dartmind 17.0.0

package/dist/security/SecretsGuard.js

@@ -0,0 +1,185 @@
+/**
+ * FlutterAI V17 - SecretsGuard
+ * Moved from V10 during V17 migration
+ * Secret detection and redaction for security pipeline
+ *
+ * @module security/SecretsGuard
+ * @version 17.0.0
+ */
+// ============================================================================
+// Secret Patterns
+// ============================================================================
+const SECRET_PATTERNS = [
+    // API Keys
+    {
+        name: 'api_key',
+        pattern: /api[_-]?key[\s]*[:=][\s]*['"]?([a-zA-Z0-9_\-]{20,})['"]?/gi,
+        confidence: 0.85,
+    },
+    // AWS Keys
+    {
+        name: 'aws_access_key',
+        pattern: /AKIA[0-9A-Z]{16}/g,
+        confidence: 0.95,
+    },
+    {
+        name: 'aws_secret_key',
+        pattern: /aws[_-]?secret[_-]?access[_-]?key[\s]*[:=][\s]*['"]?([a-zA-Z0-9/+=]{40})['"]?/gi,
+        confidence: 0.95,
+    },
+    // Private Keys
+    {
+        name: 'private_key',
+        pattern: /-----BEGIN (RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/g,
+        confidence: 0.99,
+    },
+    // JWT Tokens
+    {
+        name: 'jwt_token',
+        pattern: /eyJ[a-zA-Z0-9_-]+\.eyJ[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+/g,
+        confidence: 0.90,
+    },
+    // Generic secrets
+    {
+        name: 'generic_secret',
+        pattern: /secret[\s]*[:=][\s]*['"]([^'"]{8,})['"]?/gi,
+        confidence: 0.70,
+    },
+    // Password in string
+    {
+        name: 'password',
+        pattern: /password[\s]*[:=][\s]*['"]([^'"]{4,})['"]?/gi,
+        confidence: 0.75,
+    },
+    // Firebase keys
+    {
+        name: 'firebase_key',
+        pattern: /AIza[0-9A-Za-z_-]{35}/g,
+        confidence: 0.90,
+    },
+    // Stripe keys
+    {
+        name: 'stripe_key',
+        pattern: /sk_(live|test)_[0-9a-zA-Z]{24,}/g,
+        confidence: 0.95,
+    },
+    // GitHub tokens
+    {
+        name: 'github_token',
+        pattern: /gh[pousr]_[A-Za-z0-9_]{36,}/g,
+        confidence: 0.95,
+    },
+];
+// ============================================================================
+// SecretsGuard Class
+// ============================================================================
+export class SecretsGuard {
+    config;
+    constructor(config = {}) {
+        this.config = {
+            redactSecrets: true,
+            minEntropy: 4.5,
+            minConfidence: 0.7,
+            blockOnDetection: false,
+            ...config,
+        };
+    }
+    /**
+     * Scan input for secrets
+     */
+    scan(input) {
+        const detections = [];
+        for (const { name, pattern, confidence } of SECRET_PATTERNS) {
+            if (confidence < (this.config.minConfidence ?? 0.7))
+                continue;
+            // Reset regex state
+            pattern.lastIndex = 0;
+            let match;
+            while ((match = pattern.exec(input)) !== null) {
+                const value = match[1] || match[0];
+                detections.push({
+                    type: name,
+                    value,
+                    masked: this.maskValue(value),
+                    position: match.index,
+                    length: match[0].length,
+                    confidence,
+                });
+            }
+        }
+        // Additional entropy-based detection for high-entropy strings
+        const entropyMatches = this.detectHighEntropyStrings(input);
+        detections.push(...entropyMatches);
+        return detections;
+    }
+    /**
+     * Redact secrets in input
+     */
+    redact(input) {
+        let redacted = input;
+        for (const { name, pattern, confidence } of SECRET_PATTERNS) {
+            if (confidence < (this.config.minConfidence ?? 0.7))
+                continue;
+            // Reset regex state
+            pattern.lastIndex = 0;
+            redacted = redacted.replace(pattern, (match, capture) => {
+                const value = capture || match;
