@promptguardapp/mcp 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Krish Ojha
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,86 @@
+# PromptGuard
+
+> A local-first Model Context Protocol (MCP) server that scans developer prompts for secrets, personally identifiable information, and cost before they reach the language model. Includes prompt compression and structural feedback.
+
+## What it does
+
+PromptGuard plugs into Claude Desktop (or any MCP-compatible client) and exposes four tools:
+
+- `scan_prompt`: detects 22 patterns of sensitive data including AWS keys, GitHub tokens, OpenAI / Anthropic / Stripe / Slack keys, credit cards (Luhn validated), US SSNs, Indian Aadhaar (Verhoeff validated), PAN, GSTIN, UPI handles, IFSC codes, emails, and phone numbers. Sub-millisecond scans, with per-finding explanations.
+- `optimize_prompt`: suggests a cleaner version of a prompt with structural feedback (missing task verb, missing output format). Stays silent on already-good prompts.
+- `compress_prompt`: aggressive token reduction with three levels (light, medium, aggressive). Preserves code blocks. Realistic 10 to 25 percent savings on typical prompts.
+- `estimate_cost`: token count and dollar estimate across Claude (Opus, Sonnet, Haiku) and OpenAI (GPT-4o, GPT-4o-mini). Uses the correct tokenizer per model (o200k_base for GPT-4o, cl100k_base for older OpenAI and as an approximation for Claude).
+
+All analysis runs on the user's machine. No prompt content is transmitted to external services.
+
+## Installation
+
+The simplest setup uses `npx`, no manual install required. Add this block to Claude Desktop's MCP config at `~/Library/Application Support/Claude/claude_desktop_config.json` (create the file if it does not exist):
+
+```json
+{
+  "mcpServers": {
+    "promptguard": {
+      "command": "npx",
+      "args": ["-y", "@promptguardapp/mcp"]
+    }
+  }
+}
+```
+
+Restart Claude Desktop. The PromptGuard tools become available immediately.
+
+If `node` or `npx` are not on Claude Desktop's PATH (common when Node is installed via nvm), use the absolute path:
+
+```json
+{
+  "mcpServers": {
+    "promptguard": {
+      "command": "/absolute/path/to/npx",
+      "args": ["-y", "@promptguardapp/mcp"]
+    }
+  }
+}
+```
+
+To find your npx path, run `which npx` in a terminal.
+
+## Usage in Claude
+
+Ask Claude to use any of the tools by name. For example:
+
+- "Use the scan_prompt tool on this text: ..."
+- "Use compress_prompt on this prompt at aggressive level."
+- "Use estimate_cost to compare gpt-4o-mini and claude-sonnet-4-6 for this prompt."
+
+Claude will call the appropriate tool and present the result.
+
+## Requirements
+
+- Node.js 20 or later
+- Claude Desktop, or any other MCP-compatible client
+
+## Development
+
+Clone the repository if you want to contribute or run from source:
+
+```bash
+git clone https://github.com/KrishOjha1810/promptguard-mcp.git
+cd promptguard-mcp
+npm install
+npm run build
+npm test
+```
+
+Scripts available:
+
+```bash
+npm run dev        # Run from source via tsx
+npm run build      # Compile to dist/
+npm run test       # Run the test suite
+npm run typecheck  # Type check without emitting
+```
+
+## License
+
+MIT. See [LICENSE](./LICENSE) for the full text.

package/dist/compress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compress.js","sourceRoot":"","sources":["../src/compress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAqBxC,MAAM,mBAAmB,GAAmB;IAC1C,iCAAiC;IACjC,EAAE,OAAO,EAAE,mDAAmD,EAAE,WAAW,EAAE,EAAE,EAAE;IACjF,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,EAAE,EAAE;IAC9C,EAAE,OAAO,EAAE,yCAAyC,EAAE,WAAW,EAAE,EAAE,EAAE;IACvE;QACE,OAAO,EACL,4FAA4F;QAC9F,WAAW,EAAE,EAAE;KAChB;IACD;QACE,OAAO,EACL,wGAAwG;QAC1G,WAAW,EAAE,EAAE;KAChB;IACD,EAAE,OAAO,EAAE,qEAAqE,EAAE,WAAW,EAAE,EAAE,EAAE;IACnG;QACE,OAAO,EAAE,wFAAwF;QACjG,WAAW,EAAE,EAAE;KAChB;IACD,EAAE,OAAO,EAAE,qDAAqD,EAAE,WAAW,EAAE,EAAE,EAAE;IAEnF,kBAAkB;IAClB,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,IAAI,EAAE;IACnD,EAAE,OAAO,EAAE,4BAA4B,EAAE,WAAW,EAAE,SAAS,EAAE;IACjE,EAAE,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,KAAK,EAAE;IAC9D,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,IAAI,EAAE;IAC1D,EAAE,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,IAAI,EAAE;IACzD,EAAE,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,OAAO,EAAE;IAC3D,EAAE,OAAO,EAAE,oDAAoD,EAAE,WAAW,EAAE,MAAM,EAAE;IAEtF,UAAU;IACV,EAAE,OAAO,EAAE,2DAA2D,EAAE,WAAW,EAAE,EAAE,EAAE;IACzF;QACE,OAAO,EACL,2EAA2E;QAC7E,WAAW,EAAE,EAAE;KAChB;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAmB;IAC3C,GAAG,mBAAmB;IACtB,8CAA8C;IAC9C,EAAE,OAAO,EAAE,+EAA+E,EAAE,WAAW,EAAE,EAAE,EAAE;IAC7G,iBAAiB;IACjB,EAAE,OAAO,EAAE,qFAAqF,EAAE,WAAW,EAAE,EAAE,EAAE;IACnH,EAAE,OAAO,EAAE,0EAA0E,EAAE,WAAW,EAAE,EAAE,EAAE;IACxG,kCAAkC;IAClC,EAAE,OAAO,EAAE,iDAAiD,EAAE,WAAW,EAAE,EAAE,EAAE;CAChF,CAAC;AAEF,MAAM,wBAAwB,GAAmB;IAC/C,GAAG,oBAAoB;IACvB,wEAAwE;IACxE,EAAE,OAAO,EAAE,yEAAyE,EAAE,WAAW,EAAE,KAAK,EAAE;IAC1G,2BAA2B;IAC3B,EAAE,OAAO,EAAE,qDAAqD,EAAE,WAAW,EAAE,EAAE,EAAE;IACnF,gCAAgC;IAChC,EAAE,OAAO,EAAE,yFAAyF,EAAE,WAAW,EAAE,EAAE,EAAE;IACvH,qBAAqB;IACrB,EAAE,OAAO,EAAE,oDAAoD,EAAE,WAAW,EAAE,EAAE,EAAE;CACnF,CAAC;AAEF,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,QAA0B,QAAQ;IAElC,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAEzC,yEAAyE;IACzE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;QACtD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,cAAc,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GACR,KAAK,KAAK,OAAO;QACf,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,KAAK,KAAK,QAAQ;YAClB,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,wBAAwB,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,GAAG,OAAO,CAAC,OAAO,CACvB,oBAAoB,EACpB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAChD,CAAC;IAEF,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAErC,0DAA0D;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,gBAAgB,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,cAAc,GAAG,gBAAgB,CAAC;IACtD,MAAM,YAAY,GAChB,cAAc,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,cAAc,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC;IAE/D,MAAM,cAAc,GAAqC;QACvD,KAAK,EACH,qGAAqG;QACvG,MAAM,EACJ,+HAA+H;QACjI,UAAU,EACR,oMAAoM;KACvM,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,OAAO;QACvB,cAAc;QACd,gBAAgB;QAChB,WAAW;QACX,YAAY;QACZ,KAAK;QACL,mBAAmB,EAAE,UAAU,CAAC,MAAM;QACtC,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC;KAC/B,CAAC;AACJ,CAAC"}

