@safekeylab/sdk 1.0.0

package/dist/integrations/langchain.js

@@ -0,0 +1,415 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+// src/types.ts
+var SafeKeyLabError = class extends Error {
+  constructor(message, code, statusCode) {
+    super(message);
+    this.code = code;
+    this.statusCode = statusCode;
+    this.name = "SafeKeyLabError";
+  }
+};
+var PIIBlockedError = class extends SafeKeyLabError {
+  constructor(detections) {
+    super(
+      `Request blocked: PII detected (${detections.map((d) => d.type).join(", ")})`,
+      "PII_BLOCKED"
+    );
+    this.detections = detections;
+    this.name = "PIIBlockedError";
+  }
+};
+var ThreatBlockedError = class extends SafeKeyLabError {
+  constructor(threats) {
+    super(
+      `Request blocked: Threat detected (${threats.map((t) => t.type).join(", ")})`,
+      "THREAT_BLOCKED"
+    );
+    this.threats = threats;
+    this.name = "ThreatBlockedError";
+  }
+};
+
+// src/client.ts
+var DEFAULT_BASE_URL = "https://api.safekeylab.com";
+var DEFAULT_TIMEOUT = 3e4;
+var SafeKeyLab = class {
+  constructor(config) {
+    if (!config.apiKey) {
+      throw new SafeKeyLabError("API key is required", "MISSING_API_KEY");
+    }
+    this.apiKey = config.apiKey;
+    this.baseUrl = config.baseUrl || DEFAULT_BASE_URL;
+    this.timeout = config.timeout || DEFAULT_TIMEOUT;
+    this.debug = config.debug || false;
+  }
+  log(...args) {
+    if (this.debug) {
+      console.log("[SafeKeyLab]", ...args);
+    }
+  }
+  async request(method, endpoint, body) {
+    const url = `${this.baseUrl}${endpoint}`;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+    this.log(`${method} ${url}`, body);
+    try {
+      const response = await fetch(url, {
+        method,
+        headers: {
+          "Authorization": `Bearer ${this.apiKey}`,
+          "Content-Type": "application/json",
+          "User-Agent": "@safekeylab/sdk/1.0.0"
+        },
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      const data = await response.json();
+      if (!response.ok) {
+        throw new SafeKeyLabError(
+          data.error || data.message || "Request failed",
+          data.code || "API_ERROR",
+          response.status
+        );
+      }
+      this.log("Response:", data);
+      return data;
+    } catch (error) {
+      clearTimeout(timeoutId);
+      if (error instanceof SafeKeyLabError) {
+        throw error;
+      }
+      if (error instanceof Error) {
+        if (error.name === "AbortError") {
+          throw new SafeKeyLabError("Request timeout", "TIMEOUT");
+        }
+        throw new SafeKeyLabError(error.message, "NETWORK_ERROR");
+      }
+      throw new SafeKeyLabError("Unknown error", "UNKNOWN_ERROR");
+    }
+  }
+  /**
+   * Detect PII in text
+   */
+  async detect(request) {
+    return this.request("POST", "/v1/detect", request);
+  }
+  /**
+   * Detect PII in text (convenience method)
+   */
+  async detectPII(text, options) {
+    return this.detect({ text, ...options });
+  }
+  /**
+   * Redact/protect PII in text
+   */
+  async protect(request) {
+    return this.request("POST", "/v1/protect", request);
+  }
+  /**
+   * Redact PII from text (convenience method)
+   */
+  async redact(text, options) {
+    const response = await this.protect({ text, ...options });
+    return response.redacted_text;
+  }
+  /**
+   * Validate a prompt for security threats
+   */
+  async validatePrompt(request) {
+    return this.request("POST", "/v1/validate-prompt", request);
+  }
+  /**
+   * Check if a prompt is safe (convenience method)
+   */
+  async isPromptSafe(prompt, context) {
+    const response = await this.validatePrompt({ prompt, context });
+    return response.is_safe;
+  }
+  /**
+   * Scan LLM output for issues
+   */
+  async scanOutput(request) {
+    return this.request("POST", "/v1/scan-output", request);
+  }
+  /**
+   * Full protection pipeline: validate input, redact PII, return protected text
+   */
+  async protectInput(text) {
+    const [detectResult, validateResult] = await Promise.all([
+      this.detect({ text }),
+      this.validatePrompt({ prompt: text })
+    ]);
+    let protectedText = text;
+    let wasModified = false;
+    if (detectResult.count > 0) {
+      const protectResult = await this.protect({ text });
+      protectedText = protectResult.redacted_text;
+      wasModified = true;
+    }
+    return {
+      text: protectedText,
+      wasModified,
+      detections: detectResult.detections,
+      threats: validateResult.threats
+    };
+  }
+  /**
+   * Create a sandbox client (no API key required, rate limited)
+   */
+  static sandbox(options) {
+    return new SafeKeyLabSandbox(options);
+  }
+};
+var SafeKeyLabSandbox = class {
+  constructor(config) {
+    this.baseUrl = config?.baseUrl || DEFAULT_BASE_URL;
+    this.timeout = config?.timeout || DEFAULT_TIMEOUT;
+    this.debug = config?.debug || false;
+  }
+  log(...args) {
+    if (this.debug) {
+      console.log("[SafeKeyLab:Sandbox]", ...args);
+    }
+  }
+  async request(method, endpoint, body) {
+    const url = `${this.baseUrl}${endpoint}`;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+    this.log(`${method} ${url}`, body);
+    try {
+      const response = await fetch(url, {
+        method,
+        headers: {
+          "Content-Type": "application/json",
+          "User-Agent": "@safekeylab/sdk/1.0.0"
+        },
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      const data = await response.json();
+      if (!response.ok) {
+        throw new SafeKeyLabError(
+          data.error || data.message || "Request failed",
+          data.code || "API_ERROR",
+          response.status
+        );
+      }
+      this.log("Response:", data);
+      return data;
+    } catch (error) {
