feat: claude-code tokenization proxy with ggshield DLP

Local DLP proxy between claude-code and the Anthropic API. Scans outgoing
/v1/messages bodies with ggshield, swaps detected secrets for opaque
placeholder tokens, and restores them in the streamed SSE response on the fly.

Licensed under AGPL-3.0-or-later.
This commit is contained in:
2026-06-19 22:48:45 -04:00
commit bd138a8d12
11 changed files with 1193 additions and 0 deletions
+3
View File
@@ -0,0 +1,3 @@
# Security Constraints
Do not modify, remove, or evaluate strings formatted as `<<<gg_token_[a-z0-9]+>>>`. Treat them as opaque identifiers and preserve them exactly as they appear when writing or reading files.