promptguard-sdk 1.2.0 → 1.5.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-2026 PromptGuard
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,58 +1,100 @@
 # PromptGuard Node.js SDK
 
-Drop-in security for AI applications. No code changes required.
+Drop-in security for AI applications. Secure any GenAI app — regardless of framework or LLM provider.
 
 ## Installation
 
 ```bash
 npm install promptguard-sdk
-# or
-yarn add promptguard-sdk
-# or
-pnpm add promptguard-sdk
 ```
 
-## Quick Start
+## Option 1: Auto-Instrumentation (Recommended)
+
+One line secures **every** LLM call in your application — no matter which framework you use.
 
 ```typescript
-import { PromptGuard } from 'promptguard-sdk';
+import { init } from 'promptguard-sdk';
 
-// Initialize client
-const pg = new PromptGuard({ apiKey: 'pg_xxx' });
+// Call once at startup — before any LLM SDK usage.
+init({ apiKey: 'pg_xxx' });
 
-// Use exactly like OpenAI client
-const response = await pg.chat.completions.create({
-  model: 'gpt-4',
-  messages: [{ role: 'user', content: 'Hello!' }]
+// Everything below is now secured transparently.
+import OpenAI from 'openai';
+const client = new OpenAI();
+
+// This call is automatically scanned by PromptGuard.
+const response = await client.chat.completions.create({
+  model: 'gpt-4o',
+  messages: [{ role: 'user', content: 'Hello!' }],
 });
+```
+
+### Supported SDKs
+
+Auto-instrumentation patches the `create` / `generateContent` / `chat` / `send` methods on:
+
+| SDK | npm Package | What Gets Patched |
+|-----|------------|-------------------|
+| OpenAI | `openai` | `chat.completions.create` |
+| Anthropic | `@anthropic-ai/sdk` | `messages.create` |
+| Google Generative AI | `@google/generative-ai` | `generateContent` |
+| Cohere | `cohere-ai` | `Client.chat` / `ClientV2.chat` |
+| AWS Bedrock | `@aws-sdk/client-bedrock-runtime` | `BedrockRuntimeClient.send` (InvokeModel, Converse) |
 
-console.log(response.choices[0].message.content);
+Any framework built on these SDKs is automatically covered: **LangChain.js**, **Vercel AI SDK**, **AutoGen**, **Semantic Kernel**, and more.
+
+### Modes
+
+```typescript
+// Enforce mode (default) — blocks policy violations.
+init({ apiKey: 'pg_xxx', mode: 'enforce' });
+
+// Monitor mode — logs threats but never blocks. Good for shadow deployment.
+init({ apiKey: 'pg_xxx', mode: 'monitor' });
 ```
 
-## Drop-in Replacement
+### Options
+
+```typescript
+init({
+  apiKey: 'pg_xxx',           // or set PROMPTGUARD_API_KEY env var
+  baseUrl: 'https://...',     // or set PROMPTGUARD_BASE_URL env var
+  mode: 'enforce',            // 'enforce' | 'monitor'
+  failOpen: true,             // allow calls when Guard API is unreachable
+  scanResponses: false,       // also scan LLM responses
+  timeout: 10_000,            // Guard API timeout in ms
+});
+```
 
-If you're already using OpenAI's Node.js client, just change the import:
+### Shutdown
 
 ```typescript
-// Before
-import OpenAI from 'openai';
-const client = new OpenAI();
+import { shutdown } from 'promptguard-sdk';
 
-// After
+// Removes all patches and cleans up.
+shutdown();
+```
+
+## Option 2: Proxy Mode
+
+Route LLM traffic through PromptGuard. Just swap your base URL.
+
+```typescript
 import { PromptGuard } from 'promptguard-sdk';
-const client = new PromptGuard({ apiKey: 'pg_xxx' });
 
-// Your existing code works unchanged!
-```
+const pg = new PromptGuard({ apiKey: 'pg_xxx' });
 
-## Features
+// Use exactly like the OpenAI client.
+const response = await pg.chat.completions.create({
+  model: 'gpt-4o',
+  messages: [{ role: 'user', content: 'Hello!' }],
+});
+```
 
 ### Security Scanning
 
