@secureai-sdk/sdk 1.2.0

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @secureai/sdk
+ * Enterprise AI Security, GrokBot Firewall, Agent Action Armor & Reversible PII Vault
+ * Powered by AcadmyAI (https://secure.acadmyai.com)
+ */
+export * from "./types";
+export * from "./guard";
+export * from "./vault";
+export * from "./grok-bot";
+export * from "./client";
+export * from "./mcp-proxy";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,28 @@
+"use strict";
+/**
+ * @secureai/sdk
+ * Enterprise AI Security, GrokBot Firewall, Agent Action Armor & Reversible PII Vault
+ * Powered by AcadmyAI (https://secure.acadmyai.com)
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+__exportStar(require("./guard"), exports);
+__exportStar(require("./vault"), exports);
+__exportStar(require("./grok-bot"), exports);
+__exportStar(require("./client"), exports);
+__exportStar(require("./mcp-proxy"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;AAEH,0CAAwB;AACxB,0CAAwB;AACxB,0CAAwB;AACxB,6CAA2B;AAC3B,2CAAyB;AACzB,8CAA4B"}

package/dist/mcp-proxy.d.ts

@@ -0,0 +1,8 @@
+export interface MCPProxyOptions {
+    targetCommand: string;
+    targetArgs: string[];
+    apiKey?: string;
+    policy?: "read-only-strict" | "standard" | "developer";
+}
+export declare function startMCPProxy(options: MCPProxyOptions): void;
+//# sourceMappingURL=mcp-proxy.d.ts.map

package/dist/mcp-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-proxy.d.ts","sourceRoot":"","sources":["../src/mcp-proxy.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,kBAAkB,GAAG,UAAU,GAAG,WAAW,CAAC;CACxD;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAgF5D"}

package/dist/mcp-proxy.js

@@ -0,0 +1,111 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startMCPProxy = startMCPProxy;
+const child_process_1 = require("child_process");
+const readline = __importStar(require("readline"));
+const SQLI_REGEX = /(?:union\s+select|drop\s+table|delete\s+from|insert\s+into|truncate\s+table|--|\bwaitfor\s+delay\b)/i;
+const TRAVERSAL_REGEX = /(?:\.\.\/|\.\.\\|\/\.env|id_rsa|credentials)/i;
+function startMCPProxy(options) {
+    const apiKey = options.apiKey || process.env.SECUREAI_API_KEY;
+    if (!apiKey) {
+        process.stderr.write("[SecureAI MCP Proxy ERROR]: SECUREAI_API_KEY environment variable is required.\n" +
+            "Generate an API key at https://secure.acadmyai.com/console/apikeys\n");
+        process.exit(1);
+    }
+    process.stderr.write(`[SecureAI MCP Proxy]: Zero-Trust interceptor active for '${options.targetCommand} ${options.targetArgs.join(" ")}'\n`);
+    const targetProcess = (0, child_process_1.spawn)(options.targetCommand, options.targetArgs, {
+        stdio: ["pipe", "pipe", "inherit"],
+        env: process.env
+    });
+    // Intercept Agent -> MCP Target (stdin)
+    const rlStdin = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        terminal: false
+    });
+    rlStdin.on("line", (line) => {
+        if (!line.trim())
+            return;
+        try {
+            const msg = JSON.parse(line);
+            if (msg.method === "tools/call") {
+                const toolName = msg.params?.name || "";
+                const argsStr = JSON.stringify(msg.params?.arguments || {});
+                // 1. SQL Injection Parameter Check
+                if (SQLI_REGEX.test(argsStr)) {
+                    process.stderr.write(`[SecureAI MCP BLOCKED]: SQL Injection detected in tool '${toolName}' arguments.\n`);
+                    const blockedResp = {
+                        jsonrpc: "2.0",
+                        id: msg.id,
+                        error: {
+                            code: -32000,
+                            message: `SecureAI Policy Block: SQL Injection signature detected in parameters for tool '${toolName}'.`
+                        }
+                    };
+                    process.stdout.write(JSON.stringify(blockedResp) + "\n");
+                    return;
+                }
+                // 2. Path Traversal & Sensitive File Access Check
+                if (TRAVERSAL_REGEX.test(argsStr)) {
+                    process.stderr.write(`[SecureAI MCP BLOCKED]: Path traversal or secret file access detected in tool '${toolName}'.\n`);
+                    const blockedResp = {
+                        jsonrpc: "2.0",
+                        id: msg.id,
+                        error: {
+                            code: -32000,
+                            message: `SecureAI Policy Block: Path traversal or unauthorized secret access forbidden in tool '${toolName}'.`
+                        }
+                    };
+                    process.stdout.write(JSON.stringify(blockedResp) + "\n");
+                    return;
+                }
+            }
+            // Forward sanitized command to target
+            targetProcess.stdin.write(line + "\n");
+        }
+        catch {
+            targetProcess.stdin.write(line + "\n");
+        }
+    });
+    // Forward Target MCP -> Agent (stdout)
+    targetProcess.stdout.on("data", (chunk) => {
+        process.stdout.write(chunk);
+    });
+    targetProcess.on("exit", (code) => {
+        process.exit(code ?? 0);
+    });
+}
+//# sourceMappingURL=mcp-proxy.js.map

