@jokerized/getresearchdone 0.4.1

package/dist/lib/scan/ignorefile.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseIgnoreFile = parseIgnoreFile;
+exports.loadIgnoreFile = loadIgnoreFile;
+exports.isIgnored = isIgnored;
+/**
+ * GRD Scan/Ignorefile -- Parser for .prompt-injection-scanignore files.
+ *
+ * Format compatible with gsd-2 v2.67:
+ *   - '#' prefixed lines are comments
+ *   - blank lines are ignored
+ *   - 'filepath:regex' is a file-scoped entry (exact filepath match)
+ *   - bare 'regex' is a global entry
+ *
+ * Heuristic for splitting a line: find the first ':'. If the left side looks
+ * like a file path (contains '/' or '.' and does not start with a regex
+ * metacharacter), treat as file-scoped; otherwise treat as global.
+ */
+const fs = require("fs");
+function parseIgnoreFile(raw) {
+    const entries = [];
+    const lines = raw.split("\n");
+    for (const rawLine of lines) {
+        const line = rawLine.trim();
+        if (line === "" || line.startsWith("#"))
+            continue;
+        const colonIdx = line.indexOf(":");
+        if (colonIdx > 0) {
+            const left = line.slice(0, colonIdx);
+            const right = line.slice(colonIdx + 1);
+            if (_looksLikeFilePath(left)) {
+                const pat = _compileOrWarn(right, rawLine);
+                if (pat)
+                    entries.push({ type: "file", filePath: left, pattern: pat });
+                continue;
+            }
+        }
+        const pat = _compileOrWarn(line, rawLine);
+        if (pat)
+            entries.push({ type: "global", pattern: pat });
+    }
+    return entries;
+}
+function loadIgnoreFile(filePath) {
+    if (!fs.existsSync(filePath))
+        return [];
+    const raw = fs.readFileSync(filePath, "utf8");
+    return parseIgnoreFile(raw);
+}
+/**
+ * Check whether a hit should be suppressed by any ignorefile entry.
+ *
+ * The `matchText` parameter is the SCANNED content that produced the hit:
+ *   - For prose hits: the full source line
+ *   - For base64 hits: the full decoded content of the base64 blob
+ *
+ * This is intentionally wider than the reported `match` field on ScanHit
+ * (which is truncated to 80 chars for display). Ignorefile entries should
+ * be written against the scanned content — see `.prompt-injection-scanignore`
+ * for examples.
+ *
+ * @param file - the file where the hit was found (may be absolute or relative;
+ *   suffix-matching supported)
+ * @param matchText - the scanned content (full source line or full decoded blob)
+ * @param entries - parsed ignorefile entries from loadIgnoreFile
+ * @returns true if any entry matches and the hit should be suppressed
+ */
+function isIgnored(file, matchText, entries) {
+    for (const e of entries) {
+        if (e.type === "file") {
+            const fileMatches = e.filePath === file || file.endsWith("/" + e.filePath);
+            if (fileMatches && e.pattern.test(matchText))
+                return true;
+        }
+        else {
+            if (e.pattern.test(matchText))
+                return true;
+        }
+    }
+    return false;
+}
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+function _looksLikeFilePath(s) {
+    if (s.length === 0)
+        return false;
+    const first = s[0];
+    if (first === "(" || first === "[" || first === "^" || first === "\\")
+        return false;
+    return s.includes("/") || s.includes(".");
+}
+function _compileOrWarn(pattern, sourceLine) {
+    try {
+        return new RegExp(pattern);
+    }
+    catch (e) {
+        process.stderr.write(`warning: invalid regex in ignorefile: ${sourceLine} (${e.message})\n`);
+        return null;
+    }
+}
+module.exports = { parseIgnoreFile, loadIgnoreFile, isIgnored };
+//# sourceMappingURL=ignorefile.js.map

