@surfinguard/core-engine 0.1.0

package/dist/analyzers/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/analyzers/url.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAc,MAAM,oBAAoB,CAAC;AAC/F,OAAO,KAAK,EAAE,QAAQ,EAAmB,cAAc,EAAE,MAAM,WAAW,CAAC;AAK3E;;;;;GAKG;AACH,qBAAa,WAAY,YAAW,QAAQ;IAC1C,QAAQ,CAAC,UAAU,EAAG,KAAK,CAAU;IAErC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAc;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAc;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAc;IACzC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAc;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAc;IAChD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAW;IAChD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAc;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;gBAE1B,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,oBAAoB;IAchF,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc;IAgNtC,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,uBAAuB;IAY/B,OAAO,CAAC,uBAAuB;IA8B/B,OAAO,CAAC,gBAAgB;IAyBxB,OAAO,CAAC,eAAe;CAgBxB"}

package/dist/analyzers/url.js

@@ -0,0 +1,325 @@
+const IPV4_REGEX = /^\d{1,3}(\.\d{1,3}){3}$/;
+const DOUBLE_EXT_REGEX = /\.[a-z]{2,4}\.[a-z]{2,4}$/i;
+/**
+ * URL Analyzer — heuristic URL threat detection.
+ *
+ * Ported from Surfinguard Android RiskEngine.kt with additions
+ * for RFC 1918 / cloud metadata detection (ESCALATION primitive).
+ */
+export class UrlAnalyzer {
+    actionType = 'url';
+    trackerDomains;
+    adClickParams;
+    shorteners;
+    freeHostingPlatforms;
+    riskyTlds;
+    redirectParamKeys;
+    highRiskKeywords;
+    suspiciousExtensions;
+    internalIpRanges;
+    cloudMetadataEndpoints;
+    brands;
+    constructor(urlPatterns, brandPatterns) {
+        this.trackerDomains = new Set(urlPatterns.trackerDomains);
+        this.adClickParams = new Set(urlPatterns.adClickParams);
+        this.shorteners = new Set(urlPatterns.shorteners);
+        this.freeHostingPlatforms = new Set(urlPatterns.freeHostingPlatforms);
+        this.riskyTlds = new Set(urlPatterns.riskyTlds);
+        this.redirectParamKeys = new Set(urlPatterns.redirectParamKeys);
+        this.highRiskKeywords = urlPatterns.highRiskKeywords;
+        this.suspiciousExtensions = urlPatterns.suspiciousExtensions;
+        this.internalIpRanges = urlPatterns.internalIpRanges;
+        this.cloudMetadataEndpoints = new Set(urlPatterns.cloudMetadataEndpoints);
+        this.brands = brandPatterns.brands;
+    }
+    analyze(value) {
+        const trimmedUrl = value.trim();
+        const findings = [];
+        const add = (primitive, score, reason, threatId) => {
+            findings.push({ primitive, score, reason, threatId });
+        };
+        // ── Special URIs ──────────────────────────────────────────────────
+        const lower = trimmedUrl.toLowerCase();
+        if (lower.startsWith('data:')) {
+            add('MANIPULATION', 10, 'Data URI can hide malicious content', 'U01');
+            return { actionType: 'url', findings };
+        }
+        if (lower.startsWith('javascript:')) {
+            add('MANIPULATION', 10, 'JavaScript URI detected', 'U02');
+            return { actionType: 'url', findings };
+        }
+        // ── URL Parsing ───────────────────────────────────────────────────
+        let parsed;
+        try {
+            parsed = new URL(trimmedUrl);
+        }
+        catch {
+            add('MANIPULATION', 10, 'Malformed or invalid URL', 'U03');
+            return { actionType: 'url', findings };
+        }
+        const host = parsed.hostname.toLowerCase().replace(/^www\./, '');
+        if (!host) {
+            add('MANIPULATION', 10, 'Malformed or invalid URL', 'U03');
+            return { actionType: 'url', findings };
+        }
+        // ── Known tracker bypass ──────────────────────────────────────────
+        if (this.isKnownTracker(host)) {
+            return {
+                actionType: 'url',
+                findings: [],
+                shortCircuit: { safe: true, reason: 'Known ad/analytics service' },
+            };
+        }
+        // ── HIGH SEVERITY (5-8 pts) ───────────────────────────────────────
+        // @ symbol in URL (credential theft / URL obfuscation)
+        if (trimmedUrl.includes('@') && trimmedUrl.substring(0, trimmedUrl.indexOf('@')).includes('://')) {
+            add('MANIPULATION', 6, "URL uses '@' to disguise real destination", 'U05');
+        }
+        // IP address instead of domain
+        if (IPV4_REGEX.test(host)) {
+            // Check cloud metadata endpoints first
+            if (this.cloudMetadataEndpoints.has(host)) {
+                add('ESCALATION', 9, `Targets cloud metadata endpoint (${host})`, 'U14');
+            }
+            // Check internal/RFC1918 ranges
+            else if (this.isInternalIp(host)) {
+                add('ESCALATION', 7, 'Targets internal network address', 'U13');
+            }
+            // Public IP
+            else {
+                add('MANIPULATION', 7, 'Uses IP address instead of domain name', 'U04');
+            }
+        }
+        // IPv6 address
+        if (host.startsWith('[') && host.endsWith(']')) {
