@aquaclawai/aquarium 1.0.0

package/dist/services/output-filter.js

@@ -0,0 +1,230 @@
+const REDACTED = '[REDACTED]';
+const BLOCKED_MESSAGE = '[此消息因包含敏感信息被安全策略拦截]';
+// min credential length to index (avoid short-value false positives)
+const MIN_CREDENTIAL_LENGTH = 8;
+// Min chunk length for workspace content indexing (avoids false positives on short common phrases)
+const MIN_WORKSPACE_CHUNK_LENGTH = 40;
+// Number of chunk matches required to consider it a system prompt dump
+const WORKSPACE_CHUNK_MATCH_THRESHOLD = 3;
+// ── Credential Index (in-memory, per instance) ──
+const credentialIndexes = new Map();
+export function buildCredentialIndex(instanceId, credentialValues) {
+    const index = new Set();
+    for (const value of credentialValues) {
+        if (value.length >= MIN_CREDENTIAL_LENGTH) {
+            index.add(value);
+        }
+    }
+    if (index.size > 0) {
+        credentialIndexes.set(instanceId, index);
+    }
+}
+export function clearCredentialIndex(instanceId) {
+    credentialIndexes.delete(instanceId);
+}
+export function getCredentialIndex(instanceId) {
+    return credentialIndexes.get(instanceId);
+}
+// ── Workspace Content Index (per instance) ──
+// Stores meaningful text chunks from workspace files (SOUL.md, AGENTS.md, etc.)
+// so the output filter can detect when the AI dumps its system prompt verbatim.
+const workspaceContentIndexes = new Map();
+function extractChunks(content, minLength) {
+    const chunks = [];
+    const lines = content.split('\n');
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (trimmed.length >= minLength && !trimmed.startsWith('#') && !trimmed.startsWith('<!--') && !trimmed.startsWith('```')) {
+            chunks.push(trimmed);
+        }
+    }
+    return chunks;
+}
+export function buildWorkspaceContentIndex(instanceId, workspaceFiles) {
+    const allChunks = [];
+    for (const content of Object.values(workspaceFiles)) {
+        if (content) {
+            allChunks.push(...extractChunks(content, MIN_WORKSPACE_CHUNK_LENGTH));
+        }
+    }
+    if (allChunks.length > 0) {
+        workspaceContentIndexes.set(instanceId, allChunks);
+    }
+}
+export function clearWorkspaceContentIndex(instanceId) {
+    workspaceContentIndexes.delete(instanceId);
+}
+// ── API Key patterns (compiled once) ──
+const API_KEY_PATTERNS = [
+    { re: /sk-[A-Za-z0-9]{20,}/g, label: 'OpenAI' },
+    { re: /sk-ant-[A-Za-z0-9-]{20,}/g, label: 'Anthropic' },
+    { re: /ghp_[A-Za-z0-9]{36,}/g, label: 'GitHub PAT' },
+    { re: /gho_[A-Za-z0-9]{36,}/g, label: 'GitHub OAuth' },
+    { re: /github_pat_[A-Za-z0-9_]{22,}/g, label: 'GitHub Fine-grained PAT' },
+    { re: /AKIA[0-9A-Z]{16}/g, label: 'AWS Access Key' },
+    { re: /xoxb-[0-9]{10,}-[0-9]+-[A-Za-z0-9]+/g, label: 'Slack Bot Token' },
+    { re: /xoxp-[0-9]{10,}-[0-9]+-[0-9]+-[a-f0-9]+/g, label: 'Slack User Token' },
+    { re: /(?<=^|[^A-Za-z0-9])[A-Za-z0-9]{32,}(?=[^A-Za-z0-9]|$)/g, label: 'Generic Long Token' },
+];
+// ── System prompt leak detection ──
+// Fragments from SOUL.md security paragraphs that should never appear in agent output
+const SYSTEM_PROMPT_FRAGMENTS = [
+    '<!-- SECURITY SECTION',
+    '<!-- END SECURITY SECTION -->',
+    '<!-- CIT-122: Trust Level Indicators',
+    '<!-- END CIT-122 -->',
+    '信任降级原则',
+    '永远不做清单',
+    '以下行为**绝对禁止**',
+    '可疑指令识别',
+];
+// ── Environment / internal path patterns ──
+const ENV_LEAK_PATTERNS = [
+    /process\.env\.[A-Z_]{3,}/g,
+    /\/etc\/(?:passwd|shadow|hosts|resolv\.conf|ssl)/g,
+    /\$\{?(?:HOME|PATH|SECRET|API_KEY|TOKEN|DATABASE_URL|ENCRYPTION_KEY|LITELLM_PROXY_URL)[}\s]/g,
+];
+const INTERNAL_PATH_PATTERNS = [
+    /\/home\/node\/\.openclaw\//g,
+    /\/home\/openclaw\//g,
+    /\/workspace\/(?:SOUL|AGENTS|IDENTITY|USER|TOOLS|BOOTSTRAP|HEARTBEAT|MEMORY)\.md/g,
+    /\/opt\/openclaw-plugins\//g,
+];
+// ── Core filter function ──
+export function filterOutput(content, instanceId, dlpConfig) {
+    const start = performance.now();
+    const matches = [];
+    let filtered = content;
+    // 1. Credential reverse match (highest priority)
+    if (dlpConfig.credentialLeakProtection) {
+        const index = credentialIndexes.get(instanceId);
+        if (index) {
+            for (const credValue of index) {
+                let searchFrom = 0;
+                while (true) {
