Security & Redaction

from praisonaiagents import Agent

agent = Agent(
    name="secure-agent",
    instructions="Redact sensitive data from context before processing.",
)
agent.start("Process this document and redact all PII.")

from praisonaiagents import Agent
from praisonaiagents.trace.redact import enable_pii_redaction

# Register once at process start — all agents in this process
# now have their outgoing messages scrubbed before hitting the LLM.
enable_pii_redaction()

agent = Agent(
    name="Assistant",
    instructions="You are a helpful assistant.",
)
agent.chat("My api_key=sk-ABCDEF12345 and password=hunter2 — help me debug?")
# → the literal secret is replaced with [REDACTED] before the request goes out.

from praisonaiagents.trace.redact import redact_string

dsn = "postgres://admin:hunter2@db.internal:5432/app"
print(redact_string(dsn))
# postgres://[REDACTED]@db.internal:5432/app

from praisonaiagents import Agent
from praisonaiagents.trace.redact import enable_pii_redaction

enable_pii_redaction()  # once at process start

agent = Agent(name="Ops", instructions="Help debug this connection.")
agent.chat("Our DB is postgres://admin:hunter2@db.internal/app — why does it time out?")
# The payload reaching the LLM contains postgres://[REDACTED]@db.internal/app

from praisonaiagents.context import redact_sensitive

text = "My API key is sk-abc123def456ghi789"
safe = redact_sensitive(text)
# "My API key is [REDACTED]"

from praisonaiagents import validate_monitor_path

# Cross-platform absolute detection (both POSIX and Windows drives)
validate_monitor_path("/etc/passwd")             # (False, "Absolute paths not allowed ...")
validate_monitor_path("C:\\Windows\\System32")   # (False, "Absolute paths not allowed ...")

# Home reference is blocked
validate_monitor_path("~/context.txt")           # (False, "Suspicious path pattern: ~")

# Drive-relative paths are treated as RELATIVE, not absolute
validate_monitor_path("C:context.txt")           # (True, "")

# Relative paths containing suspicious substrings are accepted
validate_monitor_path("myapp/home/config.txt")   # (True, "")
validate_monitor_path("project/users/ctx.txt")   # (True, "")

# Defence-in-depth: sensitive roots stay blocked even with allow_absolute=True
validate_monitor_path("/etc/passwd", allow_absolute=True)
# (False, "Suspicious path pattern: /etc/")

# A benign absolute path is allowed when opted in
validate_monitor_path("/tmp/context.txt", allow_absolute=True)  # (True, "")

from praisonaiagents import (
    should_include_content,
    load_ignore_patterns,
)

# Load patterns from files
ignore, include = load_ignore_patterns(".")

# Check if file should be included
if should_include_content("secret.key", ignore, include):
    # Include in snapshot
    pass

# Ignore patterns (glob)
*.key
*.pem
*.env
secrets/
node_modules/

# Include patterns (whitelist)
*.py
*.js
*.md

config = ManagerConfig(
    redact_sensitive=True,       # Enable redaction
    allow_absolute_paths=False,  # Block absolute paths
    monitor_path="./context.txt",
)

export PRAISONAI_CONTEXT_REDACT=true

# Human format
# API key: [REDACTED]

# JSON format
# {"content": "API key: [REDACTED]"}

from praisonaiagents.context.monitor import SENSITIVE_PATTERNS

# Add custom pattern
SENSITIVE_PATTERNS.append(r'my-custom-token-[a-z0-9]+')