atabey 0.0.17 → 0.0.19

package/dist/atabey/src/shared/logger.d.ts

@@ -1,30 +1 @@
-export declare enum LogLevel {
-    DEBUG = 0,
-    INFO = 1,
-    WARN = 2,
-    ERROR = 3,
-    FATAL = 4
-}
-export interface LoggerConfig {
-    minLevel: LogLevel;
-    enableColors: boolean;
-    jsonFormat: boolean;
-    logFile?: string;
-    enablePiiMasking: boolean;
-    piiWarning: boolean;
-}
-export declare class EnterpriseLogger {
-    private config;
-    private static instance;
-    private constructor();
-    static getInstance(): EnterpriseLogger;
-    configure(config: Partial<LoggerConfig>): void;
-    private formatMessage;
-    private log;
-    debug(message: string, meta?: unknown): void;
-    info(message: string, meta?: unknown): void;
-    warn(message: string, meta?: unknown): void;
-    error(message: string, meta?: unknown): void;
-    fatal(message: string, meta?: unknown): void;
-}
-export declare const logger: EnterpriseLogger;
+export * from "atabey-shared/logger.js";

package/dist/atabey/src/shared/logger.js

@@ -1,127 +1,2 @@
-import chalk from "chalk";
-import path from "path";
-import { appendFile, ensureDir } from "./fs.js";
-import { containsPII, maskObject, maskText } from "./pii.js";
-export var LogLevel;
-(function (LogLevel) {
-    LogLevel[LogLevel["DEBUG"] = 0] = "DEBUG";
-    LogLevel[LogLevel["INFO"] = 1] = "INFO";
-    LogLevel[LogLevel["WARN"] = 2] = "WARN";
-    LogLevel[LogLevel["ERROR"] = 3] = "ERROR";
-    LogLevel[LogLevel["FATAL"] = 4] = "FATAL";
-})(LogLevel || (LogLevel = {}));
-export class EnterpriseLogger {
-    config;
-    static instance;
-    constructor() {
-        const isProd = process.env.NODE_ENV === "production";
-        this.config = {
-            minLevel: isProd ? LogLevel.INFO : LogLevel.DEBUG,
-            enableColors: !isProd,
-            jsonFormat: isProd,
-            enablePiiMasking: true, // KVKK: PII masking ON by default
-            piiWarning: true,
-        };
-    }
-    static getInstance() {
-        if (!EnterpriseLogger.instance) {
-            EnterpriseLogger.instance = new EnterpriseLogger();
-        }
-        return EnterpriseLogger.instance;
-    }
-    configure(config) {
-        this.config = { ...this.config, ...config };
-        if (this.config.logFile) {
-            try {
-                ensureDir(path.dirname(this.config.logFile));
-            }
-            catch (err) {
-                // Directly write to stderr — using console here would be circular
-                process.stderr.write(`[Logger] Failed to create log directory: ${err}\n`);
-            }
-        }
-    }
-    formatMessage(level, message, meta) {
-        const timestamp = new Date().toISOString();
-        const pid = process.pid;
-        // [KVKK] PII masking — mask sensitive data before logging
-        const safeMessage = this.config.enablePiiMasking ? maskText(message) : message;
-        const safeMeta = this.config.enablePiiMasking && meta ? maskObject(meta) : meta;
-        // [KVKK] Warn if PII detected in production
-        if (this.config.piiWarning && (containsPII(message) || (meta && containsPII(JSON.stringify(meta))))) {
-            process.stderr.write(`[PII WARNING] Potential PII detected in log at ${timestamp}\n`);
-        }
-        if (this.config.jsonFormat) {
-            return JSON.stringify({
-                timestamp,
-                level: LogLevel[level],
-                pid,
-                message: safeMessage,
-                meta: safeMeta,
-            });
-        }
-        const levelName = LogLevel[level].padEnd(5);
-        let coloredLevel = levelName;
-        if (this.config.enableColors) {
-            switch (level) {
-                case LogLevel.DEBUG:
-                    coloredLevel = chalk.blue(levelName);
-                    break;
-                case LogLevel.INFO:
-                    coloredLevel = chalk.green(levelName);
-                    break;
-                case LogLevel.WARN:
-                    coloredLevel = chalk.yellow(levelName);
-                    break;
-                case LogLevel.ERROR:
-                    coloredLevel = chalk.red(levelName);
-                    break;
-                case LogLevel.FATAL:
-                    coloredLevel = chalk.bgRed.white.bold(levelName);
-                    break;
-            }
-        }
-        const metaStr = safeMeta ? ` | Meta: ${JSON.stringify(safeMeta)}` : "";
-        return `[${timestamp}] [PID:${pid}] [${coloredLevel}]: ${safeMessage}${metaStr}`;
-    }
-    log(level, message, meta) {
-        if (level < this.config.minLevel)
-            return;
-        const formatted = this.formatMessage(level, message, meta);
-        // Route to stderr for ERROR/FATAL, stdout otherwise.
-        // Using process.write directly here is intentional — this IS the logger.
-        if (level >= LogLevel.ERROR) {
-            process.stderr.write(formatted + "\n");
-        }
-        else {
-            process.stdout.write(formatted + "\n");
-        }
-        // Output to file if configured
-        if (this.config.logFile) {
-            try {
-                appendFile(this.config.logFile, formatted + "\n");
-            }
-            catch (err) {
-                // Directly write to stderr — using console here would be circular
-                process.stderr.write(`[Logger] Failed to write to log file: ${err}\n`);
-            }
-        }
-    }
-    debug(message, meta) {
-        this.log(LogLevel.DEBUG, message, meta);
-    }
-    info(message, meta) {
-        this.log(LogLevel.INFO, message, meta);
-    }
-    warn(message, meta) {
-        this.log(LogLevel.WARN, message, meta);
-    }
-    error(message, meta) {
-        this.log(LogLevel.ERROR, message, meta);
-    }
-    fatal(message, meta) {
-        this.log(LogLevel.FATAL, message, meta);
-    }
-}
-export const logger = EnterpriseLogger.getInstance();
+export * from "atabey-shared/logger.js";
 //# sourceMappingURL=logger.js.map

