feat: claude-code tokenization proxy with ggshield DLP

Local DLP proxy between claude-code and the Anthropic API. Scans outgoing
/v1/messages bodies with ggshield, swaps detected secrets for opaque
placeholder tokens, and restores them in the streamed SSE response on the fly.

Licensed under AGPL-3.0-or-later.

package.json

@@ -0,0 +1,21 @@
+{
+  "name": "claude-tokenization-proxy",
+  "version": "1.0.0",
+  "private": true,
+  "description": "Local DLP/tokenization proxy that strips secrets out of claude-code traffic via ggshield and restores them on the way back.",
+  "license": "AGPL-3.0-or-later",
+  "type": "module",
+  "engines": {
+    "node": ">=23.6"
+  },
+  "scripts": {
+    "start": "node src/index.ts",
+    "dev": "node --watch src/index.ts",
+    "test": "node src/detokenize.ts --test",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@types/node": "^24",
+    "typescript": "^5.6"
+  }
+}