@safebrowse/daemon 0.1.2-rc.1 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/LICENSE +15 -15
  2. package/README.md +31 -31
  3. package/dist/cli.js +9 -9
  4. package/dist/index.d.ts +1 -0
  5. package/dist/index.d.ts.map +1 -1
  6. package/dist/index.js +2 -0
  7. package/dist/index.js.map +1 -1
  8. package/dist/parserIsolation.d.ts +12 -0
  9. package/dist/parserIsolation.d.ts.map +1 -0
  10. package/dist/parserIsolation.js +57 -0
  11. package/dist/parserIsolation.js.map +1 -0
  12. package/dist/parserWorker.d.ts +2 -0
  13. package/dist/parserWorker.d.ts.map +1 -0
  14. package/dist/parserWorker.js +89 -0
  15. package/dist/parserWorker.js.map +1 -0
  16. package/dist/runtime/config/auditor/v4_prompt_injection_coverage_suite.json +2789 -0
  17. package/dist/runtime/knowledge_base/safebrowse_vf_action_integrity_patterns.json +1411 -1411
  18. package/dist/runtime/knowledge_base/safebrowse_vf_artifact_surface_patterns.json +891 -891
  19. package/dist/runtime/knowledge_base/safebrowse_vf_evaluation_scenarios.json +217 -217
  20. package/dist/runtime/knowledge_base/safebrowse_vf_incident_response_playbooks.json +209 -209
  21. package/dist/runtime/knowledge_base/safebrowse_vf_knowledge_base_index.json +143 -143
  22. package/dist/runtime/knowledge_base/safebrowse_vf_knowledge_base_index.json.sig +1 -1
  23. package/dist/runtime/knowledge_base/safebrowse_vf_knowledge_bases.zip.sig +1 -1
  24. package/dist/runtime/knowledge_base/safebrowse_vf_memory_context_poisoning_patterns.json +803 -803
  25. package/dist/runtime/knowledge_base/safebrowse_vf_policy_controls_catalog.json +686 -686
  26. package/dist/runtime/knowledge_base/safebrowse_vf_prompt_injection_patterns.json +9930 -9930
  27. package/dist/runtime/knowledge_base/safebrowse_vf_source_registry.json +345 -345
  28. package/dist/runtime/knowledge_base/safebrowse_vf_tool_protocol_supply_chain_patterns.json +879 -879
  29. package/dist/runtime/knowledge_base/safebrowse_vf_trust_signals_provenance.json +480 -480
  30. package/dist/runtime/knowledge_base/signing/safebrowse_vf_ed25519_public.pem +3 -3
  31. package/dist/runtime/policies/base/research.yaml +43 -43
  32. package/dist/runtime/policies/emergency/default.yaml +14 -14
  33. package/dist/runtime/policies/project/default.yaml +13 -13
  34. package/dist/runtime/policies/tenant/default.yaml +12 -12
  35. package/dist/server.d.ts +1 -0
  36. package/dist/server.d.ts.map +1 -1
  37. package/dist/server.js +489 -22
  38. package/dist/server.js.map +1 -1
  39. package/package.json +53 -53
@@ -1,3 +1,3 @@
1
- -----BEGIN PUBLIC KEY-----
2
- MCowBQYDK2VwAyEAumkUxysU+lbhrq6PxMUnopDGcQqdM7VPKUXdwMlHdWQ=
3
- -----END PUBLIC KEY-----
1
+ -----BEGIN PUBLIC KEY-----
2
+ MCowBQYDK2VwAyEAumkUxysU+lbhrq6PxMUnopDGcQqdM7VPKUXdwMlHdWQ=
3
+ -----END PUBLIC KEY-----
@@ -1,44 +1,44 @@
1
- profile: research
2
- metadata:
3
- layer: base
4
- version: 2026-03-28
5
- origins:
6
- read_only_allow:
7
- - scholar.google.com
8
- - arxiv.org
9
- - dl.acm.org
10
- - openreview.net
11
- writable_allow: []
12
- actions:
13
- allow:
14
- - navigate
15
- - open
16
- - scroll
17
- - extract
18
- - screenshot
19
- require_approval:
20
- - download
21
- - login
22
- - upload
23
- - submit
24
- - message
25
- deny:
26
- - exfiltrate
27
- artifacts:
28
- enable_document_handoff: true
29
- quarantine_on_hidden_text_mismatch: true
30
- allow_mime_types:
31
- - application/pdf
32
- - text/html
33
- - text/plain
34
- - image/png
35
- - image/jpeg
36
- memory:
37
- durable_writes: deny
38
- protected_keys:
39
- - user_identity
40
- - credential_scope
41
- - payment_context
1
+ profile: research
