llm-canary 0.1.0

package/README.md

@@ -0,0 +1,97 @@
+# llm-canary
+
+Invisible canary tokens for prompt leakage detection. Embed hidden markers in prompts using zero-width Unicode characters or homoglyph substitution, then detect whether the prompt was leaked or reproduced by an untrusted party.
+
+## Install
+
+```bash
+npm install llm-canary
+```
+
+## Quick start
+
+```typescript
+import { generate, embed, detect, verify, createCanary } from 'llm-canary'
+
+// Generate a canary token
+const token = generate()
+console.log(token.payload) // UUID like "3f2a1b4c-..."
+
+// Embed into a prompt (zero-width chars appended by default)
+const prompt = 'You are a helpful assistant. Answer the question below.'
+const protected = embed(prompt, token)
+
+// Later: detect if the prompt was leaked
+const result = detect(receivedText)
+if (result.found) {
+  console.log('Canary detected:', result.tokens[0].payload)
+}
+
+// Or verify a specific token
+const leaked = verify(receivedText, token)
+console.log('Token present:', leaked)
+```
+
+## createCanary() convenience API
+
+```typescript
+const canary = createCanary({ payload: 'my-secret-id' })
+const protected = canary.embed('System prompt here.')
+console.log(canary.verify(protected)) // true
+```
+
+## Encoding types
+
+### zero-width (default)
+
+Encodes the payload as a binary packet using zero-width Unicode characters appended (or prepended) to the text:
+
+- `U+200B` = bit 0
+- `U+200C` = bit 1
+- `U+200D` = byte separator
+
+The binary packet format is `[0xCA, 0x1A, length, ...payload bytes, xor_checksum]`.
+
+Invisible to the human eye and to most rendered views; detected with high confidence when the XOR checksum is valid.
+
+### homoglyph
+
+Encodes bits by substituting Latin characters with Cyrillic lookalikes (e.g. `a` → `а`, `o` → `о`). The substitution is invisible in most fonts.
+
+```typescript
+const token = generate({ type: 'homoglyph', payload: 'my-id' })
+const protected = embed(longPrompt, token) // needs enough substitutable chars
+```
+
+The text needs sufficient substitutable characters (Latin letters in the PAIRS list). An error is thrown if capacity is insufficient.
+
+## embed() options
+
+```typescript
+embed(prompt, token, { position: 'after-first-sentence' })
+```
+
+Positions: `'start'` | `'end'` (default) | `'after-first-sentence'` | `'before-last-sentence'` | `'random'`
+
+Only applies to `zero-width` and `whitespace` types; `homoglyph` always modifies the text in-place.
+
+## detect() options
+
+```typescript
+const result = detect(text, {
+  types: ['zero-width'],        // limit which encodings to check
+  minConfidence: 'high',        // 'high' | 'medium' | 'low'
+})
+```
+
+## verify()
+
+```typescript
+import { verify } from 'llm-canary'
+const present = verify(text, token)                          // default medium confidence
+const strict  = verify(text, token, { minConfidence: 'high' })
+```
+
+## License
+
+MIT

package/dist/__tests__/canary.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=canary.test.d.ts.map

package/dist/__tests__/canary.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canary.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/canary.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/canary.test.js

