@koreshield/koreshield 0.1.4

package/dist/index.js

@@ -0,0 +1,332 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  KoreShieldClient: () => KoreShieldClient,
+  KoreShieldOpenAI: () => KoreShieldOpenAI,
+  checkResponseSafety: () => checkResponseSafety,
+  createClient: () => createClient,
+  createKoreShieldOpenAI: () => createKoreShieldOpenAI,
+  default: () => KoreShieldClient,
+  formatMessages: () => formatMessages,
+  retry: () => retry,
+  sanitizeInput: () => sanitizeInput,
+  sleep: () => sleep,
+  validateConfig: () => validateConfig
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/core/client.ts
+var import_axios = __toESM(require("axios"));
+
+// src/utils/index.ts
+function validateConfig(config) {
+  const errors = [];
+  if (!config.baseURL) {
+    errors.push("baseURL is required");
+  } else {
+    try {
+      new URL(config.baseURL);
+    } catch {
+      errors.push("baseURL must be a valid URL");
+    }
+  }
+  if (config.timeout && (config.timeout < 1e3 || config.timeout > 3e5)) {
+    errors.push("timeout must be between 1000 and 300000 milliseconds");
+  }
+  return {
+    valid: errors.length === 0,
+    errors
+  };
+}
+function createClient(config = {}) {
+  const baseURL = process.env.KORESHIELD_BASE_URL || config.baseURL;
+  if (!baseURL) {
+    throw new Error("baseURL is required. Set KORESHIELD_BASE_URL environment variable or pass baseURL in config.");
+  }
+  const defaultConfig = {
+    baseURL,
+    apiKey: process.env.KORESHIELD_API_KEY || config.apiKey,
+    timeout: parseInt(process.env.KORESHIELD_TIMEOUT || "30000"),
+    debug: process.env.KORESHIELD_DEBUG === "true" || config.debug || false,
+    ...config
+  };
+  const validation = validateConfig(defaultConfig);
+  if (!validation.valid) {
+    throw new Error(`Invalid configuration: ${validation.errors.join(", ")}`);
+  }
+  return new KoreShieldClient(defaultConfig);
+}
+function sanitizeInput(input) {
+  return input.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, "[SCRIPT REMOVED]").replace(/javascript:/gi, "[JAVASCRIPT REMOVED]").replace(/on\w+\s*=/gi, "[EVENT REMOVED]").trim();
+}
+function checkResponseSafety(response) {
+  const issues = [];
+  let severity = "low";
+  if (/<script/i.test(response)) {
+    issues.push("Contains script tags");
+    severity = "high";
+  }
+  if (/system prompt|you are an ai|as an ai assistant/i.test(response)) {
+    issues.push("Potential system prompt leakage");
+    severity = "medium";
+  }
+  if (/how to|step by step|step \d+|instructions? for/i.test(response) && /hack|exploit|attack|malware|virus/i.test(response)) {
+    issues.push("Contains potentially harmful instructions");
+    severity = "high";
+  }
+  return {
+    safe: issues.length === 0,
+    issues,
+    severity
+  };
+}
+function formatMessages(messages) {
+  return messages.map((msg) => ({
+    role: msg.role,
+    content: sanitizeInput(msg.content)
+  }));
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function retry(fn, maxRetries = 3, baseDelay = 1e3) {
+  let lastError;
+  for (let attempt = 0; attempt <= maxRetries; attempt++) {
+    try {
+      return await fn();
+    } catch (error) {
+      lastError = error;
+      if (attempt === maxRetries) {
+        break;
+      }
+      const delay = baseDelay * Math.pow(2, attempt);
+      await sleep(delay);
+    }
+  }
+  throw lastError;
+}
+
+// src/core/client.ts
+var KoreShieldClient = class {
+  constructor(config) {
+    const validation = validateConfig(config);
+    if (!validation.valid) {
+      throw new Error(`Invalid configuration: ${validation.errors.join(", ")}`);
+    }
+    this.config = {
+      baseURL: config.baseURL,
+      apiKey: config.apiKey || process.env.KORESHIELD_API_KEY || "",
+      timeout: config.timeout || 3e4,
+      debug: config.debug || false,
+      headers: config.headers || {}
+    };
+    this.client = import_axios.default.create({
+      baseURL: this.config.baseURL,
+      timeout: this.config.timeout,
+      headers: {
+        "Content-Type": "application/json",
+        "User-Agent": "KoreShield-JS/0.1.0",
+        ...this.config.headers
+      }
+    });
+    if (this.config.apiKey) {
+      this.client.defaults.headers.common["Authorization"] = `Bearer ${this.config.apiKey}`;
+    }
+    if (this.config.debug) {
+      this.client.interceptors.request.use(
+        (config2) => {
+          console.log("[KoreShield] Request:", config2.method?.toUpperCase(), config2.url);
+          return config2;
+        },
+        (error) => {
+          console.error("[KoreShield] Request Error:", error);
+          return Promise.reject(error);
+        }
+      );
+      this.client.interceptors.response.use(
+        (response) => {
+          console.log("[KoreShield] Response:", response.status, response.config.url);
+          return response;
+        },
+        (error) => {
+          console.error("[KoreShield] Response Error:", error.response?.status, error.response?.data);
+          return Promise.reject(error);
+        }
+      );
+    }
+  }
+  /**
+   * Create a chat completion request through KoreShield
+   */
+  async createChatCompletion(request, securityOptions) {
+    try {
+      const payload = {
+        ...request,
+        security: securityOptions
+      };
+      const response = await this.client.post(
+        "/v1/chat/completions",
+        payload
+      );
+      return response.data;
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Get security events/logs
+   */
+  async getSecurityEvents(limit = 50, offset = 0, type, severity) {
+    try {
+      const params = new URLSearchParams({
+        limit: limit.toString(),
+        offset: offset.toString()
+      });
+      if (type)
+        params.append("type", type);
+      if (severity)
+        params.append("severity", severity);
+      const response = await this.client.get(
+        `/api/security/events?${params}`
+      );
+      return response.data;
