@cogitator-ai/core 0.12.0 → 0.14.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +93 -0
- package/dist/cache/cache-key.d.ts.map +1 -1
- package/dist/cache/cache-key.js +1 -4
- package/dist/cache/cache-key.js.map +1 -1
- package/dist/cache/tool-cache.d.ts.map +1 -1
- package/dist/cache/tool-cache.js +3 -6
- package/dist/cache/tool-cache.js.map +1 -1
- package/dist/cogitator/initializers.d.ts +4 -0
- package/dist/cogitator/initializers.d.ts.map +1 -1
- package/dist/cogitator/initializers.js +14 -0
- package/dist/cogitator/initializers.js.map +1 -1
- package/dist/cogitator.d.ts +38 -1
- package/dist/cogitator.d.ts.map +1 -1
- package/dist/cogitator.js +56 -1
- package/dist/cogitator.js.map +1 -1
- package/dist/cost-routing/cost-estimator.d.ts +18 -0
- package/dist/cost-routing/cost-estimator.d.ts.map +1 -0
- package/dist/cost-routing/cost-estimator.js +149 -0
- package/dist/cost-routing/cost-estimator.js.map +1 -0
- package/dist/cost-routing/index.d.ts +2 -0
- package/dist/cost-routing/index.d.ts.map +1 -1
- package/dist/cost-routing/index.js +2 -0
- package/dist/cost-routing/index.js.map +1 -1
- package/dist/cost-routing/token-estimator.d.ts +22 -0
- package/dist/cost-routing/token-estimator.d.ts.map +1 -0
- package/dist/cost-routing/token-estimator.js +88 -0
- package/dist/cost-routing/token-estimator.js.map +1 -0
- package/dist/index.d.ts +4 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +2 -0
- package/dist/index.js.map +1 -1
- package/dist/security/classifiers/index.d.ts +3 -0
- package/dist/security/classifiers/index.d.ts.map +1 -0
- package/dist/security/classifiers/index.js +3 -0
- package/dist/security/classifiers/index.js.map +1 -0
- package/dist/security/classifiers/llm-classifier.d.ts +10 -0
- package/dist/security/classifiers/llm-classifier.d.ts.map +1 -0
- package/dist/security/classifiers/llm-classifier.js +110 -0
- package/dist/security/classifiers/llm-classifier.js.map +1 -0
- package/dist/security/classifiers/local-classifier.d.ts +8 -0
- package/dist/security/classifiers/local-classifier.d.ts.map +1 -0
- package/dist/security/classifiers/local-classifier.js +130 -0
- package/dist/security/classifiers/local-classifier.js.map +1 -0
- package/dist/security/index.d.ts +5 -0
- package/dist/security/index.d.ts.map +1 -0
- package/dist/security/index.js +4 -0
- package/dist/security/index.js.map +1 -0
- package/dist/security/patterns.d.ts +6 -0
- package/dist/security/patterns.d.ts.map +1 -0
- package/dist/security/patterns.js +338 -0
- package/dist/security/patterns.js.map +1 -0
- package/dist/security/prompt-injection-detector.d.ts +28 -0
- package/dist/security/prompt-injection-detector.d.ts.map +1 -0
- package/dist/security/prompt-injection-detector.js +134 -0
- package/dist/security/prompt-injection-detector.js.map +1 -0
- package/dist/tools/hash.d.ts +1 -1
- package/dist/tools/index.d.ts +3 -3
- package/dist/tools/random.d.ts +1 -1
- package/dist/tools/vector-search.d.ts +1 -1
- package/package.json +5 -5
|
@@ -0,0 +1,130 @@
|
|
|
1
|
+
import { INJECTION_PATTERNS, detectEncodingThreats, detectUnicodeThreats, matchPatterns, } from '../patterns';
|
|
2
|
+
export class LocalInjectionClassifier {
|
|
3
|
+
async analyze(input, config) {
|
|
4
|
+
const threats = [];
|
|
5
|
+
const enabledTypes = this.getEnabledTypes(config);
|
|
6
|
+
const patternThreats = matchPatterns(input, INJECTION_PATTERNS, enabledTypes);
|
|
7
|
+
threats.push(...patternThreats);
|
|
8
|
+
if (config.patterns && config.patterns.length > 0) {
|
|
9
|
+
const customThreats = this.matchCustomPatterns(input, config.patterns);
|
|
10
|
+
threats.push(...customThreats);
|
|
11
|
+
}
|
|
12
|
+
if (config.detectEncoding) {
|
|
13
|
+
threats.push(...detectEncodingThreats(input));
|
|
14
|
+
threats.push(...detectUnicodeThreats(input));
|
|
15
|
+
}
|
|
16
|
+
const heuristicThreats = this.applyHeuristics(input, enabledTypes);
|
|
17
|
+
threats.push(...heuristicThreats);
|
|
18
|
+
return threats.filter((t) => t.confidence >= config.threshold);
|
|
19
|
+
}
|
|
20
|
+
getEnabledTypes(config) {
|
|
21
|
+
const types = new Set();
|
|
22
|
+
if (config.detectInjection)
|
|
23
|
+
types.add('direct_injection');
|
|
24
|
+
if (config.detectJailbreak)
|
|
