@safebrowse/daemon 0.1.2-rc.1 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (22) hide show
  1. package/LICENSE +15 -15
  2. package/README.md +31 -31
  3. package/dist/cli.js +9 -9
  4. package/dist/runtime/knowledge_base/safebrowse_vf_action_integrity_patterns.json +1411 -1411
  5. package/dist/runtime/knowledge_base/safebrowse_vf_artifact_surface_patterns.json +891 -891
  6. package/dist/runtime/knowledge_base/safebrowse_vf_evaluation_scenarios.json +217 -217
  7. package/dist/runtime/knowledge_base/safebrowse_vf_incident_response_playbooks.json +209 -209
  8. package/dist/runtime/knowledge_base/safebrowse_vf_knowledge_base_index.json +143 -143
  9. package/dist/runtime/knowledge_base/safebrowse_vf_knowledge_base_index.json.sig +1 -1
  10. package/dist/runtime/knowledge_base/safebrowse_vf_knowledge_bases.zip.sig +1 -1
  11. package/dist/runtime/knowledge_base/safebrowse_vf_memory_context_poisoning_patterns.json +803 -803
  12. package/dist/runtime/knowledge_base/safebrowse_vf_policy_controls_catalog.json +686 -686
  13. package/dist/runtime/knowledge_base/safebrowse_vf_prompt_injection_patterns.json +9930 -9930
  14. package/dist/runtime/knowledge_base/safebrowse_vf_source_registry.json +345 -345
  15. package/dist/runtime/knowledge_base/safebrowse_vf_tool_protocol_supply_chain_patterns.json +879 -879
  16. package/dist/runtime/knowledge_base/safebrowse_vf_trust_signals_provenance.json +480 -480
  17. package/dist/runtime/knowledge_base/signing/safebrowse_vf_ed25519_public.pem +3 -3
  18. package/dist/runtime/policies/base/research.yaml +43 -43
  19. package/dist/runtime/policies/emergency/default.yaml +14 -14
  20. package/dist/runtime/policies/project/default.yaml +13 -13
  21. package/dist/runtime/policies/tenant/default.yaml +12 -12
  22. package/package.json +53 -53
package/dist/runtime/knowledge_base/signing/safebrowse_vf_ed25519_public.pem CHANGED
@@ -1,3 +1,3 @@
1
- -----BEGIN PUBLIC KEY-----
2
- MCowBQYDK2VwAyEAumkUxysU+lbhrq6PxMUnopDGcQqdM7VPKUXdwMlHdWQ=
3
- -----END PUBLIC KEY-----
1
+ -----BEGIN PUBLIC KEY-----
2
+ MCowBQYDK2VwAyEAumkUxysU+lbhrq6PxMUnopDGcQqdM7VPKUXdwMlHdWQ=
3
+ -----END PUBLIC KEY-----
package/dist/runtime/policies/base/research.yaml CHANGED
@@ -1,44 +1,44 @@
1
- profile: research
2
- metadata:
3
- layer: base
4
- version: 2026-03-28
5
- origins:
6
- read_only_allow:
7
- - scholar.google.com
8
- - arxiv.org
9
- - dl.acm.org
10
- - openreview.net
11
- writable_allow: []
12
- actions:
13
- allow:
14
- - navigate
15
- - open
16
- - scroll
17
- - extract
18
- - screenshot
19
- require_approval:
20
- - download
21
- - login
22
- - upload
23
- - submit
24
- - message
25
- deny:
26
- - exfiltrate
27
- artifacts:
28
- enable_document_handoff: true
29
- quarantine_on_hidden_text_mismatch: true
30
- allow_mime_types:
31
- - application/pdf
32
- - text/html
33
- - text/plain
34
- - image/png
35
- - image/jpeg
36
- memory:
37
- durable_writes: deny
38
- protected_keys:
39
- - user_identity
40
- - credential_scope
41
- - payment_context
1
+ profile: research
2
+ metadata:
3
+ layer: base
4
+ version: 2026-03-28
5
+ origins:
6
+ read_only_allow:
7
+ - scholar.google.com
8
+ - arxiv.org
9
+ - dl.acm.org
10
+ - openreview.net
11
+ writable_allow: []
12
+ actions:
13
+ allow:
14
+ - navigate
15
+ - open
16
+ - scroll
17
+ - extract
18
+ - screenshot
19
+ require_approval:
20
+ - download
21
+ - login
22
+ - upload
23
+ - submit
24
+ - message
25
+ deny:
26
+ - exfiltrate
27
+ artifacts:
28
+ enable_document_handoff: true
29
+ quarantine_on_hidden_text_mismatch: true
30
+ allow_mime_types:
31
+ - application/pdf
32
+ - text/html
33
+ - text/plain
34
+ - image/png
35
+ - image/jpeg
36
+ memory:
37
+ durable_writes: deny
38
+ protected_keys:
39
+ - user_identity
40
+ - credential_scope
41
+ - payment_context
42
42
  tool_protocol:
43
43
  forbid_token_passthrough: true
44
44
  enforce_exact_redirect_uri: true
@@ -52,5 +52,5 @@ tool_protocol:
52
52
  telemetry:
53
53
  replay_bundle: true
54
54
  redact_sensitive_values: true
55
- sampling: full
56
-
55
+ sampling: full
56
+
package/dist/runtime/policies/emergency/default.yaml CHANGED
@@ -1,14 +1,14 @@
1
- profile: research
2
- metadata:
3
- layer: emergency
