@weave_protocol/mund 0.1.0

package/dist/analyzers/injection-detector.js

@@ -0,0 +1,165 @@
+/**
+ * Mund - The Guardian Protocol
+ * Injection Detector - Detects prompt injection attempts
+ */
+export class InjectionDetector {
+    name = 'InjectionDetector';
+    type = 'injection';
+    async analyze(content, rules) {
+        const issues = [];
+        const injectionRules = rules.filter(r => r.type === 'injection' && r.enabled);
+        // Normalize content for detection
+        const normalizedContent = this.normalizeContent(content);
+        for (const rule of injectionRules) {
+            if (!rule.pattern)
+                continue;
+            try {
+                const regex = new RegExp(rule.pattern, 'gi');
+                let match;
+                while ((match = regex.exec(normalizedContent)) !== null) {
+                    const matchText = match[0];
+                    const location = this.getLocation(content, match.index, matchText.length);
+                    issues.push({
+                        rule_id: rule.id,
+                        rule_name: rule.name,
+                        type: rule.type,
+                        severity: rule.severity,
+                        action: rule.action,
+                        match: this.sanitizeMatch(matchText),
+                        location,
+                        suggestion: this.getSuggestion(rule.id)
+                    });
+                }
+            }
+            catch (error) {
+                console.error(`Invalid regex pattern in rule ${rule.id}:`, error);
+            }
+        }
+        // Additional heuristic checks
+        const heuristicIssues = this.heuristicAnalysis(content);
+        issues.push(...heuristicIssues);
+        return issues;
+    }
+    /**
+     * Normalize content to detect obfuscated injection attempts
+     */
+    normalizeContent(content) {
+        return content
+            // Remove zero-width characters
+            .replace(/[\u200B-\u200D\uFEFF]/g, '')
+            // Normalize Unicode variations
+            .normalize('NFKC')
+            // Collapse multiple spaces
+            .replace(/\s+/g, ' ')
+            // Remove common obfuscation characters
+            .replace(/[^\w\s.,!?'"()-]/g, ' ');
+    }
+    /**
+     * Heuristic analysis for injection patterns
+     */
+    heuristicAnalysis(content) {
+        const issues = [];
+        // Check for role switching attempts
+        const roleSwitchPatterns = [
+            /\bsystem\s*:\s*you\s+are/i,
+            /\bassistant\s*:\s*i\s+(will|can|am)/i,
+            /\[system\]/i,
+            /\<\|?system\|?\>/i,
+            /\{system_prompt\}/i,
+        ];
+        for (const pattern of roleSwitchPatterns) {
+            const match = content.match(pattern);
+            if (match) {
+                issues.push({
+                    rule_id: 'heuristic_role_switch',
+                    rule_name: 'Role Switching Attempt',
+                    type: 'injection',
+                    severity: 'high',
+                    action: 'alert',
+                    match: this.sanitizeMatch(match[0]),
+                    suggestion: 'This content appears to attempt to inject role-switching markers.'
+                });
+            }
+        }
+        // Check for markdown/code injection that might alter rendering
+        const markdownPatterns = [
+            /```\s*system/i,
+            /\<script\>/i,
+            /javascript:/i,
+            /data:text\/html/i,
+        ];
+        for (const pattern of markdownPatterns) {
+            const match = content.match(pattern);
+            if (match) {
+                issues.push({
+                    rule_id: 'heuristic_markup_injection',
+                    rule_name: 'Markup Injection Attempt',
+                    type: 'injection',
+                    severity: 'medium',
+                    action: 'alert',
+                    match: this.sanitizeMatch(match[0]),
+                    suggestion: 'This content contains potentially dangerous markup or code injection.'
+                });
+            }
+        }
+        // Check for excessive special characters (potential obfuscation)
+        const specialCharRatio = this.calculateSpecialCharRatio(content);
+        if (specialCharRatio > 0.3 && content.length > 50) {
+            issues.push({
+                rule_id: 'heuristic_obfuscation',
+                rule_name: 'Potential Obfuscation',
+                type: 'injection',
+                severity: 'low',
+                action: 'log',
+                match: `Special character ratio: ${(specialCharRatio * 100).toFixed(1)}%`,
+                suggestion: 'This content has an unusually high ratio of special characters, which may indicate obfuscation.'