package/dist/cost.js

@@ -0,0 +1,71 @@
+import { getEncoding } from "js-tiktoken";
+// GPT-4o family uses o200k_base, an updated tokenizer that produces different
+// token counts than cl100k_base for the same text. Claude models do not expose
+// their tokenizer; cl100k_base is a close approximation flagged below.
+const ENCODING_BY_MODEL = {
+    "claude-opus-4-7": "cl100k_base",
+    "claude-sonnet-4-6": "cl100k_base",
+    "claude-haiku-4-5": "cl100k_base",
+    "gpt-4o": "o200k_base",
+    "gpt-4o-mini": "o200k_base",
+};
+// USD per 1,000,000 tokens. Update as model pricing changes.
+const PRICING = {
+    "claude-opus-4-7": { input: 15, output: 75 },
+    "claude-sonnet-4-6": { input: 3, output: 15 },
+    "claude-haiku-4-5": { input: 0.8, output: 4 },
+    "gpt-4o": { input: 2.5, output: 10 },
+    "gpt-4o-mini": { input: 0.15, output: 0.6 },
+};
+const PRICING_LAST_UPDATED = "2026-05-23";
+const _encodings = new Map();
+function getEnc(name) {
+    const cached = _encodings.get(name);
+    if (cached)
+        return cached;
+    const fresh = getEncoding(name);
+    _encodings.set(name, fresh);
+    return fresh;
+}
+/**
+ * Count tokens for a piece of text. If a model is given, the tokenizer that
+ * matches that model is used (exact for OpenAI, approximate for Claude). If
+ * not given, cl100k_base is used as a sensible default for generic comparisons.
+ */
+export function countTokens(text, model) {
+    const encoding = model
+        ? ENCODING_BY_MODEL[model]
+        : "cl100k_base";
+    return getEnc(encoding).encode(text).length;
+}
+export function estimateCost(text, model, expectedOutputTokens) {
+    const inputTokens = countTokens(text, model);
+    const outputTokens = expectedOutputTokens !== undefined
+        ? expectedOutputTokens
+        : Math.min(inputTokens, 1024);
+    const price = PRICING[model];
+    const inputCost = (inputTokens / 1_000_000) * price.input;
+    const outputCost = (outputTokens / 1_000_000) * price.output;
+    return {
+        model,
+        inputTokens,
+        estimatedOutputTokens: outputTokens,
+        inputCostUsd: round(inputCost, 6),
+        estimatedOutputCostUsd: round(outputCost, 6),
+        totalEstimatedUsd: round(inputCost + outputCost, 6),
+        approximate: model.startsWith("claude-"),
+        pricingLastUpdated: PRICING_LAST_UPDATED,
+    };
+}
+function round(n, decimals) {
+    const factor = Math.pow(10, decimals);
+    return Math.round(n * factor) / factor;
+}
+export const SUPPORTED_MODELS = [
+    "claude-opus-4-7",
+    "claude-sonnet-4-6",
+    "claude-haiku-4-5",
+    "gpt-4o",
+    "gpt-4o-mini",
+];
+//# sourceMappingURL=cost.js.map

package/dist/cost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.js","sourceRoot":"","sources":["../src/cost.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAiB,MAAM,aAAa,CAAC;AAWzD,8EAA8E;AAC9E,+EAA+E;AAC/E,uEAAuE;AACvE,MAAM,iBAAiB,GAAyC;IAC9D,iBAAiB,EAAE,aAAa;IAChC,mBAAmB,EAAE,aAAa;IAClC,kBAAkB,EAAE,aAAa;IACjC,QAAQ,EAAE,YAAY;IACtB,aAAa,EAAE,YAAY;CAC5B,CAAC;AAiBF,6DAA6D;AAC7D,MAAM,OAAO,GAA8D;IACzE,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;IAC7C,kBAAkB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE;IAC7C,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;IACpC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;CAC5C,CAAC;AAEF,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAE1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;AACrD,SAAS,MAAM,CAAC,IAAkB;IAChC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAsB;IAC9D,MAAM,QAAQ,GAAiB,KAAK;QAClC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAC1B,CAAC,CAAC,aAAa,CAAC;IAClB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,KAAqB,EACrB,oBAA6B;IAE7B,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,YAAY,GAChB,oBAAoB,KAAK,SAAS;QAChC,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAElC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1D,MAAM,UAAU,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAE7D,OAAO;QACL,KAAK;QACL,WAAW;QACX,qBAAqB,EAAE,YAAY;QACnC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACjC,sBAAsB,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5C,iBAAiB,EAAE,KAAK,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC,CAAC;QACnD,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QACxC,kBAAkB,EAAE,oBAAoB;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,CAAS,EAAE,QAAgB;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAqB;IAChD,iBAAiB;IACjB,mBAAmB;IACnB,kBAAkB;IAClB,QAAQ;IACR,aAAa;CACd,CAAC"}

