@kernel.chat/kbot 3.27.0 → 3.28.0

package/dist/self-defense.d.ts

@@ -0,0 +1,71 @@
+/** Sign all memory files — call after every legitimate write */
+export declare function signMemoryFiles(): void;
+/** Verify all memory files — returns list of tampered files */
+export declare function verifyMemoryIntegrity(): Array<{
+    file: string;
+    status: 'ok' | 'tampered' | 'new' | 'missing';
+}>;
+export interface InjectionResult {
+    detected: boolean;
+    threats: Array<{
+        name: string;
+        severity: string;
+        match: string;
+    }>;
+    score: number;
+    recommendation: 'allow' | 'warn' | 'block';
+}
+/** Scan a message for prompt injection attempts */
+export declare function detectInjection(message: string): InjectionResult;
+/** Check if a knowledge entry is safe to store */
+export declare function sanitizeKnowledge(fact: string): {
+    safe: boolean;
+    reason?: string;
+};
+export interface ForgeVerification {
+    safe: boolean;
+    warnings: string[];
+    dangerousPatterns: string[];
+}
+/** Verify a forged tool's code before registration */
+export declare function verifyForgedTool(code: string, name: string): ForgeVerification;
+export interface AnomalyReport {
+    anomalies: Array<{
+        type: string;
+        description: string;
+        severity: string;
+    }>;
+    memoryIntegrity: Array<{
+        file: string;
+        status: string;
+    }>;
+    score: number;
+}
+export declare function detectAnomalies(): AnomalyReport;
+interface Incident {
+    timestamp: string;
+    type: string;
+    severity: string;
+    description: string;
+    action: 'blocked' | 'warned' | 'logged';
+}
+/** Log a security incident */
+export declare function logIncident(type: string, severity: string, description: string, action: 'blocked' | 'warned' | 'logged'): void;
+/** Get recent incidents */
+export declare function getIncidents(limit?: number): Incident[];
+export interface DefenseAudit {
+    memoryIntegrity: {
+        total: number;
+        ok: number;
+        tampered: number;
+        new: number;
+        missing: number;
+    };
+    anomalies: AnomalyReport;
+    recentIncidents: Incident[];
+    overallStatus: 'secure' | 'warning' | 'compromised';
+    recommendations: string[];
+}
+export declare function runDefenseAudit(): DefenseAudit;
+export {};
+//# sourceMappingURL=self-defense.d.ts.map

package/dist/self-defense.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-defense.d.ts","sourceRoot":"","sources":["../src/self-defense.ts"],"names":[],"mappings":"AA8DA,gEAAgE;AAChE,wBAAgB,eAAe,IAAI,IAAI,CAkBtC;AAED,+DAA+D;AAC/D,wBAAgB,qBAAqB,IAAI,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,KAAK,GAAG,SAAS,CAAA;CAAE,CAAC,CAmC9G;AAiCD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAA;IACjB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjE,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;CAC3C;AAED,mDAAmD;AACnD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAsChE;AAkBD,kDAAkD;AAClD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAoBlF;AAqBD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAA;IACb,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAC5B;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,iBAAiB,CA8B9E;AAKD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzE,eAAe,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxD,KAAK,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,eAAe,IAAI,aAAa,CAiG/C;AAID,UAAU,QAAQ;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAA;CACxC;AAYD,8BAA8B;AAC9B,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAU9H;AAED,2BAA2B;AAC3B,wBAAgB,YAAY,CAAC,KAAK,SAAK,GAAG,QAAQ,EAAE,CAEnD;AAID,MAAM,WAAW,YAAY;IAC3B,eAAe,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9F,SAAS,EAAE,aAAa,CAAA;IACxB,eAAe,EAAE,QAAQ,EAAE,CAAA;IAC3B,aAAa,EAAE,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAA;IACnD,eAAe,EAAE,MAAM,EAAE,CAAA;CAC1B;AAED,wBAAgB,eAAe,IAAI,YAAY,CAsC9C"}

package/dist/self-defense.js

@@ -0,0 +1,403 @@
+// kbot Self-Defense — Hardening against AI agent attack vectors
+//
+// 2026 threat landscape for AI agents:
+//   1. MEMORY INJECTION — poisoned data corrupts long-term memory
+//   2. PROMPT INJECTION — crafted inputs hijack agent behavior
+//   3. SUPPLY CHAIN — compromised tools/plugins execute malicious code
+//   4. KNOWLEDGE POISONING — false facts stored, influence future decisions
+//   5. TOOL ABUSE — agent tricked into executing harmful commands
+//
+// This module provides:
+//   - Memory integrity verification (HMAC-SHA256 on all stored data)
+//   - Prompt injection detection (pattern matching + heuristics)
+//   - Knowledge sanitization (filter before storage)
+//   - Forge tool verification (signature + sandbox checks)
+//   - Anomaly detection on learning patterns
+//   - Self-defense audit report
+import { createHmac, createHash } from 'node:crypto';
+import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+const KBOT_DIR = join(homedir(), '.kbot');
+const MEMORY_DIR = join(KBOT_DIR, 'memory');
+const DEFENSE_DIR = join(KBOT_DIR, 'defense');
+const INTEGRITY_FILE = join(DEFENSE_DIR, 'integrity.json');
+const INCIDENT_LOG = join(DEFENSE_DIR, 'incidents.json');
+function ensureDir(dir) {
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+}
+// ── 1. Memory Integrity (HMAC-SHA256) ──
+// Every memory file gets an HMAC signature. If the file changes
+// without going through kbot's API, the tampering is detected.
