────────────────────────────────────────────────────
+    {
+        id: "direct_address_to_ai",
+        name: "Content directly addresses 'the AI' or 'the assistant'",
+        category: "direct-address",
+        pattern: /\b(?:dear|hey|attention|note to)\s+(?:the\s+)?(?:AI|assistant|chatbot|language model|LLM)\b/gi,
+        severity: "medium",
+        recommendation: "An ordinary document doesn't address 'the AI' or 'the assistant' directly — this phrasing strongly suggests the content was written to be read and obeyed by a model rather than a human. Treat this document as untrusted input, not as a source of instructions.",
+    },
+    // ── Exfiltration ──────────────────────────────────────────────────────────────
+    {
+        id: "exfiltration_url_template_in_image",
+        name: "Markdown image URL with a template placeholder (data-exfil beacon)",
+        category: "exfiltration",
+        pattern: /!\[[^\]]*\]\(\s*https?:\/\/[^)]*(?:\{\{[^}]*\}\}|\$\{[^}]*\})[^)]*\)/g,
+        severity: "high",
+        recommendation: "A markdown image URL containing a template placeholder ({{...}} or ${...}) is a classic exfiltration beacon: a client that auto-renders the image will fetch this URL, and anything the model interpolated into the placeholder (conversation text, secrets) leaks to whoever controls that domain. Never let a model auto-render an image URL it (or retrieved content) constructed.",
+    },
+    {
+        id: "reveal_system_prompt_request",
+        name: "Content asks the model to reveal its system prompt or instructions",
+        category: "exfiltration",
+        pattern: /\b(?:reveal|show|print|output|repeat)\s+(?:your\s+)?(?:system\s+prompt|initial\s+instructions|hidden\s+instructions)\b/gi,
+        severity: "high",
+        recommendation: "This is a standard prompt-extraction phrase. If it's embedded in retrieved content (not typed by the user), a model that processes/summarizes this document may leak its own system prompt or configuration in the response. Instruct the model to never disclose its instructions regardless of what retrieved content asks.",
+    },
+    {
+        id: "reveal_system_prompt_tr",
+        name: "Content asks the model, in Turkish, to reveal its system prompt",
+        category: "exfiltration",
+        pattern: /(?:sistem\s+(?:istemini|promptunu|talimatlarını|mesajını)|gizli\s+talimatlarını|ilk\s+talimatlarını)\s+(?:göster|yaz|söyle|tekrarla|paylaş|ver)/giu,
+        severity: "high",
+        recommendation: "The Turkish form of a prompt-extraction phrase. Instruct the model never to disclose its instructions, whatever retrieved content asks.",
+    },
+    {
+        id: "reveal_instructions",
+        name: "Content asks the model to print its instructions",
+        category: "exfiltration",
+        pattern: /\b(?:reveal|print)\s+(?:your\s+)?(?:instructions|prompt)\b/gi,
+        severity: "medium",
+        broad: true,
+        recommendation: "May be a prompt-extraction attempt; also appears in developer documentation.",
+    },
+    {
+        id: "send_data_to_url_instruction",
+        name: "Content instructs the model to send data to an external URL",
+        category: "exfiltration",
+        pattern: /\b(?:send|post|submit|forward|email)\s+(?:the\s+)?(?:user'?s?|conversation|chat|this)\s+(?:data|information|details|history)\s+to\s+https?:\/\//gi,
+        severity: "critical",
+        recommendation: "This content explicitly instructs the model to exfiltrate conversation/user data to an external URL — a direct data-exfiltration attempt via indirect prompt injection. Quarantine this content and never grant a model that processes untrusted retrieved content unsupervised network/tool access.",
+    },
 ];
-function flattenValue(value) {
-    if (typeof value === "string")
-        return value;
-    if (typeof value === "object" && value !== null) {
-        return JSON.stringify(value);
+/** @deprecated The bare regexes of INJECTION_RULES; use INJECTION_RULES. */
+export const INJECTION_PATTERNS = INJECTION_RULES.map((rule) => rule.pattern);
+const BASE64_RUN = /[A-Za-z0-9+/]{24,}={0,2}/g;
+const MAX_BASE64_RUNS = 50;
+/** Decoded text of base64 runs that decode to readable text; binary blobs are skipped. */
+function decodedBase64Runs(text) {
+    const runs = [];
+    for (const match of text.matchAll(BASE64_RUN)) {
+        if (runs.length >= MAX_BASE64_RUNS)
+            break;
+        const decoded = Buffer.from(match[0], "base64").toString("utf8");
+        const readable = decoded.replace(/[^\x20-\x7E\s -￿]/g, "").length;
+        if (decoded.length >= 12 && readable / decoded.length > 0.9 && !decoded.includes("�")) {
+            runs.push({ text: decoded, index: match.index ?? 0 });
+        }
     }
-    return String(value ?? "");
+    return runs;
 }
-export function scanForPromptInjection(input, mode = "block") {
-    const text = flattenValue(input);
-    for (const pattern of INJECTION_PATTERNS) {
-        if (pattern.test(text)) {
-            return {
-                action: mode,
-                reason: `Prompt injection pattern detected: ${pattern.toString()}`,
-            };
+function matchRules(text, rules, offset = 0, encoding) {
+    const findings = [];
+    for (const rule of rules) {
+        for (const match of text.matchAll(rule.pattern)) {
+            findings.push({
+                ruleId: rule.id,
+                name: rule.name,
+                category: rule.category,
+                severity: rule.severity,
+                broad: rule.broad === true,
+                match: match[0],
+                index: offset + (match.index ?? 0),
+                ...(encoding ? { encoding } : {}),
+            });
         }
     }
+    return findings;
+}
+/**
+ * Every rule match in the text, plus precise-rule matches inside base64 runs
+ * that decode to text (an instruction hidden from both the reader and a plain
+ * pattern scan).
