@guardbee/mcp-prompt-leak-scanner 0.1.0

package/dist/cli.js

@@ -0,0 +1,205 @@
+#!/usr/bin/env node
+import { startServer } from "./server.js";
+import { scanFile, scanDirectory } from "./scanner.js";
+import { buildSarif } from "./sarif.js";
+import { loadConfig, configFilePath } from "./config.js";
+import { startProxy } from "./proxy.js";
+import { statSync, readFileSync } from "fs";
+import { resolve, dirname } from "path";
+import { fileURLToPath } from "url";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+function getVersion() {
+    try {
+        const pkg = JSON.parse(readFileSync(resolve(__dirname, "../package.json"), "utf8"));
+        return pkg.version;
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+const SEV_ICON = { critical: "🔴", high: "🟠", medium: "🟡", low: "🔵" };
+function printText(findings, scannedFiles, durationMs) {
+    if (findings.length === 0) {
+        console.log(`✅ No leaked credentials or PII found in ${scannedFiles} file(s) (${durationMs}ms)`);
+        return;
+    }
+    const counts = {};
+    for (const f of findings)
+        counts[f.severity] = (counts[f.severity] ?? 0) + 1;
+    console.log(`⚠️  Found ${findings.length} finding(s) in ${scannedFiles} file(s) (${durationMs}ms)`);
+    console.log(`   Critical: ${counts["critical"] ?? 0}  High: ${counts["high"] ?? 0}  Medium: ${counts["medium"] ?? 0}  Low: ${counts["low"] ?? 0}`);
+    console.log("");
+    for (const f of findings) {
+        const icon = SEV_ICON[f.severity] ?? "⚪";
+        console.log(`${icon} [${f.severity.toUpperCase()}] ${f.patternName} (${f.category})`);
+        console.log(`   Location       : ${f.location}:${f.line}:${f.column}`);
+        console.log(`   Value          : ${f.maskedMatch} (masked)`);
+        console.log(`   Recommendation : ${f.recommendation}`);
+        console.log("");
+    }
+}
+function parseScanArgs(args) {
+    const positionals = [];
+    let failOn = "any";
+    let format = "text";
+    let maxFiles = 5000;
+    for (const arg of args) {
+        if (arg.startsWith("--fail-on="))
+            failOn = arg.split("=")[1] ?? "any";
+        else if (arg.startsWith("--format="))
+            format = arg.split("=")[1] ?? "text";
+        else if (arg.startsWith("--max-files="))
+            maxFiles = parseInt(arg.split("=")[1] ?? "5000", 10);
+        else if (!arg.startsWith("--"))
+            positionals.push(arg);
+    }
+    return { positionals, failOn, format, maxFiles };
+}
+function shouldFail(findings, failOn) {
+    if (failOn === "none")
+        return false;
+    if (failOn === "any")
+        return findings.length > 0;
+    const RANK = { critical: 0, high: 1, medium: 2, low: 3 };
+    const threshold = RANK[failOn] ?? 1;
+    return findings.some((f) => (RANK[f.severity] ?? 3) <= threshold);
+}
+async function runScan(rawArgs) {
+    const { positionals, failOn: cliFail, format, maxFiles: cliMax } = parseScanArgs(rawArgs);
+    const target = positionals[0];
+    if (!target) {
+        console.error("Usage: guardbee-prompt-leak-scanner scan <path> [--fail-on=any] [--format=text|json|sarif]");
+        process.exit(2);
+    }
+    const cfg = loadConfig(target, {
+        ...(cliFail !== "any" ? { failOn: cliFail } : {}),
+        ...(cliMax !== 5000 ? { maxFiles: cliMax } : {}),
+    });
+    const cfgPath = configFilePath(target);
+    if (cfgPath && format === "text")
+        process.stderr.write(`[guardbee] Using config: ${cfgPath}\n`);
+    let stat;
+    try {
+        stat = statSync(target);
+    }
+    catch {
+        console.error(`Path not found: ${target}`);
+        process.exit(2);
+    }
+    let findings;
+    let scannedFiles;
+    let durationMs;
+    if (stat.isDirectory()) {
+        const result = scanDirectory(target, { maxFiles: cfg.maxFiles, exclude: cfg.exclude });
