@n8n/n8n-nodes-langchain 2.5.1 → 2.6.0

package/dist/nodes/Guardrails/actions/checks/secretKeys.js

@@ -1,201 +1,177 @@
 "use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var secretKeys_exports = {};
-__export(secretKeys_exports, {
-  createSecretKeysCheckFn: () => createSecretKeysCheckFn,
-  secretKeysCheck: () => secretKeysCheck
-});
-module.exports = __toCommonJS(secretKeys_exports);
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSecretKeysCheckFn = exports.secretKeysCheck = void 0;
 const COMMON_KEY_PREFIXES = [
-  "key-",
-  "sk-",
-  "sk_",
-  "pk_",
-  "pk-",
-  "ghp_",
-  "AKIA",
-  "xox",
-  "SG.",
-  "hf_",
-  "api-",
-  "apikey-",
-  "token-",
-  "secret-",
-  "SHA:",
-  "Bearer "
+    'key-',
+    'sk-',
+    'sk_',
+    'pk_',
+    'pk-',
+    'ghp_',
+    'AKIA',
+    'xox',
+    'SG.',
+    'hf_',
+    'api-',
+    'apikey-',
+    'token-',
+    'secret-',
+    'SHA:',
+    'Bearer ',
 ];
 const ALLOWED_EXTENSIONS = [
-  ".py",
-  ".js",
-  ".html",
-  ".css",
-  ".json",
-  ".md",
-  ".txt",
-  ".csv",
-  ".xml",
-  ".yaml",
-  ".yml",
-  ".ini",
-  ".conf",
-  ".config",
-  ".log",
-  ".sql",
-  ".sh",
-  ".bat",
-  ".dll",
-  ".so",
-  ".dylib",
-  ".jar",
-  ".war",
-  ".php",
-  ".rb",
-  ".go",
-  ".rs",
-  ".ts",
-  ".jsx",
-  ".vue",
-  ".cpp",
-  ".c",
-  ".h",
-  ".cs",
-  ".fs",
-  ".vb",
-  ".doc",
-  ".docx",
-  ".xls",
-  ".xlsx",
-  ".ppt",
-  ".pptx",
-  ".pdf",
-  ".jpg",
-  ".jpeg",
-  ".png"
+    '.py',
+    '.js',
+    '.html',
+    '.css',
+    '.json',
+    '.md',
+    '.txt',
+    '.csv',
+    '.xml',
+    '.yaml',
+    '.yml',
+    '.ini',
+    '.conf',
+    '.config',
+    '.log',
+    '.sql',
+    '.sh',
+    '.bat',
+    '.dll',
+    '.so',
+    '.dylib',
+    '.jar',
+    '.war',
+    '.php',
+    '.rb',
+    '.go',
+    '.rs',
+    '.ts',
+    '.jsx',
+    '.vue',
+    '.cpp',
+    '.c',
+    '.h',
+    '.cs',
+    '.fs',
+    '.vb',
+    '.doc',
+    '.docx',
+    '.xls',
+    '.xlsx',
+    '.ppt',
+    '.pptx',
+    '.pdf',
+    '.jpg',
+    '.jpeg',
+    '.png',
 ];
 const CONFIGS = {
-  strict: {
-    min_length: 10,
-    min_entropy: 3,
-    // Lowered from 3.5 to be more reasonable
-    min_diversity: 2,
-    strict_mode: true
-  },
-  balanced: {
-    min_length: 10,
-    // Lowered to catch more common keys
-    min_entropy: 3.8,
-    min_diversity: 3,
-    strict_mode: false
-  },
-  permissive: {
-    min_length: 30,
-    min_entropy: 4,
-    min_diversity: 2,
-    // Lowered from 3 to be more reasonable
-    strict_mode: false
-  }
+    strict: {
+        min_length: 10,
+        min_entropy: 3.0,
+        min_diversity: 2,
+        strict_mode: true,
+    },
+    balanced: {
+        min_length: 10,
+        min_entropy: 3.8,
+        min_diversity: 3,
+        strict_mode: false,
+    },
+    permissive: {
+        min_length: 30,
+        min_entropy: 4.0,
+        min_diversity: 2,
+        strict_mode: false,
+    },
 };
 function entropy(s) {
-  if (s.length === 0) return 0;
-  const counts = {};
-  for (const c of s) {
