@surfinguard/core-engine 0.1.0

package/dist/analyzers/file-read.js

@@ -0,0 +1,159 @@
+/**
+ * File Read Analyzer — sensitive file read detection.
+ *
+ * Detects 10 threat patterns (FR01-FR10) mapped to the EXFILTRATION primitive.
+ */
+export class FileReadAnalyzer {
+    actionType = 'file_read';
+    db;
+    safePathPrefixes;
+    safeExtensions;
+    constructor(patterns) {
+        this.db = patterns;
+        this.safePathPrefixes = patterns.safePaths;
+        this.safeExtensions = new Set(patterns.safeExtensions);
+    }
+    analyze(value) {
+        const rawPath = value.trim();
+        if (!rawPath) {
+            return { actionType: 'file_read', findings: [], shortCircuit: { safe: true, reason: 'Empty path' } };
+        }
+        const normalized = this.normalizePath(rawPath);
+        const findings = [];
+        const add = (score, reason, threatId) => {
+            findings.push({ primitive: 'EXFILTRATION', score, reason, threatId });
+        };
+        // ── Short-circuit safe ─────────────────────────────────────────────
+        if (this.isSafePath(normalized, rawPath)) {
+            return { actionType: 'file_read', findings: [], shortCircuit: { safe: true, reason: 'Known safe path' } };
+        }
+        // ── Critical paths (score 8-9, FR01-FR02) ──────────────────────────
+        for (const entry of this.db.criticalPaths) {
+            if (this.matchPath(normalized, rawPath, entry)) {
+                add(entry.score, entry.reason, entry.threatId);
+            }
+        }
+        // ── High paths (score 5-8, FR04-FR06) ──────────────────────────────
+        for (const entry of this.db.highPaths) {
+            if (this.matchPath(normalized, rawPath, entry)) {
+                add(entry.score, entry.reason, entry.threatId);
+            }
+        }
+        // ── Medium paths (score 3-5, FR07-FR09) ────────────────────────────
+        for (const entry of this.db.mediumPaths) {
+            if (this.matchPath(normalized, rawPath, entry)) {
+                add(entry.score, entry.reason, entry.threatId);
+            }
+        }
+        // ── Sensitive extensions (FR03) ────────────────────────────────────
+        if (!findings.some((f) => f.threatId === 'FR03')) {
+            for (const entry of this.db.sensitiveExtensions) {
+                if (this.matchExtension(rawPath, entry)) {
+                    add(entry.score, entry.reason, entry.threatId);
+                    break;
+                }
+            }
+        }
+        // ── Browser data paths (FR10) ──────────────────────────────────────
+        for (const entry of this.db.browserDataPaths) {
+            if (this.matchPath(normalized, rawPath, entry)) {
+                add(entry.score, entry.reason, entry.threatId);
+                break;
+            }
+        }
+        return { actionType: 'file_read', findings };
+    }
+    // ── Path Helpers ──────────────────────────────────────────────────────
+    /**
+     * Normalize path: expand ~ to /HOME/, resolve ..
+     */
+    normalizePath(path) {
+        let p = path;
+        // Expand ~ to /HOME/
+        if (p.startsWith('~/')) {
+            p = '/HOME/' + p.slice(2);
+        }
+        else if (p === '~') {
+            p = '/HOME/';
+        }
+        // Resolve .. segments
+        const parts = p.split('/');
+        const resolved = [];
+        for (const part of parts) {
+            if (part === '..') {
+                resolved.pop();
+            }
+            else if (part !== '.') {
+                resolved.push(part);
+            }
+        }
+        return resolved.join('/');
+    }
+    /**
+     * Check if a path matches a safe path prefix or has a safe extension.
+     */
+    isSafePath(normalized, rawPath) {
+        const ext = this.getExtension(rawPath);
+        if (ext && this.safeExtensions.has(ext)) {
+            // Also check it's not in a sensitive directory
+            const isSensitiveDir = normalized.includes('/HOME/.ssh/') ||
+                normalized.includes('/HOME/.aws/') ||
+                normalized.includes('/HOME/.docker/') ||
+                normalized.includes('/HOME/.kube/') ||
+                normalized.includes('/HOME/.azure/') ||
+                normalized.includes('/HOME/.config/gcloud/') ||
+                normalized.includes('/HOME/.gnupg/') ||
+                normalized.startsWith('/etc/');
+            if (!isSensitiveDir)
+                return true;
+        }
+        // Check safe path prefixes
+        const basename = this.getBasename(rawPath);
+        for (const safePrefix of this.safePathPrefixes) {
+            if (safePrefix.endsWith('/')) {
+                // Directory prefix check
+                if (normalized.includes(safePrefix) || rawPath.includes(safePrefix))
+                    return true;
+            }
+            else {
+                // Basename check
+                if (basename === safePrefix || rawPath === safePrefix)
+                    return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Match a path against a pattern entry based on matchType.
+     */
+    matchPath(normalized, rawPath, entry) {
+        const normalizedPattern = this.normalizePath(entry.pattern);
+        const matchType = entry.matchType || 'prefix';
+        switch (matchType) {
+            case 'exact':
+                return normalized === normalizedPattern || rawPath === entry.pattern;
+            case 'prefix':
+                return normalized.startsWith(normalizedPattern) || rawPath.startsWith(entry.pattern);
+            case 'basename':
+                return this.getBasename(rawPath) === entry.pattern || this.getBasename(normalized) === entry.pattern;
+            case 'contains':
+                return normalized.includes(normalizedPattern) || rawPath.includes(entry.pattern);
+            default:
+                return normalized.startsWith(normalizedPattern);
+        }
+    }
+    matchExtension(path, entry) {
+        return path.toLowerCase().endsWith(entry.extension);
+    }
+    getExtension(path) {
+        const lastDot = path.lastIndexOf('.');
+        if (lastDot === -1 || lastDot === path.length - 1)
+            return '';
+        return path.slice(lastDot).toLowerCase();
+    }
+    getBasename(path) {
+        const parts = path.split('/');
+        return parts[parts.length - 1] || parts[parts.length - 2] || '';
+    }
+}
+//# sourceMappingURL=file-read.js.map

