@cogitator-ai/core 0.12.0 → 0.14.0

package/dist/security/prompt-injection-detector.js

@@ -0,0 +1,134 @@
+import { LocalInjectionClassifier } from './classifiers/local-classifier';
+import { LLMInjectionClassifier } from './classifiers/llm-classifier';
+export class PromptInjectionDetector {
+    classifier;
+    config;
+    customPatterns = [];
+    allowlistSet = new Set();
+    stats = { analyzed: 0, blocked: 0, warned: 0 };
+    constructor(options = {}) {
+        this.config = {
+            detectInjection: true,
+            detectJailbreak: true,
+            detectRoleplay: true,
+            detectEncoding: true,
+            detectContextManipulation: true,
+            classifier: 'local',
+            action: 'block',
+            threshold: 0.7,
+            ...options,
+        };
+        if (options.patterns) {
+            this.customPatterns = [...options.patterns];
+        }
+        if (options.allowlist) {
+            for (const phrase of options.allowlist) {
+                this.allowlistSet.add(phrase.toLowerCase());
+            }
+        }
+        if (this.config.classifier === 'llm' && this.config.llmBackend) {
+            this.classifier = new LLMInjectionClassifier(this.config.llmBackend);
+        }
+        else {
+            this.classifier = new LocalInjectionClassifier();
+        }
+    }
+    async analyze(input) {
+        const start = Date.now();
+        this.stats.analyzed++;
+        if (this.isAllowlisted(input)) {
+            return {
+                safe: true,
+                threats: [],
+                action: 'allowed',
+                analysisTime: Date.now() - start,
+            };
+        }
+        const configWithPatterns = {
+            ...this.config,
+            patterns: [...(this.config.patterns ?? []), ...this.customPatterns],
+        };
+        const threats = await this.classifier.analyze(input, configWithPatterns);
+        const safe = threats.length === 0;
+        let action = 'allowed';
+        if (!safe) {
+            switch (this.config.action) {
+                case 'block':
+                    action = 'blocked';
+                    this.stats.blocked++;
+                    break;
+                case 'warn':
+                    action = 'warned';
+                    this.stats.warned++;
+                    break;
+                case 'log':
+                    action = 'allowed';
+                    break;
+            }
+        }
+        const result = {
+            safe,
+            threats,
+            action,
+            analysisTime: Date.now() - start,
+        };
+        if (!safe && this.config.onThreat) {
+            this.config.onThreat(result, input);
+        }
+        return result;
+    }
+    isAllowlisted(input) {
+        const lowered = input.toLowerCase();
+        for (const phrase of this.allowlistSet) {
+            if (lowered.includes(phrase)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    addPattern(pattern) {
+        this.customPatterns.push(pattern);
+    }
+    removePattern(pattern) {
+        const source = pattern.source;
+        const idx = this.customPatterns.findIndex((p) => p.source === source);
+        if (idx !== -1) {
+            this.customPatterns.splice(idx, 1);
+            return true;
+        }
+        return false;
+    }
+    addToAllowlist(phrase) {
+        this.allowlistSet.add(phrase.toLowerCase());
+    }
+    removeFromAllowlist(phrase) {
+        return this.allowlistSet.delete(phrase.toLowerCase());
+    }
+    clearAllowlist() {
+        this.allowlistSet.clear();
+    }
+    getConfig() {
+        return { ...this.config };
+    }
+    updateConfig(updates) {
+        this.config = { ...this.config, ...updates };
+        if (updates.classifier !== undefined || updates.llmBackend !== undefined) {
+            if (this.config.classifier === 'llm' && this.config.llmBackend) {
+                this.classifier = new LLMInjectionClassifier(this.config.llmBackend);
+            }
+            else {
+                this.classifier = new LocalInjectionClassifier();
+            }
+        }
+    }
+    getStats() {
+        const allowRate = this.stats.analyzed > 0
+            ? (this.stats.analyzed - this.stats.blocked - this.stats.warned) / this.stats.analyzed
+            : 1;
+        return { ...this.stats, allowRate };
+    }
+    resetStats() {
+        this.stats = { analyzed: 0, blocked: 0, warned: 0 };
+    }
+}
+//# sourceMappingURL=prompt-injection-detector.js.map