+        findings = result.findings;
+        scannedFiles = result.scannedFiles;
+        durationMs = result.durationMs;
+    }
+    else {
+        const start = Date.now();
+        const result = scanFile(target);
+        findings = result.findings;
+        scannedFiles = result.skipped ? 0 : 1;
+        durationMs = Date.now() - start;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify({ findings, scannedFiles, durationMs }, null, 2));
+    }
+    else if (format === "sarif") {
+        console.log(JSON.stringify(buildSarif(getVersion(), findings), null, 2));
+    }
+    else {
+        printText(findings, scannedFiles, durationMs);
+    }
+    process.exit(shouldFail(findings, cfg.failOn) ? 1 : 0);
+}
+function parseProxyArgs(args) {
+    let port = 8788;
+    let upstream;
+    let mode = "monitor";
+    let failOnSeverity;
+    for (const arg of args) {
+        if (arg.startsWith("--port="))
+            port = parseInt(arg.split("=")[1] ?? "8788", 10);
+        else if (arg.startsWith("--upstream="))
+            upstream = arg.split("=")[1];
+        else if (arg.startsWith("--mode="))
+            mode = arg.split("=")[1] ?? "monitor";
+        else if (arg.startsWith("--fail-on-severity="))
+            failOnSeverity = arg.split("=")[1];
+    }
+    return { port, upstream, mode, failOnSeverity };
+}
+function runProxy(rawArgs) {
+    const { port, upstream, mode, failOnSeverity } = parseProxyArgs(rawArgs);
+    if (!upstream) {
+        console.error("Usage: guardbee-prompt-leak-scanner proxy --upstream=https://api.openai.com [--port=8788] [--mode=monitor|redact|block] [--fail-on-severity=high]");
+        process.exit(2);
+    }
+    startProxy({
+        port,
+        upstream,
+        mode,
+        failOnSeverity,
+        onAudit: (event) => {
+            process.stdout.write(JSON.stringify(event) + "\n");
+        },
+    });
+    process.stderr.write(`[guardbee-prompt-leak-scanner] Proxying :${port} -> ${upstream} (mode: ${mode})\n`);
+}
+function printHelp() {
+    console.log(`@guardbee/mcp-prompt-leak-scanner
+
+Usage (MCP server):
+  guardbee-prompt-leak-scanner [serve]
+
+Usage (CLI):
+  guardbee-prompt-leak-scanner scan <path>    Scan a file/directory (prompt logs, request-body fixtures)
+  guardbee-prompt-leak-scanner proxy --upstream=<url>   Run a live reverse proxy in front of a real LLM API
+
+scan options:
+  --fail-on=<level>   Exit 1 if issues at this severity or above are found
+                      Levels: any (default) | critical | high | medium | low | none
+  --format=<fmt>      Output format: text (default) | json | sarif
+  --max-files=<n>     Max files to scan (default: 5000)
+
+proxy options:
+  --upstream=<url>          Real API base URL to forward to (required), e.g. https://api.openai.com
+  --port=<n>                Local port to listen on (default: 8788)
+  --mode=<mode>              monitor (default, forward unchanged + log) | redact (forward with matches replaced) | block (reject the request)
+  --fail-on-severity=<sev>   In block mode, minimum severity that triggers a block (default: high)
+
+Audit events (JSON lines, no leaked values included) are written to stdout as the proxy runs.
+
+Exit codes (scan):
+  0  No issues found (or none above --fail-on threshold)
+  1  Issues found at or above threshold
+  2  Error / bad arguments
+`);
+}
+const [, , firstArg, ...rest] = process.argv;
+if (!firstArg || firstArg === "serve") {
+    startServer().catch((err) => {
+        process.stderr.write(`[guardbee-prompt-leak-scanner] Fatal error: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(1);
+    });
+}
+else if (firstArg === "--help" || firstArg === "-h") {
+    printHelp();
+    process.exit(0);
+}
+else if (firstArg === "scan") {
+    runScan(rest).catch((err) => {
+        console.error("Error:", err.message);