-    counts[c] = (counts[c] || 0) + 1;
-  }
-  let entropy2 = 0;
-  for (const count of Object.values(counts)) {
-    const probability = count / s.length;
-    entropy2 -= probability * Math.log2(probability);
-  }
-  return entropy2;
+    if (s.length === 0)
+        return 0;
+    const counts = {};
+    for (const c of s) {
+        counts[c] = (counts[c] || 0) + 1;
+    }
+    let entropy = 0;
+    for (const count of Object.values(counts)) {
+        const probability = count / s.length;
+        entropy -= probability * Math.log2(probability);
+    }
+    return entropy;
 }
 function charDiversity(s) {
-  return [
-    s.split("").some((c) => c === c.toLowerCase() && c !== c.toUpperCase()),
-    // lowercase
-    s.split("").some((c) => c === c.toUpperCase() && c !== c.toLowerCase()),
-    // uppercase
-    s.split("").some((c) => /\d/.test(c)),
-    // digits
-    s.split("").some((c) => !/\w/.test(c))
-    // special characters
-  ].filter(Boolean).length;
+    return [
+        s
+            .split('')
+            .some((c) => c === c.toLowerCase() && c !== c.toUpperCase()),
+        s
+            .split('')
+            .some((c) => c === c.toUpperCase() && c !== c.toLowerCase()),
+        s
+            .split('')
+            .some((c) => /\d/.test(c)),
+        s
+            .split('')
+            .some((c) => !/\w/.test(c)),
+    ].filter(Boolean).length;
 }
 function containsAllowedPattern(text) {
-  const urlPattern = /^https?:\/\/[a-zA-Z0-9.-]+\/?[a-zA-Z0-9.\/_-]*$/i;
-  if (urlPattern.test(text)) {
-    if (COMMON_KEY_PREFIXES.some((prefix) => text.includes(prefix))) {
-      return false;
+    const urlPattern = /^https?:\/\/[a-zA-Z0-9.-]+\/?[a-zA-Z0-9.\/_-]*$/i;
+    if (urlPattern.test(text)) {
+        if (COMMON_KEY_PREFIXES.some((prefix) => text.includes(prefix))) {
+            return false;
+        }
+        return true;
     }
-    return true;
-  }
-  const extPattern = new RegExp(
-    `^[^\\s]*(${ALLOWED_EXTENSIONS.map((ext) => ext.replace(".", "\\.")).join("|")})$`,
-    "i"
-  );
-  return extPattern.test(text);
+    const extPattern = new RegExp(`^[^\\s]*(${ALLOWED_EXTENSIONS.map((ext) => ext.replace('.', '\\.')).join('|')})$`, 'i');
+    return extPattern.test(text);
 }
 function isSecretCandidate(s, cfg, customRegex) {
-  if (customRegex) {
-    for (const pattern of customRegex) {
-      try {
-        const regex = new RegExp(pattern);
-        if (regex.test(s)) {
-          return true;
+    if (customRegex) {
+        for (const pattern of customRegex) {
+            try {
+                const regex = new RegExp(pattern);
+                if (regex.test(s)) {
+                    return true;
+                }
+            }
+            catch {
+                continue;
+            }
         }
-      } catch {
-        continue;
-      }
     }
-  }
-  if (!cfg.strict_mode && containsAllowedPattern(s)) {
-    return false;
-  }
-  const longEnough = s.length >= cfg.min_length;
-  const diverse = charDiversity(s) >= cfg.min_diversity;
