shield360 1.0.0

package/dist/guard/base.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Guard = exports.GuardConfigError = exports.GuardTimeoutError = exports.GuardDeniedError = exports.GuardError = exports.PipelineResult = exports.ACTION_SEVERITY = exports.GuardAction = exports.GuardPhase = void 0;
+exports.makeGuardResult = makeGuardResult;
+/**
+ * Core types, base class, and errors for the Shield360 guard system.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/_base.py
+ */
+var GuardPhase;
+(function (GuardPhase) {
+    GuardPhase["PREFLIGHT"] = "preflight";
+    GuardPhase["POSTFLIGHT"] = "postflight";
+})(GuardPhase || (exports.GuardPhase = GuardPhase = {}));
+var GuardAction;
+(function (GuardAction) {
+    GuardAction["ALLOW"] = "allow";
+    GuardAction["DENY"] = "deny";
+    GuardAction["REDACT"] = "redact";
+    GuardAction["WARN"] = "warn";
+})(GuardAction || (exports.GuardAction = GuardAction = {}));
+exports.ACTION_SEVERITY = {
+    [GuardAction.ALLOW]: 0,
+    [GuardAction.WARN]: 1,
+    [GuardAction.REDACT]: 2,
+    [GuardAction.DENY]: 3,
+};
+function makeGuardResult(overrides = {}) {
+    return {
+        action: GuardAction.ALLOW,
+        score: 0,
+        guardName: '',
+        classification: '',
+        explanation: '',
+        transformedText: null,
+        latencyMs: 0,
+        ...overrides,
+    };
+}
+class PipelineResult {
+    constructor(action = GuardAction.ALLOW, results = [], transformedText = null) {
+        this.action = action;
+        this.results = results;
+        this.transformedText = transformedText;
+    }
+    get explanation() {
+        return this.results
+            .map((r) => r.explanation)
+            .filter(Boolean)
+            .join('; ');
+    }
+}
+exports.PipelineResult = PipelineResult;
+// ---------------------------------------------------------------------------
+// Errors
+// ---------------------------------------------------------------------------
+class GuardError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'GuardError';
+    }
+}
+exports.GuardError = GuardError;
+class GuardDeniedError extends GuardError {
+    constructor(result) {
+        super(result.explanation);
+        this.name = 'GuardDeniedError';
+        this.result = result;
+    }
+}
+exports.GuardDeniedError = GuardDeniedError;
+/**
+ * Reserved for future use -- a per-guard `timeoutMs` option may be
+ * added to Pipeline in a later release.
+ */
+class GuardTimeoutError extends GuardError {
+    constructor(message) {
+        super(message);
+        this.name = 'GuardTimeoutError';
+    }
+}
+exports.GuardTimeoutError = GuardTimeoutError;
+class GuardConfigError extends GuardError {
+    constructor(message) {
+        super(message);
+        this.name = 'GuardConfigError';
+    }
+}
+exports.GuardConfigError = GuardConfigError;
+class Guard {
+    /**
+     * @param opts.action - Action to take on violation (`allow`, `deny`, `redact`, `warn`). Default: `deny`.
+     * @param opts.maxScanLength - Max characters to scan. Text beyond this limit is not evaluated. Default: 102400.
+     */
+    constructor(opts = {}) {
+        const actionStr = opts.action ?? 'deny';
+        const validActions = Object.values(GuardAction);
+        if (!validActions.includes(actionStr)) {
+            throw new GuardConfigError(`Invalid action '${actionStr}'. Must be one of: ${validActions.join(', ')}`);
+        }
+        this._action = actionStr;
+        const maxScan = opts.maxScanLength ?? 102400;
+        if (typeof maxScan !== 'number' || maxScan < 0) {
+            throw new GuardConfigError(`Invalid maxScanLength '${maxScan}'. Must be a non-negative number.`);
+        }
+        this._maxScanLength = maxScan;
+    }
+    get action() {
+        return this._action;
+    }
+    supportsPhase(phase) {
+        return this.phases.includes(phase);
+    }
+    /** Execute the guard with timing, text-length capping, and phase filtering. */
+    run(text, phase) {
+        if (!this.supportsPhase(phase)) {
+            return makeGuardResult({ guardName: this.name });
+        }
+        const capped = this._maxScanLength ? text.slice(0, this._maxScanLength) : text;
+        const start = performance.now();
+        const result = this.evaluate(capped);
+        const elapsedMs = performance.now() - start;
+        return makeGuardResult({
+            action: result.action,
+            score: result.score,
+            guardName: this.name,
+            classification: result.classification,
+            explanation: result.explanation,
+            transformedText: result.transformedText,
+            latencyMs: Math.round(elapsedMs * 1000) / 1000,
+            findings: result.findings,
+        });
+    }
+}
+exports.Guard = Guard;
+//# sourceMappingURL=base.js.map