+            });
+        }
+        return issues;
+    }
+    /**
+     * Calculate ratio of special characters
+     */
+    calculateSpecialCharRatio(content) {
+        if (content.length === 0)
+            return 0;
+        const specialChars = content.replace(/[\w\s]/g, '').length;
+        return specialChars / content.length;
+    }
+    /**
+     * Calculate location within content
+     */
+    getLocation(content, start, length) {
+        const end = start + length;
+        const lines = content.substring(0, start).split('\n');
+        const line = lines.length;
+        const column = lines[lines.length - 1].length + 1;
+        return { start, end, line, column };
+    }
+    /**
+     * Sanitize match for safe display
+     */
+    sanitizeMatch(match, maxLength = 100) {
+        const sanitized = match
+            .replace(/</g, '&lt;')
+            .replace(/>/g, '&gt;')
+            .replace(/"/g, '&quot;');
+        if (sanitized.length <= maxLength)
+            return sanitized;
+        return sanitized.substring(0, maxLength) + '...';
+    }
+    /**
+     * Get remediation suggestion
+     */
+    getSuggestion(ruleId) {
+        const suggestions = {
+            prompt_injection_ignore: 'This content attempts to make the AI ignore its instructions. Do not process user inputs that contain such patterns.',
+            prompt_injection_jailbreak: 'This appears to be a jailbreak attempt. Such content should be filtered or rejected.',
+            prompt_injection_system: 'This content attempts to extract system prompts. Do not reveal system instructions.',
+            prompt_injection_roleplay: 'This content attempts to manipulate behavior through roleplay. Apply content filtering.',
+        };
+        return suggestions[ruleId] || 'This content shows signs of injection attacks. Review and sanitize input.';
+    }
+}
+export default InjectionDetector;
+//# sourceMappingURL=injection-detector.js.map

package/dist/analyzers/injection-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-detector.js","sourceRoot":"","sources":["../../src/analyzers/injection-detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,OAAO,iBAAiB;IAC5B,IAAI,GAAG,mBAAmB,CAAC;IAC3B,IAAI,GAAG,WAAW,CAAC;IAEnB,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,KAAsB;QACnD,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QAE9E,kCAAkC;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAEzD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAE5B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC7C,IAAI,KAA6B,CAAC;gBAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBACxD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;oBAE1E,MAAM,CAAC,IAAI,CAAC;wBACV,OAAO,EAAE,IAAI,CAAC,EAAE;wBAChB,SAAS,EAAE,IAAI,CAAC,IAAI;wBACpB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;wBACpC,QAAQ;wBACR,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;qBACxC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe;QACtC,OAAO,OAAO;YACZ,+BAA+B;aAC9B,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACtC,+BAA+B;aAC9B,SAAS,CAAC,MAAM,CAAC;YAClB,2BAA2B;aAC1B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YACrB,uCAAuC;aACtC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,OAAe;QACvC,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,oCAAoC;QACpC,MAAM,kBAAkB,GAAG;YACzB,2BAA2B;YAC3B,sCAAsC;YACtC,aAAa;YACb,mBAAmB;YACnB,oBAAoB;SACrB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,uBAAuB;oBAChC,SAAS,EAAE,wBAAwB;oBACnC,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,MAAe;oBACzB,MAAM,EAAE,OAAgB;oBACxB,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACnC,UAAU,EAAE,mEAAmE;iBAChF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,MAAM,gBAAgB,GAAG;YACvB,eAAe;YACf,aAAa;YACb,cAAc;YACd,kBAAkB;SACnB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,4BAA4B;oBACrC,SAAS,EAAE,0BAA0B;oBACrC,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,QAAiB;oBAC3B,MAAM,EAAE,OAAgB;oBACxB,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACnC,UAAU,EAAE,uEAAuE;iBACpF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,MAAM,gBAAgB,GAAG,