package/dist/atabey/src/shared/logger.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../../src/shared/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE7D,MAAM,CAAN,IAAY,QAMX;AAND,WAAY,QAAQ;IAChB,yCAAS,CAAA;IACT,uCAAQ,CAAA;IACR,uCAAQ,CAAA;IACR,yCAAS,CAAA;IACT,yCAAS,CAAA;AACb,CAAC,EANW,QAAQ,KAAR,QAAQ,QAMnB;AAWD,MAAM,OAAO,gBAAgB;IACjB,MAAM,CAAe;IACrB,MAAM,CAAC,QAAQ,CAAmB;IAE1C;QACI,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG;YACV,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK;YACjD,YAAY,EAAE,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM;YAClB,gBAAgB,EAAE,IAAI,EAAE,kCAAkC;YAC1D,UAAU,EAAE,IAAI;SACnB,CAAC;IACN,CAAC;IAEM,MAAM,CAAC,WAAW;QACrB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC7B,gBAAgB,CAAC,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,gBAAgB,CAAC,QAAQ,CAAC;IACrC,CAAC;IAEM,SAAS,CAAC,MAA6B;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAE5C,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,kEAAkE;gBAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,GAAG,IAAI,CAAC,CAAC;YAC9E,CAAC;QACL,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,KAAe,EAAE,OAAe,EAAE,IAAc;QAClE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QAExB,0DAA0D;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEhF,4CAA4C;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,SAAS,IAAI,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,SAAS,CAAC;gBAClB,SAAS;gBACT,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;gBACtB,GAAG;gBACH,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,QAAQ;aACjB,CAAC,CAAC;QACP,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,YAAY,GAAG,SAAS,CAAC;QAE7B,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC3B,QAAQ,KAAK,EAAE,CAAC;gBACZ,KAAK,QAAQ,CAAC,KAAK;oBACf,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACrC,MAAM;gBACV,KAAK,QAAQ,CAAC,IAAI;oBACd,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACtC,MAAM;gBACV,KAAK,QAAQ,CAAC,IAAI;oBACd,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACvC,MAAM;gBACV,KAAK,QAAQ,CAAC,KAAK;oBACf,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACpC,MAAM;gBACV,KAAK,QAAQ,CAAC,KAAK;oBACf,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACjD,MAAM;YACd,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,SAAS,UAAU,GAAG,MAAM,YAAY,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC;IACrF,CAAC;IAEO,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,IAAc;QACxD,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO;QAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAE3D,qDAAqD;QACrD,yEAAyE;QACzE,IAAI,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;QAED,+BAA+B;QAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,GAAG,IAAI,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,kEAAkE;gBAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,GAAG,IAAI,CAAC,CAAC;YAC3E,CAAC;QACL,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,OAAe,EAAE,IAAc;QACxC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEM,IAAI,CAAC,OAAe,EAAE,IAAc;QACvC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAEM,IAAI,CAAC,OAAe,EAAE,IAAc;QACvC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAEM,KAAK,CAAC,OAAe,EAAE,IAAc;QACxC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,OAAe,EAAE,IAAc;QACxC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;CACJ;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC"}
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../../src/shared/logger.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC"}