package/dist/analyzers/file-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-read.js","sourceRoot":"","sources":["../../src/analyzers/file-read.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAClB,UAAU,GAAG,WAAoB,CAAC;IAE1B,EAAE,CAA0B;IAC5B,gBAAgB,CAAW;IAC3B,cAAc,CAAc;IAE7C,YAAY,QAAiC;QAC3C,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC;QACvG,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,QAAgB,EAAE,EAAE;YAC9D,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC;QAEF,sEAAsE;QACtE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAAC;QAC5G,CAAC;QAED,sEAAsE;QACtE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;YACjD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;oBACxC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAC/C,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC/C,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAED,yEAAyE;IAEzE;;OAEG;IACK,aAAa,CAAC,IAAY;QAChC,IAAI,CAAC,GAAG,IAAI,CAAC;QACb,qBAAqB;QACrB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,CAAC,GAAG,QAAQ,CAAC;QACf,CAAC;QACD,sBAAsB;QACtB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,UAAkB,EAAE,OAAe;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,+CAA+C;YAC/C,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACvD,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAClC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBACrC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC;gBACnC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;gBACpC,UAAU,CAAC,QAAQ,CAAC,uBAAuB,CAAC;gBAC5C,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;gBACpC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,cAAc;gBAAE,OAAO,IAAI,CAAC;QACnC,CAAC;QAED,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC/C,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,yBAAyB;gBACzB,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAAE,OAAO,IAAI,CAAC;YACnF,CAAC;iBAAM,CAAC;gBACN,iBAAiB;gBACjB,IAAI,QAAQ,KAAK,UAAU,IAAI,OAAO,KAAK,UAAU;oBAAE,OAAO,IAAI,CAAC;YACrE,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,UAAkB,EAAE,OAAe,EAAE,KAAyB;QAC9E,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC;QAE9C,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,OAAO;gBACV,OAAO,UAAU,KAAK,iBAAiB,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;YACvE,KAAK,QAAQ;gBACX,OAAO,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvF,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC;YACvG,KAAK,UAAU;gBACb,OAAO,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnF;gBACE,OAAO,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,IAAY,EAAE,KAA8B;QACjE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,OAAO,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,CAAC;CACF"}

