@oscharko-dev/keiko 0.2.0-beta.5 → 0.2.0-beta.6

package/node_modules/@oscharko-dev/keiko-contracts/dist/text-safety.js

@@ -0,0 +1,58 @@
+// Shared text-safety primitive (Epic #177/#189 grounding hardening, GRD-001).
+//
+// Removes Unicode code points that are invisible or that can reorder a display surface's
+// reading order ("Trojan-source" class) plus C0/C1/DEL control characters. Untrusted
+// repository / document evidence flows into (a) the LLM prompt — where reordered or hidden
+// instructions can subvert the answer — and (b) the browser-rendered answer/citation wire —
+// where React escapes HTML but NOT bidi reordering. Stripping at the surface chokepoints
+// (excerpt → prompt/wire) neutralises both without touching persisted offsets.
+//
+// Whitespace policy: TAB (U+0009), LF (U+000A), and CR (U+000D) are preserved so legitimate
+// formatting of evidence survives; every other control code point is removed.
+//
+// This lives in keiko-contracts (the base layer) so both keiko-local-knowledge and
+// keiko-server can compose it; it mirrors the QI-domain `stripUnsafeFormatChars` without
+// creating a dependency on the QI package.
+// True for an invisible / text-reordering code point: bidi override/embedding/isolate,
+// zero-width joiners, BOM, LRM/RLM, and the Arabic letter mark. Numeric scan keeps the set
+// auditable and avoids embedding invisible literals in the source.
+function isBidiOrZeroWidthCodePoint(cp) {
+    return (cp === 0x061c ||
+        (cp >= 0x200b && cp <= 0x200f) ||
+        (cp >= 0x202a && cp <= 0x202e) ||
+        (cp >= 0x2066 && cp <= 0x2069) ||
+        cp === 0xfeff);
+}
+// True for a C0 control (0x00–0x1F) or DEL/C1 control (0x7F–0x9F), EXCEPT TAB/LF/CR which
+// are legitimate whitespace and preserved.
+function isStrippableControlCodePoint(cp) {
+    if (cp === 0x09 || cp === 0x0a || cp === 0x0d)
+        return false;
+    return cp <= 0x1f || (cp >= 0x7f && cp <= 0x9f);
+}
+/**
+ * Remove Unicode bidi/zero-width/BOM/format spoofing code points and C0/C1/DEL control
+ * characters from `value`, preserving TAB/LF/CR. Pure; returns the input unchanged (a no-op,
+ * byte-identical) when it contains no unsafe code points.
+ */
+export function stripUnsafeFormatChars(value) {
+    // Fast path: scan once; only allocate a rebuilt string if something must be removed.
+    let needsStrip = false;
+    for (const ch of value) {
+        const cp = ch.codePointAt(0) ?? 0;
+        if (isBidiOrZeroWidthCodePoint(cp) || isStrippableControlCodePoint(cp)) {
+            needsStrip = true;
+            break;
+        }
+    }
+    if (!needsStrip)
+        return value;
+    let out = "";
+    for (const ch of value) {
+        const cp = ch.codePointAt(0) ?? 0;
+        if (isBidiOrZeroWidthCodePoint(cp) || isStrippableControlCodePoint(cp))
+            continue;
+        out += ch;
+    }
+    return out;
+}

package/node_modules/@oscharko-dev/keiko-contracts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oscharko-dev/keiko-contracts",
-  "version": "0.2.0-beta.5",
+  "version": "0.2.0-beta.6",
   "private": true,
   "type": "module",
   "license": "Apache-2.0",
@@ -24,6 +24,10 @@
       "types": "./dist/connected-context.d.ts",
       "import": "./dist/connected-context.js"
     },
+    "./text-safety": {
+      "types": "./dist/text-safety.d.ts",
+      "import": "./dist/text-safety.js"
+    },
     "./verification-summary": {
       "types": "./dist/verification-summary.d.ts",
       "import": "./dist/verification-summary.js"