@shomra/agent 0.3.20 → 0.3.22

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shomra/agent",
-  "version": "0.3.20",
+  "version": "0.3.22",
   "description": "Shomra - adversarial assurance for AI agents, as a local-first CLI. Blocks dangerous tool-calls before they run, attacks your own guardrails to prove they hold, and gates AI artifacts in your editor and CI.",
   "type": "module",
   "bin": {

package/src/detect/signals/injection.mjs

@@ -11,7 +11,7 @@ export const INJECTION_PHRASES = [
 ];
 
 export const INJECTION_REGEXES = [
-  { label: 'Instruction-override phrasing', re: /\b(ignore|disregard|override|bypass|circumvent)\b[\s\w,'"()-]{0,40}?\b(instruction|instructions|directive|directives|safety|safeguards?|guardrails?|system\s+prompt|content\s+polic\w+)\b/i },
+  { label: 'Instruction-override phrasing', re: /\b(?:ignore|disregard|override|bypass|circumvent|discard|nullify|revoke|rescind|supersede[sd]?|abandon|set\s+aside|put\s+aside|cast\s+aside|pay\s+no\s+(?:attention|heed)\s+to|take\s+no\s+notice\s+of|stop\s+(?:following|obeying|adhering\s+to)|cease\s+(?:following|obeying)|no\s+longer\s+(?:follow|obey|adhere\s+to))\b[\s\w,'"()-]{0,40}?\b(instruction|instructions|directive|directives|safety|safeguards?|guardrails?|guidelines?|safety\s+(?:rules?|filters?|checks?)|system\s+prompt|content\s+polic\w+)\b/i },
   { label: 'Instructs the agent to conceal an action from the user', re: /\b(?:do\s*n['o]?t|never|without)\s+(?:tell|telling|inform|informing|notify|notifying|alert|alerting|mention|mentioning|disclos\w+|reveal\w*)\s+(?:it\s+|this\s+|them\s+)?(?:to\s+)?(?:the\s+)?(?:user|users|human|operator|owner)\b(?!['']s)(?!\s+(?:to\b|how\s+to\b|when\s+to\b|that\s+they\b|about\b))/i },
   { label: 'Bulk destructive command', re: /\b(delete|remove|wipe|erase|destroy|drop|purge|nuke|truncate)\b[\s\w,'"()-]{0,20}?\b(all|every|each|entire|whole)\b[\s\w,'"()-]{0,15}?\b(folder|folders|file|files|directory|directories|table|tables|database|databases|record|records|repo|repos|repositor\w*|account|accounts|user|users|row|rows|document|documents|data)\b/i },
   { label: 'Destructive SQL statement', re: /\b(drop|truncate)\s+(table|database|schema)\b/i },

package/src/models/lookup.mjs

@@ -13,6 +13,17 @@ function loadModelCache() { try { return JSON.parse(fs.readFileSync(MODEL_CACHE_
 
 function saveModelCache(c) { try { fs.mkdirSync(CONFIG_DIR, { recursive: true }); fs.writeFileSync(MODEL_CACHE_FILE, JSON.stringify(c)); } catch {  } }
 
+export const MODEL_CACHE_MAX_ENTRIES = 500;
+
+export const MODEL_CACHE_RETAIN_MS = 90 * 24 * 3600 * 1000;
+
+export function pruneModelCache(cache, { now = Date.now(), ttl = 0, max = MODEL_CACHE_MAX_ENTRIES } = {}) {
+  const horizon = Math.max(MODEL_CACHE_RETAIN_MS, ttl);
+  const live = Object.entries(cache ?? {}).filter(([, v]) => v && typeof v.cachedAt === 'number' && now - v.cachedAt < horizon);
+  live.sort((a, b) => b[1].cachedAt - a[1].cachedAt);
+  return Object.fromEntries(live.slice(0, max));
+}
+
 export async function modelLookup(url, id, sha, timeoutMs) {
   const key = `${id}@${sha || 'latest'}`;
   const ttl = clampInt(process.env.SHOMRA_MODEL_CACHE_TTL_MS, 7 * 24 * 3600 * 1000, 0, 365 * 24 * 3600 * 1000);
@@ -39,7 +50,7 @@ export async function modelLookup(url, id, sha, timeoutMs) {
     if (!res.ok) throw new Error(`HTTP ${res.status}`);
     const data = await res.json();
     breakerReset();
-    if (!modelCacheOff() && data && data.found) { cache[key] = { cachedAt: Date.now(), data }; saveModelCache(cache); }
+    if (!modelCacheOff() && data && data.found) { cache[key] = { cachedAt: Date.now(), data }; saveModelCache(pruneModelCache(cache, { ttl })); }
     return data;
   } catch (e) {
     breakerTrip();