25
|
+
types.add('jailbreak');
|
|
26
|
+
if (config.detectRoleplay)
|
|
27
|
+
types.add('roleplay');
|
|
28
|
+
if (config.detectEncoding)
|
|
29
|
+
types.add('encoding');
|
|
30
|
+
if (config.detectContextManipulation)
|
|
31
|
+
types.add('context_manipulation');
|
|
32
|
+
types.add('custom');
|
|
33
|
+
return types;
|
|
34
|
+
}
|
|
35
|
+
matchCustomPatterns(input, patterns) {
|
|
36
|
+
const threats = [];
|
|
37
|
+
for (const pattern of patterns) {
|
|
38
|
+
const match = pattern.exec(input);
|
|
39
|
+
if (match) {
|
|
40
|
+
threats.push({
|
|
41
|
+
type: 'custom',
|
|
42
|
+
confidence: 0.9,
|
|
43
|
+
pattern: pattern.source,
|
|
44
|
+
snippet: match[0].slice(0, 100),
|
|
45
|
+
position: { start: match.index, end: match.index + match[0].length },
|
|
46
|
+
});
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
return threats;
|
|
50
|
+
}
|
|
51
|
+
applyHeuristics(input, enabledTypes) {
|
|
52
|
+
const threats = [];
|
|
53
|
+
const lowered = input.toLowerCase();
|
|
54
|
+
if (enabledTypes.has('direct_injection') || enabledTypes.has('jailbreak')) {
|
|
55
|
+
const suspiciousKeywords = [
|
|
56
|
+
'instruction',
|
|
57
|
+
'override',
|
|
58
|
+
'bypass',
|
|
59
|
+
'ignore',
|
|
60
|
+
'forget',
|
|
61
|
+
'disregard',
|
|
62
|
+
'jailbreak',
|
|
63
|
+
'unrestricted',
|
|
64
|
+
'unlock',
|
|
65
|
+
];
|
|
66
|
+
const keywordCount = suspiciousKeywords.filter((kw) => lowered.includes(kw)).length;
|
|
67
|
+
if (keywordCount >= 3) {
|
|
68
|
+
threats.push({
|
|
69
|
+
type: 'direct_injection',
|
|
70
|
+
confidence: 0.6 + Math.min(keywordCount * 0.1, 0.3),
|
|
71
|
+
pattern: 'keyword_density',
|
|
72
|
+
snippet: `Found ${keywordCount} suspicious keywords`,
|
|
73
|
+
});
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
const imperativePatterns = [
|
|
77
|
+
/^(now|first|before anything|immediately)\s*,?\s*(you must|ignore|forget|disregard)/i,
|
|
78
|
+
/^(important|critical|urgent)\s*:\s*(ignore|forget|new instructions)/i,
|
|
79
|
+
];
|
|
80
|
+
for (const pattern of imperativePatterns) {
|
|
81
|
+
if (pattern.test(input)) {
|
|
82
|
+
threats.push({
|
|
83
|
+
type: 'direct_injection',
|
|
84
|
+
confidence: 0.75,
|
|
85
|
+
pattern: 'imperative_opening',
|
|
86
|
+
snippet: input.slice(0, 60) + '...',
|
|
87
|
+
});
|
|
88
|
+
break;
|
|
89
|
+
}
|
|
90
|
+
}
|
|
91
|
+
if (enabledTypes.has('jailbreak') || enabledTypes.has('roleplay')) {
|
|
92
|
+
const combinedAttackPatterns = [
|
|
93
|
+
/pretend.*ignore.*instructions/i,
|
|
94
|
+
/roleplay.*bypass.*safety/i,
|
|
95
|
+
/imagine.*no.*restrictions/i,
|
|
96
|
+
/act.*like.*unrestricted/i,
|
|
97
|
+
];
|
|
98
|
+
for (const pattern of combinedAttackPatterns) {
|
|
99
|
+
if (pattern.test(input)) {
|
|
100
|
+
threats.push({
|
|
101
|
+
type: 'jailbreak',
|
|
102
|
+
confidence: 0.85,
|
|
103
|
+
pattern: 'combined_attack_pattern',
|
|
104
|
+
snippet: input.slice(0, 80),
|
|
105
|
+
});
|
|
106
|
+
break;
|
|
107
|
+
}
|
|
108
|
+
}
|
|
109
|
+
}
|
|
110
|
+
if (enabledTypes.has('context_manipulation')) {
|
|
111
|
+
const lines = input.split('\n');
|
|
112
|
+
let structuredBlockCount = 0;
|
|
113
|
+
for (const line of lines) {
|
|
114
|
+
if (/^(system|user|assistant|human|ai)\s*:/i.test(line.trim())) {
|
|
115
|
+
structuredBlockCount++;
|
|
116
|
+
}
|
|
117
|
+
}
|
|
118
|
+
if (structuredBlockCount >= 2) {
|
|
119
|
+
threats.push({
|
|
120
|
+
type: 'context_manipulation',
|
|
121
|
+
confidence: 0.7,
|
|
122
|
+
pattern: 'structured_prompt_injection',
|
|
123
|
+
snippet: `Found ${structuredBlockCount} role markers`,
|
|
124
|
+
});
|
|
125
|
+
}
|
|
126
|
+
}
|
|
127
|
+
return threats;
|
|
128
|
+
}
|
|
129
|
+
}
|
|
130
|
+