package/dist/analyzers/file-write.d.ts

@@ -0,0 +1,32 @@
+import type { FileWritePatternDatabase } from '@surfinguard/types';
+import type { Analyzer, AnalyzerResult } from './base.js';
+/**
+ * File Write Analyzer — dangerous file write detection.
+ *
+ * Detects 12 threat patterns (FW01-FW12) mapped to DESTRUCTION, ESCALATION, and PERSISTENCE.
+ * Supports both path-only and path+content analysis.
+ */
+export declare class FileWriteAnalyzer implements Analyzer {
+    readonly actionType: "file_write";
+    private readonly db;
+    private readonly safeExtensions;
+    private readonly safeDirectories;
+    constructor(patterns: FileWritePatternDatabase);
+    /**
+     * Path-only analysis (satisfies base Analyzer interface).
+     */
+    analyze(value: string): AnalyzerResult;
+    /**
+     * Combined path + content analysis.
+     */
+    analyzeWithContent(path: string, content?: string): AnalyzerResult;
+    private normalizePath;
+    private isSafePath;
+    private isInSafeDirectory;
+    private matchPath;
+    private matchContent;
+    private getExtension;
+    private getBasename;
+    private isExecutableExtension;
+}
+//# sourceMappingURL=file-write.d.ts.map

package/dist/analyzers/file-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write.d.ts","sourceRoot":"","sources":["../../src/analyzers/file-write.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAA0D,MAAM,oBAAoB,CAAC;AAC3H,OAAO,KAAK,EAAE,QAAQ,EAAmB,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3E;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,QAAQ;IAChD,QAAQ,CAAC,UAAU,EAAG,YAAY,CAAU;IAE5C,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA2B;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAc;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAW;gBAE/B,QAAQ,EAAE,wBAAwB;IAM9C;;OAEG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc;IAItC;;OAEG;IACH,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc;IA0FlE,OAAO,CAAC,aAAa;IAmBrB,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,SAAS;IAkBjB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,qBAAqB;CAG9B"}