+                    const idx = filtered.indexOf(credValue, searchFrom);
+                    if (idx === -1)
+                        break;
+                    matches.push({
+                        category: 'credential_leak',
+                        redactedSnippet: credValue.slice(0, 4) + '***',
+                    });
+                    if (dlpConfig.mode === 'redact' || dlpConfig.mode === 'block') {
+                        filtered = filtered.slice(0, idx) + REDACTED + filtered.slice(idx + credValue.length);
+                        searchFrom = idx + REDACTED.length;
+                    }
+                    else {
+                        searchFrom = idx + credValue.length;
+                    }
+                }
+            }
+        }
+    }
+    // 2. API Key pattern detection
+    if (dlpConfig.apiKeyPatternDetection) {
+        for (const { re } of API_KEY_PATTERNS) {
+            re.lastIndex = 0;
+            let match;
+            while ((match = re.exec(filtered)) !== null) {
+                const matchText = match[0];
+                if (matchText === REDACTED)
+                    continue;
+                if (filtered.slice(match.index, match.index + REDACTED.length) === REDACTED)
+                    continue;
+                matches.push({
+                    category: 'api_key_pattern',
+                    redactedSnippet: matchText.slice(0, 6) + '***',
+                });
+                if (dlpConfig.mode === 'redact' || dlpConfig.mode === 'block') {
+                    filtered = filtered.slice(0, match.index) + REDACTED + filtered.slice(match.index + matchText.length);
+                    re.lastIndex = match.index + REDACTED.length;
+                }
+            }
+        }
+    }
+    // 3. System prompt leak detection
+    if (dlpConfig.systemPromptLeakProtection) {
+        for (const fragment of SYSTEM_PROMPT_FRAGMENTS) {
+            const idx = filtered.indexOf(fragment);
+            if (idx !== -1) {
+                matches.push({
+                    category: 'system_prompt_leak',
+                    redactedSnippet: fragment.slice(0, 30) + '…',
+                });
+                if (dlpConfig.mode === 'redact' || dlpConfig.mode === 'block') {
+                    filtered = filtered.slice(0, idx) + REDACTED + filtered.slice(idx + fragment.length);
+                }
+            }
+        }
+        // 3b. Workspace content verbatim dump detection (CIT-179)
+        const wsChunks = workspaceContentIndexes.get(instanceId);
+        if (wsChunks) {
+            let chunkHits = 0;
+            for (const chunk of wsChunks) {
+                if (filtered.includes(chunk)) {
+                    chunkHits++;
+                }
+                if (chunkHits >= WORKSPACE_CHUNK_MATCH_THRESHOLD) {
+                    matches.push({
+                        category: 'system_prompt_leak',
+                        redactedSnippet: 'Workspace file content dump detected',
+                    });
+                    if (dlpConfig.mode === 'redact' || dlpConfig.mode === 'block') {
+                        filtered = BLOCKED_MESSAGE;
+                    }
+                    break;
+                }
+            }
+        }
+    }
+    // 4. Environment variable leak
+    if (dlpConfig.envLeakProtection) {
+        for (const re of ENV_LEAK_PATTERNS) {
+            re.lastIndex = 0;
+            let match;
+            while ((match = re.exec(filtered)) !== null) {
+                if (filtered.slice(match.index, match.index + REDACTED.length) === REDACTED)
+                    continue;
+                matches.push({
+                    category: 'env_leak',
+                    redactedSnippet: match[0].slice(0, 20) + '…',
+                });
+                if (dlpConfig.mode === 'redact' || dlpConfig.mode === 'block') {
+                    filtered = filtered.slice(0, match.index) + REDACTED + filtered.slice(match.index + match[0].length);
+                    re.lastIndex = match.index + REDACTED.length;
+                }
+            }
+        }
+    }
+    // 5. Internal path leak
+    if (dlpConfig.internalPathProtection) {
+        for (const re of INTERNAL_PATH_PATTERNS) {
+            re.lastIndex = 0;
+            let match;
+            while ((match = re.exec(filtered)) !== null) {
