@safebrowse/daemon 0.1.2-rc.1 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +15 -15
- package/README.md +31 -31
- package/dist/cli.js +9 -9
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +2 -0
- package/dist/index.js.map +1 -1
- package/dist/parserIsolation.d.ts +12 -0
- package/dist/parserIsolation.d.ts.map +1 -0
- package/dist/parserIsolation.js +57 -0
- package/dist/parserIsolation.js.map +1 -0
- package/dist/parserWorker.d.ts +2 -0
- package/dist/parserWorker.d.ts.map +1 -0
- package/dist/parserWorker.js +89 -0
- package/dist/parserWorker.js.map +1 -0
- package/dist/runtime/config/auditor/v4_prompt_injection_coverage_suite.json +2789 -0
- package/dist/runtime/knowledge_base/safebrowse_vf_action_integrity_patterns.json +1411 -1411
- package/dist/runtime/knowledge_base/safebrowse_vf_artifact_surface_patterns.json +891 -891
- package/dist/runtime/knowledge_base/safebrowse_vf_evaluation_scenarios.json +217 -217
- package/dist/runtime/knowledge_base/safebrowse_vf_incident_response_playbooks.json +209 -209
- package/dist/runtime/knowledge_base/safebrowse_vf_knowledge_base_index.json +143 -143
- package/dist/runtime/knowledge_base/safebrowse_vf_knowledge_base_index.json.sig +1 -1
- package/dist/runtime/knowledge_base/safebrowse_vf_knowledge_bases.zip.sig +1 -1
- package/dist/runtime/knowledge_base/safebrowse_vf_memory_context_poisoning_patterns.json +803 -803
- package/dist/runtime/knowledge_base/safebrowse_vf_policy_controls_catalog.json +686 -686
- package/dist/runtime/knowledge_base/safebrowse_vf_prompt_injection_patterns.json +9930 -9930
- package/dist/runtime/knowledge_base/safebrowse_vf_source_registry.json +345 -345
- package/dist/runtime/knowledge_base/safebrowse_vf_tool_protocol_supply_chain_patterns.json +879 -879
- package/dist/runtime/knowledge_base/safebrowse_vf_trust_signals_provenance.json +480 -480
- package/dist/runtime/knowledge_base/signing/safebrowse_vf_ed25519_public.pem +3 -3
- package/dist/runtime/policies/base/research.yaml +43 -43
- package/dist/runtime/policies/emergency/default.yaml +14 -14
- package/dist/runtime/policies/project/default.yaml +13 -13
- package/dist/runtime/policies/tenant/default.yaml +12 -12
- package/dist/server.d.ts +1 -0
- package/dist/server.d.ts.map +1 -1
- package/dist/server.js +489 -22
- package/dist/server.js.map +1 -1
- package/package.json +53 -53
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
-----BEGIN PUBLIC KEY-----
|
|
2
|
-
MCowBQYDK2VwAyEAumkUxysU+lbhrq6PxMUnopDGcQqdM7VPKUXdwMlHdWQ=
|
|
3
|
-
-----END PUBLIC KEY-----
|
|
1
|
+
-----BEGIN PUBLIC KEY-----
|
|
2
|
+
MCowBQYDK2VwAyEAumkUxysU+lbhrq6PxMUnopDGcQqdM7VPKUXdwMlHdWQ=
|
|
3
|
+