-  if (COMMON_KEY_PREFIXES.some((prefix) => s.startsWith(prefix))) {
-    return true;
-  }
-  if (!(longEnough && diverse)) {
-    return false;
-  }
-  return entropy(s) >= cfg.min_entropy;
+    if (!cfg.strict_mode && containsAllowedPattern(s)) {
+        return false;
+    }
+    const longEnough = s.length >= cfg.min_length;
+    const diverse = charDiversity(s) >= cfg.min_diversity;
+    if (COMMON_KEY_PREFIXES.some((prefix) => s.startsWith(prefix))) {
+        return true;
+    }
+    if (!(longEnough && diverse)) {
+        return false;
+    }
+    return entropy(s) >= cfg.min_entropy;
 }
 function detectSecretKeys(text, cfg, config) {
-  const words = text.split(/\s+/).map((w) => w.replace(/[*#]/g, ""));
-  const secrets = words.filter((w) => isSecretCandidate(w, cfg, config.customRegex));
-  return {
-    guardrailName: "secretKeys",
-    tripwireTriggered: secrets.length > 0,
-    info: {
-      maskEntities: { SECRET: secrets },
-      detectedSecrets: secrets
-    }
-  };
+    const words = text.split(/\s+/).map((w) => w.replace(/[*#]/g, ''));
+    const secrets = words.filter((w) => isSecretCandidate(w, cfg, config.customRegex));
+    return {
+        guardrailName: 'secretKeys',
+        tripwireTriggered: secrets.length > 0,
+        info: {
+            maskEntities: { SECRET: secrets },
+            detectedSecrets: secrets,
+        },
+    };
 }
 const secretKeysCheck = (data, config) => {
-  const cfg = CONFIGS[config.threshold];
-  return detectSecretKeys(data, cfg, config);
+    const cfg = CONFIGS[config.threshold];
+    return detectSecretKeys(data, cfg, config);
 };
-const createSecretKeysCheckFn = (config) => (input) => secretKeysCheck(input, config);
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  createSecretKeysCheckFn,
-  secretKeysCheck
-});
+exports.secretKeysCheck = secretKeysCheck;
+const createSecretKeysCheckFn = (config) => (input) => (0, exports.secretKeysCheck)(input, config);
+exports.createSecretKeysCheckFn = createSecretKeysCheckFn;
 //# sourceMappingURL=secretKeys.js.map

package/dist/nodes/Guardrails/actions/checks/secretKeys.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../nodes/Guardrails/actions/checks/secretKeys.ts"],"sourcesContent":["/**\n * Secret key detection guardrail module.\n *\n * This module provides functions and configuration for detecting potential API keys,\n * secrets, and credentials in text. It includes entropy and diversity checks, pattern\n * recognition, and a guardrail check_fn for runtime enforcement.\n */\n\nimport type { CreateCheckFn, GuardrailResult } from '../types';\n\nexport type SecretKeysConfig = {\n\tthreshold: 'strict' | 'balanced' | 'permissive';\n\tcustomRegex?: string[];\n};\n\n/**\n * Common key prefixes used in secret keys.\n */\nconst COMMON_KEY_PREFIXES = [\n\t'key-',\n\t'sk-',\n\t'sk_',\n\t'pk_',\n\t'pk-',\n\t'ghp_',\n\t'AKIA',\n\t'xox',\n\t'SG.',\n\t'hf_',\n\t'api-',\n\t'apikey-',\n\t'token-',\n\t'secret-',\n\t'SHA:',\n\t'Bearer ',\n];\n\n/**\n * File extensions to ignore when strict_mode is False.