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Get metrics and statistics
+   */
+  async getMetrics() {
+    try {
+      const response = await this.client.get("/api/metrics");
+      return response.data;
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Get Prometheus metrics in text format
+   */
+  async getPrometheusMetrics() {
+    try {
+      const response = await this.client.get("/metrics", {
+        headers: { "Accept": "text/plain" }
+      });
+      return response.data;
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Health check
+   */
+  async health() {
+    try {
+      const response = await this.client.get("/health");
+      return response.data;
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Update security configuration
+   */
+  async updateSecurityConfig(options) {
+    try {
+      await this.client.put("/api/config/security", options);
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Test connection to KoreShield
+   */
+  async testConnection() {
+    try {
+      await this.health();
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  handleError(error) {
+    const koreShieldError = new Error(
+      error.response?.data?.message || error.message || "Unknown error"
+    );
+    koreShieldError.code = error.response?.data?.code || "UNKNOWN_ERROR";
+    koreShieldError.statusCode = error.response?.status;
+    koreShieldError.details = error.response?.data;
+    return koreShieldError;
+  }
+};
+
+// src/providers/openai.ts
+var KoreShieldOpenAI = class {
+  constructor(config) {
+    this.client = new KoreShieldClient(config);
+  }
+  /**
+   * Chat completions API (OpenAI-compatible)
+   */
+  // eslint-disable-next-line @typescript-eslint/no-unused-vars
+  async chat(_completions) {
+    return {
+      create: async (request, securityOptions) => {
+        return await this.client.createChatCompletion(request, securityOptions);
+      }
+    };
+  }
+  /**
+   * Get underlying KoreShield client for advanced operations
+   */
+  getClient() {
+    return this.client;
+  }
+};
+function createKoreShieldOpenAI(config) {
+  return new KoreShieldOpenAI(config);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  KoreShieldClient,
+  KoreShieldOpenAI,
+  checkResponseSafety,
+  createClient,
+  createKoreShieldOpenAI,
+  formatMessages,
+  retry,
+  sanitizeInput,
+  sleep,
+  validateConfig
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/core/client.ts","../src/utils/index.ts","../src/providers/openai.ts"],"sourcesContent":["/**\n * KoreShield JavaScript/TypeScript SDK\n *\n * A comprehensive SDK for integrating with KoreShield LLM Security Proxy\n *\n * @packageDocumentation\n */\n\n// Core exports\nexport { KoreShieldClient } from './core/client';\n\n// Provider wrappers\nexport { KoreShieldOpenAI, createKoreShieldOpenAI } from './providers/openai';\n\n// Utility functions\nexport {\n  validateConfig,\n  createClient,\n  sanitizeInput,\n  checkResponseSafety,\n  formatMessages,\n  sleep,\n  retry\n} from './utils';\n\n// Types\nexport type {\n  KoreShieldConfig,\n  SecurityOptions,\n  ChatCompletionRequest,\n  ChatCompletionResponse,\n  SecurityEvent,\n  MetricsResponse,\n  KoreShieldError,\n  ProviderType,\n  ProviderConfig\n} from './types';\n\n// Default export\nexport { KoreShieldClient as default } from './core/client';","/**\n * KoreShield Core Client\n */\n\nimport axios, { AxiosInstance, AxiosResponse } from 'axios';\nimport {\n  KoreShieldConfig,\n  SecurityOptions,\n  ChatCompletionRequest,\n  ChatCompletionResponse,\n  SecurityEvent,\n  MetricsResponse,\n  KoreShieldError\n} from '../types';\nimport { validateConfig } from '../utils';\n\nexport class KoreShieldClient {\n  private client: AxiosInstance;\n  private config: Required<KoreShieldConfig>;\n\n  constructor(config: KoreShieldConfig) {\n    const validation = validateConfig(config);\n    if (!validation.valid) {\n      throw new Error(`Invalid configuration: ${validation.errors.join(', ')}`);\n    }\n\n    this.config = {\n      baseURL: config.baseURL,\n      apiKey: config.apiKey || process.env.KORESHIELD_API_KEY || '',\n      timeout: config.timeout || 30000,\n      debug: config.debug || false,\n      headers: config.headers || {}\n    };\n\n    this.client = axios.create({\n      baseURL: this.config.baseURL,\n      timeout: this.config.timeout,\n      headers: {\n        'Content-Type': 'application/json',\n        'User-Agent': 'KoreShield-JS/0.1.0',\n        ...this.config.headers\n      }\n    });\n\n    // Add API key to requests if provided\n    if (this.config.apiKey) {\n      this.client.defaults.headers.common['Authorization'] = `Bearer ${this.config.apiKey}`;\n    }\n\n    // Add request/response interceptors for debugging\n    if (this.config.debug) {\n      this.client.interceptors.request.use(\n        (config) => {\n          console.log('[KoreShield] Request:', config.method?.toUpperCase(), config.url);\n          return config;\n        },\n        (error) => {\n          console.error('[KoreShield] Request Error:', error);\n          return Promise.reject(error);\n        }\n      );\n\n      this.client.interceptors.response.use(\n        (response) => {\n          console.log('[KoreShield] Response:', response.status, response.config.url);\n          return response;\n        },\n        (error) => {\n          console.error('[KoreShield] Response Error:', error.response?.status, error.response?.data);\n          return Promise.reject(error);\n        }\n      );\n    }\n  }\n\n  /**\n   * Create a chat completion request through KoreShield\n   */\n  async createChatCompletion(\n    request: ChatCompletionRequest,\n    securityOptions?: SecurityOptions\n  ): Promise<ChatCompletionResponse> {\n    try {\n      const payload = {\n        ...request,\n        security: securityOptions\n      };\n\n      const response: AxiosResponse<ChatCompletionResponse> = await this.client.post(\n        '/v1/chat/completions',\n        payload\n      );\n\n      return response.data;\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Get security events/logs\n   */\n  async getSecurityEvents(\n    limit: number = 50,\n    offset: number = 0,\n    type?: string,\n    severity?: string\n  ): Promise<SecurityEvent[]> {\n    try {\n      const params = new URLSearchParams({\n        limit: limit.toString(),\n        offset: offset.toString()\n      });\n\n      if (type) params.append('type', type);\n      if (severity) params.append('severity', severity);\n\n      const response: AxiosResponse<SecurityEvent[]> = await this.client.get(\n        `/api/security/events?