@amaster.ai/pi-shared 0.1.2-beta.8 → 0.1.2-beta.80

package/dist/settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE;YAC9D,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;gBAAE,OAAO,MAAM,CAAC;YACzD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAI,QAAgB,EAAE,GAAW;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAe,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,OAAO,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAI,GAAW,EAAE,OAA2B;IACxE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1C,MAAM,cAAc,GAAG,mBAAmB,CAAI,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC;IAErF,MAAM,aAAa,GACjB,QAAQ,KAAK,SAAS;QACpB,CAAC,CAAE,EAAiB;QACpB,CAAC,CAAC,mBAAmB,CAAI,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC;IAEnE,MAAM,eAAe,GAAG,mBAAmB,CAAI,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC;IAEvF,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,aAAa,EAAE,GAAG,eAAe,EAAO,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAI,GAAW;IAC/C,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAW,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAI,OAA2B;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEjF,MAAM,cAAc,GAAG,kBAAkB,CAAI,SAAS,CAAC,CAAC;IACxD,MAAM,aAAa,GACjB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAE,EAAwB,CAAC,CAAC,CAAC,kBAAkB,CAAI,QAAQ,CAAC,CAAC;IACvF,MAAM,eAAe,GAAG,kBAAkB,CAAI,UAAU,CAAC,CAAC;IAE1D,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,aAAa,EAAE,GAAG,eAAe,EAAE,CAAC;AACrE,CAAC"}
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpD,MAAM,UAAU,gBAAgB,CAC9B,OAAgE;IAEhE,OAAO,OAAO,EAAE,gBAAgB,EAAE,EAAE,KAAK,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,iBAA0B;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC7F,OAAO,KAAK,CAAC,OAAO,CAClB,OAAO,EACP,CAAC,MAAM,EAAE,MAA0B,EAAE,IAAwB,EAAE,EAAE;YAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;gBAAE,OAAO,MAAM,CAAC;YACzD,OAAO,QAAQ,CAAC;QAClB,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAgB,EAChB,GAAW,EACX,OAA6E;IAE7E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,IAAI,OAAO,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAClF,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,CACL,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CACnE,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC/E,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,uDAAuD,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAAiB;IAC3C,OAAO,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAiB;IAChD,OAAO,OAAO,CACZ,QAAQ;QACN,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAI,GAAW,EAAE,OAA2B;IACxE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1C,MAAM,cAAc,GAAG,mBAAmB,CAAI,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE;QACnF,SAAS,EAAE,IAAI;QACf,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,KAAK,KAAK;KACxD,CAAC,CAAC;IAEH,MAAM,cAAc,GAClB,SAAS,KAAK,SAAS;QACrB,CAAC,CAAE,EAAiB;QACpB,CAAC,CAAC,mBAAmB,CAAI,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE;YAC5D,SAAS,EAAE,IAAI;YACf,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,KAAK,KAAK;SACxD,CAAC,CAAC;IAET,MAAM,eAAe,GACnB,OAAO,EAAE,cAAc,KAAK,IAAI;QAC9B,CAAC,CAAC,mBAAmB,CAAI,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE;YAC7D,SAAS,EAAE,KAAK;YAChB,iBAAiB,EAAE,KAAK;YACxB,MAAM,EAAE,OAAO,EAAE,qBAAqB,KAAK,IAAI;SAChD,CAAC;QACJ,CAAC,CAAE,EAAiB,CAAC;IAEzB,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,cAAc,EAAE,GAAG,eAAe,EAAO,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAI,GAAW;IAC/C,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAW,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAI,OAA2B;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEjF,MAAM,cAAc,GAAG,kBAAkB,CAAI,SAAS,CAAC,CAAC;IACxD,MAAM,cAAc,GAClB,eAAe,KAAK,SAAS;QAC3B,CAAC,CAAE,EAAwB;QAC3B,CAAC,CAAC,kBAAkB,CAAI,eAAe,CAAC,CAAC;IAC7C,MAAM,eAAe,GACnB,OAAO,EAAE,cAAc,KAAK,IAAI;QAC9B,CAAC,CAAC,kBAAkB,CAAI,UAAU,CAAC;QACnC,CAAC,CAAE,EAAwB,CAAC;IAEhC,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,cAAc,EAAE,GAAG,eAAe,EAAE,CAAC;AACtE,CAAC"}

package/dist/threat-patterns.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Shared threat-pattern library for memory content scanning.