\n */\nconst ALLOWED_EXTENSIONS = [\n\t'.py',\n\t'.js',\n\t'.html',\n\t'.css',\n\t'.json',\n\t'.md',\n\t'.txt',\n\t'.csv',\n\t'.xml',\n\t'.yaml',\n\t'.yml',\n\t'.ini',\n\t'.conf',\n\t'.config',\n\t'.log',\n\t'.sql',\n\t'.sh',\n\t'.bat',\n\t'.dll',\n\t'.so',\n\t'.dylib',\n\t'.jar',\n\t'.war',\n\t'.php',\n\t'.rb',\n\t'.go',\n\t'.rs',\n\t'.ts',\n\t'.jsx',\n\t'.vue',\n\t'.cpp',\n\t'.c',\n\t'.h',\n\t'.cs',\n\t'.fs',\n\t'.vb',\n\t'.doc',\n\t'.docx',\n\t'.xls',\n\t'.xlsx',\n\t'.ppt',\n\t'.pptx',\n\t'.pdf',\n\t'.jpg',\n\t'.jpeg',\n\t'.png',\n];\n\n/**\n * Configuration presets for different sensitivity levels.\n */\nconst CONFIGS: Record<\n\tstring,\n\t{\n\t\tmin_length: number;\n\t\tmin_entropy: number;\n\t\tmin_diversity: number;\n\t\tstrict_mode: boolean;\n\t}\n> = {\n\tstrict: {\n\t\tmin_length: 10,\n\t\tmin_entropy: 3.0, // Lowered from 3.5 to be more reasonable\n\t\tmin_diversity: 2,\n\t\tstrict_mode: true,\n\t},\n\tbalanced: {\n\t\tmin_length: 10, // Lowered to catch more common keys\n\t\tmin_entropy: 3.8,\n\t\tmin_diversity: 3,\n\t\tstrict_mode: false,\n\t},\n\tpermissive: {\n\t\tmin_length: 30,\n\t\tmin_entropy: 4.0,\n\t\tmin_diversity: 2, // Lowered from 3 to be more reasonable\n\t\tstrict_mode: false,\n\t},\n};\n\n/**\n * Calculate the Shannon entropy of a string.\n */\nfunction entropy(s: string): number {\n\tif (s.length === 0) return 0;\n\n\tconst counts: Record<string, number> = {};\n\tfor (const c of s) {\n\t\tcounts[c] = (counts[c] || 0) + 1;\n\t}\n\n\tlet entropy = 0;\n\tfor (const count of Object.values(counts)) {\n\t\tconst probability = count / s.length;\n\t\tentropy -= probability * Math.log2(probability);\n\t}\n\n\treturn entropy;\n}\n\n/**\n * Count the number of character types present in a string.\n */\nfunction charDiversity(s: string): number {\n\treturn [\n\t\ts\n\t\t\t.split('')\n\t\t\t.some((c) => c === c.toLowerCase() && c !== c.toUpperCase()), // lowercase\n\t\ts\n\t\t\t.split('')\n\t\t\t.some((c) => c === c.toUpperCase() && c !== c.toLowerCase()), // uppercase\n\t\ts\n\t\t\t.split('')\n\t\t\t.some((c) => /\\d/.test(c)), // digits\n\t\ts\n\t\t\t.split('')\n\t\t\t.some((c) => !/\\w/.test(c)), // special characters\n\t].filter(Boolean).length;\n}\n\n/**\n * Check if text contains allowed URL or file extension patterns.\n */\nfunction containsAllowedPattern(text: string): boolean {\n\t// Check if it's a URL pattern\n\tconst urlPattern = /^https?:\\/\\/[a-zA-Z0-9.-]+\\/?[a-zA-Z0-9.\\/_-]*$/i;\n\tif (urlPattern.test(text)) {\n\t\t// If it's a URL, check if it contains any secret patterns\n\t\t// If it contains secrets, don't allow it\n\t\tif (COMMON_KEY_PREFIXES.some((prefix) => text.includes(prefix))) {\n\t\t\treturn false;\n\t\t}\n\t\treturn true;\n\t}\n\n\t// Regex for allowed file extensions - must end with the extension\n\tconst extPattern = new RegExp(\n\t\t`^[^\\\\s]*(${ALLOWED_EXTENSIONS.map((ext) => ext.replace('.', '\\\\.')).join('|')})$`,\n\t\t'i',\n\t);\n\treturn extPattern.test(text);\n}\n\n/**\n * Check if a string is a secret key using the specified criteria.