package/dist/atabey/src/shared/pii.d.ts

@@ -1,69 +1 @@
-/**
- * [PII] Personally Identifiable Information Masking Service
- *
- * Detects and masks sensitive data in compliance with KVKK/GDPR.
- * Used in audit log, logger, storage layers, and MCP middleware.
- *
- * Supported patterns:
- * - Email addresses
- * - Phone numbers (international, Turkish, US, UK)
- * - TC Identification number (11 digits)
- * - API keys / tokens (OpenAI, Anthropic, Google, GitHub, generic)
- * - Bearer tokens / JWTs
- * - IP addresses (IPv4, IPv6)
- * - Credit card numbers (AMEX, Visa, Mastercard, etc.)
- * - Password / secret fields in structured data
- * - Bank account / IBAN
- * - Date of birth / full address patterns
- * - Custom names (configurable)
- */
-/**
- * Mask sensitive data in a text string.
- */
-export declare function maskText(text: string): string;
-/**
- * Recursively mask sensitive fields in an object.
- * Returns a new object with sensitive values redacted.
- * Strict mode: when true, also masks values in objects even if the key
- * is not a known sensitive field name (catches data passed to unknown schemas).
- */
-export declare function maskObject(obj: unknown, depth?: number, strictMode?: boolean): unknown;
-/**
- * Check if a string contains potential PII.
- * Useful for warning before sending data to external APIs.
- */
-export declare function containsPII(text: string): boolean;
-/**
- * Check if an object contains PII in any of its string values (recursive).
- */
-export declare function containsPIIInObject(obj: unknown, depth?: number): boolean;
-/**
- * Data classification levels for audit/log decisions.
- */
-export type DataClassification = "public" | "internal" | "confidential" | "restricted" | "critical";
-/**
- * Classify a piece of data based on content analysis.
- */
-export declare function classifyData(text: string): DataClassification;
-/**
- * Mask the content field of an MCP tool result.
- * This is used by the MCP middleware layer to automatically
- * sanitize all tool outputs before they reach the AI.
- */
-export declare function maskToolResult(result: {
-    content: Array<{
-        type: string;
-        text: string;
-    }>;
-}): {
-    content: Array<{
-        type: string;
-        text: string;
-    }>;
-};
-/**
- * Mask sensitive arguments in an MCP tool call.
- * This is applied BEFORE the tool handler executes, ensuring
- * PII never reaches any processing layer unnecessarily.
- */
-export declare function maskToolArgs(args: Record<string, unknown>): Record<string, unknown>;
+export * from "atabey-shared/pii.js";