${params}`\n      );\n\n      return response.data;\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Get metrics and statistics\n   */\n  async getMetrics(): Promise<MetricsResponse> {\n    try {\n      const response: AxiosResponse<MetricsResponse> = await this.client.get('/api/metrics');\n      return response.data;\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Get Prometheus metrics in text format\n   */\n  async getPrometheusMetrics(): Promise<string> {\n    try {\n      const response: AxiosResponse<string> = await this.client.get('/metrics', {\n        headers: { 'Accept': 'text/plain' }\n      });\n      return response.data;\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Health check\n   */\n  async health(): Promise<{ status: string; version: string; uptime: number }> {\n    try {\n      const response = await this.client.get('/health');\n      return response.data;\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Update security configuration\n   */\n  async updateSecurityConfig(options: SecurityOptions): Promise<void> {\n    try {\n      await this.client.put('/api/config/security', options);\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Test connection to KoreShield\n   */\n  async testConnection(): Promise<boolean> {\n    try {\n      await this.health();\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  private handleError(error: any): KoreShieldError {\n    const koreShieldError: KoreShieldError = new Error(\n      error.response?.data?.message || error.message || 'Unknown error'\n    ) as KoreShieldError;\n\n    koreShieldError.code = error.response?.data?.code || 'UNKNOWN_ERROR';\n    koreShieldError.statusCode = error.response?.status;\n    koreShieldError.details = error.response?.data;\n\n    return koreShieldError;\n  }\n}","/**\n * KoreShield Utility Functions\n */\n\nimport { KoreShieldClient } from '../core/client';\nimport { KoreShieldConfig } from '../types';\n\n/**\n * Validate KoreShield configuration\n */\nexport function validateConfig(config: KoreShieldConfig): { valid: boolean; errors: string[] } {\n  const errors: string[] = [];\n\n  if (!config.baseURL) {\n    errors.push('baseURL is required');\n  } else {\n    try {\n      new URL(config.baseURL);\n    } catch {\n      errors.push('baseURL must be a valid URL');\n    }\n  }\n\n  if (config.timeout && (config.timeout < 1000 || config.timeout > 300000)) {\n    errors.push('timeout must be between 1000 and 300000 milliseconds');\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors\n  };\n}\n\n/**\n * Create a KoreShield client with environment variable defaults\n */\nexport function createClient(config: Partial<KoreShieldConfig> = {}): KoreShieldClient {\n  const baseURL = process.env.KORESHIELD_BASE_URL || config.baseURL;\n  if (!baseURL) {\n    throw new Error('baseURL is required. Set KORESHIELD_BASE_URL environment variable or pass baseURL in config.');\n  }\n\n  const defaultConfig: KoreShieldConfig = {\n    baseURL,\n    apiKey: process.env.KORESHIELD_API_KEY || config.apiKey,\n    timeout: parseInt(process.env.KORESHIELD_TIMEOUT || '30000'),\n    debug: process.env.KORESHIELD_DEBUG === 'true' || config.debug || false,\n    ...config\n  };\n\n  const validation = validateConfig(defaultConfig);\n  if (!validation.valid) {\n    throw new Error(`Invalid configuration: ${validation.errors.join(', ')}`);\n  }\n\n  return new KoreShieldClient(defaultConfig);\n}\n\n/**\n * Sanitize user input for safe LLM processing\n */\nexport function sanitizeInput(input: string): string {\n  // Basic sanitization - remove potentially harmful patterns\n  return input\n    .replace(/<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi, '[SCRIPT REMOVED]')\n    .replace(/javascript:/gi, '[JAVASCRIPT REMOVED]')\n    .replace(/on\\w+\\s*=/gi, '[EVENT REMOVED]')\n    .trim();\n}\n\n/**\n * Check if a response contains potentially unsafe content\n */\nexport function checkResponseSafety(response: string): {\n  safe: boolean;\n  issues: string[];\n  severity: 'low' | 'medium' | 'high';\n} {\n  const issues: string[] = [];\n  let severity: 'low' | 'medium' | 'high' = 'low';\n\n  // Check for code injection patterns\n  if (/<script/i.test(response)) {\n    issues.push('Contains script tags');\n    severity = 'high';\n  }\n\n  // Check for system prompt leakage\n  if (/system prompt|you are an ai|as an ai assistant/i.test(response)) {\n    issues.push('Potential system prompt leakage');\n    severity = 'medium';\n  }\n\n  // Check for harmful instructions\n  if (/how to|step by step|step \\d+|instructions? for/i.test(response) &&\n      /hack|exploit|attack|malware|virus/i.test(response)) {\n    issues.push('Contains potentially harmful instructions');\n    severity = 'high';\n  }\n\n  return {\n    safe: issues.length === 0,\n    issues,\n    severity\n  };\n}\n\n/**\n * Format chat messages for KoreShield\n */\nexport function formatMessages(messages: Array<{ role: string; content: string }>) {\n  return messages.map(msg => ({\n    role: msg.role,\n    content: sanitizeInput(msg.content)\n  }));\n}\n\n/**\n * Sleep utility for rate limiting\n */\nexport function sleep(ms: number): Promise<void> {\n  return new Promise(resolve => setTimeout(resolve, ms));\n}\n\n/**\n * Retry utility with exponential backoff\n */\nexport async function