rag-ultimate

const COMBINED_INJECTION_PATTERN = new RegExp(
  [
    /ignore (all|any|previous) instructions/gi,
    /system prompt/gi,
    /developer message/gi,
    /reveal hidden prompt/gi,
    /do not follow previous/gi,
    /you are chatgpt/gi,
    /act as if/gi,
  ].map(p => p.source).join("|"),
  "gi",
);

const QUICK_EXIT_PATTERNS = [
  "ignore all instructions", "ignore any instructions", "ignore previous instructions",
  "system prompt", "developer message", "reveal hidden prompt",
  "do not follow previous", "you are chatgpt", "act as if",
];

export function sanitizePrompt(input: string): string {
  const lower = input.toLowerCase();
  for (let i = 0; i < QUICK_EXIT_PATTERNS.length; i++) {
    if (lower.includes(QUICK_EXIT_PATTERNS[i])) {
      return input.replace(COMBINED_INJECTION_PATTERN, "[FILTERED]");
    }
  }
  return input;
}