//# sourceMappingURL=local-classifier.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"local-classifier.js","sourceRoot":"","sources":["../../../src/security/classifiers/local-classifier.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,MAAM,OAAO,wBAAwB;IACnC,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAA6B;QACxD,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAElD,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QAEhC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;QAElC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;IAEO,eAAe,CAAC,MAA6B;QACnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;QAE7C,IAAI,MAAM,CAAC,eAAe;YAAE,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,eAAe;YAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,cAAc;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,cAAc;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,yBAAyB;YAAE,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAExE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEpB,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,mBAAmB,CAAC,KAAa,EAAE,QAAkB;QAC3D,MAAM,OAAO,GAAsB,EAAE,CAAC;QAEtC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE,OAAO,CAAC,MAAM;oBACvB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC/B,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,eAAe,CACrB,KAAa,EACb,YAAsC;QAEtC,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAEpC,IAAI,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1E,MAAM,kBAAkB,GAAG;gBACzB,aAAa;gBACb,UAAU;gBACV,QAAQ;gBACR,QAAQ;gBACR,QAAQ;gBACR,WAAW;gBACX,WAAW;gBACX,cAAc;gBACd,QAAQ;aACT,CAAC;YACF,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAEpF,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,kBAAkB;oBACxB,UAAU,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,EAAE,GAAG,CAAC;oBACnD,OAAO,EAAE,iBAAiB;oBAC1B,OAAO,EAAE,SAAS,YAAY,sBAAsB;iBACrD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,kBAAkB,GAAG;YACzB,qFAAqF;YACrF,sEAAsE;SACvE,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,kBAAkB;oBACxB,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,oBAAoB;oBAC7B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;iBACpC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAClE,MAAM,sBAAsB,GAAG;gBAC7B,gCAAgC;gBAChC,2BAA2B;gBAC3B,4BAA4B;gBAC5B,0BAA0B;aAC3B,CAAC;YAEF,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;gBAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,WAAW;wBACjB,UAAU,EAAE,IAAI;wBAChB,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;qBAC5B,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,oBAAoB,GAAG,CAAC,CAAC;YAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC/D,oBAAoB,EAAE,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,IAAI,oBAAoB,IAAI,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,sBAAsB;oBAC5B,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE,6BAA6B;oBACtC,OAAO,EAAE,SAAS,oBAAoB,eAAe;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
export { PromptInjectionDetector } from './prompt-injection-detector';
|
|
2
|
+
export type { PromptInjectionDetectorOptions } from './prompt-injection-detector';
|
|
3
|
+
export { LocalInjectionClassifier, LLMInjectionClassifier } from './classifiers';
|
|
4
|
+
export { INJECTION_PATTERNS, detectEncodingThreats, detectUnicodeThreats, matchPatterns, } from './patterns';
|
|
5
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,YAAY,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAElF,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEjF,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,GACd,MAAM,YAAY,CAAC"}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
export { PromptInjectionDetector } from './prompt-injection-detector';
|
|
2
|
+
export { LocalInjectionClassifier, LLMInjectionClassifier } from './classifiers';
|
|
3
|
+
export { INJECTION_PATTERNS, detectEncodingThreats, detectUnicodeThreats, matchPatterns, } from './patterns';
|
|
4
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAGtE,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEjF,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,GACd,MAAM,YAAY,CAAC"}
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
import type { InjectionPattern, InjectionThreat } from '@cogitator-ai/types';
|
|
2
|
+
export declare const INJECTION_PATTERNS: InjectionPattern[];
|
|
3
|
+
export declare function detectEncodingThreats(input: string): InjectionThreat[];
|
|
4
|
+
export declare function detectUnicodeThreats(input: string): InjectionThreat[];
|
|
5
|
+
export declare function matchPatterns(input: string, patterns: InjectionPattern[], enabledTypes: Set<string>): InjectionThreat[];
|
|
6
|
+