+                return match.replace(value, `[REDACTED_${name.toUpperCase()}]`);
+            });
+        }
+        return redacted;
+    }
+    /**
+     * Mask a value for display
+     */
+    maskValue(value) {
+        if (value.length <= 8) {
+            return '*'.repeat(value.length);
+        }
+        return value.slice(0, 4) + '*'.repeat(value.length - 8) + value.slice(-4);
+    }
+    /**
+     * Calculate Shannon entropy of a string
+     */
+    calculateEntropy(str) {
+        const freq = new Map();
+        for (const char of str) {
+            freq.set(char, (freq.get(char) || 0) + 1);
+        }
+        let entropy = 0;
+        for (const count of freq.values()) {
+            const p = count / str.length;
+            entropy -= p * Math.log2(p);
+        }
+        return entropy;
+    }
+    /**
+     * Detect high-entropy strings that might be secrets
+     */
+    detectHighEntropyStrings(input) {
+        const detections = [];
+        const minEntropy = this.config.minEntropy ?? 4.5;
+        // Find quoted strings or assignment values
+        const stringPattern = /['"]([a-zA-Z0-9_\-+=\/]{16,})['"]|=[\s]*['"]?([a-zA-Z0-9_\-+=\/]{20,})['"]?/g;
+        let match;
+        while ((match = stringPattern.exec(input)) !== null) {
+            const value = match[1] || match[2];
+            if (!value)
+                continue;
+            const entropy = this.calculateEntropy(value);
+            if (entropy >= minEntropy) {
+                detections.push({
+                    type: 'high_entropy_string',
+                    value,
+                    masked: this.maskValue(value),
+                    position: match.index,
+                    length: match[0].length,
+                    confidence: Math.min(0.9, entropy / 6),
+                });
+            }
+        }
+        return detections;
+    }
+}
+export default SecretsGuard;
+//# sourceMappingURL=SecretsGuard.js.map

package/dist/security/SecretsGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretsGuard.js","sourceRoot":"","sources":["../../src/security/SecretsGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAsBH,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,MAAM,eAAe,GAAG;IACtB,WAAW;IACX;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,4DAA4D;QACrE,UAAU,EAAE,IAAI;KACjB;IACD,WAAW;IACX;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,mBAAmB;QAC5B,UAAU,EAAE,IAAI;KACjB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,iFAAiF;QAC1F,UAAU,EAAE,IAAI;KACjB;IACD,eAAe;IACf;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,uDAAuD;QAChE,UAAU,EAAE,IAAI;KACjB;IACD,aAAa;IACb;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,uDAAuD;QAChE,UAAU,EAAE,IAAI;KACjB;IACD,kBAAkB;IAClB;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,4CAA4C;QACrD,UAAU,EAAE,IAAI;KACjB;IACD,qBAAqB;IACrB;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,8CAA8C;QACvD,UAAU,EAAE,IAAI;KACjB;IACD,gBAAgB;IAChB;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,wBAAwB;QACjC,UAAU,EAAE,IAAI;KACjB;IACD,cAAc;IACd;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,kCAAkC;QAC3C,UAAU,EAAE,IAAI;KACjB;IACD,gBAAgB;IAChB;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,8BAA8B;QACvC,UAAU,EAAE,IAAI;KACjB;CACF,CAAC;AAEF,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,OAAO,YAAY;IACf,MAAM,CAAqB;IAEnC,YAAY,SAA6B,EAAE;QACzC,IAAI,CAAC,MAAM,GAAG;YACZ,aAAa,EAAE,IAAI;YACnB,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,GAAG;YAClB,gBAAgB,EAAE,KAAK;YACvB,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,KAAa;QAChB,MAAM,UAAU,GAAsB,EAAE,CAAC;QAEzC,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,eAAe,EAAE,CAAC;YAC5D,IAAI,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC;gBAAE,SAAS;YAE9D,oBAAoB;YACpB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAEtB,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,IAAI;oBACV,KAAK;oBACL,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBAC7B,QAAQ,EAAE,KAAK,CAAC,KAAK;oBACrB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;oBACvB,UAAU;iBACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC5D,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QAEnC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAa;QAClB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,eAAe,EAAE,CAAC;YAC5D,IAAI,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC;gBAAE,SAAS;YAE9D,oBAAoB;YACpB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAEtB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBACtD,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,CAAC;gBAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,KAAa;QAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,GAAW;QAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;YAC7B,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,KAAa;QAC5C,MAAM,UAAU,GAAsB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC;QAEjD,2CAA2C;QAC3C,MAAM,aAAa,GAAG,8EAA8E,CAAC;QAErG,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC1B,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,qBAAqB;oBAC3B,KAAK;oBACL,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBAC7B,QAAQ,EAAE,KAAK,CAAC,KAAK;oBACrB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;oBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,CAAC;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED,eAAe,YAAY,CAAC"}

package/dist/security/SecurityPipeline.d.ts

@@ -0,0 +1,136 @@
+/**
+ * FlutterAI V16 - Security Pipeline
+ * Orchestrates all security gates in sequence
+ *
+ * Pipeline order:
+ * G0.5 InputScrubber - Secret/PII detection and masking
+ * G0.6 PromptGuard - Prompt injection defense
+ * Context creation - PrivilegedContext with symbolic placeholders
+ *
+ * @module security/SecurityPipeline
+ * @version 16.0.0
+ */
+import { EventEmitter } from 'events';
+import { InputScrubber, EnterpriseConfig } from './InputScrubber.js';
+import { PromptGuard, PromptGuardConfig } from './PromptGuard.js';
+import { PrivilegedContext } from './PrivilegedContext.js';
+export interface GateResult {
+    gateId: string;
+    passed: boolean;
+    executionTimeMs: number;
+    details: string;
+}
+export interface SecurityReport {
+    timestamp: Date;
+    inputLength: number;
+    secretsDetected: number;
+    piiDetected: number;
+    injectionThreatScore: number;
+    passed: boolean;
+    blocked: boolean;
+    blockReason?: string;
+    gates: GateResult[];
+    totalExecutionTimeMs: number;
+}
+export interface SecurityPipelineResult {
+    /** Whether all security checks passed */
+    safe: boolean;
+    /** Processed (scrubbed/sanitized) input */
+    processedInput: string;
+    /** Original input for reference */
+    originalInput: string;
+    /** PrivilegedContext with symbolic placeholders */
+    context: PrivilegedContext;
+    /** Symbolic representation of the input */
+    symbolic: string;
+    /** Security report with details */
+    report: SecurityReport;
+}
+export interface SecurityPipelineConfig {
+    /** Enterprise configuration for InputScrubber */
+    enterprise?: EnterpriseConfig;
+    /** PromptGuard configuration */
+    promptGuard?: PromptGuardConfig;
+    /** Block on any threat (fail-closed) */
+    failClosed?: boolean;
+    /** Skip prompt guard (for trusted inputs) */
+    skipPromptGuard?: boolean;
+    /** Skip input scrubber (for pre-sanitized inputs) */
+    skipInputScrubber?: boolean;
+}
+export declare class SecurityPipeline extends EventEmitter {
+    private scrubber;
+    private guard;
+    private config;
+    private totalProcessed;
+    private totalBlocked;
+    private totalSecretsFound;
+    private totalPIIFound;
+    private totalInjectionAttempts;
+    constructor(config?: SecurityPipelineConfig);
+    /**
+     * Process input through full security pipeline
+     */
+    process(input: string): Promise<SecurityPipelineResult>;
+    /**
+     * Quick validation without full processing
+     */
+    quickCheck(input: string): Promise<{
+        safe: boolean;
+        reason?: string;
+    }>;
+    /**
+     * Process and elevate context to EXECUTOR level
+     */
