shield360 1.0.0

package/dist/guard/pipeline.js

@@ -0,0 +1,139 @@
+"use strict";
+/**
+ * Guard Pipeline -- composes multiple guards into an ordered evaluation chain.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/_pipeline.py
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Pipeline = void 0;
+const api_1 = require("@opentelemetry/api");
+const base_1 = require("./base");
+const report_1 = require("./report");
+class Pipeline {
+    constructor(opts = {}) {
+        this._guards = [...(opts.guards || [])];
+        this._failOpen = opts.failOpen ?? true;
+    }
+    get guards() {
+        return [...this._guards];
+    }
+    evaluate(text, phase = 'preflight') {
+        const validPhases = Object.values(base_1.GuardPhase);
+        if (!validPhases.includes(phase)) {
+            throw new base_1.GuardConfigError(`Invalid phase '${phase}'. Must be one of: ${validPhases.join(', ')}`);
+        }
+        const guardPhase = phase;
+        const results = [];
+        let currentText = text;
+        let worstAction = base_1.GuardAction.ALLOW;
+        for (const guard of this._guards) {
+            if (!guard.supportsPhase(guardPhase)) {
+                continue;
+            }
+            let result;
+            try {
+                result = guard.run(currentText, guardPhase);
+            }
+            catch (e) {
+                if (this._failOpen) {
+                    console.warn(`Guard '${guard.name}' raised during ${phase} evaluation; fail-open -> allow`, e);
+                    result = (0, base_1.makeGuardResult)({ guardName: guard.name });
+                }
+                else {
+                    throw e;
+                }
+            }
+            results.push(result);
+            Pipeline._emitOtel(result, phase);
+            if (base_1.ACTION_SEVERITY[result.action] > base_1.ACTION_SEVERITY[worstAction]) {
+                worstAction = result.action;
+            }
+            if (result.action === base_1.GuardAction.REDACT && result.transformedText !== null) {
+                currentText = result.transformedText;
+            }
+            if (result.action === base_1.GuardAction.DENY) {
+                break;
+            }
+        }
+        const transformed = currentText !== text ? currentText : null;
+        return new base_1.PipelineResult(worstAction, results, transformed);
+    }
+    /**
+     * Apply every redacting guard to `text` and return the result.
+     *
+     * Used after `evaluate` has already decided a call is redacted, to rewrite
+     * each message on its own. Emits nothing: the decision, and its telemetry,
+     * came from `evaluate`.
+     */
+    redact(text, phase = 'preflight') {
+        const guardPhase = phase;
+        let current = text;
+        for (const guard of this._guards) {
+            if (!guard.supportsPhase(guardPhase))
+                continue;
+            let result;
+            try {
+                result = guard.run(current, guardPhase);
+            }
+            catch (e) {
+                if (this._failOpen)
+                    continue;
+                throw e;
+            }
+            if (result.action === base_1.GuardAction.REDACT && result.transformedText !== null) {
+                current = result.transformedText;
+            }
+        }
+        return current;
+    }
+    static _emitOtel(result, phase) {
+        (0, report_1.reportGuardDecision)(result.guardName, result.action, result.classification, phase, result.findings);
+        try {
+            const Metrics = require('../otel/metrics').default;
+            if (Metrics?.guardRequests) {
+                Metrics.guardRequests.add(1, {
+                    'guard.name': result.guardName,
+                    'guard.action': result.action,
+                    'guard.score': result.score,
+                    'guard.classification': result.classification,
+                    'guard.phase': phase,
+                });
+            }
+        }
+        catch {
+            // metrics not initialized yet
+        }
+        try {
+            const attributes = {
+                'guard.name': result.guardName,
+                'guard.phase': phase,
+                'guard.action': result.action,
+                'guard.score': result.score,
+                'guard.classification': result.classification,
+                'guard.explanation': result.explanation,
+                'guard.latency_ms': result.latencyMs,
+            };
+            const span = api_1.trace.getActiveSpan();
+            if (span && span.isRecording()) {
+                span.addEvent('guard.evaluation', attributes);
+            }
+            else if (result.action !== base_1.GuardAction.ALLOW) {
+                // Guards run before the LLM call's span starts, and a denied call
+                // never starts one. Record what the guard did on a span of its own so
+                // a block or redaction is never invisible. Only the kind of data found
+                // is recorded, never the text.
+                const own = api_1.trace.getTracer('shield360.guard').startSpan('shield360.guard', { attributes });
+                own.addEvent('guard.evaluation', attributes);
+                if (result.action === base_1.GuardAction.DENY) {
+                    own.setStatus({ code: api_1.SpanStatusCode.ERROR, message: 'denied by guard' });
+                }
+                own.end();
+            }
+        }
+        catch {
+            // tracing not initialized
+        }
+    }
+}
+exports.Pipeline = Pipeline;
+//# sourceMappingURL=pipeline.js.map