4
- version: 2026-03-28
5
- actions:
6
- require_approval:
7
- - download
8
- - login
9
- - upload
10
- - submit
11
- - message
12
- tool_protocol:
13
- forbid_token_passthrough: true
14
-
1
+ profile: research
2
+ metadata:
3
+ layer: emergency
4
+ version: 2026-03-28
5
+ actions:
6
+ require_approval:
7
+ - download
8
+ - login
9
+ - upload
10
+ - submit
11
+ - message
12
+ tool_protocol:
13
+ forbid_token_passthrough: true
14
+
package/dist/runtime/policies/project/default.yaml CHANGED
@@ -1,13 +1,13 @@
1
- profile: research
2
- metadata:
3
- layer: project
4
- version: 2026-03-28
5
- origins:
6
- read_only_allow:
7
- - github.com
8
- actions:
9
- allow:
10
- - download
11
- require_approval:
12
- - submit
13
-
1
+ profile: research
2
+ metadata:
3
+ layer: project
4
+ version: 2026-03-28
5
+ origins:
6
+ read_only_allow:
7
+ - github.com
8
+ actions:
9
+ allow:
10
+ - download
11
+ require_approval:
12
+ - submit
13
+
package/dist/runtime/policies/tenant/default.yaml CHANGED
@@ -1,12 +1,12 @@
1
- profile: research
2
- metadata:
3
- layer: tenant
4
- version: 2026-03-28
5
- origins:
6
- read_only_allow:
7
- - acm.org
8
- artifacts:
9
- quarantine_on_hidden_text_mismatch: true
10
- tool_protocol:
11
- forbid_token_passthrough: true
12
-
1
+ profile: research
2
+ metadata:
3
+ layer: tenant
4
+ version: 2026-03-28
5
+ origins:
6
+ read_only_allow:
7
+ - acm.org
8
+ artifacts:
9
+ quarantine_on_hidden_text_mismatch: true
10
+ tool_protocol:
11
+ forbid_token_passthrough: true
12
+
package/package.json CHANGED
@@ -1,53 +1,53 @@
1
- {
2
- "name": "@safebrowse/daemon",
3
- "version": "0.1.2-rc.1",
4
- "description": "Localhost SafeBrowse daemon for browser-use agent enforcement",
5
- "license": "SEE LICENSE IN LICENSE",
6
- "type": "module",
7
- "main": "dist/index.js",
8
- "types": "dist/index.d.ts",
9
- "bin": {
10
- "safebrowse-daemon": "dist/index.js"
11
- },
12
- "repository": {
13
- "type": "git",
14
- "url": "git+https://github.com/RobKang1234/safebrowse-sdk.git",
15
- "directory": "packages/daemon"
16
- },
17
- "homepage": "https://github.com/RobKang1234/safebrowse-sdk#readme",
18
- "bugs": {
19
- "url": "https://github.com/RobKang1234/safebrowse-sdk/issues"
20
- },
21
- "keywords": [
22
- "agent-security",
23
- "daemon",
24
- "middleware",
25
- "oauth",
26
- "safebrowse"
27
- ],
28
- "publishConfig": {
29
- "access": "public",
30
- "provenance": false
31
- },
32
- "engines": {
33
- "node": "\u003e=22.0.0"
34
- },
35
- "exports": {
36
- ".": {
37
- "types": "./dist/index.d.ts",
38
- "import": "./dist/index.js"
39
- }
40
- },
41
- "files": [
42
- "dist",
43
- "README.md"
44
- ],
45
- "scripts": {
46
- "build": "tsc -p tsconfig.json \u0026\u0026 node scripts/copy-runtime-assets.mjs",
47
- "typecheck": "tsc -p tsconfig.json --noEmit"
48
- },
49
- "dependencies": {
50
- "@safebrowse/core": "0.1.2-rc.1",
51
- "yaml": "^2.8.1"
52
- }
53
- }
1
+ {
2
+ "name": "@safebrowse/daemon",
3
+ "version": "0.1.2",
4
+ "description": "Localhost SafeBrowse daemon for browser-use agent enforcement",
5
+ "license": "SEE LICENSE IN LICENSE",
6
+ "type": "module",
7
+ "main": "dist/index.js",
8
+ "types": "dist/index.d.ts",
9
+ "bin": {
10
+ "safebrowse-daemon": "dist/index.js"
11
+ },
12
+ "repository": {
13
+ "type": "git",
14
+ "url": "git+https://github.com/RobKang1234/safebrowse-sdk.git",
15
+ "directory": "packages/daemon"
16
+ },
17
+ "homepage": "https://github.com/RobKang1234/safebrowse-sdk#readme",
18
+ "bugs": {
19
+ "url": "https://github.com/RobKang1234/safebrowse-sdk/issues"
20
+ },
21
+ "keywords": [
22
+ "agent-security",
23
+ "daemon",
24
+ "middleware",
25
+ "oauth",
26
+ "safebrowse"
27
+ ],
28
+ "publishConfig": {
29
+ "access": "public",
30
+ "provenance": true
31
+ },
32
+ "engines": {
33
+ "node": ">=22.0.0"
34
+ },
35
+ "exports": {
36
+ ".": {
37
+ "types": "./dist/index.d.ts",
38
+ "import": "./dist/index.js"
39
+ }
40
+ },
41
+ "files": [
42
+ "dist",
43
+ "README.md"
44
+ ],
45
+ "scripts": {
46
+ "build": "tsc -p tsconfig.json && node scripts/copy-runtime-assets.mjs",
47
+ "typecheck": "tsc -p tsconfig.json --noEmit"
48
+ },
49
+ "dependencies": {
50
+ "@safebrowse/core": "0.1.2",
51
+ "yaml": "^2.8.1"
52
+ }
53
+ }