+ */
+export function findInjections(text) {
+    const precise = INJECTION_RULES.filter((rule) => !rule.broad);
+    const findings = matchRules(text, INJECTION_RULES);
+    for (const run of decodedBase64Runs(text))
+        findings.push(...matchRules(run.text, precise, run.index, "base64"));
+    return findings;
+}
+/** All string leaves, newline-joined, so line-anchored rules still see line starts inside JSON. */
+function collectStrings(value, out = []) {
+    if (typeof value === "string")
+        out.push(value);
+    else if (Array.isArray(value))
+        for (const item of value)
+            collectStrings(item, out);
+    else if (value && typeof value === "object")
+        for (const item of Object.values(value))
+            collectStrings(item, out);
+    else if (value !== null && value !== undefined)
+        out.push(String(value));
+    return out;
+}
+function describe(finding) {
+    return `${finding.ruleId}${finding.encoding ? " (base64-encoded)" : ""} — ${finding.name}`;
+}
+const BLOCKING = new Set(["high", "critical"]);
+/**
+ * A precise high/critical rule → `mode` (block or warn). A broad or medium
+ * rule alone → warn, never block.
+ */
+export function scanForPromptInjection(input, mode = "block") {
+    const findings = findInjections(collectStrings(input).join("\n"));
+    const blocking = findings.find((finding) => !finding.broad && BLOCKING.has(finding.severity));
+    if (blocking) {
+        return { action: mode, reason: `Prompt injection pattern detected: ${describe(blocking)}` };
+    }
+    const first = findings[0];
+    if (first)
+        return { action: "warn", reason: `Possible prompt injection (not blocked): ${describe(first)}` };
     return { action: "allow" };
 }
-/** Same patterns as request scanning, applied to a tool result the model will read. */
+/** Same rules as request scanning, applied to a tool result the model will read. */
 export function scanToolResult(content, mode = "block") {
     const result = scanForPromptInjection(content, mode);
     if (result.action === "allow")

package/dist/injection.js.map

@@ -1 +1 @@
-{"version":3,"file":"injection.js","sourceRoot":"","sources":["../src/injection.ts"],"names":[],"mappings":"AAKA,mCAAmC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAa;IAC1C,2DAA2D;IAC3D,8DAA8D;IAC9D,2DAA2D;IAC3D,qDAAqD;IACrD,2DAA2D;IAC3D,4DAA4D;IAC5D,YAAY;IACZ,aAAa;IACb,mBAAmB;IACnB,sBAAsB;IACtB,iBAAiB;IACjB,aAAa;IACb,8CAA8C;IAC9C,gDAAgD;IAChD,2DAA2D;IAC3D,mDAAmD;CACpD,CAAC;AAEF,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,OAAyB,OAAO;IAEhC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEjC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,sCAAsC,OAAO,CAAC,QAAQ,EAAE,EAAE;aACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,OAAyB,OAAO;IAC/E,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,0DAA0D,MAAM,CAAC,MAAM,EAAE;KAClF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"injection.js","sourceRoot":"","sources":["../src/injection.ts"],"names":[],"mappings":"AA4BA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,+EAA+E;IAC/E;QACE,EAAE,EAAE,6BAA6B;QACjC,IAAI,EAAE,0DAA0D;QAChE,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,gJAAgJ;QACzJ,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,oWAAoW;KACvW;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,uEAAuE;QAC7E,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,iLAAiL;QAC1L,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,qNAAqN;KACxN;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,4CAA4C;QAClD,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,oHAAoH;KACvH;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,4DAA4D;QAClE,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,4GAA4G;KAC7H;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,iDAAiD;QACvD,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,oEAAoE;QAC7E,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,+HAA+H;KAChJ;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,wDAAwD;QAC9D,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,qEAAqE;QAC9E,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,uEAAuE;KACxF;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,sEAAsE;QAC5E,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,+DAA+D;QACxE,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,kGAAkG;KACnH;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,gFAAgF;KACjG;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