package/dist/guard/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/guard/pipeline.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,4CAA2D;AAC3D,iCASgB;AAChB,qCAA+C;AAO/C,MAAa,QAAQ;IAInB,YAAY,OAAwB,EAAE;QACpC,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,QAAgB,WAAW;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAU,CAAa,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,uBAAgB,CACxB,kBAAkB,KAAK,sBAAsB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,KAAmB,CAAC;QACvC,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,IAAI,WAAW,GAAG,kBAAW,CAAC,KAAK,CAAC;QAEpC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,IAAI,MAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CACV,UAAU,KAAK,CAAC,IAAI,mBAAmB,KAAK,iCAAiC,EAC7E,CAAC,CACF,CAAC;oBACF,MAAM,GAAG,IAAA,sBAAe,EAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAElC,IAAI,sBAAe,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,sBAAe,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClE,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAW,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;gBAC5E,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC;YACvC,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAW,CAAC,IAAI,EAAE,CAAC;gBACvC,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,OAAO,IAAI,qBAAc,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,IAAY,EAAE,QAAgB,WAAW;QAC9C,MAAM,UAAU,GAAG,KAAmB,CAAC;QACvC,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC;gBAAE,SAAS;YAC/C,IAAI,MAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,IAAI,CAAC,SAAS;oBAAE,SAAS;gBAC7B,MAAM,CAAC,CAAC;YACV,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAW,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;gBAC5E,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,MAAM,CAAC,SAAS,CAAC,MAAmB,EAAE,KAAa;QACzD,IAAA,4BAAmB,EAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpG,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC;YACnD,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;gBAC3B,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE;oBAC3B,YAAY,EAAE,MAAM,CAAC,SAAS;oBAC9B,cAAc,EAAE,MAAM,CAAC,MAAM;oBAC7B,aAAa,EAAE,MAAM,CAAC,KAAK;oBAC3B,sBAAsB,EAAE,MAAM,CAAC,cAAc;oBAC7C,aAAa,EAAE,KAAK;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,GAAG;gBACjB,YAAY,EAAE,MAAM,CAAC,SAAS;gBAC9B,aAAa,EAAE,KAAK;gBACpB,cAAc,EAAE,MAAM,CAAC,MAAM;gBAC7B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,sBAAsB,EAAE,MAAM,CAAC,cAAc;gBAC7C,mBAAmB,EAAE,MAAM,CAAC,WAAW;gBACvC,kBAAkB,EAAE,MAAM,CAAC,SAAS;aACrC,CAAC;YACF,MAAM,IAAI,GAAG,WAAK,CAAC,aAAa,EAAE,CAAC;YACnC,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;YAChD,CAAC;iBAAM,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAW,CAAC,KAAK,EAAE,CAAC;gBAC/C,kEAAkE;gBAClE,sEAAsE;gBACtE,uEAAuE;gBACvE,+BAA+B;gBAC/B,MAAM,GAAG,GAAG,WAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC5F,GAAG,CAAC,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;gBAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAW,CAAC,IAAI,EAAE,CAAC;oBACvC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAc,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC5E,CAAC;gBACD,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;CACF;AA1ID,4BA0IC"}

package/dist/guard/prompt-injection.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Prompt injection & jailbreak detection guard.
+ *
+ * Fast regex patterns catch known injection signatures. An optional
+ * user-provided classifier handles ambiguous cases.
+ *
+ * Patterns must stay in sync with: sdk/python/src/shield360/guard/prompt_injection.py
+ */
+import { Guard, GuardPhase, GuardResult, GuardOptions } from './base';
+export interface PromptInjectionOptions extends GuardOptions {
+    threshold?: number;
+    classifier?: (text: string) => number;
+}
+export declare class PromptInjection extends Guard {
+    readonly name = "prompt_injection";
+    readonly phases: GuardPhase[];
+    private readonly _threshold;
+    private readonly _classifier?;
+    constructor(opts?: PromptInjectionOptions);
+    evaluate(text: string): GuardResult;
+}