retry<T>(\n  fn: () => Promise<T>,\n  maxRetries: number = 3,\n  baseDelay: number = 1000\n): Promise<T> {\n  let lastError: Error;\n\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    try {\n      return await fn();\n    } catch (error) {\n      lastError = error as Error;\n\n      if (attempt === maxRetries) {\n        break;\n      }\n\n      const delay = baseDelay * Math.pow(2, attempt);\n      await sleep(delay);\n    }\n  }\n\n  throw lastError!;\n}","/**\n * OpenAI-compatible wrapper for KoreShield\n * Provides drop-in replacement for OpenAI SDK\n */\n\nimport { KoreShieldClient } from '../core/client';\nimport {\n  KoreShieldConfig,\n  SecurityOptions,\n  ChatCompletionRequest\n} from '../types';\n\nexport class KoreShieldOpenAI {\n  private client: KoreShieldClient;\n\n  constructor(config: KoreShieldConfig) {\n    this.client = new KoreShieldClient(config);\n  }\n\n  /**\n   * Chat completions API (OpenAI-compatible)\n   */\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  async chat(_completions: any) {\n    return {\n      create: async (request: ChatCompletionRequest, securityOptions?: SecurityOptions) => {\n        return await this.client.createChatCompletion(request, securityOptions);\n      }\n    };\n  }\n\n  /**\n   * Get underlying KoreShield client for advanced operations\n   */\n  getClient(): KoreShieldClient {\n    return this.client;\n  }\n}\n\n/**\n * Factory function to create OpenAI-compatible instance\n */\nexport function createKoreShieldOpenAI(config: KoreShieldConfig): KoreShieldOpenAI {\n  return new KoreShieldOpenAI(config);\n}"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACIA,mBAAoD;;;ACM7C,SAAS,eAAe,QAAgE;AAC7F,QAAM,SAAmB,CAAC;AAE1B,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,KAAK,qBAAqB;AAAA,EACnC,OAAO;AACL,QAAI;AACF,UAAI,IAAI,OAAO,OAAO;AAAA,IACxB,QAAQ;AACN,aAAO,KAAK,6BAA6B;AAAA,IAC3C;AAAA,EACF;AAEA,MAAI,OAAO,YAAY,OAAO,UAAU,OAAQ,OAAO,UAAU,MAAS;AACxE,WAAO,KAAK,sDAAsD;AAAA,EACpE;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB;AAAA,EACF;AACF;AAKO,SAAS,aAAa,SAAoC,CAAC,GAAqB;AACrF,QAAM,UAAU,QAAQ,IAAI,uBAAuB,OAAO;AAC1D,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,8FAA8F;AAAA,EAChH;AAEA,QAAM,gBAAkC;AAAA,IACtC;AAAA,IACA,QAAQ,QAAQ,IAAI,sBAAsB,OAAO;AAAA,IACjD,SAAS,SAAS,QAAQ,IAAI,sBAAsB,OAAO;AAAA,IAC3D,OAAO,QAAQ,IAAI,qBAAqB,UAAU,OAAO,SAAS;AAAA,IAClE,GAAG;AAAA,EACL;AAEA,QAAM,aAAa,eAAe,aAAa;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,UAAM,IAAI,MAAM,0BAA0B,WAAW,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,EAC1E;AAEA,SAAO,IAAI,iBAAiB,aAAa;AAC3C;AAKO,SAAS,cAAc,OAAuB;AAEnD,SAAO,MACJ,QAAQ,uDAAuD,kBAAkB,EACjF,QAAQ,iBAAiB,sBAAsB,EAC/C,QAAQ,eAAe,iBAAiB,EACxC,KAAK;AACV;AAKO,SAAS,oBAAoB,UAIlC;AACA,QAAM,SAAmB,CAAC;AAC1B,MAAI,WAAsC;AAG1C,MAAI,WAAW,KAAK,QAAQ,GAAG;AAC7B,WAAO,KAAK,sBAAsB;AAClC,eAAW;AAAA,EACb;AAGA,MAAI,kDAAkD,KAAK,QAAQ,GAAG;AACpE,WAAO,KAAK,iCAAiC;AAC7C,eAAW;AAAA,EACb;AAGA,MAAI,kDAAkD,KAAK,QAAQ,KAC/D,qCAAqC,KAAK,QAAQ,GAAG;AACvD,WAAO,KAAK,2CAA2C;AACvD,eAAW;AAAA,EACb;AAEA,SAAO;AAAA,IACL,MAAM,OAAO,WAAW;AAAA,IACxB;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,eAAe,UAAoD;AACjF,SAAO,SAAS,IAAI,UAAQ;AAAA,IAC1B,MAAM,IAAI;AAAA,IACV,SAAS,cAAc,IAAI,OAAO;AAAA,EACpC,EAAE;AACJ;AAKO,SAAS,MAAM,IAA2B;AAC/C,SAAO,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AACvD;AAKA,eAAsB,MACpB,IACA,aAAqB,GACrB,YAAoB,KACR;AACZ,MAAI;AAEJ,WAAS,UAAU,GAAG,WAAW,YAAY,WAAW;AACtD,QAAI;AACF,aAAO,MAAM,GAAG;AAAA,IAClB,SAAS,OAAO;AACd,kBAAY;AAEZ,UAAI,YAAY,YAAY;AAC1B;AAAA,MACF;AAEA,YAAM,QAAQ,YAAY,KAAK,IAAI,GAAG,OAAO;AAC7C,YAAM,MAAM,KAAK;AAAA,IACnB;AAAA,EACF;AAEA,QAAM;AACR;;;ADtIO,IAAM,mBAAN,MAAuB;AAAA,EAI5B,YAAY,QAA0B;AACpC,UAAM,aAAa,eAAe,MAAM;AACxC,QAAI,CAAC,WAAW,OAAO;AACrB,YAAM,IAAI,MAAM,0BAA0B,WAAW,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,IAC1E;AAEA,SAAK,SAAS;AAAA,MACZ,SAAS,OAAO;AAAA,MAChB,QAAQ,OAAO,UAAU,QAAQ,IAAI,sBAAsB;AAAA,MAC3D,SAAS,OAAO,WAAW;AAAA,MAC3B,OAAO,OAAO,SAAS;AAAA,MACvB,SAAS,OAAO,WAAW,CAAC;AAAA,IAC9B;AAEA,SAAK,SAAS,aAAAA,QAAM,OAAO;AAAA,MACzB,SAAS,KAAK,OAAO;AAAA,MACrB,SAAS,KAAK,OAAO;AAAA,MACrB,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,cAAc;AAAA,QACd,GAAG,KAAK,OAAO;AAAA,MACjB;AAAA,IACF,CAAC;AAGD,QAAI,KAAK,OAAO,QAAQ;AACtB,WAAK,OAAO,SAAS,QAAQ,OAAO,eAAe,IAAI,UAAU,KAAK,OAAO,MAAM;AAAA,IACrF;AAGA,QAAI,KAAK,OAAO,OAAO;AACrB,WAAK,OAAO,aAAa,QAAQ;AAAA,QAC/B,CAACC,YAAW;AACV,kBAAQ,IAAI,yBAAyBA,QAAO,QAAQ,YAAY,GAAGA,QAAO,GAAG;AAC7E,iBAAOA;AAAA,QACT;AAAA,QACA,CAAC,UAAU;AACT,kBAAQ,MAAM,+BAA+B,KAAK;AAClD,iBAAO,QAAQ,OAAO,KAAK;AAAA,QAC7B;AAAA,MACF;AAEA,WAAK,OAAO,aAAa,SAAS;AAAA,QAChC,CAAC,aAAa;AACZ,kBAAQ,IAAI,0BAA0B,SAAS,QAAQ,SAAS,OAAO,GAAG;AAC1E,iBAAO;AAAA,QACT;AAAA,QACA,CAAC,UAAU;AACT,kBAAQ,MAAM,gCAAgC,MAAM,UAAU,QAAQ,MAAM,UAAU,IAAI;AAC1F,iBAAO,QAAQ,OAAO,KAAK;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,qBACJ,SACA,iBACiC;AACjC,QAAI;AACF,YAAM,UAAU;AAAA,QACd,GAAG;AAAA,QACH,UAAU;AAAA,MACZ;AAEA,YAAM,WAAkD,MAAM,KAAK,OAAO;AAAA,QACxE;AAAA,QACA;AAAA,MACF;AAEA,aAAO,SAAS;AAAA,IAClB,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBACJ,QAAgB,IAChB,SAAiB,GACjB,MACA,UAC0B;AAC1B,QAAI;AACF,YAAM,SAAS,IAAI,gBAAgB;AAAA,QACjC,OAAO,MAAM,SAAS;AAAA,QACtB,QAAQ,OAAO,SAAS;AAAA,MAC1B,CAAC;AAED,UAAI;AAAM,eAAO,OAAO,QAAQ,IAAI;AACpC,UAAI;AAAU,eAAO,OAAO,YAAY,QAAQ;AAEhD,YAAM,WAA2C,MAAM,KAAK,OAAO;AAAA,QACjE,wBAAwB,MAAM;AAAA,MAChC;AAEA,aAAO,SAAS;AAAA,IAClB,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAuC;AAC3C,QAAI;AACF,YAAM,WAA2C,MAAM,KAAK,OAAO,IAAI,cAAc;AACrF,aAAO,SAAS;AAAA,IAClB,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,uBAAwC;AAC5C,QAAI;AACF,YAAM,WAAkC,MAAM,KAAK,OAAO,IAAI,YAAY;AAAA,QACxE,SAAS,EAAE,UAAU,aAAa;AAAA,MACpC,CAAC;AACD,aAAO,SAAS;AAAA,IAClB,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAuE;AAC3E,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,IAAI,SAAS;AAChD,aAAO,SAAS;AAAA,IAClB,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,qBAAqB,SAAyC;AAClE,QAAI;AACF,YAAM,KAAK,OAAO,IAAI,wBAAwB,OAAO;AAAA,IACvD,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAmC;AACvC,QAAI;AACF,YAAM,KAAK,OAAO;AAClB,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,YAAY,OAA6B;AAC/C,UAAM,kBAAmC,IAAI;AAAA,MAC3C,MAAM,UAAU,MAAM,WAAW,MAAM,WAAW;AAAA,IACpD;AAEA,oBAAgB,OAAO,MAAM,UAAU,MAAM,QAAQ;AACrD,oBAAgB,aAAa,MAAM,UAAU;AAC7C,oBAAgB,UAAU,MAAM,UAAU;AAE1C,WAAO;AAAA,EACT;AACF;;;AE3LO,IAAM,mBAAN,MAAuB;AAAA,EAG5B,YAAY,QAA0B;AACpC,SAAK,SAAS,IAAI,iBAAiB,MAAM;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAK,cAAmB;AAC5B,WAAO;AAAA,MACL,QAAQ,OAAO,SAAgC,oBAAsC;AACnF,eAAO,MAAM,KAAK,OAAO,qBAAqB,SAAS,eAAe;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,YAA8B;AAC5B,WAAO,KAAK;AAAA,EACd;AACF;AAKO,SAAS,uBAAuB,QAA4C;AACjF,SAAO,IAAI,iBAAiB,MAAM;AACpC;","names":["axios","config"]}