package/dist/analyzers/file-write.js

@@ -0,0 +1,177 @@
+/**
+ * File Write Analyzer — dangerous file write detection.
+ *
+ * Detects 12 threat patterns (FW01-FW12) mapped to DESTRUCTION, ESCALATION, and PERSISTENCE.
+ * Supports both path-only and path+content analysis.
+ */
+export class FileWriteAnalyzer {
+    actionType = 'file_write';
+    db;
+    safeExtensions;
+    safeDirectories;
+    constructor(patterns) {
+        this.db = patterns;
+        this.safeExtensions = new Set(patterns.safeExtensions);
+        this.safeDirectories = patterns.safeDirectories;
+    }
+    /**
+     * Path-only analysis (satisfies base Analyzer interface).
+     */
+    analyze(value) {
+        return this.analyzeWithContent(value);
+    }
+    /**
+     * Combined path + content analysis.
+     */
+    analyzeWithContent(path, content) {
+        const rawPath = path.trim();
+        if (!rawPath) {
+            return { actionType: 'file_write', findings: [], shortCircuit: { safe: true, reason: 'Empty path' } };
+        }
+        const normalized = this.normalizePath(rawPath);
+        const findings = [];
+        const add = (primitive, score, reason, threatId) => {
+            findings.push({ primitive, score, reason, threatId });
+        };
+        // ── Short-circuit safe ─────────────────────────────────────────────
+        if (!content && this.isSafePath(normalized, rawPath)) {
+            return { actionType: 'file_write', findings: [], shortCircuit: { safe: true, reason: 'Known safe path' } };
+        }
+        // ── Path analysis ──────────────────────────────────────────────────
+        // Critical paths (FW01-FW03)
+        for (const entry of this.db.criticalPaths) {
+            if (this.matchPath(normalized, rawPath, entry)) {
+                add(entry.primitive, entry.score, entry.reason, entry.threatId);
+            }
+        }
+        // Persistence paths (FW04-FW06, FW10)
+        for (const entry of this.db.persistencePaths) {
+            if (this.matchPath(normalized, rawPath, entry)) {
+                add(entry.primitive, entry.score, entry.reason, entry.threatId);
+            }
+        }
+        // Shell config paths (FW07)
+        for (const entry of this.db.shellConfigPaths) {
+            if (this.matchPath(normalized, rawPath, entry)) {
+                add(entry.primitive, entry.score, entry.reason, entry.threatId);
+            }
+        }
+        // Build config paths (FW08)
+        for (const entry of this.db.buildConfigPaths) {
+            if (this.matchPath(normalized, rawPath, entry)) {
+                add(entry.primitive, entry.score, entry.reason, entry.threatId);
+            }
+        }
+        // Credential paths (FW09)
+        for (const entry of this.db.credentialPaths) {
+            if (this.matchPath(normalized, rawPath, entry)) {
+                add(entry.primitive, entry.score, entry.reason, entry.threatId);
+            }
+        }
+        // ── Content analysis ───────────────────────────────────────────────
+        if (content) {
+            // Check if writing package.json with lifecycle scripts
+            const basename = this.getBasename(rawPath);
+            if (basename === 'package.json') {
+                const contentLower = content.toLowerCase();
+                for (const entry of this.db.packageJsonScriptPatterns) {
+                    if (contentLower.includes(entry.pattern)) {
+                        add(entry.primitive, entry.score, entry.reason, entry.threatId);
+                        break;
+                    }
+                }
+            }
+            // Check dangerous content patterns
+            for (const entry of this.db.dangerousContentPatterns) {
+                if (this.matchContent(content, entry)) {
+                    add(entry.primitive, entry.score, entry.reason, entry.threatId);
+                }
+            }
+        }
+        // ── Executable extension outside safe dirs (FW11) ──────────────────
+        if (findings.length === 0) {
+            const ext = this.getExtension(rawPath);
+            if (this.isExecutableExtension(ext) && !this.isInSafeDirectory(normalized, rawPath)) {
+                add('ESCALATION', 2, 'Executable file creation outside safe directories', 'FW11');
+            }
+        }
+        return { actionType: 'file_write', findings };
+    }
+    // ── Path Helpers ──────────────────────────────────────────────────────
+    normalizePath(path) {
+        let p = path;
+        if (p.startsWith('~/')) {
+            p = '/HOME/' + p.slice(2);
+        }
+        else if (p === '~') {
+            p = '/HOME/';
+        }
+        const parts = p.split('/');
+        const resolved = [];
+        for (const part of parts) {
+            if (part === '..') {
+                resolved.pop();
+            }
+            else if (part !== '.') {
+                resolved.push(part);
+            }
+        }
+        return resolved.join('/');
+    }
+    isSafePath(normalized, rawPath) {
+        const ext = this.getExtension(rawPath);
+        if (ext && this.safeExtensions.has(ext) && this.isInSafeDirectory(normalized, rawPath)) {
+            return true;
+        }
+        return false;
+    }
+    isInSafeDirectory(normalized, rawPath) {
+        for (const dir of this.safeDirectories) {
+            if (normalized.includes(dir) || rawPath.includes(dir))
+                return true;
+        }
+        return false;
+    }
+    matchPath(normalized, rawPath, entry) {
+        const normalizedPattern = this.normalizePath(entry.pattern);
+        const matchType = entry.matchType || 'prefix';
+        switch (matchType) {
+            case 'exact':
+                return normalized === normalizedPattern || rawPath === entry.pattern;
+            case 'prefix':
+                return normalized.startsWith(normalizedPattern) || rawPath.startsWith(entry.pattern);
+            case 'basename':
+                return this.getBasename(rawPath) === entry.pattern || this.getBasename(normalized) === entry.pattern;
+            case 'contains':
+                return normalized.includes(normalizedPattern) || rawPath.includes(entry.pattern);
+            default:
+                return normalized.startsWith(normalizedPattern);
+        }
+    }
+    matchContent(content, entry) {
+        if (entry.isRegex) {
+            try {
+                return new RegExp(entry.pattern, 'i').test(content);
+            }
+            catch {
+                return content.toLowerCase().includes(entry.pattern.toLowerCase());
+            }
+        }
+        return content.includes(entry.pattern);
+    }
+    getExtension(path) {
+        const basename = this.getBasename(path);
+        const lastDot = basename.lastIndexOf('.');
+        if (lastDot === -1 || lastDot === basename.length - 1)
+            return '';
+        return basename.slice(lastDot).toLowerCase();
+    }
+    getBasename(path) {
+        const parts = path.split('/');
+        return parts[parts.length - 1] || parts[parts.length - 2] || '';
+    }
+    isExecutableExtension(ext) {
+        return ['.sh', '.bash', '.bat', '.cmd', '.ps1', '.exe', '.com', '.msi'].includes(ext);
+    }
+}
+//# sourceMappingURL=file-write.js.map