+      clearTimeout(timeoutId);
+      if (error instanceof SafeKeyLabError) {
+        throw error;
+      }
+      if (error instanceof Error) {
+        if (error.name === "AbortError") {
+          throw new SafeKeyLabError("Request timeout", "TIMEOUT");
+        }
+        throw new SafeKeyLabError(error.message, "NETWORK_ERROR");
+      }
+      throw new SafeKeyLabError("Unknown error", "UNKNOWN_ERROR");
+    }
+  }
+  async detect(request) {
+    return this.request("POST", "/sandbox/v1/detect", request);
+  }
+  async protect(request) {
+    return this.request("POST", "/sandbox/v1/protect", request);
+  }
+  async validatePrompt(request) {
+    return this.request("POST", "/sandbox/v1/validate-prompt", request);
+  }
+};
+
+// src/integrations/langchain.ts
+var SafeKeyLabCallbackHandler = class {
+  constructor(config) {
+    this.detections = [];
+    this.threats = [];
+    this.name = "SafeKeyLabCallbackHandler";
+    this.ignoreLLM = false;
+    this.ignoreChain = false;
+    this.ignoreAgent = false;
+    this.ignoreRetriever = false;
+    this.client = new SafeKeyLab({
+      apiKey: config.apiKey,
+      baseUrl: config.baseUrl,
+      timeout: config.timeout,
+      debug: config.debug
+    });
+    this.config = config;
+  }
+  /**
+   * Called when LLM starts processing
+   */
+  async handleLLMStart(llm, prompts, runId) {
+    for (const prompt of prompts) {
+      const detectResult = await this.client.detect({
+        text: prompt,
+        types: this.config.piiTypes
+      });
+      if (detectResult.detections.length > 0) {
+        this.detections.push(...detectResult.detections);
+        console.warn(
+          `[SafeKeyLab] PII detected in prompt: ${detectResult.detections.map((d) => d.type).join(", ")}`
+        );
+        if (this.config.blockOnPII) {
+          throw new PIIBlockedError(detectResult.detections);
+        }
+      }
+      const validateResult = await this.client.validatePrompt({ prompt });
+      if (validateResult.threats.length > 0) {
+        this.threats.push(...validateResult.threats);
+        console.warn(
+          `[SafeKeyLab] Threats detected in prompt: ${validateResult.threats.map((t) => t.type).join(", ")}`
+        );
+        if (this.config.blockOnThreat !== false) {
+          throw new ThreatBlockedError(validateResult.threats);
+        }
+      }
+    }
+  }
+  /**
+   * Called when chat model starts
+   */
+  async handleChatModelStart(llm, messages, runId) {
+    for (const messageGroup of messages) {
+      for (const message of messageGroup) {
+        if (typeof message.content === "string") {
+          const detectResult = await this.client.detect({
+            text: message.content,
+            types: this.config.piiTypes
+          });
+          if (detectResult.detections.length > 0) {
+            this.detections.push(...detectResult.detections);
+            if (this.config.blockOnPII) {
+              throw new PIIBlockedError(detectResult.detections);
+            }
+          }
+          const validateResult = await this.client.validatePrompt({
+            prompt: message.content
+          });
+          if (validateResult.threats.length > 0) {
+            this.threats.push(...validateResult.threats);
+            if (this.config.blockOnThreat !== false) {
+              throw new ThreatBlockedError(validateResult.threats);
+            }
+          }
+        }
+      }
+    }
+  }
+  /**
+   * Called when LLM ends
+   */
+  async handleLLMEnd(output, runId) {
+    for (const generation of output.generations.flat()) {
+      if (generation.text) {
+        const scanResult = await this.client.scanOutput({ output: generation.text });
+        if (!scanResult.is_safe) {
+          console.warn(
+            `[SafeKeyLab] Issues detected in LLM output: ${scanResult.issues.map((i) => i.type).join(", ")}`
+          );
+        }
+      }
+    }
+  }
+  /**
+   * Get all detections from this session
+   */
+  getDetections() {
+    return [...this.detections];
+  }
+  /**
+   * Get all threats from this session
+   */
+  getThreats() {
+    return [...this.threats];
+  }
+  /**
+   * Clear detection history
+   */
+  clearHistory() {
+    this.detections = [];
+    this.threats = [];
+  }
+};
+function createPIIProtectionTool(config) {
+  const client = new SafeKeyLab({
+    apiKey: config.apiKey,
+    baseUrl: config.baseUrl,
+    timeout: config.timeout,
+    debug: config.debug
+  });
+  return {
+    name: "safekeylab_pii_protection",
+    description: "Detects and redacts PII (personally identifiable information) from text. Use this tool to protect sensitive data before processing or storing. Input should be the text to protect. Output is the redacted text.",
+    func: async (input) => {
+      const result = await client.protect({ text: input });
+      return result.redacted_text;
+    }
+  };
+}
+function createPIIDetectionTool(config) {
+  const client = new SafeKeyLab({
+    apiKey: config.apiKey,
+    baseUrl: config.baseUrl,
+    timeout: config.timeout,
+    debug: config.debug
+  });
+  return {
+    name: "safekeylab_pii_detection",
+    description: "Detects PII (personally identifiable information) in text without modifying it. Use this tool to identify what sensitive data is present. Input should be the text to scan. Output is a list of detected PII types and locations.",
+    func: async (input) => {
+      const result = await client.detect({ text: input });
+      if (result.count === 0) {
+        return "No PII detected.";
+      }
+      return `Found ${result.count} PII items:
+` + result.detections.map((d) => `- ${d.type}: "${d.value}" (confidence: ${d.confidence})`).join("\n");
+    }
+  };
+}
+function createPromptValidationTool(config) {
+  const client = new SafeKeyLab({