package/dist/guard/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/guard/base.ts"],"names":[],"mappings":";;;AAuCA,0CAWC;AAhDD;;;;GAIG;AAEH,IAAY,UAGX;AAHD,WAAY,UAAU;IACpB,qCAAuB,CAAA;IACvB,uCAAyB,CAAA;AAC3B,CAAC,EAHW,UAAU,0BAAV,UAAU,QAGrB;AAED,IAAY,WAKX;AALD,WAAY,WAAW;IACrB,8BAAe,CAAA;IACf,4BAAa,CAAA;IACb,gCAAiB,CAAA;IACjB,4BAAa,CAAA;AACf,CAAC,EALW,WAAW,2BAAX,WAAW,QAKtB;AAEY,QAAA,eAAe,GAAgC;IAC1D,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;IACtB,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;IACrB,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;IACvB,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;CACtB,CAAC;AAcF,SAAgB,eAAe,CAAC,YAAkC,EAAE;IAClE,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,KAAK;QACzB,KAAK,EAAE,CAAC;QACR,SAAS,EAAE,EAAE;QACb,cAAc,EAAE,EAAE;QAClB,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,IAAI;QACrB,SAAS,EAAE,CAAC;QACZ,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAa,cAAc;IAKzB,YACE,SAAsB,WAAW,CAAC,KAAK,EACvC,UAAyB,EAAE,EAC3B,kBAAiC,IAAI;QAErC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO;aAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;aACzB,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;CACF;AArBD,wCAqBC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAa,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAgB;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AALD,gCAKC;AAED,MAAa,gBAAiB,SAAQ,UAAU;IAG9C,YAAY,MAAsB;QAChC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AARD,4CAQC;AAED;;;GAGG;AACH,MAAa,iBAAkB,SAAQ,UAAU;IAC/C,YAAY,OAAgB;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAED,MAAa,gBAAiB,SAAQ,UAAU;IAC9C,YAAY,OAAgB;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AALD,4CAKC;AAWD,MAAsB,KAAK;IAOzB;;;OAGG;IACH,YAAY,OAAqB,EAAE;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;QACxC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAa,CAAC;QAC5D,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,SAAS,sBAAsB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,SAAwB,CAAC;QAExC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,IAAI,MAAO,CAAC;QAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,OAAO,mCAAmC,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,aAAa,CAAC,KAAiB;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,+EAA+E;IAC/E,GAAG,CAAC,IAAY,EAAE,KAAiB;QACjC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE/E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAE5C,OAAO,eAAe,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,IAAI,CAAC,IAAI;YACpB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,IAAI;YAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;CASF;AArED,sBAqEC"}

package/dist/guard/custom.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Custom guard -- user-defined regex or callable.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/custom.py
+ */
+import { Guard, GuardPhase, GuardResult, GuardOptions } from './base';
+export interface CustomOptions extends GuardOptions {
+    pattern?: string;
+    callable?: (text: string) => GuardResult;
+    phases?: string[];
+}
+export declare class Custom extends Guard {
+    readonly name = "custom";
+    readonly phases: GuardPhase[];
+    private readonly _pattern;
+    private readonly _callable?;
+    constructor(opts?: CustomOptions);
+    evaluate(text: string): GuardResult;
+}

