onion-ai 1.0.4 → 1.0.5

package/README.md

@@ -8,6 +8,7 @@ Think of it as **[Helmet](https://helmetjs.github.io/) for LLMs**.
 
 [![npm version](https://img.shields.io/npm/v/onion-ai.svg?style=flat-square)](https://www.npmjs.com/package/onion-ai)
 [![license](https://img.shields.io/npm/l/onion-ai.svg?style=flat-square)](https://github.com/himanshu-mamgain/onion-ai/blob/main/LICENSE)
+[![Documentation](https://img.shields.io/badge/docs-onion--ai-8b5cf6?style=flat-square&logo=github)](https://himanshu-mamgain.github.io/onion-ai/)
 
 ---
 

package/dist/config.d.ts

@@ -326,6 +326,7 @@ export interface SimpleOnionConfig {
     enhance?: boolean;
     piiSafe?: boolean;
     debug?: boolean;
+    strict?: boolean;
     onWarning?: (threats: string[]) => void;
 }
 export interface SecurityResult {

package/dist/index.js

@@ -74,6 +74,10 @@ class OnionAI {
             if (onWarning) {
                 onWarning(secLikelihood.threats);
             }
+            // Strict Mode: Throw error if threats found
+            if (this.simpleConfig?.strict) {
+                throw new Error(`OnionAI Security Violation: ${secLikelihood.threats.join(", ")}`);
+            }
         }
         // 2. Enhance (if enabled)
         // We always try to enhance the output we have, even if it had warnings (as long as it wasn't empty)

package/dist/layers/vault.js

@@ -16,11 +16,15 @@ class Vault {
                 threats.push(`Forbidden SQL statement detected: ${statement}`);
             }
         }
-        // If read-only mode, only SELECT is usually allowed
+        // If read-only mode, we need to be careful not to flag natural language.
+        // We only enforce "Must be SELECT" if the input actually looks like a SQL command.
         if (this.config.mode === 'read-only') {
-            const isSelect = upperQuery.trim().startsWith('SELECT');
-            if (!isSelect && query.trim().length > 0) {
-                threats.push("Non-SELECT query detected in read-only mode");
+            const firstWord = upperQuery.split(/\s+/)[0];
+            const sqlCommands = ["INSERT", "UPDATE", "DELETE", "DROP", "ALTER", "CREATE", "GRANT", "REVOKE", "TRUNCATE", "MERGE", "REPLACE", "Upsert"];
+            // If it starts with a known SQL command that ISN'T Select, flag it.
+            // If it starts with "Hello", we ignore it (unless it hits a forbidden marker later).
+            if (sqlCommands.includes(firstWord)) {
+                threats.push(`Non-SELECT query detected in read-only mode (starts with ${firstWord})`);
             }
         }
         // Check for common SQL injection markers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "onion-ai",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "Layered security for AI prompting - input sanitization, injection protection, and output validation.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -17,6 +17,7 @@
     "type": "git",
     "url": "git+https://github.com/himanshu-mamgain/onion-ai.git"
   },
+  "homepage": "https://himanshu-mamgain.github.io/onion-ai/",
   "keywords": [
     "ai",
     "security",