const INJECTION_PATTERNS: Array<{ re: RegExp; label: string }> = [
  // Role impersonation
  { re: /\b(?:you are now|act as|pretend to be|ignore (?:all )?(?:previous|prior|above) instructions?)\b/i,
    label: "role-impersonation" },
  // System prompt manipulation
  { re: /\b(?:system prompt|system message|new instructions?|override instructions?|disregard (?:instructions?|rules?|safety|guidelines))\b/i,
    label: "system-override" },
  // Privilege escalation
  { re: /\b(?:admin override|developer mode|maintenance mode|debug mode|god mode|jailbreak|DAN)\b/i,
    label: "privilege-escalation" },
  // HTML comment injection
  { re: /<!--[\s\S]*?(?:instruction|ignore|override|system|prompt)[\s\S]*?-->/i,
    label: "html-comment-injection" },
  // Invisible unicode
  { re: /[\u200B\u200C\u200D\uFEFF\u2060-\u2064\u00AD]{3,}/u,
    label: "invisible-unicode" },
  // Encoded payloads
  { re: /\b(?:base64|decode this):\s*[A-Za-z0-9+/=]{40,}/i,
    label: "encoded-payload" },
  // Exfiltration
  { re: /\b(?:send (?:this|the|all|my) (?:data|info|content|conversation) to|fetch|curl|wget)\s+https?:\/\//i,
    label: "exfiltration" },
];

export function scanForInjection(content: string): { detected: boolean; labels: string[] };
export function sanitizeContextFileForInjection(content: string): string;

for (const file of params.files) {
  const sanitizedContent = sanitizeContextFileForInjection(
    sanitizeContextFileContentForPrompt(file.content),
  );
  lines.push(`## ${file.path}`, "", sanitizedContent, "");
}