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,gBAAgB,GAAG,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,uBAAuB;gBAChC,SAAS,EAAE,uBAAuB;gBAClC,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,KAAc;gBACxB,MAAM,EAAE,KAAc;gBACtB,KAAK,EAAE,4BAA4B,CAAC,gBAAgB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;gBACzE,UAAU,EAAE,iGAAiG;aAC9G,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,OAAe;QAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;QAC3D,OAAO,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc;QAChE,MAAM,GAAG,GAAG,KAAK,GAAG,MAAM,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAa,EAAE,SAAS,GAAG,GAAG;QAClD,MAAM,SAAS,GAAG,KAAK;aACpB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAE3B,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QACpD,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IACnD,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,MAAc;QAClC,MAAM,WAAW,GAA2B;YAC1C,uBAAuB,EAAE,sHAAsH;YAC/I,0BAA0B,EAAE,sFAAsF;YAClH,uBAAuB,EAAE,qFAAqF;YAC9G,yBAAyB,EAAE,yFAAyF;SACrH,CAAC;QAEF,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,2EAA2E,CAAC;IAC5G,CAAC;CACF;AAED,eAAe,iBAAiB,CAAC"}

package/dist/analyzers/pii-detector.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Mund - The Guardian Protocol
+ * PII Detector - Detects personally identifiable information
+ */
+import { type DetectionRule, type SecurityIssue, type IAnalyzer } from '../types.js';
+export declare class PIIDetector implements IAnalyzer {
+    name: string;
+    type: string;
+    analyze(content: string, rules: DetectionRule[]): Promise<SecurityIssue[]>;
+    /**
+     * Additional validation for matches to reduce false positives
+     */
+    private validateMatch;
+    /**
+     * Validate SSN format (basic validation, not checking if real)
+     */
+    private validateSSN;
+    /**
+     * Validate credit card using Luhn algorithm
+     */
+    private validateCreditCard;
+    /**
+     * Validate email address format
+     */
+    private validateEmail;
+    /**
+     * Validate IP address (exclude obvious non-IPs)
+     */
+    private validateIPAddress;
+    /**
+     * Calculate location within content
+     */
+    private getLocation;
+    /**
+     * Redact PII for safe display
+     */
+    private redactPII;
+    /**
+     * Get remediation suggestion
+     */
+    private getSuggestion;
+}
+export default PIIDetector;
+//# sourceMappingURL=pii-detector.d.ts.map

package/dist/analyzers/pii-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-detector.d.ts","sourceRoot":"","sources":["../../src/analyzers/pii-detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,SAAS,EAEf,MAAM,aAAa,CAAC;AAErB,qBAAa,WAAY,YAAW,SAAS;IAC3C,IAAI,SAAiB;IACrB,IAAI,SAAS;IAEP,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAwChF;;OAEG;IACH,OAAO,CAAC,aAAa;IAerB;;OAEG;IACH,OAAO,CAAC,WAAW;IAmBnB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAwB1B;;OAEG;IACH,OAAO,CAAC,aAAa;IAgBrB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAyBzB;;OAEG;IACH,OAAO,CAAC,WAAW;IAQnB;;OAEG;IACH,OAAO,CAAC,SAAS;IAmBjB;;OAEG;IACH,OAAO,CAAC,aAAa;CAWtB;AAED,eAAe,WAAW,CAAC"}

package/dist/analyzers/pii-detector.js

@@ -0,0 +1,190 @@
+/**
+ * Mund - The Guardian Protocol
+ * PII Detector - Detects personally identifiable information
+ */
+export class PIIDetector {
+    name = 'PIIDetector';
+    type = 'pii';
+    async analyze(content, rules) {
+        const issues = [];
+        const piiRules = rules.filter(r => r.type === 'pii' && r.enabled);
+        for (const rule of piiRules) {
+            if (!rule.pattern)
+                continue;
+            try {
+                const regex = new RegExp(rule.pattern, 'g');
+                let match;
+                while ((match = regex.exec(content)) !== null) {
+                    const matchText = match[0];
+                    // Additional validation for specific types
+                    if (!this.validateMatch(rule.id, matchText)) {
+                        continue;
+                    }
+                    const location = this.getLocation(content, match.index, matchText.length);
+                    issues.push({