package/dist/detectors/pii-rules.js

@@ -0,0 +1,159 @@
+export function luhnCheck(input) {
+    const digits = input.replace(/[\s-]/g, "");
+    if (digits.length < 13 || digits.length > 19)
+        return false;
+    if (!/^\d+$/.test(digits))
+        return false;
+    let sum = 0;
+    let alternate = false;
+    for (let i = digits.length - 1; i >= 0; i--) {
+        let n = parseInt(digits[i], 10);
+        if (alternate) {
+            n *= 2;
+            if (n > 9)
+                n = (n % 10) + 1;
+        }
+        sum += n;
+        alternate = !alternate;
+    }
+    return sum % 10 === 0;
+}
+// Verhoeff checksum algorithm. Used by Aadhaar numbers to detect typos.
+const VERHOEFF_D = [
+    [0, 1, 2, 3, 4, 5, 6, 7, 8, 9],
+    [1, 2, 3, 4, 0, 6, 7, 8, 9, 5],
+    [2, 3, 4, 0, 1, 7, 8, 9, 5, 6],
+    [3, 4, 0, 1, 2, 8, 9, 5, 6, 7],
+    [4, 0, 1, 2, 3, 9, 5, 6, 7, 8],
+    [5, 9, 8, 7, 6, 0, 4, 3, 2, 1],
+    [6, 5, 9, 8, 7, 1, 0, 4, 3, 2],
+    [7, 6, 5, 9, 8, 2, 1, 0, 4, 3],
+    [8, 7, 6, 5, 9, 3, 2, 1, 0, 4],
+    [9, 8, 7, 6, 5, 4, 3, 2, 1, 0],
+];
+const VERHOEFF_P = [
+    [0, 1, 2, 3, 4, 5, 6, 7, 8, 9],
+    [1, 5, 7, 6, 2, 8, 3, 0, 9, 4],
+    [5, 8, 0, 3, 7, 9, 6, 1, 4, 2],
+    [8, 9, 1, 6, 0, 4, 3, 5, 2, 7],
+    [9, 4, 5, 3, 1, 2, 6, 8, 7, 0],
+    [4, 2, 8, 6, 5, 7, 3, 9, 0, 1],
+    [2, 7, 9, 3, 8, 0, 6, 4, 1, 5],
+    [7, 0, 4, 6, 9, 1, 3, 2, 5, 8],
+];
+export function verhoeffCheck(input) {
+    const digits = input.replace(/[\s-]/g, "");
+    if (digits.length !== 12)
+        return false;
+    if (!/^[2-9]\d{11}$/.test(digits))
+        return false;
+    let c = 0;
+    const reversed = digits.split("").reverse();
+    for (let i = 0; i < reversed.length; i++) {
+        const digit = parseInt(reversed[i], 10);
+        c = VERHOEFF_D[c][VERHOEFF_P[i % 8][digit]];
+    }
+    return c === 0;
+}
+export const PII_RULES = [
+    // --------------------------------------------------------------------
+    // Universal PII
+    // --------------------------------------------------------------------
+    {
+        id: "email_address",
+        name: "Email Address",
+        pattern: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g,
+        severity: "medium",
+        confidence: 0.85,
+        explanation: "Email address detected. Sharing real user or customer emails in prompts is a privacy risk.",
+    },
+    {
+        id: "credit_card",
+        name: "Credit Card Number",
+        pattern: /\b(?:\d[ -]?){13,19}\b/g,
+        severity: "critical",
+        confidence: 0.9,
+        explanation: "Credit card number (Luhn-validated). Sharing card numbers in prompts violates PCI compliance and exposes the cardholder.",
+        validator: luhnCheck,
+    },
+    // --------------------------------------------------------------------
+    // US-specific PII
+    // --------------------------------------------------------------------
+    {
+        id: "us_phone_number",
+        name: "US Phone Number",
+        pattern: /\b(?:\+?1[-.\s]?)?\(?[2-9]\d{2}\)?[-.\s]\d{3}[-.\s]\d{4}\b/g,
+        severity: "medium",
+        confidence: 0.75,
+        explanation: "US phone number detected. May identify an individual customer or employee.",
+    },
+    {
+        id: "us_ssn",
+        name: "US Social Security Number",
+        pattern: /\b(?!000|666|9\d{2})\d{3}-(?!00)\d{2}-(?!0000)\d{4}\b/g,
+        severity: "critical",
+        confidence: 0.9,
+        explanation: "US social security number detected. Sharing SSNs in prompts is a serious privacy and regulatory risk.",
+    },
+    // --------------------------------------------------------------------
+    // India-specific PII
+    // --------------------------------------------------------------------
+    {
+        id: "india_mobile_number",
+        name: "Indian Mobile Number",
+        // 10-digit number starting 6-9, optionally prefixed with +91 / 91 / 0,
+        // optionally split as 5+5 with a hyphen or space.
+        pattern: /\b(?:(?:\+|00)?91[-.\s]?)?[6-9]\d{4}[-.\s]?\d{5}\b/g,
+        severity: "medium",
+        confidence: 0.75,
+        explanation: "Indian mobile number detected. May identify an individual customer or employee.",
+    },
+    {
+        id: "india_aadhaar",
+        name: "Aadhaar Number",
+        // 12 digits starting 2-9, optionally split as 4-4-4 with spaces or hyphens.
+        // Verhoeff checksum applied as a validator below.
+        pattern: /\b[2-9]\d{3}[-\s]?\d{4}[-\s]?\d{4}\b/g,
+        severity: "critical",
+        confidence: 0.95,
+        explanation: "Aadhaar number (Verhoeff-validated). Sharing Aadhaar is a serious privacy and regulatory risk under Indian data protection law.",
+        validator: verhoeffCheck,
+    },
+    {
+        id: "india_pan",
+        name: "Indian PAN (Permanent Account Number)",
+        // 5 letters + 4 digits + 1 letter (e.g. ABCDE1234F).
+        pattern: /\b[A-Z]{5}\d{4}[A-Z]\b/g,
+        severity: "high",
+        confidence: 0.85,
+        explanation: "Indian PAN detected. The PAN is the primary tax identifier in India and should not appear in prompts.",
+    },
+    {
+        id: "india_gstin",
+        name: "Indian GSTIN",
+        // 2 digit state code + 10 char PAN + entity digit + Z + checksum char.
+        pattern: /\b\d{2}[A-Z]{5}\d{4}[A-Z]\dZ[0-9A-Z]\b/g,
+        severity: "medium",
+        confidence: 0.9,
+        explanation: "Indian GSTIN detected. While less sensitive than PAN, this can link a business or proprietor to filings.",
+    },
+    {
+        id: "india_upi_id",
+        name: "Indian UPI ID",
+        // username@handle where the handle has no dot, distinguishing it from email.
+        pattern: /\b[A-Za-z0-9._-]+@[a-z]{2,20}\b(?!\.)/g,
+        severity: "high",
+        confidence: 0.85,
+        explanation: "Indian UPI ID detected. UPI handles link directly to bank accounts and payment flows.",
+    },
+    {
+        id: "india_ifsc",
+        name: "Indian IFSC Code",
+        // 4 letters (bank code) + '0' + 6 alphanumeric (branch code).
+        pattern: /\b[A-Z]{4}0[A-Z0-9]{6}\b/g,
+        severity: "medium",
+        confidence: 0.9,
+        explanation: "Indian IFSC code detected. Identifies a specific bank branch, sensitive when combined with an account number.",
+    },
+];
+//# sourceMappingURL=pii-rules.js.map