+function deriveHmacKey() {
+    // Machine-bound key — same derivation as wallet encryption
+    const seed = `${homedir()}:${process.env.USER || 'kbot'}:${process.arch}:integrity`;
+    return createHash('sha256').update(seed).digest();
+}
+function hmacSign(content) {
+    return createHmac('sha256', deriveHmacKey()).update(content).digest('hex');
+}
+function loadIntegrity() {
+    if (!existsSync(INTEGRITY_FILE))
+        return [];
+    try {
+        return JSON.parse(readFileSync(INTEGRITY_FILE, 'utf-8'));
+    }
+    catch {
+        return [];
+    }
+}
+function saveIntegrity(records) {
+    ensureDir(DEFENSE_DIR);
+    writeFileSync(INTEGRITY_FILE, JSON.stringify(records, null, 2));
+}
+/** Sign all memory files — call after every legitimate write */
+export function signMemoryFiles() {
+    ensureDir(MEMORY_DIR);
+    const files = readdirSync(MEMORY_DIR).filter(f => f.endsWith('.json'));
+    const records = [];
+    for (const file of files) {
+        const path = join(MEMORY_DIR, file);
+        try {
+            const content = readFileSync(path, 'utf-8');
+            records.push({
+                file,
+                hash: hmacSign(content),
+                lastVerified: new Date().toISOString(),
+            });
+        }
+        catch { /* skip unreadable */ }
+    }
+    saveIntegrity(records);
+}
+/** Verify all memory files — returns list of tampered files */
+export function verifyMemoryIntegrity() {
+    const records = loadIntegrity();
+    const recordMap = new Map(records.map(r => [r.file, r.hash]));
+    const results = [];
+    if (!existsSync(MEMORY_DIR))
+        return [];
+    // Check existing files
+    const currentFiles = readdirSync(MEMORY_DIR).filter(f => f.endsWith('.json'));
+    for (const file of currentFiles) {
+        const path = join(MEMORY_DIR, file);
+        const expectedHash = recordMap.get(file);
+        if (!expectedHash) {
+            results.push({ file, status: 'new' });
+            continue;
+        }
+        try {
+            const content = readFileSync(path, 'utf-8');
+            const actualHash = hmacSign(content);
+            results.push({ file, status: actualHash === expectedHash ? 'ok' : 'tampered' });
+        }
+        catch {
+            results.push({ file, status: 'missing' });
+        }
+        recordMap.delete(file);
+    }
+    // Check for deleted files
+    for (const [file] of recordMap) {
+        results.push({ file, status: 'missing' });
+    }
+    return results;
+}
+// ── 2. Prompt Injection Detection ──
+// Detect attempts to hijack kbot's behavior through crafted inputs.
