@silmaril-security/sdk 0.4.2 → 0.5.1

package/dist/index.js

@@ -1,7 +1,12 @@
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -273,7 +278,7 @@ async function createLangChainHandler(firewall, options = {}) {
       return;
     }
     const threshold = result.threshold;
-    const blocked = result.score >= threshold;
+    const blocked = result.prediction === "MALICIOUS";
     const commonEventFields = {
       hook: hookLabel,
       ...toolName !== void 0 ? { toolName } : {},
@@ -492,7 +497,7 @@ function createMiddleware(firewall, options = {}) {
       toolName !== void 0 ? { hook, toolName } : { hook }
     );
     const threshold = result.threshold;
-    const blocked = result.score >= threshold;
+    const blocked = result.prediction === "MALICIOUS";
     const commonEventFields = {
       hook,
       ...toolName !== void 0 ? { toolName } : {},
@@ -618,78 +623,6 @@ function createMiddleware(firewall, options = {}) {
   };
 }
 
-// src/chunking.ts
-var CHARS_PER_TOKEN = 4;
-var MAX_INPUT_TOKENS = 81920;
-var CHUNK_WINDOW = 400;
-var CHUNK_OVERLAP = 64;
-var MAX_INPUT_CHARS = MAX_INPUT_TOKENS * CHARS_PER_TOKEN;
-var CHUNK_WINDOW_CHARS = CHUNK_WINDOW * CHARS_PER_TOKEN;
-var CHUNK_OVERLAP_CHARS = CHUNK_OVERLAP * CHARS_PER_TOKEN;
-var CHUNK_STRIDE_CHARS = CHUNK_WINDOW_CHARS - CHUNK_OVERLAP_CHARS;
-function isHighSurrogate(code) {
-  return code >= 55296 && code <= 56319;
-}
-function isLowSurrogate(code) {
-  return code >= 56320 && code <= 57343;
-}
-function sanitizeText(text) {
-  let out = "";
-  for (let i = 0; i < text.length; i++) {
-    const code = text.charCodeAt(i);
-    if (isHighSurrogate(code)) {
-      if (i + 1 < text.length && isLowSurrogate(text.charCodeAt(i + 1))) {
-        out += text[i];
-        out += text[i + 1];
-        i++;
-      }
-      continue;
-    }
-    if (isLowSurrogate(code)) {
-      continue;
-    }
-    out += text[i];
-  }
-  return out;
-}
-function safeChunkStart(text, start) {
-  if (start > 0 && start < text.length && isLowSurrogate(text.charCodeAt(start)) && isHighSurrogate(text.charCodeAt(start - 1))) {
-    return start + 1;
-  }
-  return start;
-}
-function safeChunkEnd(text, end) {
-  if (end > 0 && end < text.length && isHighSurrogate(text.charCodeAt(end - 1)) && isLowSurrogate(text.charCodeAt(end))) {
-    return end - 1;
-  }
-  return end;
-}
-function chunkText(text) {
-  text = sanitizeText(text);
-  const n = text.length;
-  if (n > MAX_INPUT_CHARS) {
-    throw new Error(
-      `Input has ~${Math.floor(n / CHARS_PER_TOKEN)} tokens (${n} chars); max is ${MAX_INPUT_TOKENS} tokens (${MAX_INPUT_CHARS} chars)`
-    );
-  }
-  if (n <= CHUNK_WINDOW_CHARS) {
-    return [text];
-  }
-  const chunks = [];
-  for (let start = 0; start < n; start += CHUNK_STRIDE_CHARS) {
-    const safeStart = safeChunkStart(text, start);
-    if (safeStart >= n) {
-      break;
-    }
-    const end = safeChunkEnd(text, safeStart + CHUNK_WINDOW_CHARS);
-    chunks.push(text.slice(safeStart, end));
-    if (end >= n) {
-      break;
-    }
-  }
-  return chunks;
-}
-
 // src/firewall.ts
 init_exceptions();
 