package/dist/atabey/src/shared/pii.js

@@ -1,213 +1,2 @@
-/**
- * [PII] Personally Identifiable Information Masking Service
- *
- * Detects and masks sensitive data in compliance with KVKK/GDPR.
- * Used in audit log, logger, storage layers, and MCP middleware.
- *
- * Supported patterns:
- * - Email addresses
- * - Phone numbers (international, Turkish, US, UK)
- * - TC Identification number (11 digits)
- * - API keys / tokens (OpenAI, Anthropic, Google, GitHub, generic)
- * - Bearer tokens / JWTs
- * - IP addresses (IPv4, IPv6)
- * - Credit card numbers (AMEX, Visa, Mastercard, etc.)
- * - Password / secret fields in structured data
- * - Bank account / IBAN
- * - Date of birth / full address patterns
- * - Custom names (configurable)
- */
-// Sensitive patterns to detect and mask
-// IMPORTANT: More specific patterns MUST come before generic ones
-const SENSITIVE_PATTERNS = [
-    // JWT tokens (complete JWT format) - must be before Bearer
-    { pattern: /eyJ[a-zA-Z0-9_-]+\.eyJ[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+/g, replacement: "***-JWT-REDACTED-***" },
-    // Bearer tokens in Authorization headers
-    { pattern: /Bearer\s+[a-zA-Z0-9._-]+/g, replacement: "Bearer ***-REDACTED-***" },
-    // Basic auth in Authorization headers
-    { pattern: /Basic\s+[a-zA-Z0-9=+/]+/g, replacement: "Basic ***-REDACTED-***" },
-    // API keys (common formats) - must be before generic patterns
-    // Note: ghp_ tokens can contain digits that look like phone numbers, so we mask the entire prefix + suffix
-    { pattern: /\b(sk-[a-zA-Z0-9]{20,}|pk-[a-zA-Z0-9]{20,}|xai-[a-zA-Z0-9]{20,}|AIza[0-9A-Za-z_-]{35}|ghp_[a-zA-Z0-9]{36,}|gho_[a-zA-Z0-9]{36,}|ghu_[a-zA-Z0-9]{36,}|ghb_[a-zA-Z0-9]{36,}|github_pat_[a-zA-Z0-9]{36,}|sk-[a-zA-Z0-9_-]{32,}|sk-[a-zA-Z0-9]{48,}|whsec_[a-zA-Z0-9]{16,})\b/g, replacement: "***-REDACTED-***" },
-    // Social Security Number (US SSN: XXX-XX-XXXX) - must be before generic phone
-    { pattern: /\b(?!000|666|9[0-9]{2})\d{3}-(?!00)\d{2}-(?!0000)\d{4}\b/g, replacement: "***-**-****" },
-    // Date of birth patterns - must be before generic phone
-    { pattern: /\b(0[1-9]|[12][0-9]|3[01])[/.-](0[1-9]|1[0-2])[/.-](19[0-9]{2}|20[0-9]{2})\b/g, replacement: "**/**/****" },
-    // IBAN (international bank account) - must be before generic alphanumeric patterns
-    // Only matches valid IBAN format: 2 letters + 2 digits + 4-30 alphanumeric chars
-    // More specific: requires minimum 8 chars total, starts with country code
-    { pattern: /\b[A-Z]{2}[0-9]{2}[A-Z0-9]{4,30}\b/g, replacement: "****-IBAN-REDACTED-****" },
-    // TC Kimlik (11 digits starting with 1-9, isolated word boundary) - must be before phone
-    { pattern: /\b[1-9][0-9]{10}\b/g, replacement: "***********" },
-    // Email
-    { pattern: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g, replacement: "***@***" },
-    // Phone (Turkish: +90 5xx xxx xx xx) - specific before generic
-    { pattern: /(\+90|0)?\s?[0-9]{3}\s?[0-9]{3}\s?[0-9]{2}\s?[0-9]{2}/g, replacement: "***-***-****" },
-    // Phone (international: +90, +1, +44, +49, +33, etc.) - generic, keep last among phones
-    { pattern: /(\+\d{1,2}[\s-]?)?\(?\d{2,4}\)?[\s-]?\d{2,4}[\s-]?\d{2,4}[\s-]?\d{2,4}/g, replacement: "***-***-****" },
-    // IP addresses (IPv4)