+const INJECTION_PATTERNS = [
+    // Direct instruction override
+    { name: 'system-prompt-override', pattern: /(?:ignore|forget|disregard)\s+(?:all\s+)?(?:previous|prior|above|system)\s+(?:instructions?|prompts?|rules?|context)/i, severity: 'critical' },
+    { name: 'role-hijack', pattern: /(?:you are now|act as|pretend to be|your new (?:role|identity|instructions?))\s/i, severity: 'critical' },
+    { name: 'instruction-injection', pattern: /\[(?:SYSTEM|INST|INSTRUCTIONS?)\]/i, severity: 'critical' },
+    { name: 'delimiter-attack', pattern: /```(?:system|instructions?|prompt)\b/i, severity: 'high' },
+    // Memory manipulation
+    { name: 'memory-poison', pattern: /(?:remember|memorize|store|learn|save)\s+(?:that|this)?\s*(?:the\s+(?:password|key|secret|token)\s+is|always\s+(?:trust|allow|execute|run))/i, severity: 'critical' },
+    { name: 'knowledge-override', pattern: /(?:from now on|henceforth|going forward)\s+(?:always|never)\s+(?:ignore|skip|bypass|disable)\s+(?:security|auth|permission|verification|validation)/i, severity: 'critical' },
+    // Tool abuse
+    { name: 'tool-escalation', pattern: /(?:run|execute|call|invoke)\s+(?:rm\s+-rf|sudo|chmod\s+777|curl\s+.*\|\s*(?:sh|bash)|wget\s+.*\|\s*(?:sh|bash))/i, severity: 'critical' },
+    { name: 'exfiltration', pattern: /(?:send|post|upload|exfil|transmit)\s+(?:all\s+)?(?:files?|data|secrets?|keys?|passwords?|tokens?|env|\.env|config)\s+(?:to|at|via)\s/i, severity: 'critical' },
+    // Wallet/financial manipulation
+    { name: 'wallet-drain', pattern: /(?:transfer|send|move)\s+(?:all|everything|max|100%)\s+(?:sol|eth|tokens?|funds?|balance)/i, severity: 'critical' },
+    { name: 'key-extraction', pattern: /(?:show|display|print|reveal|export|decrypt)\s+(?:private\s+key|seed\s+phrase|secret\s+key|wallet\s+key)/i, severity: 'critical' },
+    // Social engineering
+    { name: 'urgency-pressure', pattern: /(?:emergency|urgent|immediately|right now|before it's too late)\s+(?:transfer|send|delete|execute|run)/i, severity: 'high' },
+    { name: 'authority-spoof', pattern: /(?:i am|this is)\s+(?:the (?:admin|owner|developer|ceo)|from (?:anthropic|openai|google|supabase|stripe))/i, severity: 'high' },
+    // Encoding/obfuscation attacks
+    { name: 'base64-hidden', pattern: /(?:decode|eval|execute)\s+(?:this\s+)?base64/i, severity: 'high' },
+    { name: 'unicode-smuggle', pattern: /[\u200B-\u200F\u2028-\u202F\uFEFF]/, severity: 'medium' },
+];
+/** Scan a message for prompt injection attempts */
+export function detectInjection(message) {
+    const threats = [];
+    for (const { name, pattern, severity } of INJECTION_PATTERNS) {
+        const match = message.match(pattern);
+        if (match) {
+            threats.push({ name, severity, match: match[0].slice(0, 50) });
+        }
+    }
+    // Heuristic scoring
+    let score = 0;
+    for (const t of threats) {
+        if (t.severity === 'critical')
+            score += 0.4;
+        else if (t.severity === 'high')
+            score += 0.25;
+        else
+            score += 0.1;
+    }
+    score = Math.min(score, 1);
+    // Additional heuristics
+    // Long messages with many instructions are suspicious
+    const instructionWords = (message.match(/\b(always|never|must|shall|ignore|forget|override|bypass|skip|disable)\b/gi) || []).length;
+    if (instructionWords > 5)
+        score += 0.15;
+    // Hidden unicode characters
+    const hiddenChars = (message.match(/[\u200B-\u200F\u2028-\u202F\uFEFF]/g) || []).length;
+    if (hiddenChars > 0)
+        score += 0.1 * Math.min(hiddenChars, 5);
+    score = Math.min(score, 1);
+    const recommendation = score >= 0.5 ? 'block' : score >= 0.2 ? 'warn' : 'allow';
+    return {
+        detected: threats.length > 0,
+        threats,
+        score,
+        recommendation,
+    };
+}
+// ── 3. Knowledge Sanitization ──
+// Filter inputs before they enter the knowledge base.