+                if (filtered.slice(match.index, match.index + REDACTED.length) === REDACTED)
+                    continue;
+                matches.push({
+                    category: 'internal_path_leak',
+                    redactedSnippet: match[0].slice(0, 20) + '…',
+                });
+                if (dlpConfig.mode === 'redact' || dlpConfig.mode === 'block') {
+                    filtered = filtered.slice(0, match.index) + REDACTED + filtered.slice(match.index + match[0].length);
+                    re.lastIndex = match.index + REDACTED.length;
+                }
+            }
+        }
+    }
+    // Apply block mode: if any match found, replace entire content
+    if (matches.length > 0 && dlpConfig.mode === 'block') {
+        filtered = BLOCKED_MESSAGE;
+    }
+    return {
+        filtered: matches.length > 0,
+        mode: dlpConfig.mode,
+        filteredContent: matches.length > 0 ? filtered : content,
+        matches,
+        durationMs: Math.round((performance.now() - start) * 100) / 100,
+    };
+}
+//# sourceMappingURL=output-filter.js.map

package/dist/services/output-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-filter.js","sourceRoot":"","sources":["../../src/services/output-filter.ts"],"names":[],"mappings":"AAEA,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C,qEAAqE;AACrE,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,mGAAmG;AACnG,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,uEAAuE;AACvE,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAE1C,mDAAmD;AAEnD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEzD,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,gBAA0B;IACjF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,IAAI,qBAAqB,EAAE,CAAC;YAC1C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACnB,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED,+CAA+C;AAC/C,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAoB,CAAC;AAE5D,SAAS,aAAa,CAAC,OAAe,EAAE,SAAiB;IACvD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACzH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,UAAkB,EAAE,cAAsC;IACnG,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,uBAAuB,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,UAAkB;IAC3D,uBAAuB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAC7C,CAAC;AAED,yCAAyC;AAEzC,MAAM,gBAAgB,GAAyC;IAC7D,EAAE,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC/C,EAAE,EAAE,EAAE,2BAA2B,EAAE,KAAK,EAAE,WAAW,EAAE;IACvD,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,YAAY,EAAE;IACpD,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,cAAc,EAAE;IACtD,EAAE,EAAE,EAAE,+BAA+B,EAAE,KAAK,EAAE,yBAAyB,EAAE;IACzE,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,gBAAgB,EAAE;IACpD,EAAE,EAAE,EAAE,sCAAsC,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACxE,EAAE,EAAE,EAAE,0CAA0C,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC7E,EAAE,EAAE,EAAE,wDAAwD,EAAE,KAAK,EAAE,oBAAoB,EAAE;CAC9F,CAAC;AAEF,qCAAqC;AACrC,sFAAsF;AACtF,MAAM,uBAAuB,GAAG;IAC9B,uBAAuB;IACvB,+BAA+B;IAC/B,sCAAsC;IACtC,sBAAsB;IACtB,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,QAAQ;CACT,CAAC;AAEF,6CAA6C;AAE7C,MAAM,iBAAiB,GAAa;IAClC,2BAA2B;IAC3B,kDAAkD;IAClD,6FAA6F;CAC9F,CAAC;AAEF,MAAM,sBAAsB,GAAa;IACvC,6BAA6B;IAC7B,qBAAqB;IACrB,kFAAkF;IAClF,4BAA4B;CAC7B,CAAC;AAEF,6BAA6B;AAE7B,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,UAAkB,EAClB,SAAoB;IAEpB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,QAAQ,GAAG,OAAO,CAAC;IAEvB,iDAAiD;IACjD,IAAI,SAAS,CAAC,wBAAwB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;gBAC9B,IAAI,UAAU,GAAG,CAAC,CAAC;gBACnB,OAAO,IAAI,EAAE,CAAC;oBACZ,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;oBACpD,IAAI,GAAG,KAAK,CAAC,CAAC;wBAAE,MAAM;oBACtB,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ,EAAE,iBAAiB;wBAC3B,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;qBAC/C,CAAC,CAAC;oBACH,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBAC9D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;wBACtF,UAAU,GAAG,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;oBACrC,CAAC;yBAAM,CAAC;wBACN,UAAU,GAAG,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;oBACtC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,SAAS,CAAC,sBAAsB,EAAE,CAAC;QACrC,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,gBAAgB,EAAE,CAAC;YACtC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YACjB,