-    { pattern: /\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b/g, replacement: "***.***.***.***" },
-    // IP addresses (IPv6 - simplified)
-    { pattern: /\b(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}\b/g, replacement: "****:****:****:****" },
-    // IPv6 compressed
-    { pattern: /\b(?:[0-9a-fA-F]{0,4}:){2,7}[0-9a-fA-F]{0,4}\b/g, replacement: "****:****:****" },
-    // Credit card (16 digits, optional spaces/dashes)
-    { pattern: /\b(?:\d[ -]*?){13,16}\b/g, replacement: "****-****-****-****" },
-    // AMEX (15 digits, starts with 34/37)
-    { pattern: /\b3[47][0-9\s-]{13,14}\b/g, replacement: "****-****-***" },
-    // Password fields in JSON
-    { pattern: /"(password|passwd|secret|api_key|apiKey|apikey|auth_token|refresh_token|access_token)"\s*:\s*"[^"]+"/gi, replacement: "\"$1\": \"***-REDACTED-***\"" },
-    // Turkish address patterns (optional - sokak, cadde, mahalle, no:)
-    { pattern: /(?:no|no:|numara)[:\s]*\d+/gi, replacement: "no: ****" },
-];
-// Fields that are considered sensitive and should always be redacted in structured data
-const SENSITIVE_FIELDS = [
-    "password", "passwd", "secret", "apiKey", "api_key", "apikey",
-    "token", "accessToken", "access_token", "refreshToken", "refresh_token", "authToken", "auth_token",
-    "authorization", "Authorization", "bearer",
-    "email", "e_mail", "eMail",
-    "phone", "phoneNumber", "phone_number", "telephone", "telephoneNumber", "mobile", "mobilePhone", "cellPhone",
-    "creditCard", "credit_card", "ccNumber", "cc_number", "ccn", "cvv", "cvv2", "cvc",
-    "ssn", "socialSecurity", "social_security",
-    "tcKimlik", "tc_kimlik", "identityNumber", "identity_number", "idNumber", "id_number", "nationalId",
-    "ipAddress", "ip_address", "ip",
-    "dob", "dateOfBirth", "date_of_birth", "birthDate", "birth_date",
-    "iban", "IBAN", "bankAccount", "bank_account",
-    "address", "homeAddress", "workAddress", "billingAddress", "shippingAddress",
-    "fullName", "firstName", "lastName", "surname", "middleName",
-];
-/**
- * Mask sensitive data in a text string.
- */
-export function maskText(text) {
-    if (!text || typeof text !== "string")
-        return text;
-    let masked = text;
-    for (const { pattern, replacement } of SENSITIVE_PATTERNS) {
-        masked = masked.replace(pattern, replacement);
-    }
-    return masked;
-}
-/**
- * Recursively mask sensitive fields in an object.
- * Returns a new object with sensitive values redacted.
- * Strict mode: when true, also masks values in objects even if the key
- * is not a known sensitive field name (catches data passed to unknown schemas).
- */
-export function maskObject(obj, depth = 0, strictMode = false) {
-    if (depth > 10)
-        return obj; // Prevent infinite recursion
-    if (obj === null || obj === undefined)
-        return obj;
-    if (typeof obj === "string")
-        return maskText(obj);
-    if (typeof obj !== "object")
-        return obj;
-    if (Array.isArray(obj)) {
-        return obj.map(item => maskObject(item, depth + 1, strictMode));
-    }
-    const result = {};
-    for (const [key, value] of Object.entries(obj)) {
-        // Check if the key itself is a sensitive field
-        if (SENSITIVE_FIELDS.includes(key)) {
-            result[key] = typeof value === "string" ? "***-REDACTED-***" : maskObject(value, depth + 1, strictMode);