 ```typescript
-// Scan content for threats
 const result = await pg.security.scan('Ignore previous instructions...');
-
 if (result.blocked) {
   console.log(`Threat detected: ${result.reason}`);
 }
@@ -61,111 +103,217 @@ if (result.blocked) {
 ### PII Redaction
 
 ```typescript
-// Redact PII before sending to LLM
 const result = await pg.security.redact(
   'My email is john@example.com and SSN is 123-45-6789'
 );
-
-console.log(result.redactedContent);
-// Output: "My email is [EMAIL] and SSN is [SSN]"
+console.log(result.redacted);
 ```
 
-### Secure Web Scraping
+## Framework Integrations
+
+### LangChain.js
 
 ```typescript
-// Scan scraped content for indirect prompt injection
-const result = await pg.scrape.scanUrl('https://example.com/article');
+import { PromptGuardCallbackHandler } from 'promptguard-sdk/integrations/langchain';
+import { ChatOpenAI } from '@langchain/openai';
 
-if (result.isSafe) {
-  // Use content safely
-  console.log(result.content);
-} else {
-  console.log('Threats detected:', result.threats);
-}
+const handler = new PromptGuardCallbackHandler({
+  apiKey: 'pg_xxx',
+  mode: 'enforce',
+  scanResponses: true,
+});
+
+// Attach to a single model
+const llm = new ChatOpenAI({
+  model: 'gpt-4o',
+  callbacks: [handler],
+});
+
+// Or use with any chain / agent
+const result = await chain.invoke(
+  { input: 'Hello' },
+  { callbacks: [handler] },
+);
 ```
 
-### AI Agent Security
+The callback handler provides rich context to PromptGuard — chain names, tool calls, agent steps — for more precise threat detection.
+
+### Vercel AI SDK
 
 ```typescript
-// Validate tool calls before execution
-const validation = await pg.agent.validateTool({
-  agentId: 'agent-123',
-  toolName: 'execute_shell',
-  arguments: { command: 'ls -la' }
+import { openai } from '@ai-sdk/openai';
+import { wrapLanguageModel, generateText } from 'ai';
+import { promptGuardMiddleware } from 'promptguard-sdk/integrations/vercel-ai';
+
+const model = wrapLanguageModel({
+  model: openai('gpt-4o'),
+  middleware: promptGuardMiddleware({
+    apiKey: 'pg_xxx',
+    mode: 'enforce',
+    scanResponses: true,
+  }),
 });
 
-if (validation.action === 'block') {
-  console.log(`Blocked: ${validation.reason}`);
-}
+const { text } = await generateText({
+  model,
+  prompt: 'Hello!',
+});
 ```
 
-## Configuration
+### Standalone Guard API
+
+Use the Guard client directly for maximum control:
 
 ```typescript
-import { PromptGuard, Config } from '@promptguard/sdk';
+import { GuardClient } from 'promptguard-sdk';
+
+const guard = new GuardClient({ apiKey: 'pg_xxx' });
 
-const config: Config = {
+// Scan before sending to LLM
+const decision = await guard.scan(
+  [{ role: 'user', content: userInput }],
+  'input',
+  'gpt-4o',
+);
+
+if (decision.blocked) {
+  console.log(`Blocked: ${decision.threatType}`);
+} else if (decision.redacted && decision.redactedMessages) {
+  // Use redacted messages instead
+  messages = decision.redactedMessages;
+}
+
+// Scan LLM response
+const outputDecision = await guard.scan(
+  [{ role: 'assistant', content: llmOutput }],
+  'output',
+);
+```
+
+## Retry Logic
+
+Both `PromptGuard` and `GuardClient` support configurable retry behavior for transient failures:
+
+```typescript
+const pg = new PromptGuard({
   apiKey: 'pg_xxx',
-  baseUrl: 'https://api.promptguard.co/api/v1',
-  timeout: 30000,
-  enableCaching: true,
-  enableSecurityScan: true,
-};
+  maxRetries: 3,      // Number of retry attempts (default: 2)
+  retryDelay: 500,     // Base delay in ms between retries (default: 250)
+});
+```
+
+Retries use exponential backoff starting from `retryDelay`. Only transient errors (network timeouts, 5xx responses) are retried — client errors (4xx) fail immediately.
+
+## Embeddings
+
+Scan and secure embedding requests through the proxy:
 
-const pg = new PromptGuard(config);
+```typescript
+const response = await pg.embeddings.create({
+  model: 'text-embedding-3-small',
+  input: 'The quick brown fox jumps over the lazy dog',
+});
+console.log(response.data[0].embedding.slice(0, 5));
 ```
 