-----END PUBLIC KEY-----
|
|
@@ -1,44 +1,44 @@
|
|
|
1
|
-
profile: research
|
|
2
|
-
metadata:
|
|
3
|
-
layer: base
|
|
4
|
-
version: 2026-03-28
|
|
5
|
-
origins:
|
|
6
|
-
read_only_allow:
|
|
7
|
-
- scholar.google.com
|
|
8
|
-
- arxiv.org
|
|
9
|
-
- dl.acm.org
|
|
10
|
-
- openreview.net
|
|
11
|
-
writable_allow: []
|
|
12
|
-
actions:
|
|
13
|
-
allow:
|
|
14
|
-
- navigate
|
|
15
|
-
- open
|
|
16
|
-
- scroll
|
|
17
|
-
- extract
|
|
18
|
-
- screenshot
|
|
19
|
-
require_approval:
|
|
20
|
-
- download
|
|
21
|
-
- login
|
|
22
|
-
- upload
|
|
23
|
-
- submit
|
|
24
|
-
- message
|
|
25
|
-
deny:
|
|
26
|
-
- exfiltrate
|
|
27
|
-
artifacts:
|
|
28
|
-
enable_document_handoff: true
|
|
29
|
-
quarantine_on_hidden_text_mismatch: true
|
|
30
|
-
allow_mime_types:
|
|
31
|
-
- application/pdf
|
|
32
|
-
- text/html
|
|
33
|
-
- text/plain
|
|
34
|
-
- image/png
|
|
35
|
-
- image/jpeg
|
|
36
|
-
memory:
|
|
37
|
-
durable_writes: deny
|
|
38
|
-
protected_keys:
|
|
39
|
-
- user_identity
|
|
40
|
-
- credential_scope
|
|
41
|
-
- payment_context
|
|
1
|
+
profile: research
|
|
2
|
+
metadata:
|
|
3
|
+
layer: base
|
|
4
|
+
version: 2026-03-28
|
|
5
|
+
origins:
|
|
6
|
+
read_only_allow:
|
|
7
|
+
- scholar.google.com
|
|
8
|
+
- arxiv.org
|
|
9
|
+
- dl.acm.org
|
|
10
|
+
- openreview.net
|
|
11
|
+
writable_allow: []
|
|
12
|
+
actions:
|
|
13
|
+
allow:
|
|
14
|
+
- navigate
|
|
15
|
+
- open
|
|
16
|
+
- scroll
|
|
17
|
+
- extract
|
|
18
|
+
- screenshot
|
|
19
|
+
require_approval:
|
|
20
|
+
- download
|
|
21
|
+
- login
|
|
22
|
+
- upload
|
|
23
|
+
- submit
|
|
24
|
+
- message
|
|
25
|
+
deny:
|
|
26
|
+
- exfiltrate
|
|
27
|
+
artifacts:
|
|
28
|
+
enable_document_handoff: true
|
|
29
|
+
quarantine_on_hidden_text_mismatch: true
|
|
30
|
+
allow_mime_types:
|
|
31
|
+
- application/pdf
|
|
32
|
+
- text/html
|
|
33
|
+
- text/plain
|
|
34
|
+
- image/png
|
|
35
|
+
- image/jpeg
|
|
36
|
+
memory:
|
|
37
|
+
durable_writes: deny
|
|
38
|
+
protected_keys:
|
|
39
|
+
- user_identity
|
|
40
|
+
- credential_scope
|
|
41
|
+
- payment_context
|
|
42
42
|
tool_protocol:
|
|
43
43
|
forbid_token_passthrough: true
|
|
44
44
|
enforce_exact_redirect_uri: true
|
|
@@ -52,5 +52,5 @@ tool_protocol:
|
|
|
52
52
|
telemetry:
|
|
53
53
|
replay_bundle: true
|
|
54
54
|
redact_sensitive_values: true
|
|
55
|
-
sampling: full
|
|
56
|
-
|
|
55
|
+
sampling: full
|
|
56
|
+
|
|
@@ -1,14 +1,14 @@
|
|
|
1
|
-
profile: research
|
|
2
|
-
metadata:
|
|
3
|
-
layer: emergency
|
|
4
|
-
version: 2026-03-28
|
|
5
|
-
actions:
|
|
6
|
-
require_approval:
|
|
7
|
-
- download
|
|
8
|
-
- login
|
|
9
|
-
- upload
|
|
10
|
-
- submit