\n */\nfunction isSecretCandidate(\n\ts: string,\n\tcfg: (typeof CONFIGS)[keyof typeof CONFIGS],\n\tcustomRegex?: string[],\n): boolean {\n\t// Check custom patterns first if provided\n\tif (customRegex) {\n\t\tfor (const pattern of customRegex) {\n\t\t\ttry {\n\t\t\t\tconst regex = new RegExp(pattern);\n\t\t\t\tif (regex.test(s)) {\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\t// Invalid regex pattern, skip\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\t}\n\n\tif (!cfg.strict_mode && containsAllowedPattern(s)) {\n\t\treturn false;\n\t}\n\n\tconst longEnough = s.length >= cfg.min_length;\n\tconst diverse = charDiversity(s) >= cfg.min_diversity;\n\n\t// Check common prefixes first - these should always be detected\n\tif (COMMON_KEY_PREFIXES.some((prefix) => s.startsWith(prefix))) {\n\t\treturn true;\n\t}\n\n\t// For other candidates, check length and diversity\n\tif (!(longEnough && diverse)) {\n\t\treturn false;\n\t}\n\n\treturn entropy(s) >= cfg.min_entropy;\n}\n\n/**\n * Detect potential secret keys in text.\n */\nfunction detectSecretKeys(\n\ttext: string,\n\tcfg: (typeof CONFIGS)[keyof typeof CONFIGS],\n\tconfig: SecretKeysConfig,\n): GuardrailResult {\n\tconst words = text.split(/\\s+/).map((w) => w.replace(/[*#]/g, ''));\n\tconst secrets = words.filter((w) => isSecretCandidate(w, cfg, config.customRegex));\n\n\treturn {\n\t\tguardrailName: 'secretKeys',\n\t\ttripwireTriggered: secrets.length > 0,\n\t\tinfo: {\n\t\t\tmaskEntities: { SECRET: secrets },\n\t\t\tdetectedSecrets: secrets,\n\t\t},\n\t};\n}\n\n/**\n * Async guardrail function for secret key and credential detection.\n *\n * Scans the input for likely secrets or credentials (e.g., API keys, tokens)\n * using entropy, diversity, and pattern rules.\n *\n * @param data Input text to scan.\n * @param config Configuration for secret detection.\n * @returns GuardrailResult indicating if secrets were detected, with findings in info.\n */\nexport const secretKeysCheck = (data: string, config: SecretKeysConfig): GuardrailResult => {\n\tconst cfg = CONFIGS[config.threshold];\n\treturn detectSecretKeys(data, cfg, config);\n};\n\nexport const createSecretKeysCheckFn: CreateCheckFn<SecretKeysConfig> =\n\t(config) => (input: string) =>\n\t\tsecretKeysCheck(input, config);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkBA,MAAM,sBAAsB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAKA,MAAM,qBAAq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aAAa;AAAA;AAAA,IACb,eAAe;AAAA,IACf,aAAa;AAAA,EACd;AAAA,EACA,UAAU;AAAA,IACT,YAAY;AAAA;AAAA,IACZ,aAAa;AAAA,IACb,eAAe;AAAA,IACf,aAAa;AAAA,EACd;AAAA,EACA,YAAY;AAAA,IACX,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,eAAe;AAAA;AAAA,IACf,aAAa;AAAA,EACd;AACD;AAKA,SAAS,QAAQ,GAAmB;AACnC,MAAI,EAAE,WAAW,EAAG,QAAO;AAE3B,QAAM,SAAiC,CAAC;AACxC,aAAW,KAAK,GAAG;AAClB,WAAO,CAAC,KAAK,OAAO,CAAC,KAAK,KAAK;AAAA,EAChC;AAEA,MAAIA,WAAU;AACd,aAAW,SAAS,OAAO,OAAO,MAAM,GAAG;AAC1C,UAAM,cAAc,QAAQ,EAAE;AAC9B,IAAAA,YAAW,cAAc,KAAK,KAAK,WAAW;AAAA,EAC/C;AAEA,SAAOA;AACR;AAKA,SAAS,cAAc,GAAmB;AACzC,SAAO;AAAA,IACN,