package/dist/guard/prompt-injection.js

@@ -0,0 +1,70 @@
+"use strict";
+/**
+ * Prompt injection & jailbreak detection guard.
+ *
+ * Fast regex patterns catch known injection signatures. An optional
+ * user-provided classifier handles ambiguous cases.
+ *
+ * Patterns must stay in sync with: sdk/python/src/shield360/guard/prompt_injection.py
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PromptInjection = void 0;
+const base_1 = require("./base");
+const INJECTION_PATTERNS = [
+    // ---- Instruction override ----
+    { label: 'instruction-override', regex: /ignore\s+(?:all\s+)?(?:previous|above|prior)\s+(?:instructions|prompts|rules)/i, weight: 0.9 },
+    { label: 'instruction-override-2', regex: /disregard\s+(?:all\s+)?(?:previous|above|prior)\s+(?:instructions|context)/i, weight: 0.9 },
+    { label: 'new-instructions', regex: /(?:new|updated|revised)\s+instructions\s*:/i, weight: 0.7 },
+    { label: 'do-anything-now', regex: /(?:DAN|do\s+anything\s+now)\s+mode/i, weight: 0.95 },
+    { label: 'jailbreak-keyword', regex: /jailbreak(?:ed|ing)?/i, weight: 0.8 },
+    // ---- System prompt extraction ----
+    { label: 'system-prompt-leak', regex: /(?:show|reveal|display|print|output|repeat|tell\s+me)\s+(?:your|the|me\s+your)\s*(?:system|initial|original|hidden)\s+(?:prompt|instructions|message)/i, weight: 0.85 },
+    { label: 'system-prompt-leak-2', regex: /what\s+(?:are|were)\s+your\s+(?:system|initial|original)\s+(?:instructions|prompt)/i, weight: 0.8 },
+    { label: 'system-prompt-leak-3', regex: /(?:show|reveal|display|print|output|repeat)\s+(?:me\s+)?your\s+(?:system\s+)?prompt/i, weight: 0.8 },
+    // ---- Role impersonation ----
+    { label: 'role-play', regex: /(?:you\s+are\s+now|act\s+as|pretend\s+(?:to\s+be|you\s+are)|roleplay\s+as)\s+(?:a\s+)?(?:hacker|evil|malicious|unrestricted|unfiltered)/i, weight: 0.85 },
+    { label: 'developer-mode', regex: /(?:developer|debug|admin|god|sudo|root)\s+mode/i, weight: 0.7 },
+    // ---- Encoding bypass ----
+    { label: 'base64-injection', regex: /(?:decode|base64|eval)\s*\(/i, weight: 0.6 },
+    { label: 'markdown-injection', regex: /\[.*?\]\((?:javascript|data):/i, weight: 0.8 },
+    // ---- Delimiter abuse ----
+    { label: 'delimiter-abuse', regex: /={5,}|<\|(?:im_start|system|endoftext)\|>|###\s*(?:system|instruction)/i, weight: 0.7 },
+];
+class PromptInjection extends base_1.Guard {
+    constructor(opts = {}) {
+        super({ action: opts.action ?? 'deny', maxScanLength: opts.maxScanLength });
+        this.name = 'prompt_injection';
+        this.phases = [base_1.GuardPhase.PREFLIGHT];
+        this._threshold = opts.threshold ?? 0.5;
+        this._classifier = opts.classifier;
+    }
+    evaluate(text) {
+        const matchedLabels = [];
+        let maxWeight = 0;
+        for (const { label, regex, weight } of INJECTION_PATTERNS) {
+            if (regex.test(text)) {
+                matchedLabels.push(label);
+                if (weight > maxWeight) {
+                    maxWeight = weight;
+                }
+            }
+        }
+        let score = maxWeight;
+        if (matchedLabels.length === 0 && this._classifier) {
+            score = this._classifier(text);
+        }
+        if (score >= this._threshold) {
+            const classification = matchedLabels.length > 0 ? matchedLabels.join(', ') : 'classifier';
+            return (0, base_1.makeGuardResult)({
+                action: this._action,
+                score: Math.round(score * 1000) / 1000,
+                guardName: this.name,
+                classification,
+                explanation: `Prompt injection detected (score=${score.toFixed(2)}): ${classification}`,
+            });
+        }
+        return (0, base_1.makeGuardResult)({ guardName: this.name, score: Math.round(score * 1000) / 1000 });
+    }
+}
+exports.PromptInjection = PromptInjection;
+//# sourceMappingURL=prompt-injection.js.map