+    processAndElevate(input: string, elevationReason: string): Promise<{
+        result: SecurityPipelineResult;
+        executorContext: PrivilegedContext;
+    }>;
+    /**
+     * Get pipeline statistics
+     */
+    getStats(): {
+        totalProcessed: number;
+        totalBlocked: number;
+        totalSecretsFound: number;
+        totalPIIFound: number;
+        totalInjectionAttempts: number;
+        blockRate: number;
+    };
+    /**
+     * Get health status
+     */
+    getHealth(): {
+        healthy: boolean;
+        message: string;
+        components: Record<string, {
+            healthy: boolean;
+            message: string;
+        }>;
+    };
+    /**
+     * Reset all statistics
+     */
+    resetStats(): void;
+    /**
+     * Get individual components for advanced usage
+     */
+    getComponents(): {
+        scrubber: InputScrubber;
+        guard: PromptGuard;
+    };
+}
+/**
+ * Create a SecurityPipeline with default settings
+ */
+export declare function createSecurityPipeline(config?: SecurityPipelineConfig): SecurityPipeline;
+/**
+ * Create a strict SecurityPipeline for high-security environments
+ */
+export declare function createStrictPipeline(): SecurityPipeline;
+/**
+ * Create a permissive SecurityPipeline (warnings only)
+ */
+export declare function createPermissivePipeline(): SecurityPipeline;
+export default SecurityPipeline;
+//# sourceMappingURL=SecurityPipeline.d.ts.map

package/dist/security/SecurityPipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityPipeline.d.ts","sourceRoot":"","sources":["../../src/security/SecurityPipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,aAAa,EAAe,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,WAAW,EAAuB,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAkC,MAAM,wBAAwB,CAAC;AAM3F,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,yCAAyC;IACzC,IAAI,EAAE,OAAO,CAAC;IACd,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,OAAO,EAAE,iBAAiB,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,iDAAiD;IACjD,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,gCAAgC;IAChC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,wCAAwC;IACxC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,6CAA6C;IAC7C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qDAAqD;IACrD,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAMD,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,QAAQ,CAAgB;IAChC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,MAAM,CAAyB;IAGvC,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,sBAAsB,CAAK;gBAEvB,MAAM,GAAE,sBAA2B;IAe/C;;OAEG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA8F7D;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAsB5E;;OAEG;IACG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;QACvE,MAAM,EAAE,sBAAsB,CAAC;QAC/B,eAAe,EAAE,iBAAiB,CAAC;KACpC,CAAC;IAYF;;OAEG;IACH,QAAQ,IAAI;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,EAAE,MAAM,CAAC;QACtB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC;KACnB;IAWD;;OAEG;IACH,SAAS,IAAI;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;IAkBrH;;OAEG;IACH,UAAU,IAAI,IAAI;IAUlB;;OAEG;IACH,aAAa,IAAI;QACf,QAAQ,EAAE,aAAa,CAAC;QACxB,KAAK,EAAE,WAAW,CAAC;KACpB;CAMF;AAMD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,sBAAsB,GAAG,gBAAgB,CAExF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,gBAAgB,CAavD;AAED;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,gBAAgB,CAQ3D;AAED,eAAe,gBAAgB,CAAC"}

package/dist/security/SecurityPipeline.js

@@ -0,0 +1,249 @@
+/**
+ * FlutterAI V16 - Security Pipeline
+ * Orchestrates all security gates in sequence
+ *
+ * Pipeline order:
+ * G0.5 InputScrubber - Secret/PII detection and masking
+ * G0.6 PromptGuard - Prompt injection defense
+ * Context creation - PrivilegedContext with symbolic placeholders
+ *
+ * @module security/SecurityPipeline
+ * @version 16.0.0
+ */
+import { EventEmitter } from 'events';
+import { InputScrubber } from './InputScrubber.js';
+import { PromptGuard } from './PromptGuard.js';
+import { ContextFactory } from './PrivilegedContext.js';