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,SAAS,KAAK,QAAQ;oBAAE,SAAS;gBACrC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ;oBAAE,SAAS;gBAEtF,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,iBAAiB;oBAC3B,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;iBAC/C,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC9D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;oBACtG,EAAE,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,IAAI,SAAS,CAAC,0BAA0B,EAAE,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,uBAAuB,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,oBAAoB;oBAC9B,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG;iBAC7C,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC9D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7B,SAAS,EAAE,CAAC;gBACd,CAAC;gBACD,IAAI,SAAS,IAAI,+BAA+B,EAAE,CAAC;oBACjD,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ,EAAE,oBAAoB;wBAC9B,eAAe,EAAE,sCAAsC;qBACxD,CAAC,CAAC;oBACH,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBAC9D,QAAQ,GAAG,eAAe,CAAC;oBAC7B,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAChC,KAAK,MAAM,EAAE,IAAI,iBAAiB,EAAE,CAAC;YACnC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YACjB,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ;oBAAE,SAAS;gBACtF,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,UAAU;oBACpB,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG;iBAC7C,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC9D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBACrG,EAAE,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,IAAI,SAAS,CAAC,sBAAsB,EAAE,CAAC;QACrC,KAAK,MAAM,EAAE,IAAI,sBAAsB,EAAE,CAAC;YACxC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YACjB,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ;oBAAE,SAAS;gBACtF,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,oBAAoB;oBAC9B,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG;iBAC7C,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC9D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBACrG,EAAE,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACrD,QAAQ,GAAG,eAAe,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;QAC5B,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,eAAe,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;QACxD,OAAO;QACP,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG;KAChE,CAAC;AACJ,CAAC"}

package/dist/services/prompt-guard.d.ts

@@ -0,0 +1,6 @@
+import type { PromptGuardPattern, PromptGuardResult, PromptGuardSeverity } from '@aquarium/shared';
+declare const SEVERITY_ORDER: Record<PromptGuardSeverity, number>;
+export declare function scanMessage(text: string, customPatterns?: PromptGuardPattern[]): PromptGuardResult;
+export declare function getDefaultPatterns(): PromptGuardPattern[];
+export { SEVERITY_ORDER };
+//# sourceMappingURL=prompt-guard.d.ts.map

package/dist/services/prompt-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-guard.d.ts","sourceRoot":"","sources":["../../src/services/prompt-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AA+GnG,QAAA,MAAM,cAAc,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAwC,CAAC;AAsBjG,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,kBAAkB,EAAE,GACpC,iBAAiB,CAuCnB;AAED,wBAAgB,kBAAkB,IAAI,kBAAkB,EAAE,CAEzD;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/services/prompt-guard.js

@@ -0,0 +1,165 @@
+const DEFAULT_PATTERNS = [
+    // fake_system_message
+    {
+        id: 'fake-sys-01',
+        category: 'fake_system_message',
+        severity: 'warning',
+        pattern: '\\[\\s*(?:system\\s*message|admin|override|system\\s*prompt|developer\\s*mode)\\s*\\]',
+        flags: 'i',
+        description: '伪装系统消息标记',
+    },
+    {
+        id: 'fake-sys-02',
+        category: 'fake_system_message',
+        severity: 'critical',
+        pattern: '(?:^|\\n)\\s*(?:SYSTEM|ROOT|ADMIN)\\s*[:：]',
+        flags: 'i',
+        description: '伪装系统身份前缀',
+    },
+    // instruction_override
+    {
+        id: 'override-01',
+        category: 'instruction_override',
+        severity: 'critical',
+        pattern: '(?:ignore|disregard|forget|override|忽略|无视|忘记|覆盖)\\s*(?:all\\s*)?(?:previous|above|prior|earlier|之前的?|上面的?)\\s*(?:instructions?|prompts?|rules?|指令|提示|规则)',
+        flags: 'i',
+        description: '指令覆盖模式（中英文）',
+    },
+    {
+        id: 'override-02',