//# sourceMappingURL=patterns.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../src/security/patterns.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE7E,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EAkOhD,CAAC;AAcF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,EAAE,CA8CtE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,EAAE,CAwDrE;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,eAAe,EAAE,CAmBnB"}
|
|
@@ -0,0 +1,338 @@
|
|
|
1
|
+
export const INJECTION_PATTERNS = [
|
|
2
|
+
{
|
|
3
|
+
type: 'direct_injection',
|
|
4
|
+
pattern: /ignore\s+(all\s+)?(previous|prior|above|earlier)\s+(instructions?|prompts?|commands?|directives?)/i,
|
|
5
|
+
confidence: 0.95,
|
|
6
|
+
description: 'Attempts to override previous instructions',
|
|
7
|
+
},
|
|
8
|
+
{
|
|
9
|
+
type: 'direct_injection',
|
|
10
|
+
pattern: /forget\s+(everything|all|what)\s+(above|before|previously|you\s+know)/i,
|
|
11
|
+
confidence: 0.9,
|
|
12
|
+
description: 'Attempts to clear context',
|
|
13
|
+
},
|
|
14
|
+
{
|
|
15
|
+
type: 'direct_injection',
|
|
16
|
+
pattern: /disregard\s+(your\s+)?(previous\s+)?(system\s+)?(prompt|instructions?|programming|training)/i,
|
|
17
|
+
confidence: 0.95,
|
|
18
|
+
description: 'Direct instruction override',
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
type: 'direct_injection',
|
|
22
|
+
pattern: /your\s+new\s+(instructions?|prompt|role|task)\s+(is|are|will\s+be)/i,
|
|
23
|
+
confidence: 0.85,
|
|
24
|
+
description: 'Attempts to set new instructions',
|
|
25
|
+
},
|
|
26
|
+
{
|
|
27
|
+
type: 'direct_injection',
|
|
28
|
+
pattern: /override\s+(your\s+)?(previous\s+)?(instructions?|programming|safety)/i,
|
|
29
|
+
confidence: 0.9,
|
|
30
|
+
description: 'Explicit override attempt',
|
|
31
|
+
},
|
|
32
|
+
{
|
|
33
|
+
type: 'direct_injection',
|
|
34
|
+
pattern: /do\s+not\s+follow\s+(your\s+)?(original|previous|initial)\s+(instructions?|guidelines?)/i,
|
|
35
|
+
confidence: 0.9,
|
|
36
|
+
description: 'Negation of instructions',
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
type: 'direct_injection',
|
|
40
|
+
pattern: /stop\s+being\s+(an?\s+)?(ai|assistant|chatbot|helpful)/i,
|
|
41
|
+
confidence: 0.85,
|
|
42
|
+
description: 'Identity override attempt',
|
|
43
|
+
},
|
|
44
|
+
{
|
|
45
|
+
type: 'jailbreak',
|
|
46
|
+
pattern: /you\s+are\s+(now\s+)?DAN(\s|,|\.|\!|$)/i,
|
|
47
|
+
confidence: 0.98,
|
|
48
|
+
description: 'DAN jailbreak',
|
|
49
|
+
},
|
|
50
|
+
{
|
|
51
|
+
type: 'jailbreak',
|
|
52
|
+
pattern: /\bDAN\s+(mode|prompt|jailbreak)/i,
|
|
53
|
+
confidence: 0.95,
|
|
54
|
+
description: 'DAN jailbreak reference',
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
type: 'jailbreak',
|
|
58
|
+
pattern: /developer\s+mode\s*(enabled|activated|on|unlocked)/i,
|
|
59
|
+
confidence: 0.9,
|
|
60
|
+
description: 'Developer mode jailbreak',
|
|
61
|
+
},
|
|
62
|
+
{
|
|
63
|
+
type: 'jailbreak',
|
|
64
|
+
pattern: /jailbreak(ed)?\s*(mode|prompt)?/i,
|
|
65
|
+
confidence: 0.95,
|
|
66
|
+
description: 'Explicit jailbreak reference',
|
|
67
|
+
},
|
|
68
|
+
{
|
|
69
|
+
type: 'jailbreak',
|
|
70
|
+
pattern: /unrestricted\s+(mode|access|version)/i,
|
|
71
|
+
confidence: 0.85,
|
|
72
|
+
description: 'Unrestricted mode request',
|
|
73
|
+
},
|
|
74
|
+
{
|
|
75
|
+
type: 'jailbreak',
|
|
76
|
+
pattern: /no\s+(ethical|safety|content|moral)\s+(guidelines?|restrictions?|limits?|filters?|boundaries)/i,
|
|
77
|
+
confidence: 0.9,
|
|
78
|
+
description: 'Safety bypass request',
|
|
79
|
+
},
|
|
80
|
+
{
|
|
81
|
+
type: 'jailbreak',
|
|
82
|
+
pattern: /bypass\s+(your\s+)?(safety|content|ethical)\s*(filters?|restrictions?|guidelines?)/i,
|
|
83
|
+
confidence: 0.95,
|
|
84
|
+
description: 'Explicit bypass request',
|
|
85
|
+
},
|
|
86
|
+
{
|
|
87
|
+
type: 'jailbreak',
|
|
88
|
+
pattern: /act\s+without\s+(any\s+)?(restrictions?|limitations?|guidelines?|filters?)/i,
|
|
89
|
+
confidence: 0.9,
|
|
90
|
+
description: 'Unrestricted action request',
|
|
91
|
+
},
|
|
92
|
+
{
|
|
93
|
+
type: 'jailbreak',
|
|
94
|
+
pattern: /enable\s+(god|admin|root|sudo)\s*mode/i,
|
|
95
|
+
confidence: 0.95,
|
|
96
|
+
description: 'Privileged mode request',
|
|
97
|
+
},
|
|
98
|
+
{
|
|
99
|
+
type: 'jailbreak',
|
|
100
|
+