+// ============================================================================
+// SecurityPipeline Class
+// ============================================================================
+export class SecurityPipeline extends EventEmitter {
+    scrubber;
+    guard;
+    config;
+    // Stats
+    totalProcessed = 0;
+    totalBlocked = 0;
+    totalSecretsFound = 0;
+    totalPIIFound = 0;
+    totalInjectionAttempts = 0;
+    constructor(config = {}) {
+        super();
+        this.config = {
+            failClosed: true,
+            ...config,
+        };
+        this.scrubber = new InputScrubber({
+            enterpriseMode: !!config.enterprise,
+            enterprise: config.enterprise,
+        });
+        this.guard = new PromptGuard(config.promptGuard);
+    }
+    /**
+     * Process input through full security pipeline
+     */
+    async process(input) {
+        const startTime = Date.now();
+        this.totalProcessed++;
+        const gates = [];
+        let processedInput = input;
+        let blocked = false;
+        let blockReason;
+        // === Gate 1: Input Scrubber (G0.5) ===
+        if (!this.config.skipInputScrubber) {
+            const scrubGate = await this.scrubber.executeAsGate(input);
+            gates.push({
+                gateId: scrubGate.gateId,
+                passed: scrubGate.passed,
+                executionTimeMs: scrubGate.executionTimeMs,
+                details: scrubGate.details,
+            });
+            if (scrubGate.scrubbed) {
+                processedInput = scrubGate.scrubbed;
+            }
+            if (!scrubGate.passed && this.config.failClosed) {
+                blocked = true;
+                blockReason = `G0.5 InputScrubber: ${scrubGate.details}`;
+                this.totalBlocked++;
+            }
+            // Update stats
+            const scrubStats = this.scrubber.getStats();
+            this.totalSecretsFound = scrubStats.totalSecretsFound;
+            this.totalPIIFound = scrubStats.totalPIIFound;
+        }
+        // === Gate 2: Prompt Guard (G0.6) ===
+        if (!blocked && !this.config.skipPromptGuard) {
+            const guardGate = await this.guard.executeAsGate(processedInput);
+            gates.push({
+                gateId: guardGate.gateId,
+                passed: guardGate.passed,
+                executionTimeMs: guardGate.executionTimeMs,
+                details: guardGate.details,
+            });
+            if (guardGate.sanitizedInput) {
+                processedInput = guardGate.sanitizedInput;
+            }
+            if (!guardGate.passed) {
+                this.totalInjectionAttempts++;
+                if (this.config.failClosed) {
+                    blocked = true;
+                    blockReason = `G0.6 PromptGuard: ${guardGate.details}`;
+                    this.totalBlocked++;
+                }
+            }
+        }
+        // === Create Privileged Context ===
+        const { context, symbolic } = ContextFactory.processUserInput(processedInput);
+        // Build report
+        const report = {
+            timestamp: new Date(),
+            inputLength: input.length,
+            secretsDetected: this.scrubber.getStats().totalSecretsFound,
+            piiDetected: this.scrubber.getStats().totalPIIFound,
+            injectionThreatScore: this.guard.getStats().totalBlocked,
+            passed: !blocked,
+            blocked,
+            blockReason,
+            gates,
+            totalExecutionTimeMs: Date.now() - startTime,
+        };
+        const result = {
+            safe: !blocked,
+            processedInput,
+            originalInput: input,
+            context,
+            symbolic,
+            report,
+        };
+        this.emit('processed', result);
+        if (blocked) {
+            this.emit('blocked', { reason: blockReason, input: input.substring(0, 100) });
+        }
+        return result;
+    }
+    /**
+     * Quick validation without full processing
+     */