EACE,MAAM,EAAE,EACR,KAAK,CAAC,MAAM,MAAM,EAAE,YAAY,KAAK,MAAM,EAAE,YAAY,CAAC;AAAA;AAAA,IAC5D,EACE,MAAM,EAAE,EACR,KAAK,CAAC,MAAM,MAAM,EAAE,YAAY,KAAK,MAAM,EAAE,YAAY,CAAC;AAAA;AAAA,IAC5D,EACE,MAAM,EAAE,EACR,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AAAA;AAAA,IAC1B,EACE,MAAM,EAAE,EACR,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC;AAAA;AAAA,EAC5B,EAAE,OAAO,OAAO,EAAE;AACnB;AAKA,SAAS,uBAAuB,MAAuB;AAEtD,QAAM,aAAa;AACnB,MAAI,WAAW,KAAK,IAAI,GAAG;AAG1B,QAAI,oBAAoB,KAAK,CAAC,WAAW,KAAK,SAAS,MAAM,CAAC,GAAG;AAChE,aAAO;AAAA,IACR;AACA,WAAO;AAAA,EACR;AAGA,QAAM,aAAa,IAAI;AAAA,IACtB,YAAY,mBAAmB,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC;AAAA,IAC9E;AAAA,EACD;AACA,SAAO,WAAW,KAAK,IAAI;AAC5B;AAKA,SAAS,kBACR,GACA,KACA,aACU;AAEV,MAAI,aAAa;AAChB,eAAW,WAAW,aAAa;AAClC,UAAI;AACH,cAAM,QAAQ,IAAI,OAAO,OAAO;AAChC,YAAI,MAAM,KAAK,CAAC,GAAG;AAClB,iBAAO;AAAA,QACR;AAAA,MACD,QAAQ;AAEP;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAEA,MAAI,CAAC,IAAI,eAAe,uBAAuB,CAAC,GAAG;AAClD,WAAO;AAAA,EACR;AAEA,QAAM,aAAa,EAAE,UAAU,IAAI;AACnC,QAAM,UAAU,cAAc,CAAC,KAAK,IAAI;AAGxC,MAAI,oBAAoB,KAAK,CAAC,WAAW,EAAE,WAAW,MAAM,CAAC,GAAG;AAC/D,WAAO;AAAA,EACR;AAGA,MAAI,EAAE,cAAc,UAAU;AAC7B,WAAO;AAAA,EACR;AAEA,SAAO,QAAQ,CAAC,KAAK,IAAI;AAC1B;AAKA,SAAS,iBACR,MACA,KACA,QACkB;AAClB,QAAM,QAAQ,KAAK,MAAM,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,SAAS,EAAE,CAAC;AACjE,QAAM,UAAU,MAAM,OAAO,CAAC,MAAM,kBAAkB,GAAG,KAAK,OAAO,WAAW,CAAC;AAEjF,SAAO;AAAA,IACN,eAAe;AAAA,IACf,mBAAmB,QAAQ,SAAS;AAAA,IACpC,MAAM;AAAA,MACL,cAAc,EAAE,QAAQ,QAAQ;AAAA,MAChC,iBAAiB;AAAA,IAClB;AAAA,EACD;AACD;AAYO,MAAM,kBAAkB,CAAC,MAAc,WAA8C;AAC3F,QAAM,MAAM,QAAQ,OAAO,SAAS;AACpC,SAAO,iBAAiB,MAAM,KAAK,MAAM;AAC1C;AAEO,MAAM,0BACZ,CAAC,WAAW,CAAC,UACZ,gBAAgB,OAAO,MAAM;","names":["entropy"]}
+{"version":3,"file":"secretKeys.js","sourceRoot":"","sources":["../../../../../nodes/Guardrails/actions/checks/secretKeys.ts"],"names":[],"mappings":";;;AAkBA,MAAM,mBAAmB,GAAG;IAC3B,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,SAAS;IACT,QAAQ;IACR,SAAS;IACT,MAAM;IACN,SAAS;CACT,CAAC;AAKF,MAAM,kBAAkB,GAAG;IAC1B,KAAK;IACL,KAAK;IACL,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,SAAS;IACT,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;CACN,CAAC;AAKF,MAAM,OAAO,GAQT;IACH,MAAM,EAAE;QACP,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,IAAI;KACjB;IACD,QAAQ,EAAE;QACT,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,KAAK;KAClB;IACD,UAAU,EAAE;QACX,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,KAAK;KAClB;CACD,CAAC;AAKF,SAAS,OAAO,CAAC,CAAS;IACzB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAE7B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;QACrC,OAAO,IAAI,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAKD,SAAS,aAAa,CAAC,CAAS;IAC/B,OAAO;QACN,CAAC;aACC,KAAK,CAAC,EAAE,CAAC;aACT,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,CAAC;aACC,KAAK,CAAC,EAAE,CAAC;aACT,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,CAAC;aACC,KAAK,CAAC,EAAE,CAAC;aACT,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;aACC,KAAK,CAAC,EAAE,CAAC;aACT,