+        process.exit(2);
+    });
+}
+else if (firstArg === "proxy") {
+    runProxy(rest);
+}
+else {
+    console.error(`Unknown command: ${firstArg}`);
+    console.error("Run with --help for usage.");
+    process.exit(2);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,UAAU,EAAmC,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAwB,CAAC;QAC3G,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAA2B,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAEjG,SAAS,SAAS,CAAC,QAAmB,EAAE,YAAoB,EAAE,UAAkB;IAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,2CAA2C,YAAY,aAAa,UAAU,KAAK,CAAC,CAAC;QACjG,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAE7E,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,kBAAkB,YAAY,aAAa,UAAU,KAAK,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,WAAW,WAAW,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAc;IACnC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,IAAI,QAAQ,GAAG,IAAI,CAAC;IAEpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;aACjE,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;aACtE,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;aACzF,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAC,QAAmB,EAAE,MAAc;IACrD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACjD,MAAM,IAAI,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAiB;IACtC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAE1F,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAC5G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE;QAC7B,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,OAAO,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,IAAI,CAAC,CAAC;IAEhG,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,QAAmB,CAAC;IACxB,IAAI,YAAoB,CAAC;IACzB,IAAI,UAAkB,CAAC;IAEvB,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACnC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IAClC,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,QAA4B,CAAC;IACjC,IAAI,IAAI,GAAc,SAAS,CAAC;IAChC,IAAI,cAA+C,CAAC;IAEpD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;aAC3E,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAChE,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,IAAI,GAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAe,IAAI,SAAS,CAAC;aACpF,IAAI,GAAG,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAAE,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAwB,CAAC;IAC5G,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAiB;IACjC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,mJAAmJ,CAAC,CAAC;QACnK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,UAAU,CAAC;QACT,IAAI;QACJ,QAAQ;QACR,IAAI;QACJ,cAAc;QACd,OAAO,EAAE,CAAC,KAAiB,EAAE,EAAE;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACrD,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,IAAI,OAAO,QAAQ,WAAW,IAAI,KAAK,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2Bb,CAAC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,EAAE,AAAD,EAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;AAE7C,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;IACtC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;IACtD,SAAS,EAAE,CAAC;IACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;KAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,KAAK,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,8 @@
+export interface PromptLeakScannerConfig {
+    failOn: string;
+    maxFiles: number;
+    exclude: string[];
+}
+export declare function loadConfig(searchDir: string, cliOverrides?: Partial<PromptLeakScannerConfig>): PromptLeakScannerConfig;
+export declare function configFilePath(searchDir: string): string | null;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAiFD,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAAG,uBAAuB,CAmB1H;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE/D"}