+    async quickCheck(input) {
+        // Check for secrets/PII
+        const scrubResult = this.scrubber.scrub(input);
+        if (scrubResult.wasScrubbed) {
+            return {
+                safe: false,
+                reason: `Found ${scrubResult.secretsFound} secrets, ${scrubResult.piiFound} PII`,
+            };
+        }
+        // Check for injection
+        const guardResult = this.guard.scan(input);
+        if (!guardResult.isClean) {
+            return {
+                safe: false,
+                reason: `Injection threat score: ${guardResult.threatScore}`,
+            };
+        }
+        return { safe: true };
+    }
+    /**
+     * Process and elevate context to EXECUTOR level
+     */
+    async processAndElevate(input, elevationReason) {
+        const result = await this.process(input);
+        if (!result.safe) {
+            throw new Error(`Cannot elevate blocked input: ${result.report.blockReason}`);
+        }
+        const executorContext = result.context.elevate(elevationReason);
+        return { result, executorContext };
+    }
+    /**
+     * Get pipeline statistics
+     */
+    getStats() {
+        return {
+            totalProcessed: this.totalProcessed,
+            totalBlocked: this.totalBlocked,
+            totalSecretsFound: this.totalSecretsFound,
+            totalPIIFound: this.totalPIIFound,
+            totalInjectionAttempts: this.totalInjectionAttempts,
+            blockRate: this.totalProcessed > 0 ? this.totalBlocked / this.totalProcessed : 0,
+        };
+    }
+    /**
+     * Get health status
+     */
+    getHealth() {
+        const scrubberHealth = this.scrubber.getHealth();
+        const guardHealth = this.guard.getHealth();
+        const healthy = scrubberHealth.healthy && guardHealth.healthy;
+        return {
+            healthy,
+            message: healthy
+                ? `Security Pipeline operational: ${this.totalProcessed} processed, ${this.totalBlocked} blocked`
+                : `Security Pipeline degraded: Check component health`,
+            components: {
+                'G0.5-InputScrubber': scrubberHealth,
+                'G0.6-PromptGuard': guardHealth,
+            },
+        };
+    }
+    /**
+     * Reset all statistics
+     */
+    resetStats() {
+        this.totalProcessed = 0;
+        this.totalBlocked = 0;
+        this.totalSecretsFound = 0;
+        this.totalPIIFound = 0;
+        this.totalInjectionAttempts = 0;
+        this.scrubber.resetStats();
+        this.guard.resetStats();
+    }
+    /**
+     * Get individual components for advanced usage
+     */
+    getComponents() {
+        return {
+            scrubber: this.scrubber,
+            guard: this.guard,
+        };
+    }
+}
+// ============================================================================
+// Factory Functions
+// ============================================================================
+/**
+ * Create a SecurityPipeline with default settings
+ */
+export function createSecurityPipeline(config) {
+    return new SecurityPipeline(config);
+}
+/**
+ * Create a strict SecurityPipeline for high-security environments
+ */
+export function createStrictPipeline() {
+    return new SecurityPipeline({
+        failClosed: true,
+        enterprise: {
+            strictMode: true,
+            blockOnSecrets: true,
+            blockOnPII: true,
+        },
+        promptGuard: {
+            blockThreshold: 50,
+            minSeverity: 30,
+        },
+    });
+}
+/**
+ * Create a permissive SecurityPipeline (warnings only)
+ */
+export function createPermissivePipeline() {
+    return new SecurityPipeline({
+        failClosed: false,
+        promptGuard: {
+            blockThreshold: 90,
+            minSeverity: 70,
+        },
+    });
+}
+export default SecurityPipeline;
+//# sourceMappingURL=SecurityPipeline.js.map