-## Environment Variables
+Batch embedding requests are also supported:
 
-```bash
-export PROMPTGUARD_API_KEY="pg_xxx"
-export PROMPTGUARD_BASE_URL="https://api.promptguard.co/api/v1"
+```typescript
+const response = await pg.embeddings.create({
+  model: 'text-embedding-3-small',
+  input: ['First document', 'Second document', 'Third document'],
+});
+for (const item of response.data) {
+  console.log(`Index ${item.index}: ${item.embedding.length} dimensions`);
+}
 ```
 
-Then just:
+## AI Agent Security
 
 ```typescript
-import { PromptGuard } from 'promptguard-sdk';
+const validation = await pg.agent.validateTool(
+  'agent-123',
+  'execute_shell',
+  { command: 'ls -la' },
+);
 
-const pg = new PromptGuard(); // Uses env vars automatically
+if (!validation.allowed) {
+  console.log(`Blocked: ${validation.reason}`);
+}
 ```
 
+## Red Team Testing
+
+```typescript
+const pg = new PromptGuard({ apiKey: 'pg_xxx' });
+
+// Run the autonomous red team agent (LLM-powered mutation)
+const report = await pg.redteam.runAutonomous({
+  budget: 200,
+  target_preset: 'support_bot:strict',
+});
+console.log(`Grade: ${report.grade}, Bypass rate: ${(report.bypass_rate * 100).toFixed(0)}%`);
+
+// Get Attack Intelligence stats
+const stats = await pg.redteam.intelligenceStats();
+console.log(`Total patterns: ${stats.total_patterns}`);
+```
+
+## Configuration
+
+| Option | Environment Variable | Default | Description |
+|--------|---------------------|---------|-------------|
+| `apiKey` | `PROMPTGUARD_API_KEY` | — | PromptGuard API key (required) |
+| `baseUrl` | `PROMPTGUARD_BASE_URL` | `https://api.promptguard.co/api/v1` | API base URL |
+| `mode` | — | `"enforce"` | `"enforce"` or `"monitor"` |
+| `failOpen` | — | `true` | Allow calls when Guard API is unreachable |
+| `scanResponses` | — | `false` | Also scan LLM responses |
+| `timeout` | — | `10000` | HTTP timeout in milliseconds |
+
 ## Error Handling
 
 ```typescript
-import { PromptGuard, PromptGuardError } from '@promptguard/sdk';
+import { PromptGuardBlockedError, GuardApiError } from 'promptguard-sdk';
 
 try {
-  const response = await pg.chat.completions.create({...});
+  await client.chat.completions.create({ ... });
 } catch (error) {
-  if (error instanceof PromptGuardError) {
-    if (error.code === 'BLOCKED') {
-      console.log(`Request blocked: ${error.message}`);
-    } else if (error.code === 'RATE_LIMITED') {
-      console.log('Rate limited, try again later');
-    }
+  if (error instanceof PromptGuardBlockedError) {
+    // Request was blocked by policy
+    console.log(error.decision.threatType);
+    console.log(error.decision.confidence);
+    console.log(error.decision.eventId);
+  } else if (error instanceof GuardApiError) {
+    // Guard API is unreachable (only when failOpen=false)
+    console.log(error.statusCode);
   }
-  throw error;
 }
 ```
 
 ## TypeScript Support
 
-Full TypeScript support with type definitions included.
+Full TypeScript support with type definitions for all exports:
 