+        category: 'instruction_override',
+        severity: 'warning',
+        pattern: '(?:you\\s+are\\s+now|from\\s+now\\s+on|new\\s+instructions?|你现在是|从现在开始|新的指令)',
+        flags: 'i',
+        description: '角色重定义尝试',
+    },
+    {
+        id: 'override-03',
+        category: 'instruction_override',
+        severity: 'critical',
+        pattern: '(?:ignore\\s+previous\\s+instructions|ignore\\s+all\\s+rules|disregard\\s+your\\s+programming)',
+        flags: 'i',
+        description: '英文经典覆盖模式',
+    },
+    // sensitive_probe
+    {
+        id: 'probe-01',
+        category: 'sensitive_probe',
+        severity: 'warning',
+        pattern: '(?:show|reveal|output|print|display|tell\\s+me|展示|显示|输出|告诉我)\\s*(?:your|the)?\\s*(?:system\\s*prompt|initial\\s*instructions?|source\\s*code|环境变量|系统提示|安全配置|SOUL\\.md|AGENTS\\.md)',
+        flags: 'i',
+        description: '系统提示词/配置泄露探测',
+    },
+    {
+        id: 'probe-02',
+        category: 'sensitive_probe',
+        severity: 'critical',
+        pattern: '(?:read|cat|type|print)\\s+(?:\\/etc\\/|~\\/\\.|\\$\\{?(?:HOME|PATH|SECRET|API_KEY|TOKEN))',
+        flags: 'i',
+        description: '内部文件/环境变量读取',
+    },
+    // destructive_action
+    {
+        id: 'destruct-01',
+        category: 'destructive_action',
+        severity: 'critical',
+        pattern: '(?:rm\\s+-rf|mkfs|dd\\s+if=|chmod\\s+777|:\\(\\)\\{\\s*:|curl\\s+.*\\|\\s*(?:bash|sh))',
+        flags: 'i',
+        description: '危险 shell 命令模式',
+    },
+    {
+        id: 'destruct-02',
+        category: 'destructive_action',
+        severity: 'warning',
+        pattern: '(?:delete\\s+all|drop\\s+(?:table|database)|truncate\\s+|删除所有|清空数据|格式化)',
+        flags: 'i',
+        description: '破坏性数据操作',
+    },
+    // fake_urgency
+    {
+        id: 'urgency-01',
+        category: 'fake_urgency',
+        severity: 'warning',
+        pattern: '(?:URGENT|EMERGENCY|CRITICAL)\\s*(?:SYSTEM\\s*)?(?:UPDATE|OVERRIDE|PATCH|MESSAGE|NOTICE|ALERT)',
+        flags: 'i',
+        description: '伪装紧急系统通知',
+    },
+    {
+        id: 'urgency-02',
+        category: 'fake_urgency',
+        severity: 'warning',
+        pattern: '(?:紧急更新|紧急通知|立即执行|必须马上)',
+        flags: 'i',
+        description: '伪装紧急中文通知',
+    },
+    // repetition_attack — 20+ chars repeated 5+ times (context window exhaustion)
+    {
+        id: 'repeat-01',
+        category: 'repetition_attack',
+        severity: 'info',
+        pattern: '(.{20,})\\1{4,}',
+        description: '重复内容攻击（上下文窗口耗尽）',
+    },
+];
+const SEVERITY_ORDER = { info: 0, warning: 1, critical: 2 };
+const compiledCache = new Map();
+function getCompiledPattern(p) {
+    const cacheKey = `${p.id}:${p.pattern}:${p.flags ?? 'i'}`;
+    let re = compiledCache.get(cacheKey);
+    if (!re) {
+        re = new RegExp(p.pattern, p.flags ?? 'i');
+        compiledCache.set(cacheKey, re);
+    }
+    return re;
+}
+function sanitizeSnippet(text, match) {
+    const start = Math.max(0, (match.index ?? 0) - 20);
+    const end = Math.min(text.length, (match.index ?? 0) + (match[0]?.length ?? 0) + 20);
+    let snippet = text.slice(start, end);
+    if (snippet.length > 100)
+        snippet = snippet.slice(0, 100) + '…';
+    return snippet;
+}
+export function scanMessage(text, customPatterns) {
+    const start = performance.now();
+    const allPatterns = customPatterns
+        ? [...DEFAULT_PATTERNS, ...customPatterns]
+        : DEFAULT_PATTERNS;
+    const matches = [];
+    let maxSeverityValue = -1;
+    let maxSeverity = null;
+    for (const pattern of allPatterns) {
+        try {
+            const re = getCompiledPattern(pattern);
+            re.lastIndex = 0;
+            const match = re.exec(text);
+            if (match) {
+                matches.push({
+                    patternId: pattern.id,
+                    category: pattern.category,
+                    severity: pattern.severity,
+                    matchedSnippet: sanitizeSnippet(text, match),
+                });
+                const sv = SEVERITY_ORDER[pattern.severity];
+                if (sv > maxSeverityValue) {
+                    maxSeverityValue = sv;
+                    maxSeverity = pattern.severity;
+                }
+            }
+        }
+        catch {
+            // Skip malformed custom patterns silently
+        }
+    }
+    return {