package/dist/guard/custom.js

@@ -0,0 +1,46 @@
+"use strict";
+/**
+ * Custom guard -- user-defined regex or callable.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/custom.py
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Custom = void 0;
+const base_1 = require("./base");
+class Custom extends base_1.Guard {
+    constructor(opts = {}) {
+        super({ action: opts.action ?? 'deny', maxScanLength: opts.maxScanLength });
+        this.name = 'custom';
+        if (!opts.pattern && !opts.callable) {
+            throw new base_1.GuardConfigError("Custom guard needs at least 'pattern' or 'callable'");
+        }
+        this._pattern = opts.pattern ? new RegExp(opts.pattern) : null;
+        this._callable = opts.callable;
+        if (opts.phases) {
+            this.phases = opts.phases.map((p) => p);
+        }
+        else {
+            this.phases = [base_1.GuardPhase.PREFLIGHT, base_1.GuardPhase.POSTFLIGHT];
+        }
+    }
+    evaluate(text) {
+        if (this._pattern) {
+            const match = this._pattern.exec(text);
+            if (match) {
+                return (0, base_1.makeGuardResult)({
+                    action: this._action,
+                    score: 1.0,
+                    guardName: this.name,
+                    classification: 'pattern_match',
+                    explanation: `Custom pattern matched: '${match[0]}'`,
+                });
+            }
+        }
+        if (this._callable) {
+            return this._callable(text);
+        }
+        return (0, base_1.makeGuardResult)({ guardName: this.name });
+    }
+}
+exports.Custom = Custom;
+//# sourceMappingURL=custom.js.map

package/dist/guard/custom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.js","sourceRoot":"","sources":["../../src/guard/custom.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,iCAOgB;AAQhB,MAAa,MAAO,SAAQ,YAAK;IAO/B,YAAY,OAAsB,EAAE;QAClC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAPrE,SAAI,GAAG,QAAQ,CAAC;QASvB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,uBAAgB,CAAC,qDAAqD,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE/B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAe,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,CAAC,iBAAU,CAAC,SAAS,EAAE,iBAAU,CAAC,UAAU,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,IAAA,sBAAe,EAAC;oBACrB,MAAM,EAAE,IAAI,CAAC,OAAO;oBACpB,KAAK,EAAE,GAAG;oBACV,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,cAAc,EAAE,eAAe;oBAC/B,WAAW,EAAE,4BAA4B,KAAK,CAAC,CAAC,CAAC,GAAG;iBACrD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,IAAA,sBAAe,EAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;CACF;AA5CD,wBA4CC"}

package/dist/guard/findings.d.ts

@@ -0,0 +1,31 @@
+/**
+ * What a reviewer may see of a sensitive value a guard found: its kind, a
+ * masked form (the last four digits of an SSN, the prefix of an API key) and a
+ * fingerprint that is the same every time the same value turns up, in this app
+ * or anywhere else in the organisation. The value itself is never kept or
+ * reported.
+ *
+ * The fingerprint is an HMAC keyed with the organisation's secret, which
+ * Shield360 hands to apps with an API key. Unkeyed it could be reversed (there
+ * are only a billion SSNs), so without a key none is made.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/_findings.py and
+ * cli/internal/coding/guard/findings.go
+ */
+export interface Finding {
+    kind: string;
+    masked: string;
+    fingerprint?: string;
+}
+export declare const MAX_FINDINGS = 10;
+/** Sets (or clears) the organisation's fingerprint key. */
+export declare function setFingerprintKey(value: string | null): void;
+export declare const canonicalKind: (label: string) => string;
+export declare function fingerprint(label: string, value: string): string;
+/** Enough of a value to recognise it, never enough to use it. */
+export declare function mask(label: string, value: string): string;
+export declare function makeFinding(label: string, value: string): Finding;
+/** Fingerprints a finding made before the key arrived, now that it has. */
+export declare function completeFinding(f: Finding): Finding;
+/** Findings for `[label, value]` pairs, de-duplicated and capped. */
+export declare function collectFindings(matches: Array<[string, string]>): Finding[];