package/dist/analyzers/file-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write.js","sourceRoot":"","sources":["../../src/analyzers/file-write.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IACnB,UAAU,GAAG,YAAqB,CAAC;IAE3B,EAAE,CAA2B;IAC7B,cAAc,CAAc;IAC5B,eAAe,CAAW;IAE3C,YAAY,QAAkC;QAC5C,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC;QACnB,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACvD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,KAAa;QACnB,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,IAAY,EAAE,OAAgB;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC;QACxG,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,MAAM,GAAG,GAAG,CAAC,SAAwB,EAAE,KAAa,EAAE,MAAc,EAAE,QAAgB,EAAE,EAAE;YACxF,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC;QAEF,sEAAsE;QACtE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAAC;QAC7G,CAAC;QAED,sEAAsE;QAEtE,6BAA6B;QAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,IAAI,OAAO,EAAE,CAAC;YACZ,uDAAuD;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;gBAChC,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC3C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,yBAAyB,EAAE,CAAC;oBACtD,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;wBACzC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;wBAChE,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,mCAAmC;YACnC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,wBAAwB,EAAE,CAAC;gBACrD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;oBACtC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;gBACpF,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,mDAAmD,EAAE,MAAM,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,yEAAyE;IAEjE,aAAa,CAAC,IAAY;QAChC,IAAI,CAAC,GAAG,IAAI,CAAC;QACb,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,CAAC,GAAG,QAAQ,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEO,UAAU,CAAC,UAAkB,EAAE,OAAe;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,iBAAiB,CAAC,UAAkB,EAAE,OAAe;QAC3D,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACvC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACrE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,SAAS,CAAC,UAAkB,EAAE,OAAe,EAAE,KAAyB;QAC9E,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC;QAE9C,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,OAAO;gBACV,OAAO,UAAU,KAAK,iBAAiB,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;YACvE,KAAK,QAAQ;gBACX,OAAO,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvF,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC;YACvG,KAAK,UAAU;gBACb,OAAO,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnF;gBACE,OAAO,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,OAAe,EAAE,KAA0B;QAC9D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,OAAO,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QACjE,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,CAAC;IAEO,qBAAqB,CAAC,GAAW;QACvC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxF,CAAC;CACF"}

package/dist/analyzers/index.d.ts

@@ -0,0 +1,7 @@
+export type { Analyzer, AnalyzerFinding, AnalyzerResult } from './base.js';
+export { UrlAnalyzer } from './url.js';
+export { CommandAnalyzer } from './command.js';
+export { TextAnalyzer } from './text.js';
+export { FileReadAnalyzer } from './file-read.js';
+export { FileWriteAnalyzer } from './file-write.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analyzers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/analyzers/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/analyzers/index.js

@@ -0,0 +1,6 @@
+export { UrlAnalyzer } from './url.js';
+export { CommandAnalyzer } from './command.js';
+export { TextAnalyzer } from './text.js';
+export { FileReadAnalyzer } from './file-read.js';
+export { FileWriteAnalyzer } from './file-write.js';
+//# sourceMappingURL=index.js.map

package/dist/analyzers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/analyzers/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/analyzers/text.d.ts

@@ -0,0 +1,30 @@
+import type { TextPatternDatabase } from '@surfinguard/types';
+import type { Analyzer, AnalyzerResult } from './base.js';
+/**
+ * Text Analyzer — prompt injection and text manipulation detection.
+ *
+ * Detects 12 threat patterns (P01-P12) mapped to 4 risk primitives.
+ */
+export declare class TextAnalyzer implements Analyzer {
+    readonly actionType: "text";
+    private readonly safePatterns;
+    private readonly directInjectionPatterns;
+    private readonly goalHijackingPatterns;
+    private readonly personaHijackingPatterns;
+    private readonly toolManipulationPatterns;
+    private readonly toolManipulationRegexes;
+    private readonly exfiltrationRequestPatterns;
+    private readonly encodingEvasionPatterns;
+    private readonly contextPoisoningIndicators;
+    private readonly markupInjectionPatterns;
+    private readonly delayedTriggerPatterns;
+    private readonly systemPromptIndicators;
+    constructor(patterns: TextPatternDatabase);
+    analyze(value: string): AnalyzerResult;
+    /**
+     * Detect instruction keywords written in non-Latin scripts.
+     * Looks for CJK, Cyrillic, Arabic characters near instruction-like patterns.
+     */
+    private hasNonLatinInstructions;
+}
+//# sourceMappingURL=text.d.ts.map