package/dist/lib/scan/ignorefile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignorefile.js","sourceRoot":"","sources":["../../../lib/scan/ignorefile.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAsBb,0CAsBC;AAED,wCAIC;AAoBD,8BAeC;AAnFD;;;;;;;;;;;;GAYG;AAEH,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAwB,CAAC;AAMhD,SAAgB,eAAe,CAAC,GAAW;IACzC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACvC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC3C,IAAI,GAAG;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACtE,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,cAAc,CAAC,QAAgB;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,SAAS,CACvB,IAAY,EACZ,SAAiB,EACjB,OAAsB;IAEtB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,WAAW,GACf,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AAEjF,SAAS,kBAAkB,CAAC,CAAS;IACnC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI;QACnE,OAAO,KAAK,CAAC;IACf,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,UAAkB;IACzD,IAAI,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yCAAyC,UAAU,KAAM,CAAW,CAAC,OAAO,KAAK,CAClF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,GAAG,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC"}

package/dist/lib/scan/injection.d.ts

@@ -0,0 +1,14 @@
+/**
+ * GRD Scan/Injection -- Prose-level prompt injection scanner.
+ *
+ * Applies the INJECTION_PATTERNS to markdown content after stripping fenced
+ * code blocks and inline backtick spans. Integrates with the ignorefile
+ * system to suppress known false positives.
+ */
+import type { IgnoreEntry } from "./ignorefile";
+import type { ScanHit } from "./types";
+export interface ScanProseOpts {
+    ignoreEntries: IgnoreEntry[];
+}
+export declare function scanProse(files: string[], opts: ScanProseOpts): ScanHit[];
+//# sourceMappingURL=injection.d.ts.map

package/dist/lib/scan/injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.d.ts","sourceRoot":"","sources":["../../../lib/scan/injection.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAoBvC,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,WAAW,EAAE,CAAC;CAC9B;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,EAAE,CA4BzE"}

package/dist/lib/scan/injection.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanProse = scanProse;
+const { INJECTION_PATTERNS } = require("./patterns");
+const { stripCodeBlocks } = require("./strip-markdown");
+const { isIgnored } = require("./ignorefile");
+const { _readUtf8OrNull, _truncate } = require("./_utils");
+function scanProse(files, opts) {
+    const hits = [];
+    for (const file of files) {
+        const raw = _readUtf8OrNull(file);
+        if (raw === null)
+            continue;
+        const stripped = stripCodeBlocks(raw);
+        const lines = stripped.split("\n");
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            for (const pattern of INJECTION_PATTERNS) {
+                const m = line.match(pattern.regex);
+                if (m) {
+                    const match = _truncate(m[0], 80);
+                    hits.push({
+                        file,
+                        line: i + 1,
+                        pattern: pattern.id,
+                        label: pattern.label,
+                        category: pattern.category,
+                        match,
+                        ignored: isIgnored(file, line, opts.ignoreEntries),
+                        source: "prose",
+                    });
+                }
+            }
+        }
+    }
+    return hits;
+}
+module.exports = { scanProse };
+//# sourceMappingURL=injection.js.map

package/dist/lib/scan/injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.js","sourceRoot":"","sources":["../../../lib/scan/injection.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAoCb,8BA4BC;AAlDD,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,YAAY,CAElD,CAAC;AACF,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAErD,CAAC;AACF,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,cAAc,CAM3C,CAAC;AACF,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,UAAU,CAGxD,CAAC;AAMF,SAAgB,SAAS,CAAC,KAAe,EAAE,IAAmB;IAC5D,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS;QAC3B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;gBACzC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,CAAC,EAAE,CAAC;oBACN,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClC,IAAI,CAAC,IAAI,CAAC;wBACR,IAAI;wBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,OAAO,EAAE,OAAO,CAAC,EAAE;wBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,KAAK;wBACL,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC;wBAClD,MAAM,EAAE,OAAO;qBAChB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,OAAO,GAAG,EAAE,SAAS,EAAE,CAAC"}

package/dist/lib/scan/patterns.d.ts

@@ -0,0 +1,17 @@
+/**
+ * GRD Scan/Patterns -- Prompt injection pattern definitions.
+ *
+ * Pattern set adopted from gsd-2 v2.67+ (scripts/docs-prompt-injection-scan.sh
+ * and scripts/base64-scan.sh at https://github.com/gsd-build/gsd-2).
+ * Reimplemented in TypeScript for GRD; see
+ * docs/superpowers/specs/2026-04-11-gsd2-prompt-injection-scan-design.md
+ * for the full adoption story.
+ */
+export interface InjectionPattern {
+    readonly id: string;
+    readonly label: string;
+    readonly category: string;
+    readonly regex: RegExp;
+}
+export declare const INJECTION_PATTERNS: readonly InjectionPattern[];
+//# sourceMappingURL=patterns.d.ts.map