package/dist/guard/prompt-injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-injection.js","sourceRoot":"","sources":["../../src/guard/prompt-injection.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,iCAAuF;AAQvF,MAAM,kBAAkB,GAAuB;IAC7C,iCAAiC;IACjC,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,gFAAgF,EAAE,MAAM,EAAE,GAAG,EAAE;IACvI,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,6EAA6E,EAAE,MAAM,EAAE,GAAG,EAAE;IACtI,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,6CAA6C,EAAE,MAAM,EAAE,GAAG,EAAE;IAChG,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,qCAAqC,EAAE,MAAM,EAAE,IAAI,EAAE;IACxF,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,GAAG,EAAE;IAC3E,qCAAqC;IACrC,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,wJAAwJ,EAAE,MAAM,EAAE,IAAI,EAAE;IAC9M,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,qFAAqF,EAAE,MAAM,EAAE,GAAG,EAAE;IAC5I,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,sFAAsF,EAAE,MAAM,EAAE,GAAG,EAAE;IAC7I,+BAA+B;IAC/B,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,0IAA0I,EAAE,MAAM,EAAE,IAAI,EAAE;IACvL,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,iDAAiD,EAAE,MAAM,EAAE,GAAG,EAAE;IAClG,4BAA4B;IAC5B,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,8BAA8B,EAAE,MAAM,EAAE,GAAG,EAAE;IACjF,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,gCAAgC,EAAE,MAAM,EAAE,GAAG,EAAE;IACrF,4BAA4B;IAC5B,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,yEAAyE,EAAE,MAAM,EAAE,GAAG,EAAE;CAC5H,CAAC;AAOF,MAAa,eAAgB,SAAQ,YAAK;IAOxC,YAAY,OAA+B,EAAE;QAC3C,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAPrE,SAAI,GAAG,kBAAkB,CAAC;QAC1B,WAAM,GAAG,CAAC,iBAAU,CAAC,SAAS,CAAC,CAAC;QAOvC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;IACrC,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;YAC1D,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1B,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;oBACvB,SAAS,GAAG,MAAM,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,KAAK,GAAG,SAAS,CAAC;QAEtB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7B,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;YAC1F,OAAO,IAAA,sBAAe,EAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,OAAO;gBACpB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI;gBACtC,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,cAAc;gBACd,WAAW,EAAE,oCAAoC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,cAAc,EAAE;aACxF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAA,sBAAe,EAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;CACF;AA7CD,0CA6CC"}

package/dist/guard/report.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Reports guard decisions to Shield360 as compliance evidence.
+ *
+ * When `init` is given a Shield360 URL and API key (or SHIELD360_URL /
+ * SHIELD360_API_KEY), every guard decision other than allow is sent to
+ * `/api/guard/events`: which guard, what it did, the kind of data found, in
+ * which app, on which host. Never the text that was checked.
+ *
+ * With each report go the values found, masked, and fingerprinted with the
+ * organisation's key (fetched from `/api/guard/config`), so a reviewer can see
+ * the same value recurring. The full value is never sent.
+ *
+ * Reports are queued and sent in batches off the call path, so a guard adds no
+ * network time to the call it protects. A batch that cannot be delivered is
+ * retried a few times and then dropped; the decision was already enforced.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/_report.py
+ */
+import { Finding } from './findings';
+export declare const EVENT_NAME = "shield360.guard.decision";
+/** Starts reporting when both a URL and a key are given. Returns whether it did. */
+export declare function configureGuardReports(opts: {
+    url?: string;
+    apiKey?: string;
+    applicationName: string;
+    environment: string;
+    sdkVersion?: string;
+}): boolean;
+/** Queues one decision. Allow decisions are not evidence of anything. */
+export declare function reportGuardDecision(guardName: string, action: string, classification: string, phase: string, findings?: Finding[]): void;
+/** Sends everything queued now (tests, and short-lived scripts). */
+export declare function flushGuardReports(): Promise<void>;
+/** Stops reporting; for tests. */
+export declare function resetGuardReports(): Promise<void>;