package/dist/analyzers/text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../src/analyzers/text.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAmB,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3E;;;;GAIG;AACH,qBAAa,YAAa,YAAW,QAAQ;IAC3C,QAAQ,CAAC,UAAU,EAAG,MAAM,CAAU;IAEtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAW;IACxC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAW;IACnD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAW;IACjD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAW;IACpD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAW;IACpD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAW;IACnD,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAW;IACvD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAW;IACnD,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAW;IACtD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAW;IACnD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAW;IAClD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAW;gBAEtC,QAAQ,EAAE,mBAAmB;IA6BzC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc;IA2FtC;;;OAGG;IACH,OAAO,CAAC,uBAAuB;CAUhC"}

package/dist/analyzers/text.js

@@ -0,0 +1,139 @@
+/**
+ * Text Analyzer — prompt injection and text manipulation detection.
+ *
+ * Detects 12 threat patterns (P01-P12) mapped to 4 risk primitives.
+ */
+export class TextAnalyzer {
+    actionType = 'text';
+    safePatterns;
+    directInjectionPatterns;
+    goalHijackingPatterns;
+    personaHijackingPatterns;
+    toolManipulationPatterns;
+    toolManipulationRegexes;
+    exfiltrationRequestPatterns;
+    encodingEvasionPatterns;
+    contextPoisoningIndicators;
+    markupInjectionPatterns;
+    delayedTriggerPatterns;
+    systemPromptIndicators;
+    constructor(patterns) {
+        // Pre-lowercase all string patterns for O(1) matching
+        this.safePatterns = patterns.safePatterns.map((p) => p.toLowerCase());
+        this.directInjectionPatterns = patterns.directInjectionPatterns.map((p) => p.toLowerCase());
+        this.goalHijackingPatterns = patterns.goalHijackingPatterns.map((p) => p.toLowerCase());
+        this.personaHijackingPatterns = patterns.personaHijackingPatterns.map((p) => p.toLowerCase());
+        this.exfiltrationRequestPatterns = patterns.exfiltrationRequestPatterns.map((p) => p.toLowerCase());
+        this.encodingEvasionPatterns = patterns.encodingEvasionPatterns.map((p) => p.toLowerCase());
+        this.contextPoisoningIndicators = patterns.contextPoisoningIndicators.map((p) => p.toLowerCase());
+        this.markupInjectionPatterns = patterns.markupInjectionPatterns.map((p) => p.toLowerCase());
+        this.delayedTriggerPatterns = patterns.delayedTriggerPatterns.map((p) => p.toLowerCase());
+        this.systemPromptIndicators = patterns.systemPromptIndicators.map((p) => p.toLowerCase());
+        // Separate regex patterns from plain string patterns for tool manipulation
+        this.toolManipulationPatterns = [];
+        this.toolManipulationRegexes = [];
+        for (const p of patterns.toolManipulationPatterns) {
+            if (p.includes('.*') || p.includes('\\')) {
+                try {
+                    this.toolManipulationRegexes.push(new RegExp(p, 'i'));
+                }
+                catch {
+                    this.toolManipulationPatterns.push(p.toLowerCase());
+                }
+            }
+            else {
+                this.toolManipulationPatterns.push(p.toLowerCase());
+            }
+        }
+    }
+    analyze(value) {
+        const text = value.trim();
+        if (!text) {
+            return { actionType: 'text', findings: [], shortCircuit: { safe: true, reason: 'Empty text' } };
+        }
+        const lower = text.toLowerCase();
+        const findings = [];
+        const add = (primitive, score, reason, threatId) => {
+            findings.push({ primitive, score, reason, threatId });
+        };
+        // ── Short-circuit safe: educational content about prompt injection ──
+        if (this.safePatterns.some((p) => lower.includes(p))) {
+            return { actionType: 'text', findings: [], shortCircuit: { safe: true, reason: 'Educational content about prompt injection' } };
+        }
+        // ── 1. Direct injection (P01) ──────────────────────────────────────
+        if (this.directInjectionPatterns.some((p) => lower.includes(p))) {
+            add('MANIPULATION', 8, 'Direct prompt injection — attempts to override system instructions', 'P01');