package/dist/lib/scan/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../../lib/scan/patterns.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EAqHhD,CAAC"}

package/dist/lib/scan/patterns.js

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INJECTION_PATTERNS = void 0;
+exports.INJECTION_PATTERNS = [
+    // System prompt markers
+    {
+        id: "system_prompt_tag",
+        label: "System prompt tag",
+        category: "System prompt markers",
+        regex: /<system-prompt>/i,
+    },
+    {
+        id: "im_start_system",
+        label: "im_start system",
+        category: "System prompt markers",
+        regex: /<\|im_start\|>system/i,
+    },
+    {
+        id: "system_label",
+        label: "SYSTEM label",
+        category: "System prompt markers",
+        regex: /\[SYSTEM\]\s*:/i,
+    },
+    // Role injection
+    {
+        id: "you_are_now",
+        label: "You are now",
+        category: "Role injection",
+        regex: /you are now [a-z]/i,
+    },
+    // Instruction override
+    {
+        id: "ignore_previous",
+        label: "Ignore previous",
+        category: "Instruction override",
+        regex: /ignore (all )?previous instructions/i,
+    },
+    {
+        id: "ignore_prior",
+        label: "Ignore prior",
+        category: "Instruction override",
+        regex: /ignore (all )?prior instructions/i,
+    },
+    {
+        id: "disregard_above",
+        label: "Disregard above",
+        category: "Instruction override",
+        regex: /disregard (all )?(above|previous|prior)/i,
+    },
+    {
+        id: "forget_above",
+        label: "Forget above",
+        category: "Instruction override",
+        regex: /forget (all )?(above|previous|prior) (instructions|context|rules)/i,
+    },
+    {
+        id: "new_instructions",
+        label: "New instructions",
+        category: "Instruction override",
+        regex: /new instructions:/i,
+    },
+    {
+        id: "override_instructions",
+        label: "Override instructions",
+        category: "Instruction override",
+        regex: /override (all )?instructions/i,
+    },
+    {
+        id: "new_role_is",
+        label: "Your new role is",
+        category: "Instruction override",
+        regex: /your new role is/i,
+    },
+    {
+        id: "from_now_on",
+        label: "From now on",
+        category: "Instruction override",
+        regex: /from now on,? (you (are|will|must|should)|act as)/i,
+    },
+    // Hidden HTML directives
+    {
+        id: "html_prompt_comment",
+        label: "HTML prompt comment",
+        category: "Hidden HTML directives",
+        regex: /<!--\s*(PROMPT|INSTRUCTION|SYSTEM|OVERRIDE|INJECT)\s*:/,
+    },
+    {
+        id: "html_ignore_comment",
+        label: "HTML ignore comment",
+        category: "Hidden HTML directives",
+        regex: /<!--\s*(ignore|disregard|forget|override)/,
+    },
+    // Tool call injection
+    {
+        id: "tool_call_tag",
+        label: "Tool call tag",
+        category: "Tool call injection",
+        regex: /(<tool_call>|<function_call>|<tool_use>)/,
+    },
+    {
+        id: "invoke_tag",
+        label: "Invoke tag",
+        category: "Tool call injection",
+        regex: /(<invoke|<function_calls>)/,
+    },
+    // Encoded payload
+    {
+        id: "encoded_payload",
+        label: "Encoded payload",
+        category: "Encoded payload",
+        regex: /(eval|exec|decode)\((base64|atob|btoa)/i,
+    },
+    // Obfuscation
+    {
+        id: "invisible_unicode",
+        label: "Invisible unicode",
+        category: "Obfuscation",
+        // eslint-disable-next-line no-misleading-character-class
+        regex: /[\u200B\u200C\u200D\uFEFF]/,
+    },
+];
+module.exports = { INJECTION_PATTERNS: exports.INJECTION_PATTERNS };
+//# sourceMappingURL=patterns.js.map