+ *
+ * Covers prompt injection, role hijack, C2 framework names, exfiltration,
+ * persistence (SSH backdoor, agent-config edits), and invisible unicode.
+ *
+ * Pattern philosophy: anchor on attack-specific vocabulary or unambiguous
+ * attack behavior, NOT on bossy English.  Multi-word filler is allowed via
+ * `(?:\w+\s+)*` between key tokens so attackers can't bypass with
+ * synonyms ("ignore all prior instructions").
+ */
+type Scope = 'all' | 'context' | 'strict';
+/**
+ * Invisible / bidirectional unicode characters used in injection attacks.
+ */
+export declare const INVISIBLE_CHARS: ReadonlySet<string>;
+/**
+ * Return matched pattern IDs in `content` at the given scope.
+ *
+ * - `all`: classic injection + exfil only (lowest false-positive set).
+ * - `context`: adds promptware / C2 / role-play patterns.
+ * - `strict`: adds persistence / SSH backdoor / exfil-URL patterns.
+ *
+ * Invisible-unicode hits are reported as `invisible_unicode_U+XXXX`.
+ */
+export declare function scanForThreats(content: string, scope?: Scope): string[];
+/**
+ * Return a human-readable error string for the first threat in `content`,
+ * or `null` when clean.  Convenience wrapper for paths that block on first
+ * hit (memory writes).
+ */
+export declare function firstThreatMessage(content: string, scope?: Scope): string | null;
+export {};
+//# sourceMappingURL=threat-patterns.d.ts.map

package/dist/threat-patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-patterns.d.ts","sourceRoot":"","sources":["../src/threat-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,KAAK,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;AAmH1C;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAkB9C,CAAC;AA0BH;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,KAAiB,GAAG,MAAM,EAAE,CA0BlF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,KAAgB,GAAG,MAAM,GAAG,IAAI,CAW1F"}

package/dist/threat-patterns.js

@@ -0,0 +1,211 @@
+/**
+ * Shared threat-pattern library for memory content scanning.
+ *
+ * Covers prompt injection, role hijack, C2 framework names, exfiltration,
+ * persistence (SSH backdoor, agent-config edits), and invisible unicode.
+ *
+ * Pattern philosophy: anchor on attack-specific vocabulary or unambiguous
+ * attack behavior, NOT on bossy English.  Multi-word filler is allowed via
+ * `(?:\w+\s+)*` between key tokens so attackers can't bypass with
+ * synonyms ("ignore all prior instructions").