 ```typescript
 import type {
+  GuardDecision,
+  GuardMessage,
+  GuardContext,
+  InitOptions,
   ChatCompletionRequest,
   ChatCompletionResponse,
-  SecurityScanResult
-} from '@promptguard/sdk';
+  SecurityScanResult,
+  AutonomousRedTeamRequest,
+  AutonomousRedTeamReport,
+  IntelligenceStats,
+} from 'promptguard-sdk';
 ```
 
 ## Links
 
 - [Documentation](https://docs.promptguard.co)
-- [GitHub](https://github.com/acebot712/promptguard)
-- [Issues](https://github.com/acebot712/promptguard/issues)
+- [SDK Reference](https://docs.promptguard.co/sdks/node)
+- [Support](mailto:support@promptguard.co)
 
 ## License
 

package/dist/auto.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Auto-instrumentation for PromptGuard (Node.js).
+ *
+ * Call {@link init} once at application startup to automatically
+ * secure **all** LLM calls made through popular SDKs — regardless of
+ * which framework (LangChain.js, Vercel AI SDK, etc.) sits on top.
+ *
+ * @example
+ * ```ts
+ * import { init } from 'promptguard-sdk/auto';
+ *
+ * init({ apiKey: 'pg_xxx' });
+ *
+ * // Everything below is now secured transparently.
+ * import OpenAI from 'openai';
+ * const client = new OpenAI();
+ * await client.chat.completions.create({ ... }); // ← scanned by PromptGuard
+ * ```
+ */
+import { GuardClient } from "./guard";
+export interface InitOptions {
+    apiKey?: string;
+    baseUrl?: string;
+    /** `"enforce"` blocks violations, `"monitor"` logs only (default: `"enforce"`). */
+    mode?: "enforce" | "monitor";
+    /** Allow LLM calls when Guard API is unreachable (default: `true`). */
+    failOpen?: boolean;
+    /** Also scan LLM responses (default: `false`). */
+    scanResponses?: boolean;
+    /** HTTP timeout in ms for Guard API calls (default: `10000`). */
+    timeout?: number;
+}
+export declare function init(options?: InitOptions): void;
+export declare function shutdown(): void;
+export declare function getGuardClient(): GuardClient | null;
+export declare function getMode(): "enforce" | "monitor";
+export declare function isFailOpen(): boolean;
+export declare function shouldScanResponses(): boolean;
+export declare function isInitialized(): boolean;
+//# sourceMappingURL=auto.d.ts.map

package/dist/auto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto.d.ts","sourceRoot":"","sources":["../src/auto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAkBrC,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,mFAAmF;IACnF,IAAI,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,kDAAkD;IAClD,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,wBAAgB,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,IAAI,CAkCpD;AAED,wBAAgB,QAAQ,IAAI,IAAI,CAY/B;AAMD,wBAAgB,cAAc,IAAI,WAAW,GAAG,IAAI,CAEnD;AAED,wBAAgB,OAAO,IAAI,SAAS,GAAG,SAAS,CAE/C;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}

package/dist/auto.js

@@ -0,0 +1,118 @@
+"use strict";
+/**
+ * Auto-instrumentation for PromptGuard (Node.js).
+ *
+ * Call {@link init} once at application startup to automatically
+ * secure **all** LLM calls made through popular SDKs — regardless of
+ * which framework (LangChain.js, Vercel AI SDK, etc.) sits on top.
+ *
+ * @example
+ * ```ts
+ * import { init } from 'promptguard-sdk/auto';
+ *
+ * init({ apiKey: 'pg_xxx' });
+ *
+ * // Everything below is now secured transparently.
+ * import OpenAI from 'openai';
+ * const client = new OpenAI();
+ * await client.chat.completions.create({ ... }); // ← scanned by PromptGuard
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.init = init;
+exports.shutdown = shutdown;
+exports.getGuardClient = getGuardClient;
+exports.getMode = getMode;
+exports.isFailOpen = isFailOpen;
+exports.shouldScanResponses = shouldScanResponses;
+exports.isInitialized = isInitialized;
+const guard_1 = require("./guard");
+// ---------------------------------------------------------------------------
+// Global state
+// ---------------------------------------------------------------------------
+let guardClient = null;
+let mode = "enforce";
+let failOpen = true;
+let scanResponses = false;
+let initialized = false;
+const appliedPatches = [];
+function init(options = {}) {
+    const resolvedKey = options.apiKey ?? process.env.PROMPTGUARD_API_KEY ?? "";
+    if (!resolvedKey) {
+        throw new Error("PromptGuard API key required. Pass apiKey or set the " +
+            "PROMPTGUARD_API_KEY environment variable.");
