@atbash/sdk 0.5.8-dev.0 → 0.6.0

package/index.d.ts

@@ -6,6 +6,8 @@ export declare function containsSecret(s: string): boolean
 
 export declare function createMemorySnapshot(entries: any, takenAt: number): any
 
+export declare function decryptMemoryContent(ciphertext: Buffer, nonce: Buffer, key: Buffer): string
+
 export const DEFAULT_BLOCKCHAIN_RID: string
 
 export const DEFAULT_ENDPOINT: string
@@ -16,10 +18,24 @@ export declare function defaultChromiaNodeUrls(): Array<string>
 
 export declare function defaultPrivateNodeUrls(): Array<string>
 
+export declare function deriveMemoryKey(privkeyHex: string): Buffer
+
 export declare function derivePublicKey(s: string): string
 
 export declare function diffMemorySnapshots(before: any, after: any): any
 
+/**
+ * Encrypt UTF-8 plaintext with a 32-byte AES key. Returns
+ * `{ ciphertext: Buffer, nonce: Buffer }` — ciphertext has the GCM
+ * auth tag appended as the trailing 16 bytes.
+ */
+export interface EncryptedMemoryJs {
+  ciphertext: Buffer
+  nonce: Buffer
+}
+
+export declare function encryptMemoryContent(plaintext: string, key: Buffer): EncryptedMemoryJs
+
 export declare function generateKeypair(): any
 
 export const HONEYCOMB_KEY: string
@@ -28,6 +44,14 @@ export declare function isValidPrivateKey(s: string): boolean
 
 export declare function loadAgent(privkey: string): any
 
+/**
+ * Fast regex pre-filter for memory-poisoning detection. Returns the
+ * `MemoryScanResult` shape when a critical/high pattern (or an
+ * evasion-character pattern) matches; returns `null` when nothing
+ * matched — callers should escalate to the LLM judge.
+ */
+export declare function memoryRegexPreFilter(entry: any): any | null
+
 export declare function normalizeForMatching(s: string): string
 
 export declare function redactSecrets(s: string): any

package/index.js

@@ -590,17 +590,21 @@ module.exports = nativeBinding
 module.exports.containsEvasionCharacters = nativeBinding.containsEvasionCharacters
 module.exports.containsSecret = nativeBinding.containsSecret
 module.exports.createMemorySnapshot = nativeBinding.createMemorySnapshot
+module.exports.decryptMemoryContent = nativeBinding.decryptMemoryContent
 module.exports.DEFAULT_BLOCKCHAIN_RID = nativeBinding.DEFAULT_BLOCKCHAIN_RID
 module.exports.DEFAULT_ENDPOINT = nativeBinding.DEFAULT_ENDPOINT
 module.exports.DEFAULT_PRIVATE_BLOCKCHAIN_RID = nativeBinding.DEFAULT_PRIVATE_BLOCKCHAIN_RID
 module.exports.defaultChromiaNodeUrls = nativeBinding.defaultChromiaNodeUrls
 module.exports.defaultPrivateNodeUrls = nativeBinding.defaultPrivateNodeUrls
+module.exports.deriveMemoryKey = nativeBinding.deriveMemoryKey
 module.exports.derivePublicKey = nativeBinding.derivePublicKey
 module.exports.diffMemorySnapshots = nativeBinding.diffMemorySnapshots
+module.exports.encryptMemoryContent = nativeBinding.encryptMemoryContent
 module.exports.generateKeypair = nativeBinding.generateKeypair
 module.exports.HONEYCOMB_KEY = nativeBinding.HONEYCOMB_KEY
 module.exports.isValidPrivateKey = nativeBinding.isValidPrivateKey
 module.exports.loadAgent = nativeBinding.loadAgent
+module.exports.memoryRegexPreFilter = nativeBinding.memoryRegexPreFilter
 module.exports.normalizeForMatching = nativeBinding.normalizeForMatching
 module.exports.redactSecrets = nativeBinding.redactSecrets
 module.exports.signJudgeAction = nativeBinding.signJudgeAction

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atbash/sdk",
-  "version": "0.5.8-dev.0",
+  "version": "0.6.0",
   "description": "TypeScript SDK for Atbash — the safety layer that evaluates AI agent actions against operator-defined policies before execution.",
   "keywords": [
     "atbash",
@@ -25,17 +25,14 @@
   },
   "license": "SEE LICENSE IN LICENSE",
   "napi": {
-    "name": "atbash",
+    "binaryName": "atbash",
     "packageName": "@atbash/sdk",
-    "triples": {
-      "defaults": false,
-      "additional": [
-        "x86_64-unknown-linux-gnu",
-        "aarch64-unknown-linux-gnu",
-        "aarch64-apple-darwin",
-        "x86_64-pc-windows-msvc"
-      ]
-    }
+    "targets": [
+      "x86_64-unknown-linux-gnu",
+      "aarch64-unknown-linux-gnu",
+      "aarch64-apple-darwin",
+      "x86_64-pc-windows-msvc"
+    ]
   },
   "publishConfig": {
     "access": "public",
@@ -89,8 +86,9 @@
     "typescript-eslint": "^8.62.1"
   },
   "optionalDependencies": {
-    "@atbash/sdk-linux-x64-gnu": "0.5.8-dev.0",
-    "@atbash/sdk-linux-arm64-gnu": "0.5.8-dev.0",
-    "@atbash/sdk-darwin-arm64": "0.5.8-dev.0"
+    "@atbash/sdk-linux-x64-gnu": "0.6.0",
+    "@atbash/sdk-linux-arm64-gnu": "0.6.0",
+    "@atbash/sdk-darwin-arm64": "0.6.0",
+    "@atbash/sdk-win32-x64-msvc": "0.6.0"
   }
 }