git.99rst.org Git - sgasser-llm-shield.git/commit

git.99rst.org / sgasser-llm-shield.git / commit

author	Stefan Gasser <redacted>
	Sat, 17 Jan 2026 19:32:54 +0000 (20:32 +0100)
committer	GitHub <redacted>
	Sat, 17 Jan 2026 19:32:54 +0000 (20:32 +0100)
commit	050273513d27dc4e97ffad6807122bde22199e61
tree	418ff676a417eabd05c14a7f9f641072ba8aa298	tree \| snapshot
parent	c3d98b46b3ed927d568225c51e928826525d70f8	commit \| diff

Add per-part PII/secrets detection for multimodal messages (#47)

Each text block in multimodal messages is now analyzed separately
rather than concatenating all text together. This enables precise
masking while preserving message structure.

Changes:
- Per-part detection for both PII and secrets
- Symmetric pii/ and secrets/ module structure
- Shared utilities in utils/message-transform.ts
- Rename "redact" → "mask" for consistency
- Centralize MaskResult, Span interfaces

Breaking changes:
- Header: X-PasteGuard-Secrets-Redacted → X-PasteGuard-Secrets-Masked
- Config: secrets_detection.action "redact" → "mask"

41 files changed:

config.example.yaml		diff \| blob \| history
docs/api-reference/chat-completions.mdx		diff \| blob \| history
docs/concepts/secrets-detection.mdx		diff \| blob \| history
docs/configuration/secrets-detection.mdx		diff \| blob \| history
src/config.ts		diff \| blob \| history
src/constants/languages.ts	[new file with mode: 0644]	blob
src/index.ts		diff \| blob \| history
src/pii/detect.test.ts	[moved from src/services/pii-detector.test.ts with 79% similarity]	diff \| blob \| history
src/pii/detect.ts	[moved from src/services/pii-detector.ts with 75% similarity]	diff \| blob \| history
src/pii/mask.test.ts	[new file with mode: 0644]	blob
src/pii/mask.ts	[new file with mode: 0644]	blob
src/routes/info.ts		diff \| blob \| history
src/routes/proxy.ts		diff \| blob \| history
src/secrets/detect.test.ts		diff \| blob \| history
src/secrets/detect.ts		diff \| blob \| history
src/secrets/mask.test.ts	[new file with mode: 0644]	blob
src/secrets/mask.ts	[new file with mode: 0644]	blob
src/secrets/multimodal.test.ts		diff \| blob \| history
src/secrets/patterns/api-keys.ts		diff \| blob \| history
src/secrets/patterns/env-vars.ts		diff \| blob \| history
src/secrets/patterns/private-keys.ts		diff \| blob \| history
src/secrets/patterns/tokens.ts		diff \| blob \| history
src/secrets/patterns/types.ts		diff \| blob \| history
src/secrets/patterns/utils.ts		diff \| blob \| history
src/secrets/redact.test.ts	[deleted file]	blob \| history
src/secrets/redact.ts	[deleted file]	blob \| history
src/services/decision.test.ts		diff \| blob \| history
src/services/decision.ts		diff \| blob \| history
src/services/language-detector.ts		diff \| blob \| history
src/services/masking.test.ts	[deleted file]	blob \| history
src/services/masking.ts	[deleted file]	blob \| history
src/services/stream-transformer.test.ts		diff \| blob \| history
src/services/stream-transformer.ts		diff \| blob \| history
src/test-utils/detection-results.ts	[new file with mode: 0644]	blob
src/utils/conflict-resolver.ts		diff \| blob \| history
src/utils/content.test.ts		diff \| blob \| history
src/utils/content.ts		diff \| blob \| history
src/utils/message-transform.test.ts	[new file with mode: 0644]	blob
src/utils/message-transform.ts	[new file with mode: 0644]	blob
src/utils/placeholders.test.ts	[moved from src/constants/placeholders.test.ts with 93% similarity]	diff \| blob \| history
src/utils/placeholders.ts	[moved from src/constants/placeholders.ts with 87% similarity]	diff \| blob \| history

RSS Atom

git clone https://git.99rst.org/PROJECT