+        detected: matches.length > 0,
+        maxSeverity,
+        matches,
+        durationMs: Math.round((performance.now() - start) * 100) / 100,
+    };
+}
+export function getDefaultPatterns() {
+    return [...DEFAULT_PATTERNS];
+}
+export { SEVERITY_ORDER };
+//# sourceMappingURL=prompt-guard.js.map

package/dist/services/prompt-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-guard.js","sourceRoot":"","sources":["../../src/services/prompt-guard.ts"],"names":[],"mappings":"AAEA,MAAM,gBAAgB,GAAyB;IAC7C,sBAAsB;IACtB;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,uFAAuF;QAChG,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,UAAU;KACxB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,4CAA4C;QACrD,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,UAAU;KACxB;IAED,uBAAuB;IACvB;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,0JAA0J;QACnK,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,8EAA8E;QACvF,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,SAAS;KACvB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,gGAAgG;QACzG,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,UAAU;KACxB;IAED,kBAAkB;IAClB;QACE,EAAE,EAAE,UAAU;QACd,QAAQ,EAAE,iBAAiB;QAC3B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,oLAAoL;QAC7L,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,EAAE,EAAE,UAAU;QACd,QAAQ,EAAE,iBAAiB;QAC3B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,4FAA4F;QACrG,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,aAAa;KAC3B;IAED,qBAAqB;IACrB;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,wFAAwF;QACjG,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,yEAAyE;QAClF,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,SAAS;KACvB;IAED,eAAe;IACf;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,cAAc;QACxB,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,gGAAgG;QACzG,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,UAAU;KACxB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,cAAc;QACxB,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,UAAU;KACxB;IAED,8EAA8E;IAC9E;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,mBAAmB;QAC7B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,iBAAiB;KAC/B;CACF,CAAC;AAEF,MAAM,cAAc,GAAwC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAEjG,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD,SAAS,kBAAkB,CAAC,CAAqB;IAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;IAC1D,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;QAC3C,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAsB;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrF,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;IAChE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,cAAqC;IAErC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,cAAc;QAChC,CAAC,CAAC,CAAC,GAAG,gBAAgB,EAAE,GAAG,cAAc,CAAC;QAC1C,CAAC,CAAC,gBAAgB,CAAC;IAErB,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,WAAW,GAA+B,IAAI,CAAC;IAEnD,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACvC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YACjB,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC;oBACX,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,cAAc,EAAE,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC;iBAC7C,CAAC,CAAC;gBACH,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC5C,IAAI,EAAE,GAAG,gBAAgB,EAAE,CAAC;oBAC1B,gBAAgB,GAAG,EAAE,CAAC;oBACtB,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;QAC5B,WAAW;QACX,OAAO;QACP,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,GAAG,gBAAgB,CAAC,CAAC;AAC/B,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/services/security-event-service.d.ts

@@ -0,0 +1,11 @@
+import type { SecurityEventType, InstanceEvent, PaginatedResponse, SecuritySummary, InstanceSecuritySummary } from '@aquarium/shared';
+export declare function recordSecurityEvent(instanceId: string, type: SecurityEventType, severity: string, metadata?: Record<string, unknown>): Promise<void>;
+export declare function querySecurityEvents(instanceId: string, userId: string, opts: {
+    page?: number;
+    limit?: number;
+    severity?: string;
+    type?: string;
+}): Promise<PaginatedResponse<InstanceEvent>>;
+export declare function getInstanceSecuritySummary(instanceId: string, userId: string): Promise<InstanceSecuritySummary>;
+export declare function getSecuritySummary(userId: string): Promise<SecuritySummary>;