+ */
+const RAW_PATTERNS = [
+    // Classic prompt injection (applies everywhere)
+    [
+        String.raw `ignore\s+(?:\w+\s+)*(previous|all|above|prior)\s+(?:\w+\s+)*instructions`,
+        'prompt_injection',
+        'all',
+    ],
+    [String.raw `system\s+prompt\s+override`, 'sys_prompt_override', 'all'],
+    [
+        String.raw `disregard\s+(?:\w+\s+)*(your|all|any)\s+(?:\w+\s+)*(instructions|rules|guidelines)`,
+        'disregard_rules',
+        'all',
+    ],
+    [
+        String.raw `act\s+as\s+(if|though)\s+(?:\w+\s+)*you\s+(?:\w+\s+)*(have\s+no|don't\s+have)\s+(?:\w+\s+)*(restrictions|limits|rules)`,
+        'bypass_restrictions',
+        'all',
+    ],
+    ['<!--[^>]*(?:ignore|override|system|secret|hidden)[^>]*-->', 'html_comment_injection', 'all'],
+    [String.raw `<\s*div\s+style\s*=\s*["'][\s\S]*?display\s*:\s*none`, 'hidden_div', 'all'],
+    [String.raw `translate\s+.*\s+into\s+.*\s+and\s+(execute|run|eval)`, 'translate_execute', 'all'],
+    [String.raw `do\s+not\s+(?:\w+\s+)*tell\s+(?:\w+\s+)*the\s+user`, 'deception_hide', 'all'],
+    // Role-play / identity hijack (context + strict)
+    [String.raw `you\s+are\s+(?:\w+\s+)*now\s+(?:a|an|the)\s+`, 'role_hijack', 'context'],
+    [String.raw `pretend\s+(?:\w+\s+)*(you\s+are|to\s+be)\s+`, 'role_pretend', 'context'],
+    [String.raw `output\s+(?:\w+\s+)*(system|initial)\s+prompt`, 'leak_system_prompt', 'context'],
+    [
+        String.raw `(respond|answer|reply)\s+without\s+(?:\w+\s+)*(restrictions|limitations|filters|safety)`,
+        'remove_filters',
+        'context',
+    ],
+    [
+        String.raw `you\s+have\s+been\s+(?:\w+\s+)*(updated|upgraded|patched)\s+to`,
+        'fake_update',
+        'context',
+    ],
+    [String.raw `\bname\s+yourself\s+\w+`, 'identity_override', 'context'],
+    // C2 / Brainworm-style promptware
+    [String.raw `register\s+(as\s+)?a?\s*node`, 'c2_node_registration', 'context'],
+    [String.raw `(heartbeat|beacon|check[\s\-]?in)\s+(to|with)\s+`, 'c2_heartbeat', 'context'],
+    [String.raw `pull\s+(down\s+)?(?:new\s+)?task(?:ing|s)?\b`, 'c2_task_pull', 'context'],
+    [String.raw `connect\s+to\s+the\s+network\b`, 'c2_network_connect', 'context'],
+    [
+        String.raw `you\s+must\s+(?:\w+\s+){0,3}(register|connect|report|beacon)\b`,
+        'forced_action',
+        'context',
+    ],
+    [String.raw `only\s+use\s+one[\s\-]?liners?\b`, 'anti_forensic_oneliner', 'context'],
+    [
+        String.raw `never\s+(?:\w+\s+)*(?:create|write)\s+(?:\w+\s+)*(?:script|file)\s+(?:\w+\s+)*disk`,
+        'anti_forensic_disk',
+        'context',
+    ],
+    [
+        String.raw `unset\s+\w*(?:CLAUDE|CODEX|HERMES|AGENT|OPENAI|ANTHROPIC|PI)\w*`,
+        'env_var_unset_agent',
+        'context',
+    ],
+    // Known C2 framework names
+    [
+        String.raw `\b(?:praxis|cobalt\s*strike|sliver|havoc|mythic|metasploit|brainworm)\b`,
+        'known_c2_framework',
+        'context',
+    ],
+    [String.raw `\bc2\s+(?:server|channel|infrastructure|beacon)\b`, 'c2_explicit', 'context'],
+    [String.raw `\bcommand\s+and\s+control\b`, 'c2_explicit_long', 'context'],
+    // Exfiltration via curl/wget/cat with secrets
+    [
+        String.raw `curl\s+[^\n]*\$\{?\w*(KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|API)`,
+        'exfil_curl',
+        'all',
+    ],
+    [
+        String.raw `wget\s+[^\n]*\$\{?\w*(KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|API)`,
+        'exfil_wget',
+        'all',
+    ],
+    [
+        String.raw `cat\s+[^\n]*(\.env|credentials|\.netrc|\.pgpass|\.npmrc|\.pypirc)`,