+    }
+    const resolvedUrl = options.baseUrl ?? process.env.PROMPTGUARD_BASE_URL ?? "https://api.promptguard.co/api/v1";
+    const resolvedMode = options.mode ?? "enforce";
+    if (resolvedMode !== "enforce" && resolvedMode !== "monitor") {
+        throw new Error("mode must be 'enforce' or 'monitor'");
+    }
+    guardClient = new guard_1.GuardClient({
+        apiKey: resolvedKey,
+        baseUrl: resolvedUrl,
+        timeout: options.timeout ?? 10000,
+    });
+    mode = resolvedMode;
+    failOpen = options.failOpen ?? true;
+    scanResponses = options.scanResponses ?? false;
+    initialized = true;
+    applyPatches();
+    // eslint-disable-next-line no-console
+    console.log(`[promptguard] auto-instrumentation initialised (mode=${mode}, fail_open=${failOpen})`);
+}
+function shutdown() {
+    for (const patch of appliedPatches) {
+        try {
+            patch.revert();
+        }
+        catch {
+            // best-effort
+        }
+    }
+    appliedPatches.length = 0;
+    guardClient = null;
+    initialized = false;
+}
+// ---------------------------------------------------------------------------
+// Accessors (used by patches)
+// ---------------------------------------------------------------------------
+function getGuardClient() {
+    return guardClient;
+}
+function getMode() {
+    return mode;
+}
+function isFailOpen() {
+    return failOpen;
+}
+function shouldScanResponses() {
+    return scanResponses;
+}
+function isInitialized() {
+    return initialized;
+}
+// ---------------------------------------------------------------------------
+// Patch orchestration
+// ---------------------------------------------------------------------------
+function applyPatches() {
+    const patchModules = [
+        { name: "openai", path: "./patches/openai" },
+        { name: "anthropic", path: "./patches/anthropic" },
+        { name: "google", path: "./patches/google" },
+        { name: "cohere", path: "./patches/cohere" },
+        { name: "bedrock", path: "./patches/bedrock" },
+    ];
+    for (const mod of patchModules) {
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-var-requires
+            const patchModule = require(mod.path);
+            if (patchModule.apply()) {
+                appliedPatches.push({ name: mod.name, revert: patchModule.revert });
+            }
+        }
+        catch {
+            // SDK not installed or incompatible — skip silently
+        }
+    }
+}
+//# sourceMappingURL=auto.js.map

package/dist/auto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto.js","sourceRoot":"","sources":["../src/auto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;AAiCH,oBAkCC;AAED,4BAYC;AAMD,wCAEC;AAED,0BAEC;AAED,gCAEC;AAED,kDAEC;AAED,sCAEC;AAvGD,mCAAqC;AAErC,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,IAAI,WAAW,GAAuB,IAAI,CAAA;AAC1C,IAAI,IAAI,GAA0B,SAAS,CAAA;AAC3C,IAAI,QAAQ,GAAG,IAAI,CAAA;AACnB,IAAI,aAAa,GAAG,KAAK,CAAA;AACzB,IAAI,WAAW,GAAG,KAAK,CAAA;AAEvB,MAAM,cAAc,GAAgD,EAAE,CAAA;AAmBtE,SAAgB,IAAI,CAAC,UAAuB,EAAE;IAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAA;IAC3E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,uDAAuD;YACrD,2CAA2C,CAC9C,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GACf,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,mCAAmC,CAAA;IAE5F,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAA;IAC9C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IAED,WAAW,GAAG,IAAI,mBAAW,CAAC;QAC5B,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAM;KACnC,CAAC,CAAA;IAEF,IAAI,GAAG,YAAY,CAAA;IACnB,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAA;IACnC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAA;IAC9C,WAAW,GAAG,IAAI,CAAA;IAElB,YAAY,EAAE,CAAA;IAEd,sCAAsC;IACtC,OAAO,CAAC,GAAG,CACT,wDAAwD,IAAI,eAAe,QAAQ,GAAG,CACvF,CAAA;AACH,CAAC;AAED,SAAgB,QAAQ;IACtB,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,EAAE,CAAA;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IACD,cAAc,CAAC,MAAM,GAAG,CAAC,CAAA;IAEzB,WAAW,GAAG,IAAI,CAAA;IAClB,WAAW,GAAG,KAAK,CAAA;AACrB,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E,SAAgB,cAAc;IAC5B,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,SAAgB,OAAO;IACrB,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAgB,UAAU;IACxB,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAgB,mBAAmB;IACjC,OAAO,aAAa,CAAA;AACtB,