+    apiKey: config.apiKey,
+    baseUrl: config.baseUrl,
+    timeout: config.timeout,
+    debug: config.debug
+  });
+  return {
+    name: "safekeylab_prompt_validation",
+    description: "Validates a prompt for security threats like injection attacks. Use this tool to check if user input is safe before using it in an LLM prompt. Input should be the prompt to validate. Output indicates if the prompt is safe.",
+    func: async (input) => {
+      const result = await client.validatePrompt({ prompt: input });
+      if (result.is_safe) {
+        return "Prompt is safe.";
+      }
+      return `Prompt has ${result.threats_detected} threats:
+` + result.threats.map((t) => `- ${t.type} (${t.severity}): ${t.description}`).join("\n") + `
+Recommendation: ${result.recommendation}`;
+    }
+  };
+}
+function getSafeKeyLabTools(config) {
+  return [
+    createPIIProtectionTool(config),
+    createPIIDetectionTool(config),
+    createPromptValidationTool(config)
+  ];
+}
+var langchain_default = SafeKeyLabCallbackHandler;
+
+exports.SafeKeyLabCallbackHandler = SafeKeyLabCallbackHandler;
+exports.createPIIDetectionTool = createPIIDetectionTool;
+exports.createPIIProtectionTool = createPIIProtectionTool;
+exports.createPromptValidationTool = createPromptValidationTool;
+exports.default = langchain_default;
+exports.getSafeKeyLabTools = getSafeKeyLabTools;
+//# sourceMappingURL=langchain.js.map
+//# sourceMappingURL=langchain.js.map

package/dist/integrations/langchain.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types.ts","../../src/client.ts","../../src/integrations/langchain.ts"],"names":[],"mappings":";;;;;AAgIO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACzC,WAAA,CACE,OAAA,EACO,IAAA,EACA,UAAA,EACP;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHN,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAGP,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,eAAA,GAAN,cAA8B,eAAA,CAAgB;AAAA,EACnD,YACS,UAAA,EACP;AACA,IAAA,KAAA;AAAA,MACE,CAAA,+BAAA,EAAkC,WAAW,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,IAAI,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,MACxE;AAAA,KACF;AALO,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAMP,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,kBAAA,GAAN,cAAiC,eAAA,CAAgB;AAAA,EACtD,YACS,OAAA,EACP;AACA,IAAA,KAAA;AAAA,MACE,CAAA,kCAAA,EAAqC,QAAQ,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,IAAI,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,MACxE;AAAA,KACF;AALO,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAMP,IAAA,IAAA,CAAK,IAAA,GAAO,oBAAA;AAAA,EACd;AACF,CAAA;;;AChJA,IAAM,gBAAA,GAAmB,4BAAA;AACzB,IAAM,eAAA,GAAkB,GAAA;AAEjB,IAAM,aAAN,MAAiB;AAAA,EAMtB,YAAY,MAAA,EAA0B;AACpC,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,eAAA,CAAgB,qBAAA,EAAuB,iBAAiB,CAAA;AAAA,IACpE;AACA,IAAA,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AACrB,IAAA,IAAA,CAAK,OAAA,GAAU,OAAO,OAAA,IAAW,gBAAA;AACjC,IAAA,IAAA,CAAK,OAAA,GAAU,OAAO,OAAA,IAAW,eAAA;AACjC,IAAA,IAAA,CAAK,KAAA,GAAQ,OAAO,KAAA,IAAS,KAAA;AAAA,EAC/B;AAAA,EAEQ,OAAO,IAAA,EAAuB;AACpC,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,GAAA,CAAI,cAAA,EAAgB,GAAG,IAAI,CAAA;AAAA,IACrC;AAAA,EACF;AAAA,EAEA,MAAc,OAAA,CACZ,MAAA,EACA,QAAA,EACA,IAAA,EACY;AACZ,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAA,CAAK,OAAO,GAAG,QAAQ,CAAA,CAAA;AACtC,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,YAAY,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,KAAK,OAAO,CAAA;AAEnE,IAAA,IAAA,CAAK,IAAI,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,GAAG,IAAI,IAAI,CAAA;AAEjC,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAChC,MAAA;AAAA,QACA,OAAA,EAAS;AAAA,UACP,eAAA,EAAiB,CAAA,OAAA,EAAU,IAAA,CAAK,MAAM,CAAA,CAAA;AAAA,UACtC,cAAA,EAAgB,kBAAA;AAAA,UAChB,YAAA,EAAc;AAAA,SAChB;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AAED,MAAA,YAAA,CAAa,SAAS,CAAA;AAEtB,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AAEjC,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAI,eAAA;AAAA,UACP,IAAA,CAAK,KAAA,IAAqB,IAAA,CAAK,OAAA,IAAsB,gBAAA;AAAA,UACrD,KAAK,IAAA,IAAmB,WAAA;AAAA,UACzB,QAAA,CAAS;AAAA,SACX;AAAA,MACF;AAEA,MAAA,IAAA,CAAK,GAAA,CAAI,aAAa,IAAI,CAAA;AAC1B,MAAA,OAAO,IAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,YAAA,CAAa,SAAS,CAAA;AACtB,MAAA,IAAI,iBAAiB,eAAA,EAAiB;AACpC,QAAA,MAAM,KAAA;AAAA,MACR;AACA,MAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,QAAA,IAAI,KAAA,CAAM,SAAS,YAAA,EAAc;AAC/B,UAAA,MAAM,IAAI,eAAA,CAAgB,iBAAA,EAAmB,SAAS,CAAA;AAAA,QACxD;AACA,QAAA,MAAM,IAAI,eAAA,CAAgB,KAAA,CAAM,OAAA,EAAS,eAAe,CAAA;AAAA,MAC1D;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,eAAA,EAAiB,eAAe,CAAA;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,OAAA,EAAiD;AAC5D,IAAA,OAAO,IAAA,CAAK,OAAA,CAAwB,MAAA,EAAQ,YAAA,EAAc,OAAO,CAAA;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAA,CAAU,IAAA,EAAc,OAAA,EAAgE;AAC5F,IAAA,OAAO,KAAK,MAAA,CAAO,EAAE,IAAA,EAAM,GAAG,SAAS,CAAA;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAQ,OAAA,EAAmD;AAC/D,IAAA,OAAO,IAAA,CAAK,OAAA,CAAyB,MAAA,EAAQ,aAAA,EAAe,OAAO,CAAA;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CAAO,IAAA,EAAc,OAAA,EAAyD;AAClF,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAE,IAAA,EAAM,GAAG,SAAS,CAAA;AACxD,IAAA,OAAO,QAAA,CAAS,aAAA;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,eAAe,OAAA,EAAiE;AACpF,IAAA,OAAO,IAAA,CAAK,OAAA,CAAgC,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAA,CAAa,MAAA,EAAgB,OAAA,EAAoC;AACrE,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,eAAe,EAAE,MAAA,EAAQ,SAAS,CAAA;AAC9D,IAAA,OAAO,QAAA,CAAS,OAAA;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAW,OAAA,EAAyD;AACxE,IAAA,OAAO,IAAA,CAAK,OAAA,CAA4B,MAAA,EAAQ,iBAAA,EAAmB,OAAO,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,IAAA,EAKhB;AAED,IAAA,MAAM,CAAC,YAAA,EAAc,cAAc,