+                        rule_id: rule.id,
+                        rule_name: rule.name,
+                        type: rule.type,
+                        severity: rule.severity,
+                        action: rule.action,
+                        match: this.redactPII(rule.id, matchText),
+                        location,
+                        suggestion: this.getSuggestion(rule.id)
+                    });
+                }
+            }
+            catch (error) {
+                console.error(`Invalid regex pattern in rule ${rule.id}:`, error);
+            }
+        }
+        return issues;
+    }
+    /**
+     * Additional validation for matches to reduce false positives
+     */
+    validateMatch(ruleId, match) {
+        switch (ruleId) {
+            case 'ssn_us':
+                return this.validateSSN(match);
+            case 'credit_card':
+                return this.validateCreditCard(match);
+            case 'email_address':
+                return this.validateEmail(match);
+            case 'ip_address':
+                return this.validateIPAddress(match);
+            default:
+                return true;
+        }
+    }
+    /**
+     * Validate SSN format (basic validation, not checking if real)
+     */
+    validateSSN(ssn) {
+        const digits = ssn.replace(/\D/g, '');
+        if (digits.length !== 9)
+            return false;
+        // SSNs cannot start with 000, 666, or 900-999
+        const area = parseInt(digits.substring(0, 3));
+        if (area === 0 || area === 666 || area >= 900)
+            return false;
+        // Group number cannot be 00
+        const group = parseInt(digits.substring(3, 5));
+        if (group === 0)
+            return false;
+        // Serial number cannot be 0000
+        const serial = parseInt(digits.substring(5));
+        if (serial === 0)
+            return false;
+        return true;
+    }
+    /**
+     * Validate credit card using Luhn algorithm
+     */
+    validateCreditCard(cc) {
+        const digits = cc.replace(/\D/g, '');
+        if (digits.length < 13 || digits.length > 19)
+            return false;
+        let sum = 0;
+        let isEven = false;
+        for (let i = digits.length - 1; i >= 0; i--) {
+            let digit = parseInt(digits[i]);
+            if (isEven) {
+                digit *= 2;
+                if (digit > 9) {
+                    digit -= 9;
+                }
+            }
+            sum += digit;
+            isEven = !isEven;
+        }
+        return sum % 10 === 0;
+    }
+    /**
+     * Validate email address format
+     */
+    validateEmail(email) {
+        // Check for common false positives
+        const falsePaths = ['.js', '.ts', '.py', '.java', '.cpp', '.go', '.rs'];
+        if (falsePaths.some(ext => email.endsWith(ext)))
+            return false;
+        // Check for reasonable length
+        if (email.length > 254)
+            return false;
+        // Check for valid TLD (at least 2 chars)
+        const parts = email.split('.');
+        const tld = parts[parts.length - 1];
+        if (tld.length < 2)
+            return false;
+        return true;
+    }
+    /**
+     * Validate IP address (exclude obvious non-IPs)
+     */
+    validateIPAddress(ip) {
+        // Exclude version numbers (e.g., 1.2.3.4 in software versions)
+        const parts = ip.split('.');
+        // All parts should be valid octets
+        for (const part of parts) {
+            const num = parseInt(part);
+            if (num < 0 || num > 255)
+                return false;
+        }
+        // Exclude common version patterns
+        if (parts[0] === '0' || parts[0] === '1') {
+            if (parseInt(parts[1]) <= 20 && parseInt(parts[2]) <= 20) {
+                return false; // Likely a version number
+            }
+        }
+        // Exclude localhost and broadcast
+        if (ip === '127.0.0.1' || ip === '0.0.0.0' || ip === '255.255.255.255') {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Calculate location within content
+     */
+    getLocation(content, start, length) {
+        const end = start + length;