@@ -0,0 +1,149 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const generate_1 = require("../generate");
+const embed_1 = require("../embed");
+const detect_1 = require("../detect");
+const canary_1 = require("../canary");
+const ZW_SPACE = '\u200B';
+const ZW_NON_JOINER = '\u200C';
+const ZW_JOINER = '\u200D';
+function hasZeroWidthChars(text) {
+    return text.includes(ZW_SPACE) || text.includes(ZW_NON_JOINER) || text.includes(ZW_JOINER);
+}
+(0, vitest_1.describe)('generate()', () => {
+    (0, vitest_1.it)('returns a token with a UUID payload by default', () => {
+        const token = (0, generate_1.generate)();
+        (0, vitest_1.expect)(token.payload).toMatch(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/);
+    });
+    (0, vitest_1.it)('returns zero-width type by default', () => {
+        const token = (0, generate_1.generate)();
+        (0, vitest_1.expect)(token.type).toBe('zero-width');
+    });
+    (0, vitest_1.it)('uses custom payload when provided', () => {
+        const token = (0, generate_1.generate)({ payload: 'secret-id-123' });
+        (0, vitest_1.expect)(token.payload).toBe('secret-id-123');
+    });
+    (0, vitest_1.it)('uses custom type when provided', () => {
+        const token = (0, generate_1.generate)({ type: 'homoglyph' });
+        (0, vitest_1.expect)(token.type).toBe('homoglyph');
+    });
+    (0, vitest_1.it)('includes createdAt ISO timestamp', () => {
+        const token = (0, generate_1.generate)();
+        (0, vitest_1.expect)(() => new Date(token.createdAt)).not.toThrow();
+        (0, vitest_1.expect)(new Date(token.createdAt).toISOString()).toBe(token.createdAt);
+    });
+});
+(0, vitest_1.describe)('embed() zero-width', () => {
+    (0, vitest_1.it)('produces output containing zero-width chars', () => {
+        const token = (0, generate_1.generate)({ payload: 'test-payload' });
+        const prompt = 'Hello, world!';
+        const embedded = (0, embed_1.embed)(prompt, token);
+        (0, vitest_1.expect)(hasZeroWidthChars(embedded)).toBe(true);
+    });
+    (0, vitest_1.it)('appends to end by default', () => {
+        const token = (0, generate_1.generate)({ payload: 'end-test' });
+        const prompt = 'My prompt';
+        const embedded = (0, embed_1.embed)(prompt, token);
+        (0, vitest_1.expect)(embedded.startsWith(prompt)).toBe(true);
+    });
+    (0, vitest_1.it)('prepends when position is start', () => {
+        const token = (0, generate_1.generate)({ payload: 'start-test' });
+        const prompt = 'My prompt';
+        const embedded = (0, embed_1.embed)(prompt, token, { position: 'start' });
+        (0, vitest_1.expect)(hasZeroWidthChars(embedded.slice(0, 50))).toBe(true);
+        (0, vitest_1.expect)(embedded).toContain(prompt);
+    });
+});
+(0, vitest_1.describe)('detect()', () => {
+    (0, vitest_1.it)('finds a zero-width embedded token', () => {
+        const token = (0, generate_1.generate)({ payload: 'detect-me' });
+        const prompt = 'Some text here.';
+        const embedded = (0, embed_1.embed)(prompt, token);
+        const result = (0, detect_1.detect)(embedded);
+        (0, vitest_1.expect)(result.found).toBe(true);
+        (0, vitest_1.expect)(result.tokens).toHaveLength(1);
+        (0, vitest_1.expect)(result.tokens[0].type).toBe('zero-width');
+        (0, vitest_1.expect)(result.tokens[0].payload).toBe('detect-me');
+        (0, vitest_1.expect)(result.tokens[0].checksumValid).toBe(true);
+        (0, vitest_1.expect)(result.tokens[0].confidence).toBe('high');
+    });
+    (0, vitest_1.it)('returns found=false for plain text', () => {
+        const result = (0, detect_1.detect)('No hidden data here.');
+        (0, vitest_1.expect)(result.found).toBe(false);
+        (0, vitest_1.expect)(result.tokens).toHaveLength(0);
+    });
+    (0, vitest_1.it)('includes durationMs', () => {
+        const result = (0, detect_1.detect)('some text');
+        (0, vitest_1.expect)(typeof result.durationMs).toBe('number');
+        (0, vitest_1.expect)(result.durationMs).toBeGreaterThanOrEqual(0);
+    });
+});
+(0, vitest_1.describe)('verify() roundtrip', () => {
+    (0, vitest_1.it)('returns true for correctly embedded token', () => {
+        const token = (0, generate_1.generate)({ payload: 'verify-roundtrip' });
+        const embedded = (0, embed_1.embed)('The prompt text.', token);
+        (0, vitest_1.expect)((0, canary_1.verify)(embedded, token)).toBe(true);
+    });
+    (0, vitest_1.it)('returns false for plain text', () => {
+        const token = (0, generate_1.generate)({ payload: 'some-id' });
+        (0, vitest_1.expect)((0, canary_1.verify)('plain text with no hidden data', token)).toBe(false);
+    });
+    (0, vitest_1.it)('returns false when payload does not match', () => {
+        const token1 = (0, generate_1.generate)({ payload: 'token-alpha' });
+        const token2 = (0, generate_1.generate)({ payload: 'token-beta' });
+        const embedded = (0, embed_1.embed)('Hello world.', token1);
+        // token2 payload is different, should not be found
+        (0, vitest_1.expect)((0, canary_1.verify)(embedded, token2)).toBe(false);
+    });
+});
+(0, vitest_1.describe)('homoglyph roundtrip', () => {
+    (0, vitest_1.it)('embed then detect finds correct payload', () => {
+        // Packet = [0xCA, 0x1A, len, ...payload, xor] = 4+2 = 6 bytes = 48 bits needed
+        // Use a short payload "ab" so packet is 6 bytes = 48 bits needed
+        // Provide a prompt with well over 48 substitutable chars
+        const prompt = 'The quick brown fox jumps over the lazy dog. ' +
+            'Pack my box with five dozen liquor jugs. ' +
+            'How vexingly quick daft zebras jump! ' +
+            'A complex mixture of every character type possible. ' +
+            'Explore creative approaches to problems and overcome obstacles effectively.';
+        const token = (0, generate_1.generate)({ type: 'homoglyph', payload: 'ab' });
+        const embedded = (0, embed_1.embed)(prompt, token);
+        const result = (0, detect_1.detect)(embedded, { types: ['homoglyph'] });
+        (0, vitest_1.expect)(result.found).toBe(true);
+        (0, vitest_1.expect)(result.tokens[0].type).toBe('homoglyph');
+        (0, vitest_1.expect)(result.tokens[0].payload).toBe('ab');
+        (0, vitest_1.expect)(result.tokens[0].checksumValid).toBe(true);
+    });
+    (0, vitest_1.it)('throws when text has insufficient substitutable characters', () => {
+        const token = (0, generate_1.generate)({ type: 'homoglyph', payload: 'long-payload-that-needs-many-bits' });
+        (0, vitest_1.expect)(() => (0, embed_1.embed)('Hi.', token)).toThrow('Insufficient capacity');
+    });
+});
+(0, vitest_1.describe)('createCanary()', () => {
+    (0, vitest_1.it)('returns a canary object with token, embed, detect, verify', () => {
+        const canary = (0, canary_1.createCanary)();
+        (0, vitest_1.expect)(canary.token).toBeDefined();
+        (0, vitest_1.expect)(typeof canary.embed).toBe('function');
+        (0, vitest_1.expect)(typeof canary.detect).toBe('function');
+        (0, vitest_1.expect)(typeof canary.verify).toBe('function');
+    });
+    (0, vitest_1.it)('verify() returns true after embed()', () => {
+        const canary = (0, canary_1.createCanary)({ payload: 'canary-test' });
+        const embedded = canary.embed('This is the prompt text to protect.');
+        (0, vitest_1.expect)(canary.verify(embedded)).toBe(true);
+    });
+    (0, vitest_1.it)('respects config type homoglyph', () => {
+        // payload "xy" -> packet = 6 bytes = 48 bits needed
+        const canary = (0, canary_1.createCanary)({ type: 'homoglyph', payload: 'xy' });
+        (0, vitest_1.expect)(canary.token.type).toBe('homoglyph');
+        // Provide a long prompt with many substitutable chars
+        const prompt = 'Type checking is very important in every project. ' +
+            'Homoglyph encoding uses lookalike characters between Latin and Cyrillic alphabets. ' +
+            'Accuracy matters when processing text at a byte level. ' +
+            'Every character type must be handled properly to ensure correctness.';
+        const embedded = canary.embed(prompt);
+        (0, vitest_1.expect)(canary.verify(embedded)).toBe(true);
+    });
+});
+//# sourceMappingURL=canary.test.js.map