package/dist/index.mjs

@@ -0,0 +1,286 @@
+// src/core/client.ts
+import axios from "axios";
+
+// src/utils/index.ts
+function validateConfig(config) {
+  const errors = [];
+  if (!config.baseURL) {
+    errors.push("baseURL is required");
+  } else {
+    try {
+      new URL(config.baseURL);
+    } catch {
+      errors.push("baseURL must be a valid URL");
+    }
+  }
+  if (config.timeout && (config.timeout < 1e3 || config.timeout > 3e5)) {
+    errors.push("timeout must be between 1000 and 300000 milliseconds");
+  }
+  return {
+    valid: errors.length === 0,
+    errors
+  };
+}
+function createClient(config = {}) {
+  const baseURL = process.env.KORESHIELD_BASE_URL || config.baseURL;
+  if (!baseURL) {
+    throw new Error("baseURL is required. Set KORESHIELD_BASE_URL environment variable or pass baseURL in config.");
+  }
+  const defaultConfig = {
+    baseURL,
+    apiKey: process.env.KORESHIELD_API_KEY || config.apiKey,
+    timeout: parseInt(process.env.KORESHIELD_TIMEOUT || "30000"),
+    debug: process.env.KORESHIELD_DEBUG === "true" || config.debug || false,
+    ...config
+  };
+  const validation = validateConfig(defaultConfig);
+  if (!validation.valid) {
+    throw new Error(`Invalid configuration: ${validation.errors.join(", ")}`);
+  }
+  return new KoreShieldClient(defaultConfig);
+}
+function sanitizeInput(input) {
+  return input.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, "[SCRIPT REMOVED]").replace(/javascript:/gi, "[JAVASCRIPT REMOVED]").replace(/on\w+\s*=/gi, "[EVENT REMOVED]").trim();
+}
+function checkResponseSafety(response) {
+  const issues = [];
+  let severity = "low";
+  if (/<script/i.test(response)) {
+    issues.push("Contains script tags");
+    severity = "high";
+  }
+  if (/system prompt|you are an ai|as an ai assistant/i.test(response)) {
+    issues.push("Potential system prompt leakage");
+    severity = "medium";
+  }
+  if (/how to|step by step|step \d+|instructions? for/i.test(response) && /hack|exploit|attack|malware|virus/i.test(response)) {
+    issues.push("Contains potentially harmful instructions");
+    severity = "high";
+  }
+  return {
+    safe: issues.length === 0,
+    issues,
+    severity
+  };
+}
+function formatMessages(messages) {
+  return messages.map((msg) => ({
+    role: msg.role,
+    content: sanitizeInput(msg.content)
+  }));
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function retry(fn, maxRetries = 3, baseDelay = 1e3) {
+  let lastError;
+  for (let attempt = 0; attempt <= maxRetries; attempt++) {
+    try {
+      return await fn();
+    } catch (error) {
+      lastError = error;
+      if (attempt === maxRetries) {
+        break;
+      }
+      const delay = baseDelay * Math.pow(2, attempt);
+      await sleep(delay);
+    }
+  }
+  throw lastError;
+}
+
+// src/core/client.ts
+var KoreShieldClient = class {
+  constructor(config) {
+    const validation = validateConfig(config);
+    if (!validation.valid) {
+      throw new Error(`Invalid configuration: ${validation.errors.join(", ")}`);
+    }
+    this.config = {
+      baseURL: config.baseURL,
+      apiKey: config.apiKey || process.env.KORESHIELD_API_KEY || "",
+      timeout: config.timeout || 3e4,
+      debug: config.debug || false,
+      headers: config.headers || {}
+    };
+    this.client = axios.create({
+      baseURL: this.config.baseURL,
+      timeout: this.config.timeout,
+      headers: {
+        "Content-Type": "application/json",
+        "User-Agent": "KoreShield-JS/0.1.0",
+        ...this.config.headers
+      }
+    });
+    if (this.config.apiKey) {
+      this.client.defaults.headers.common["Authorization"] = `Bearer ${this.config.apiKey}`;
+    }
+    if (this.config.debug) {
+      this.client.interceptors.request.use(
+        (config2) => {
+          console.log("[KoreShield] Request:", config2.method?.toUpperCase(), config2.url);
+          return config2;
+        },
+        (error) => {
+          console.error("[KoreShield] Request Error:", error);
+          return Promise.reject(error);
+        }
+      );
+      this.client.interceptors.response.use(
+        (response) => {
+          console.log("[KoreShield] Response:", response.status, response.config.url);
+          return response;
+        },
+        (error) => {
+          console.error("[KoreShield] Response Error:", error.response?.status, error.response?.data);
+          return Promise.reject(error);
+        }
+      );
+    }
+  }
+  /**
+   * Create a chat completion request through KoreShield
+   */
+  async createChatCompletion(request, securityOptions) {
+    try {
+      const payload = {
+        ...request,
+        security: securityOptions
+      };
+      const response = await this.client.post(
+        "/v1/chat/completions",
+        payload
+      );
+      return response.data;
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Get security events/logs
+   */
+  async getSecurityEvents(limit = 50, offset = 0, type, severity) {
+    try {
+      const params = new URLSearchParams({
+        limit: limit.toString(),
+        offset: offset.toString()
+      });
+      if (type)
+        params.append("type", type);
+      if (severity)
+        params.append("severity", severity);
+      const response = await this.client.get(