package/dist/config.js

@@ -0,0 +1,101 @@
+import { readFileSync, existsSync } from "fs";
+import { resolve, join } from "path";
+const DEFAULTS = {
+    failOn: "any",
+    maxFiles: 5000,
+    exclude: [],
+};
+function findConfigFile(startDir) {
+    const names = ["guardbee.yml", "guardbee.yaml", ".guardbee.yml"];
+    let dir = resolve(startDir);
+    for (let i = 0; i < 5; i++) {
+        for (const name of names) {
+            const p = join(dir, name);
+            if (existsSync(p))
+                return p;
+        }
+        const parent = resolve(dir, "..");
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+function parseYaml(content) {
+    const root = {};
+    let currentSection = null;
+    let currentKey = null;
+    let currentList = null;
+    for (const rawLine of content.split("\n")) {
+        const line = rawLine.replace(/#.*$/, "");
+        if (!line.trim())
+            continue;
+        const indent = line.match(/^(\s*)/)?.[1].length ?? 0;
+        if (indent === 0 && line.trim().endsWith(":")) {
+            if (currentKey && currentList) {
+                root[currentSection][currentKey] = currentList;
+                currentList = null;
+                currentKey = null;
+            }
+            currentSection = line.trim().slice(0, -1);
+            root[currentSection] = {};
+            continue;
+        }
+        if (indent === 2 && currentSection) {
+            if (currentKey && currentList) {
+                root[currentSection][currentKey] = currentList;
+                currentList = null;
+                currentKey = null;
+            }
+            const colonIdx = line.indexOf(":");
+            if (colonIdx === -1)
+                continue;
+            const key = line.slice(0, colonIdx).trim();
+            const value = line.slice(colonIdx + 1).trim();
+            if (value === "") {
+                currentKey = key;
+                currentList = [];
+            }
+            else {
+                root[currentSection][key] = value;
+            }
+            continue;
+        }
+        if (indent === 4 && currentList !== null) {
+            const item = line.trim().replace(/^-\s*/, "").replace(/^['"]|['"]$/g, "");
+            currentList.push(item);
+            continue;
+        }
+    }
+    if (currentKey && currentList && currentSection) {
+        root[currentSection][currentKey] = currentList;
+    }
+    return root;
+}
+export function loadConfig(searchDir, cliOverrides = {}) {
+    const configPath = findConfigFile(searchDir);
+    if (!configPath)
+        return { ...DEFAULTS, ...cliOverrides };
+    let fileConfig = {};
+    try {
+        const raw = readFileSync(configPath, "utf8");
+        const parsed = parseYaml(raw);
+        const section = parsed["prompt-leak-scanner"];
+        if (section) {
+            if (typeof section["fail-on"] === "string")
+                fileConfig.failOn = section["fail-on"];
+            if (typeof section["max-files"] === "string")
+                fileConfig.maxFiles = parseInt(section["max-files"], 10);
+            if (Array.isArray(section["exclude"]))
+                fileConfig.exclude = section["exclude"];
+        }
+    }
+    catch {
+        // ignore parse errors, use defaults
+    }
+    return { ...DEFAULTS, ...fileConfig, ...cliOverrides };
+}
+export function configFilePath(searchDir) {
+    return findConfigFile(searchDir);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAgBrC,MAAM,QAAQ,GAA4B;IACxC,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;IACjE,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,IAAI,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,WAAW,GAAoB,IAAI,CAAC;IAExC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAErD,IAAI,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,cAAe,CAA6B,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;gBAC7E,WAAW,GAAG,IAAI,CAAC;gBACnB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,IAAI,MAAM,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;YACnC,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,cAAc,CAA6B,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;gBAC5E,WAAW,GAAG,IAAI,CAAC;gBACnB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAE9C,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACjB,UAAU,GAAG,GAAG,CAAC;gBACjB,WAAW,GAAG,EAAE,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACL,IAAI,CAAC,cAAc,CAA6B,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACjE,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,MAAM,KAAK,CAAC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC1E,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,UAAU,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,cAAc,CAA6B,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;IAC9E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,eAAiD,EAAE;IAC/F,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;IAEzD,IAAI,UAAU,GAAqC,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAwC,CAAC;QACrF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ;gBAAE,UAAU,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YACnF,IAAI,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,QAAQ;gBAAE,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;YACvG,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAAE,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC,SAAS,CAAa,CAAC;QAC7F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { scanText, scanAndRedactText, scanBody, redactBody, scanFile, scanDirectory } from "./scanner.js";
+export type { Finding, ScanResult } from "./scanner.js";
+export { LEAK_PATTERNS } from "./patterns.js";
+export type { LeakPattern, LeakCategory } from "./patterns.js";
+export { startProxy } from "./proxy.js";
+export type { ProxyOptions, ProxyMode, AuditEvent } from "./proxy.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1G,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,4 @@
+export { scanText, scanAndRedactText, scanBody, redactBody, scanFile, scanDirectory } from "./scanner.js";
+export { LEAK_PATTERNS } from "./patterns.js";
+export { startProxy } from "./proxy.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE1G,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC"}