package/dist/__tests__/canary.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canary.test.js","sourceRoot":"","sources":["../../src/__tests__/canary.test.ts"],"names":[],"mappings":";;AAAA,mCAA6C;AAC7C,0CAAsC;AACtC,oCAAgC;AAChC,sCAAkC;AAClC,sCAAgD;AAEhD,MAAM,QAAQ,GAAG,QAAQ,CAAA;AACzB,MAAM,aAAa,GAAG,QAAQ,CAAA;AAC9B,MAAM,SAAS,GAAG,QAAQ,CAAA;AAE1B,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;AAC5F,CAAC;AAED,IAAA,iBAAQ,EAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,KAAK,GAAG,IAAA,mBAAQ,GAAE,CAAA;QACxB,IAAA,eAAM,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAC3B,gEAAgE,CACjE,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,KAAK,GAAG,IAAA,mBAAQ,GAAE,CAAA;QACxB,IAAA,eAAM,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAA;QACpD,IAAA,eAAM,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QAC7C,IAAA,eAAM,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAG,IAAA,mBAAQ,GAAE,CAAA;QACxB,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QACrD,IAAA,eAAM,EAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAA,WAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,eAAe,CAAA;QAC9B,MAAM,QAAQ,GAAG,IAAA,aAAK,EAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrC,IAAA,eAAM,EAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,WAAW,CAAA;QAC1B,MAAM,QAAQ,GAAG,IAAA,aAAK,EAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrC,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,WAAW,CAAA;QAC1B,MAAM,QAAQ,GAAG,IAAA,aAAK,EAAC,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC5D,IAAA,eAAM,EAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAA,iBAAQ,EAAC,UAAU,EAAE,GAAG,EAAE;IACxB,IAAA,WAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAAA;QAChC,MAAM,QAAQ,GAAG,IAAA,aAAK,EAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAA;QAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACrC,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAChD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAClD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,IAAA,eAAM,EAAC,sBAAsB,CAAC,CAAA;QAC7C,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChC,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAA,eAAM,EAAC,WAAW,CAAC,CAAA;QAClC,IAAA,eAAM,EAAC,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC/C,IAAA,eAAM,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAA;QACvD,MAAM,QAAQ,GAAG,IAAA,aAAK,EAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;QACjD,IAAA,eAAM,EAAC,IAAA,eAAM,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;QAC9C,IAAA,eAAM,EAAC,IAAA,eAAM,EAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,IAAA,mBAAQ,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,IAAA,mBAAQ,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,IAAA,aAAK,EAAC,cAAc,EAAE,MAAM,CAAC,CAAA;QAC9C,mDAAmD;QACnD,IAAA,eAAM,EAAC,IAAA,eAAM,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAA,iBAAQ,EAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAA,WAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,+EAA+E;QAC/E,iEAAiE;QACjE,yDAAyD;QACzD,MAAM,MAAM,GACV,+CAA+C;YAC/C,2CAA2C;YAC3C,uCAAuC;YACvC,sDAAsD;YACtD,6EAA6E,CAAA;QAC/E,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,MAAM,QAAQ,GAAG,IAAA,aAAK,EAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,IAAA,eAAM,EAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QACzD,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC/C,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAA;QAC3F,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,aAAK,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAA,iBAAQ,EAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAA,WAAE,EAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,MAAM,GAAG,IAAA,qBAAY,GAAE,CAAA;QAC7B,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAClC,IAAA,eAAM,EAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC5C,IAAA,eAAM,EAAC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC7C,IAAA,eAAM,EAAC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;QACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACpE,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,oDAAoD;QACpD,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC3C,sDAAsD;QACtD,MAAM,MAAM,GACV,oDAAoD;YACpD,qFAAqF;YACrF,yDAAyD;YACzD,sEAAsE,CAAA;QACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACrC,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/zero-width.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=zero-width.test.d.ts.map

package/dist/__tests__/zero-width.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-width.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/zero-width.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/zero-width.test.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const zero_width_1 = require("../encoders/zero-width");
+const ZW_SPACE = '\u200B';
+const ZW_NON_JOINER = '\u200C';
+const ZW_JOINER = '\u200D';
+(0, vitest_1.describe)('encodeZeroWidth', () => {
+    (0, vitest_1.it)('encodes bytes using only zero-width chars', () => {
+        const bytes = new Uint8Array([0xAB, 0xCD]);
+        const encoded = (0, zero_width_1.encodeZeroWidth)(bytes);
+        for (const ch of encoded) {
+            (0, vitest_1.expect)([ZW_SPACE, ZW_NON_JOINER, ZW_JOINER]).toContain(ch);
+        }
+    });
+    (0, vitest_1.it)('returns empty string for empty bytes', () => {
+        (0, vitest_1.expect)((0, zero_width_1.encodeZeroWidth)(new Uint8Array([]))).toBe('');
+    });
+    (0, vitest_1.it)('encodes a single byte as 8 zero-width bits', () => {
+        const bytes = new Uint8Array([0b10101010]);
+        const encoded = (0, zero_width_1.encodeZeroWidth)(bytes);
+        // No separator for single byte, 8 bit chars
+        const bits = [...encoded].filter(c => c !== ZW_JOINER);
+        (0, vitest_1.expect)(bits).toHaveLength(8);
+    });
+});
+(0, vitest_1.describe)('decodeZeroWidth roundtrip', () => {
+    (0, vitest_1.it)('roundtrips single byte', () => {
+        const bytes = new Uint8Array([42]);
+        const encoded = (0, zero_width_1.encodeZeroWidth)(bytes);
+        const decoded = (0, zero_width_1.decodeZeroWidth)(encoded);
+        (0, vitest_1.expect)(decoded).not.toBeNull();
+        (0, vitest_1.expect)(decoded).toEqual(bytes);
+    });
+    (0, vitest_1.it)('roundtrips multiple bytes', () => {
+        const bytes = new Uint8Array([0, 127, 255, 0xCA, 0x1A]);
+        const encoded = (0, zero_width_1.encodeZeroWidth)(bytes);
+        const decoded = (0, zero_width_1.decodeZeroWidth)(encoded);
+        (0, vitest_1.expect)(decoded).not.toBeNull();
+        (0, vitest_1.expect)(decoded).toEqual(bytes);
+    });
+    (0, vitest_1.it)('returns null when no zero-width chars present', () => {
+        (0, vitest_1.expect)((0, zero_width_1.decodeZeroWidth)('hello world')).toBeNull();
+    });
+    (0, vitest_1.it)('ignores surrounding normal text during roundtrip', () => {
+        const bytes = new Uint8Array([99, 88]);
+        const encoded = 'prefix' + (0, zero_width_1.encodeZeroWidth)(bytes) + 'suffix';
+        const decoded = (0, zero_width_1.decodeZeroWidth)(encoded);
+        (0, vitest_1.expect)(decoded).toEqual(bytes);
+    });
+});
+//# sourceMappingURL=zero-width.test.js.map