package/dist/detectors/pii-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-rules.js","sourceRoot":"","sources":["../../src/detectors/pii-rules.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAExC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,SAAS,EAAE,CAAC;YACd,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,SAAS,GAAG,CAAC,SAAS,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,GAAG;IACjB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;CAC/B,CAAC;AAEF,MAAM,UAAU,GAAG;IACjB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;CAC/B,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAW;IAC/B,uEAAuE;IACvE,gBAAgB;IAChB,uEAAuE;IACvE;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,qDAAqD;QAC9D,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,4FAA4F;KAC/F;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,GAAG;QACf,WAAW,EACT,0HAA0H;QAC5H,SAAS,EAAE,SAAS;KACrB;IAED,uEAAuE;IACvE,kBAAkB;IAClB,uEAAuE;IACvE;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,6DAA6D;QACtE,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,4EAA4E;KAC/E;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,wDAAwD;QACjE,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,GAAG;QACf,WAAW,EACT,uGAAuG;KAC1G;IAED,uEAAuE;IACvE,qBAAqB;IACrB,uEAAuE;IACvE;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,sBAAsB;QAC5B,uEAAuE;QACvE,kDAAkD;QAClD,OAAO,EACL,qDAAqD;QACvD,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,iFAAiF;KACpF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,gBAAgB;QACtB,4EAA4E;QAC5E,kDAAkD;QAClD,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,iIAAiI;QACnI,SAAS,EAAE,aAAa;KACzB;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,uCAAuC;QAC7C,qDAAqD;QACrD,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,uGAAuG;KAC1G;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,cAAc;QACpB,uEAAuE;QACvE,OAAO,EAAE,yCAAyC;QAClD,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,GAAG;QACf,WAAW,EACT,0GAA0G;KAC7G;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,eAAe;QACrB,6EAA6E;QAC7E,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,uFAAuF;KAC1F;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,kBAAkB;QACxB,8DAA8D;QAC9D,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,GAAG;QACf,WAAW,EACT,+GAA+G;KAClH;CACF,CAAC"}

package/dist/detectors/rules.js

@@ -0,0 +1,99 @@
+export const SECRET_RULES = [
+    {
+        id: "aws_access_key_id",
+        name: "AWS Access Key ID",
+        pattern: /\b(AKIA|ABIA|ACCA|AGPA|AIDA|AIPA|ANPA|ANVA|AROA|APKA|ASCA|ASIA)[0-9A-Z]{16}\b/g,
+        severity: "critical",
+        confidence: 0.95,
+        explanation: "AWS access key identifier. Grants programmatic access to AWS resources and should not appear in prompts.",
+    },
+    {
+        id: "github_pat_classic",
+        name: "GitHub Personal Access Token (classic)",
+        pattern: /\bghp_[A-Za-z0-9]{36}\b/g,
+        severity: "critical",
+        confidence: 0.99,
+        explanation: "GitHub classic personal access token. Grants repository and API access tied to the issuing user.",
+    },
+    {
+        id: "github_pat_fine_grained",
+        name: "GitHub Fine-grained Personal Access Token",
+        pattern: /\bgithub_pat_[A-Za-z0-9_]{82}\b/g,
+        severity: "critical",
+        confidence: 0.99,
+        explanation: "GitHub fine-grained personal access token. Grants scoped API access tied to the issuing user.",
+    },
+    {
+        id: "github_oauth_token",
+        name: "GitHub OAuth Access Token",
+        pattern: /\bgho_[A-Za-z0-9]{36}\b/g,
+        severity: "critical",
+        confidence: 0.99,
+        explanation: "GitHub OAuth access token. Grants user-level API access through an OAuth application.",
+    },
+    {
+        id: "openai_api_key",
+        name: "OpenAI API Key",
+        pattern: /\bsk-[A-Za-z0-9]{20}T3BlbkFJ[A-Za-z0-9]{20}\b|\bsk-proj-[A-Za-z0-9_-]{74,}\b|\bsk-svcacct-[A-Za-z0-9_-]{40,}\b/g,
+        severity: "critical",
+        confidence: 0.95,
+        explanation: "OpenAI API key. Authorizes access to an OpenAI account and incurs billing on use.",
+    },
+    {
+        id: "anthropic_api_key",
+        name: "Anthropic API Key",
+        pattern: /\bsk-ant-api03-[A-Za-z0-9_-]{93}AA\b/g,
+        severity: "critical",
+        confidence: 0.99,
+        explanation: "Anthropic API key. Authorizes access to an Anthropic account and incurs billing on use.",
+    },
+    {
+        id: "stripe_live_secret_key",
+        name: "Stripe Live Secret Key",
+        pattern: /\b(?:sk|rk)_live_[A-Za-z0-9]{24,}\b/g,
+        severity: "critical",
+        confidence: 0.99,
+        explanation: "Stripe live secret key. Authorizes charges and refunds against live customer accounts.",
+    },
+    {
+        id: "stripe_test_secret_key",
+        name: "Stripe Test Secret Key",
+        pattern: /\b(?:sk|rk)_test_[A-Za-z0-9]{24,}\b/g,
+        severity: "high",
+        confidence: 0.99,
+        explanation: "Stripe test secret key. Sandbox use only, but should still be kept private.",
+    },
+    {
+        id: "slack_bot_token",
+        name: "Slack Bot Token",
+        pattern: /\bxoxb-[0-9]{10,13}-[0-9]{10,13}-[A-Za-z0-9]{24}\b/g,
+        severity: "high",
+        confidence: 0.95,
+        explanation: "Slack bot token. Grants access to a Slack workspace as a bot identity.",
+    },
+    {
+        id: "slack_user_token",
+        name: "Slack User Token",
+        pattern: /\bxoxp-[0-9]{10,13}-[0-9]{10,13}-[0-9]{10,13}-[A-Za-z0-9]{32}\b/g,
+        severity: "high",
+        confidence: 0.95,
+        explanation: "Slack user token. Grants access to a Slack workspace as a specific user.",
+    },
+    {
+        id: "google_api_key",
+        name: "Google API Key",
+        pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g,
+        severity: "high",
+        confidence: 0.9,
+        explanation: "Google API key. Used for Google Cloud and Google Workspace APIs.",
+    },
+    {
+        id: "pem_private_key",
+        name: "PEM-encoded Private Key",
+        pattern: /-----BEGIN(?: [A-Z]+)? PRIVATE KEY-----/g,
+        severity: "critical",
+        confidence: 0.99,
+        explanation: "Private key in PEM format. Private keys must never be shared or transmitted.",
+    },
+];
+//# sourceMappingURL=rules.js.map

package/dist/detectors/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/detectors/rules.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAW;IAClC;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EACL,gFAAgF;QAClF,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,0GAA0G;KAC7G;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,kGAAkG;KACrG;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,2CAA2C;QACjD,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,+FAA+F;KAClG;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,uFAAuF;KAC1F;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EACL,iHAAiH;QACnH,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,mFAAmF;KACtF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,yFAAyF;KAC5F;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,wFAAwF;KAC3F;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,6EAA6E;KAChF;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,qDAAqD;QAC9D,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,wEAAwE;KAC3E;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,kEAAkE;QAC3E,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,0EAA0E;KAC7E;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,GAAG;QACf,WAAW,EACT,kEAAkE;KACrE;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,0CAA0C;QACnD,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EACT,8EAA8E;KACjF;CACF,CAAC"}