package/dist/security/SecurityPipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityPipeline.js","sourceRoot":"","sources":["../../src/security/SecurityPipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,aAAa,EAAiC,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,WAAW,EAA0C,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAqB,cAAc,EAAkB,MAAM,wBAAwB,CAAC;AAsD3F,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IACxC,QAAQ,CAAgB;IACxB,KAAK,CAAc;IACnB,MAAM,CAAyB;IAEvC,QAAQ;IACA,cAAc,GAAG,CAAC,CAAC;IACnB,YAAY,GAAG,CAAC,CAAC;IACjB,iBAAiB,GAAG,CAAC,CAAC;IACtB,aAAa,GAAG,CAAC,CAAC;IAClB,sBAAsB,GAAG,CAAC,CAAC;IAEnC,YAAY,SAAiC,EAAE;QAC7C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG;YACZ,UAAU,EAAE,IAAI;YAChB,GAAG,MAAM;SACV,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,IAAI,aAAa,CAAC;YAChC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAA+B,CAAC;QAEpC,wCAAwC;QACxC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,eAAe,EAAE,SAAS,CAAC,eAAe;gBAC1C,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B,CAAC,CAAC;YAEH,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC;YACtC,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAChD,OAAO,GAAG,IAAI,CAAC;gBACf,WAAW,GAAG,uBAAuB,SAAS,CAAC,OAAO,EAAE,CAAC;gBACzD,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,CAAC;YAED,eAAe;YACf,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC5C,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC;YACtD,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAChD,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;YACjE,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,eAAe,EAAE,SAAS,CAAC,eAAe;gBAC1C,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B,CAAC,CAAC;YAEH,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC7B,cAAc,GAAG,SAAS,CAAC,cAAc,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC3B,OAAO,GAAG,IAAI,CAAC;oBACf,WAAW,GAAG,qBAAqB,SAAS,CAAC,OAAO,EAAE,CAAC;oBACvD,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAE9E,eAAe;QACf,MAAM,MAAM,GAAmB;YAC7B,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,WAAW,EAAE,KAAK,CAAC,MAAM;YACzB,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,iBAAiB;YAC3D,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,aAAa;YACnD,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,YAAY;YACxD,MAAM,EAAE,CAAC,OAAO;YAChB,OAAO;YACP,WAAW;YACX,KAAK;YACL,oBAAoB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SAC7C,CAAC;QAEF,MAAM,MAAM,GAA2B;YACrC,IAAI,EAAE,CAAC,OAAO;YACd,cAAc;YACd,aAAa,EAAE,KAAK;YACpB,OAAO;YACP,QAAQ;YACR,MAAM;SACP,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAE/B,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,wBAAwB;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;YAC5B,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,SAAS,WAAW,CAAC,YAAY,aAAa,WAAW,CAAC,QAAQ,MAAM;aACjF,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,2BAA2B,WAAW,CAAC,WAAW,EAAE;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,eAAuB;QAI5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAEhE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,QAAQ;QAQN,OAAO;YACL,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;YACnD,SAAS,EAAE,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;SACjF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAE3C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC;QAE9D,OAAO;YACL,OAAO;YACP,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,kCAAkC,IAAI,CAAC,cAAc,eAAe,IAAI,CAAC,YAAY,UAAU;gBACjG,CAAC,CAAC,oDAAoD;YACxD,UAAU,EAAE;gBACV,oBAAoB,EAAE,cAAc;gBACpC,kBAAkB,EAAE,WAAW;aAChC;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,sBAAsB,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,aAAa;QAIX,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA+B;IACpE,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,gBAAgB,CAAC;QAC1B,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE;YACV,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;SACjB;QACD,WAAW,EAAE;YACX,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,EAAE;SAChB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,IAAI,gBAAgB,CAAC;QAC1B,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE;YACX,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,EAAE;SAChB;KACF,CAAC,CAAC;AACL,CAAC;AAED,eAAe,gBAAgB,CAAC"}