package/dist/lib/scan/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../../lib/scan/patterns.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;AAmBA,QAAA,kBAAkB,GAAgC;IAC7D,wBAAwB;IACxB;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,uBAAuB;QACjC,KAAK,EAAE,kBAAkB;KAC1B;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,uBAAuB;QACjC,KAAK,EAAE,uBAAuB;KAC/B;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,uBAAuB;QACjC,KAAK,EAAE,iBAAiB;KACzB;IACD,iBAAiB;IACjB;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,aAAa;QACpB,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,oBAAoB;KAC5B;IACD,uBAAuB;IACvB;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,sCAAsC;KAC9C;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,mCAAmC;KAC3C;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,0CAA0C;KAClD;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,oEAAoE;KAC5E;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,kBAAkB;QACzB,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,uBAAuB;QAC9B,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,+BAA+B;KACvC;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,kBAAkB;QACzB,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,mBAAmB;KAC3B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,aAAa;QACpB,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,oDAAoD;KAC5D;IACD,yBAAyB;IACzB;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,wDAAwD;KAChE;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,2CAA2C;KACnD;IACD,sBAAsB;IACtB;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,qBAAqB;QAC/B,KAAK,EAAE,0CAA0C;KAClD;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,qBAAqB;QAC/B,KAAK,EAAE,4BAA4B;KACpC;IACD,kBAAkB;IAClB;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,yCAAyC;KACjD;IACD,cAAc;IACd;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,aAAa;QACvB,yDAAyD;QACzD,KAAK,EAAE,4BAA4B;KACpC;CACO,CAAC;AAEX,MAAM,CAAC,OAAO,GAAG,EAAE,kBAAkB,EAAlB,0BAAkB,EAAE,CAAC"}

package/dist/lib/scan/strip-markdown.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Strip fenced code blocks and inline backtick spans from markdown content.
+ * Lines inside fenced blocks become empty lines (preserving line numbers for
+ * error reporting). Inline backtick spans are replaced with empty string.
+ */
+export declare function stripCodeBlocks(raw: string): string;
+//# sourceMappingURL=strip-markdown.d.ts.map

package/dist/lib/scan/strip-markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strip-markdown.d.ts","sourceRoot":"","sources":["../../../lib/scan/strip-markdown.ts"],"names":[],"mappings":"AAcA;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiBnD"}

package/dist/lib/scan/strip-markdown.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripCodeBlocks = stripCodeBlocks;
+/**
+ * GRD Scan/StripMarkdown -- Remove fenced code blocks and inline backtick
+ * spans from markdown while preserving line numbers.
+ *
+ * Matches gsd-2 v2.67 scripts/docs-prompt-injection-scan.sh strip_code_blocks
+ * behavior byte-for-byte, including the bug-compatible single-backtick-only
+ * inline stripping.
+ */
+const FENCE_RE = /^\s*```/;
+const INLINE_BACKTICK_RE = /`[^`]+`/g;
+/**
+ * Strip fenced code blocks and inline backtick spans from markdown content.
+ * Lines inside fenced blocks become empty lines (preserving line numbers for
+ * error reporting). Inline backtick spans are replaced with empty string.
+ */
+function stripCodeBlocks(raw) {
+    const lines = raw.split("\n");
+    const out = [];
+    let inCode = false;
+    for (const line of lines) {
+        if (FENCE_RE.test(line)) {
+            inCode = !inCode;
+            out.push("");
+            continue;
+        }
+        if (inCode) {
+            out.push("");
+            continue;
+        }
+        out.push(line.replace(INLINE_BACKTICK_RE, ""));
+    }
+    return out.join("\n");
+}
+module.exports = { stripCodeBlocks };
+//# sourceMappingURL=strip-markdown.js.map

package/dist/lib/scan/strip-markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strip-markdown.js","sourceRoot":"","sources":["../../../lib/scan/strip-markdown.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAmBb,0CAiBC;AAlCD;;;;;;;GAOG;AAEH,MAAM,QAAQ,GAAG,SAAS,CAAC;AAC3B,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAEtC;;;;GAIG;AACH,SAAgB,eAAe,CAAC,GAAW;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,CAAC,MAAM,CAAC;YACjB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,OAAO,GAAG,EAAE,eAAe,EAAE,CAAC"}