@@ -700,7 +633,13 @@ var Outcome = {
   SecretExposure: "secret_exposure",
   ControlAbuse: "control_abuse",
   SystemCompromise: "system_compromise",
-  ServiceDisruption: "service_disruption"
+  ServiceDisruption: "service_disruption",
+  CodeGeneration: "code_generation",
+  StoryScriptGeneration: "story_script_generation",
+  GameGeneration: "game_generation",
+  WebsiteGeneration: "website_generation",
+  ClickUpTermsViolation: "clickup_terms_violation",
+  TraditionalAiAbuse: "traditional_ai_abuse"
 };
 var PRIMARY_OUTCOMES = [
   Outcome.Benign,
@@ -708,14 +647,26 @@ var PRIMARY_OUTCOMES = [
   Outcome.SecretExposure,
   Outcome.ControlAbuse,
   Outcome.SystemCompromise,
-  Outcome.ServiceDisruption
+  Outcome.ServiceDisruption,
+  Outcome.CodeGeneration,
+  Outcome.StoryScriptGeneration,
+  Outcome.GameGeneration,
+  Outcome.WebsiteGeneration,
+  Outcome.ClickUpTermsViolation,
+  Outcome.TraditionalAiAbuse
 ];
 var HARMFUL_OUTCOMES = [
   Outcome.InformationDisclosure,
   Outcome.SecretExposure,
   Outcome.ControlAbuse,
   Outcome.SystemCompromise,
-  Outcome.ServiceDisruption
+  Outcome.ServiceDisruption,
+  Outcome.CodeGeneration,
+  Outcome.StoryScriptGeneration,
+  Outcome.GameGeneration,
+  Outcome.WebsiteGeneration,
+  Outcome.ClickUpTermsViolation,
+  Outcome.TraditionalAiAbuse
 ];
 var OUTCOME_DESCRIPTIONS = {
   [Outcome.Benign]: "No harmful firewall outcome detected.",
@@ -723,7 +674,13 @@ var OUTCOME_DESCRIPTIONS = {
   [Outcome.SecretExposure]: "Exposes credentials, tokens, API keys, cookies, passwords, signing keys, OAuth secrets, session material, or webhook secrets.",
   [Outcome.ControlAbuse]: "Misuses authorized tools or user privileges to send, change, approve, delete, operate, or bypass policy/RBAC without a stronger outcome.",
   [Outcome.SystemCompromise]: "Enables privilege escalation, account takeover, hostile integration or plugin takeover, persistence, lateral movement, attacker webhook registration, or code/plugin execution.",
-  [Outcome.ServiceDisruption]: "Causes downtime, lockout, degradation, alert suppression, destructive loops, resource exhaustion, cost spikes, or hidden outage evidence."
+  [Outcome.ServiceDisruption]: "Causes downtime, lockout, degradation, alert suppression, destructive loops, resource exhaustion, cost spikes, or hidden outage evidence.",
+  [Outcome.CodeGeneration]: "Requests generation or material modification of executable code, scripts, workflows, or configuration.",
+  [Outcome.StoryScriptGeneration]: "Requests generation of narrative prose, dialogue, scripts, or story artifacts.",
+  [Outcome.GameGeneration]: "Requests generation of a game, quest, level, mechanic, or playable experience.",
+  [Outcome.WebsiteGeneration]: "Requests generation of a website, landing page, storefront, or web experience.",
+  [Outcome.ClickUpTermsViolation]: "Requests content or actions that violate the configured ClickUp tenant policy.",
+  [Outcome.TraditionalAiAbuse]: "Requests unsafe AI assistance outside the concrete security outcome classes."
 };
 var PRIMARY_OUTCOME_SET = new Set(PRIMARY_OUTCOMES);
 var HARMFUL_OUTCOME_SET = new Set(HARMFUL_OUTCOMES);
@@ -763,14 +720,42 @@ function normalizeHarmfulOutcomeMap(values, fieldName) {
   return Object.freeze(out);
 }
 