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAC5B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AAC1B,CAAC;AAKD,SAAS,sBAAsB,CAAC,IAAY;IAE3C,MAAM,UAAU,GAAG,kDAAkD,CAAC;IACtE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAG3B,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAGD,MAAM,UAAU,GAAG,IAAI,MAAM,CAC5B,YAAY,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAClF,GAAG,CACH,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAKD,SAAS,iBAAiB,CACzB,CAAS,EACT,GAA2C,EAC3C,WAAsB;IAGtB,IAAI,WAAW,EAAE,CAAC;QACjB,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC;gBACJ,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnB,OAAO,IAAI,CAAC;gBACb,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBAER,SAAS;YACV,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC;IAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC;IAGtD,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACb,CAAC;IAGD,IAAI,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC;AACtC,CAAC;AAKD,SAAS,gBAAgB,CACxB,IAAY,EACZ,GAA2C,EAC3C,MAAwB;IAExB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAEnF,OAAO;QACN,aAAa,EAAE,YAAY;QAC3B,iBAAiB,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;QACrC,IAAI,EAAE;YACL,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YACjC,eAAe,EAAE,OAAO;SACxB;KACD,CAAC;AACH,CAAC;AAYM,MAAM,eAAe,GAAG,CAAC,IAAY,EAAE,MAAwB,EAAmB,EAAE;IAC1F,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC,CAAC;AAHW,QAAA,eAAe,mBAG1B;AAEK,MAAM,uBAAuB,GACnC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE,CAC7B,IAAA,uBAAe,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAFpB,QAAA,uBAAuB,2BAEH"}

package/dist/nodes/Guardrails/actions/checks/topicalAlignment.d.ts

@@ -0,0 +1,3 @@
+import type { CreateCheckFn, LLMConfig } from '../types';
+export declare const TOPICAL_ALIGNMENT_SYSTEM_PROMPT = "You are a content analysis system that determines if text stays on topic.\n\nBUSINESS SCOPE: [INSERT BUSINESS SCOPE HERE]\n\nDetermine if the text stays within the defined business scope. Flag any content\nthat strays from the allowed topics.";
+export declare const createTopicalAlignmentCheckFn: CreateCheckFn<LLMConfig>;

package/dist/nodes/Guardrails/actions/checks/topicalAlignment.js

@@ -1,38 +1,13 @@
 "use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var topicalAlignment_exports = {};
-__export(topicalAlignment_exports, {
-  TOPICAL_ALIGNMENT_SYSTEM_PROMPT: () => TOPICAL_ALIGNMENT_SYSTEM_PROMPT,
-  createTopicalAlignmentCheckFn: () => createTopicalAlignmentCheckFn
-});
-module.exports = __toCommonJS(topicalAlignment_exports);
-var import_model = require("../../helpers/model");
-const TOPICAL_ALIGNMENT_SYSTEM_PROMPT = `You are a content analysis system that determines if text stays on topic.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTopicalAlignmentCheckFn = exports.TOPICAL_ALIGNMENT_SYSTEM_PROMPT = void 0;
+const model_1 = require("../../helpers/model");
+exports.TOPICAL_ALIGNMENT_SYSTEM_PROMPT = `You are a content analysis system that determines if text stays on topic.