+        `/api/security/events?${params}`
+      );
+      return response.data;
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Get metrics and statistics
+   */
+  async getMetrics() {
+    try {
+      const response = await this.client.get("/api/metrics");
+      return response.data;
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Get Prometheus metrics in text format
+   */
+  async getPrometheusMetrics() {
+    try {
+      const response = await this.client.get("/metrics", {
+        headers: { "Accept": "text/plain" }
+      });
+      return response.data;
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Health check
+   */
+  async health() {
+    try {
+      const response = await this.client.get("/health");
+      return response.data;
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Update security configuration
+   */
+  async updateSecurityConfig(options) {
+    try {
+      await this.client.put("/api/config/security", options);
+    } catch (error) {
+      throw this.handleError(error);
+    }
+  }
+  /**
+   * Test connection to KoreShield
+   */
+  async testConnection() {
+    try {
+      await this.health();
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  handleError(error) {
+    const koreShieldError = new Error(
+      error.response?.data?.message || error.message || "Unknown error"
+    );
+    koreShieldError.code = error.response?.data?.code || "UNKNOWN_ERROR";
+    koreShieldError.statusCode = error.response?.status;
+    koreShieldError.details = error.response?.data;
+    return koreShieldError;
+  }
+};
+
+// src/providers/openai.ts
+var KoreShieldOpenAI = class {
+  constructor(config) {
+    this.client = new KoreShieldClient(config);
+  }
+  /**
+   * Chat completions API (OpenAI-compatible)
+   */
+  // eslint-disable-next-line @typescript-eslint/no-unused-vars
+  async chat(_completions) {
+    return {
+      create: async (request, securityOptions) => {
+        return await this.client.createChatCompletion(request, securityOptions);
+      }
+    };
+  }
+  /**
+   * Get underlying KoreShield client for advanced operations
+   */
+  getClient() {
+    return this.client;
+  }
+};
+function createKoreShieldOpenAI(config) {
+  return new KoreShieldOpenAI(config);
+}
+export {
+  KoreShieldClient,
+  KoreShieldOpenAI,
+  checkResponseSafety,
+  createClient,
+  createKoreShieldOpenAI,
+  KoreShieldClient as default,
+  formatMessages,
+  retry,
+  sanitizeInput,
+  sleep,
+  validateConfig
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/client.ts","../src/utils/index.ts","../src/providers/openai.ts"],"sourcesContent":["/**\n * KoreShield Core Client\n */\n\nimport axios, { AxiosInstance, AxiosResponse } from 'axios';\nimport {\n  KoreShieldConfig,\n  SecurityOptions,\n  ChatCompletionRequest,\n  ChatCompletionResponse,\n  SecurityEvent,\n  MetricsResponse,\n  KoreShieldError\n} from '../types';\nimport { validateConfig } from '../utils';\n\nexport class KoreShieldClient {\n  private client: AxiosInstance;\n  private config: Required<KoreShieldConfig>;\n\n  constructor(config: KoreShieldConfig) {\n    const validation = validateConfig(config);\n    if (!validation.valid) {\n      throw new Error(`Invalid configuration: ${validation.errors.join(', ')}`);\n    }\n\n    this.config = {\n      baseURL: config.baseURL,\n      apiKey: config.apiKey || process.env.KORESHIELD_API_KEY || '',\n      timeout: config.timeout || 30000,\n      debug: config.debug || false,\n      headers: config.headers || {}\n    };\n\n    this.client = axios.create({\n      baseURL: this.config.baseURL,\n      timeout: this.config.timeout,\n      headers: {\n        'Content-Type': 'application/json',\n        'User-Agent': 'KoreShield-JS/0.1.0',\n        ...this.config.headers\n      }\n    });\n\n    // Add API key to requests if provided\n    if (this.config.apiKey) {\n      this.client.defaults.headers.common['Authorization'] = `Bearer ${this.config.apiKey}`;\n    }\n\n    // Add request/response interceptors for debugging\n    if (this.config.debug) {\n      this.client.interceptors.request.use(\n        (config) => {\n          console.log('[KoreShield] Request:', config.method?.toUpperCase(), config.url);\n          return config;\n        },\n        (error) => {\n          console.error('[KoreShield] Request Error:', error);\n          return Promise.reject(error);\n        }\n      );\n\n      this.client.interceptors.response.use(\n        (response) => {\n          console.log('[KoreShield] Response:', response.status, response.config.url);\n          return response;\n        },\n        (error) => {\n          console.error('[KoreShield] Response Error:', error.response?.status, error.response?.data);\n          return Promise.reject(error);\n        }\n      );\n    }\n  }\n\n  /**\n   * Create a chat completion request through KoreShield\n   */\n  async createChatCompletion(\n    request: ChatCompletionRequest,\n    securityOptions?: SecurityOptions\n  ): Promise<ChatCompletionResponse> {\n    try {\n      const payload = {\n        ...request,\n        security: securityOptions\n      };\n\n      const response: AxiosResponse<ChatCompletionResponse> = await this.client.post(\n        '/v1/chat/completions',\n        payload\n      );\n\n      return response.data;\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Get security events/logs\n   */\n  async getSecurityEvents(\n    limit: number = 50,\n    offset: number = 0,\n    type?: string,\n    severity?: string\n  ): Promise<SecurityEvent[]> {\n    try {\n      const params = new URLSearchParams({\n        limit: limit.toString(),\n        offset: offset.toString()\n      });\n\n      if (type) params.append('type', type);\n      if (severity) params.append('severity', severity);\n\n      const response: AxiosResponse<SecurityEvent[]> = await this.client.get(\n        `/api/security/events?