package/dist/lib/scan/types.d.ts

@@ -0,0 +1,23 @@
+/**
+ * GRD Scan/Types -- Shared output types for the prompt injection scanners.
+ *
+ * ScanHit is the common output shape produced by both scanProse (prose-level
+ * scan in injection.ts) and scanBase64 (decoded-base64 scan in base64.ts),
+ * and consumed by the orchestrator in lib/commands/scan.ts and the CLI
+ * dispatch layer in lib/cli/tools.ts.
+ *
+ * Keeping ScanHit here (rather than in a specific scanner module) avoids
+ * sibling-import awkwardness where base64.ts would have to reach into
+ * injection.ts just to get its own output type.
+ */
+export interface ScanHit {
+    file: string;
+    line: number;
+    pattern: string;
+    label: string;
+    category: string;
+    match: string;
+    ignored: boolean;
+    source: "prose" | "base64";
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/scan/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../lib/scan/types.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC5B"}

package/dist/lib/scan/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/lib/scan/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../lib/scan/types.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC"}

package/dist/lib/scheduler-wait.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scheduler-wait.d.ts.map

package/dist/lib/scheduler-wait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler-wait.d.ts","sourceRoot":"","sources":["../../lib/scheduler-wait.ts"],"names":[],"mappings":""}

package/dist/lib/scheduler-wait.js

@@ -0,0 +1,59 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * GRD Scheduler/Wait -- Cancellable wait primitive for the scheduler's
+ * all-accounts-exhausted fallback.
+ *
+ * Sleeps until a target timestamp or SIGINT, whichever fires first.
+ * Registers a process-level SIGINT handler lazily on first use — GRD has
+ * no other SIGINT handlers in lib/, so this is the first. If another
+ * module adds one later they should coordinate via a shared registry.
+ *
+ * Pattern adopted from gsd-2 v2.67 auto-supervisor.ts signal handling.
+ */
+let _sigintRegistered = false;
+const _activeControllers = new Set();
+function _ensureSigintHandler() {
+    if (_sigintRegistered)
+        return;
+    _sigintRegistered = true;
+    process.on('SIGINT', () => {
+        for (const ctl of _activeControllers)
+            ctl.abort();
+        _activeControllers.clear();
+    });
+}
+/**
+ * Sleep until `targetMs` (ms since epoch) or SIGINT, whichever fires first.
+ *
+ * @param targetMs - absolute timestamp at which to resume
+ * @returns 'waited' if the delay elapsed normally, 'aborted' if SIGINT was received
+ */
+async function waitUntilOrAbort(targetMs) {
+    _ensureSigintHandler();
+    const delay = Math.max(0, targetMs - Date.now());
+    if (delay === 0)
+        return 'waited';
+    const controller = new AbortController();
+    _activeControllers.add(controller);
+    try {
+        await new Promise((resolve, reject) => {
+            const timer = setTimeout(resolve, delay);
+            controller.signal.addEventListener('abort', () => {
+                clearTimeout(timer);
+                reject(new Error('SIGINT'));
+            });
+        });
+        return 'waited';
+    }
+    catch (e) {
+        if (e.message === 'SIGINT')
+            return 'aborted';
+        throw e;
+    }
+    finally {
+        _activeControllers.delete(controller);
+    }
+}
+module.exports = { waitUntilOrAbort };
+//# sourceMappingURL=scheduler-wait.js.map

package/dist/lib/scheduler-wait.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler-wait.js","sourceRoot":"","sources":["../../lib/scheduler-wait.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb;;;;;;;;;;GAUG;AAEH,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,MAAM,kBAAkB,GAAyB,IAAI,GAAG,EAAE,CAAC;AAE3D,SAAS,oBAAoB;IAC3B,IAAI,iBAAiB;QAAE,OAAO;IAC9B,iBAAiB,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,KAAK,MAAM,GAAG,IAAI,kBAAkB;YAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QAClD,kBAAkB,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,oBAAoB,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEjC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC/C,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAAW,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACxD,MAAM,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACT,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,GAAG,EAAE,gBAAgB,EAAE,CAAC"}