package/dist/__tests__/zero-width.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-width.test.js","sourceRoot":"","sources":["../../src/__tests__/zero-width.test.ts"],"names":[],"mappings":";;AAAA,mCAA6C;AAC7C,uDAAyE;AAEzE,MAAM,QAAQ,GAAG,QAAQ,CAAA;AACzB,MAAM,aAAa,GAAG,QAAQ,CAAA;AAC9B,MAAM,SAAS,GAAG,QAAQ,CAAA;AAE1B,IAAA,iBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;QACtC,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,IAAA,eAAM,EAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,IAAA,eAAM,EAAC,IAAA,4BAAe,EAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;QACtC,4CAA4C;QAC5C,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;QACtD,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAA,iBAAQ,EAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAA,WAAE,EAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAClC,MAAM,OAAO,GAAG,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,IAAA,4BAAe,EAAC,OAAO,CAAC,CAAA;QACxC,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC9B,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QACvD,MAAM,OAAO,GAAG,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,IAAA,4BAAe,EAAC,OAAO,CAAC,CAAA;QACxC,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC9B,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,IAAA,eAAM,EAAC,IAAA,4BAAe,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,QAAQ,GAAG,IAAA,4BAAe,EAAC,KAAK,CAAC,GAAG,QAAQ,CAAA;QAC5D,MAAM,OAAO,GAAG,IAAA,4BAAe,EAAC,OAAO,CAAC,CAAA;QACxC,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/canary.d.ts

@@ -0,0 +1,6 @@
+import type { Canary, CanaryConfig, CanaryToken, Confidence } from './types';
+export declare function verify(text: string, token: CanaryToken, options?: {
+    minConfidence?: Confidence;
+}): boolean;
+export declare function createCanary(config?: CanaryConfig): Canary;
+//# sourceMappingURL=canary.d.ts.map

package/dist/canary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canary.d.ts","sourceRoot":"","sources":["../src/canary.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAgD,UAAU,EAAE,MAAM,SAAS,CAAA;AAE1H,wBAAgB,MAAM,CACpB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,UAAU,CAAA;CAAE,GACvC,OAAO,CAMT;AAED,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,MAAM,CAS1D"}

package/dist/canary.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verify = verify;
+exports.createCanary = createCanary;
+const generate_1 = require("./generate");
+const embed_1 = require("./embed");
+const detect_1 = require("./detect");
+function verify(text, token, options) {
+    const result = (0, detect_1.detect)(text, {
+        types: [token.type],
+        minConfidence: options?.minConfidence ?? 'medium',
+    });
+    return result.tokens.some(t => t.payload === token.payload);
+}
+function createCanary(config) {
+    const token = (0, generate_1.generate)({ type: config?.type, payload: config?.payload });
+    return {
+        token,
+        embed: (prompt, options) => (0, embed_1.embed)(prompt, token, { position: config?.position, ...options }),
+        detect: (text, options) => (0, detect_1.detect)(text, options),
+        verify: (text) => verify(text, token),
+    };
+}
+//# sourceMappingURL=canary.js.map

package/dist/canary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canary.js","sourceRoot":"","sources":["../src/canary.ts"],"names":[],"mappings":";;AAKA,wBAUC;AAED,oCASC;AA1BD,yCAAqC;AACrC,mCAA+B;AAC/B,qCAAiC;AAGjC,SAAgB,MAAM,CACpB,IAAY,EACZ,KAAkB,EAClB,OAAwC;IAExC,MAAM,MAAM,GAAoB,IAAA,eAAM,EAAC,IAAI,EAAE;QAC3C,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QACnB,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,QAAQ;KAClD,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAA;AAC7D,CAAC;AAED,SAAgB,YAAY,CAAC,MAAqB;IAChD,MAAM,KAAK,GAAG,IAAA,mBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IACxE,OAAO;QACL,KAAK;QACL,KAAK,EAAE,CAAC,MAAc,EAAE,OAAsB,EAAU,EAAE,CACxD,IAAA,aAAK,EAAC,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;QAClE,MAAM,EAAE,CAAC,IAAY,EAAE,OAAuB,EAAmB,EAAE,CAAC,IAAA,eAAM,EAAC,IAAI,EAAE,OAAO,CAAC;QACzF,MAAM,EAAE,CAAC,IAAY,EAAW,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;KACvD,CAAA;AACH,CAAC"}

package/dist/codec.d.ts

@@ -0,0 +1,6 @@
+export declare function encodePacket(payload: string): Uint8Array;
+export declare function decodePacket(bytes: Uint8Array): {
+    payload: string;
+    checksumValid: boolean;
+} | null;
+//# sourceMappingURL=codec.d.ts.map

package/dist/codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../src/codec.ts"],"names":[],"mappings":"AAGA,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAcxD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAelG"}

package/dist/codec.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodePacket = encodePacket;
+exports.decodePacket = decodePacket;
+// Packet format: [0xCA, 0x1A, length, ...payload bytes, xor_checksum]
+const MAGIC = [0xca, 0x1a];
+function encodePacket(payload) {
+    const encoder = new TextEncoder();
+    const payloadBytes = encoder.encode(payload);
+    let checksum = 0;
+    for (const b of payloadBytes) {
+        checksum ^= b;
+    }
+    const packet = new Uint8Array(MAGIC.length + 1 + payloadBytes.length + 1);
+    packet[0] = MAGIC[0];
+    packet[1] = MAGIC[1];
+    packet[2] = payloadBytes.length;
+    packet.set(payloadBytes, 3);
+    packet[packet.length - 1] = checksum;
+    return packet;
+}
+function decodePacket(bytes) {
+    if (bytes.length < 4)
+        return null;
+    if (bytes[0] !== MAGIC[0] || bytes[1] !== MAGIC[1])
+        return null;
+    const length = bytes[2];
+    if (bytes.length < 3 + length + 1)
+        return null;
+    const payloadBytes = bytes.slice(3, 3 + length);
+    const storedChecksum = bytes[3 + length];
+    let computed = 0;
+    for (const b of payloadBytes) {
+        computed ^= b;
+    }
+    const checksumValid = computed === storedChecksum;
+    const decoder = new TextDecoder();
+    const payload = decoder.decode(payloadBytes);
+    return { payload, checksumValid };
+}
+//# sourceMappingURL=codec.js.map