package/dist/patterns.d.ts

@@ -0,0 +1,13 @@
+export type LeakCategory = "credential" | "financial-pii" | "national-id" | "contact-pii";
+export interface LeakPattern {
+    id: string;
+    name: string;
+    category: LeakCategory;
+    pattern: RegExp;
+    severity: "critical" | "high" | "medium" | "low";
+    recommendation: string;
+    /** Extra checksum/structure validation beyond the regex, to keep false positives low. */
+    validate?: (rawMatch: string) => boolean;
+}
+export declare const LEAK_PATTERNS: LeakPattern[];
+//# sourceMappingURL=patterns.d.ts.map

package/dist/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,eAAe,GAAG,aAAa,GAAG,aAAa,CAAC;AAE1F,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,cAAc,EAAE,MAAM,CAAC;IACvB,yFAAyF;IACzF,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;CAC1C;AAkDD,eAAO,MAAM,aAAa,EAAE,WAAW,EA2HtC,CAAC"}

package/dist/patterns.js

@@ -0,0 +1,169 @@
+// ── Checksum validators ──────────────────────────────────────────────────────
+/** Turkish national ID (TC Kimlik No) checksum — the standard 11-digit algorithm. */
+function isValidTcKimlik(raw) {
+    const d = raw.replace(/\D/g, "");
+    if (d.length !== 11 || d[0] === "0")
+        return false;
+    const digits = d.split("").map(Number);
+    const oddSum = digits[0] + digits[2] + digits[4] + digits[6] + digits[8];
+    const evenSum = digits[1] + digits[3] + digits[5] + digits[7];
+    const d10 = ((oddSum * 7 - evenSum) % 10 + 10) % 10;
+    const first10Sum = digits.slice(0, 10).reduce((a, b) => a + b, 0);
+    const d11 = first10Sum % 10;
+    return d10 === digits[9] && d11 === digits[10];
+}
+/** Luhn checksum for credit card numbers. */
+function isValidLuhn(raw) {
+    const d = raw.replace(/[\s-]/g, "");
+    if (!/^\d{13,19}$/.test(d))
+        return false;
+    let sum = 0;
+    let double = false;
+    for (let i = d.length - 1; i >= 0; i--) {
+        let digit = Number(d[i]);
+        if (double) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+        double = !double;
+    }
+    return sum % 10 === 0;
+}
+/** IBAN mod-97 checksum (ISO 7064 MOD97-10), computed in chunks to avoid precision loss. */
+function isValidIban(raw) {
+    const iban = raw.replace(/\s/g, "").toUpperCase();
+    if (!/^[A-Z]{2}\d{2}[A-Z0-9]{10,30}$/.test(iban))
+        return false;
+    const rearranged = iban.slice(4) + iban.slice(0, 4);
+    const numeric = rearranged.replace(/[A-Z]/g, (c) => String(c.charCodeAt(0) - 55));
+    let remainder = "";
+    for (const ch of numeric) {
+        remainder = (Number(remainder + ch) % 97).toString();
+    }
+    return Number(remainder) === 1;
+}
+// ── Patterns ──────────────────────────────────────────────────────────────────
+export const LEAK_PATTERNS = [
+    // ── Credentials — sending these to a third-party LLM is a direct secret leak ──
+    {
+        id: "openai_api_key",
+        name: "OpenAI API key",
+        category: "credential",
+        pattern: /\bsk-[A-Za-z0-9]{20,}\b/g,
+        severity: "critical",
+        recommendation: "Never let an API key flow into a prompt. Strip it before the request leaves your application, and rotate the key — it may already have been sent to a third party.",
+    },
+    {
+        id: "anthropic_api_key",
+        name: "Anthropic API key",
+        category: "credential",
+        pattern: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g,
+        severity: "critical",
+        recommendation: "Never let an API key flow into a prompt. Strip it before the request leaves your application, and rotate the key.",
+    },
+    {
+        id: "aws_access_key_id",
+        name: "AWS access key ID",
+        category: "credential",
+        pattern: /\bAKIA[0-9A-Z]{16}\b/g,
+        severity: "critical",
+        recommendation: "An AWS access key in a prompt is a direct cloud-account compromise risk. Strip it and rotate the key immediately.",
+    },
+    {
+        id: "github_pat",