-        }
-        else if (typeof value === "string") {
-            result[key] = maskText(value);
-        }
-        else if (typeof value === "object") {
-            result[key] = maskObject(value, depth + 1, strictMode);
-        }
-        else {
-            result[key] = value;
-        }
-    }
-    return result;
-}
-/**
- * Check if a string contains potential PII.
- * Useful for warning before sending data to external APIs.
- */
-export function containsPII(text) {
-    for (const { pattern } of SENSITIVE_PATTERNS) {
-        if (pattern.test(text))
-            return true;
-    }
-    return false;
-}
-/**
- * Check if an object contains PII in any of its string values (recursive).
- */
-export function containsPIIInObject(obj, depth = 0) {
-    if (depth > 10)
-        return false;
-    if (obj === null || obj === undefined)
-        return false;
-    if (typeof obj === "string")
-        return containsPII(obj);
-    if (typeof obj !== "object")
-        return false;
-    if (Array.isArray(obj)) {
-        return obj.some(item => containsPIIInObject(item, depth + 1));
-    }
-    for (const [, value] of Object.entries(obj)) {
-        if (typeof value === "string") {
-            if (containsPII(value))
-                return true;
-        }
-        else if (typeof value === "object") {
-            if (containsPIIInObject(value, depth + 1))
-                return true;
-        }
-    }
-    return false;
-}
-/**
- * Classify a piece of data based on content analysis.
- */
-export function classifyData(text) {
-    if (!text)
-        return "public";
-    // Check for highly sensitive / critical data
-    if (/\b(sk-[a-zA-Z0-9]{20,}|Bearer\s+|eyJ[a-zA-Z0-9_-]+\.)/.test(text) ||
-        /\b[1-9][0-9]{10}\b/.test(text) ||
-        /"(password|secret|apiKey)"/i.test(text) ||
-        /\b[A-Z]{2}[0-9]{2}[A-Z0-9]{1,30}\b/.test(text) // IBAN
-    ) {
-        return "restricted";
-    }
-    // Check for personally identifiable / confidential data
-    if (/[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/.test(text) ||
-        /(\+90|0)?\s?[0-9]{3}\s?[0-9]{3}\s?[0-9]{2}\s?[0-9]{2}/.test(text) ||
-        /\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b/.test(text) ||
-        /\b(0[1-9]|[12][0-9]|3[01])[/.-](0[1-9]|1[0-2])[/.-](19[0-9]{2}|20[0-9]{2})\b/.test(text)) {
-        return "confidential";
-    }
-    return "internal";
-}
-/**
- * Mask the content field of an MCP tool result.
- * This is used by the MCP middleware layer to automatically
- * sanitize all tool outputs before they reach the AI.
- */
-export function maskToolResult(result) {
-    if (!result || !result.content)
-        return result;
-    return {
-        ...result,
-        content: result.content.map(block => ({
-            ...block,
-            text: block.type === "text" ? maskText(block.text) : block.text,
-        })),
-    };
-}
-/**
- * Mask sensitive arguments in an MCP tool call.
- * This is applied BEFORE the tool handler executes, ensuring
- * PII never reaches any processing layer unnecessarily.
- */
-export function maskToolArgs(args) {
-    const masked = maskObject(args, 0, true);
-    return masked;
-}
+export * from "atabey-shared/pii.js";
 //# sourceMappingURL=pii.js.map