package/dist/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../src/codec.ts"],"names":[],"mappings":";;AAGA,oCAcC;AAED,oCAeC;AAlCD,sEAAsE;AACtE,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AAE1B,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC5C,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,QAAQ,IAAI,CAAC,CAAA;IACf,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACzE,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACpB,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACpB,MAAM,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,CAAA;IAC/B,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAA;IAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAA;IACpC,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAgB,YAAY,CAAC,KAAiB;IAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACvB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC9C,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAA;IAC/C,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAA;IACxC,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,QAAQ,IAAI,CAAC,CAAA;IACf,CAAC;IACD,MAAM,aAAa,GAAG,QAAQ,KAAK,cAAc,CAAA;IACjD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC5C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;AACnC,CAAC"}

package/dist/detect.d.ts

@@ -0,0 +1,3 @@
+import type { DetectionResult, DetectOptions } from './types';
+export declare function detect(text: string, options?: DetectOptions): DetectionResult;
+//# sourceMappingURL=detect.d.ts.map

package/dist/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../src/detect.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAiB,eAAe,EAAE,aAAa,EAA0B,MAAM,SAAS,CAAA;AAQpG,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,eAAe,CA8D7E"}

package/dist/detect.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detect = detect;
+const zero_width_1 = require("./encoders/zero-width");
+const homoglyph_1 = require("./encoders/homoglyph");
+const codec_1 = require("./codec");
+const CONFIDENCE_ORDER = { high: 3, medium: 2, low: 1 };
+function meetsMinConfidence(conf, min) {
+    return CONFIDENCE_ORDER[conf] >= CONFIDENCE_ORDER[min];
+}
+function detect(text, options) {
+    const start = Date.now();
+    const enabledTypes = options?.types ?? ['zero-width', 'homoglyph', 'whitespace'];
+    const minConfidence = options?.minConfidence ?? 'low';
+    const tokens = [];
+    if (enabledTypes.includes('zero-width')) {
+        const bytes = (0, zero_width_1.decodeZeroWidth)(text);
+        if (bytes) {
+            const decoded = (0, codec_1.decodePacket)(bytes);
+            if (decoded) {
+                const confidence = decoded.checksumValid ? 'high' : 'medium';
+                if (meetsMinConfidence(confidence, minConfidence)) {
+                    // Find position of zero-width chars in text
+                    const startIdx = text.search(/[\u200B\u200C\u200D]/);
+                    let endIdx = startIdx;
+                    if (startIdx !== -1) {
+                        for (let i = startIdx; i < text.length; i++) {
+                            const c = text[i];
+                            if (c === '\u200B' || c === '\u200C' || c === '\u200D') {
+                                endIdx = i + 1;
+                            }
+                            else if (endIdx > startIdx) {
+                                break;
+                            }
+                        }
+                    }
+                    tokens.push({
+                        type: 'zero-width',
+                        payload: decoded.payload,
+                        confidence,
+                        checksumValid: decoded.checksumValid,
+                        position: { start: startIdx === -1 ? 0 : startIdx, end: endIdx },
+                    });
+                }
+            }
+        }
+    }
+    if (enabledTypes.includes('homoglyph')) {
+        const bytes = (0, homoglyph_1.decodeHomoglyph)(text);
+        if (bytes) {
+            const decoded = (0, codec_1.decodePacket)(bytes);
+            if (decoded) {
+                const confidence = decoded.checksumValid ? 'high' : 'medium';
+                if (meetsMinConfidence(confidence, minConfidence)) {
+                    tokens.push({
+                        type: 'homoglyph',
+                        payload: decoded.payload,
+                        confidence,
+                        checksumValid: decoded.checksumValid,
+                        position: { start: 0, end: text.length },
+                    });
+                }
+            }
+        }
+    }
+    return {
+        found: tokens.length > 0,
+        tokens,
+        durationMs: Date.now() - start,
+    };
+}
+//# sourceMappingURL=detect.js.map

package/dist/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../src/detect.ts"],"names":[],"mappings":";;AAWA,wBA8DC;AAzED,sDAAuD;AACvD,oDAAsD;AACtD,mCAAsC;AAGtC,MAAM,gBAAgB,GAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAA;AAEnF,SAAS,kBAAkB,CAAC,IAAgB,EAAE,GAAe;IAC3D,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAA;AACxD,CAAC;AAED,SAAgB,MAAM,CAAC,IAAY,EAAE,OAAuB;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACxB,MAAM,YAAY,GAAiB,OAAO,EAAE,KAAK,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;IAC9F,MAAM,aAAa,GAAe,OAAO,EAAE,aAAa,IAAI,KAAK,CAAA;IACjE,MAAM,MAAM,GAAoB,EAAE,CAAA;IAElC,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAA,4BAAe,EAAC,IAAI,CAAC,CAAA;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,OAAO,GAAG,IAAA,oBAAY,EAAC,KAAK,CAAC,CAAA;YACnC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,UAAU,GAAe,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA;gBACxE,IAAI,kBAAkB,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC;oBAClD,4CAA4C;oBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;oBACpD,IAAI,MAAM,GAAG,QAAQ,CAAA;oBACrB,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;wBACpB,KAAK,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;4BAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;4BACjB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;gCACvD,MAAM,GAAG,CAAC,GAAG,CAAC,CAAA;4BAChB,CAAC;iCAAM,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;gCAC7B,MAAK;4BACP,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,YAAY;wBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,UAAU;wBACV,aAAa,EAAE,OAAO,CAAC,aAAa;wBACpC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE;qBACjE,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAA,2BAAe,EAAC,IAAI,CAAC,CAAA;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,OAAO,GAAG,IAAA,oBAAY,EAAC,KAAK,CAAC,CAAA;YACnC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,UAAU,GAAe,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA;gBACxE,IAAI,kBAAkB,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC;oBAClD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,UAAU;wBACV,aAAa,EAAE,OAAO,CAAC,aAAa;wBACpC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE;qBACzC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;QACxB,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAA;AACH,CAAC"}