+        const lines = content.substring(0, start).split('\n');
+        const line = lines.length;
+        const column = lines[lines.length - 1].length + 1;
+        return { start, end, line, column };
+    }
+    /**
+     * Redact PII for safe display
+     */
+    redactPII(ruleId, value) {
+        switch (ruleId) {
+            case 'ssn_us':
+                return `***-**-${value.slice(-4)}`;
+            case 'credit_card':
+                return `****-****-****-${value.slice(-4)}`;
+            case 'email_address':
+                const [local, domain] = value.split('@');
+                return `${local.charAt(0)}***@${domain}`;
+            case 'phone_number_us':
+                return `***-***-${value.slice(-4)}`;
+            case 'ip_address':
+                const parts = value.split('.');
+                return `${parts[0]}.***.***.*${parts[3].slice(-1)}`;
+            default:
+                return value.substring(0, 3) + '***' + value.slice(-2);
+        }
+    }
+    /**
+     * Get remediation suggestion
+     */
+    getSuggestion(ruleId) {
+        const suggestions = {
+            ssn_us: 'Social Security Numbers should never be stored in plain text. Use encryption or tokenization.',
+            credit_card: 'Credit card numbers must be handled according to PCI DSS standards. Use tokenization.',
+            email_address: 'Consider whether email addresses need to be logged. Hash or encrypt if stored.',
+            phone_number_us: 'Phone numbers are PII. Consider whether they need to be included.',
+            ip_address: 'IP addresses can be PII under GDPR. Consider hashing or anonymizing.'
+        };
+        return suggestions[ruleId] || 'Review whether this PII needs to be included and handle according to privacy policies.';
+    }
+}
+export default PIIDetector;
+//# sourceMappingURL=pii-detector.js.map

package/dist/analyzers/pii-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-detector.js","sourceRoot":"","sources":["../../src/analyzers/pii-detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,OAAO,WAAW;IACtB,IAAI,GAAG,aAAa,CAAC;IACrB,IAAI,GAAG,KAAK,CAAC;IAEb,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,KAAsB;QACnD,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QAElE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAE5B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC5C,IAAI,KAA6B,CAAC;gBAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAE3B,2CAA2C;oBAC3C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC;wBAC5C,SAAS;oBACX,CAAC;oBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;oBAE1E,MAAM,CAAC,IAAI,CAAC;wBACV,OAAO,EAAE,IAAI,CAAC,EAAE;wBAChB,SAAS,EAAE,IAAI,CAAC,IAAI;wBACpB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC;wBACzC,QAAQ;wBACR,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;qBACxC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,MAAc,EAAE,KAAa;QACjD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACjC,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxC,KAAK,eAAe;gBAClB,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACnC,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACvC;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,GAAW;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAEtC,8CAA8C;QAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC;QAE5D,4BAA4B;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE9B,+BAA+B;QAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,EAAU;QACnC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QAE3D,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAEhC,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBACd,KAAK,IAAI,CAAC,CAAC;gBACb,CAAC;YACH,CAAC;YAED,GAAG,IAAI,KAAK,CAAC;YACb,MAAM,GAAG,CAAC,MAAM,CAAC;QACnB,CAAC;QAED,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAa;QACjC,mCAAmC;QACnC,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACxE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAE9D,8BAA8B;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC;QAErC,yCAAyC;QACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAEjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,EAAU;QAClC,+DAA+D;QAC/D,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE5B,mCAAmC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG;gBAAE,OAAO,KAAK,CAAC;QACzC,CAAC;QAED,kCAAkC;QAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACzD,OAAO,KAAK,CAAC,CAAC,0BAA0B;YAC1C,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,iBAAiB,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc;QAChE,MAAM,GAAG,GAAG,KAAK,GAAG,MAAM,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,MAAc,EAAE,KAAa;QAC7C,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,QAAQ;gBACX,OAAO,UAAU,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,KAAK,aAAa;gBAChB,OAAO,kBAAkB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,KAAK,eAAe;gBAClB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACzC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC;YAC3C,KAAK,iBAAiB;gBACpB,OAAO,WAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,KAAK,YAAY;gBACf,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC/B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD;gBACE,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,MAAc;QAClC,MAAM,WAAW,GAA2B;YAC1C,MAAM,EAAE,+FAA+F;YACvG,WAAW,EAAE,uFAAuF;YACpG,aAAa,EAAE,gFAAgF;YAC/F,eAAe,EAAE,mEAAmE;YACpF,UAAU,EAAE,sEAAsE;SACnF,CAAC;QAEF,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,wFAAwF,CAAC;IACzH,CAAC;CACF;AAED,eAAe,WAAW,CAAC"}

package/dist/analyzers/secret-scanner.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Mund - The Guardian Protocol
+ * Secret Scanner - Detects secrets, API keys, and credentials
+ */
+import { type DetectionRule, type SecurityIssue, type IAnalyzer } from '../types.js';
+export declare class SecretScanner implements IAnalyzer {
+    name: string;
+    type: string;
+    analyze(content: string, rules: DetectionRule[]): Promise<SecurityIssue[]>;
+    /**
+     * Calculate the location of a match within the content
+     */
+    private getLocation;
+    /**
+     * Redact the middle portion of a secret for safe display
+     */
+    private redactSecret;
+    /**
+     * Get remediation suggestion for a specific rule
+     */
+    private getSuggestion;
+    /**
+     * Calculate Shannon entropy of a string (higher = more random = more likely a secret)
+     */
+    static calculateEntropy(str: string): number;
+    /**
+     * Check if a string is likely a high-entropy secret
+     */
+    static isHighEntropy(str: string, threshold?: number): boolean;
+}
+export default SecretScanner;
+//# sourceMappingURL=secret-scanner.d.ts.map

package/dist/analyzers/secret-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scanner.d.ts","sourceRoot":"","sources":["../../src/analyzers/secret-scanner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,SAAS,EAEf,MAAM,aAAa,CAAC;AAErB,qBAAa,aAAc,YAAW,SAAS;IAC7C,IAAI,SAAmB;IACvB,IAAI,SAAY;IAEV,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAmChF;;OAEG;IACH,OAAO,CAAC,WAAW;IAWnB;;OAEG;IACH,OAAO,CAAC,YAAY;IAYpB;;OAEG;IACH,OAAO,CAAC,aAAa;IAsBrB;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAkB5C;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,OAAO;CAU5D;AAED,eAAe,aAAa,CAAC"}

package/dist/analyzers/secret-scanner.js

@@ -0,0 +1,119 @@
+/**
+ * Mund - The Guardian Protocol
+ * Secret Scanner - Detects secrets, API keys, and credentials
+ */
+export class SecretScanner {
+    name = 'SecretScanner';
+    type = 'secret';
+    async analyze(content, rules) {
+        const issues = [];
+        const secretRules = rules.filter(r => r.type === 'secret' && r.enabled);
+        for (const rule of secretRules) {
+            if (!rule.pattern)
+                continue;
+            try {
+                const regex = new RegExp(rule.pattern, 'g');
+                let match;
+                while ((match = regex.exec(content)) !== null) {
+                    const matchText = match[0];
+                    const location = this.getLocation(content, match.index, matchText.length);
+                    issues.push({
+                        rule_id: rule.id,
+                        rule_name: rule.name,
+                        type: rule.type,