package/dist/detectors/secrets.js

@@ -0,0 +1,49 @@
+import { SECRET_RULES } from "./rules.js";
+import { PII_RULES } from "./pii-rules.js";
+const ALL_RULES = [...SECRET_RULES, ...PII_RULES];
+export function scanText(text) {
+    const start = performance.now();
+    const findings = [];
+    for (const rule of ALL_RULES) {
+        rule.pattern.lastIndex = 0;
+        let match;
+        while ((match = rule.pattern.exec(text)) !== null) {
+            const matched = match[0];
+            if (rule.validator && !rule.validator(matched))
+                continue;
+            findings.push({
+                type: rule.id,
+                rule: rule.name,
+                severity: rule.severity,
+                start: match.index,
+                end: match.index + matched.length,
+                matched,
+                confidence: rule.confidence,
+                explanation: rule.explanation,
+            });
+        }
+    }
+    findings.sort((a, b) => a.start - b.start);
+    const redactedText = buildRedactedText(text, findings);
+    return {
+        findings,
+        redactedText,
+        scanMs: performance.now() - start,
+        rulesRun: ALL_RULES.length,
+    };
+}
+// Backwards-compatible alias. Older callers used this name.
+export const scanForSecrets = scanText;
+function buildRedactedText(text, findings) {
+    if (findings.length === 0)
+        return text;
+    let result = text;
+    const sorted = [...findings].sort((a, b) => b.start - a.start);
+    for (const finding of sorted) {
+        const marker = `[REDACTED:${finding.type}]`;
+        result =
+            result.slice(0, finding.start) + marker + result.slice(finding.end);
+    }
+    return result;
+}
+//# sourceMappingURL=secrets.js.map

package/dist/detectors/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/detectors/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,MAAM,SAAS,GAAW,CAAC,GAAG,YAAY,EAAE,GAAG,SAAS,CAAC,CAAC;AAE1D,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3B,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,SAAS;YACzD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,EAAE;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM;gBACjC,OAAO;gBACP,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAE3C,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEvD,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;QACjC,QAAQ,EAAE,SAAS,CAAC,MAAM;KAC3B,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEvC,SAAS,iBAAiB,CAAC,IAAY,EAAE,QAAmB;IAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/D,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,aAAa,OAAO,CAAC,IAAI,GAAG,CAAC;QAC5C,MAAM;YACJ,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/index.js