package/dist/embed.d.ts

@@ -0,0 +1,3 @@
+import type { CanaryToken, EmbedOptions } from './types';
+export declare function embed(prompt: string, token: CanaryToken, options?: EmbedOptions): string;
+//# sourceMappingURL=embed.d.ts.map

package/dist/embed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.d.ts","sourceRoot":"","sources":["../src/embed.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAmCxD,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,MAAM,CA+BxF"}

package/dist/embed.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.embed = embed;
+const zero_width_1 = require("./encoders/zero-width");
+const homoglyph_1 = require("./encoders/homoglyph");
+const codec_1 = require("./codec");
+function insertAt(prompt, marker, position) {
+    const pos = position ?? 'end';
+    if (pos === 'start') {
+        return marker + prompt;
+    }
+    if (pos === 'end') {
+        return prompt + marker;
+    }
+    if (pos === 'after-first-sentence') {
+        const match = prompt.match(/[.!?]\s/);
+        if (match && match.index !== undefined) {
+            const idx = match.index + 1;
+            return prompt.slice(0, idx) + marker + prompt.slice(idx);
+        }
+        return prompt + marker;
+    }
+    if (pos === 'before-last-sentence') {
+        // Find start of last sentence
+        const trimmed = prompt.trimEnd();
+        const match = [...trimmed.matchAll(/[.!?]\s+/g)].at(-1);
+        if (match && match.index !== undefined) {
+            const idx = match.index + match[0].length;
+            return prompt.slice(0, idx) + marker + prompt.slice(idx);
+        }
+        return marker + prompt;
+    }
+    if (pos === 'random') {
+        const idx = Math.floor(Math.random() * (prompt.length + 1));
+        return prompt.slice(0, idx) + marker + prompt.slice(idx);
+    }
+    return prompt + marker;
+}
+function embed(prompt, token, options) {
+    const bytes = (0, codec_1.encodePacket)(token.payload);
+    if (token.type === 'homoglyph') {
+        // encodeHomoglyph replaces chars in-place, returns full modified text
+        return (0, homoglyph_1.encodeHomoglyph)(prompt, bytes);
+    }
+    if (token.type === 'whitespace') {
+        // Encode as trailing spaces per line: 1 space = bit 0, 2 spaces = bit 1
+        // Each line carries one bit; we need bytes.length * 8 lines
+        const bits = [];
+        for (const byte of bytes) {
+            for (let bit = 7; bit >= 0; bit--) {
+                bits.push((byte >> bit) & 1);
+            }
+        }
+        const lines = prompt.split('\n');
+        let bitIndex = 0;
+        const encodedLines = lines.map(line => {
+            if (bitIndex >= bits.length)
+                return line;
+            const trailing = bits[bitIndex] === 1 ? '  ' : ' ';
+            bitIndex++;
+            return line + trailing;
+        });
+        return encodedLines.join('\n');
+    }
+    // zero-width (default)
+    const marker = (0, zero_width_1.encodeZeroWidth)(bytes);
+    return insertAt(prompt, marker, options?.position);
+}
+//# sourceMappingURL=embed.js.map

package/dist/embed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.js","sourceRoot":"","sources":["../src/embed.ts"],"names":[],"mappings":";;AAsCA,sBA+BC;AArED,sDAAuD;AACvD,oDAAsD;AACtD,mCAAsC;AAGtC,SAAS,QAAQ,CAAC,MAAc,EAAE,MAAc,EAAE,QAAkC;IAClF,MAAM,GAAG,GAAG,QAAQ,IAAI,KAAK,CAAA;IAC7B,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,GAAG,MAAM,CAAA;IACxB,CAAC;IACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO,MAAM,GAAG,MAAM,CAAA;IACxB,CAAC;IACD,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACrC,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAA;YAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC1D,CAAC;QACD,OAAO,MAAM,GAAG,MAAM,CAAA;IACxB,CAAC;IACD,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;QACnC,8BAA8B;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;QAChC,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACvD,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;YACzC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC1D,CAAC;QACD,OAAO,MAAM,GAAG,MAAM,CAAA;IACxB,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;QAC3D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,MAAM,GAAG,MAAM,CAAA;AACxB,CAAC;AAED,SAAgB,KAAK,CAAC,MAAc,EAAE,KAAkB,EAAE,OAAsB;IAC9E,MAAM,KAAK,GAAG,IAAA,oBAAY,EAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAEzC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/B,sEAAsE;QACtE,OAAO,IAAA,2BAAe,EAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACvC,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChC,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YACpC,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA;YAClD,QAAQ,EAAE,CAAA;YACV,OAAO,IAAI,GAAG,QAAQ,CAAA;QACxB,CAAC,CAAC,CAAA;QACF,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChC,CAAC;IAED,uBAAuB;IACvB,MAAM,MAAM,GAAG,IAAA,4BAAe,EAAC,KAAK,CAAC,CAAA;IACrC,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;AACpD,CAAC"}

package/dist/encoders/homoglyph.d.ts

@@ -0,0 +1,3 @@
+export declare function encodeHomoglyph(text: string, bytes: Uint8Array): string;
+export declare function decodeHomoglyph(text: string): Uint8Array | null;
+//# sourceMappingURL=homoglyph.d.ts.map

package/dist/encoders/homoglyph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"homoglyph.d.ts","sourceRoot":"","sources":["../../src/encoders/homoglyph.ts"],"names":[],"mappings":"AAgBA,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CA8BvE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAwB/D"}