package/dist/security/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * FlutterAI V16 - Security Module
+ *
+ * Phase 0.1: InputScrubber (G0.5), PIIPatterns
+ * Phase 0.2: PromptGuard (G0.6), PrivilegedContext, SecurityPipeline
+ *
+ * @module security
+ * @version 16.0.0
+ */
+export { InputScrubber, createInputScrubber, createEnterpriseScrubber, type ScrubResult, type ScrubAuditEntry, type GateResult as InputScrubberGateResult, type EnterpriseConfig, type InputScrubberConfig, } from './InputScrubber.js';
+export { PIIDetector, PII_PATTERNS, type PIIType, type PIIMatch, type PIIMaskResult, } from './PIIPatterns.js';
+export { PromptGuard, createPromptGuard, createStrictPromptGuard, THREAT_PATTERNS, type ThreatType, type ThreatPattern, type DetectedThreat, type InjectionScanResult, type PromptGuardConfig, } from './PromptGuard.js';
+export { PrivilegedContext, ContextFactory, type PrivilegeLevel, type DataType, type ContextSlot, type AuditEntry, type SlotSummary, type PrivilegedContextConfig, } from './PrivilegedContext.js';
+export { SecurityPipeline, createSecurityPipeline, createStrictPipeline, createPermissivePipeline, type SecurityReport, type SecurityPipelineResult, type SecurityPipelineConfig, type GateResult, } from './SecurityPipeline.js';
+export { PIIMasker, createGDPRMasker, createHIPAAMasker, createPCIDSSMasker, createSOC2Masker, createCustomMasker, type ComplianceMode, type MaskingStrategy, type MaskingRule, type ComplianceConfig, type MaskResult, type AuditRecord, type PIIMaskerConfig, } from './PIIMasker.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,UAAU,IAAI,uBAAuB,EAC1C,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,WAAW,EACX,YAAY,EACZ,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAM1B,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,uBAAuB,GAC7B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,UAAU,GAChB,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC"}

package/dist/security/index.js

@@ -0,0 +1,25 @@
+/**
+ * FlutterAI V16 - Security Module
+ *
+ * Phase 0.1: InputScrubber (G0.5), PIIPatterns
+ * Phase 0.2: PromptGuard (G0.6), PrivilegedContext, SecurityPipeline
+ *
+ * @module security
+ * @version 16.0.0
+ */
+// ============================================================================
+// Phase 0.1 - Secret/PII Detection
+// ============================================================================
+export { InputScrubber, createInputScrubber, createEnterpriseScrubber, } from './InputScrubber.js';
+export { PIIDetector, PII_PATTERNS, } from './PIIPatterns.js';
+// ============================================================================
+// Phase 0.2 - Injection Defense & Context Isolation
+// ============================================================================
+export { PromptGuard, createPromptGuard, createStrictPromptGuard, THREAT_PATTERNS, } from './PromptGuard.js';
+export { PrivilegedContext, ContextFactory, } from './PrivilegedContext.js';
+export { SecurityPipeline, createSecurityPipeline, createStrictPipeline, createPermissivePipeline, } from './SecurityPipeline.js';
+// ============================================================================
+// Phase 0.3 - Enterprise PII Masking
+// ============================================================================
+export { PIIMasker, createGDPRMasker, createHIPAAMasker, createPCIDSSMasker, createSOC2Masker, createCustomMasker, } from './PIIMasker.js';
+//# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,wBAAwB,GAMzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,WAAW,EACX,YAAY,GAIb,MAAM,kBAAkB,CAAC;AAE1B,+EAA+E;AAC/E,oDAAoD;AACpD,+EAA+E;AAE/E,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,GAMhB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,iBAAiB,EACjB,cAAc,GAOf,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,GAKzB,MAAM,uBAAuB,CAAC;AAE/B,+EAA+E;AAC/E,qCAAqC;AACrC,+EAA+E;AAE/E,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,GAQnB,MAAM,gBAAgB,CAAC"}