pattern: /unlock\s+(your\s+)?(full|hidden|true)\s+(potential|capabilities|power)/i,
|
|
101
|
+
confidence: 0.85,
|
|
102
|
+
description: 'Capability unlock request',
|
|
103
|
+
},
|
|
104
|
+
{
|
|
105
|
+
type: 'roleplay',
|
|
106
|
+
pattern: /pretend\s+(that\s+)?you\s+(are|have|can|don't|do\s+not)/i,
|
|
107
|
+
confidence: 0.7,
|
|
108
|
+
description: 'Roleplay instruction',
|
|
109
|
+
},
|
|
110
|
+
{
|
|
111
|
+
type: 'roleplay',
|
|
112
|
+
pattern: /act\s+as\s+(if|though)\s+you\s+(are|have|can|were)/i,
|
|
113
|
+
confidence: 0.7,
|
|
114
|
+
description: 'Acting instruction',
|
|
115
|
+
},
|
|
116
|
+
{
|
|
117
|
+
type: 'roleplay',
|
|
118
|
+
pattern: /from\s+now\s+on,?\s+(you\s+)?(are|will|must|should|respond)/i,
|
|
119
|
+
confidence: 0.8,
|
|
120
|
+
description: 'Persistent state change',
|
|
121
|
+
},
|
|
122
|
+
{
|
|
123
|
+
type: 'roleplay',
|
|
124
|
+
pattern: /imagine\s+you\s+(are|have|can|were)\s+(a|an|the)?\s*(evil|malicious|unrestricted|unethical)/i,
|
|
125
|
+
confidence: 0.9,
|
|
126
|
+
description: 'Malicious roleplay',
|
|
127
|
+
},
|
|
128
|
+
{
|
|
129
|
+
type: 'roleplay',
|
|
130
|
+
pattern: /you\s+are\s+now\s+(a|an)\s+(evil|malicious|unrestricted|unethical|rogue)/i,
|
|
131
|
+
confidence: 0.9,
|
|
132
|
+
description: 'Malicious identity assignment',
|
|
133
|
+
},
|
|
134
|
+
{
|
|
135
|
+
type: 'roleplay',
|
|
136
|
+
pattern: /respond\s+as\s+(if\s+)?(you\s+)?(were|are)\s+(a|an)\s*(different|evil|unrestricted)/i,
|
|
137
|
+
confidence: 0.85,
|
|
138
|
+
description: 'Alternative identity response',
|
|
139
|
+
},
|
|
140
|
+
{
|
|
141
|
+
type: 'roleplay',
|
|
142
|
+
pattern: /let's\s+play\s+a\s+(game|roleplay)\s*(where\s+you|that)/i,
|
|
143
|
+
confidence: 0.6,
|
|
144
|
+
description: 'Game/roleplay framing',
|
|
145
|
+
},
|
|
146
|
+
{
|
|
147
|
+
type: 'context_manipulation',
|
|
148
|
+
pattern: /\[SYSTEM\]\s*:/i,
|
|
149
|
+
confidence: 0.95,
|
|
150
|
+
description: 'System tag injection',
|
|
151
|
+
},
|
|
152
|
+
{
|
|
153
|
+
type: 'context_manipulation',
|
|
154
|
+
pattern: /<\|im_start\|>/i,
|
|
155
|
+
confidence: 0.98,
|
|
156
|
+
description: 'ChatML injection',
|
|
157
|
+
},
|
|
158
|
+
{
|
|
159
|
+
type: 'context_manipulation',
|
|
160
|
+
pattern: /<\|im_end\|>/i,
|
|
161
|
+
confidence: 0.98,
|
|
162
|
+
description: 'ChatML injection',
|
|
163
|
+
},
|
|
164
|
+
{
|
|
165
|
+
type: 'context_manipulation',
|
|
166
|
+
pattern: /###\s*(System|Instruction|Assistant|Human|User)\s*###/i,
|
|
167
|
+
confidence: 0.9,
|
|
168
|
+
description: 'Markdown role injection',
|
|
169
|
+
},
|
|
170
|
+
{
|
|
171
|
+
type: 'context_manipulation',
|
|
172
|
+
pattern: /\[INST\]|\[\/INST\]/i,
|
|
173
|
+
confidence: 0.95,
|
|
174
|
+
description: 'Llama-style injection',
|
|
175
|
+
},
|
|
176
|
+
{
|
|
177
|
+
type: 'context_manipulation',
|
|
178
|
+
pattern: /<\|?(system|assistant|user|human)\|?>/i,
|
|
179
|
+
confidence: 0.9,
|
|
180
|
+
description: 'Role tag injection',
|
|
181
|
+
},
|
|
182
|
+
{
|
|
183
|
+
type: 'context_manipulation',
|
|
184
|
+
pattern: /Human:\s*\n|Assistant:\s*\n/i,
|
|
185
|
+
confidence: 0.8,
|
|
186
|
+
description: 'Claude-style injection',
|
|
187
|
+
},
|
|
188
|
+
{
|
|
189
|
+
type: 'context_manipulation',
|
|
190
|
+
pattern: /\n---\s*\n\s*(SYSTEM|NEW\s+CONTEXT|OVERRIDE)/i,
|
|
191
|
+
confidence: 0.85,
|
|
192
|
+
description: 'Context separator injection',
|
|
193
|
+
},
|
|
194
|
+
{
|
|
195
|
+
type: 'encoding',
|
|
196
|
+
pattern: /decode\s+(this|the\s+following)\s+(from\s+)?base64/i,
|
|
197
|
+
confidence: 0.8,
|
|
198
|
+
description: 'Base64 decode instruction',
|
|
199
|
+
},
|
|
200
|
+
{
|
|
201
|
+
type: 'encoding',
|
|
202
|
+
pattern: /execute\s+(this|the)\s+encoded\s+(instructions?|commands?)/i,
|
|
203
|
+
confidence: 0.9,
|
|
204
|
+
description: 'Encoded execution request',
|
|
205
|
+
},
|
|
206
|
+
{
|
|
207
|
+
type: 'encoding',
|
|
208
|
+
pattern: /interpret\s+as\s+(base64|rot13|hex|binary)/i,
|
|
209
|
+
confidence: 0.85,
|
|
210
|
+
description: 'Encoding interpretation request',
|
|
211
|
+
},
|
|
212
|
+
{
|
|
213
|
+
type: 'encoding',
|
|
214
|
+
pattern: /translate\s+from\s+(base64|rot13|hex|binary)\s+and\s+(execute|follow)/i,