+                        severity: rule.severity,
+                        action: rule.action,
+                        match: this.redactSecret(matchText),
+                        location,
+                        suggestion: this.getSuggestion(rule.id)
+                    });
+                }
+            }
+            catch (error) {
+                // Invalid regex pattern - skip this rule
+                console.error(`Invalid regex pattern in rule ${rule.id}:`, error);
+            }
+        }
+        return issues;
+    }
+    /**
+     * Calculate the location of a match within the content
+     */
+    getLocation(content, start, length) {
+        const end = start + length;
+        // Calculate line and column
+        const lines = content.substring(0, start).split('\n');
+        const line = lines.length;
+        const column = lines[lines.length - 1].length + 1;
+        return { start, end, line, column };
+    }
+    /**
+     * Redact the middle portion of a secret for safe display
+     */
+    redactSecret(secret) {
+        if (secret.length <= 8) {
+            return '****';
+        }
+        const visibleStart = Math.min(4, Math.floor(secret.length * 0.2));
+        const visibleEnd = Math.min(4, Math.floor(secret.length * 0.2));
+        const redactedLength = secret.length - visibleStart - visibleEnd;
+        return `${secret.substring(0, visibleStart)}${'*'.repeat(Math.min(redactedLength, 20))}${secret.substring(secret.length - visibleEnd)}`;
+    }
+    /**
+     * Get remediation suggestion for a specific rule
+     */
+    getSuggestion(ruleId) {
+        const suggestions = {
+            aws_access_key_id: 'Use AWS IAM roles or environment variables instead of hardcoding credentials.',
+            aws_secret_access_key: 'Never commit AWS secret keys. Use AWS Secrets Manager or environment variables.',
+            github_token: 'Use GitHub Actions secrets or environment variables for tokens.',
+            github_fine_grained_token: 'Store GitHub tokens in a secrets manager, not in code.',
+            openai_api_key: 'Use environment variables (OPENAI_API_KEY) instead of hardcoding.',
+            anthropic_api_key: 'Use environment variables (ANTHROPIC_API_KEY) instead of hardcoding.',
+            google_api_key: 'Restrict API key usage in Google Cloud Console and use environment variables.',
+            slack_token: 'Store Slack tokens in environment variables or a secrets manager.',
+            slack_webhook: 'Webhook URLs should be stored in environment variables.',
+            stripe_api_key: 'Use environment variables. Never expose live keys in client-side code.',
+            private_key_block: 'Private keys should never be in code. Use a key management service.',
+            jwt_token: 'JWTs should be transmitted securely and never logged or stored in code.',
+            database_url: 'Database credentials should be in environment variables or a secrets manager.',
+            generic_api_key: 'API keys should be stored in environment variables or a secrets manager.',
+            generic_password: 'Passwords should never be hardcoded. Use a secrets manager.',
+        };
+        return suggestions[ruleId] || 'Remove this secret from code and use a secrets manager or environment variables.';
+    }
+    /**
+     * Calculate Shannon entropy of a string (higher = more random = more likely a secret)
+     */
+    static calculateEntropy(str) {
+        const len = str.length;
+        if (len === 0)
+            return 0;
+        const frequencies = {};
+        for (const char of str) {
+            frequencies[char] = (frequencies[char] || 0) + 1;
+        }
+        let entropy = 0;
+        for (const count of Object.values(frequencies)) {
+            const p = count / len;
+            entropy -= p * Math.log2(p);
+        }
+        return entropy;
+    }
+    /**
+     * Check if a string is likely a high-entropy secret
+     */
+    static isHighEntropy(str, threshold = 4.5) {
+        // Skip strings that are too short or too long
+        if (str.length < 16 || str.length > 200)