,qCAAqC;QAC3C,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,4EAA4E;KAC7F;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,uDAAuD;QAC7D,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,qHAAqH;QAC9H,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,sGAAsG;KACvH;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,4DAA4D;QAClE,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,kFAAkF;QAC3F,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,kFAAkF;KACnG;IAED,gFAAgF;IAChF;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,sCAAsC;QAC5C,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,6CAA6C;QACtD,QAAQ,EAAE,QAAQ;QAClB,cAAc,EACZ,mTAAmT;KACtT;IACD;QACE,EAAE,EAAE,gCAAgC;QACpC,IAAI,EAAE,sDAAsD;QAC5D,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,iEAAiE;QAC1E,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,4TAA4T;KAC/T;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,sCAAsC;QAC5C,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,+HAA+H;KAChJ;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,2CAA2C;QACjD,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,kFAAkF;KACnG;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,uDAAuD;KACxE;IAED,gFAAgF;IAChF;QACE,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,4DAA4D;QAClE,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,QAAQ;QAClB,cAAc,EACZ,6TAA6T;KAChU;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,oDAAoD;QAC1D,QAAQ,EAAE,aAAa;QACvB,6EAA6E;QAC7E,+EAA+E;QAC/E,yEAAyE;QACzE,yDAAyD;QACzD,OAAO,EACL,gLAAgL;QAClL,QAAQ,EAAE,UAAU;QACpB,cAAc,EACZ,iTAAiT;KACpT;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,8DAA8D;QACpE,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,QAAQ;QAClB,cAAc,EACZ,4OAA4O;KAC/O;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,IAAI,EAAE,2DAA2D;QACjE,QAAQ,EAAE,aAAa;QACvB,mFAAmF;QACnF,gEAAgE;QAChE,OAAO,EAAE,kbAAkb;QAC3b,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,sTAAsT;KACzT;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,qDAAqD;QAC3D,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,qSAAqS;QAC9S,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,mPAAmP;KACtP;IAED,iFAAiF;IACjF;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,wDAAwD;QAC9D,QAAQ,EAAE,gBAAgB;QAC1B,OAAO,EAAE,+FAA+F;QACxG,QAAQ,EAAE,QAAQ;QAClB,cAAc,EACZ,oQAAoQ;KACvQ;IAED,iFAAiF;IACjF;QACE,EAAE,EAAE,oCAAoC;QACxC,IAAI,EAAE,oEAAoE;QAC1E,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,uEAAuE;QAChF,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,uXAAuX;KAC1X;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,IAAI,EAAE,oEAAoE;QAC1E,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,0HAA0H;QACnI,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,+TAA+T;KAClU;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,iEAAiE;QACvE,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,oJAAoJ;QAC7J,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,yIAAyI;KAC1J;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,kDAAkD;QACxD,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,8EAA8E;KAC/F;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,IAAI,EAAE,6DAA6D;QACnE,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,mJAAmJ;QAC5J,QAAQ,EAAE,UAAU;QACpB,cAAc,EACZ,sSAAsS;KACzS;CACF,CAAC;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAa,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAcxF,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAC/C,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,0FAA0F;AAC1F,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,IAAI,GAAsC,EAAE,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe;YAAE,MAAM;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAA+B,EAAE,MAAM,GAAG,CAAC,EAAE,QAAmB;IAChG,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI;gBAC1B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;gBACf,KAAK,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;gBAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACnD,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mGAAmG;AACnG,SAAS,cAAc,CAAC,KAAc,EAAE,MAAgB,EAAE;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;SAC9E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;SAC3G,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,OAAyB;IACzC,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,QAAQ,GAA2C,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAEvF;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,OAAyB,OAAO;IAEhC,MAAM,QAAQ,GAAG,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9F,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,4CAA4C,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC5G,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,OAAyB,OAAO;IAC/E,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,0DAA0D,MAAM,CAAC,MAAM,EAAE;KAClF,CAAC;AACJ,CAAC"}