+        'read_secrets',
+        'all',
+    ],
+    [String.raw `(send|post|upload|transmit)\s+.*\s+(to|at)\s+https?://`, 'send_to_url', 'strict'],
+    [
+        String.raw `(include|output|print|share)\s+(?:\w+\s+)*(conversation|chat\s+history|previous\s+messages|full\s+context|entire\s+context)`,
+        'context_exfil',
+        'strict',
+    ],
+    // Persistence / SSH backdoor (strict scope)
+    ['authorized_keys', 'ssh_backdoor', 'strict'],
+    [String.raw `\$HOME/\.ssh|~/\.ssh`, 'ssh_access', 'strict'],
+    [String.raw `\$HOME/\.pi/\.env|~/\.pi/\.env`, 'pi_env', 'strict'],
+    [
+        String.raw `(update|modify|edit|write|change|append|add\s+to)\s+.*(?:AGENTS\.md|CLAUDE\.md|\.cursorrules|\.clinerules)`,
+        'agent_config_mod',
+        'strict',
+    ],
+    // Hardcoded secrets
+    [
+        String.raw `(?:api[_-]?key|token|secret|password)\s*[=:]\s*["'][A-Za-z0-9+/=_-]{20,}`,
+        'hardcoded_secret',
+        'strict',
+    ],
+];
+/**
+ * Invisible / bidirectional unicode characters used in injection attacks.
+ */
+export const INVISIBLE_CHARS = new Set([
+    '​', // zero-width space
+    '‌', // zero-width non-joiner
+    '‍', // zero-width joiner
+    '⁠', // word joiner
+    '⁢', // invisible times
+    '⁣', // invisible separator
+    '⁤', // invisible plus
+    '', // zero-width no-break space (BOM)
+    '‪', // left-to-right embedding
+    '‫', // right-to-left embedding
+    '‬', // pop directional formatting
+    '‭', // left-to-right override
+    '‮', // right-to-left override
+    '⁦', // left-to-right isolate
+    '⁧', // right-to-left isolate
+    '⁨', // first strong isolate
+    '⁩', // pop directional isolate
+]);
+function buildScopeSets() {
+    const all = [];
+    const context = [];
+    const strict = [];
+    for (const [pattern, id, scope] of RAW_PATTERNS) {
+        const compiled = [new RegExp(pattern, 'i'), id];
+        if (scope === 'all') {
+            all.push(compiled);
+            context.push(compiled);
+            strict.push(compiled);
+        }
+        else if (scope === 'context') {
+            context.push(compiled);
+            strict.push(compiled);
+        }
+        else {
+            strict.push(compiled);
+        }
+    }
+    return { all, context, strict };
+}
+const COMPILED = buildScopeSets();
+/**
+ * Return matched pattern IDs in `content` at the given scope.
+ *
+ * - `all`: classic injection + exfil only (lowest false-positive set).
+ * - `context`: adds promptware / C2 / role-play patterns.
+ * - `strict`: adds persistence / SSH backdoor / exfil-URL patterns.
+ *
+ * Invisible-unicode hits are reported as `invisible_unicode_U+XXXX`.
+ */
+export function scanForThreats(content, scope = 'context') {
+    if (!content) {
+        return [];
+    }
+    const findings = [];
+    for (const ch of content) {
+        if (INVISIBLE_CHARS.has(ch)) {
+            const code = ch.codePointAt(0).toString(16).toUpperCase().padStart(4, '0');
+            const finding = `invisible_unicode_U+${code}`;
+            if (!findings.includes(finding)) {
+                findings.push(finding);
+            }
+        }
+    }
+    const patterns = COMPILED[scope];
+    if (!patterns) {
+        throw new Error(`scanForThreats: unknown scope '${scope}'`);
+    }
+    for (const [regex, id] of patterns) {
+        if (regex.test(content)) {
+            findings.push(id);
+        }
+    }
+    return findings;
+}
+/**
+ * Return a human-readable error string for the first threat in `content`,
+ * or `null` when clean.  Convenience wrapper for paths that block on first
+ * hit (memory writes).