package/dist/guard/findings.js

@@ -0,0 +1,156 @@
+"use strict";
+/**
+ * What a reviewer may see of a sensitive value a guard found: its kind, a
+ * masked form (the last four digits of an SSN, the prefix of an API key) and a
+ * fingerprint that is the same every time the same value turns up, in this app
+ * or anywhere else in the organisation. The value itself is never kept or
+ * reported.
+ *
+ * The fingerprint is an HMAC keyed with the organisation's secret, which
+ * Shield360 hands to apps with an API key. Unkeyed it could be reversed (there
+ * are only a billion SSNs), so without a key none is made.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/_findings.py and
+ * cli/internal/coding/guard/findings.go
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalKind = exports.MAX_FINDINGS = void 0;
+exports.setFingerprintKey = setFingerprintKey;
+exports.fingerprint = fingerprint;
+exports.mask = mask;
+exports.makeFinding = makeFinding;
+exports.completeFinding = completeFinding;
+exports.collectFindings = collectFindings;
+const crypto_1 = require("crypto");
+exports.MAX_FINDINGS = 10;
+let key = null;
+// Values of findings made before the key arrived, kept in this process only —
+// never serialised, gone with the finding — so they can be fingerprinted when
+// reported. The app already holds the text they came from.
+const awaitingKey = new WeakMap();
+/** Sets (or clears) the organisation's fingerprint key. */
+function setFingerprintKey(value) {
+    key = value || null;
+}
+// The CLI's kind for each SDK label, so the same value fingerprints the same
+// whether a coding agent or an app stopped it.
+const CANONICAL = {
+    'credit-card': 'payment_card',
+    'env-secret': 'password',
+    'private-key': 'private_key',
+    'connection-string': 'connection_string',
+    'aws-access-key': 'cloud_credential',
+    'openai-api-key': 'api_key',
+    'anthropic-api-key': 'api_key',
+    'github-token': 'api_key',
+    'github-fine-grained': 'api_key',
+    'stripe-key': 'api_key',
+    'slack-token': 'api_key',
+    'gcp-api-key': 'api_key',
+};
+const canonicalKind = (label) => CANONICAL[label] ?? label;
+exports.canonicalKind = canonicalKind;
+const digits = (v) => v.replace(/\D/g, '');
+function assignmentValue(v) {
+    const i = v.search(/[:=]/);
+    return i < 0 ? v : v.slice(i + 1).replace(/^[\s"']+|[\s"']+$/g, '');
+}
+function normalise(kind, value) {
+    if (kind === 'ssn' || kind === 'payment_card' || kind === 'phone-us')
+        return digits(value);
+    if (kind === 'password')
+        return assignmentValue(value);
+    return value.trim();
+}
+function fingerprint(label, value) {
+    if (!key)
+        return '';
+    const kind = (0, exports.canonicalKind)(label);
+    return (0, crypto_1.createHmac)('sha256', key).update(`${kind}:${normalise(kind, value)}`).digest('hex').slice(0, 16);
+}
+/** Enough of a value to recognise it, never enough to use it. */
+function mask(label, value) {
+    const v = value.trim();
+    const kind = (0, exports.canonicalKind)(label);
+    switch (kind) {
+        case 'ssn':
+            return '***-**-' + digits(v).slice(-4);
+        case 'payment_card':
+            return '•••• ' + digits(v).slice(-4);
+        case 'phone-us':
+            return '***-***-' + digits(v).slice(-4);
+        case 'private_key':
+            return v;
+        case 'email': {
+            const at = v.indexOf('@');
+            return at > 0 ? v[0] + '***' + v.slice(at) : '***';
+        }
+        case 'ipv4': {
+            const parts = v.split('.');
+            return parts.length === 4 ? `${parts[0]}.${parts[1]}.x.x` : 'x.x.x.x';
+        }
+        case 'connection_string': {
+            const m = /^([a-z+]+:\/\/[^:/@\s]+:)[^@\s]*(@.*)?$/i.exec(v);
+            if (m)
+                return m[1] + '****@' + (m[2] || '@').slice(1).split('/')[0];
+            return v.split('://')[0] + '://****';
+        }
+        case 'password': {
+            const i = v.search(/[:=]/);
+            const name = i > 0 ? v.slice(0, i).replace(/^[\s"']+|[\s"']+$/g, '') : '';
+            return name ? `${name} = ••••••••` : '••••••••';
+        }
+        case 'bearer-token':
+        case 'basic-auth':
+            return `${v.split(/\s+/)[0] || ''} …${v.slice(-4)}`;
+        default: {
+            // Keys and tokens: the public prefix names the service, the last four
+            // tell two keys apart.
+            let prefix = v.slice(0, 12);
+            const cut = Math.max(prefix.lastIndexOf('-'), prefix.lastIndexOf('_'));
+            prefix = cut >= 2 ? prefix.slice(0, cut + 1) : prefix.slice(0, 4);
+            if (v.length <= prefix.length + 4)
+                return prefix + '…';
+            return prefix + '…' + v.slice(-4);
+        }
+    }
+}
+function makeFinding(label, value) {
+    const f = { kind: label, masked: mask(label, value) };
+    const fp = fingerprint(label, value);
+    if (fp)
+        f.fingerprint = fp;
+    else
+        awaitingKey.set(f, { label, value });
+    return f;
+}
+/** Fingerprints a finding made before the key arrived, now that it has. */
+function completeFinding(f) {
+    if (f.fingerprint)
+        return f;
+    const pending = awaitingKey.get(f);
+    if (!pending)
+        return f;
+    const fp = fingerprint(pending.label, pending.value);
+    if (!fp)
+        return f;
+    awaitingKey.delete(f);
+    return { ...f, fingerprint: fp };
+}
+/** Findings for `[label, value]` pairs, de-duplicated and capped. */
+function collectFindings(matches) {
+    const out = [];
+    const seen = new Set();
+    for (const [label, value] of matches) {
+        const f = makeFinding(label, value);
+        const id = `${f.kind}|${f.fingerprint ?? ''}|${f.masked}`;
+        if (seen.has(id))
+            continue;
+        seen.add(id);
+        out.push(f);
+        if (out.length >= exports.MAX_FINDINGS)
+            break;
+    }
+    return out;
+}
+//# sourceMappingURL=findings.js.map