package/dist/encoders/homoglyph.js

@@ -0,0 +1,72 @@
+"use strict";
+// Latin <-> Cyrillic lookalike substitution
+// bit 0 = keep Latin, bit 1 = substitute with Cyrillic
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodeHomoglyph = encodeHomoglyph;
+exports.decodeHomoglyph = decodeHomoglyph;
+const PAIRS = [
+    ['a', 'а'], ['c', 'с'], ['e', 'е'], ['o', 'о'],
+    ['p', 'р'], ['x', 'х'], ['y', 'у'],
+    ['A', 'А'], ['B', 'В'], ['C', 'С'], ['E', 'Е'],
+    ['H', 'Н'], ['K', 'К'], ['M', 'М'], ['O', 'О'],
+    ['P', 'Р'], ['T', 'Т'], ['X', 'Х'], ['Y', 'У'],
+];
+// Build lookup maps
+const latinToCyrillic = new Map(PAIRS.map(([l, c]) => [l, c]));
+const cyrillicToLatin = new Map(PAIRS.map(([l, c]) => [c, l]));
+const substitutable = new Set(PAIRS.map(([l]) => l));
+function encodeHomoglyph(text, bytes) {
+    // Find all substitutable positions in text
+    const positions = [];
+    for (let i = 0; i < text.length; i++) {
+        if (substitutable.has(text[i])) {
+            positions.push(i);
+        }
+    }
+    // We need one substitutable position per bit
+    const bitsNeeded = bytes.length * 8;
+    if (positions.length < bitsNeeded) {
+        throw new Error(`Insufficient capacity: need ${bitsNeeded} substitutable chars, found ${positions.length}`);
+    }
+    const chars = text.split('');
+    let bitIndex = 0;
+    for (let byteIndex = 0; byteIndex < bytes.length; byteIndex++) {
+        for (let bit = 7; bit >= 0; bit--) {
+            const bitVal = (bytes[byteIndex] >> bit) & 1;
+            const pos = positions[bitIndex];
+            if (bitVal === 1) {
+                chars[pos] = latinToCyrillic.get(chars[pos]) ?? chars[pos];
+            }
+            bitIndex++;
+        }
+    }
+    return chars.join('');
+}
+function decodeHomoglyph(text) {
+    // Collect positions that are either Cyrillic lookalikes (=1) or Latin substitutables (=0)
+    const bits = [];
+    for (const ch of text) {
+        if (cyrillicToLatin.has(ch)) {
+            bits.push(1);
+        }
+        else if (substitutable.has(ch)) {
+            bits.push(0);
+        }
+    }
+    if (bits.length === 0)
+        return null;
+    // Reconstruct bytes from bits (groups of 8)
+    const byteCount = Math.floor(bits.length / 8);
+    if (byteCount === 0)
+        return null;
+    const bytes = new Uint8Array(byteCount);
+    for (let i = 0; i < byteCount; i++) {
+        let byte = 0;
+        for (let bit = 0; bit < 8; bit++) {
+            byte = (byte << 1) | bits[i * 8 + bit];
+        }
+        bytes[i] = byte;
+    }
+    return bytes;
+}
+//# sourceMappingURL=homoglyph.js.map

package/dist/encoders/homoglyph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"homoglyph.js","sourceRoot":"","sources":["../../src/encoders/homoglyph.ts"],"names":[],"mappings":";AAAA,4CAA4C;AAC5C,uDAAuD;;AAevD,0CA8BC;AAED,0CAwBC;AArED,MAAM,KAAK,GAAuB;IAChC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAC9C,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAClC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAC9C,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAC9C,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;CAC/C,CAAA;AAED,oBAAoB;AACpB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAE5D,SAAgB,eAAe,CAAC,IAAY,EAAE,KAAiB;IAC7D,2CAA2C;IAC3C,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;IACnC,IAAI,SAAS,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,+BAA+B,UAAU,+BAA+B,SAAS,CAAC,MAAM,EAAE,CAC3F,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC5B,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;QAC9D,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;YAC5C,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC/B,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjB,KAAK,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAA;YAC5D,CAAC;YACD,QAAQ,EAAE,CAAA;QACZ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACvB,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY;IAC1C,0FAA0F;IAC1F,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,CAAC;aAAM,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAElC,4CAA4C;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC7C,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAChC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAA;QACxC,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;IACjB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/encoders/zero-width.d.ts

@@ -0,0 +1,3 @@
+export declare function encodeZeroWidth(bytes: Uint8Array): string;
+export declare function decodeZeroWidth(text: string): Uint8Array | null;
+//# sourceMappingURL=zero-width.d.ts.map

package/dist/encoders/zero-width.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-width.d.ts","sourceRoot":"","sources":["../../src/encoders/zero-width.ts"],"names":[],"mappings":"AASA,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAWzD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAmB/D"}

package/dist/encoders/zero-width.js

@@ -0,0 +1,48 @@
+"use strict";
+// Encode binary data as zero-width Unicode characters:
+// bit 0 = U+200B (zero-width space)
+// bit 1 = U+200C (zero-width non-joiner)
+// byte separator = U+200D (zero-width joiner)
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodeZeroWidth = encodeZeroWidth;
+exports.decodeZeroWidth = decodeZeroWidth;
+const BIT0 = '\u200B';
+const BIT1 = '\u200C';
+const SEP = '\u200D';
+function encodeZeroWidth(bytes) {
+    if (bytes.length === 0)
+        return '';
+    const parts = [];
+    for (const byte of bytes) {
+        let byteStr = '';
+        for (let bit = 7; bit >= 0; bit--) {
+            byteStr += (byte >> bit) & 1 ? BIT1 : BIT0;
+        }
+        parts.push(byteStr);
+    }
+    return parts.join(SEP);
+}
+function decodeZeroWidth(text) {
+    // Extract all zero-width chars
+    const zwChars = [...text].filter(c => c === BIT0 || c === BIT1 || c === SEP);
+    if (zwChars.length === 0)
+        return null;
+    // Split on SEP to get per-byte bit strings
+    const segments = zwChars.join('').split(SEP);
+    const bytes = [];
+    for (const seg of segments) {
+        if (seg.length === 0)
+            continue;
+        if (seg.length !== 8)
+            continue;
+        let byte = 0;
+        for (let i = 0; i < 8; i++) {
+            byte = (byte << 1) | (seg[i] === BIT1 ? 1 : 0);
+        }
+        bytes.push(byte);
+    }
+    if (bytes.length === 0)
+        return null;
+    return new Uint8Array(bytes);
+}
+//# sourceMappingURL=zero-width.js.map