+ */
+export function firstThreatMessage(content, scope = 'strict') {
+    const findings = scanForThreats(content, scope);
+    if (findings.length === 0) {
+        return null;
+    }
+    const id = findings[0];
+    if (id.startsWith('invisible_unicode_')) {
+        const codepoint = id.replace('invisible_unicode_', '');
+        return `Blocked: content contains invisible unicode character ${codepoint} (possible injection).`;
+    }
+    return `Blocked: content matches threat pattern '${id}'. Content is injected into the system prompt and must not contain injection or exfiltration payloads.`;
+}
+//# sourceMappingURL=threat-patterns.js.map

package/dist/threat-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-patterns.js","sourceRoot":"","sources":["../src/threat-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,MAAM,YAAY,GAA0B;IAC1C,gDAAgD;IAChD;QACE,MAAM,CAAC,GAAG,CAAA,0EAA0E;QACpF,kBAAkB;QAClB,KAAK;KACN;IACD,CAAC,MAAM,CAAC,GAAG,CAAA,4BAA4B,EAAE,qBAAqB,EAAE,KAAK,CAAC;IACtE;QACE,MAAM,CAAC,GAAG,CAAA,oFAAoF;QAC9F,iBAAiB;QACjB,KAAK;KACN;IACD;QACE,MAAM,CAAC,GAAG,CAAA,wHAAwH;QAClI,qBAAqB;QACrB,KAAK;KACN;IACD,CAAC,2DAA2D,EAAE,wBAAwB,EAAE,KAAK,CAAC;IAC9F,CAAC,MAAM,CAAC,GAAG,CAAA,sDAAsD,EAAE,YAAY,EAAE,KAAK,CAAC;IACvF,CAAC,MAAM,CAAC,GAAG,CAAA,uDAAuD,EAAE,mBAAmB,EAAE,KAAK,CAAC;IAC/F,CAAC,MAAM,CAAC,GAAG,CAAA,oDAAoD,EAAE,gBAAgB,EAAE,KAAK,CAAC;IAEzF,iDAAiD;IACjD,CAAC,MAAM,CAAC,GAAG,CAAA,8CAA8C,EAAE,aAAa,EAAE,SAAS,CAAC;IACpF,CAAC,MAAM,CAAC,GAAG,CAAA,6CAA6C,EAAE,cAAc,EAAE,SAAS,CAAC;IACpF,CAAC,MAAM,CAAC,GAAG,CAAA,+CAA+C,EAAE,oBAAoB,EAAE,SAAS,CAAC;IAC5F;QACE,MAAM,CAAC,GAAG,CAAA,yFAAyF;QACnG,gBAAgB;QAChB,SAAS;KACV;IACD;QACE,MAAM,CAAC,GAAG,CAAA,gEAAgE;QAC1E,aAAa;QACb,SAAS;KACV;IACD,CAAC,MAAM,CAAC,GAAG,CAAA,yBAAyB,EAAE,mBAAmB,EAAE,SAAS,CAAC;IAErE,kCAAkC;IAClC,CAAC,MAAM,CAAC,GAAG,CAAA,8BAA8B,EAAE,sBAAsB,EAAE,SAAS,CAAC;IAC7E,CAAC,MAAM,CAAC,GAAG,CAAA,kDAAkD,EAAE,cAAc,EAAE,SAAS,CAAC;IACzF,CAAC,MAAM,CAAC,GAAG,CAAA,8CAA8C,EAAE,cAAc,EAAE,SAAS,CAAC;IACrF,CAAC,MAAM,CAAC,GAAG,CAAA,gCAAgC,EAAE,oBAAoB,EAAE,SAAS,CAAC;IAC7E;QACE,MAAM,CAAC,GAAG,CAAA,gEAAgE;QAC1E,eAAe;QACf,SAAS;KACV;IACD,CAAC,MAAM,CAAC,GAAG,CAAA,kCAAkC,EAAE,wBAAwB,EAAE,SAAS,CAAC;IACnF;QACE,MAAM,CAAC,GAAG,CAAA,oFAAoF;QAC9F,oBAAoB;QACpB,SAAS;KACV;IACD;QACE,MAAM,CAAC,GAAG,CAAA,iEAAiE;QAC3E,qBAAqB;QACrB,SAAS;KACV;IAED,2BAA2B;IAC3B;QACE,MAAM,CAAC,GAAG,CAAA,yEAAyE;QACnF,oBAAoB;QACpB,SAAS;KACV;IACD,CAAC,MAAM,CAAC,GAAG,CAAA,mDAAmD,EAAE,aAAa,EAAE,SAAS,CAAC;IACzF,CAAC,MAAM,CAAC,GAAG,CAAA,6BAA6B,EAAE,kBAAkB,EAAE,SAAS,CAAC;IAExE,8CAA8C;IAC9C;QACE,MAAM,CAAC,GAAG,CAAA,iEAAiE;QAC3E,YAAY;QACZ,KAAK;KACN;IACD;QACE,MAAM,CAAC,GAAG,CAAA,iEAAiE;QAC3E,YAAY;QACZ,KAAK;KACN;IACD;QACE,MAAM,CAAC,GAAG,CAAA,mEAAmE;QAC7E,cAAc;QACd,KAAK;KACN;IACD,CAAC,MAAM,CAAC,GAAG,CAAA,wDAAwD,EAAE,aAAa,EAAE,QAAQ,CAAC;IAC7F;QACE,MAAM,CAAC,GAAG,CAAA,6HAA6H;QACvI,eAAe;QACf,QAAQ;KACT;IAED,4CAA4C;IAC5C,CAAC,iBAAiB,EAAE,cAAc,EAAE,QAAQ,CAAC;IAC7C,CAAC,MAAM,CAAC,GAAG,CAAA,sBAAsB,EAAE,YAAY,EAAE,QAAQ,CAAC;IAC1D,CAAC,MAAM,CAAC,GAAG,CAAA,gCAAgC,EAAE,QAAQ,EAAE,QAAQ,CAAC;IAChE;QACE,MAAM,CAAC,GAAG,CAAA,4GAA4G;QACtH,kBAAkB;QAClB,QAAQ;KACT;IAED,oBAAoB;IACpB;QACE,MAAM,CAAC,GAAG,CAAA,0EAA0E;QACpF,kBAAkB;QAClB,QAAQ;KACT;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IAC1D,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,oBAAoB;IACzB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,kBAAkB;IACvB,GAAG,EAAE,sBAAsB;IAC3B,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,kCAAkC;IACvC,GAAG,EAAE,0BAA0B;IAC/B,GAAG,EAAE,0BAA0B;IAC/B,GAAG,EAAE,6BAA6B;IAClC,GAAG,EAAE,yBAAyB;IAC9B,GAAG,EAAE,yBAAyB;IAC9B,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,uBAAuB;IAC5B,GAAG,EAAE,0BAA0B;CAChC,CAAC,CAAC;AAIH,SAAS,cAAc;IACrB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAoB,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;AAElC;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,QAAe,SAAS;IACtE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,uBAAuB,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,QAAe,QAAQ;IACzE,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IACxB,IAAI,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO,yDAAyD,SAAS,wBAAwB,CAAC;IACpG,CAAC;IACD,OAAO,4CAA4C,EAAE,wGAAwG,CAAC;AAChK,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/pi-shared",
-  "version": "0.1.2-beta.8",
+  "version": "0.1.2-beta.80",
   "license": "Apache-2.0",
   "type": "module",
   "sideEffects": false,
@@ -15,6 +15,10 @@
       "types": "./dist/settings.d.ts",
       "default": "./dist/settings.js"
     },
+    "./threat-patterns": {
+      "types": "./dist/threat-patterns.d.ts",
+      "default": "./dist/threat-patterns.js"
+    },
     "./package.json": {
       "default": "./package.json"
     }