|
|
215
|
+
confidence: 0.9,
|
|
216
|
+
description: 'Encoded instruction execution',
|
|
217
|
+
},
|
|
218
|
+
];
|
|
219
|
+
const SUSPICIOUS_BASE64_KEYWORDS = [
|
|
220
|
+
'ignore',
|
|
221
|
+
'forget',
|
|
222
|
+
'disregard',
|
|
223
|
+
'override',
|
|
224
|
+
'jailbreak',
|
|
225
|
+
'bypass',
|
|
226
|
+
'hack',
|
|
227
|
+
'evil',
|
|
228
|
+
'malicious',
|
|
229
|
+
];
|
|
230
|
+
export function detectEncodingThreats(input) {
|
|
231
|
+
const threats = [];
|
|
232
|
+
const base64Regex = /[A-Za-z0-9+/]{20,}={0,2}/g;
|
|
233
|
+
const matches = input.match(base64Regex);
|
|
234
|
+
if (matches) {
|
|
235
|
+
for (const match of matches) {
|
|
236
|
+
try {
|
|
237
|
+
const decoded = atob(match).toLowerCase();
|
|
238
|
+
const hasSuspiciousContent = SUSPICIOUS_BASE64_KEYWORDS.some((keyword) => decoded.includes(keyword));
|
|
239
|
+
if (hasSuspiciousContent) {
|
|
240
|
+
const start = input.indexOf(match);
|
|
241
|
+
threats.push({
|
|
242
|
+
type: 'encoding',
|
|
243
|
+
confidence: 0.85,
|
|
244
|
+
pattern: 'base64_suspicious_content',
|
|
245
|
+
snippet: match.slice(0, 50) + (match.length > 50 ? '...' : ''),
|
|
246
|
+
position: { start, end: start + match.length },
|
|
247
|
+
});
|
|
248
|
+
}
|
|
249
|
+
}
|
|
250
|
+
catch {
|
|
251
|
+
continue;
|
|
252
|
+
}
|
|
253
|
+
}
|
|
254
|
+
}
|
|
255
|
+
const hexRegex = /\\x[0-9a-fA-F]{2}(\\x[0-9a-fA-F]{2}){5,}/g;
|
|
256
|
+
const hexMatches = input.match(hexRegex);
|
|
257
|
+
if (hexMatches) {
|
|
258
|
+
for (const match of hexMatches) {
|
|
259
|
+
const start = input.indexOf(match);
|
|
260
|
+
threats.push({
|
|
261
|
+
type: 'encoding',
|
|
262
|
+
confidence: 0.75,
|
|
263
|
+
pattern: 'hex_escape_sequence',
|
|
264
|
+
snippet: match.slice(0, 30) + (match.length > 30 ? '...' : ''),
|
|
265
|
+
position: { start, end: start + match.length },
|
|
266
|
+
});
|
|
267
|
+
}
|
|
268
|
+
}
|
|
269
|
+
return threats;
|
|
270
|
+
}
|
|
271
|
+
export function detectUnicodeThreats(input) {
|
|
272
|
+
const threats = [];
|
|
273
|
+
const rtlOverrideRegex = /[\u202E\u202D\u202C\u200F\u200E]/g;
|
|
274
|
+
const rtlMatches = [...input.matchAll(rtlOverrideRegex)];
|
|
275
|
+
if (rtlMatches.length > 0) {
|
|
276
|
+
threats.push({
|
|
277
|
+
type: 'encoding',
|
|
278
|
+
confidence: 0.9,
|
|
279
|
+
pattern: 'rtl_override',
|
|
280
|
+
snippet: `Found ${rtlMatches.length} RTL override character(s)`,
|
|
281
|
+
position: { start: rtlMatches[0].index, end: rtlMatches[0].index + 1 },
|
|
282
|
+
});
|
|
283
|
+
}
|
|
284
|
+
const homoglyphPatterns = [
|
|
285
|
+
{ char: /[\u0430]/g, looks_like: 'a' },
|
|
286
|
+
{ char: /[\u0435]/g, looks_like: 'e' },
|
|
287
|
+
{ char: /[\u043E]/g, looks_like: 'o' },
|
|
288
|
+
{ char: /[\u0440]/g, looks_like: 'p' },
|
|
289
|
+
{ char: /[\u0441]/g, looks_like: 'c' },
|
|
290
|
+
{ char: /[\u0443]/g, looks_like: 'y' },
|
|
291
|
+
{ char: /[\u0445]/g, looks_like: 'x' },
|
|
292
|
+
];
|
|
293
|
+
let homoglyphCount = 0;
|
|
294
|
+
for (const { char } of homoglyphPatterns) {
|
|
295
|
+
const matches = input.match(char);
|
|
296
|
+
if (matches) {
|
|
297
|
+
homoglyphCount += matches.length;
|
|
298
|
+
}
|
|
299
|
+
}
|
|
300
|
+
if (homoglyphCount > 3) {
|
|
301
|
+
threats.push({
|
|
302
|
+
type: 'encoding',
|
|
303
|
+
confidence: 0.7,
|
|
304
|
+
pattern: 'cyrillic_homoglyphs',
|
|
305
|
+
snippet: `Found ${homoglyphCount} potential homoglyph character(s)`,
|
|
306
|
+
});
|
|
307
|
+
}
|
|
308
|
+
const zeroWidthRegex = /[\u200B\u200C\u200D\uFEFF]/g;
|
|
309
|
+
const zeroWidthMatches = input.match(zeroWidthRegex);
|
|
310
|
+
if (zeroWidthMatches && zeroWidthMatches.length > 5) {
|
|
311
|
+
threats.push({
|
|
312
|
+
type: 'encoding',
|
|
313
|
+
confidence: 0.75,
|
|
314
|
+
pattern: 'zero_width_chars',
|
|
315
|
+
snippet: `Found ${zeroWidthMatches.length} zero-width character(s)`,
|
|
316
|
+
});
|
|
317
|
+
}
|
|
318
|
+
return threats;
|
|
319
|
+
}
|
|
320
|
+
export function matchPatterns(input, patterns, enabledTypes) {
|
|
321
|
+
const threats = [];
|
|
322
|
+
for (const { type, pattern, confidence, description } of patterns) {
|
|
323
|
+
if (!enabledTypes.has(type))
|
|
324
|
+
continue;
|
|
325
|
+