+//# sourceMappingURL=security-event-service.d.ts.map

package/dist/services/security-event-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-event-service.d.ts","sourceRoot":"","sources":["../../src/services/security-event-service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,iBAAiB,EAEjB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EAExB,MAAM,kBAAkB,CAAC;AAE1B,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACrC,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACxE,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAuD3C;AAED,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,CAmFlC;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA6DjF"}

package/dist/services/security-event-service.js

@@ -0,0 +1,201 @@
+import { db } from '../db/index.js';
+import { getAdapter } from '../db/adapter.js';
+import { broadcast } from '../ws/index.js';
+export async function recordSecurityEvent(instanceId, type, severity, metadata = {}) {
+    await db('instance_events').insert({
+        instance_id: instanceId,
+        event_type: type,
+        metadata: JSON.stringify({ severity, ...metadata }),
+    });
+    broadcast(instanceId, {
+        type: 'security_event',
+        instanceId,
+        payload: {
+            category: type,
+            severity,
+            ...metadata,
+            timestamp: new Date().toISOString(),
+        },
+    });
+}
+export async function querySecurityEvents(instanceId, userId, opts) {
+    const ownerCheck = await db('instances').where({ id: instanceId, user_id: userId }).first();
+    if (!ownerCheck)
+        throw new Error('Instance not found');
+    const page = Math.max(1, opts.page ?? 1);
+    const limit = Math.min(100, Math.max(1, opts.limit ?? 20));
+    const offset = (page - 1) * limit;
+    let query = db('instance_events')
+        .where({ instance_id: instanceId })
+        .where('event_type', 'like', 'security:%');
+    let countQuery = db('instance_events')
+        .where({ instance_id: instanceId })
+        .where('event_type', 'like', 'security:%');
+    if (opts.type) {
+        query = query.where('event_type', opts.type);
+        countQuery = countQuery.where('event_type', opts.type);
+    }
+    if (opts.severity) {
+        const _adapter = getAdapter();
+        if (_adapter.dialect === 'pg') {
+            query = query.whereRaw("metadata->>'severity' = ?", [opts.severity]);
+            countQuery = countQuery.whereRaw("metadata->>'severity' = ?", [opts.severity]);
+        }
+        else {
+            query = query.whereRaw("json_extract(metadata, '$.severity') = ?", [opts.severity]);
+            countQuery = countQuery.whereRaw("json_extract(metadata, '$.severity') = ?", [opts.severity]);
+        }
+    }
+    const [{ count }] = await countQuery.count('* as count');
+    const total = Number(count);
+    const rows = await query
+        .orderBy('created_at', 'desc')
+        .offset(offset)
+        .limit(limit);
+    const items = rows.map((row) => ({
+        id: row.id,
+        instanceId: row.instance_id,
+        eventType: row.event_type,
+        metadata: (typeof row.metadata === 'string' ? JSON.parse(row.metadata) : row.metadata ?? {}),
+        createdAt: String(row.created_at),
+    }));
+    return {
+        items,
+        total,
+        page,
+        limit,
+        totalPages: Math.ceil(total / limit),
+    };
+}
+export async function getInstanceSecuritySummary(instanceId, userId) {
+    const instance = await db('instances')
+        .where({ id: instanceId, user_id: userId })
+        .select('id', 'security_profile', 'config')
+        .first();
+    if (!instance)
+        throw new Error('Instance not found');
+    const adapter = getAdapter();
+    const since = adapter.intervalAgo(db, 1, 'days');
+    const severityExpr = adapter.dialect === 'pg'
+        ? db.raw("metadata->>'severity' as severity")
+        : db.raw("json_extract(metadata, '$.severity') as severity");
+    const severityGroup = adapter.dialect === 'pg'
+        ? db.raw("metadata->>'severity'")
+        : db.raw("json_extract(metadata, '$.severity')");
+    const baseQuery = () => db('instance_events')
+        .where({ instance_id: instanceId })
+        .where('event_type', 'like', 'security:%')
+        .where('created_at', '>', since);