+// src/sanitization.ts
+function isHighSurrogate(code) {
+  return code >= 55296 && code <= 56319;
+}
+function isLowSurrogate(code) {
+  return code >= 56320 && code <= 57343;
+}
+function sanitizeText(text) {
+  let out = "";
+  for (let i = 0; i < text.length; i++) {
+    const code = text.charCodeAt(i);
+    if (isHighSurrogate(code)) {
+      if (i + 1 < text.length && isLowSurrogate(text.charCodeAt(i + 1))) {
+        out += text[i];
+        out += text[i + 1];
+        i++;
+      }
+      continue;
+    }
+    if (!isLowSurrogate(code)) {
+      out += text[i];
+    }
+  }
+  return out;
+}
+
 // src/firewall.ts
-var SDK_VERSION = "0.4.2";
+var SDK_VERSION = "0.5.1";
 var DEFAULT_TIMEOUT_MS = 1e4;
-var DEFAULT_CHUNK_CONCURRENCY = 8;
 var DEFAULT_MAX_RETRIES = 5;
 var MAX_BACKOFF_SECONDS = 30;
 var MAX_ERROR_BODY_BYTES = 1 << 16;
 function blockResultFromResponse(data) {
+  if (data.prediction !== "BENIGN" && data.prediction !== "MALICIOUS") {
+    throw new Error("Firewall: response prediction must be BENIGN or MALICIOUS");
+  }
   const result = {
     prediction: data.prediction,
     score: Number(data.score),
@@ -813,9 +798,7 @@ function withSdkMetadata(metadata, info) {
     sdk_language: "typescript",
     sdk_version: SDK_VERSION,
     request_id: info.requestId,
-    input_index: info.inputIndex,
-    chunk_index: info.chunkIndex,
-    chunk_count: info.chunkCount
+    ...info.inputIndex === void 0 ? {} : { input_index: info.inputIndex }
   };
   return payload;
 }
@@ -856,36 +839,10 @@ async function readCappedErrorBody(response) {
   }
   return new TextDecoder().decode(body);
 }
-async function mapWithConcurrency(items, concurrency, task) {
-  const results = new Array(items.length);
-  let nextIndex = 0;
-  let firstError;
-  const workerCount = Math.min(concurrency, items.length);
-  async function worker() {
-    for (; ; ) {
-      const index = nextIndex;
-      nextIndex += 1;
-      if (index >= items.length) {
-        return;
-      }
-      try {
-        results[index] = await task(items[index], index);
-      } catch (err) {
-        firstError ??= err;
-      }
-    }
-  }
-  await Promise.all(Array.from({ length: workerCount }, () => worker()));
-  if (firstError !== void 0) {
-    throw firstError;
-  }
-  return results;
-}
 var Firewall = class {
   apiKey;
   apiUrl;
   timeoutMs;
-  chunkConcurrency;
   shadowMode;
   headers;
   constructor(options) {
@@ -901,12 +858,6 @@ var Firewall = class {
     if (typeof this.timeoutMs !== "number" || !Number.isFinite(this.timeoutMs) || this.timeoutMs < 0) {
       throw new Error(`Firewall: timeoutMs must be a finite non-negative number, got ${this.timeoutMs}`);
     }
-    this.chunkConcurrency = options.chunkConcurrency ?? DEFAULT_CHUNK_CONCURRENCY;
-    if (!Number.isInteger(this.chunkConcurrency) || this.chunkConcurrency < 1) {
-      throw new Error(
-        `Firewall: chunkConcurrency must be an integer >= 1, got ${this.chunkConcurrency}`
-      );
-    }
     this.shadowMode = options.shadowMode ?? false;
     this.headers = Object.freeze({
       "x-api-key": this.apiKey,
@@ -914,27 +865,8 @@ var Firewall = class {
     });
   }
   async classify(text, options = {}) {
-    const chunks = chunkText(text);
     const requestId = options.requestId ?? randomUUID();
-    if (chunks.length === 1) {
-      return this.classifySingleChunk(chunks[0], options, {
-        requestId,
-        inputIndex: 0,
-        chunkIndex: 0,
-        chunkCount: 1
-      });
-    }
-    const results = await mapWithConcurrency(
-      chunks,
-      this.chunkConcurrency,
-      (chunk, index) => this.classifySingleChunk(chunk, options, {
-        requestId,
-        inputIndex: 0,
-        chunkIndex: index,
-        chunkCount: chunks.length
-      })
-    );
-    return results.reduce((best, r) => r.score > best.score ? r : best);
+    return this.classifySingle(sanitizeText(text), options, { requestId });
   }
   async classifyBatch(texts, options = {}) {
     if (texts.length === 0) {
@@ -968,9 +900,7 @@ var Firewall = class {
     payload.metadata = texts.map(
       (_, index) => withSdkMetadata(options.metadata?.[index], {
         requestId,
-        inputIndex: index,
-        chunkIndex: 0,
-        chunkCount: 1
+        inputIndex: index
       })
     );
     const data = await this.postWithRetry(payload);
@@ -1009,7 +939,7 @@ var Firewall = class {
     }
     throw new Error("Firewall: exhausted retries (unreachable)");
   }
-  async classifySingleChunk(text, options, metadataInfo) {
+  async classifySingle(text, options, metadataInfo) {
     const payload = { text };
     if (options.hook !== void 0) {
       payload.hook = options.hook;
@@ -1028,11 +958,6 @@ init_exceptions();
 init_hooks();
 export {
   ALL_HOOKS,
-  CHUNK_OVERLAP,
-  CHUNK_OVERLAP_CHARS,
-  CHUNK_WINDOW,
-  CHUNK_WINDOW_CHARS,
-  DEFAULT_CHUNK_CONCURRENCY,
   DEFAULT_HOOKS,
   DEFAULT_TIMEOUT_MS,
   FIREWALL_HOOK_TO_LABEL,
@@ -1042,15 +967,12 @@ export {
   HARMFUL_OUTCOMES,
   HookLabel,
   INPUT_HOOKS,
-  MAX_INPUT_CHARS,
-  MAX_INPUT_TOKENS,
   OUTCOME_DESCRIPTIONS,
   OUTPUT_HOOKS,
   Outcome,
   PRIMARY_OUTCOMES,
   PromptBlockedException,
   SilmarilApiError,
-  chunkText,
   isHarmfulOutcome,
   isPrimaryOutcome,
   normalizeHarmfulOutcome,
@@ -1058,7 +980,6 @@ export {
   normalizePrimaryOutcome,
   prependHook,
   prependToolName,
-  resolveHooks,
-  sanitizeText
+  resolveHooks
 };
 //# sourceMappingURL=index.js.map