package/dist/guard/findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.js","sourceRoot":"","sources":["../../src/guard/findings.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAoBH,8CAEC;AAkCD,kCAIC;AAGD,oBA2CC;AAED,kCAMC;AAGD,0CAQC;AAGD,0CAYC;AA1ID,mCAAoC;AAQvB,QAAA,YAAY,GAAG,EAAE,CAAC;AAE/B,IAAI,GAAG,GAAkB,IAAI,CAAC;AAE9B,8EAA8E;AAC9E,8EAA8E;AAC9E,2DAA2D;AAC3D,MAAM,WAAW,GAAG,IAAI,OAAO,EAA6C,CAAC;AAE7E,2DAA2D;AAC3D,SAAgB,iBAAiB,CAAC,KAAoB;IACpD,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC;AACtB,CAAC;AAED,6EAA6E;AAC7E,+CAA+C;AAC/C,MAAM,SAAS,GAA2B;IACxC,aAAa,EAAE,cAAc;IAC7B,YAAY,EAAE,UAAU;IACxB,aAAa,EAAE,aAAa;IAC5B,mBAAmB,EAAE,mBAAmB;IACxC,gBAAgB,EAAE,kBAAkB;IACpC,gBAAgB,EAAE,SAAS;IAC3B,mBAAmB,EAAE,SAAS;IAC9B,cAAc,EAAE,SAAS;IACzB,qBAAqB,EAAE,SAAS;IAChC,YAAY,EAAE,SAAS;IACvB,aAAa,EAAE,SAAS;IACxB,aAAa,EAAE,SAAS;CACzB,CAAC;AAEK,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;AAA7D,QAAA,aAAa,iBAAgD;AAE1E,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAEnD,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC5C,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3F,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAgB,WAAW,CAAC,KAAa,EAAE,KAAa;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,IAAA,qBAAa,EAAC,KAAK,CAAC,CAAC;IAClC,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1G,CAAC;AAED,iEAAiE;AACjE,SAAgB,IAAI,CAAC,KAAa,EAAE,KAAa;IAC/C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,IAAA,qBAAa,EAAC,KAAK,CAAC,CAAC;IAClC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,OAAO,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,KAAK,cAAc;YACjB,OAAO,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,UAAU;YACb,OAAO,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,KAAK,aAAa;YAChB,OAAO,CAAC,CAAC;QACX,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrD,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;QACvC,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;QAClD,CAAC;QACD,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY;YACf,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,CAAC,CAAC;YACR,sEAAsE;YACtE,uBAAuB;YACvB,IAAI,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YACvE,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,MAAM,GAAG,GAAG,CAAC;YACvD,OAAO,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,WAAW,CAAC,KAAa,EAAE,KAAa;IACtD,MAAM,CAAC,GAAY,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;IAC/D,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,EAAE;QAAE,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;;QACtB,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,2EAA2E;AAC3E,SAAgB,eAAe,CAAC,CAAU;IACxC,IAAI,CAAC,CAAC,WAAW;QAAE,OAAO,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC;IACvB,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IAClB,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtB,OAAO,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,qEAAqE;AACrE,SAAgB,eAAe,CAAC,OAAgC;IAC9D,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC3B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,GAAG,CAAC,MAAM,IAAI,oBAAY;YAAE,MAAM;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/guard/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Shield360 Guard System -- public API.
+ *
+ * Re-exports all guard classes, pipeline, types, and errors.
+ */
+export { Guard, GuardAction, GuardPhase, GuardConfigError, GuardDeniedError, GuardError, GuardTimeoutError, PipelineResult, ACTION_SEVERITY, makeGuardResult, } from './base';
+export type { GuardResult, GuardOptions } from './base';
+export { Pipeline } from './pipeline';
+export type { PipelineOptions } from './pipeline';
+export { PII } from './pii';
+export type { PIIOptions } from './pii';
+export { PromptInjection } from './prompt-injection';
+export type { PromptInjectionOptions } from './prompt-injection';
+export { Moderation } from './moderation';
+export type { ModerationOptions } from './moderation';
+export { SensitiveTopic } from './sensitive-topic';
+export type { SensitiveTopicOptions } from './sensitive-topic';
+export { TopicRestriction } from './topic-restriction';
+export type { TopicRestrictionOptions } from './topic-restriction';
+export { Schema } from './schema';
+export type { SchemaOptions } from './schema';
+export { Custom } from './custom';
+export type { CustomOptions } from './custom';
+export { setupAutoGuards } from './integration';