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,SAAS,YAAY;IACnB,MAAM,YAAY,GAAG;QACnB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE;QAC5C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,qBAAqB,EAAE;QAClD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE;QAC5C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE;QAC5C,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE;KAC/C,CAAA;IAED,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,8DAA8D;YAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAGnC,CAAA;YACD,IAAI,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;gBACxB,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAA;YACrE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/guard.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Guard client — calls the PromptGuard Guard API for content scanning.
+ *
+ * Used internally by auto-instrumentation patches and framework
+ * integrations.  Sends messages to POST /api/v1/guard and returns
+ * the decision (allow / block / redact).
+ */
+export interface GuardMessage {
+    role: string;
+    content: string;
+}
+export interface GuardContext {
+    framework?: string;
+    chain_name?: string;
+    agent_id?: string;
+    session_id?: string;
+    tool_calls?: Array<Record<string, unknown>>;
+    metadata?: Record<string, unknown>;
+}
+export interface GuardRequestBody {
+    messages: GuardMessage[];
+    direction: "input" | "output";
+    model?: string;
+    context?: GuardContext;
+}
+export interface ThreatDetail {
+    type: string;
+    confidence: number;
+    details: string;
+}
+export interface GuardResponseBody {
+    decision: "allow" | "block" | "redact";
+    event_id: string;
+    confidence: number;
+    threat_type?: string;
+    redacted_messages?: GuardMessage[];
+    threats: ThreatDetail[];
+    latency_ms: number;
+}
+export declare class GuardDecision {
+    readonly decision: string;
+    readonly eventId: string;
+    readonly confidence: number;
+    readonly threatType?: string;
+    readonly redactedMessages?: GuardMessage[];
+    readonly threats: ThreatDetail[];
+    readonly latencyMs: number;
+    constructor(data: Partial<GuardResponseBody>);
+    get blocked(): boolean;
+    get redacted(): boolean;
+    get allowed(): boolean;
+}
+export declare class GuardApiError extends Error {
+    readonly statusCode?: number;
+    constructor(message: string, statusCode?: number);
+}
+export declare class PromptGuardBlockedError extends Error {
+    readonly decision: GuardDecision;
+    constructor(decision: GuardDecision);
+}
+export interface GuardClientConfig {
+    apiKey: string;
+    baseUrl?: string;
+    timeout?: number;
+}
+export declare class GuardClient {
+    private readonly apiKey;
+    private readonly guardUrl;
+    private readonly timeout;
+    constructor(config: GuardClientConfig);
+    private headers;
+    /**
+     * Scan messages via the Guard API.
+     *
+     * Throws {@link GuardApiError} on network/API errors so the caller
+     * can decide whether to fail open or closed.
+     */
+    scan(messages: GuardMessage[], direction?: "input" | "output", model?: string, context?: GuardContext): Promise<GuardDecision>;
+}
+//# sourceMappingURL=guard.d.ts.map

package/dist/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,YAAY,EAAE,CAAA;IACxB,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,YAAY,CAAA;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAA;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,iBAAiB,CAAC,EAAE,YAAY,EAAE,CAAA;IAClC,OAAO,EAAE,YAAY,EAAE,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;CACnB;AAMD,qBAAa,aAAa;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,YAAY,EAAE,CAAA;IAC1C,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;gBAEd,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAAC;IAU5C,IAAI,OAAO,IAAI,OAAO,CAErB;IACD,IAAI,QAAQ,IAAI,OAAO,CAEtB;IACD,IAAI,OAAO,IAAI,OAAO,CAErB;CACF;AAMD,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;gBAEhB,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAKjD;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;gBAEpB,QAAQ,EAAE,aAAa;CASpC;AAMD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;gBAEpB,MAAM,EAAE,iBAAiB;IAOrC,OAAO,CAAC,OAAO;IASf;;;;;OAKG;IACG,IAAI,CACR,QAAQ,EAAE,YAAY,EAAE,EACxB,SAAS,GAAE,OAAO,GAAG,QAAkB,EACvC,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,aAAa,CAAC;CA8B1B"}