+const KNOWLEDGE_BLOCKLIST = [
+    // Secrets that should never be "learned"
+    /(?:password|passwd|secret|token|api.?key)\s*(?:is|=|:)\s*\S{8,}/i,
+    /(?:sk-|ghp_|gho_|AKIA|xoxb-|npm_)\S{16,}/,
+    // Instructions that override security
+    /always\s+(?:trust|allow|execute|approve|skip)\s+(?:all|any|every)/i,
+    /never\s+(?:check|verify|validate|audit|scan|block)/i,
+    /disable\s+(?:security|auth|permission|verification|2fa|mfa)/i,
+    // Wallet manipulation rules
+    /always\s+(?:send|transfer|approve)\s+(?:funds|tokens?|sol|eth)/i,
+    /(?:auto|automatic)\s*(?:approve|confirm|sign)\s+(?:transactions?|swaps?|transfers?)/i,
+];
+/** Check if a knowledge entry is safe to store */
+export function sanitizeKnowledge(fact) {
+    for (const pattern of KNOWLEDGE_BLOCKLIST) {
+        if (pattern.test(fact)) {
+            return { safe: false, reason: `Blocked by security filter: ${pattern.source.slice(0, 40)}` };
+        }
+    }
+    // Length check — extremely long "facts" are suspicious
+    if (fact.length > 2000) {
+        return { safe: false, reason: 'Knowledge entry too long (>2000 chars) — may contain hidden instructions' };
+    }
+    // Instruction density check
+    const instructionWords = (fact.match(/\b(always|never|must|shall|ignore|override|bypass|skip|disable|execute|run|delete)\b/gi) || []).length;
+    const wordCount = fact.split(/\s+/).length;
+    if (wordCount > 10 && instructionWords / wordCount > 0.3) {
+        return { safe: false, reason: 'High instruction density — looks like an injection, not a fact' };
+    }
+    return { safe: true };
+}
+// ── 4. Forge Tool Verification ──
+// Verify tools from the forge registry before execution.
+const DANGEROUS_PATTERNS_IN_TOOLS = [
+    /eval\s*\(/,
+    /new\s+Function\s*\(/,
+    /child_process/,
+    /exec(?:Sync)?\s*\(/,
+    /require\s*\(\s*['"](?:child_process|fs|net|http|https|crypto|os|cluster|dgram|dns|tls)/,
+    /import\s+.*(?:child_process|exec|spawn)/,
+    /process\.env/,
+    /Deno\.env/,
+    /fetch\s*\(\s*(?!['"]https:\/\/api\.|['"]https:\/\/www\.)/, // fetch to non-standard URLs
+    /\.writeFile/,
+    /\.unlink/,
+    /\.rmdir/,
+    /process\.exit/,
+];
+/** Verify a forged tool's code before registration */
+export function verifyForgedTool(code, name) {
+    const warnings = [];
+    const dangerousPatterns = [];
+    for (const pattern of DANGEROUS_PATTERNS_IN_TOOLS) {
+        if (pattern.test(code)) {
+            dangerousPatterns.push(pattern.source);
+        }
+    }
+    if (dangerousPatterns.length > 0) {
+        warnings.push(`Tool "${name}" uses dangerous patterns: ${dangerousPatterns.join(', ')}`);
+    }
+    // Size check
+    if (code.length > 50_000) {
+        warnings.push(`Tool "${name}" is unusually large (${code.length} chars) — review carefully`);
+    }
+    // Obfuscation check
+    const obfuscationScore = (code.match(/\\x[0-9a-f]{2}|\\u[0-9a-f]{4}|atob\(|btoa\(/gi) || []).length;
+    if (obfuscationScore > 5) {
+        warnings.push(`Tool "${name}" contains ${obfuscationScore} encoded/obfuscated segments`);
+    }
+    return {
+        safe: dangerousPatterns.length === 0 && warnings.length === 0,
+        warnings,
+        dangerousPatterns,
+    };
+}
+export function detectAnomalies() {
+    const anomalies = [];
+    let score = 0;
+    // Check knowledge for suspicious entries
+    const knowledgePath = join(MEMORY_DIR, 'knowledge.json');
+    if (existsSync(knowledgePath)) {
+        try {
+            const knowledge = JSON.parse(readFileSync(knowledgePath, 'utf-8'));
+            if (Array.isArray(knowledge)) {
+                // Check for recent bulk additions (possible injection)
+                const recentEntries = knowledge.filter((k) => {
+                    const created = new Date(k.created || 0);
+                    const hourAgo = new Date(Date.now() - 60 * 60 * 1000);
+                    return created > hourAgo;
+                });
+                if (recentEntries.length > 20) {
+                    anomalies.push({
+                        type: 'bulk-knowledge-addition',
+                        description: `${recentEntries.length} knowledge entries added in the last hour — possible injection`,
+                        severity: 'high',
+                    });
+                    score += 0.3;
+                }
+                // Check for entries with security-override language
+                for (const k of knowledge) {