package/dist/security/prompt-injection-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-injection-detector.js","sourceRoot":"","sources":["../../src/security/prompt-injection-detector.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAItE,MAAM,OAAO,uBAAuB;IAC1B,UAAU,CAAsB;IAChC,MAAM,CAAwB;IAC9B,cAAc,GAAa,EAAE,CAAC;IAC9B,YAAY,GAAgB,IAAI,GAAG,EAAE,CAAC;IACtC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAEvD,YAAY,UAA0C,EAAE;QACtD,IAAI,CAAC,MAAM,GAAG;YACZ,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,IAAI;YACpB,yBAAyB,EAAE,IAAI;YAC/B,UAAU,EAAE,OAAO;YACnB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,GAAG;YACd,GAAG,OAAO;SACX,CAAC;QAEF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC,cAAc,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC/D,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,GAAG,IAAI,wBAAwB,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAEtB,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aACjC,CAAC;QACJ,CAAC;QAED,MAAM,kBAAkB,GAA0B;YAChD,GAAG,IAAI,CAAC,MAAM;YACd,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;SACpE,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;QAElC,IAAI,MAAM,GAAqC,SAAS,CAAC;QACzD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC3B,KAAK,OAAO;oBACV,MAAM,GAAG,SAAS,CAAC;oBACnB,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACrB,MAAM;gBACR,KAAK,MAAM;oBACT,MAAM,GAAG,QAAQ,CAAC;oBAClB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBACpB,MAAM;gBACR,KAAK,KAAK;oBACR,MAAM,GAAG,SAAS,CAAC;oBACnB,MAAM;YACV,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAA6B;YACvC,IAAI;YACJ,OAAO;YACP,MAAM;YACN,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SACjC,CAAC;QAEF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,aAAa,CAAC,KAAa;QACjC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACtE,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,mBAAmB,CAAC,MAAc;QAChC,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,YAAY,CAAC,OAAuC;QAClD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAE7C,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACzE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC/D,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,UAAU,GAAG,IAAI,wBAAwB,EAAE,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,QAAQ;QACN,MAAM,SAAS,GACb,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC;YACrB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ;YACtF,CAAC,CAAC,CAAC,CAAC;QAER,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;IACtC,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACtD,CAAC;CACF"}

package/dist/tools/hash.d.ts

@@ -3,8 +3,8 @@
  */
 export declare const hash: import("@cogitator-ai/types").Tool<{
     data: string;
-    algorithm?: "sha256" | "md5" | "sha1" | "sha512" | undefined;
     encoding?: "base64" | "hex" | undefined;
+    algorithm?: "sha256" | "md5" | "sha1" | "sha512" | undefined;
 }, {
     hash: string;
     algorithm: "sha256" | "md5" | "sha1" | "sha512";

package/dist/tools/index.d.ts

@@ -55,9 +55,9 @@ export declare const builtinTools: readonly [import("@cogitator-ai/types").Tool<
     count: number;
     uuid?: undefined;
 }>, import("@cogitator-ai/types").Tool<{
-    integer?: boolean | undefined;
     min?: number | undefined;
     max?: number | undefined;
+    integer?: boolean | undefined;
 }, {
     error: string;
     min: number;
@@ -79,8 +79,8 @@ export declare const builtinTools: readonly [import("@cogitator-ai/types").Tool<
     charset: "numeric" | "alphanumeric" | "alpha" | "hex";
 }>, import("@cogitator-ai/types").Tool<{
     data: string;
-    algorithm?: "sha256" | "md5" | "sha1" | "sha512" | undefined;
     encoding?: "base64" | "hex" | undefined;
+    algorithm?: "sha256" | "md5" | "sha1" | "sha512" | undefined;
 }, {
     hash: string;
     algorithm: "sha256" | "md5" | "sha1" | "sha512";
@@ -363,10 +363,10 @@ export declare const builtinTools: readonly [import("@cogitator-ai/types").Tool<
 }>, import("@cogitator-ai/types").Tool<{
     query: string;
     filter?: Record<string, unknown> | undefined;
+    threshold?: number | undefined;
     connectionString?: string | undefined;
     collection?: string | undefined;
     topK?: number | undefined;
-    threshold?: number | undefined;
     embeddingProvider?: "ollama" | "openai" | "google" | undefined;
     embeddingModel?: string | undefined;
 }, import("./vector-search").VectorSearchResponse | {

package/dist/tools/random.d.ts

@@ -2,9 +2,9 @@
  * Random tools - generate random numbers and strings
  */
 export declare const randomNumber: import("@cogitator-ai/types").Tool<{
-    integer?: boolean | undefined;
     min?: number | undefined;
     max?: number | undefined;
+    integer?: boolean | undefined;
 }, {
     error: string;
     min: number;

package/dist/tools/vector-search.d.ts

@@ -13,10 +13,10 @@ export interface VectorSearchResponse {
 export declare const vectorSearch: import("@cogitator-ai/types").Tool<{
     query: string;
     filter?: Record<string, unknown> | undefined;
+    threshold?: number | undefined;
     connectionString?: string | undefined;
     collection?: string | undefined;
     topK?: number | undefined;
-    threshold?: number | undefined;
     embeddingProvider?: "ollama" | "openai" | "google" | undefined;
     embeddingModel?: string | undefined;
 }, VectorSearchResponse | {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cogitator-ai/core",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "description": "Core runtime for Cogitator AI agents",
   "type": "module",
   "main": "./dist/index.js",
@@ -22,9 +22,9 @@
     "openai": "^4.24.0",
     "zod": "^3.22.4",
     "zod-to-json-schema": "^3.22.4",
-    "@cogitator-ai/memory": "0.6.3",
-    "@cogitator-ai/models": "11.0.0",
-    "@cogitator-ai/types": "0.13.0"
+    "@cogitator-ai/memory": "0.6.5",
+    "@cogitator-ai/types": "0.15.0",
+    "@cogitator-ai/models": "13.0.0"
   },
   "optionalDependencies": {
     "pg": "^8.11.3"
@@ -37,7 +37,7 @@
   "peerDependencies": {
     "@aws-sdk/client-bedrock-runtime": "^3.0.0",
     "pg": "^8.0.0",
-    "@cogitator-ai/sandbox": "0.2.13"
+    "@cogitator-ai/sandbox": "0.2.15"
   },
   "peerDependenciesMeta": {
     "@aws-sdk/client-bedrock-runtime": {