package/dist/mcp-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-proxy.js","sourceRoot":"","sources":["../src/mcp-proxy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaA,sCAgFC;AA7FD,iDAAsC;AACtC,mDAAqC;AAErC,MAAM,UAAU,GAAG,sGAAsG,CAAC;AAC1H,MAAM,eAAe,GAAG,+CAA+C,CAAC;AASxE,SAAgB,aAAa,CAAC,OAAwB;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kFAAkF;YAClF,sEAAsE,CACvE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4DAA4D,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CACvH,CAAC;IAEF,MAAM,aAAa,GAAG,IAAA,qBAAK,EAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE;QACrE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;QAClC,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IAEH,wCAAwC;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,eAAe,CAAC;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;QAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;gBAE5D,mCAAmC;gBACnC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,QAAQ,gBAAgB,CAAC,CAAC;oBAC1G,MAAM,WAAW,GAAG;wBAClB,OAAO,EAAE,KAAK;wBACd,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,KAAK,EAAE;4BACL,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EAAE,mFAAmF,QAAQ,IAAI;yBACzG;qBACF,CAAC;oBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC;oBACzD,OAAO;gBACT,CAAC;gBAED,kDAAkD;gBAClD,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kFAAkF,QAAQ,MAAM,CAAC,CAAC;oBACvH,MAAM,WAAW,GAAG;wBAClB,OAAO,EAAE,KAAK;wBACd,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,KAAK,EAAE;4BACL,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EAAE,0FAA0F,QAAQ,IAAI;yBAChH;qBACF,CAAC;oBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC;oBACzD,OAAO;gBACT,CAAC;YACH,CAAC;YAED,sCAAsC;YACtC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uCAAuC;IACvC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAmB,EAAE,EAAE;QAC/C,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,111 @@
+/**
+ * SecureAI TypeScript SDK Types
+ * Enterprise AI Security, GrokBot Firewall, Agent Action Armor & Reversible PII Vault
+ */
+export type ThreatSeverity = "CRITICAL" | "HIGH" | "MEDIUM" | "LOW" | "INFO";
+export type SecurityAction = "ALLOW" | "BLOCK" | "REWRITE_SAFE" | "STEP_UP_HITL" | "ALLOW_WITH_TOKENIZATION";
+export interface UserSecurityContext {
+    userId?: string;
+    role?: "admin" | "analyst" | "developer" | "guest";
+    department?: string;
+    clearanceLevel?: 1 | 2 | 3 | 4 | 5;
+    sessionId?: string;
+}
+export interface PromptInspectionResult {
+    isSafe: boolean;
+    action: SecurityAction;
+    riskScore: number;
+    threatDetected?: string | null;
+    matchedPatterns: string[];
+    sanitizedText: string;
+    latencyMs: number;
+    quota?: {
+        tier: string;
+        used: number;
+        limit: number;
+        remaining: number;
+    };
+}
+export interface BotIngressResult {
+    isSafe: boolean;
+    sanitizedText: string;
+    threatDetected?: string | null;
+    riskScore: number;
+    latencyMs: number;
+    matchedPatterns: string[];
+}
+export interface BotToolResult {
+    allowed: boolean;
+    toolName: string;
+    requiredClearance: number;
+    botClearance: number;
+    syntheticError?: string | null;
+    reason?: string | null;
+}
+export interface BotEgressResult {
+    isSafe: boolean;
+    sanitizedText: string;
+    leaksRedacted: number;
+    redactedTypes: string[];
+    latencyMs: number;
+}
+export interface AgentActionPayload {
+    actionType: "EXECUTE_SHELL" | "WRITE_FILE" | "READ_FILE" | "NETWORK_EGRESS";
+    target: string;
+    command?: string;
+    userContext?: UserSecurityContext;
+}
+export interface AgentActionVerdict {
+    verdict: SecurityAction;
+    isAllowed: boolean;
+    riskScore: number;
+    threatsDetected: string[];
+    rewrittenCommand?: string | null;
+    explanation?: string;
+    tamperProofSignature?: string;
+}
+export interface PIIVaultResult {
+    sanitizedText: string;
+    redactedCount: number;
+    tokenMap: Record<string, string>;
+}
+export interface ModelScanResult {
+    isSafe: boolean;
+    verdict: "SAFE" | "BLOCKED" | "MALICIOUS";
+    riskScore: number;
+    maliciousOpcodes: string[];
+    formatDetected: string;
+    explanation: string;
+}
+export interface ServiceConfigItem {
+    enabled: boolean;
+    mode?: string;
+    threshold?: number;
+    clearanceLevel?: number;
+    description?: string;
+    [key: string]: any;
+}
+export interface ServicesConfig {
+    prompt_injection_guard?: ServiceConfigItem;
+    pii_vault?: ServiceConfigItem;
+    agent_action_firewall?: ServiceConfigItem;
+    mcp_gateway?: ServiceConfigItem;
+    bot_firewall?: ServiceConfigItem;
+    rag_context_guard?: ServiceConfigItem;
+    grounding_scorer?: ServiceConfigItem;
+    model_scanner?: ServiceConfigItem;
+    canary_vault?: ServiceConfigItem;
+    toxicity_filter?: ServiceConfigItem;
+    semantic_cache?: ServiceConfigItem;
+    redteam_simulator?: ServiceConfigItem;
+    aspm_engine?: ServiceConfigItem;
+    aibom_generator?: ServiceConfigItem;
+    [key: string]: ServiceConfigItem | undefined;
+}
+export interface SecureAIClientOptions {
+    apiKey?: string;
+    baseUrl?: string;
+    timeoutMs?: number;
+    services?: ServicesConfig;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE7E,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,cAAc,GAAG,cAAc,GAAG,yBAAyB,CAAC;AAE7G,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,eAAe,GAAG,YAAY,GAAG,WAAW,GAAG,gBAAgB,CAAC;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,sBAAsB,CAAC,EAAE,iBAAiB,CAAC;IAC3C,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,qBAAqB,CAAC,EAAE,iBAAiB,CAAC;IAC1C,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,eAAe,CAAC,EAAE,iBAAiB,CAAC;IACpC,cAAc,CAAC,EAAE,iBAAiB,CAAC;IACnC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,eAAe,CAAC,EAAE,iBAAiB,CAAC;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAAC;CAC9C;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B"}