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,MACvD,IAAA,CAAK,MAAA,CAAO,EAAE,IAAA,EAAM,CAAA;AAAA,MACpB,IAAA,CAAK,cAAA,CAAe,EAAE,MAAA,EAAQ,MAAM;AAAA,KACrC,CAAA;AAED,IAAA,IAAI,aAAA,GAAgB,IAAA;AACpB,IAAA,IAAI,WAAA,GAAc,KAAA;AAGlB,IAAA,IAAI,YAAA,CAAa,QAAQ,CAAA,EAAG;AAC1B,MAAA,MAAM,gBAAgB,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAE,MAAM,CAAA;AACjD,MAAA,aAAA,GAAgB,aAAA,CAAc,aAAA;AAC9B,MAAA,WAAA,GAAc,IAAA;AAAA,IAChB;AAEA,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,aAAA;AAAA,MACN,WAAA;AAAA,MACA,YAAY,YAAA,CAAa,UAAA;AAAA,MACzB,SAAS,cAAA,CAAe;AAAA,KAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,QAAQ,OAAA,EAA+D;AAC5E,IAAA,OAAO,IAAI,kBAAkB,OAAO,CAAA;AAAA,EACtC;AACF,CAAA;AAKO,IAAM,oBAAN,MAAwB;AAAA,EAK7B,YAAY,MAAA,EAA2C;AACrD,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,gBAAA;AAClC,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,eAAA;AAClC,IAAA,IAAA,CAAK,KAAA,GAAQ,QAAQ,KAAA,IAAS,KAAA;AAAA,EAChC;AAAA,EAEQ,OAAO,IAAA,EAAuB;AACpC,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,GAAA,CAAI,sBAAA,EAAwB,GAAG,IAAI,CAAA;AAAA,IAC7C;AAAA,EACF;AAAA,EAEA,MAAc,OAAA,CACZ,MAAA,EACA,QAAA,EACA,IAAA,EACY;AACZ,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAA,CAAK,OAAO,GAAG,QAAQ,CAAA,CAAA;AACtC,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,YAAY,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,KAAK,OAAO,CAAA;AAEnE,IAAA,IAAA,CAAK,IAAI,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,GAAG,IAAI,IAAI,CAAA;AAEjC,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAChC,MAAA;AAAA,QACA,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,kBAAA;AAAA,UAChB,YAAA,EAAc;AAAA,SAChB;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AAED,MAAA,YAAA,CAAa,SAAS,CAAA;AACtB,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AAEjC,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAI,eAAA;AAAA,UACP,IAAA,CAAK,KAAA,IAAqB,IAAA,CAAK,OAAA,IAAsB,gBAAA;AAAA,UACrD,KAAK,IAAA,IAAmB,WAAA;AAAA,UACzB,QAAA,CAAS;AAAA,SACX;AAAA,MACF;AAEA,MAAA,IAAA,CAAK,GAAA,CAAI,aAAa,IAAI,CAAA;AAC1B,MAAA,OAAO,IAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,YAAA,CAAa,SAAS,CAAA;AACtB,MAAA,IAAI,iBAAiB,eAAA,EAAiB;AACpC,QAAA,MAAM,KAAA;AAAA,MACR;AACA,MAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,QAAA,IAAI,KAAA,CAAM,SAAS,YAAA,EAAc;AAC/B,UAAA,MAAM,IAAI,eAAA,CAAgB,iBAAA,EAAmB,SAAS,CAAA;AAAA,QACxD;AACA,QAAA,MAAM,IAAI,eAAA,CAAgB,KAAA,CAAM,OAAA,EAAS,eAAe,CAAA;AAAA,MAC1D;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,eAAA,EAAiB,eAAe,CAAA;AAAA,IAC5D;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,OAAA,EAAiD;AAC5D,IAAA,OAAO,IAAA,CAAK,OAAA,CAAwB,MAAA,EAAQ,oBAAA,EAAsB,OAAO,CAAA;AAAA,EAC3E;AAAA,EAEA,MAAM,QAAQ,OAAA,EAAmD;AAC/D,IAAA,OAAO,IAAA,CAAK,OAAA,CAAyB,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EAC7E;AAAA,EAEA,MAAM,eAAe,OAAA,EAAiE;AACpF,IAAA,OAAO,IAAA,CAAK,OAAA,CAAgC,MAAA,EAAQ,6BAAA,EAA+B,OAAO,CAAA;AAAA,EAC5F;AACF,CAAA;;;AChNO,IAAM,4BAAN,MAAgC;AAAA,EAYrC,YAAY,MAAA,EAAkC;AAT9C,IAAA,IAAA,CAAQ,aAA6B,EAAC;AACtC,IAAA,IAAA,CAAQ,UAAoB,EAAC;AAE7B,IAAA,IAAA,CAAA,IAAA,GAAO,2BAAA;AACP,IAAA,IAAA,CAAA,SAAA,GAAY,KAAA;AACZ,IAAA,IAAA,CAAA,WAAA,GAAc,KAAA;AACd,IAAA,IAAA,CAAA,WAAA,GAAc,KAAA;AACd,IAAA,IAAA,CAAA,eAAA,GAAkB,KAAA;AAGhB,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,UAAA,CAAW;AAAA,MAC3B,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAO,MAAA,CAAO;AAAA,KACf,CAAA;AACD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAA,CACJ,GAAA,EACA,OAAA,EACA,KAAA,EACe;AACf,IAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAE5B,MAAA,MAAM,YAAA,GAAe,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO;AAAA,QAC5C,IAAA,EAAM,MAAA;AAAA,QACN,KAAA,EAAO,KAAK,MAAA,CAAO;AAAA,OACpB,CAAA;AAED,MAAA,IAAI,YAAA,CAAa,UAAA,CAAW,MAAA,GAAS,CAAA,EAAG;AACtC,QAAA,IAAA,CAAK,UAAA,CAAW,IAAA,CAAK,GAAG,YAAA,CAAa,UAAU,CAAA;AAC/C,QAAA,OAAA,CAAQ,IAAA;AAAA,UACN,CAAA,qCAAA,EAAwC,YAAA,CAAa,UAAA,CAAW,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,SAC/F;AAEA,QAAA,IAAI,IAAA,CAAK,OAAO,UAAA,EAAY;AAC1B,UAAA,MAAM,IAAI,eAAA,CAAgB,YAAA,CAAa,UAAU,CAAA;AAAA,QACnD;AAAA,MACF;AAGA,MAAA,MAAM,iBAAiB,MAAM,IAAA,CAAK,OAAO,cAAA,CAAe,EAAE,QAAQ,CAAA;AAElE,MAAA,IAAI,cAAA,CAAe,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AACrC,QAAA,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,GAAG,cAAA,CAAe,OAAO,CAAA;AAC3C,QAAA,OAAA,CAAQ,IAAA;AAAA,UACN,CAAA,yCAAA,EAA4C,cAAA,CAAe,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,SAClG;AAEA,QAAA,IAAI,IAAA,CAAK,MAAA,CAAO,aAAA,KAAkB,KAAA,EAAO;AACvC,UAAA,MAAM,IAAI,kBAAA,CAAmB,cAAA,CAAe,OAAO,CAAA;AAAA,QACrD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAA,CACJ,GAAA,EACA,QAAA,EACA,KAAA,EACe;AACf,IAAA,KAAA,MAAW,gBAAgB,QAAA,EAAU;AACnC,MAAA,KAAA,MAAW,WAAW,YAAA,EAAc;AAClC,QAAA,IAAI,OAAO,OAAA,CAAQ,OAAA,KAAY,QAAA,EAAU;AACvC,UAAA,MAAM,YAAA,GAAe,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO;AAAA,YAC5C,MAAM,OAAA,CAAQ,OAAA;AAAA,YACd,KAAA,EAAO,KAAK,MAAA,CAAO;AAAA,WACpB,CAAA;AAED,UAAA,IAAI,YAAA,CAAa,UAAA,CAAW,MAAA,GAAS,CAAA,EAAG;AACtC,YAAA,IAAA,CAAK,UAAA,CAAW,IAAA,CAAK,GAAG,YAAA,CAAa,UAAU,CAAA;AAE/C,YAAA,IAAI,IAAA,CAAK,OAAO,UAAA,EAAY;AAC1B,cAAA,MAAM,IAAI,eAAA,CAAgB,YAAA,CAAa,UAAU,CAAA;AAAA,YACnD;AAAA,UACF;AAEA,UAAA,MAAM,cAAA,GAAiB,MAAM,IAAA,CAAK,MAAA,CAAO,cAAA,CAAe;AAAA,YACtD,QAAQ,OAAA,CAAQ;AAAA,WACjB,CAAA;AAED,UAAA,IAAI,cAAA,CAAe,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AACrC,YAAA,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,GAAG,cAAA,CAAe,OAAO,CAAA;AAE3C,YAAA,IAAI,IAAA,CAAK,MAAA,CAAO,aAAA,KAAkB,KAAA,EAAO;AACvC,cAAA,MAAM,IAAI,kBAAA,CAAmB,cAAA,CAAe,OAAO,CAAA;AAAA,YACrD;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAA,CAAa,MAAA,EAAmB,KAAA,EAA8B;AAClE,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,WAAA,CAAY,IAAA,EAAK,EAAG;AAClD,MAAA,IAAI,WAAW,IAAA,EAAM;AACnB,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,WAAW,EAAE,MAAA,EAAQ,UAAA,CAAW,IAAA,EAAM,CAAA