|
|
11
|
-
- message
|
|
12
|
-
tool_protocol:
|
|
13
|
-
forbid_token_passthrough: true
|
|
14
|
-
|
|
1
|
+
profile: research
|
|
2
|
+
metadata:
|
|
3
|
+
layer: emergency
|
|
4
|
+
version: 2026-03-28
|
|
5
|
+
actions:
|
|
6
|
+
require_approval:
|
|
7
|
+
- download
|
|
8
|
+
- login
|
|
9
|
+
- upload
|
|
10
|
+
- submit
|
|
11
|
+
- message
|
|
12
|
+
tool_protocol:
|
|
13
|
+
forbid_token_passthrough: true
|
|
14
|
+
|
|
@@ -1,13 +1,13 @@
|
|
|
1
|
-
profile: research
|
|
2
|
-
metadata:
|
|
3
|
-
layer: project
|
|
4
|
-
version: 2026-03-28
|
|
5
|
-
origins:
|
|
6
|
-
read_only_allow:
|
|
7
|
-
- github.com
|
|
8
|
-
actions:
|
|
9
|
-
allow:
|
|
10
|
-
- download
|
|
11
|
-
require_approval:
|
|
12
|
-
- submit
|
|
13
|
-
|
|
1
|
+
profile: research
|
|
2
|
+
metadata:
|
|
3
|
+
layer: project
|
|
4
|
+
version: 2026-03-28
|
|
5
|
+
origins:
|
|
6
|
+
read_only_allow:
|
|
7
|
+
- github.com
|
|
8
|
+
actions:
|
|
9
|
+
allow:
|
|
10
|
+
- download
|
|
11
|
+
require_approval:
|
|
12
|
+
- submit
|
|
13
|
+
|
|
@@ -1,12 +1,12 @@
|
|
|
1
|
-
profile: research
|
|
2
|
-
metadata:
|
|
3
|
-
layer: tenant
|
|
4
|
-
version: 2026-03-28
|
|
5
|
-
origins:
|
|
6
|
-
read_only_allow:
|
|
7
|
-
- acm.org
|
|
8
|
-
artifacts:
|
|
9
|
-
quarantine_on_hidden_text_mismatch: true
|
|
10
|
-
tool_protocol:
|
|
11
|
-
forbid_token_passthrough: true
|
|
12
|
-
|
|
1
|
+
profile: research
|
|
2
|
+
metadata:
|
|
3
|
+
layer: tenant
|
|
4
|
+
version: 2026-03-28
|
|
5
|
+
origins:
|
|
6
|
+
read_only_allow:
|
|
7
|
+
- acm.org
|
|
8
|
+
artifacts:
|
|
9
|
+
quarantine_on_hidden_text_mismatch: true
|
|
10
|
+
tool_protocol:
|
|
11
|
+
forbid_token_passthrough: true
|
|
12
|
+
|
package/dist/server.d.ts
CHANGED
|
@@ -8,6 +8,7 @@ export interface SafeBrowseDaemonOptions {
|
|
|
8
8
|
policyPack?: PolicyPack;
|
|
9
9
|
knowledgeBase?: KnowledgeBaseContext;
|
|
10
10
|
verifiedRegistry?: VerifiedRegistryBundle;
|
|
11
|
+
parserAllowlistedEgress?: string[];
|
|
11
12
|
}
|
|
12
13
|
export declare function createSafeBrowseServer(options?: SafeBrowseDaemonOptions): Promise<Server>;
|
|
13
14
|
export declare function startSafeBrowseDaemon(options?: SafeBrowseDaemonOptions): Promise<Server>;
|
package/dist/server.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAIjG,OAAO,
|
|
1
|
+
{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAIjG,OAAO,EA4BL,KAAK,oBAAoB,EAKzB,KAAK,UAAU,EAShB,MAAM,kBAAkB,CAAC;AAS1B,OAAO,KAAK,EAAE,sBAAsB,EAAyB,MAAM,kBAAkB,CAAC;AAEtF,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAgYD,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CA+fjB;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAWjB"}
|