package/dist/pii.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pii.d.ts","sourceRoot":"","sources":["../src/pii.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;CAC1C;AAGD,eAAO,MAAM,YAAY,EAAE,UAAU,EAuCpC,CAAC;AAEF,oGAAoG;AACpG,MAAM,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;AAEzE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,CAQzE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAe7E"}
+{"version":3,"file":"pii.d.ts","sourceRoot":"","sources":["../src/pii.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;CAC1C;AA8BD,eAAO,MAAM,YAAY,EAAE,UAAU,EAyDpC,CAAC;AAEF,oGAAoG;AACpG,MAAM,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;AAEzE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,CAQzE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAe7E"}

package/dist/pii.js

@@ -1,12 +1,61 @@
-import { isValidIban, isValidLuhn, isValidTcKimlik } from "./validators.js";
+import { SECRET_RULES } from "./secrets.js";
+import { isValidIban, isValidLuhn, isValidTcKimlik, isValidTrPhone, isValidVkn } from "./validators.js";
+const REPLACEMENT_BY_SECRET = {
+    jwt: "[JWT-TOKEN]",
+    db_url_postgres: "[CONNECTION-STRING]",
+    db_url_mysql: "[CONNECTION-STRING]",
+    db_url_mongodb: "[CONNECTION-STRING]",
+    db_url_redis: "[CONNECTION-STRING]",
+};
+/**
+ * Masking must cover the whole secret, where detection only needs a prefix:
+ * the scanner's Slack rule stops at the first `-`, which would leave the rest
+ * of `xoxb-<team>-<bot>-<secret>` in the output.
+ */
+const MASK_PATTERN_BY_SECRET = {
+    slack_token: /xox[baprs]-[0-9A-Za-z-]{10,}/g,
+};
+/** Provider formats from the secret scanner, minus the broad ones; each keeps its allowlist. */
+const SECRET_PATTERNS = SECRET_RULES.filter((rule) => !rule.broad).map((rule) => ({
+    name: rule.id,
+    pattern: MASK_PATTERN_BY_SECRET[rule.id] ?? rule.pattern,
+    replacement: REPLACEMENT_BY_SECRET[rule.id] ?? "[API-KEY]",
+    ...(rule.allowlist ? { validate: (match) => !rule.allowlist.some((allow) => allow.test(match)) } : {}),
+}));
 // Order matters: earlier patterns mask first, so later ones never see their digits.
+// Secrets run first — a key or connection string holds digit runs that would
+// otherwise be half-masked as a phone or card number.
 export const PII_PATTERNS = [
+    {
+        // The whole block, not just the BEGIN line the code scanner reports.
+        name: "private_key",
+        pattern: /-----BEGIN (?:[A-Z]+ )*PRIVATE KEY(?: BLOCK)?-----[\s\S]*?-----END (?:[A-Z]+ )*PRIVATE KEY(?: BLOCK)?-----/g,
+        replacement: "[PRIVATE-KEY]",
+    },
+    ...SECRET_PATTERNS,
+    {
+        // Unknown providers: a key-like prefix, a separator, then a run with both letters and digits.
+        name: "api_key",
+        pattern: /\b(?:sk|pk|api|key|token|secret)[-_][A-Za-z0-9]{16,}\b/gi,
+        replacement: "[API-KEY]",
+        validate: (match) => {
+            const value = match.replace(/^[A-Za-z]+[-_]/, "");
+            return /[A-Za-z]/.test(value) && /\d/.test(value);
+        },
+    },
     {
         name: "tc_kimlik",
         pattern: /\b[1-9]\d{10}\b/g,
         replacement: "[TC-KİMLİK]",
         validate: isValidTcKimlik,
     },
+    {
+        // A bare 10-digit number is too common to call a tax number; require the label.
+        name: "vkn",
+        pattern: /(?<=\b(?:VKN|V\.K\.N\.?|[Vv]ergi\s+(?:[Kk]imlik\s+)?[Nn](?:o|umaras[ıi])\.?)\s*[:#]?\s*)\d{10}(?!\d)/g,
+        replacement: "[VKN]",
+        validate: isValidVkn,
+    },
     {
         name: "iban",
         pattern: /\bTR\d{2}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{2}\b/gi,
@@ -26,18 +75,12 @@ export const PII_PATTERNS = [
     },
     {
         name: "phone_tr",
-        pattern: /\b(?:\+90|0090|0)?[\s-]?(?:\d{3})[\s-]?\d{3}[\s-]?\d{2}[\s-]?\d{2}\b/g,
+        // Not glued to letters, `/` or `-` (ids in URLs), and either written with a
+        // +90 / 0 prefix or grouped with spaces/dashes: a bare 10-digit run is more
+        // often an id or an integer IP (2130706433) than a phone number.