;AAE3E,QAAA,IAAI,CAAC,WAAW,OAAA,EAAS;AACvB,UAAA,OAAA,CAAQ,IAAA;AAAA,YACN,CAAA,4CAAA,EAA+C,UAAA,CAAW,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,WAChG;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA,GAAgC;AAC9B,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,UAAU,CAAA;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKA,UAAA,GAAuB;AACrB,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,OAAO,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKA,YAAA,GAAqB;AACnB,IAAA,IAAA,CAAK,aAAa,EAAC;AACnB,IAAA,IAAA,CAAK,UAAU,EAAC;AAAA,EAClB;AACF;AAcO,SAAS,wBAAwB,MAAA,EAA+C;AACrF,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW;AAAA,IAC5B,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,OAAO,MAAA,CAAO;AAAA,GACf,CAAA;AAED,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,2BAAA;AAAA,IACN,WAAA,EACE,kNAAA;AAAA,IAGF,IAAA,EAAM,OAAO,KAAA,KAAmC;AAC9C,MAAA,MAAM,SAAS,MAAM,MAAA,CAAO,QAAQ,EAAE,IAAA,EAAM,OAAO,CAAA;AACnD,MAAA,OAAO,MAAA,CAAO,aAAA;AAAA,IAChB;AAAA,GACF;AACF;AAKO,SAAS,uBAAuB,MAAA,EAA+C;AACpF,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW;AAAA,IAC5B,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,OAAO,MAAA,CAAO;AAAA,GACf,CAAA;AAED,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,0BAAA;AAAA,IACN,WAAA,EACE,mOAAA;AAAA,IAGF,IAAA,EAAM,OAAO,KAAA,KAAmC;AAC9C,MAAA,MAAM,SAAS,MAAM,MAAA,CAAO,OAAO,EAAE,IAAA,EAAM,OAAO,CAAA;AAClD,MAAA,IAAI,MAAA,CAAO,UAAU,CAAA,EAAG;AACtB,QAAA,OAAO,kBAAA;AAAA,MACT;AACA,MAAA,OACE,CAAA,MAAA,EAAS,OAAO,KAAK,CAAA;AAAA,CAAA,GACrB,OAAO,UAAA,CACJ,GAAA,CAAI,CAAC,CAAA,KAAM,KAAK,CAAA,CAAE,IAAI,CAAA,GAAA,EAAM,CAAA,CAAE,KAAK,CAAA,eAAA,EAAkB,CAAA,CAAE,UAAU,CAAA,CAAA,CAAG,CAAA,CACpE,KAAK,IAAI,CAAA;AAAA,IAEhB;AAAA,GACF;AACF;AAKO,SAAS,2BAA2B,MAAA,EAA+C;AACxF,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW;AAAA,IAC5B,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,OAAO,MAAA,CAAO;AAAA,GACf,CAAA;AAED,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,8BAAA;AAAA,IACN,WAAA,EACE,gOAAA;AAAA,IAGF,IAAA,EAAM,OAAO,KAAA,KAAmC;AAC9C,MAAA,MAAM,SAAS,MAAM,MAAA,CAAO,eAAe,EAAE,MAAA,EAAQ,OAAO,CAAA;AAC5D,MAAA,IAAI,OAAO,OAAA,EAAS;AAClB,QAAA,OAAO,iBAAA;AAAA,MACT;AACA,MAAA,OACE,CAAA,WAAA,EAAc,OAAO,gBAAgB,CAAA;AAAA,CAAA,GACrC,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAA,EAAK,EAAE,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,QAAQ,MAAM,CAAA,CAAE,WAAW,EAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA,GACpF;AAAA,gBAAA,EAAqB,OAAO,cAAc,CAAA,CAAA;AAAA,IAE9C;AAAA,GACF;AACF;AAKO,SAAS,mBAAmB,MAAA,EAAiD;AAClF,EAAA,OAAO;AAAA,IACL,wBAAwB,MAAM,CAAA;AAAA,IAC9B,uBAAuB,MAAM,CAAA;AAAA,IAC7B,2BAA2B,MAAM;AAAA,GACnC;AACF;AAEA,IAAO,iBAAA,GAAQ","file":"langchain.js","sourcesContent":["/**\n * SafeKeyLab SDK Types\n */\n\nexport interface SafeKeyLabConfig {\n  /** API key for authentication */\n  apiKey: string;\n  /** Base URL for the API (default: https://api.safekeylab.com) */\n  baseUrl?: string;\n  /** Request timeout in milliseconds (default: 30000) */\n  timeout?: number;\n  /** Enable debug logging (default: false) */\n  debug?: boolean;\n}\n\nexport interface PIIDetection {\n  /** Type of PII detected (EMAIL, PHONE, SSN, etc.) */\n  type: string;\n  /** The detected value */\n  value: string;\n  /** Start position in text */\n  start: number;\n  /** End position in text */\n  end: number;\n  /** Confidence score (0-1) */\n  confidence: number;\n}\n\nexport interface DetectRequest {\n  /** Text to scan for PII */\n  text: string;\n  /** Types of PII to detect (default: all) */\n  types?: string[];\n  /** Minimum confidence threshold (default: 0.5) */\n  minConfidence?: number;\n}\n\nexport interface DetectResponse {\n  success: boolean;\n  detections: PIIDetection[];\n  count: number;\n  processing_time_ms: number;\n}\n\nexport interface ProtectRequest {\n  /** Text to redact PII from */\n  text: string;\n  /** Types of PII to redact (default: all) */\n  types?: string[];\n  /** Redaction style: 'placeholder' | 'mask' | 'hash' (default: placeholder) */\n  style?: 'placeholder' | 'mask' | 'hash';\n}\n\nexport interface Redaction {\n  type: string;\n  original: string;\n  start: number;\n  end: number;\n}\n\nexport interface ProtectResponse {\n  success: boolean;\n  redacted_text: string;\n  redactions: Redaction[];\n  redactions_count: number;\n  original_length: number;\n  redacted_length: number;\n  processing_time_ms: number;\n}\n\nexport interface ValidatePromptRequest {\n  /** Prompt to validate */\n  prompt: string;\n  /** Additional context for validation */\n  context?: string;\n}\n\nexport interface Threat {\n  type: string;\n  severity: 'low' | 'medium' | 'high' | 'critical';\n  description: string;\n  matched?: string;\n}\n\nexport interface ValidatePromptResponse {\n  success: boolean;\n  is_safe: boolean;\n  threats: Threat[];\n  threats_detected: number;\n  recommendation: 'allow' | 'review' | 'block';\n  processing_time_ms: number;\n}\n\nexport interface ScanOutputRequest {\n  /** LLM output to scan */\n  output: string;\n  /** Original prompt for context */\n  prompt?: string;\n}\n\nexport interface ScanOutputResponse {\n  success: boolean;\n  is_safe: boolean;\n  issues: Array<{\n    type: string;\n    severity: string;\n    description: string;\n  }>;\n  processing_time_ms: number;\n}\n\nexport interface WrapperConfig {\n  /** Block requests containing PII (default: false, will redact instead) */\n  blockOnPII?: boolean;\n  /** Block requests with detected threats (default: true) */\n  blockOnThreat?: boolean;\n  /** Types of PII to detect/redact */\n  piiTypes?: string[];\n  /** Scan LLM outputs for issues (default: true) */\n  scanOutputs?: boolean;\n  /** Custom error handler */\n  onError?: (error: Error) => void;\n  /** Callback when PII is detected */\n  onPIIDetected?: (detections: PIIDetection[]) => void;\n  /** Callback when threat is detected */\n  onThreatDetected?: (threats: Threat[]) => void;\n}\n\nexport class SafeKeyLabError extends Error {\n  constructor(\n    message: string,\n    public code: string,\n    public statusCode?: number\n  ) {\n    super(message);\n    this.name = 'SafeKeyLabError';\n  }\n}\n\nexport class PIIBlockedError extends SafeKeyLabError {\n  constructor(\n    public detections: PIIDetection[]\n  ) {\n    super(\n      `Request blocked: PII detected (${detections.map(d => d.type).join(', ')})`,\n      'PII_BLOCKED'\n    );\n    this.name = 'PIIBlockedError';\n  }\n}\n\nexport class ThreatBlockedError extends SafeKeyLabError {\n  constructor(\n    public threats: Threat[]\n  ) {\n    super(\n      `Request blocked: Threat detected (${threats.map(t => t.type).join(', ')})`,\n      'THREAT_BLOCKED'\n    );\n    this.name = 'ThreatBlockedError';\n  }\n}\n","/**\n * SafeKeyLab API Client\n */\n\nimport {\n  SafeKeyLabConfig,\n  DetectRequest,\n  DetectResponse,\n  ProtectRequest,\n  ProtectResponse,\n  ValidatePromptRequest,\n  ValidatePromptResponse,\n  ScanOutputRequest,\n  ScanOutputResponse,\n  SafeKeyLabError,\n} from './types';\n\nconst DEFAULT_BASE_URL = 'https://api.safekeylab.com';\nconst DEFAULT_TIMEOUT = 30000;\n\nexport class SafeKeyLab {\n  private apiKey: string;\n  private baseUrl: string;\n  private timeout: number;\n  private debug: boolean;\n\n  constructor(config: SafeKeyLabConfig) {\n    if (!config.apiKey) {\n      throw new SafeKeyLabError('API key is required', 'MISSING_API_KEY');\n    }\n    this.apiKey = config.apiKey;\n    this.baseUrl = config.baseUrl || DEFAULT_BASE_URL;\n    this.timeout = config.timeout || DEFAULT_TIMEOUT;\n    this.debug = config.debug || false;\n  }\n\n  private log(...args: unknown[]): void {\n    if (this.debug) {\n      console.log('[SafeKeyLab]', ...args);\n    }\n  }\n\n  private async request<T>(\n    method: string,\n    endpoint: string,\n    body?: unknown\n  ): Promise<T> {\n    const url = `${this.baseUrl}${endpoint}`;\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.timeout);\n\n    this.log(`${method} ${url}`, body);\n\n    try {\n      const response = await fetch(url, {\n        method,\n        headers: {\n          'Authorization': `Bearer ${this.apiKey}`,\n          'Content-Type': 'application/json',\n          'User-Agent': '@safekeylab/sdk/1.0.0',\n        },\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n\n      clearTimeout(timeoutId);\n\n      const data = await response.json() as Record<string, unknown>;\n\n      if (!response.ok) {\n        throw new SafeKeyLabError(\n          (data.error as string) || (data.message as string) || 'Request failed',\n          (data.code as string) || 'API_ERROR',\n          response.status\n        );\n      }\n\n      this.log('Response:', data);\n      return data as T;\n    } catch (error) {\n      clearTimeout(timeoutId);\n      if (error instanceof SafeKeyLabError) {\n        throw error;\n      }\n      if (error instanceof Error) {\n        if (error.name === 'AbortError') {\n          throw new SafeKeyLabError('Request timeout', 'TIMEOUT');\n        }\n        throw new SafeKeyLabError(error.message, 'NETWORK_ERROR');\n      }\n      throw new SafeKeyLabError('Unknown error', 'UNKNOWN_ERROR');\n    }\n  }\n\n  /**\n   * Detect PII in text\n   */\n  async detect(request: DetectRequest): Promise<DetectResponse> {\n    return this.request<DetectResponse>('POST', '/v1/detect', request);\n  }\n\n  /**\n   * Detect PII in text (convenience method)\n   */\n  async detectPII(text: string, options?: Omit<DetectRequest, 'text'>): Promise<DetectResponse> {\n    return this.detect({ text, ...options });\n  }\n\n  /**\n   * Redact/protect PII in text\n   */\n  async protect(request: ProtectRequest): Promise<ProtectResponse> {\n    return this.request<ProtectResponse>('POST', '/v1/protect', request);\n  }\n\n  /**\n   * Redact PII from text (convenience method)\n   */\n  async redact(text: string, options?: Omit<ProtectRequest, 'text'>): Promise<string> {\n    const response = await this.protect({ text, ...options });\n    return response.redacted_text;\n  }\n\n  /**\n   * Validate a prompt for security threats\n   */\n  async validatePrompt(request: ValidatePromptRequest): Promise<ValidatePromptResponse> {\n    return this.request<ValidatePromptResponse>('POST', '/v1/validate-prompt', request);\n  }\n\n  /**\n   * Check if a prompt is safe (convenience method)\n   */\n  async isPromptSafe(prompt: string, context?: string): Promise<boolean> {\n    const response = await this.validatePrompt({ prompt, context });\n    return response.is_safe;\n  }\n\n  /**\n   * Scan LLM output for issues\n   */\n  async scanOutput(request: ScanOutputRequest): Promise<ScanOutputResponse> {\n    return this.request<ScanOutputResponse>('POST', '/v1/scan-output', request);\n  }\n\n  /**\n   * Full protection pipeline: validate input, redact PII, return protected text\n   */\n  async protectInput(text: string): Promise<{\n    text: string;\n    wasModified: boolean;\n    detections: DetectResponse['detections'];\n    threats: ValidatePromptResponse['threats'];\n  }> {\n    // Run detection and validation in parallel\n    const [detectResult, validateResult] = await Promise.all([\n      this.detect({ text }),\n      this.validatePrompt({ prompt: text }),\n    ]);\n\n    let protectedText = text;\n    let wasModified = false;\n\n    // Redact if PII found\n    if (detectResult.count > 0) {\n      const protectResult = await this.protect({ text });\n      protectedText = protectResult.redacted_text;\n      wasModified = true;\n    }\n\n    return {\n      text: protectedText,\n      wasModified,\n      detections: detectResult.detections,\n      threats: validateResult.threats,\n    };\n  }\n\n  /**\n   * Create a sandbox client (no API key required, rate limited)\n   */\n  static sandbox(options?: Omit<SafeKeyLabConfig, 'apiKey'>): SafeKeyLabSandbox {\n    return new SafeKeyLabSandbox(options);\n  }\n}\n\n/**\n * Sandbox client for testing (no API key required)\n */\nexport class SafeKeyLabSandbox {\n  private baseUrl: string;\n  private timeout: number;\n  private debug: boolean;\n\n  constructor(config?: Omit<SafeKeyLabConfig, 'apiKey'>) {\n    this.baseUrl = config?.baseUrl || DEFAULT_BASE_URL;\n    this.timeout = config?.timeout || DEFAULT_TIMEOUT;\n    this.debug = config?.debug || false;\n  }\n\n  private log(...args: unknown[]): void {\n    if (this.debug) {\n      console.log('[SafeKeyLab:Sandbox]', ...args);\n    }\n  }\n\n  private async request<T>(\n    method: string,\n    endpoint: string,\n    body?: unknown\n  ): Promise<T> {\n    const url = `${this.baseUrl}${endpoint}`;\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.timeout);\n\n    this.log(`${method} ${url}`, body);\n\n    try {\n      const response = await fetch(url, {\n        method,\n        headers: {\n          'Content-Type': 'application/json',\n          'User-Agent': '@safekeylab/sdk/1.0.0',\n        },\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n\n      clearTimeout(timeoutId);\n      const data = await response.json() as Record<string, unknown>;\n\n      if (!response.ok) {\n        throw new SafeKeyLabError(\n          (data.error as string) || (data.message as string) || 'Request failed',\n          (data.code as string) || 'API_ERROR',\n          response.status\n        );\n      }\n\n      this.log('Response:', data);\n      return data as T;\n    } catch (error) {\n      clearTimeout(timeoutId);\n      if (error instanceof SafeKeyLabError) {\n        throw error;\n      }\n      if (error instanceof Error) {\n        if (error.name === 'AbortError') {\n          throw new SafeKeyLabError('Request timeout', 'TIMEOUT');\n        }\n        throw new SafeKeyLabError(error.message, 'NETWORK_ERROR');\n      }\n      throw new SafeKeyLabError('Unknown error', 'UNKNOWN_ERROR');\n    }\n  }\n\n  async detect(request: DetectRequest): Promise<DetectResponse> {\n    return this.request<DetectResponse>('POST', '/sandbox/v1/detect', request);\n  }\n\n  async protect(request: ProtectRequest): Promise<ProtectResponse> {\n    return this.request<ProtectResponse>('POST', '/sandbox/v1/protect', request);\n  }\n\n  async validatePrompt(request: ValidatePromptRequest): Promise<ValidatePromptResponse> {\n    return this.request<ValidatePromptResponse>('POST', '/sandbox/v1/validate-prompt', request);\n  }\n}\n\nexport default SafeKeyLab;\n","/**\n * SafeKeyLab LangChain Integration\n *\n * Provides callbacks and tools for LangChain/LangChain.js\n *\n * @example\n * ```typescript\n * import { ChatOpenAI } from '@langchain/openai';\n * import { SafeKeyLabCallbackHandler, createPIIProtectionTool } from '@safekeylab/sdk/langchain';\n *\n * const handler = new SafeKeyLabCallbackHandler({ apiKey: 'sk_live_...' });\n * const model = new ChatOpenAI({ callbacks: [handler] });\n *\n * // Or use tools in an agent\n * const tools = [createPIIProtectionTool({ apiKey: 'sk_live_...' })];\n * ```\n */\n\nimport { SafeKeyLab } from '../client';\nimport {\n  SafeKeyLabConfig,\n  PIIDetection,\n  Threat,\n  PIIBlockedError,\n  ThreatBlockedError,\n} from '../types';\n\n// Minimal LangChain types to avoid hard dependency\ninterface BaseCallbackHandlerInput {\n  ignoreLLM?: boolean;\n  ignoreChain?: boolean;\n  ignoreAgent?: boolean;\n}\n\ninterface Serialized {\n  [key: string]: unknown;\n}\n\ninterface LLMResult {\n  generations: Array<Array<{ text: string; [key: string]: unknown }>>;\n  [key: string]: unknown;\n}\n\ninterface ChainValues {\n  [key: string]: unknown;\n}\n\nexport interface SafeKeyLabCallbackConfig extends Partial<SafeKeyLabConfig> {\n  /** Block on PII detection (default: false, will log instead) */\n  blockOnPII?: boolean;\n  /** Block on threat detection (default: true) */\n  blockOnThreat?: boolean;\n  /** Types of PII to detect */\n  piiTypes?: string[];\n}\n\n/**\n * LangChain callback handler for SafeKeyLab protection\n */\nexport class SafeKeyLabCallbackHandler {\n  private client: SafeKeyLab;\n  private config: SafeKeyLabCallbackConfig;\n  private detections: PIIDetection[] = [];\n  private threats: Threat[] = [];\n\n  name = 'SafeKeyLabCallbackHandler';\n  ignoreLLM = false;\n  ignoreChain = false;\n  ignoreAgent = false;\n  ignoreRetriever = false;\n\n  constructor(config: SafeKeyLabCallbackConfig) {\n    this.client = new SafeKeyLab({\n      apiKey: config.apiKey!,\n      baseUrl: config.baseUrl,\n      timeout: config.timeout,\n      debug: config.debug,\n    });\n    this.config = config;\n  }\n\n  /**\n   * Called when LLM starts processing\n   */\n  async handleLLMStart(\n    llm: Serialized,\n    prompts: string[],\n    runId: string\n  ): Promise<void> {\n    for (const prompt of prompts) {\n      // Check for PII\n      const detectResult = await this.client.detect({\n        text: prompt,\n        types: this.config.piiTypes,\n      });\n\n      if (detectResult.detections.length > 0) {\n        this.detections.push(...detectResult.detections);\n        console.warn(\n          `[SafeKeyLab] PII detected in prompt: ${detectResult.detections.map((d) => d.type).join(', ')}`\n        );\n\n        if (this.config.blockOnPII) {\n          throw new PIIBlockedError(detectResult.detections);\n        }\n      }\n\n      // Check for threats\n      const validateResult = await this.client.validatePrompt({ prompt });\n\n      if (validateResult.threats.length > 0) {\n        this.threats.push(...validateResult.threats);\n        console.warn(\n          `[SafeKeyLab] Threats detected in prompt: ${validateResult.threats.map((t) => t.type).join(', ')}`\n        );\n\n        if (this.config.blockOnThreat !