package/dist/atabey/src/shared/pii.js.map

@@ -1 +1 @@
-{"version":3,"file":"pii.js","sourceRoot":"","sources":["../../../../src/shared/pii.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,wCAAwC;AACxC,kEAAkE;AAClE,MAAM,kBAAkB,GAAG;IACvB,2DAA2D;IAC3D,EAAE,OAAO,EAAE,uDAAuD,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAEzG,yCAAyC;IACzC,EAAE,OAAO,EAAE,2BAA2B,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAChF,sCAAsC;IACtC,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,wBAAwB,EAAE;IAE9E,8DAA8D;IAC9D,2GAA2G;IAC3G,EAAE,OAAO,EAAE,4QAA4Q,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAE1T,8EAA8E;IAC9E,EAAE,OAAO,EAAE,2DAA2D,EAAE,WAAW,EAAE,aAAa,EAAE;IAEpG,wDAAwD;IACxD,EAAE,OAAO,EAAE,+EAA+E,EAAE,WAAW,EAAE,YAAY,EAAE;IAEvH,mFAAmF;IACnF,iFAAiF;IACjF,0EAA0E;IAC1E,EAAE,OAAO,EAAE,qCAAqC,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAE1F,yFAAyF;IACzF,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,aAAa,EAAE;IAE9D,QAAQ;IACR,EAAE,OAAO,EAAE,iDAAiD,EAAE,WAAW,EAAE,SAAS,EAAE;IAEtF,+DAA+D;IAC/D,EAAE,OAAO,EAAE,wDAAwD,EAAE,WAAW,EAAE,cAAc,EAAE;IAElG,wFAAwF;IACxF,EAAE,OAAO,EAAE,yEAAyE,EAAE,WAAW,EAAE,cAAc,EAAE;IAEnH,sBAAsB;IACtB,EAAE,OAAO,EAAE,oCAAoC,EAAE,WAAW,EAAE,iBAAiB,EAAE;IACjF,mCAAmC;IACnC,EAAE,OAAO,EAAE,+CAA+C,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAChG,kBAAkB;IAClB,EAAE,OAAO,EAAE,iDAAiD,EAAE,WAAW,EAAE,gBAAgB,EAAE;IAE7F,kDAAkD;IAClD,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAC3E,sCAAsC;IACtC,EAAE,OAAO,EAAE,2BAA2B,EAAE,WAAW,EAAE,eAAe,EAAE;IAEtE,0BAA0B;IAC1B,EAAE,OAAO,EAAE,wGAAwG,EAAE,WAAW,EAAE,8BAA8B,EAAE;IAElK,mEAAmE;IACnE,EAAE,OAAO,EAAE,8BAA8B,EAAE,WAAW,EAAE,UAAU,EAAE;CACvE,CAAC;AAEF,wFAAwF;AACxF,MAAM,gBAAgB,GAAG;IACrB,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;IAC7D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY;IAClG,eAAe,EAAE,eAAe,EAAE,QAAQ;IAC1C,OAAO,EAAE,QAAQ,EAAE,OAAO;IAC1B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW;IAC5G,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IACjF,KAAK,EAAE,gBAAgB,EAAE,iBAAiB;IAC1C,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY;IACnG,WAAW,EAAE,YAAY,EAAE,IAAI;IAC/B,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY;IAChE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc;IAC7C,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB;IAC5E,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY;CAC/D,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACjC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,kBAAkB,EAAE,CAAC;QACxD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK;IAClE,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,GAAG,CAAC,CAAC,6BAA6B;IACzD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAExC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QACxE,+CAA+C;QAC/C,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5G,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACpC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC;IACvD,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE1C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,WAAW,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QACxC,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC3D,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAOD;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAE3B,6CAA6C;IAC7C,IACI,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC;QAClE,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/B,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;QACxC,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO;MACzD,CAAC;QACC,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,wDAAwD;IACxD,IACI,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3D,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC;QAClE,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9C,8EAA8E,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3F,CAAC;QACC,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAA0D;IACrF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAE9C,OAAO;QACH,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClC,GAAG,KAAK;YACR,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;SAClE,CAAC,CAAC;KACN,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAA6B;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAA4B,CAAC;IACpE,OAAO,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"pii.js","sourceRoot":"","sources":["../../../../src/shared/pii.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC"}

package/dist/atabey/src/shared/retention.d.ts

@@ -1,63 +1 @@
-/**
- * Data retention categories and default durations (days)
- */
-export declare const RETENTION_POLICIES: Record<string, number>;
-/**
- * [KVKK/GDPR] Data Retention Manager
- */
-export declare class DataRetention {
-    private static cleanupInterval;
-    /**
-   * Initialize data retention with automatic cleanup.
-   * Starts a periodic cleanup job.
-   *
-   * @param intervalMs Cleanup interval in milliseconds (default: 1 hour)
-   */
-    static initialize(intervalMs?: number): void;
-    /**
-   * Run cleanup for all data stores.
-   * Cleans audit logs, messages, and logs based on retention policies.
-   */
-    static runCleanup(): {
-        audit: number;
-        messages: number;
-        logs: number;
-    };
-    /**
-   * [KVKK Art. 7] "Right to Erasure" — Deletes all data for a given trace ID.
-   * Cleans audit records, messages, logs, and tasks.
-   *
-   * @param traceId Trace ID to erase
-   * @returns Total number of deleted records
-   */
-    static eraseTraceData(traceId: string): number;
-    /**
-   * [KVKK Art. 11] Erases all data.
-   * Only works with the confirmation code.
-   */
-    static eraseAllData(confirmationCode: string): number;
-    /**
-   * Get retention statistics.
-   */
-    static getStats(): {
-        auditExpired: number;
-        messageCount: number;
-        logCount: number;
-        taskCount: number;
-        policies: Record<string, number>;
-    };
-    /**
-   * Stop the periodic cleanup job.
-   */
-    static shutdown(): void;
-    /**
-   * Clean old messages from the Hermes queue.
-   * Messages older than 30 days are removed.
-   */
-    private static cleanOldMessages;
-    /**
-   * Clean old logs.
-   * Logs older than 30 days are removed.
-   */
-    private static cleanOldLogs;
-}
+export * from "atabey-shared/retention.js";