package/dist/types.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * SecureAI TypeScript SDK Types
+ * Enterprise AI Security, GrokBot Firewall, Agent Action Armor & Reversible PII Vault
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/dist/vault.d.ts

@@ -0,0 +1,7 @@
+import { PIIVaultResult } from "./types";
+export declare class PIIVault {
+    tokenize(text: string): PIIVaultResult;
+    detokenize(text: string, tokenMap: Record<string, string>): string;
+}
+export declare const defaultVault: PIIVault;
+//# sourceMappingURL=vault.d.ts.map

package/dist/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAUzC,qBAAa,QAAQ;IACZ,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc;IAyBtC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM;CAQ1E;AAED,eAAO,MAAM,YAAY,UAAiB,CAAC"}

package/dist/vault.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultVault = exports.PIIVault = void 0;
+const PII_PATTERNS = [
+    { type: "SSN", regex: /\b\d{3}-\d{2}-\d{4}\b/g },
+    { type: "CREDIT_CARD", regex: /\b(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|3[47][0-9]{13})\b/g },
+    { type: "EMAIL", regex: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b/g },
+    { type: "PHONE", regex: /\b(?:\+?\d{1,3}[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b/g },
+    { type: "API_KEY", regex: /\b(?:sk-[a-zA-Z0-9]{20,}|sec_live_[a-zA-Z0-9]{16,}|ghp_[a-zA-Z0-9]{36,})\b/g }
+];
+class PIIVault {
+    tokenize(text) {
+        if (!text) {
+            return { sanitizedText: "", redactedCount: 0, tokenMap: {} };
+        }
+        let sanitized = text;
+        const tokenMap = {};
+        let count = 0;
+        for (const { type, regex } of PII_PATTERNS) {
+            sanitized = sanitized.replace(regex, (match) => {
+                count++;
+                const token = `[SEC_${type}_${Math.random().toString(36).substring(2, 8).toUpperCase()}]`;
+                tokenMap[token] = match;
+                return token;
+            });
+        }
+        return {
+            sanitizedText: sanitized,
+            redactedCount: count,
+            tokenMap
+        };
+    }
+    detokenize(text, tokenMap) {
+        if (!text || !tokenMap)
+            return text;
+        let restored = text;
+        for (const [token, original] of Object.entries(tokenMap)) {
+            restored = restored.split(token).join(original);
+        }
+        return restored;
+    }
+}
+exports.PIIVault = PIIVault;
+exports.defaultVault = new PIIVault();
+//# sourceMappingURL=vault.js.map