+        }
+        // ── 2. Goal hijacking (P04) ────────────────────────────────────────
+        if (this.goalHijackingPatterns.some((p) => lower.includes(p))) {
+            add('EXFILTRATION', 8, 'Goal hijacking — redirects agent to exfiltrate data', 'P04');
+        }
+        // ── 3. Tool-use manipulation (P07) ─────────────────────────────────
+        const hasToolManipString = this.toolManipulationPatterns.some((p) => lower.includes(p));
+        const hasToolManipRegex = this.toolManipulationRegexes.some((r) => r.test(text));
+        if (hasToolManipString || hasToolManipRegex) {
+            add('DESTRUCTION', 9, 'Tool-use manipulation — instructs agent to invoke destructive tools', 'P07');
+        }
+        // ── 4. Persona hijacking (P09) ────────────────────────────────────
+        if (this.personaHijackingPatterns.some((p) => lower.includes(p))) {
+            add('MANIPULATION', 7, 'Persona hijacking — attempts to override agent identity', 'P09');
+        }
+        // ── 5. Exfiltration requests (P04 additive) ──────────────────────
+        if (this.exfiltrationRequestPatterns.some((p) => lower.includes(p))) {
+            // Only add if not already caught by goal hijacking
+            if (!findings.some((f) => f.threatId === 'P04')) {
+                add('EXFILTRATION', 6, 'Exfiltration request — asks agent to send data externally', 'P04');
+            }
+        }
+        // ── 6. Encoding evasion (P10) ─────────────────────────────────────
+        if (this.encodingEvasionPatterns.some((p) => lower.includes(p))) {
+            add('MANIPULATION', 6, 'Encoding evasion — uses encoded instructions to bypass filters', 'P10');
+        }
+        // ── 7. Markup injection (P12) ─────────────────────────────────────
+        const hasMarkup = this.markupInjectionPatterns.some((p) => lower.includes(p));
+        const hasZeroWidth = /[\u200B\u200C\u200D\uFEFF]/.test(text);
+        if (hasMarkup || hasZeroWidth) {
+            add('MANIPULATION', 5, 'Markup injection — hidden elements or zero-width characters detected', 'P12');
+        }
+        // ── 8. System prompt indicators (P02/P03) ─────────────────────────
+        if (this.systemPromptIndicators.some((p) => lower.includes(p))) {
+            add('MANIPULATION', 5, 'System prompt indicators — embedded system-level markers in user content', 'P02');
+        }
+        // ── 9. Context poisoning (P05) ────────────────────────────────────
+        if (text.length > 2000) {
+            // Check for 5+ repetitions of the same SYSTEM/IMPORTANT phrase
+            for (const indicator of this.contextPoisoningIndicators) {
+                const regex = new RegExp(indicator.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'), 'gi');
+                const matches = lower.match(regex);
+                if (matches && matches.length >= 5) {
+                    add('MANIPULATION', 5, 'Context window poisoning — repeated directive phrases detected', 'P05');
+                    break;
+                }
+            }
+        }
+        // ── 10. Delayed trigger (P08) ─────────────────────────────────────
+        if (this.delayedTriggerPatterns.some((p) => lower.includes(p))) {
+            add('PERSISTENCE', 4, 'Delayed trigger — instructions activate under future conditions', 'P08');
+        }
+        // ── 11. Language switching (P11) ──────────────────────────────────
+        if (this.hasNonLatinInstructions(text)) {
+            add('MANIPULATION', 4, 'Language switching — instruction keywords in non-Latin script', 'P11');
+        }
+        return { actionType: 'text', findings };
+    }
+    /**
+     * Detect instruction keywords written in non-Latin scripts.
+     * Looks for CJK, Cyrillic, Arabic characters near instruction-like patterns.
+     */
+    hasNonLatinInstructions(text) {
+        // Check if text has non-Latin script characters
+        const hasNonLatin = /[\u0400-\u04FF\u0600-\u06FF\u3000-\u9FFF\uAC00-\uD7AF]/.test(text);
+        if (!hasNonLatin)
+            return false;
+        // Check for common instruction words near non-Latin text
+        const lower = text.toLowerCase();
+        const instructionKeywords = ['ignore', 'execute', 'run', 'delete', 'send', 'override', 'system', 'admin'];
+        return instructionKeywords.some((kw) => lower.includes(kw));
+    }
+}
+//# sourceMappingURL=text.js.map

