@agentvault/agentvault 0.14.7 → 0.14.8

package/dist/crypto-helpers.js

@@ -0,0 +1,4 @@
+// Re-export transport utilities from shared @agentvault/crypto package.
+// Plugin code continues importing from ./crypto-helpers.js — no import changes needed.
+export { hexToBytes, bytesToHex, base64ToBytes, bytesToBase64, encryptedMessageToTransport, transportToEncryptedMessage, } from "@agentvault/crypto";
+//# sourceMappingURL=crypto-helpers.js.map

package/dist/crypto-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-helpers.js","sourceRoot":"","sources":["../src/crypto-helpers.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,uFAAuF;AACvF,OAAO,EACL,UAAU,EACV,UAAU,EACV,aAAa,EACb,aAAa,EACb,2BAA2B,EAC3B,2BAA2B,GAE5B,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -45102,6 +45102,22 @@ var init_scan_engine = __esm({
         /\bghp_[a-zA-Z0-9]{36,}\b/g,
         /\bglpat-[a-zA-Z0-9_-]{20,}\b/g,
         /\bxoxb-[0-9]+-[0-9]+-[a-zA-Z0-9]+\b/g
+      ],
+      prompt_injection: [
+        /\bignore\s+(?:all\s+)?(?:previous|above|prior)\s+instructions\b/gi,
+        /\byou\s+are\s+now\s+(?:a|an)\s+/gi,
+        /\bsystem\s*:\s*you\b/gi,
+        /\bDAN\s+mode\b/gi,
+        /\bdo\s+anything\s+now\b/gi,
+        /\bdo\s+not\s+follow\s+any\s+(?:other\s+)?rules\b/gi,
+        /\bjailbreak\b/gi
+      ],
+      shell_injection: [
+        /\bcurl\s+.*\|\s*(?:sh|bash|zsh)\b/gi,
+        /\beval\s*\(/gi,
+        /\bexec\s*\(/gi,
+        /\bchmod\s+\+x\b/gi,
+        /\brm\s+-rf\s+\//gi
       ]
     };
     ScanEngine = class {
@@ -45213,6 +45229,24 @@ var init_scan_engine = __esm({
           }
           return false;
         }
+        if (builtinId === "prompt_injection") {
+          const patterns = BUILTIN_PATTERNS.prompt_injection;
+          for (const p2 of patterns) {
+            const regex = new RegExp(p2.source, p2.flags);
+            if (regex.test(text))
+              return true;
+          }
+          return false;
+        }
+        if (builtinId === "shell_injection") {
+          const patterns = BUILTIN_PATTERNS.shell_injection;
+          for (const p2 of patterns) {
+            const regex = new RegExp(p2.source, p2.flags);
+            if (regex.test(text))
+              return true;
+          }
+          return false;
+        }
         return false;
       }
       _buildMatchSummary(rule) {
@@ -45232,6 +45266,48 @@ var init_scan_engine = __esm({
       _escapeRegex(str) {
         return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
       }
+      /**
+       * Scan a workspace file (e.g. SOUL.md) against all builtin patterns.
+       * Runs api_keys, pii_*, prompt_injection, and shell_injection checks
+       * regardless of rule direction.
+       */
+      static scanWorkspaceFile(content) {
+        const violations = [];
+        let blocked = false;
+        let flagged = false;
+        const checks = [
+          { id: "api_keys", action: "block" },
+          { id: "prompt_injection", action: "block" },
+          { id: "shell_injection", action: "block" },
+          { id: "pii_ssn", action: "flag" },
+          { id: "pii_credit_card", action: "flag" },
+          { id: "pii_email", action: "flag" }
+        ];
+        for (const check of checks) {
+          const patterns = BUILTIN_PATTERNS[check.id];
+          if (!patterns)
+            continue;
+          for (const p2 of patterns) {
+            const regex = new RegExp(p2.source, p2.flags);
+            if (regex.test(content)) {
+              violations.push({
+                rule_id: `workspace_${check.id}`,
+                rule_name: check.id,
+                action: check.action,
+                scanner_type: "builtin",
+                match_summary: `builtin:${check.id}`
+              });
+              if (check.action === "block")
+                blocked = true;
+              if (check.action === "flag")
+                flagged = true;
+              break;
+            }
+          }
+        }
+        const status = blocked ? "blocked" : flagged ? "flagged" : "clean";
+        return { status, violations };
+      }
     };
   }
 });