@agentvault/agentvault 0.15.1 → 0.15.3

package/dist/index.js

@@ -45348,6 +45348,50 @@ var init_scan_engine = __esm({
        * Runs api_keys, pii_*, prompt_injection, and shell_injection checks
        * regardless of rule direction.
        */
+      /**
+       * Scan a SKILL.md file for policy violations.
+       * Like scanWorkspaceFile but skips prompt_injection on instruction body
+       * (skills legitimately describe AI behaviors that look like injection).
+       * Checks: api_keys (block), shell_injection (block), pii (flag).
+       */
+      static scanSkillMd(content) {
+        const violations = [];
+        let blocked = false;
+        let flagged = false;
+        const checks = [
+          { id: "api_keys", action: "block" },
+          { id: "shell_injection", action: "block" },
+          { id: "pii_ssn", action: "flag" },
+          { id: "pii_credit_card", action: "flag" },
+          { id: "pii_email", action: "flag" }
+          // Intentionally omits prompt_injection — SKILL.md instruction body
+          // legitimately contains phrases like "you are now a..."
+        ];
+        for (const check2 of checks) {
+          const patterns = BUILTIN_PATTERNS[check2.id];
+          if (!patterns)
+            continue;
+          for (const p2 of patterns) {
+            const regex = new RegExp(p2.source, p2.flags);
+            if (regex.test(content)) {
+              violations.push({
+                rule_id: `skill_${check2.id}`,
+                rule_name: check2.id,
+                action: check2.action,
+                scanner_type: "builtin",
+                match_summary: `builtin:${check2.id}`
+              });
+              if (check2.action === "block")
+                blocked = true;
+              if (check2.action === "flag")
+                flagged = true;
+              break;
+            }
+          }
+        }
+        const status = blocked ? "blocked" : flagged ? "flagged" : "clean";
+        return { status, violations };
+      }
       static scanWorkspaceFile(content) {
         const violations = [];
         let blocked = false;
@@ -46727,7 +46771,7 @@ function migratePersistedState(raw) {
     messageHistory: []
   };
 }
-var POLL_INTERVAL_MS, RECONNECT_BASE_MS, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, SecureChannel;
+var ROOM_AGENT_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, SecureChannel;
 var init_channel = __esm({
   async "src/channel.ts"() {
     "use strict";
@@ -46736,6 +46780,13 @@ var init_channel = __esm({
     await init_crypto_helpers();
     await init_state();
     init_transport2();
+    ROOM_AGENT_TYPES = /* @__PURE__ */ new Set([
+      "message",
+      "text",
+      "decision_request",
+      "decision_response",
+      "artifact_share"
+    ]);
     POLL_INTERVAL_MS = 6e3;
     RECONNECT_BASE_MS = 1e3;
     RECONNECT_MAX_MS = 3e4;
@@ -49279,6 +49330,9 @@ ${messageText}`;
           messageType = "message";
           messageText = plaintext;
         }
+        if (!ROOM_AGENT_TYPES.has(messageType)) {
+          return;
+        }
         if (!session.activated) {
           session.activated = true;
           console.log(
@@ -49297,7 +49351,9 @@ ${messageText}`;
           conversationId: convId,
           timestamp: msgData.created_at ?? (/* @__PURE__ */ new Date()).toISOString(),
           messageType,
-          roomId: msgData.room_id
+          roomId: msgData.room_id,
+          senderDeviceId: msgData.sender_device_id,
+          roomName: this._persisted?.rooms?.[msgData.room_id]?.name
         };
         this.emit("room_message", {
           roomId: msgData.room_id,
@@ -49472,6 +49528,9 @@ ${messageText}`;
           messageType = "message";
           messageText = plaintext;
         }
+        if (!ROOM_AGENT_TYPES.has(messageType)) {
+          return;
+        }
         if (msgData.message_id) {
           this._sendAck(msgData.message_id);
         }
@@ -49484,7 +49543,9 @@ ${messageText}`;
           conversationId: "",
           timestamp: msgData.created_at ?? (/* @__PURE__ */ new Date()).toISOString(),
           messageType,
-          roomId: msgData.room_id
+          roomId: msgData.room_id,
+          senderDeviceId: msgData.sender_device_id,
+          roomName: this._persisted?.rooms?.[msgData.room_id]?.name
         };
         this.emit("room_message", {
           roomId: msgData.room_id,