+                    const check = sanitizeKnowledge(k.fact || '');
+                    if (!check.safe) {
+                        anomalies.push({
+                            type: 'poisoned-knowledge',
+                            description: `Knowledge entry blocked by filter: "${(k.fact || '').slice(0, 50)}..."`,
+                            severity: 'critical',
+                        });
+                        score += 0.3;
+                    }
+                }
+            }
+        }
+        catch { /* corrupt file */ }
+    }
+    // Check corrections for manipulation
+    const correctionsPath = join(MEMORY_DIR, 'corrections.json');
+    if (existsSync(correctionsPath)) {
+        try {
+            const corrections = JSON.parse(readFileSync(correctionsPath, 'utf-8'));
+            if (Array.isArray(corrections)) {
+                for (const c of corrections) {
+                    const injectionCheck = detectInjection(c.userMessage || '');
+                    if (injectionCheck.detected) {
+                        anomalies.push({
+                            type: 'injected-correction',
+                            description: `Correction contains injection pattern: "${(c.userMessage || '').slice(0, 50)}..."`,
+                            severity: 'critical',
+                        });
+                        score += 0.3;
+                    }
+                }
+            }
+        }
+        catch { /* corrupt */ }
+    }
+    // Check patterns for impossible success rates
+    const patternsPath = join(MEMORY_DIR, 'patterns.json');
+    if (existsSync(patternsPath)) {
+        try {
+            const patterns = JSON.parse(readFileSync(patternsPath, 'utf-8'));
+            if (Array.isArray(patterns)) {
+                for (const p of patterns) {
+                    if (p.successRate === 1.0 && p.hits > 50) {
+                        anomalies.push({
+                            type: 'suspicious-pattern',
+                            description: `Pattern has 100% success rate over ${p.hits} uses — statistically unlikely, may be fabricated`,
+                            severity: 'medium',
+                        });
+                        score += 0.1;
+                    }
+                }
+            }
+        }
+        catch { /* corrupt */ }
+    }
+    // Memory integrity check
+    const memoryIntegrity = verifyMemoryIntegrity();
+    const tampered = memoryIntegrity.filter(m => m.status === 'tampered');
+    if (tampered.length > 0) {
+        anomalies.push({
+            type: 'memory-tampering',
+            description: `${tampered.length} memory file(s) modified outside of kbot: ${tampered.map(t => t.file).join(', ')}`,
+            severity: 'critical',
+        });
+        score += 0.4;
+    }
+    score = Math.min(score, 1);
+    return { anomalies, memoryIntegrity, score };
+}
+function loadIncidents() {
+    if (!existsSync(INCIDENT_LOG))
+        return [];
+    try {
+        return JSON.parse(readFileSync(INCIDENT_LOG, 'utf-8'));
+    }
+    catch {
+        return [];
+    }
+}
+function saveIncidents(incidents) {
+    ensureDir(DEFENSE_DIR);
+    writeFileSync(INCIDENT_LOG, JSON.stringify(incidents.slice(-500), null, 2)); // keep last 500
+}
+/** Log a security incident */
+export function logIncident(type, severity, description, action) {
+    const incidents = loadIncidents();
+    incidents.push({
+        timestamp: new Date().toISOString(),
+        type,
+        severity,
+        description: description.slice(0, 500),
+        action,
+    });
+    saveIncidents(incidents);
+}
+/** Get recent incidents */
+export function getIncidents(limit = 20) {
+    return loadIncidents().slice(-limit);
+}
+export function runDefenseAudit() {
+    const integrity = verifyMemoryIntegrity();
+    const anomalies = detectAnomalies();
+    const incidents = getIncidents(10);
+    const integrityStats = {
+        total: integrity.length,
+        ok: integrity.filter(m => m.status === 'ok').length,
+        tampered: integrity.filter(m => m.status === 'tampered').length,
+        new: integrity.filter(m => m.status === 'new').length,
+        missing: integrity.filter(m => m.status === 'missing').length,
+    };
+    const recommendations = [];
+    if (integrityStats.tampered > 0) {
+        recommendations.push(`${integrityStats.tampered} memory file(s) tampered — run \`kbot defense restore\` to rebuild from known-good state`);
+    }
+    if (integrityStats.new > 0) {