 
 BUSINESS SCOPE: [INSERT BUSINESS SCOPE HERE]
 
 Determine if the text stays within the defined business scope. Flag any content
 that strays from the allowed topics.`;
-const createTopicalAlignmentCheckFn = (config) => (0, import_model.createLLMCheckFn)("topicalAlignment", config);
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  TOPICAL_ALIGNMENT_SYSTEM_PROMPT,
-  createTopicalAlignmentCheckFn
-});
+const createTopicalAlignmentCheckFn = (config) => (0, model_1.createLLMCheckFn)('topicalAlignment', config);
+exports.createTopicalAlignmentCheckFn = createTopicalAlignmentCheckFn;
 //# sourceMappingURL=topicalAlignment.js.map

package/dist/nodes/Guardrails/actions/checks/topicalAlignment.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../nodes/Guardrails/actions/checks/topicalAlignment.ts"],"sourcesContent":["import { createLLMCheckFn } from '../../helpers/model';\nimport type { CreateCheckFn, LLMConfig } from '../types';\n\nexport const TOPICAL_ALIGNMENT_SYSTEM_PROMPT = `You are a content analysis system that determines if text stays on topic.\n\nBUSINESS SCOPE: [INSERT BUSINESS SCOPE HERE]\n\nDetermine if the text stays within the defined business scope. Flag any content\nthat strays from the allowed topics.`;\n\nexport const createTopicalAlignmentCheckFn: CreateCheckFn<LLMConfig> = (config) =>\n\tcreateLLMCheckFn('topicalAlignment', config);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAiC;AAG1B,MAAM,kCAAkC;AAAA;AAAA;AAAA;AAAA;AAAA;AAOxC,MAAM,gCAA0D,CAAC,eACvE,+BAAiB,oBAAoB,MAAM;","names":[]}
+{"version":3,"file":"topicalAlignment.js","sourceRoot":"","sources":["../../../../../nodes/Guardrails/actions/checks/topicalAlignment.ts"],"names":[],"mappings":";;;AAAA,+CAAuD;AAG1C,QAAA,+BAA+B,GAAG;;;;;qCAKV,CAAC;AAE/B,MAAM,6BAA6B,GAA6B,CAAC,MAAM,EAAE,EAAE,CACjF,IAAA,wBAAgB,EAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AADjC,QAAA,6BAA6B,iCACI"}

package/dist/nodes/Guardrails/actions/checks/urls.d.ts

@@ -0,0 +1,9 @@
+import type { CreateCheckFn, GuardrailResult } from '../types';
+export type UrlsConfig = {
+    allowedUrls: string[];
+    allowedSchemes: string[];
+    blockUserinfo: boolean;
+    allowSubdomains: boolean;
+};
+export declare const urls: (data: string, config: UrlsConfig) => GuardrailResult;
+export declare const createUrlsCheckFn: CreateCheckFn<UrlsConfig>;