2
+ metadata:
3
+ layer: base
4
+ version: 2026-03-28
5
+ origins:
6
+ read_only_allow:
7
+ - scholar.google.com
8
+ - arxiv.org
9
+ - dl.acm.org
10
+ - openreview.net
11
+ writable_allow: []
12
+ actions:
13
+ allow:
14
+ - navigate
15
+ - open
16
+ - scroll
17
+ - extract
18
+ - screenshot
19
+ require_approval:
20
+ - download
21
+ - login
22
+ - upload
23
+ - submit
24
+ - message
25
+ deny:
26
+ - exfiltrate
27
+ artifacts:
28
+ enable_document_handoff: true
29
+ quarantine_on_hidden_text_mismatch: true
30
+ allow_mime_types:
31
+ - application/pdf
32
+ - text/html
33
+ - text/plain
34
+ - image/png
35
+ - image/jpeg
36
+ memory:
37
+ durable_writes: deny
38
+ protected_keys:
39
+ - user_identity
40
+ - credential_scope
41
+ - payment_context
42
42
  tool_protocol:
43
43
  forbid_token_passthrough: true
44
44
  enforce_exact_redirect_uri: true
@@ -52,5 +52,5 @@ tool_protocol:
52
52
  telemetry:
53
53
  replay_bundle: true
54
54
  redact_sensitive_values: true
55
- sampling: full
56
-
55
+ sampling: full
56
+
@@ -1,14 +1,14 @@
1
- profile: research
2
- metadata:
3
- layer: emergency
4
- version: 2026-03-28
5
- actions:
6
- require_approval:
7
- - download
8
- - login
9
- - upload
10
- - submit
11
- - message
12
- tool_protocol:
13
- forbid_token_passthrough: true
14
-
1
+ profile: research
2
+ metadata:
3
+ layer: emergency
4
+ version: 2026-03-28
5
+ actions:
6
+ require_approval:
7
+ - download
8
+ - login
9
+ - upload
10
+ - submit
11
+ - message
12
+ tool_protocol:
13
+ forbid_token_passthrough: true
14
+
@@ -1,13 +1,13 @@
1
- profile: research
2
- metadata:
3
- layer: project
4
- version: 2026-03-28
5
- origins:
6
- read_only_allow:
7
- - github.com
8
- actions:
9
- allow:
10
- - download
11
- require_approval:
12
- - submit
13
-
1
+ profile: research
2
+ metadata:
3
+ layer: project
4
+ version: 2026-03-28
5
+ origins:
6
+ read_only_allow:
7
+ - github.com
8
+ actions:
9
+ allow:
10
+ - download
11
+ require_approval:
12
+ - submit
13
+
@@ -1,12 +1,12 @@
1
- profile: research
2
- metadata:
3
- layer: tenant
4
- version: 2026-03-28
5
- origins:
6
- read_only_allow:
7
- - acm.org
8
- artifacts:
9
- quarantine_on_hidden_text_mismatch: true
10
- tool_protocol:
11
- forbid_token_passthrough: true
12
-
1
+ profile: research
2
+ metadata:
3
+ layer: tenant
4
+ version: 2026-03-28
5
+ origins:
6
+ read_only_allow:
7
+ - acm.org
8
+ artifacts:
9
+ quarantine_on_hidden_text_mismatch: true
10
+ tool_protocol:
11
+ forbid_token_passthrough: true
12
+
package/dist/server.d.ts CHANGED
@@ -8,6 +8,7 @@ export interface SafeBrowseDaemonOptions {
8
8
  policyPack?: PolicyPack;
9
9
  knowledgeBase?: KnowledgeBaseContext;
10
10
  verifiedRegistry?: VerifiedRegistryBundle;
11
+ parserAllowlistedEgress?: string[];
11
12
  }
12
13
  export declare function createSafeBrowseServer(options?: SafeBrowseDaemonOptions): Promise<Server>;
13
14
  export declare function startSafeBrowseDaemon(options?: SafeBrowseDaemonOptions): Promise<Server>;
@@ -1 +1 @@
1
- {"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAIjG,OAAO,EAcL,KAAK,oBAAoB,EAEzB,KAAK,UAAU,EAMhB,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAgGD,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAuHjB;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAWjB"}
1
+ {"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAIjG,OAAO,EA4BL,KAAK,oBAAoB,EAKzB,KAAK,UAAU,EAShB,MAAM,kBAAkB,CAAC;AAS1B,OAAO,KAAK,EAAE,sBAAsB,EAAyB,MAAM,kBAAkB,CAAC;AAEtF,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAgYD,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CA+fjB;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAWjB"}