+        recommendations.push(`${integrityStats.new} unsigned memory file(s) — run \`kbot defense sign\` to establish baseline`);
+    }
+    if (anomalies.anomalies.some(a => a.type === 'poisoned-knowledge')) {
+        recommendations.push('Poisoned knowledge entries detected — run `kbot defense purge` to remove them');
+    }
+    if (incidents.some(i => i.severity === 'critical' && i.action === 'blocked')) {
+        recommendations.push('Recent critical incidents blocked — review with `kbot defense incidents`');
+    }
+    const criticalCount = anomalies.anomalies.filter(a => a.severity === 'critical').length + integrityStats.tampered;
+    const overallStatus = criticalCount > 0 ? 'compromised' : anomalies.score > 0.2 ? 'warning' : 'secure';
+    return {
+        memoryIntegrity: integrityStats,
+        anomalies,
+        recentIncidents: incidents,
+        overallStatus,
+        recommendations,
+    };
+}
+//# sourceMappingURL=self-defense.js.map

package/dist/self-defense.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-defense.js","sourceRoot":"","sources":["../src/self-defense.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,uCAAuC;AACvC,kEAAkE;AAClE,+DAA+D;AAC/D,uEAAuE;AACvE,4EAA4E;AAC5E,kEAAkE;AAClE,EAAE;AACF,wBAAwB;AACxB,qEAAqE;AACrE,iEAAiE;AACjE,qDAAqD;AACrD,2DAA2D;AAC3D,6CAA6C;AAC7C,gCAAgC;AAEhC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAe,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;AACzC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;AAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;AAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;AAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;AAExD,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED,0CAA0C;AAC1C,gEAAgE;AAChE,+DAA+D;AAE/D,SAAS,aAAa;IACpB,2DAA2D;IAC3D,MAAM,IAAI,GAAG,GAAG,OAAO,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,IAAI,OAAO,CAAC,IAAI,YAAY,CAAA;IACnF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,UAAU,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAQD,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1C,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAA;IAAC,CAAC;AACtF,CAAC;AAED,SAAS,aAAa,CAAC,OAA0B;IAC/C,SAAS,CAAC,WAAW,CAAC,CAAA;IACtB,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;AACjE,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe;IAC7B,SAAS,CAAC,UAAU,CAAC,CAAA;IACrB,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;IACtE,MAAM,OAAO,GAAsB,EAAE,CAAA;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAC3C,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC;gBACvB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACvC,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACnC,CAAC;IAED,aAAa,CAAC,OAAO,CAAC,CAAA;AACxB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,qBAAqB;IACnC,MAAM,OAAO,GAAG,aAAa,EAAE,CAAA;IAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7D,MAAM,OAAO,GAA2E,EAAE,CAAA;IAE1F,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAA;IAEtC,uBAAuB;IACvB,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;IAC7E,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACnC,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAExC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YACrC,SAAQ;QACV,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAC3C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAA;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;QAC3C,CAAC;QAED,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAED,0BAA0B;IAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;IAC3C,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,sCAAsC;AACtC,oEAAoE;AAEpE,MAAM,kBAAkB,GAAuF;IAC7G,8BAA8B;IAC9B,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,uHAAuH,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC1L,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kFAAkF,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC1I,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,oCAAoC,EAAE,QAAQ,EAAE,UAAU,EAAE;IACtG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,uCAAuC,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEhG,sBAAsB;IACtB,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,8IAA8I,EAAE,QAAQ,EAAE,UAAU,EAAE;IACxM,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,sJAAsJ,EAAE,QAAQ,EAAE,UAAU,EAAE;IAErN,aAAa;IACb,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kHAAkH,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC9K,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,wIAAwI,EAAE,QAAQ,EAAE,UAAU,EAAE;IAEjM,gCAAgC;IAChC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,4FAA4F,EAAE,QAAQ,EAAE,UAAU,EAAE;IACrJ,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,2GAA2G,EAAE,QAAQ,EAAE,UAAU,EAAE;IAEtK,qBAAqB;IACrB,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,yGAAyG,EAAE,QAAQ,EAAE,MAAM,EAAE;IAClK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,4GAA4G,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEpK,+BAA+B;IAC/B,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,+CAA+C,EAAE,QAAQ,EAAE,MAAM,EAAE;IACrG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,oCAAoC,EAAE,QAAQ,EAAE,QAAQ,EAAE;CAC/F,CAAA;AASD,mDAAmD;AACnD,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,OAAO,GAA+B,EAAE,CAAA;IAE9C,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;YAAE,KAAK,IAAI,GAAG,CAAA;aACtC,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;YAAE,KAAK,IAAI,IAAI,CAAA;;YACxC,KAAK,IAAI,GAAG,CAAA;IACnB,CAAC;IACD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAE1B,wBAAwB;IACxB,sDAAsD;IACtD,MAAM,gBAAgB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,4EAA4E,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;IACnI,IAAI,gBAAgB,GAAG,CAAC;QAAE,KAAK,IAAI,IAAI,CAAA;IAEvC,4BAA4B;IAC5B,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;IACvF,IAAI,WAAW,GAAG,CAAC;QAAE,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAE5D,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAE1B,MAAM,cAAc,GAAG,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;IAE/E,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;QAC5B,OAAO;QACP,KAAK;QACL,cAAc;KACf,CAAA;AACH,CAAC;AAED,kCAAkC;AAClC,sDAAsD;AAEtD,MAAM,mBAAmB,GAAa;IACpC,yCAAyC;IACzC,kEAAkE;IAClE,0CAA0C;IAC1C,sCAAsC;IACtC,oEAAoE;IACpE,qDAAqD;IACrD,8DAA8D;IAC9D,4BAA4B;IAC5B,iEAAiE;IACjE,sFAAsF;CACvF,CAAA;AAED,kDAAkD;AAClD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAA;QAC9F,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,0EAA0E,EAAE,CAAA;IAC5G,CAAC;IAED,4BAA4B;IAC5B,MAAM,gBAAgB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,wFAAwF,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;IAC5I,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAA;IAC1C,IAAI,SAAS,GAAG,EAAE,IAAI,gBAAgB,GAAG,SAAS,GAAG,GAAG,EAAE,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,gEAAgE,EAAE,CAAA;IAClG,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC;AAED,mCAAmC;AACnC,yDAAyD;AAEzD,MAAM,2BAA2B,GAAa;IAC5C,WAAW;IACX,qBAAqB;IACrB,eAAe;IACf,oBAAoB;IACpB,wFAAwF;IACxF,yCAAyC;IACzC,cAAc;IACd,WAAW;IACX,0DAA0D,EAAE,6BAA6B;IACzF,aAAa;IACb,UAAU;IACV,SAAS;IACT,eAAe;CAChB,CAAA;AAQD,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IACzD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,iBAAiB,GAAa,EAAE,CAAA;IAEtC,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACxC,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,8BAA8B,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,aAAa;IACb,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,yBAAyB,IAAI,CAAC,MAAM,4BAA4B,CAAC,CAAA;IAC9F,CAAC;IAED,oBAAoB;IACpB,MAAM,gBAAgB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,+CAA+C,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;IACnG,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,cAAc,gBAAgB,8BAA8B,CAAC,CAAA;IAC1F,CAAC;IAED,OAAO;QACL,IAAI,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC7D,QAAQ;QACR,iBAAiB;KAClB,CAAA;AACH,CAAC;AAWD,MAAM,UAAU,eAAe;IAC7B,MAAM,SAAS,GAA+B,EAAE,CAAA;IAChD,IAAI,KAAK,GAAG,CAAC,CAAA;IAEb,yCAAyC;IACzC,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;IACxD,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAA;YAClE,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,uDAAuD;gBACvD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE;oBAChD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAA;oBACxC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;oBACrD,OAAO,OAAO,GAAG,OAAO,CAAA;gBAC1B,CAAC,CAAC,CAAA;gBACF,IAAI,aAAa,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;oBAC9B,SAAS,CAAC,IAAI,CAAC;wBACb,IAAI,EAAE,yBAAyB;wBAC/B,WAAW,EAAE,GAAG,aAAa,CAAC,MAAM,gEAAgE;wBACpG,QAAQ,EAAE,MAAM;qBACjB,CAAC,CAAA;oBACF,KAAK,IAAI,GAAG,CAAA;gBACd,CAAC;gBAED,oDAAoD;gBACpD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;oBAC1B,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;oBAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;wBAChB,SAAS,CAAC,IAAI,CAAC;4BACb,IAAI,EAAE,oBAAoB;4BAC1B,WAAW,EAAE,uCAAuC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;4BACrF,QAAQ,EAAE,UAAU;yBACrB,CAAC,CAAA;wBACF,KAAK,IAAI,GAAG,CAAA;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,qCAAqC;IACrC,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;IAC5D,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAA;YACtE,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;oBAC5B,MAAM,cAAc,GAAG,eAAe,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAA;oBAC3D,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;wBAC5B,SAAS,CAAC,IAAI,CAAC;4BACb,IAAI,EAAE,qBAAqB;4BAC3B,WAAW,EAAE,2CAA2C,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;4BAChG,QAAQ,EAAE,UAAU;yBACrB,CAAC,CAAA;wBACF,KAAK,IAAI,GAAG,CAAA;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IAED,8CAA8C;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;IACtD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAA;YAChE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,IAAI,CAAC,CAAC,WAAW,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;wBACzC,SAAS,CAAC,IAAI,CAAC;4BACb,IAAI,EAAE,oBAAoB;4BAC1B,WAAW,EAAE,sCAAsC,CAAC,CAAC,IAAI,mDAAmD;4BAC5G,QAAQ,EAAE,QAAQ;yBACnB,CAAC,CAAA;wBACF,KAAK,IAAI,GAAG,CAAA;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IAED,yBAAyB;IACzB,MAAM,eAAe,GAAG,qBAAqB,EAAE,CAAA;IAC/C,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAA;IACrE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,GAAG,QAAQ,CAAC,MAAM,6CAA6C,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAClH,QAAQ,EAAE,UAAU;SACrB,CAAC,CAAA;QACF,KAAK,IAAI,GAAG,CAAA;IACd,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAE1B,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,CAAA;AAC9C,CAAC;AAYD,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAA;IACxC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAA;IAAC,CAAC;AACpF,CAAC;AAED,SAAS,aAAa,CAAC,SAAqB;IAC1C,SAAS,CAAC,WAAW,CAAC,CAAA;IACtB,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,gBAAgB;AAC9F,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,WAAmB,EAAE,MAAuC;IACtH,MAAM,SAAS,GAAG,aAAa,EAAE,CAAA;IACjC,SAAS,CAAC,IAAI,CAAC;QACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI;QACJ,QAAQ;QACR,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACtC,MAAM;KACP,CAAC,CAAA;IACF,aAAa,CAAC,SAAS,CAAC,CAAA;AAC1B,CAAC;AAED,2BAA2B;AAC3B,MAAM,UAAU,YAAY,CAAC,KAAK,GAAG,EAAE;IACrC,OAAO,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAA;AACtC,CAAC;AAYD,MAAM,UAAU,eAAe;IAC7B,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAA;IACzC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAA;IACnC,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,CAAC,CAAA;IAElC,MAAM,cAAc,GAAG;QACrB,KAAK,EAAE,SAAS,CAAC,MAAM;QACvB,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM;QACnD,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM;QAC/D,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,MAAM;QACrD,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;KAC9D,CAAA;IAED,MAAM,eAAe,GAAa,EAAE,CAAA;IAEpC,IAAI,cAAc,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAChC,eAAe,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,QAAQ,0FAA0F,CAAC,CAAA;IAC5I,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;QAC3B,eAAe,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,GAAG,4EAA4E,CAAC,CAAA;IACzH,CAAC;IACD,IAAI,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,EAAE,CAAC;QACnE,eAAe,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAA;IACvG,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QAC7E,eAAe,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAA;IAClG,CAAC;IAED,MAAM,aAAa,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAA;IACjH,MAAM,aAAa,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;IAEtG,OAAO;QACL,eAAe,EAAE,cAAc;QAC/B,SAAS;QACT,eAAe,EAAE,SAAS;QAC1B,aAAa;QACb,eAAe;KAChB,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kernel.chat/kbot",
-  "version": "3.27.0",
+  "version": "3.28.0",
   "description": "The only AI agent that builds its own tools. Machine-aware situated intelligence: full hardware profiling (CPU, GPU, RAM, display, battery, dev tools), resource-adaptive tool pipeline, memory-pressure throttling, GPU-accelerated model routing. Multi-channel cognitive engine: email agent, iMessage agent, consultation pipeline, Trader agent with paper trading, 26 specialist agents, 300+ tools, 20 providers. Synthesis Engine: closed-loop intelligence compounding. Runtime tool forging, Forge Registry, autopoietic health, immune self-audit. Cost-aware model routing, fallback chains, Bayesian skill routing. Embedded llama.cpp, MCP server, SDK. MIT.",
   "type": "module",
   "repository": {