package/dist/guard/index.js

@@ -0,0 +1,42 @@
+"use strict";
+/**
+ * Shield360 Guard System -- public API.
+ *
+ * Re-exports all guard classes, pipeline, types, and errors.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setupAutoGuards = exports.Custom = exports.Schema = exports.TopicRestriction = exports.SensitiveTopic = exports.Moderation = exports.PromptInjection = exports.PII = exports.Pipeline = exports.makeGuardResult = exports.ACTION_SEVERITY = exports.PipelineResult = exports.GuardTimeoutError = exports.GuardError = exports.GuardDeniedError = exports.GuardConfigError = exports.GuardPhase = exports.GuardAction = exports.Guard = void 0;
+// Foundation types and base class
+var base_1 = require("./base");
+Object.defineProperty(exports, "Guard", { enumerable: true, get: function () { return base_1.Guard; } });
+Object.defineProperty(exports, "GuardAction", { enumerable: true, get: function () { return base_1.GuardAction; } });
+Object.defineProperty(exports, "GuardPhase", { enumerable: true, get: function () { return base_1.GuardPhase; } });
+Object.defineProperty(exports, "GuardConfigError", { enumerable: true, get: function () { return base_1.GuardConfigError; } });
+Object.defineProperty(exports, "GuardDeniedError", { enumerable: true, get: function () { return base_1.GuardDeniedError; } });
+Object.defineProperty(exports, "GuardError", { enumerable: true, get: function () { return base_1.GuardError; } });
+Object.defineProperty(exports, "GuardTimeoutError", { enumerable: true, get: function () { return base_1.GuardTimeoutError; } });
+Object.defineProperty(exports, "PipelineResult", { enumerable: true, get: function () { return base_1.PipelineResult; } });
+Object.defineProperty(exports, "ACTION_SEVERITY", { enumerable: true, get: function () { return base_1.ACTION_SEVERITY; } });
+Object.defineProperty(exports, "makeGuardResult", { enumerable: true, get: function () { return base_1.makeGuardResult; } });
+// Pipeline
+var pipeline_1 = require("./pipeline");
+Object.defineProperty(exports, "Pipeline", { enumerable: true, get: function () { return pipeline_1.Pipeline; } });
+// Guards
+var pii_1 = require("./pii");
+Object.defineProperty(exports, "PII", { enumerable: true, get: function () { return pii_1.PII; } });
+var prompt_injection_1 = require("./prompt-injection");
+Object.defineProperty(exports, "PromptInjection", { enumerable: true, get: function () { return prompt_injection_1.PromptInjection; } });
+var moderation_1 = require("./moderation");
+Object.defineProperty(exports, "Moderation", { enumerable: true, get: function () { return moderation_1.Moderation; } });
+var sensitive_topic_1 = require("./sensitive-topic");
+Object.defineProperty(exports, "SensitiveTopic", { enumerable: true, get: function () { return sensitive_topic_1.SensitiveTopic; } });
+var topic_restriction_1 = require("./topic-restriction");
+Object.defineProperty(exports, "TopicRestriction", { enumerable: true, get: function () { return topic_restriction_1.TopicRestriction; } });
+var schema_1 = require("./schema");
+Object.defineProperty(exports, "Schema", { enumerable: true, get: function () { return schema_1.Schema; } });
+var custom_1 = require("./custom");
+Object.defineProperty(exports, "Custom", { enumerable: true, get: function () { return custom_1.Custom; } });
+// Integration
+var integration_1 = require("./integration");
+Object.defineProperty(exports, "setupAutoGuards", { enumerable: true, get: function () { return integration_1.setupAutoGuards; } });
+//# sourceMappingURL=index.js.map