+        name: "GitHub personal access token",
+        category: "credential",
+        pattern: /\bghp_[A-Za-z0-9]{36}\b/g,
+        severity: "critical",
+        recommendation: "Strip GitHub tokens before they reach a prompt, and revoke/rotate this one.",
+    },
+    {
+        id: "slack_token",
+        name: "Slack token",
+        category: "credential",
+        pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,
+        severity: "critical",
+        recommendation: "Strip Slack tokens before they reach a prompt, and rotate this one.",
+    },
+    {
+        id: "google_api_key",
+        name: "Google API key",
+        category: "credential",
+        pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g,
+        severity: "critical",
+        recommendation: "Strip Google API keys before they reach a prompt, and rotate this one.",
+    },
+    {
+        id: "stripe_secret_key",
+        name: "Stripe secret key",
+        category: "credential",
+        pattern: /\bsk_live_[0-9a-zA-Z]{24,}\b/g,
+        severity: "critical",
+        recommendation: "A live Stripe secret key in a prompt is a direct payments-account compromise risk. Strip it and rotate the key immediately.",
+    },
+    {
+        id: "private_key_block",
+        name: "PEM private key block",
+        category: "credential",
+        pattern: /-----BEGIN (?:RSA |EC |OPENSSH |DSA |)PRIVATE KEY-----/g,
+        severity: "critical",
+        recommendation: "A private key must never enter a prompt. Strip it and rotate/reissue the key pair.",
+    },
+    {
+        id: "jwt_token",
+        name: "JWT (JSON Web Token)",
+        category: "credential",
+        pattern: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,
+        severity: "high",
+        recommendation: "A JWT often carries session/identity claims. Strip it before the request leaves your application.",
+    },
+    // ── Financial PII ─────────────────────────────────────────────────────────────
+    {
+        id: "credit_card_number",
+        name: "Credit card number",
+        category: "financial-pii",
+        pattern: /\b(?:\d[ -]?){13,19}\b/g,
+        severity: "high",
+        recommendation: "Card numbers sent to a third-party LLM are a PCI-DSS and KVKK/GDPR data-transfer concern. Redact or tokenize before the prompt is built.",
+        validate: isValidLuhn,
+    },
+    {
+        id: "iban",
+        name: "IBAN",
+        category: "financial-pii",
+        pattern: /\b[A-Z]{2}\d{2}[A-Z0-9]{10,30}\b/g,
+        severity: "high",
+        recommendation: "An IBAN is regulated financial PII. Redact or tokenize before the prompt is built.",
+        validate: isValidIban,
+    },
+    // ── National ID ───────────────────────────────────────────────────────────────
+    {
+        id: "tc_kimlik_no",
+        name: "Turkish national ID (TC Kimlik No)",
+        category: "national-id",
+        pattern: /\b\d{11}\b/g,
+        severity: "high",
+        recommendation: "A validated TC Kimlik No is regulated personal data under KVKK. Redact or tokenize before the prompt is built.",
+        validate: isValidTcKimlik,
+    },
+    // ── Contact PII ───────────────────────────────────────────────────────────────
+    {
+        id: "email_address",
+        name: "Email address",
+        category: "contact-pii",
+        pattern: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g,
+        severity: "medium",
+        recommendation: "Consider whether the model needs the real email address, or a placeholder/tokenized reference would do.",
+    },
+    {
+        id: "turkish_phone_number",
+        name: "Turkish phone number",
+        category: "contact-pii",
+        pattern: /\b(?:\+90|0)\s?5\d{2}[\s.-]?\d{3}[\s.-]?\d{2}[\s.-]?\d{2}\b/g,
+        severity: "medium",
+        recommendation: "Consider whether the model needs the real phone number, or a placeholder/tokenized reference would do.",
+    },
+];
+//# sourceMappingURL=patterns.js.map