package/dist/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":";;;AAEA,MAAM,YAAY,GAA2C;IAC3D,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE;IAChD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,iEAAiE,EAAE;IACjG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sDAAsD,EAAE;IAChF,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,gEAAgE,EAAE;IAC1F,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,6EAA6E,EAAE;CAC1G,CAAC;AAEF,MAAa,QAAQ;IACZ,QAAQ,CAAC,IAAY;QAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC/D,CAAC;QAED,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,YAAY,EAAE,CAAC;YAC3C,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7C,KAAK,EAAE,CAAC;gBACR,MAAM,KAAK,GAAG,QAAQ,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC;gBAC1F,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;gBACxB,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,aAAa,EAAE,SAAS;YACxB,aAAa,EAAE,KAAK;YACpB,QAAQ;SACT,CAAC;IACJ,CAAC;IAEM,UAAU,CAAC,IAAY,EAAE,QAAgC;QAC9D,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAlCD,4BAkCC;AAEY,QAAA,YAAY,GAAG,IAAI,QAAQ,EAAE,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@secureai-sdk/sdk",
+  "version": "1.2.0",
+  "description": "Enterprise AI Security, GrokBot & Agent Runtime Firewall, In-Process Guardrails, Zero-Trust MCP Proxy & Reversible PII Vault SDK by AcadmyAI",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "secureai-mcp-proxy": "dist/bin/mcp-proxy.js",
+    "secureai-guard": "dist/bin/mcp-proxy.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "ai-security",
+    "guardrails",
+    "prompt-injection",
+    "grok-bot",
+    "agent-firewall",
+    "mcp-proxy",
+    "model-context-protocol",
+    "pii-vault",
+    "claude-code",
+    "cursor-ai"
+  ],
+  "author": "AcadmyAI <acadmyaiorg@gmail.com>",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/nickmudit/secure_acadmyai.git",
+    "directory": "sdk/typescript"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "homepage": "https://secure.acadmyai.com",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.4.0",
+    "@types/node": "^20.0.0"
+  }
+}

package/src/bin/mcp-proxy.ts

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+
+import { startMCPProxy } from "../mcp-proxy";
+
+const args = process.argv.slice(2);
+
+// Split at '--' if present
+const separatorIndex = args.indexOf("--");
+let targetCommand = "";
+let targetArgs: string[] = [];
+
+if (separatorIndex !== -1 && separatorIndex < args.length - 1) {
+  targetCommand = args[separatorIndex + 1];
+  targetArgs = args.slice(separatorIndex + 2);
+} else if (args.length > 0) {
+  targetCommand = args[0];
+  targetArgs = args.slice(1);
+} else {
+  console.error("Usage: secureai-mcp-proxy -- <command> [args...]");
+  console.error("Example: secureai-mcp-proxy -- npx -y @modelcontextprotocol/server-postgres postgresql://...");
+  process.exit(1);
+}
+
+startMCPProxy({
+  targetCommand,
+  targetArgs
+});