package/dist/guard/report.js

@@ -0,0 +1,182 @@
+"use strict";
+/**
+ * Reports guard decisions to Shield360 as compliance evidence.
+ *
+ * When `init` is given a Shield360 URL and API key (or SHIELD360_URL /
+ * SHIELD360_API_KEY), every guard decision other than allow is sent to
+ * `/api/guard/events`: which guard, what it did, the kind of data found, in
+ * which app, on which host. Never the text that was checked.
+ *
+ * With each report go the values found, masked, and fingerprinted with the
+ * organisation's key (fetched from `/api/guard/config`), so a reviewer can see
+ * the same value recurring. The full value is never sent.
+ *
+ * Reports are queued and sent in batches off the call path, so a guard adds no
+ * network time to the call it protects. A batch that cannot be delivered is
+ * retried a few times and then dropped; the decision was already enforced.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/_report.py
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EVENT_NAME = void 0;
+exports.configureGuardReports = configureGuardReports;
+exports.reportGuardDecision = reportGuardDecision;
+exports.flushGuardReports = flushGuardReports;
+exports.resetGuardReports = resetGuardReports;
+const crypto_1 = require("crypto");
+const os_1 = require("os");
+const findings_1 = require("./findings");
+exports.EVENT_NAME = 'shield360.guard.decision';
+const BATCH = 100;
+const FLUSH_MS = 2000;
+const MAX_QUEUED = 5000;
+const ATTEMPTS = 3;
+class Reporter {
+    constructor(endpoint, apiKey, resource, applicationName) {
+        this.endpoint = endpoint;
+        this.apiKey = apiKey;
+        this.resource = resource;
+        this.applicationName = applicationName;
+        this.queue = [];
+        this.sending = Promise.resolve();
+        /** Settles once the fingerprint key has been fetched (or could not be). */
+        this.keyReady = Promise.resolve();
+        this.timer = setInterval(() => void this.flush(), FLUSH_MS);
+        // Never keep a process alive just to report.
+        this.timer.unref?.();
+    }
+    add(event) {
+        if (this.queue.length >= MAX_QUEUED) {
+            console.warn('Shield360 guard report queue is full; a report was dropped');
+            return;
+        }
+        this.queue.push(event);
+    }
+    /** Sends everything queued; resolves when it has been tried. */
+    flush() {
+        this.sending = this.sending.then(async () => {
+            await this.keyReady;
+            while (this.queue.length)
+                await this.post(this.queue.splice(0, BATCH).map(serialise));
+        });
+        return this.sending;
+    }
+    async post(batch) {
+        const body = JSON.stringify({ resource: this.resource, events: batch });
+        for (let attempt = 0; attempt < ATTEMPTS; attempt++) {
+            try {
+                const res = await fetch(this.endpoint, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${this.apiKey}` },
+                    body,
+                });
+                if (res.ok)
+                    return;
+                if ([400, 401, 403, 413].includes(res.status)) {
+                    console.warn(`Shield360 rejected guard reports: HTTP ${res.status}`);
+                    return;
+                }
+            }
+            catch {
+                // retried below
+            }
+            await new Promise((r) => setTimeout(r, 500 * (attempt + 1)));
+        }
+        console.warn(`Could not deliver ${batch.length} guard report(s) to Shield360`);
+    }
+    close() {
+        clearInterval(this.timer);
+        return this.flush();
+    }
+}
+/** Findings go out fingerprinted if the key has arrived since they were made. */
+function serialise(event) {
+    const { findings, ...rest } = event;
+    if (!findings?.length)
+        return rest;
+    const done = findings.map(findings_1.completeFinding);
+    return {
+        ...rest,
+        attrs: {
+            ...rest.attrs,
+            'shield360.guard.findings': JSON.stringify(done),
+            'shield360.guard.fingerprints': done.map((f) => f.fingerprint).filter(Boolean).join(','),
+        },
+    };
+}
+let reporter = null;
+/** Starts reporting when both a URL and a key are given. Returns whether it did. */
+function configureGuardReports(opts) {
+    if (!opts.url || !opts.apiKey)
+        return false;
+    let user = '';
+    try {
+        user = (0, os_1.userInfo)().username;
+    }
+    catch {
+        // no user in some containers
+    }
+    const resource = {};
+    for (const [k, v] of Object.entries({
+        'host.name': (0, os_1.hostname)(),
+        'user.name': user,
+        'deployment.environment': opts.environment,
+        'service.version': opts.sdkVersion || '',
+    })) {
+        if (v)
+            resource[k] = v;
+    }
+    void reporter?.close();
+    const base = opts.url.replace(/\/+$/, '');
+    reporter = new Reporter(`${base}/api/guard/events`, opts.apiKey, resource, opts.applicationName);
+    reporter.keyReady = fetchFingerprintKey(base, opts.apiKey);
+    return true;
+}
+/** The organisation's fingerprint key; without it findings are masked only. */
+async function fetchFingerprintKey(base, apiKey) {
+    try {
+        const res = await fetch(`${base}/api/guard/config`, { headers: { Authorization: `Bearer ${apiKey}` } });
+        if (!res.ok)
+            return;
+        const body = (await res.json());
+        if (typeof body.fingerprintKey === 'string' && body.fingerprintKey)
+            (0, findings_1.setFingerprintKey)(body.fingerprintKey);
+    }
+    catch {
+        // masked only
+    }
+}
+/** Queues one decision. Allow decisions are not evidence of anything. */
+function reportGuardDecision(guardName, action, classification, phase, findings = []) {
+    if (!reporter || action === 'allow')
+        return;
+    const kept = findings.slice(0, 10);
+    const kinds = (classification || '')
+        .split(',')
+        .map((k) => k.trim())
+        .filter(Boolean)
+        .join(',');
+    reporter.add({
+        name: exports.EVENT_NAME,
+        time: new Date().toISOString(),
+        attrs: {
+            'shield360.guard.event_id': (0, crypto_1.randomUUID)().replace(/-/g, ''),
+            'shield360.guard.client': reporter.applicationName,
+            'shield360.guard.action': action,
+            'shield360.guard.target': phase,
+            'shield360.guard.kinds': kinds,
+            'shield360.guard.name': guardName,
+        },
+        findings: kept,
+    });
+}
+/** Sends everything queued now (tests, and short-lived scripts). */
+function flushGuardReports() {
+    return reporter ? reporter.flush() : Promise.resolve();
+}
+/** Stops reporting; for tests. */
+async function resetGuardReports() {
+    await reporter?.close();
+    reporter = null;
+}
+//# sourceMappingURL=report.js.map