@@ -0,0 +1,256 @@
+#!/usr/bin/env node
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { scanText } from "./detectors/secrets.js";
+import { estimateCost, SUPPORTED_MODELS, } from "./cost.js";
+import { optimizePrompt } from "./optimize.js";
+import { compressPrompt } from "./compress.js";
+const PROMPTGUARD_VERSION = "0.0.1";
+const server = new Server({
+    name: "promptguard",
+    version: PROMPTGUARD_VERSION,
+}, {
+    capabilities: {
+        tools: {},
+    },
+});
+server.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: [
+        {
+            name: "ping",
+            description: "Hello-world tool that confirms the PromptGuard MCP server is alive. Returns 'pong' with the server version.",
+            inputSchema: {
+                type: "object",
+                properties: {},
+            },
+        },
+        {
+            name: "scan_prompt",
+            description: "Scan a prompt for secrets, API keys, credentials, and personally identifiable information (emails, phone numbers, credit cards, SSNs) before it is sent to the language model. Returns findings with location, severity, and a human-readable explanation, plus an optional redacted version of the input.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    text: {
+                        type: "string",
+                        description: "The prompt text to scan.",
+                    },
+                    mode: {
+                        type: "string",
+                        enum: ["warn", "redact"],
+                        description: "Return raw matches (warn) or replace each finding with a placeholder (redact). Defaults to warn.",
+                    },
+                },
+                required: ["text"],
+            },
+        },
+        {
+            name: "optimize_prompt",
+            description: "Suggest a tightened version of a prompt by removing filler, verbose phrases, and hedging, and by flagging missing structure such as no task verb or no output format. Stays silent (shouldSuggest:false) on prompts that are already concise. Returns the original and the suggested rewrite side by side along with estimated token savings.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    text: {
+                        type: "string",
+                        description: "The prompt text to optimize.",
+                    },
+                },
+                required: ["text"],
+            },
+        },
+        {
+            name: "compress_prompt",
+            description: "Aggressively compress a prompt to save tokens. Strips filler, hedging, connector adverbs, and at the aggressive level rewrites question-style openers and drops articles. Use when the goal is fewer tokens (rate limits, cost), not clarity. For polite tightening with structural feedback, use optimize_prompt instead. Realistic savings are 10 to 25 percent depending on input and level; viral claims of 60 percent or more measure narrow output slices, not full sessions.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    text: {
+                        type: "string",
+                        description: "The prompt text to compress.",
+                    },
+                    level: {
+                        type: "string",
+                        enum: ["light", "medium", "aggressive"],
+                        description: "How aggressive to be. Light: only obvious filler. Medium: also connector adverbs and meta-commentary. Aggressive: also drops articles after task verbs and restates question patterns. Defaults to medium.",
+                    },
+                },
+                required: ["text"],
+            },
+        },
+        {
+            name: "estimate_cost",
+            description: "Estimate the token count and dollar cost of a prompt for a specific model before sending it. Useful for previewing the cost of large prompts, bulk operations, or deciding which model to use.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    text: {
+                        type: "string",
+                        description: "The prompt text to measure.",
+                    },
+                    model: {
+                        type: "string",
+                        enum: SUPPORTED_MODELS,
+                        description: "The target model for the estimate.",
+                    },
+                    expectedOutputTokens: {
+                        type: "number",
+                        description: "Optional override for expected output token count. When omitted, defaults to min(inputTokens, 1024).",
+                    },
+                },
+                required: ["text", "model"],
+            },
+        },
+    ],
+}));
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    if (request.params.name === "ping") {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `pong from PromptGuard v${PROMPTGUARD_VERSION}`,
+                },
+            ],
+        };
+    }
+    if (request.params.name === "scan_prompt") {
+        const args = (request.params.arguments ?? {});
+        if (typeof args.text !== "string") {
+            throw new Error("scan_prompt requires a 'text' string argument.");
+        }
+        const result = scanText(args.text);
+        const mode = args.mode ?? "warn";
+        const summary = result.findings.length === 0
+            ? "No secrets or sensitive data detected."
+            : `Found ${result.findings.length} potential issue${result.findings.length === 1 ? "" : "s"}:\n\n` +
+                result.findings
+                    .map((f, i) => `${i + 1}. [${f.severity.toUpperCase()}] ${f.rule}\n` +
+                    `   Position ${f.start}-${f.end} (length ${f.end - f.start})\n` +
+                    `   Why: ${f.explanation}`)
+                    .join("\n\n");
+        const payload = {
+            findings: result.findings,
+            redactedText: mode === "redact" ? result.redactedText : args.text,
+            scanMs: Math.round(result.scanMs * 100) / 100,
+            rulesRun: result.rulesRun,
+        };
+        return {
+            content: [
+                { type: "text", text: summary },
+                {
+                    type: "text",
+                    text: "```json\n" + JSON.stringify(payload, null, 2) + "\n```",
+                },
+            ],
+        };
+    }
+    if (request.params.name === "optimize_prompt") {
+        const args = (request.params.arguments ?? {});
+        if (typeof args.text !== "string") {
+            throw new Error("optimize_prompt requires a 'text' string argument.");
+        }
+        const result = optimizePrompt(args.text);
+        let summary;
+        if (!result.shouldSuggest) {
+            summary = "Prompt looks good. No changes recommended.";
+        }
+        else {
+            const removed = result.optimizations
+                .filter((o) => o.after.length === 0)
+                .map((o) => `"${o.before.trim()}"`);
+            const rewritten = result.optimizations
+                .filter((o) => o.after.length > 0)
+                .map((o) => `"${o.before.trim()}" to "${o.after.trim()}"`);
+            const TIP_LABELS = {
+                missing_task_verb: "start with a direct verb (such as Write, Explain, Generate)",
+                missing_output_format: "specify the output format (such as bulleted list, JSON, or markdown)",
+            };
+            const tipParts = result.structuralIssues.map((i) => TIP_LABELS[i.type] ?? i.description);
+            summary =
+                `Suggested rewrite (saved ${result.tokensSaved} tokens, ${result.percentSaved}% leaner):\n\n` +
+                    `> ${result.optimizedText}`;
+            if (removed.length > 0) {
+                summary += `\n\nRemoved: ${removed.join(", ")}.`;
+            }
+            if (rewritten.length > 0) {
+                summary += `\nTightened: ${rewritten.join("; ")}.`;
+            }
+            if (tipParts.length > 0) {
+                summary += `\n\nTip: ${tipParts.join("; ")}.`;
+            }
+        }
+        return {
+            content: [
+                { type: "text", text: summary },
+                {
+                    type: "text",
+                    text: "```json\n" + JSON.stringify(result, null, 2) + "\n```",
+                },
+            ],
+        };
+    }
+    if (request.params.name === "compress_prompt") {
+        const args = (request.params.arguments ?? {});
+        if (typeof args.text !== "string") {
+            throw new Error("compress_prompt requires a 'text' string argument.");
+        }
+        const level = args.level ?? "medium";
+        if (!["light", "medium", "aggressive"].includes(level)) {
+            throw new Error("compress_prompt 'level' must be 'light', 'medium', or 'aggressive'.");
+        }
+        const result = compressPrompt(args.text, level);
+        const summary = `Compressed (${result.level}): ${result.originalTokens} to ${result.compressedTokens} tokens, saved ${result.tokensSaved} (${result.percentSaved}% leaner).\n\n` +
+            `> ${result.compressedText}\n\n` +
+            `Note: ${result.warning}`;
+        return {
+            content: [
+                { type: "text", text: summary },
+                {
+                    type: "text",
+                    text: "```json\n" + JSON.stringify(result, null, 2) + "\n```",
+                },
+            ],
+        };
+    }
+    if (request.params.name === "estimate_cost") {
+        const args = (request.params.arguments ?? {});
+        if (typeof args.text !== "string") {
+            throw new Error("estimate_cost requires a 'text' string argument.");
+        }
+        if (!args.model || !SUPPORTED_MODELS.includes(args.model)) {
+            throw new Error(`estimate_cost requires 'model' to be one of: ${SUPPORTED_MODELS.join(", ")}.`);
+        }
+        const result = estimateCost(args.text, args.model, args.expectedOutputTokens);
+        const approxNote = result.approximate
+            ? " (token count is an approximation for Claude models, exact for OpenAI)"
+            : "";
+        const summary = `Model: ${result.model}\n` +
+            `Input tokens: ${result.inputTokens}${approxNote}\n` +
+            `Estimated output tokens: ${result.estimatedOutputTokens}\n` +
+            `Input cost: $${result.inputCostUsd.toFixed(6)}\n` +
+            `Estimated output cost: $${result.estimatedOutputCostUsd.toFixed(6)}\n` +
+            `Total estimated cost: $${result.totalEstimatedUsd.toFixed(6)}\n` +
+            `Pricing last updated: ${result.pricingLastUpdated}`;
+        return {
+            content: [
+                { type: "text", text: summary },
+                {
+                    type: "text",
+                    text: "```json\n" + JSON.stringify(result, null, 2) + "\n```",
+                },
+            ],
+        };
+    }
+    throw new Error(`Unknown tool: ${request.params.name}`);
+});
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    // stdout is reserved for MCP protocol; log to stderr.
+    console.error(`PromptGuard MCP server v${PROMPTGUARD_VERSION} running on stdio`);
+}
+main().catch((error) => {
+    console.error("PromptGuard failed to start:", error);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EACL,YAAY,EACZ,gBAAgB,GAEjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAyB,MAAM,eAAe,CAAC;AAEtE,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAEpC,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;IACE,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,mBAAmB;CAC7B,EACD;IACE,YAAY,EAAE;QACZ,KAAK,EAAE,EAAE;KACV;CACF,CACF,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE;QACL;YACE,IAAI,EAAE,MAAM;YACZ,WAAW,EACT,6GAA6G;YAC/G,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE;aACf;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EACT,4SAA4S;YAC9S,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,0BAA0B;qBACxC;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;wBACxB,WAAW,EACT,kGAAkG;qBACrG;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EACT,+UAA+U;YACjV,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,8BAA8B;qBAC5C;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EACT,qdAAqd;YACvd,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,8BAA8B;qBAC5C;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC;wBACvC,WAAW,EACT,4MAA4M;qBAC/M;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EACT,gMAAgM;YAClM,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,6BAA6B;qBAC3C;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,gBAAgB;wBACtB,WAAW,EAAE,oCAAoC;qBAClD;oBACD,oBAAoB,EAAE;wBACpB,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,sGAAsG;qBACzG;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;aAC5B;SACF;KACF;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,0BAA0B,mBAAmB,EAAE;iBACtD;aACF;SACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAG3C,CAAC;QACF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;QAEjC,MAAM,OAAO,GACX,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,wCAAwC;YAC1C,CAAC,CAAC,SAAS,MAAM,CAAC,QAAQ,CAAC,MAAM,mBAAmB,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO;gBAChG,MAAM,CAAC,QAAQ;qBACZ,GAAG,CACF,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI;oBACrD,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,KAAK;oBAC/D,WAAW,CAAC,CAAC,WAAW,EAAE,CAC7B;qBACA,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtB,MAAM,OAAO,GAAG;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;YACjE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG;YAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;QAEF,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;gBAC/B;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,OAAO;iBAC/D;aACF;SACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAsB,CAAC;QACnE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,OAAO,GAAG,4CAA4C,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa;iBACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;iBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa;iBACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;iBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAE7D,MAAM,UAAU,GAA2B;gBACzC,iBAAiB,EAAE,6DAA6D;gBAChF,qBAAqB,EAAE,sEAAsE;aAC9F,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,CAC3C,CAAC;YAEF,OAAO;gBACL,4BAA4B,MAAM,CAAC,WAAW,YAAY,MAAM,CAAC,YAAY,gBAAgB;oBAC7F,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YAE9B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACnD,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACrD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,YAAY,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAChD,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;gBAC/B;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,OAAO;iBAC9D;aACF;SACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAG3C,CAAC;QACF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC;QACrC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,OAAO,GACX,eAAe,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,cAAc,OAAO,MAAM,CAAC,gBAAgB,kBAAkB,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,YAAY,gBAAgB;YAChK,KAAK,MAAM,CAAC,cAAc,MAAM;YAChC,SAAS,MAAM,CAAC,OAAO,EAAE,CAAC;QAE5B,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;gBAC/B;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,OAAO;iBAC9D;aACF;SACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAI3C,CAAC;QACF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,gDAAgD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW;YACnC,CAAC,CAAC,wEAAwE;YAC1E,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,OAAO,GACX,UAAU,MAAM,CAAC,KAAK,IAAI;YAC1B,iBAAiB,MAAM,CAAC,WAAW,GAAG,UAAU,IAAI;YACpD,4BAA4B,MAAM,CAAC,qBAAqB,IAAI;YAC5D,gBAAgB,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YAClD,2BAA2B,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YACvE,0BAA0B,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YACjE,yBAAyB,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAEvD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;gBAC/B;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,OAAO;iBAC9D;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,sDAAsD;IACtD,OAAO,CAAC,KAAK,CACX,2BAA2B,mBAAmB,mBAAmB,CAClE,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/optimize.js