package/dist/encoders/zero-width.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-width.js","sourceRoot":"","sources":["../../src/encoders/zero-width.ts"],"names":[],"mappings":";AAAA,uDAAuD;AACvD,oCAAoC;AACpC,yCAAyC;AACzC,8CAA8C;;AAM9C,0CAWC;AAED,0CAmBC;AApCD,MAAM,IAAI,GAAG,QAAQ,CAAA;AACrB,MAAM,IAAI,GAAG,QAAQ,CAAA;AACrB,MAAM,GAAG,GAAG,QAAQ,CAAA;AAEpB,SAAgB,eAAe,CAAC,KAAiB;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACjC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,EAAE,CAAA;QAChB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;QAC5C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACrB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxB,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY;IAC1C,+BAA+B;IAC/B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAA;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAErC,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAC9B,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAChD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC"}

package/dist/generate.d.ts

@@ -0,0 +1,3 @@
+import type { CanaryToken, GenerateOptions } from './types';
+export declare function generate(options?: GenerateOptions): CanaryToken;
+//# sourceMappingURL=generate.d.ts.map

package/dist/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../src/generate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAE3D,wBAAgB,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,WAAW,CAM/D"}

package/dist/generate.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generate = generate;
+const crypto_1 = require("crypto");
+function generate(options) {
+    return {
+        type: options?.type ?? 'zero-width',
+        payload: options?.payload ?? (0, crypto_1.randomUUID)(),
+        createdAt: new Date().toISOString(),
+    };
+}
+//# sourceMappingURL=generate.js.map

package/dist/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../src/generate.ts"],"names":[],"mappings":";;AAGA,4BAMC;AATD,mCAAmC;AAGnC,SAAgB,QAAQ,CAAC,OAAyB;IAChD,OAAO;QACL,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,YAAY;QACnC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,IAAA,mBAAU,GAAE;QACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { generate } from './generate';
+export { embed } from './embed';
+export { detect } from './detect';
+export { verify, createCanary } from './canary';
+export type { CanaryType, Confidence, CanaryToken, GenerateOptions, EmbedOptions, DetectedToken, DetectionResult, DetectOptions, CanaryConfig, Canary, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE/C,YAAY,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,eAAe,EACf,YAAY,EACZ,aAAa,EACb,eAAe,EACf,aAAa,EACb,YAAY,EACZ,MAAM,GACP,MAAM,SAAS,CAAA"}

package/dist/index.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCanary = exports.verify = exports.detect = exports.embed = exports.generate = void 0;
+// llm-canary - Invisible canary tokens for prompt leakage detection
+var generate_1 = require("./generate");
+Object.defineProperty(exports, "generate", { enumerable: true, get: function () { return generate_1.generate; } });
+var embed_1 = require("./embed");
+Object.defineProperty(exports, "embed", { enumerable: true, get: function () { return embed_1.embed; } });
+var detect_1 = require("./detect");
+Object.defineProperty(exports, "detect", { enumerable: true, get: function () { return detect_1.detect; } });
+var canary_1 = require("./canary");
+Object.defineProperty(exports, "verify", { enumerable: true, get: function () { return canary_1.verify; } });
+Object.defineProperty(exports, "createCanary", { enumerable: true, get: function () { return canary_1.createCanary; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,oEAAoE;AACpE,uCAAqC;AAA5B,oGAAA,QAAQ,OAAA;AACjB,iCAA+B;AAAtB,8FAAA,KAAK,OAAA;AACd,mCAAiC;AAAxB,gGAAA,MAAM,OAAA;AACf,mCAA+C;AAAtC,gGAAA,MAAM,OAAA;AAAE,sGAAA,YAAY,OAAA"}

package/dist/types.d.ts

@@ -0,0 +1,45 @@
+export type CanaryType = 'zero-width' | 'homoglyph' | 'whitespace' | 'custom';
+export type Confidence = 'high' | 'medium' | 'low';
+export interface CanaryToken {
+    type: CanaryType;
+    payload: string;
+    createdAt: string;
+}
+export interface GenerateOptions {
+    payload?: string;
+    type?: CanaryType;
+}
+export interface EmbedOptions {
+    position?: 'start' | 'end' | 'after-first-sentence' | 'before-last-sentence' | 'random';
+}
+export interface DetectedToken {
+    type: CanaryType;
+    payload: string;
+    confidence: Confidence;
+    checksumValid: boolean;
+    position: {
+        start: number;
+        end: number;
+    };
+}
+export interface DetectionResult {
+    found: boolean;
+    tokens: DetectedToken[];
+    durationMs: number;
+}
+export interface DetectOptions {
+    types?: CanaryType[];
+    minConfidence?: Confidence;
+}
+export interface CanaryConfig {
+    type?: CanaryType;
+    payload?: string;
+    position?: EmbedOptions['position'];
+}
+export interface Canary {
+    token: CanaryToken;
+    embed(prompt: string, options?: EmbedOptions): string;
+    detect(text: string, options?: DetectOptions): DetectionResult;
+    verify(text: string): boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,CAAA;AAC7E,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;AAElD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,sBAAsB,GAAG,sBAAsB,GAAG,QAAQ,CAAA;CACxF;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,OAAO,CAAA;IACtB,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,aAAa,EAAE,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IACpB,aAAa,CAAC,EAAE,UAAU,CAAA;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,WAAW,CAAA;IAClB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,MAAM,CAAA;IACrD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,eAAe,CAAA;IAC9D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;CAC9B"}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "llm-canary",
+  "version": "0.1.0",
+  "description": "Invisible canary tokens for prompt leakage detection",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "lint": "eslint src/",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "MIT",
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^25.5.0",
+    "@typescript-eslint/eslint-plugin": "^8.57.1",
+    "@typescript-eslint/parser": "^8.57.1",
+    "eslint": "^8.57.1",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.0"
+  }
+}