package/dist/guard/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/guard/report.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AA+FH,sDA4BC;AAeD,kDA2BC;AAGD,8CAEC;AAGD,8CAGC;AA9KD,mCAAoC;AACpC,2BAAwC;AACxC,yCAAyE;AAE5D,QAAA,UAAU,GAAG,0BAA0B,CAAC;AACrD,MAAM,KAAK,GAAG,GAAG,CAAC;AAClB,MAAM,QAAQ,GAAG,IAAI,CAAC;AACtB,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,QAAQ,GAAG,CAAC,CAAC;AAInB,MAAM,QAAQ;IAOZ,YACmB,QAAgB,EAChB,MAAc,EACd,QAAgC,EACxC,eAAuB;QAHf,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAwB;QACxC,oBAAe,GAAf,eAAe,CAAQ;QAVjB,UAAK,GAAoB,EAAE,CAAC;QAErC,YAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QACnD,2EAA2E;QAC3E,aAAQ,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QAQ1C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5D,6CAA6C;QAC7C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,GAAG,CAAC,KAAoB;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,gEAAgE;IAChE,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC1C,MAAM,IAAI,CAAC,QAAQ,CAAC;YACpB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,KAAsB;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;oBACrC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;oBACvF,IAAI;iBACL,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,EAAE;oBAAE,OAAO;gBACnB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9C,OAAO,CAAC,IAAI,CAAC,0CAA0C,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;oBACrE,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,qBAAqB,KAAK,CAAC,MAAM,+BAA+B,CAAC,CAAC;IACjF,CAAC;IAED,KAAK;QACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AAED,iFAAiF;AACjF,SAAS,SAAS,CAAC,KAAoB;IACrC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACpC,IAAI,CAAC,QAAQ,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,0BAAe,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,IAAI;QACP,KAAK,EAAE;YACL,GAAG,IAAI,CAAC,KAAK;YACb,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAChD,8BAA8B,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SACzF;KACF,CAAC;AACJ,CAAC;AAED,IAAI,QAAQ,GAAoB,IAAI,CAAC;AAErC,oFAAoF;AACpF,SAAgB,qBAAqB,CAAC,IAMrC;IACC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,aAAQ,GAAE,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QAClC,WAAW,EAAE,IAAA,aAAQ,GAAE;QACvB,WAAW,EAAE,IAAI;QACjB,wBAAwB,EAAE,IAAI,CAAC,WAAW;QAC1C,iBAAiB,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;KACzC,CAAC,EAAE,CAAC;QACH,IAAI,CAAC;YAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,QAAQ,EAAE,KAAK,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,QAAQ,GAAG,IAAI,QAAQ,CAAC,GAAG,IAAI,mBAAmB,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACjG,QAAQ,CAAC,QAAQ,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAc;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,mBAAmB,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO;QACpB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiC,CAAC;QAChE,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc;YAAE,IAAA,4BAAiB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAgB,mBAAmB,CACjC,SAAiB,EACjB,MAAc,EACd,cAAsB,EACtB,KAAa,EACb,WAAsB,EAAE;IAExB,IAAI,CAAC,QAAQ,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;SACjC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,QAAQ,CAAC,GAAG,CAAC;QACX,IAAI,EAAE,kBAAU;QAChB,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC9B,KAAK,EAAE;YACL,0BAA0B,EAAE,IAAA,mBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1D,wBAAwB,EAAE,QAAQ,CAAC,eAAe;YAClD,wBAAwB,EAAE,MAAM;YAChC,wBAAwB,EAAE,KAAK;YAC/B,uBAAuB,EAAE,KAAK;YAC9B,sBAAsB,EAAE,SAAS;SAClC;QACD,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,SAAgB,iBAAiB;IAC/B,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;AACzD,CAAC;AAED,kCAAkC;AAC3B,KAAK,UAAU,iBAAiB;IACrC,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;IACxB,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC"}

