prompt-sanitizer

npm install prompt-sanitizer

# optional: local NER support (SMART/FULL mode)
npm install @huggingface/transformers

# optional: realistic fake replacements
npm install @faker-js/faker

from prompt_sanitizer import Mode, Sanitizer, SQLiteAuditLog

# ── FAST mode (default) ────────────────────────────────────
s = Sanitizer()
result = s.sanitize("Hi, I'm Alice. My email is alice@example.com")
print(result.text)      # "Hi, I'm [PERSON_1]. My email is [EMAIL_1]"
print(result.entities)  # [DetectedEntity(type=PERSON, value="Alice"), ...]

# ── Bidirectional session ──────────────────────────────────
session = s.session()
clean = session.anonymize("Call Alice at (415) 867-5309")
reply = call_llm(clean)             # LLM sees "[PERSON_1]" not "Alice"
final = session.deanonymize(reply)  # originals restored in the response

# ── FULL mode with audit log ───────────────────────────────
audit = SQLiteAuditLog("./audit.db")
full  = Sanitizer(mode=Mode.FULL, audit_log=audit)
full.sanitize("Contact alice@example.com re: claim 123-45-6789")
print(audit.export(format="json", since="1d"))

import { generateText } from "ai";
import { openai } from "@ai-sdk/openai";
import { Sanitizer } from "prompt-sanitizer";
import { wrapGenerate } from "prompt-sanitizer/integrations/vercel-ai";

const sanitizer = new Sanitizer();
const safeGenerate = wrapGenerate(sanitizer, generateText);

// PII is sanitized before sending, restored in the response
const { text } = await safeGenerate({
  model: openai("gpt-4o"),
  prompt: "My email is alice@example.com. Summarize this.",
});