@@ -0,0 +1,235 @@
+import { countTokens } from "./cost.js";
+const SUBSTITUTIONS = [
+    // Filler removal: politeness and verbose request openers
+    {
+        pattern: /\b(could|can|would|will) you (please |kindly )?/gi,
+        replacement: "",
+        category: "filler_removal",
+        description: "removed soft request opener",
+    },
+    {
+        pattern: /\bplease\b ?/gi,
+        replacement: "",
+        category: "filler_removal",
+        description: "removed 'please'",
+    },
+    {
+        pattern: /\bI (would like|want|need) (you )?to /gi,
+        replacement: "",
+        category: "filler_removal",
+        description: "removed verbose request opener",
+    },
+    {
+        pattern: /\bif (it'?s )?(possible|you can|you'?d like|you don'?t mind),?\s*/gi,
+        replacement: "",
+        category: "hedging",
+        description: "removed hedge",
+    },
+    {
+        pattern: /\bthank(s| you)( so much)?( in advance)?[!.]?\s*$/gi,
+        replacement: "",
+        category: "filler_removal",
+        description: "removed trailing thanks",
+    },
+    {
+        pattern: /\bI('?d| would)( really| truly| greatly)? appreciate (it|that|your help)( with (this|that))?[,.]?\s*/gi,
+        replacement: "",
+        category: "filler_removal",
+        description: "removed appreciation filler",
+    },
+    {
+        pattern: /\b(when you (get a chance|have (a )?(moment|time|second))|if you have a moment),?\s*/gi,
+        replacement: "",
+        category: "filler_removal",
+        description: "removed availability hedge",
+    },
+    // Verbose phrases tightened
+    {
+        pattern: /\bin order to\b/gi,
+        replacement: "to",
+        category: "verbose_phrase",
+        description: "tightened 'in order to' to 'to'",
+    },
+    {
+        pattern: /\bdue to the fact that\b/gi,
+        replacement: "because",
+        category: "verbose_phrase",
+        description: "tightened 'due to the fact that' to 'because'",
+    },
+    {
+        pattern: /\bat this point in time\b/gi,
+        replacement: "now",
+        category: "verbose_phrase",
+        description: "tightened 'at this point in time' to 'now'",
+    },
+    {
+        pattern: /\bfor the purpose of\b/gi,
+        replacement: "to",
+        category: "verbose_phrase",
+        description: "tightened 'for the purpose of' to 'to'",
+    },
+    {
+        pattern: /\bin the event that\b/gi,
+        replacement: "if",
+        category: "verbose_phrase",
+        description: "tightened 'in the event that' to 'if'",
+    },
+    {
+        pattern: /\bwith regards? to\b/gi,
+        replacement: "about",
+        category: "verbose_phrase",
+        description: "tightened 'with regard(s) to' to 'about'",
+    },
+    {
+        pattern: /\ba (large|huge|massive|significant) number of\b/gi,
+        replacement: "many",
+        category: "verbose_phrase",
+        description: "tightened to 'many'",
+    },
+    // Hedging
+    {
+        pattern: /\bI'?m not sure if this is (right|correct),?\s*but,?\s*/gi,
+        replacement: "",
+        category: "hedging",
+        description: "removed uncertainty hedge",
+    },
+    {
+        pattern: /\bthis (might|may) be a (silly|dumb|basic|stupid) question,?\s*but,?\s*/gi,
+        replacement: "",
+        category: "hedging",
+        description: "removed self-deprecating hedge",
+    },
+];
+const TASK_VERBS = new Set([
+    "write",
+    "create",
+    "generate",
+    "explain",
+    "describe",
+    "analyze",
+    "compare",
+    "summarize",
+    "translate",
+    "list",
+    "show",
+    "build",
+    "design",
+    "fix",
+    "debug",
+    "review",
+    "find",
+    "count",
+    "extract",
+    "convert",
+    "refactor",
+    "rewrite",
+    "draft",
+    "improve",
+    "optimize",
+    "evaluate",
+    "rank",
+    "classify",
+    "calculate",
+    "compute",
+    "implement",
+    "deploy",
+]);
+function findStructuralIssues(text) {
+    const issues = [];
+    const trimmed = text.trim();
+    if (trimmed.length === 0)
+        return issues;
+    const firstWord = trimmed.match(/^\w+/)?.[0]?.toLowerCase() ?? "";
+    if (firstWord && !TASK_VERBS.has(firstWord)) {
+        if (/^(can|could|would|will|is|do|are|i)\b/i.test(trimmed) &&
+            trimmed.length > 30) {
+            issues.push({
+                type: "missing_task_verb",
+                description: "Prompt does not start with a direct task verb.",
+                suggestion: "Consider starting with an imperative such as Write, Explain, Generate, or Analyze so the model knows exactly what action to take.",
+            });
+        }
+    }
+    if (trimmed.length > 120 &&
+        !/(format|json|list|bullet|table|paragraph|markdown|csv|yaml|xml)/i.test(trimmed)) {
+        issues.push({
+            type: "missing_output_format",
+            description: "No output format is specified.",
+            suggestion: "Specify the desired output shape, for example 'respond as a bulleted list', 'in JSON', or 'in markdown', to reduce iteration.",
+        });
+    }
+    return issues;
+}
+function cleanupSpacing(text, original) {
+    let result = text;
+    result = result.replace(/ {2,}/g, " ");
+    result = result.replace(/\s+([.,!?;:])/g, "$1");
+    result = result.replace(/[ \t]+\n/g, "\n");
+    result = result.replace(/\n{3,}/g, "\n\n");
+    result = result.trim();
+    const origFirst = original.trim()[0];
+    const resultFirst = result[0];
+    if (origFirst &&
+        resultFirst &&
+        /[A-Z]/.test(origFirst) &&
+        /[a-z]/.test(resultFirst)) {
+        result = result[0].toUpperCase() + result.slice(1);
+    }
+    return result;
+}
+export function optimizePrompt(text) {
+    const originalTokens = countTokens(text);
+    if (originalTokens < 10) {
+        return {
+            shouldSuggest: false,
+            originalText: text,
+            optimizedText: text,
+            optimizations: [],
+            structuralIssues: [],
+            originalTokens,
+            optimizedTokens: originalTokens,
+            tokensSaved: 0,
+            percentSaved: 0,
+            reason: "Prompt is too short to meaningfully optimize.",
+        };
+    }
+    const optimizations = [];
+    let optimized = text;
+    for (const sub of SUBSTITUTIONS) {
+        optimized = optimized.replace(sub.pattern, (matched) => {
+            optimizations.push({
+                type: sub.category,
+                description: sub.description,
+                before: matched,
+                after: sub.replacement,
+            });
+            return sub.replacement;
+        });
+    }
+    optimized = cleanupSpacing(optimized, text);
+    const structuralIssues = findStructuralIssues(text);
+    const optimizedTokens = countTokens(optimized);
+    const tokensSaved = originalTokens - optimizedTokens;
+    const percentSaved = originalTokens === 0
+        ? 0
+        : Math.round((tokensSaved / originalTokens) * 10000) / 100;
+    const meaningfulCompression = tokensSaved >= 5 && percentSaved >= 10;
+    const shouldSuggest = meaningfulCompression ||
+        structuralIssues.length > 0 ||
+        optimizations.length >= 3;
+    return {
+        shouldSuggest,
+        originalText: text,
+        optimizedText: optimized,
+        optimizations,
+        structuralIssues,
+        originalTokens,
+        optimizedTokens,
+        tokensSaved,
+        percentSaved,
+        reason: shouldSuggest
+            ? undefined
+            : "Prompt is already concise and well-structured; no meaningful optimization available.",
+    };
+}
+//# sourceMappingURL=optimize.js.map