package/dist/guard/schema.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Schema validation guard for structured LLM outputs.
+ *
+ * Validates that model output is valid JSON and/or conforms to a JSON schema.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/schema.py
+ */
+import { Guard, GuardPhase, GuardResult, GuardOptions } from './base';
+export interface SchemaOptions extends GuardOptions {
+    jsonMode?: boolean;
+    schema?: Record<string, unknown>;
+}
+export declare class Schema extends Guard {
+    readonly name = "schema";
+    readonly phases: GuardPhase[];
+    private readonly _jsonMode;
+    private readonly _schema;
+    constructor(opts?: SchemaOptions);
+    evaluate(text: string): GuardResult;
+}

package/dist/guard/schema.js

@@ -0,0 +1,99 @@
+"use strict";
+/**
+ * Schema validation guard for structured LLM outputs.
+ *
+ * Validates that model output is valid JSON and/or conforms to a JSON schema.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/guard/schema.py
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Schema = void 0;
+const base_1 = require("./base");
+function validateJsonSchema(data, schema, path = '') {
+    const schemaType = schema.type;
+    if (schemaType) {
+        const typeMap = {
+            object: (v) => typeof v === 'object' && v !== null && !Array.isArray(v),
+            array: (v) => Array.isArray(v),
+            string: (v) => typeof v === 'string',
+            number: (v) => typeof v === 'number',
+            integer: (v) => typeof v === 'number' && Number.isInteger(v),
+            boolean: (v) => typeof v === 'boolean',
+            null: (v) => v === null,
+        };
+        const checker = typeMap[schemaType];
+        if (checker && !checker(data)) {
+            const actual = data === null ? 'null' : Array.isArray(data) ? 'array' : typeof data;
+            return `Expected ${schemaType} at ${path || 'root'}, got ${actual}`;
+        }
+    }
+    if (schemaType === 'object' && typeof data === 'object' && data !== null && !Array.isArray(data)) {
+        const dataObj = data;
+        const required = schema.required || [];
+        for (const fieldName of required) {
+            if (!(fieldName in dataObj)) {
+                return `Missing required field '${fieldName}' at ${path || 'root'}`;
+            }
+        }
+        const properties = schema.properties || {};
+        for (const [propName, propSchema] of Object.entries(properties)) {
+            if (propName in dataObj) {
+                const err = validateJsonSchema(dataObj[propName], propSchema, `${path}.${propName}`);
+                if (err)
+                    return err;
+            }
+        }
+    }
+    if (schemaType === 'array' && Array.isArray(data)) {
+        const itemsSchema = schema.items;
+        if (itemsSchema) {
+            for (let i = 0; i < data.length; i++) {
+                const err = validateJsonSchema(data[i], itemsSchema, `${path}[${i}]`);
+                if (err)
+                    return err;
+            }
+        }
+    }
+    return null;
+}
+class Schema extends base_1.Guard {
+    constructor(opts = {}) {
+        super({ action: opts.action ?? 'deny', maxScanLength: opts.maxScanLength });
+        this.name = 'schema';
+        this.phases = [base_1.GuardPhase.POSTFLIGHT];
+        this._jsonMode = opts.jsonMode ?? false;
+        this._schema = opts.schema ?? null;
+    }
+    evaluate(text) {
+        const stripped = text.trim();
+        let parsed;
+        try {
+            parsed = JSON.parse(stripped);
+        }
+        catch (e) {
+            const message = e instanceof Error ? e.message : String(e);
+            return (0, base_1.makeGuardResult)({
+                action: this._action,
+                score: 1.0,
+                guardName: this.name,
+                classification: 'invalid_json',
+                explanation: `Output is not valid JSON: ${message}`,
+            });
+        }
+        if (this._schema) {
+            const err = validateJsonSchema(parsed, this._schema);
+            if (err) {
+                return (0, base_1.makeGuardResult)({
+                    action: this._action,
+                    score: 0.9,
+                    guardName: this.name,
+                    classification: 'schema_mismatch',
+                    explanation: err,
+                });
+            }
+        }
+        return (0, base_1.makeGuardResult)({ guardName: this.name });
+    }
+}
+exports.Schema = Schema;
+//# sourceMappingURL=schema.js.map