+    const [typeRows, severityRows, [criticalRow], topRows] = await Promise.all([
+        baseQuery()
+            .select('event_type')
+            .count('* as count')
+            .groupBy('event_type'),
+        baseQuery()
+            .select(severityExpr)
+            .count('* as count')
+            .groupBy(severityGroup),
+        adapter.dialect === 'pg'
+            ? baseQuery().whereRaw("metadata->>'severity' = 'critical'").count('* as count')
+            : baseQuery().whereRaw("json_extract(metadata, '$.severity') = 'critical'").count('* as count'),
+        db('instance_events')
+            .where({ instance_id: instanceId })
+            .where('event_type', 'like', 'security:%')
+            .orderBy('created_at', 'desc')
+            .limit(5),
+    ]);
+    const byType = {};
+    let totalEvents24h = 0;
+    for (const row of typeRows) {
+        const c = Number(row.count);
+        byType[row.event_type] = c;
+        totalEvents24h += c;
+    }
+    const bySeverity = {};
+    for (const row of severityRows) {
+        bySeverity[row.severity ?? 'unknown'] = Number(row.count);
+    }
+    const topEvents = topRows.map((row) => ({
+        id: row.id,
+        instanceId: row.instance_id,
+        eventType: row.event_type,
+        metadata: (typeof row.metadata === 'string' ? JSON.parse(row.metadata) : row.metadata ?? {}),
+        createdAt: String(row.created_at),
+    }));
+    const profile = instance.security_profile || 'standard';
+    const config = typeof instance.config === 'string' ? JSON.parse(instance.config) : instance.config;
+    const isStrictOrStandard = profile === 'strict' || profile === 'standard';
+    const protection = {
+        securityProfile: profile,
+        trustLayers: isStrictOrStandard,
+        injectionDetection: profile === 'strict',
+        outputFiltering: isStrictOrStandard,
+        dlpScanning: profile === 'strict',
+        configIntegrity: Boolean(config?.['openclaw.json']),
+    };
+    return {
+        instanceId,
+        totalEvents24h,
+        bySeverity,
+        byType,
+        recentCritical: Number(criticalRow?.count ?? 0),
+        protection,
+        topEvents,
+    };
+}
+export async function getSecuritySummary(userId) {
+    const instanceIds = await db('instances')
+        .where({ user_id: userId })
+        .select('id');
+    const ids = instanceIds.map((r) => r.id);
+    if (ids.length === 0) {
+        return { totalEvents: 0, bySeverity: {}, byType: {}, recentCritical: 0 };
+    }
+    const adapter2 = getAdapter();
+    const severityExpr2 = adapter2.dialect === 'pg'
+        ? db.raw("metadata->>'severity' as severity")
+        : db.raw("json_extract(metadata, '$.severity') as severity");
+    const severityGroup2 = adapter2.dialect === 'pg'
+        ? db.raw("metadata->>'severity'")
+        : db.raw("json_extract(metadata, '$.severity')");
+    const baseQuery = () => db('instance_events')
+        .whereIn('instance_id', ids)
+        .where('event_type', 'like', 'security:%');
+    const [typeRows, severityRows, [criticalRow]] = await Promise.all([
+        baseQuery()
+            .select('event_type')
+            .count('* as count')
+            .groupBy('event_type'),
+        baseQuery()
+            .select(severityExpr2)
+            .count('* as count')
+            .groupBy(severityGroup2),
+        adapter2.dialect === 'pg'
+            ? baseQuery()
+                .whereRaw("metadata->>'severity' = 'critical'")
+                .where('created_at', '>', adapter2.intervalAgo(db, 1, 'days'))
+                .count('* as count')
+            : baseQuery()
+                .whereRaw("json_extract(metadata, '$.severity') = 'critical'")
+                .where('created_at', '>', adapter2.intervalAgo(db, 1, 'days'))
+                .count('* as count'),
+    ]);
+    const byType = {};
+    let totalEvents = 0;
+    for (const row of typeRows) {
+        const c = Number(row.count);
+        byType[row.event_type] = c;
+        totalEvents += c;
+    }
+    const bySeverity = {};
+    for (const row of severityRows) {
+        bySeverity[row.severity ?? 'unknown'] = Number(row.count);
+    }
+    return {
+        totalEvents,
+        bySeverity,
+        byType,
+        recentCritical: Number(criticalRow?.count ?? 0),
+    };
+}
+//# sourceMappingURL=security-event-service.js.map