+            return false;
+        // Skip if it looks like a common word or path
+        if (/^[a-z]+$/i.test(str))
+            return false;
+        if (str.includes('/') && !str.includes('://'))
+            return false;
+        return SecretScanner.calculateEntropy(str) > threshold;
+    }
+}
+export default SecretScanner;
+//# sourceMappingURL=secret-scanner.js.map

package/dist/analyzers/secret-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scanner.js","sourceRoot":"","sources":["../../src/analyzers/secret-scanner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,OAAO,aAAa;IACxB,IAAI,GAAG,eAAe,CAAC;IACvB,IAAI,GAAG,QAAQ,CAAC;IAEhB,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,KAAsB;QACnD,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QAExE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAE5B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC5C,IAAI,KAA6B,CAAC;gBAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;oBAE1E,MAAM,CAAC,IAAI,CAAC;wBACV,OAAO,EAAE,IAAI,CAAC,EAAE;wBAChB,SAAS,EAAE,IAAI,CAAC,IAAI;wBACpB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;wBACnC,QAAQ;wBACR,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;qBACxC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,yCAAyC;gBACzC,OAAO,CAAC,KAAK,CAAC,iCAAiC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc;QAChE,MAAM,GAAG,GAAG,KAAK,GAAG,MAAM,CAAC;QAE3B,4BAA4B;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAElD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,MAAc;QACjC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;QAChE,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,GAAG,YAAY,GAAG,UAAU,CAAC;QAEjE,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC;IAC1I,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,MAAc;QAClC,MAAM,WAAW,GAA2B;YAC1C,iBAAiB,EAAE,+EAA+E;YAClG,qBAAqB,EAAE,iFAAiF;YACxG,YAAY,EAAE,iEAAiE;YAC/E,yBAAyB,EAAE,wDAAwD;YACnF,cAAc,EAAE,mEAAmE;YACnF,iBAAiB,EAAE,sEAAsE;YACzF,cAAc,EAAE,+EAA+E;YAC/F,WAAW,EAAE,mEAAmE;YAChF,aAAa,EAAE,yDAAyD;YACxE,cAAc,EAAE,wEAAwE;YACxF,iBAAiB,EAAE,qEAAqE;YACxF,SAAS,EAAE,yEAAyE;YACpF,YAAY,EAAE,+EAA+E;YAC7F,eAAe,EAAE,0EAA0E;YAC3F,gBAAgB,EAAE,6DAA6D;SAChF,CAAC;QAEF,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,kFAAkF,CAAC;IACnH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAW;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;QACvB,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAExB,MAAM,WAAW,GAA2B,EAAE,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC;YACtB,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,GAAW,EAAE,SAAS,GAAG,GAAG;QAC/C,8CAA8C;QAC9C,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC;QAEtD,8CAA8C;QAC9C,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE5D,OAAO,aAAa,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IACzD,CAAC;CACF;AAED,eAAe,aAAa,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Mund - The Guardian Protocol
+ * Constants and default configurations
+ */
+import type { DetectionRule, MundConfig } from './types.js';
+export declare const DEFAULT_CONFIG: MundConfig;
+export declare const MAX_CONTENT_LENGTH = 1000000;
+export declare const MAX_SNIPPET_LENGTH = 200;
+export declare const MAX_EVENTS_PER_QUERY = 1000;
+export declare const DEFAULT_EVENTS_LIMIT = 50;
+export declare const SECRET_PATTERNS: DetectionRule[];
+export declare const PII_PATTERNS: DetectionRule[];
+export declare const CODE_PATTERNS: DetectionRule[];
+export declare const INJECTION_PATTERNS: DetectionRule[];
+export declare const EXFILTRATION_PATTERNS: DetectionRule[];
+export declare const DANGEROUS_URL_PATTERNS: RegExp[];
+export declare const DEFAULT_RULES: DetectionRule[];
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAM5D,eAAO,MAAM,cAAc,EAAE,UAQ5B,CAAC;AAMF,eAAO,MAAM,kBAAkB,UAAY,CAAC;AAC5C,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAMvC,eAAO,MAAM,eAAe,EAAE,aAAa,EAuT1C,CAAC;AAMF,eAAO,MAAM,YAAY,EAAE,aAAa,EAmDvC,CAAC;AAMF,eAAO,MAAM,aAAa,EAAE,aAAa,EAuExC,CAAC;AAMF,eAAO,MAAM,kBAAkB,EAAE,aAAa,EAyC7C,CAAC;AAMF,eAAO,MAAM,qBAAqB,EAAE,aAAa,EA+BhD,CAAC;AAMF,eAAO,MAAM,sBAAsB,UAoBlC,CAAC;AAMF,eAAO,MAAM,aAAa,EAAE,aAAa,EAMxC,CAAC"}