${params}`\n      );\n\n      return response.data;\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Get metrics and statistics\n   */\n  async getMetrics(): Promise<MetricsResponse> {\n    try {\n      const response: AxiosResponse<MetricsResponse> = await this.client.get('/api/metrics');\n      return response.data;\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Get Prometheus metrics in text format\n   */\n  async getPrometheusMetrics(): Promise<string> {\n    try {\n      const response: AxiosResponse<string> = await this.client.get('/metrics', {\n        headers: { 'Accept': 'text/plain' }\n      });\n      return response.data;\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Health check\n   */\n  async health(): Promise<{ status: string; version: string; uptime: number }> {\n    try {\n      const response = await this.client.get('/health');\n      return response.data;\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Update security configuration\n   */\n  async updateSecurityConfig(options: SecurityOptions): Promise<void> {\n    try {\n      await this.client.put('/api/config/security', options);\n    } catch (error: any) {\n      throw this.handleError(error);\n    }\n  }\n\n  /**\n   * Test connection to KoreShield\n   */\n  async testConnection(): Promise<boolean> {\n    try {\n      await this.health();\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  private handleError(error: any): KoreShieldError {\n    const koreShieldError: KoreShieldError = new Error(\n      error.response?.data?.message || error.message || 'Unknown error'\n    ) as KoreShieldError;\n\n    koreShieldError.code = error.response?.data?.code || 'UNKNOWN_ERROR';\n    koreShieldError.statusCode = error.response?.status;\n    koreShieldError.details = error.response?.data;\n\n    return koreShieldError;\n  }\n}","/**\n * KoreShield Utility Functions\n */\n\nimport { KoreShieldClient } from '../core/client';\nimport { KoreShieldConfig } from '../types';\n\n/**\n * Validate KoreShield configuration\n */\nexport function validateConfig(config: KoreShieldConfig): { valid: boolean; errors: string[] } {\n  const errors: string[] = [];\n\n  if (!config.baseURL) {\n    errors.push('baseURL is required');\n  } else {\n    try {\n      new URL(config.baseURL);\n    } catch {\n      errors.push('baseURL must be a valid URL');\n    }\n  }\n\n  if (config.timeout && (config.timeout < 1000 || config.timeout > 300000)) {\n    errors.push('timeout must be between 1000 and 300000 milliseconds');\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors\n  };\n}\n\n/**\n * Create a KoreShield client with environment variable defaults\n */\nexport function createClient(config: Partial<KoreShieldConfig> = {}): KoreShieldClient {\n  const baseURL = process.env.KORESHIELD_BASE_URL || config.baseURL;\n  if (!baseURL) {\n    throw new Error('baseURL is required. Set KORESHIELD_BASE_URL environment variable or pass baseURL in config.');\n  }\n\n  const defaultConfig: KoreShieldConfig = {\n    baseURL,\n    apiKey: process.env.KORESHIELD_API_KEY || config.apiKey,\n    timeout: parseInt(process.env.KORESHIELD_TIMEOUT || '30000'),\n    debug: process.env.KORESHIELD_DEBUG === 'true' || config.debug || false,\n    ...config\n  };\n\n  const validation = validateConfig(defaultConfig);\n  if (!validation.valid) {\n    throw new Error(`Invalid configuration: ${validation.errors.join(', ')}`);\n  }\n\n  return new KoreShieldClient(defaultConfig);\n}\n\n/**\n * Sanitize user input for safe LLM processing\n */\nexport function sanitizeInput(input: string): string {\n  // Basic sanitization - remove potentially harmful patterns\n  return input\n    .replace(/<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi, '[SCRIPT REMOVED]')\n    .replace(/javascript:/gi, '[JAVASCRIPT REMOVED]')\n    .replace(/on\\w+\\s*=/gi, '[EVENT REMOVED]')\n    .trim();\n}\n\n/**\n * Check if a response contains potentially unsafe content\n */\nexport function checkResponseSafety(response: string): {\n  safe: boolean;\n  issues: string[];\n  severity: 'low' | 'medium' | 'high';\n} {\n  const issues: string[] = [];\n  let severity: 'low' | 'medium' | 'high' = 'low';\n\n  // Check for code injection patterns\n  if (/<script/i.test(response)) {\n    issues.push('Contains script tags');\n    severity = 'high';\n  }\n\n  // Check for system prompt leakage\n  if (/system prompt|you are an ai|as an ai assistant/i.test(response)) {\n    issues.push('Potential system prompt leakage');\n    severity = 'medium';\n  }\n\n  // Check for harmful instructions\n  if (/how to|step by step|step \\d+|instructions? for/i.test(response) &&\n      /hack|exploit|attack|malware|virus/i.test(response)) {\n    issues.push('Contains potentially harmful instructions');\n    severity = 'high';\n  }\n\n  return {\n    safe: issues.length === 0,\n    issues,\n    severity\n  };\n}\n\n/**\n * Format chat messages for KoreShield\n */\nexport function formatMessages(messages: Array<{ role: string; content: string }>) {\n  return messages.map(msg => ({\n    role: msg.role,\n    content: sanitizeInput(msg.content)\n  }));\n}\n\n/**\n * Sleep utility for rate limiting\n */\nexport function sleep(ms: number): Promise<void> {\n  return new Promise(resolve => setTimeout(resolve, ms));\n}\n\n/**\n * Retry utility with exponential backoff\n */\nexport async function retry<T>(\n  fn: () => Promise<T>,\n  maxRetries: number = 3,\n  baseDelay: number = 1000\n): Promise<T> {\n  let lastError: Error;\n\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    try {\n      return await fn();\n    } catch (error) {\n      lastError = error as Error;\n\n      if (attempt === maxRetries) {\n        break;\n      }\n\n      const delay = baseDelay * Math.pow(2, attempt);\n      await sleep(delay);\n    }\n  }\n\n  throw lastError!;\n}","/**\n * OpenAI-compatible wrapper for KoreShield\n * Provides drop-in replacement for OpenAI SDK\n */\n\nimport { KoreShieldClient } from '../core/client';\nimport {\n  KoreShieldConfig,\n  