package/dist/optimize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimize.js","sourceRoot":"","sources":["../src/optimize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AA6CxC,MAAM,aAAa,GAAmB;IACpC,yDAAyD;IACzD;QACE,OAAO,EAAE,mDAAmD;QAC5D,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,OAAO,EAAE,yCAAyC;QAClD,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,OAAO,EAAE,qEAAqE;QAC9E,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,OAAO,EAAE,qDAAqD;QAC9D,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,OAAO,EACL,wGAAwG;QAC1G,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,OAAO,EACL,wFAAwF;QAC1F,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,4BAA4B;KAC1C;IAED,4BAA4B;IAC5B;QACE,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,SAAS;QACtB,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,+CAA+C;KAC7D;IACD;QACE,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,wCAAwC;KACtD;IACD;QACE,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,uCAAuC;KACrD;IACD;QACE,OAAO,EAAE,wBAAwB;QACjC,WAAW,EAAE,OAAO;QACpB,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,0CAA0C;KACxD;IACD;QACE,OAAO,EAAE,oDAAoD;QAC7D,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,qBAAqB;KACnC;IAED,UAAU;IACV;QACE,OAAO,EAAE,2DAA2D;QACpE,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,OAAO,EACL,2EAA2E;QAC7E,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,gCAAgC;KAC9C;CACF,CAAC;AAEF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,OAAO;IACP,QAAQ;IACR,UAAU;IACV,SAAS;IACT,UAAU;IACV,SAAS;IACT,SAAS;IACT,WAAW;IACX,WAAW;IACX,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,SAAS;IACT,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;IACP,SAAS;IACT,UAAU;IACV,UAAU;IACV,MAAM;IACN,UAAU;IACV,WAAW;IACX,SAAS;IACT,WAAW;IACX,QAAQ;CACT,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,IACE,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC;YACtD,OAAO,CAAC,MAAM,GAAG,EAAE,EACnB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mBAAmB;gBACzB,WAAW,EAAE,gDAAgD;gBAC7D,UAAU,EACR,mIAAmI;aACtI,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IACE,OAAO,CAAC,MAAM,GAAG,GAAG;QACpB,CAAC,kEAAkE,CAAC,IAAI,CACtE,OAAO,CACR,EACD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,uBAAuB;YAC7B,WAAW,EAAE,gCAAgC;YAC7C,UAAU,EACR,+HAA+H;SAClI,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,QAAgB;IACpD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAEvB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9B,IACE,SAAS;QACT,WAAW;QACX,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EACzB,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAEzC,IAAI,cAAc,GAAG,EAAE,EAAE,CAAC;QACxB,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,EAAE;YACjB,gBAAgB,EAAE,EAAE;YACpB,cAAc;YACd,eAAe,EAAE,cAAc;YAC/B,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,+CAA+C;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,IAAI,SAAS,GAAG,IAAI,CAAC;IAErB,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;YACrD,aAAa,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,GAAG,CAAC,WAAW;aACvB,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,WAAW,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,GAAG,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAE5C,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAEpD,MAAM,eAAe,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,cAAc,GAAG,eAAe,CAAC;IACrD,MAAM,YAAY,GAChB,cAAc,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,cAAc,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC;IAE/D,MAAM,qBAAqB,GAAG,WAAW,IAAI,CAAC,IAAI,YAAY,IAAI,EAAE,CAAC;IACrE,MAAM,aAAa,GACjB,qBAAqB;QACrB,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC3B,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC;IAE5B,OAAO;QACL,aAAa;QACb,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,SAAS;QACxB,aAAa;QACb,gBAAgB;QAChB,cAAc;QACd,eAAe;QACf,WAAW;QACX,YAAY;QACZ,MAAM,EAAE,aAAa;YACnB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,sFAAsF;KAC3F,CAAC;AACJ,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@promptguardapp/mcp",
+  "version": "0.0.1",
+  "description": "Local-first MCP server that scans developer prompts for secrets, PII, and cost before they hit the LLM.",
+  "type": "module",
+  "bin": {
+    "promptguard-mcp": "dist/index.js"
+  },
+  "main": "dist/index.js",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit"
+  },
+  "keywords": [
+    "mcp",
+    "claude",
+    "prompt-safety",
+    "secret-scanning",
+    "developer-tools"
+  ],
+  "author": "Krish Ojha",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/KrishOjha1810/promptguard-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/KrishOjha1810/promptguard-mcp/issues"
+  },
+  "homepage": "https://github.com/KrishOjha1810/promptguard-mcp#readme",
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "js-tiktoken": "^1.0.21"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0",
+    "vitest": "^2.1.0"
+  }
+}