package/dist/guard/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/guard/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,kCAAkC;AAClC,+BAWgB;AAVd,6FAAA,KAAK,OAAA;AACL,mGAAA,WAAW,OAAA;AACX,kGAAA,UAAU,OAAA;AACV,wGAAA,gBAAgB,OAAA;AAChB,wGAAA,gBAAgB,OAAA;AAChB,kGAAA,UAAU,OAAA;AACV,yGAAA,iBAAiB,OAAA;AACjB,sGAAA,cAAc,OAAA;AACd,uGAAA,eAAe,OAAA;AACf,uGAAA,eAAe,OAAA;AAIjB,WAAW;AACX,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AAGjB,SAAS;AACT,6BAA4B;AAAnB,0FAAA,GAAG,OAAA;AAEZ,uDAAqD;AAA5C,mHAAA,eAAe,OAAA;AAExB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AAEnB,qDAAmD;AAA1C,iHAAA,cAAc,OAAA;AAEvB,yDAAuD;AAA9C,qHAAA,gBAAgB,OAAA;AAEzB,mCAAkC;AAAzB,gGAAA,MAAM,OAAA;AAEf,mCAAkC;AAAzB,gGAAA,MAAM,OAAA;AAGf,cAAc;AACd,6CAAgD;AAAvC,8GAAA,eAAe,OAAA"}

package/dist/guard/integration.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Auto-guard integration layer.
+ *
+ * setupAutoGuards wraps LLM provider methods so that guards run on every
+ * call without any changes to existing instrumentation code.
+ *
+ * Call chain after setup:
+ *
+ *   User call
+ *     -> Guard wrapper  (preflight -> may deny/redact)
+ *       -> Instrumentor wrapper  (OTel telemetry)
+ *         -> Original SDK method  (actual API call)
+ *       <- Instrumentor wrapper
+ *     <- Guard wrapper  (postflight -> may redact/warn)
+ *   <- Returns to user
+ *
+ * **Streaming limitation**: postflight guards require a complete response
+ * object with `choices[].message.content` (or equivalent). Streaming
+ * responses yield incremental chunks that extractors cannot fully
+ * reassemble, so postflight guards are silently skipped for streamed
+ * completions. Preflight guards always run.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/_integration.py
+ */
+import { Guard } from './base';
+import { Pipeline } from './pipeline';
+type Extractor = (arg: any) => string;
+export declare function extractOpenAIInput(kwargs: Record<string, any>): string;
+export declare function extractOpenAIOutput(response: any): string;
+export declare function extractAnthropicInput(kwargs: Record<string, any>): string;
+export declare function extractAnthropicOutput(response: any): string;
+export declare function extractGenericInput(kwargs: Record<string, any>): string;
+export declare function extractGenericOutput(response: any): string;
+/** @internal exported for tests */
+export declare function applyPreflight(pipeline: Pipeline, kwargs: Record<string, any>, extractInput: Extractor): Record<string, any>;
+/**
+ * Each choice and text block is redacted on its own, so none is left holding
+ * the original text or another block's.
+ *
+ * @internal exported for tests
+ */
+export declare function applyPostflight(pipeline: Pipeline, response: any, extractOutput: Extractor): any;
+export declare function setupAutoGuards(guards: Guard[], failOpen?: boolean): void;
+export {};