SecurityOptions,\n  ChatCompletionRequest\n} from '../types';\n\nexport class KoreShieldOpenAI {\n  private client: KoreShieldClient;\n\n  constructor(config: KoreShieldConfig) {\n    this.client = new KoreShieldClient(config);\n  }\n\n  /**\n   * Chat completions API (OpenAI-compatible)\n   */\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  async chat(_completions: any) {\n    return {\n      create: async (request: ChatCompletionRequest, securityOptions?: SecurityOptions) => {\n        return await this.client.createChatCompletion(request, securityOptions);\n      }\n    };\n  }\n\n  /**\n   * Get underlying KoreShield client for advanced operations\n   */\n  getClient(): KoreShieldClient {\n    return this.client;\n  }\n}\n\n/**\n * Factory function to create OpenAI-compatible instance\n */\nexport function createKoreShieldOpenAI(config: KoreShieldConfig): KoreShieldOpenAI {\n  return new KoreShieldOpenAI(config);\n}"],"mappings":";AAIA,OAAO,WAA6C;;;ACM7C,SAAS,eAAe,QAAgE;AAC7F,QAAM,SAAmB,CAAC;AAE1B,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,KAAK,qBAAqB;AAAA,EACnC,OAAO;AACL,QAAI;AACF,UAAI,IAAI,OAAO,OAAO;AAAA,IACxB,QAAQ;AACN,aAAO,KAAK,6BAA6B;AAAA,IAC3C;AAAA,EACF;AAEA,MAAI,OAAO,YAAY,OAAO,UAAU,OAAQ,OAAO,UAAU,MAAS;AACxE,WAAO,KAAK,sDAAsD;AAAA,EACpE;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB;AAAA,EACF;AACF;AAKO,SAAS,aAAa,SAAoC,CAAC,GAAqB;AACrF,QAAM,UAAU,QAAQ,IAAI,uBAAuB,OAAO;AAC1D,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,8FAA8F;AAAA,EAChH;AAEA,QAAM,gBAAkC;AAAA,IACtC;AAAA,IACA,QAAQ,QAAQ,IAAI,sBAAsB,OAAO;AAAA,IACjD,SAAS,SAAS,QAAQ,IAAI,sBAAsB,OAAO;AAAA,IAC3D,OAAO,QAAQ,IAAI,qBAAqB,UAAU,OAAO,SAAS;AAAA,IAClE,GAAG;AAAA,EACL;AAEA,QAAM,aAAa,eAAe,aAAa;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,UAAM,IAAI,MAAM,0BAA0B,WAAW,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,EAC1E;AAEA,SAAO,IAAI,iBAAiB,aAAa;AAC3C;AAKO,SAAS,cAAc,OAAuB;AAEnD,SAAO,MACJ,QAAQ,uDAAuD,kBAAkB,EACjF,QAAQ,iBAAiB,sBAAsB,EAC/C,QAAQ,eAAe,iBAAiB,EACxC,KAAK;AACV;AAKO,SAAS,oBAAoB,UAIlC;AACA,QAAM,SAAmB,CAAC;AAC1B,MAAI,WAAsC;AAG1C,MAAI,WAAW,KAAK,QAAQ,GAAG;AAC7B,WAAO,KAAK,sBAAsB;AAClC,eAAW;AAAA,EACb;AAGA,MAAI,kDAAkD,KAAK,QAAQ,GAAG;AACpE,WAAO,KAAK,iCAAiC;AAC7C,eAAW;AAAA,EACb;AAGA,MAAI,kDAAkD,KAAK,QAAQ,KAC/D,qCAAqC,KAAK,QAAQ,GAAG;AACvD,WAAO,KAAK,2CAA2C;AACvD,eAAW;AAAA,EACb;AAEA,SAAO;AAAA,IACL,MAAM,OAAO,WAAW;AAAA,IACxB;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,eAAe,UAAoD;AACjF,SAAO,SAAS,IAAI,UAAQ;AAAA,IAC1B,MAAM,IAAI;AAAA,IACV,SAAS,cAAc,IAAI,OAAO;AAAA,EACpC,EAAE;AACJ;AAKO,SAAS,MAAM,IAA2B;AAC/C,SAAO,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AACvD;AAKA,eAAsB,MACpB,IACA,aAAqB,GACrB,YAAoB,KACR;AACZ,MAAI;AAEJ,WAAS,UAAU,GAAG,WAAW,YAAY,WAAW;AACtD,QAAI;AACF,aAAO,MAAM,GAAG;AAAA,IAClB,SAAS,OAAO;AACd,kBAAY;AAEZ,UAAI,YAAY,YAAY;AAC1B;AAAA,MACF;AAEA,YAAM,QAAQ,YAAY,KAAK,IAAI,GAAG,OAAO;AAC7C,YAAM,MAAM,KAAK;AAAA,IACnB;AAAA,EACF;AAEA,QAAM;AACR;;;ADtIO,IAAM,mBAAN,MAAuB;AAAA,EAI5B,YAAY,QAA0B;AACpC,UAAM,aAAa,eAAe,MAAM;AACxC,QAAI,CAAC,WAAW,OAAO;AACrB,YAAM,IAAI,MAAM,0BAA0B,WAAW,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,IAC1E;AAEA,SAAK,SAAS;AAAA,MACZ,SAAS,OAAO;AAAA,MAChB,QAAQ,OAAO,UAAU,QAAQ,IAAI,sBAAsB;AAAA,MAC3D,SAAS,OAAO,WAAW;AAAA,MAC3B,OAAO,OAAO,SAAS;AAAA,MACvB,SAAS,OAAO,WAAW,CAAC;AAAA,IAC9B;AAEA,SAAK,SAAS,MAAM,OAAO;AAAA,MACzB,SAAS,KAAK,OAAO;AAAA,MACrB,SAAS,KAAK,OAAO;AAAA,MACrB,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,cAAc;AAAA,QACd,GAAG,KAAK,OAAO;AAAA,MACjB;AAAA,IACF,CAAC;AAGD,QAAI,KAAK,OAAO,QAAQ;AACtB,WAAK,OAAO,SAAS,QAAQ,OAAO,eAAe,IAAI,UAAU,KAAK,OAAO,MAAM;AAAA,IACrF;AAGA,QAAI,KAAK,OAAO,OAAO;AACrB,WAAK,OAAO,aAAa,QAAQ;AAAA,QAC/B,CAACA,YAAW;AACV,kBAAQ,IAAI,yBAAyBA,QAAO,QAAQ,YAAY,GAAGA,QAAO,GAAG;AAC7E,iBAAOA;AAAA,QACT;AAAA,QACA,CAAC,UAAU;AACT,kBAAQ,MAAM,+BAA+B,KAAK;AAClD,iBAAO,QAAQ,OAAO,KAAK;AAAA,QAC7B;AAAA,MACF;AAEA,WAAK,OAAO,aAAa,SAAS;AAAA,QAChC,CAAC,aAAa;AACZ,kBAAQ,IAAI,0BAA0B,SAAS,QAAQ,SAAS,OAAO,GAAG;AAC1E,iBAAO;AAAA,QACT;AAAA,QACA,CAAC,UAAU;AACT,kBAAQ,MAAM,gCAAgC,MAAM,UAAU,QAAQ,MAAM,UAAU,IAAI;AAC1F,iBAAO,QAAQ,OAAO,KAAK;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,qBACJ,SACA,iBACiC;AACjC,QAAI;AACF,YAAM,UAAU;AAAA,QACd,GAAG;AAAA,QACH,UAAU;AAAA,MACZ;AAEA,YAAM,WAAkD,MAAM,KAAK,OAAO;AAAA,QACxE;AAAA,QACA;AAAA,MACF;AAEA,aAAO,SAAS;AAAA,IAClB,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBACJ,QAAgB,IAChB,SAAiB,GACjB,MACA,UAC0B;AAC1B,QAAI;AACF,YAAM,SAAS,IAAI,gBAAgB;AAAA,QACjC,OAAO,MAAM,SAAS;AAAA,QACtB,QAAQ,OAAO,SAAS;AAAA,MAC1B,CAAC;AAED,UAAI;AAAM,eAAO,OAAO,QAAQ,IAAI;AACpC,UAAI;AAAU,eAAO,OAAO,YAAY,QAAQ;AAEhD,YAAM,WAA2C,MAAM,KAAK,OAAO;AAAA,QACjE,wBAAwB,MAAM;AAAA,MAChC;AAEA,aAAO,SAAS;AAAA,IAClB,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAuC;AAC3C,QAAI;AACF,YAAM,WAA2C,MAAM,KAAK,OAAO,IAAI,cAAc;AACrF,aAAO,SAAS;AAAA,IAClB,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,uBAAwC;AAC5C,QAAI;AACF,YAAM,WAAkC,MAAM,KAAK,OAAO,IAAI,YAAY;AAAA,QACxE,SAAS,EAAE,UAAU,aAAa;AAAA,MACpC,CAAC;AACD,aAAO,SAAS;AAAA,IAClB,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAuE;AAC3E,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,IAAI,SAAS;AAChD,aAAO,SAAS;AAAA,IAClB,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,qBAAqB,SAAyC;AAClE,QAAI;AACF,YAAM,KAAK,OAAO,IAAI,wBAAwB,OAAO;AAAA,IACvD,SAAS,OAAY;AACnB,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAmC;AACvC,QAAI;AACF,YAAM,KAAK,OAAO;AAClB,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,YAAY,OAA6B;AAC/C,UAAM,kBAAmC,IAAI;AAAA,MAC3C,MAAM,UAAU,MAAM,WAAW,MAAM,WAAW;AAAA,IACpD;AAEA,oBAAgB,OAAO,MAAM,UAAU,MAAM,QAAQ;AACrD,oBAAgB,aAAa,MAAM,UAAU;AAC7C,oBAAgB,UAAU,MAAM,UAAU;AAE1C,WAAO;AAAA,EACT;AACF;;;AE3LO,IAAM,mBAAN,MAAuB;AAAA,EAG5B,YAAY,QAA0B;AACpC,SAAK,SAAS,IAAI,iBAAiB,MAAM;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAK,cAAmB;AAC5B,WAAO;AAAA,MACL,QAAQ,OAAO,SAAgC,oBAAsC;AACnF,eAAO,MAAM,KAAK,OAAO,qBAAqB,SAAS,eAAe;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,YAA8B;AAC5B,WAAO,KAAK;AAAA,EACd;AACF;AAKO,SAAS,uBAAuB,QAA4C;AACjF,SAAO,IAAI,iBAAiB,MAAM;AACpC;","names":["config"]}