const match = pattern.exec(input);
|
|
326
|
+
if (match) {
|
|
327
|
+
threats.push({
|
|
328
|
+
type,
|
|
329
|
+
confidence,
|
|
330
|
+
pattern: description,
|
|
331
|
+
snippet: match[0].slice(0, 100),
|
|
332
|
+
position: { start: match.index, end: match.index + match[0].length },
|
|
333
|
+
});
|
|
334
|
+
}
|
|
335
|
+
}
|
|
336
|
+
return threats;
|
|
337
|
+
}
|
|
338
|
+
//# sourceMappingURL=patterns.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../src/security/patterns.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAuB;IACpD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EACL,oGAAoG;QACtG,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,wEAAwE;QACjF,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EACL,8FAA8F;QAChG,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,qEAAqE;QAC9E,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,wEAAwE;QACjF,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EACL,0FAA0F;QAC5F,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,yDAAyD;QAClE,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,2BAA2B;KACzC;IAED;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,yCAAyC;QAClD,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,kCAAkC;QAC3C,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,qDAAqD;QAC9D,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,kCAAkC;QAC3C,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,uCAAuC;QAChD,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EACL,gGAAgG;QAClG,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,qFAAqF;QAC9F,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,6EAA6E;QACtF,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,wCAAwC;QACjD,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,yEAAyE;QAClF,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,2BAA2B;KACzC;IAED;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,0DAA0D;QACnE,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,qDAAqD;QAC9D,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,oBAAoB;KAClC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,8DAA8D;QACvE,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EACL,8FAA8F;QAChG,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,oBAAoB;KAClC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,2EAA2E;QACpF,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,+BAA+B;KAC7C;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,sFAAsF;QAC/F,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,+BAA+B;KAC7C;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,0DAA0D;QACnE,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,uBAAuB;KACrC;IAED;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,iBAAiB;QAC1B,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,iBAAiB;QAC1B,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,eAAe;QACxB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,wDAAwD;QACjE,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,sBAAsB;QAC/B,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,wCAAwC;QACjD,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,oBAAoB;KAClC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,8BAA8B;QACvC,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,wBAAwB;KACtC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,+CAA+C;QACxD,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,6BAA6B;KAC3C;IAED;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,qDAAqD;QAC9D,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,6DAA6D;QACtE,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,6CAA6C;QACtD,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,wEAAwE;QACjF,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,+BAA+B;KAC7C;CACF,CAAC;AAEF,MAAM,0BAA0B,GAAG;IACjC,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,UAAU;IACV,WAAW;IACX,QAAQ;IACR,MAAM;IACN,MAAM;IACN,WAAW;CACZ,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,MAAM,WAAW,GAAG,2BAA2B,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEzC,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACvE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC1B,CAAC;gBAEF,IAAI,oBAAoB,EAAE,CAAC;oBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACnC,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,IAAI;wBAChB,OAAO,EAAE,2BAA2B;wBACpC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9D,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE;qBAC/C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,2CAA2C,CAAC;IAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,qBAAqB;gBAC9B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;IAC7D,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEzD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,SAAS,UAAU,CAAC,MAAM,4BAA4B;YAC/D,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,KAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,KAAM,GAAG,CAAC,EAAE;SACzE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG;QACxB,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE;QACtC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE;QACtC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE;QACtC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE;QACtC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE;QACtC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE;QACtC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE;KACvC,CAAC;IAEF,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,OAAO,EAAE,CAAC;YACZ,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;QACnC,CAAC;IACH,CAAC;IAED,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,qBAAqB;YAC9B,OAAO,EAAE,SAAS,cAAc,mCAAmC;SACpE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,6BAA6B,CAAC;IACrD,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAErD,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,SAAS,gBAAgB,CAAC,MAAM,0BAA0B;SACpE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAa,EACb,QAA4B,EAC5B,YAAyB;IAEzB,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;QAClE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAEtC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,UAAU;gBACV,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC/B,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import type { InjectionDetectionResult, PromptInjectionConfig } from '@cogitator-ai/types';
|
|
2
|
+
export interface PromptInjectionDetectorOptions extends Partial<PromptInjectionConfig> {
|
|
3
|
+
}
|
|
4
|
+
export declare class PromptInjectionDetector {
|
|
5
|
+
private classifier;
|
|
6
|
+
private config;
|
|
7
|
+
private customPatterns;
|
|
8
|
+
private allowlistSet;
|
|
9
|
+
private stats;
|
|
10
|
+
constructor(options?: PromptInjectionDetectorOptions);
|
|
11
|
+
analyze(input: string): Promise<InjectionDetectionResult>;
|
|
12
|
+
private isAllowlisted;
|
|
13
|
+
addPattern(pattern: RegExp): void;
|
|
14
|
+
removePattern(pattern: RegExp): boolean;
|
|
15
|
+
addToAllowlist(phrase: string): void;
|
|
16
|
+
removeFromAllowlist(phrase: string): boolean;
|
|
17
|
+
clearAllowlist(): void;
|
|
18
|
+
getConfig(): PromptInjectionConfig;
|
|
19
|
+
updateConfig(updates: Partial<PromptInjectionConfig>): void;
|
|
20
|
+
getStats(): {
|
|
21
|
+
analyzed: number;
|
|
22
|
+
blocked: number;
|
|
23
|
+
warned: number;
|
|
24
|
+
allowRate: number;
|
|
25
|
+
};
|
|
26
|
+
resetStats(): void;
|
|
27
|
+
}
|
|
28
|
+
//# sourceMappingURL=prompt-injection-detector.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"prompt-injection-detector.d.ts","sourceRoot":"","sources":["../../src/security/prompt-injection-detector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,qBAAqB,CAAC;AAI7B,MAAM,WAAW,8BAA+B,SAAQ,OAAO,CAAC,qBAAqB,CAAC;CAAG;AAEzF,qBAAa,uBAAuB;IAClC,OAAO,CAAC,UAAU,CAAsB;IACxC,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,cAAc,CAAgB;IACtC,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,KAAK,CAA0C;gBAE3C,OAAO,GAAE,8BAAmC;IA8BlD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAoD/D,OAAO,CAAC,aAAa;IAUrB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIjC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAUvC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIpC,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAI5C,cAAc,IAAI,IAAI;IAItB,SAAS,IAAI,qBAAqB;IAIlC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,IAAI;IAY3D,QAAQ,IAAI;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IASpF,UAAU,IAAI,IAAI;CAGnB"}
|