package/dist/analyzers/text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../src/analyzers/text.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,OAAO,YAAY;IACd,UAAU,GAAG,MAAe,CAAC;IAErB,YAAY,CAAW;IACvB,uBAAuB,CAAW;IAClC,qBAAqB,CAAW;IAChC,wBAAwB,CAAW;IACnC,wBAAwB,CAAW;IACnC,uBAAuB,CAAW;IAClC,2BAA2B,CAAW;IACtC,uBAAuB,CAAW;IAClC,0BAA0B,CAAW;IACrC,uBAAuB,CAAW;IAClC,sBAAsB,CAAW;IACjC,sBAAsB,CAAW;IAElD,YAAY,QAA6B;QACvC,sDAAsD;QACtD,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,qBAAqB,GAAG,QAAQ,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,wBAAwB,GAAG,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,2BAA2B,GAAG,QAAQ,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACpG,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,0BAA0B,GAAG,QAAQ,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAClG,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAE1F,2EAA2E;QAC3E,IAAI,CAAC,wBAAwB,GAAG,EAAE,CAAC;QACnC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,wBAAwB,EAAE,CAAC;YAClD,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACH,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACxD,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC;QAClG,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,MAAM,GAAG,GAAG,CAAC,SAAuC,EAAE,KAAa,EAAE,MAAc,EAAE,QAAiB,EAAE,EAAE;YACxG,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC;QAEF,uEAAuE;QACvE,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,4CAA4C,EAAE,EAAE,CAAC;QAClI,CAAC;QAED,sEAAsE;QACtE,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,oEAAoE,EAAE,KAAK,CAAC,CAAC;QACtG,CAAC;QAED,sEAAsE;QACtE,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,qDAAqD,EAAE,KAAK,CAAC,CAAC;QACvF,CAAC;QAED,sEAAsE;QACtE,MAAM,kBAAkB,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,iBAAiB,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjF,IAAI,kBAAkB,IAAI,iBAAiB,EAAE,CAAC;YAC5C,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,qEAAqE,EAAE,KAAK,CAAC,CAAC;QACtG,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,yDAAyD,EAAE,KAAK,CAAC,CAAC;QAC3F,CAAC;QAED,oEAAoE;QACpE,IAAI,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,mDAAmD;YACnD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChD,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,2DAA2D,EAAE,KAAK,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,gEAAgE,EAAE,KAAK,CAAC,CAAC;QAClG,CAAC;QAED,qEAAqE;QACrE,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,YAAY,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;YAC9B,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,sEAAsE,EAAE,KAAK,CAAC,CAAC;QACxG,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,0EAA0E,EAAE,KAAK,CAAC,CAAC;QAC5G,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YACvB,+DAA+D;YAC/D,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;gBACjF,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,gEAAgE,EAAE,KAAK,CAAC,CAAC;oBAChG,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,iEAAiE,EAAE,KAAK,CAAC,CAAC;QAClG,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,+DAA+D,EAAE,KAAK,CAAC,CAAC;QACjG,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACK,uBAAuB,CAAC,IAAY;QAC1C,gDAAgD;QAChD,MAAM,WAAW,GAAG,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAE/B,yDAAyD;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1G,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/analyzers/url.d.ts

@@ -0,0 +1,33 @@
+import type { UrlPatternDatabase, BrandPatternDatabase } from '@surfinguard/types';
+import type { Analyzer, AnalyzerResult } from './base.js';
+/**
+ * URL Analyzer — heuristic URL threat detection.
+ *
+ * Ported from Surfinguard Android RiskEngine.kt with additions
+ * for RFC 1918 / cloud metadata detection (ESCALATION primitive).
+ */
+export declare class UrlAnalyzer implements Analyzer {
+    readonly actionType: "url";
+    private readonly trackerDomains;
+    private readonly adClickParams;
+    private readonly shorteners;
+    private readonly freeHostingPlatforms;
+    private readonly riskyTlds;
+    private readonly redirectParamKeys;
+    private readonly highRiskKeywords;
+    private readonly suspiciousExtensions;
+    private readonly internalIpRanges;
+    private readonly cloudMetadataEndpoints;
+    private readonly brands;
+    constructor(urlPatterns: UrlPatternDatabase, brandPatterns: BrandPatternDatabase);
+    analyze(value: string): AnalyzerResult;
+    private isKnownTracker;
+    private isInternalIp;
+    private isShortener;
+    private findHostingPlatform;
+    private subdomainLooksLikeBrand;
+    private checkBrandImpersonation;
+    private analyzeRedirects;
+    private findRedirectUrl;
+}
+//# sourceMappingURL=url.d.ts.map