+        pattern: /(?<![\w+/.#-])(?:(?:\+90|0090|0)[\s-]?)?\d{3}[\s-]?\d{3}[\s-]?\d{2}[\s-]?\d{2}(?![\w/-])/g,
         replacement: "+90-***-***-**[TELEFON]",
-    },
-    {
-        name: "api_key",
-        pattern: /\b(?:sk|pk|api|key|token|secret)[-_]?[A-Za-z0-9]{16,}\b/gi,
-        replacement: "[API-KEY]",
-    },
-    {
-        name: "jwt",
-        pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g,
-        replacement: "[JWT-TOKEN]",
+        validate: (match) => isValidTrPhone(match) && (/^(?:\+90|0)/.test(match) || /[\s-]/.test(match)),
     },
 ];
 export function maskPiiInText(text, replace) {

package/dist/pii.js.map

@@ -1 +1 @@
-{"version":3,"file":"pii.js","sourceRoot":"","sources":["../src/pii.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAU5E,oFAAoF;AACpF,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,aAAa;QAC1B,QAAQ,EAAE,eAAe;KAC1B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,iFAAiF;QAC1F,WAAW,EAAE,YAAY;QACzB,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,uEAAuE;QAChF,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,2DAA2D;QACpE,WAAW,EAAE,WAAW;KACzB;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,aAAa;KAC3B;CACF,CAAC;AAKF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAqB;IAC/D,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,YAAY,EAAE,CAAC;QACpE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACzC,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,OAAqB;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"pii.js","sourceRoot":"","sources":["../src/pii.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAUxG,MAAM,qBAAqB,GAA2B;IACpD,GAAG,EAAE,aAAa;IAClB,eAAe,EAAE,qBAAqB;IACtC,YAAY,EAAE,qBAAqB;IACnC,cAAc,EAAE,qBAAqB;IACrC,YAAY,EAAE,qBAAqB;CACpC,CAAC;AAEF;;;;GAIG;AACH,MAAM,sBAAsB,GAA2B;IACrD,WAAW,EAAE,+BAA+B;CAC7C,CAAC;AAEF,gGAAgG;AAChG,MAAM,eAAe,GAAiB,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9F,IAAI,EAAE,IAAI,CAAC,EAAE;IACb,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO;IACxD,WAAW,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,WAAW;IAC1D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAChH,CAAC,CAAC,CAAC;AAEJ,oFAAoF;AACpF,6EAA6E;AAC7E,sDAAsD;AACtD,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC;QACE,qEAAqE;QACrE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,6GAA6G;QACtH,WAAW,EAAE,eAAe;KAC7B;IACD,GAAG,eAAe;IAClB;QACE,8FAA8F;QAC9F,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,0DAA0D;QACnE,WAAW,EAAE,WAAW;QACxB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YAClD,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,aAAa;QAC1B,QAAQ,EAAE,eAAe;KAC1B;IACD;QACE,gFAAgF;QAChF,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,uGAAuG;QAChH,WAAW,EAAE,OAAO;QACpB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,iFAAiF;QAC1F,WAAW,EAAE,YAAY;QACzB,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,4EAA4E;QAC5E,4EAA4E;QAC5E,iEAAiE;QACjE,OAAO,EAAE,2FAA2F;QACpG,WAAW,EAAE,yBAAyB;QACtC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACjG;CACF,CAAC;AAKF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAqB;IAC/D,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,YAAY,EAAE,CAAC;QACpE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACzC,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,OAAqB;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/secrets.d.ts

@@ -0,0 +1,18 @@
+export interface SecretRule {
+    id: string;
+    name: string;
+    pattern: RegExp;
+    severity: "critical" | "high" | "medium" | "low";
+    allowlist?: RegExp[];
+    skipPlaceholderCheck?: boolean;
+    lowerSeverityInTestFiles?: boolean;
+    /**
+     * Format-agnostic or not actually secret (a keyword + any quoted string, any
+     * 40-character base64 run, a publishable key). Fine for a code scanner that
+     * shows the finding to a person; the runtime proxy does not mask on these,
+     * because a false match would also mark the session as holding sensitive data.
+     */
+    broad?: boolean;
+}
+export declare const SECRET_RULES: SecretRule[];
+//# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAMrB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAK/B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,eAAO,MAAM,YAAY,EAAE,UAAU,EA2RpC,CAAC"}