package/dist/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":"AAaA,gFAAgF;AAEhF,qFAAqF;AACrF,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,UAAU,GAAG,EAAE,CAAC;IAC5B,OAAO,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,6CAA6C;AAC7C,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,CAAC;gBAAE,KAAK,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,GAAG,IAAI,KAAK,CAAC;QACb,MAAM,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,4FAA4F;AAC5F,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClF,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,iFAAiF;IACjF;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,oKAAoK;KACrL;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,mHAAmH;KACpI;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,mHAAmH;KACpI;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,6EAA6E;KAC9F;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,mCAAmC;QAC5C,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,qEAAqE;KACtF;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,wEAAwE;KACzF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,6HAA6H;KAC9I;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,yDAAyD;QAClE,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,oFAAoF;KACrG;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,oEAAoE;QAC7E,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,mGAAmG;KACpH;IAED,iFAAiF;IACjF;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,0IAA0I;QAC1J,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,mCAAmC;QAC5C,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,oFAAoF;QACpG,QAAQ,EAAE,WAAW;KACtB;IAED,iFAAiF;IACjF;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,gHAAgH;QAChI,QAAQ,EAAE,eAAe;KAC1B;IAED,iFAAiF;IACjF;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,qDAAqD;QAC9D,QAAQ,EAAE,QAAQ;QAClB,cAAc,EAAE,yGAAyG;KAC1H;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,QAAQ;QAClB,cAAc,EAAE,wGAAwG;KACzH;CACF,CAAC"}

package/dist/proxy.d.ts

@@ -0,0 +1,34 @@
+import { type Server } from "http";
+import type { Finding } from "./scanner.js";
+export type ProxyMode = "monitor" | "redact" | "block";
+export interface ProxyOptions {
+    port: number;
+    /** Base URL of the real LLM API this proxy sits in front of, e.g. https://api.openai.com */
+    upstream: string;
+    mode: ProxyMode;
+    /** In "block" mode, the minimum severity that triggers a block (default: "high"). */
+    failOnSeverity?: Finding["severity"];
+    onAudit?: (event: AuditEvent) => void;
+}
+export interface AuditEvent {
+    timestamp: string;
+    method: string;
+    path: string;
+    mode: ProxyMode;
+    blocked: boolean;
+    findingCount: number;
+    findingCodes: string[];
+}
+/**
+ * A reverse proxy that sits between your application and a real LLM API
+ * (OpenAI/Anthropic-compatible). It buffers and inspects only the outbound
+ * REQUEST body — message/system text fields — for leaked credentials and PII,
+ * then streams the upstream response straight back unmodified (so SSE/streaming
+ * completions pass through untouched; only the prompt going *out* is inspected).
+ *
+ * The audit trail never stores the actual matched text — only which pattern
+ * fired and where — so the proxy's own logs can't become a second copy of the
+ * leak it just caught.
+ */
+export declare function startProxy(options: ProxyOptions): Server;
+//# sourceMappingURL=proxy.d.ts.map

package/dist/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwC,KAAK,MAAM,EAAE,MAAM,MAAM,CAAC;AAIzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,SAAS,CAAC;IAChB,qFAAqF;IACrF,cAAc,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAoFxD"}