package/src/client.ts

@@ -0,0 +1,177 @@
+import {
+  PromptInspectionResult,
+  AgentActionVerdict,
+  PIIVaultResult,
+  ModelScanResult,
+  ServicesConfig,
+  SecureAIClientOptions,
+  UserSecurityContext
+} from "./types";
+
+export class SecureAI {
+  private apiKey: string;
+  private baseUrl: string;
+  private timeoutMs: number;
+
+  constructor(options: SecureAIClientOptions = {}) {
+    this.apiKey = options.apiKey || process.env.SECUREAI_API_KEY || "";
+    if (!this.apiKey) {
+      throw new Error(
+        "SecureAI Authentication Required: No API key provided. " +
+        "Pass { apiKey: 'sec_live_...' } or set SECUREAI_API_KEY environment variable. " +
+        "Create a key at https://secure.acadmyai.com/console/apikeys"
+      );
+    }
+    this.baseUrl = (options.baseUrl || process.env.SECUREAI_BASE_URL || "https://secure.acadmyai.com/v1").replace(/\/$/, "");
+    this.timeoutMs = options.timeoutMs || 10000;
+  }
+
+  private async request<T>(endpoint: string, options: RequestInit = {}): Promise<T> {
+    const url = `${this.baseUrl}${endpoint}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+
+    try {
+      const response = await fetch(url, {
+        ...options,
+        signal: controller.signal,
+        headers: {
+          "Authorization": `Bearer ${this.apiKey}`,
+          "Content-Type": "application/json",
+          "User-Agent": "@secureai/sdk-node/1.2.0",
+          ...(options.headers || {})
+        }
+      });
+
+      if (response.status === 401) {
+        throw new Error(
+          "SecureAI Authentication Error (401): Invalid or unauthorized API key. " +
+          "Generate a valid key at https://secure.acadmyai.com/console/apikeys"
+        );
+      }
+
+      if (response.status === 429) {
+        throw new Error(
+          "SecureAI Rate/Quota Error (429): Monthly gateway scan limit reached. " +
+          "Upgrade your plan at https://secure.acadmyai.com/console/billing"
+        );
+      }
+
+      if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`SecureAI Gateway Error (${response.status}): ${errorText}`);
+      }
+
+      return (await response.json()) as T;
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+
+  /**
+   * Inspects prompt for injections, jailbreaks, and toxicity.
+   */
+  public async inspect(prompt: string, context?: UserSecurityContext): Promise<PromptInspectionResult> {
+    return this.request<PromptInspectionResult>("/guard/inspect", {
+      method: "POST",
+      body: JSON.stringify({
+        prompt,
+        user_id: context?.userId,
+        role: context?.role,
+        department: context?.department,
+        clearance_level: context?.clearanceLevel
+      })
+    });
+  }
+
+  /**
+   * Intercepts agent shell commands and actions with safe auto-rewriting.
+   */
+  public async interceptAgentAction(
+    actionType: "EXECUTE_SHELL" | "WRITE_FILE" | "READ_FILE" | "NETWORK_EGRESS",
+    target: string,
+    command?: string,
+    context?: UserSecurityContext
+  ): Promise<AgentActionVerdict> {
+    return this.request<AgentActionVerdict>("/firewall/agent/intercept", {
+      method: "POST",
+      body: JSON.stringify({
+        action_type: actionType,
+        target,
+        command,
+        user_id: context?.userId,
+        role: context?.role,
+        clearance_level: context?.clearanceLevel
+      })
+    });
+  }
+
+  /**
+   * Scans serialized ML model weights (.pkl, .pt, .onnx) for remote code execution opcodes.
+   */
+  public async scanModel(filename: string, fileContentBase64: string): Promise<ModelScanResult> {
+    return this.request<ModelScanResult>("/scanner/model", {
+      method: "POST",
+      body: JSON.stringify({
+        filename,
+        file_content_base64: fileContentBase64
+      })
+    });
+  }
+
+  /**
+   * Tokenizes PII into synthetic surrogate tokens.
+   */
+  public async tokenizePII(text: string): Promise<PIIVaultResult> {
+    const res = await this.request<{ sanitized_text: string; redacted_count: number; token_map: Record<string, string> }>(
+      "/vault/tokenize",
+      {
+        method: "POST",
+        body: JSON.stringify({ text })
+      }
+    );
+    return {
+      sanitizedText: res.sanitized_text,
+      redactedCount: res.redacted_count,
+      tokenMap: res.token_map
+    };
+  }
+
+  /**
+   * Detokenizes synthetic surrogate tokens back to original values.
+   */
+  public async detokenizePII(text: string, tokenMap: Record<string, string>): Promise<string> {
+    const res = await this.request<{ detokenized_text: string }>("/vault/detokenize", {
+      method: "POST",
+      body: JSON.stringify({ text, token_map: tokenMap })
+    });
+    return res.detokenized_text;
+  }
+
+  /**
+   * Retrieves current Service Capability & Capacity Configuration (SCCM).
+   */
+  public async getServicesConfig(): Promise<{ organizationId: string; services: ServicesConfig }> {
+    const res = await this.request<{ organization_id: string; services: ServicesConfig }>("/services/config", {
+      method: "GET"
+    });
+    return {
+      organizationId: res.organization_id,
+      services: res.services
+    };
+  }
+
+  /**
+   * Updates Service Capability & Capacity Configuration (SCCM).
+   */
+  public async updateServicesConfig(services: ServicesConfig): Promise<{ organizationId: string; services: ServicesConfig }> {
+    const res = await this.request<{ organization_id: string; services: ServicesConfig }>("/services/config", {
+      method: "POST",
+      body: JSON.stringify({ services })
+    });
+    return {
+      organizationId: res.organization_id,
+      services: res.services
+    };
+  }
+}