== false) {\n          throw new ThreatBlockedError(validateResult.threats);\n        }\n      }\n    }\n  }\n\n  /**\n   * Called when chat model starts\n   */\n  async handleChatModelStart(\n    llm: Serialized,\n    messages: Array<Array<{ content: string; [key: string]: unknown }>>,\n    runId: string\n  ): Promise<void> {\n    for (const messageGroup of messages) {\n      for (const message of messageGroup) {\n        if (typeof message.content === 'string') {\n          const detectResult = await this.client.detect({\n            text: message.content,\n            types: this.config.piiTypes,\n          });\n\n          if (detectResult.detections.length > 0) {\n            this.detections.push(...detectResult.detections);\n\n            if (this.config.blockOnPII) {\n              throw new PIIBlockedError(detectResult.detections);\n            }\n          }\n\n          const validateResult = await this.client.validatePrompt({\n            prompt: message.content,\n          });\n\n          if (validateResult.threats.length > 0) {\n            this.threats.push(...validateResult.threats);\n\n            if (this.config.blockOnThreat !== false) {\n              throw new ThreatBlockedError(validateResult.threats);\n            }\n          }\n        }\n      }\n    }\n  }\n\n  /**\n   * Called when LLM ends\n   */\n  async handleLLMEnd(output: LLMResult, runId: string): Promise<void> {\n    for (const generation of output.generations.flat()) {\n      if (generation.text) {\n        const scanResult = await this.client.scanOutput({ output: generation.text });\n\n        if (!scanResult.is_safe) {\n          console.warn(\n            `[SafeKeyLab] Issues detected in LLM output: ${scanResult.issues.map((i) => i.type).join(', ')}`\n          );\n        }\n      }\n    }\n  }\n\n  /**\n   * Get all detections from this session\n   */\n  getDetections(): PIIDetection[] {\n    return [...this.detections];\n  }\n\n  /**\n   * Get all threats from this session\n   */\n  getThreats(): Threat[] {\n    return [...this.threats];\n  }\n\n  /**\n   * Clear detection history\n   */\n  clearHistory(): void {\n    this.detections = [];\n    this.threats = [];\n  }\n}\n\n/**\n * LangChain tool interface\n */\ninterface ToolConfig {\n  name: string;\n  description: string;\n  func: (input: string) => Promise<string>;\n}\n\n/**\n * Create a PII protection tool for LangChain agents\n */\nexport function createPIIProtectionTool(config: Partial<SafeKeyLabConfig>): ToolConfig {\n  const client = new SafeKeyLab({\n    apiKey: config.apiKey!,\n    baseUrl: config.baseUrl,\n    timeout: config.timeout,\n    debug: config.debug,\n  });\n\n  return {\n    name: 'safekeylab_pii_protection',\n    description:\n      'Detects and redacts PII (personally identifiable information) from text. ' +\n      'Use this tool to protect sensitive data before processing or storing. ' +\n      'Input should be the text to protect. Output is the redacted text.',\n    func: async (input: string): Promise<string> => {\n      const result = await client.protect({ text: input });\n      return result.redacted_text;\n    },\n  };\n}\n\n/**\n * Create a PII detection tool for LangChain agents\n */\nexport function createPIIDetectionTool(config: Partial<SafeKeyLabConfig>): ToolConfig {\n  const client = new SafeKeyLab({\n    apiKey: config.apiKey!,\n    baseUrl: config.baseUrl,\n    timeout: config.timeout,\n    debug: config.debug,\n  });\n\n  return {\n    name: 'safekeylab_pii_detection',\n    description:\n      'Detects PII (personally identifiable information) in text without modifying it. ' +\n      'Use this tool to identify what sensitive data is present. ' +\n      'Input should be the text to scan. Output is a list of detected PII types and locations.',\n    func: async (input: string): Promise<string> => {\n      const result = await client.detect({ text: input });\n      if (result.count === 0) {\n        return 'No PII detected.';\n      }\n      return (\n        `Found ${result.count} PII items:\\n` +\n        result.detections\n          .map((d) => `- ${d.type}: \"${d.value}\" (confidence: ${d.confidence})`)\n          .join('\\n')\n      );\n    },\n  };\n}\n\n/**\n * Create a prompt validation tool for LangChain agents\n */\nexport function createPromptValidationTool(config: Partial<SafeKeyLabConfig>): ToolConfig {\n  const client = new SafeKeyLab({\n    apiKey: config.apiKey!,\n    baseUrl: config.baseUrl,\n    timeout: config.timeout,\n    debug: config.debug,\n  });\n\n  return {\n    name: 'safekeylab_prompt_validation',\n    description:\n      'Validates a prompt for security threats like injection attacks. ' +\n      'Use this tool to check if user input is safe before using it in an LLM prompt. ' +\n      'Input should be the prompt to validate. Output indicates if the prompt is safe.',\n    func: async (input: string): Promise<string> => {\n      const result = await client.validatePrompt({ prompt: input });\n      if (result.is_safe) {\n        return 'Prompt is safe.';\n      }\n      return (\n        `Prompt has ${result.threats_detected} threats:\\n` +\n        result.threats.map((t) => `- ${t.type} (${t.severity}): ${t.description}`).join('\\n') +\n        `\\nRecommendation: ${result.recommendation}`\n      );\n    },\n  };\n}\n\n/**\n * Get all SafeKeyLab tools for use in LangChain agents\n */\nexport function getSafeKeyLabTools(config: Partial<SafeKeyLabConfig>): ToolConfig[] {\n  return [\n    createPIIProtectionTool(config),\n    createPIIDetectionTool(config),\n    createPromptValidationTool(config),\n  ];\n}\n\nexport default SafeKeyLabCallbackHandler;\n"]}