shroud-privacy 2.3.0 → 2.3.1

package/dist/config-manager.js

@@ -167,8 +167,10 @@ export class ConfigManager {
         for (let i = 0; i < BUILTIN_PATTERNS.length; i++) {
             const p = BUILTIN_PATTERNS[i];
             const comma = i < BUILTIN_PATTERNS.length - 1 ? "," : "";
-            // Convert RegExp to source string
-            lines.push(`    "${p.name}": { "pattern": ${JSON.stringify(p.pattern.source)}, "category": "${p.category}", "confidence": ${p.confidence} }${comma}`);
+            // Convert RegExp to source string + flags
+            const flags = p.pattern.flags.replace("g", "") || undefined; // "g" is always added; only store extra flags (i, m, etc.)
+            const flagsPart = flags ? `, "flags": "${flags}"` : "";
+            lines.push(`    "${p.name}": { "pattern": ${JSON.stringify(p.pattern.source)}, "category": "${p.category}", "confidence": ${p.confidence}${flagsPart} }${comma}`);
         }
         lines.push("  }");
         lines.push("}");

package/dist/detectors/regex.d.ts

@@ -23,6 +23,8 @@ export type DetectorOverrides = Record<string, {
 export type ConfigRule = {
     enabled?: boolean;
     pattern?: string;
+    /** Extra regex flags beyond "g" (e.g. "i", "m", "im"). Always gets "g" automatically. */
+    flags?: string;
     category?: string;
     confidence?: number;
 };

package/dist/detectors/regex.js

@@ -1273,8 +1273,9 @@ export class RegexDetector {
                     return p;
                 const updated = { ...p };
                 if (rule.pattern) {
+                    const flags = "g" + (rule.flags || "").replace(/g/g, "");
                     try {
-                        updated.pattern = new RegExp(rule.pattern, "g");
+                        updated.pattern = new RegExp(rule.pattern, flags);
                     }
                     catch { /* invalid regex — keep built-in */ }
                 }
@@ -1298,9 +1299,10 @@ export class RegexDetector {
                 if (!rule.pattern)
                     continue; // new rules must have a pattern
                 try {
+                    const flags = "g" + (rule.flags || "").replace(/g/g, "");
                     patterns.push({
                         name,
-                        pattern: new RegExp(rule.pattern, "g"),
+                        pattern: new RegExp(rule.pattern, flags),
                         category: rule.category ? resolveCategory(rule.category) : Category.CUSTOM,
                         confidence: rule.confidence ?? 0.9,
                     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shroud-privacy",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "description": "Privacy and infrastructure protection for AI agents — detects sensitive data (PII, network topology, credentials, OT/SCADA) and replaces with deterministic fakes before anything reaches the LLM.",
   "type": "module",
   "main": "dist/index.js",