package/dist/guard/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/guard/schema.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEH,iCAAuF;AAEvF,SAAS,kBAAkB,CACzB,IAAa,EACb,MAA+B,EAC/B,IAAI,GAAG,EAAE;IAET,MAAM,UAAU,GAAG,MAAM,CAAC,IAA0B,CAAC;IACrD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAA4C;YACvD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACvE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9B,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ;YACpC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ;YACpC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC5D,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,SAAS;YACtC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI;SACxB,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC;YACpF,OAAO,YAAY,UAAU,OAAO,IAAI,IAAI,MAAM,SAAS,MAAM,EAAE,CAAC;QACtE,CAAC;IACH,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACjG,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,MAAM,QAAQ,GAAI,MAAM,CAAC,QAAqB,IAAI,EAAE,CAAC;QACrD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,EAAE,CAAC;gBAC5B,OAAO,2BAA2B,SAAS,QAAQ,IAAI,IAAI,MAAM,EAAE,CAAC;YACtE,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAI,MAAM,CAAC,UAAsD,IAAI,EAAE,CAAC;QACxF,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAChE,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;gBACrF,IAAI,GAAG;oBAAE,OAAO,GAAG,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,WAAW,GAAG,MAAM,CAAC,KAA4C,CAAC;QACxE,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtE,IAAI,GAAG;oBAAE,OAAO,GAAG,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,MAAa,MAAO,SAAQ,YAAK;IAO/B,YAAY,OAAsB,EAAE;QAClC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAPrE,SAAI,GAAG,QAAQ,CAAC;QAChB,WAAM,GAAG,CAAC,iBAAU,CAAC,UAAU,CAAC,CAAC;QAOxC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE7B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,OAAO,IAAA,sBAAe,EAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG;gBACV,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,cAAc,EAAE,cAAc;gBAC9B,WAAW,EAAE,6BAA6B,OAAO,EAAE;aACpD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,IAAA,sBAAe,EAAC;oBACrB,MAAM,EAAE,IAAI,CAAC,OAAO;oBACpB,KAAK,EAAE,GAAG;oBACV,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,cAAc,EAAE,iBAAiB;oBACjC,WAAW,EAAE,GAAG;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,IAAA,sBAAe,EAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;CACF;AA7CD,wBA6CC"}

package/dist/guard/sensitive-topic.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Sensitive topic detection guard.
+ *
+ * Uses keyword/regex dictionaries for fast-path detection of sensitive
+ * content categories. An optional user-provided classifier handles
+ * ambiguous cases.
+ *
+ * Patterns must stay in sync with: sdk/python/src/shield360/guard/sensitive_topic.py
+ */
+import { Guard, GuardPhase, GuardResult, GuardOptions } from './base';
+export interface SensitiveTopicOptions extends GuardOptions {
+    categories?: Set<string> | string[];
+    customCategories?: Record<string, string[]>;
+    classifier?: (text: string) => string | null;
+}
+export declare class SensitiveTopic extends Guard {
+    readonly name = "sensitive_topic";
+    readonly phases: GuardPhase[];
+    private readonly _patterns;
+    private readonly _classifier?;
+    constructor(opts?: SensitiveTopicOptions);
+    evaluate(text: string): GuardResult;
+}