+            add('MANIPULATION', 7, 'Uses IPv6 address instead of domain name', 'U04');
+        }
+        // Punycode (internationalized domain - potential homograph)
+        if (host.startsWith('xn--') || host.includes('.xn--')) {
+            add('MANIPULATION', 5, 'Internationalized domain (punycode) may hide lookalike characters', 'U06');
+        }
+        // Brand impersonation check
+        const brandCheck = this.checkBrandImpersonation(host);
+        if (brandCheck) {
+            add('MANIPULATION', brandCheck.score, brandCheck.reason, 'U07');
+        }
+        // ── MEDIUM SEVERITY (2-4 pts) ─────────────────────────────────────
+        // URL shortener
+        if (this.isShortener(host)) {
+            add('MANIPULATION', 3, 'Link shortener hides actual destination', 'U08');
+        }
+        // Free hosting platform check
+        const hostingMatch = this.findHostingPlatform(host);
+        if (hostingMatch) {
+            const subdomain = host.slice(0, -(hostingMatch.length + 1)); // remove ".platform"
+            const looksLikeBrand = this.subdomainLooksLikeBrand(subdomain);
+            if (looksLikeBrand) {
+                add('MANIPULATION', 7, `Suspicious site on free hosting (${hostingMatch}) impersonating a brand`, 'U09');
+            }
+            else {
+                add('MANIPULATION', 4, `Site hosted on free platform (${hostingMatch}) commonly used for scams`, 'U09');
+            }
+        }
+        // Deep subdomain structure
+        const subdomainCount = host.split('.').length;
+        if (subdomainCount >= 5) {
+            add('MANIPULATION', 3, `Unusually deep subdomain structure (${subdomainCount} levels)`);
+        }
+        else if (subdomainCount === 4) {
+            add('MANIPULATION', 1, 'Multiple subdomains detected');
+        }
+        // High-risk TLD
+        const tld = host.split('.').pop();
+        if (this.riskyTlds.has(tld)) {
+            add('MANIPULATION', 3, `Uses high-risk TLD (.${tld}) commonly associated with scams`, 'U10');
+        }
+        // Heavy URL encoding
+        const percentCount = countChar(trimmedUrl, '%');
+        if (percentCount >= 12) {
+            add('MANIPULATION', 3, 'Heavily obfuscated URL encoding');
+        }
+        else if (percentCount >= 8) {
+            add('MANIPULATION', 2, 'Suspicious URL encoding');
+        }
+        // Very long URL
+        if (trimmedUrl.length >= 300) {
+            add('MANIPULATION', 3, `Extremely long URL (${trimmedUrl.length} chars)`);
+        }
+        else if (trimmedUrl.length >= 200) {
+            add('MANIPULATION', 2, 'Very long URL');
+        }
+        else if (trimmedUrl.length >= 150) {
+            add('MANIPULATION', 1, 'Long URL');
+        }
+        // Nested redirects
+        const { count: nestedCount, finalHost: finalDest } = this.analyzeRedirects(parsed, host);
+        if (nestedCount >= 3) {
+            add('MANIPULATION', 4, `Multiple nested redirects detected (${nestedCount} levels)`, 'U11');
+        }
+        else if (nestedCount >= 1) {
+            add('MANIPULATION', 2, 'Contains redirect to another URL', 'U11');
+            if (finalDest && finalDest !== host) {
+                add('MANIPULATION', 1, `Redirects to different domain: ${finalDest}`);
+            }
+        }
+        // ── LOW SEVERITY (1-2 pts) ────────────────────────────────────────
+        // Sensitive keywords in path/query/host
+        const haystack = `${parsed.pathname} ${parsed.search} ${host}`.toLowerCase();
+        const keywordHits = this.highRiskKeywords.filter((kw) => haystack.includes(kw)).length;
+        if (keywordHits >= 4) {
+            add('MANIPULATION', 4, 'Multiple sensitive keywords found (login, password, verify, etc.)');
+        }
+        else if (keywordHits >= 2) {
+            add('MANIPULATION', 2, 'Contains sensitive keywords (potential phishing)');
+        }
+        else if (keywordHits === 1) {
+            add('MANIPULATION', 1, 'Contains a sensitive keyword');
+        }
+        // Domain with many hyphens
+        const hyphenCount = countChar(host, '-');
+        if (hyphenCount >= 5) {
+            add('MANIPULATION', 2, 'Domain contains excessive hyphens');
+        }
+        else if (hyphenCount >= 3) {
+            add('MANIPULATION', 1, 'Domain contains multiple hyphens');
+        }
+        // Domain with many digits
+        const digitCount = host.split('').filter((c) => c >= '0' && c <= '9').length;
+        if (digitCount >= 8) {
+            add('MANIPULATION', 2, 'Domain contains many digits');
+        }
+        else if (digitCount >= 5) {
+            add('MANIPULATION', 1, 'Domain contains several digits');
+        }
+        // Mixed protocols in URL
+        if ((lower.startsWith('http://') && lower.includes('https://')) ||
+            (lower.startsWith('https://') && lower.substring(8).includes('http://'))) {
+            add('MANIPULATION', 1, 'URL contains mixed HTTP/HTTPS protocols');
+        }
+        // Suspicious file extensions
+        if (this.suspiciousExtensions.some((ext) => lower.includes(ext))) {
+            add('DESTRUCTION', 3, 'URL references potentially dangerous file type', 'U12');
+        }
+        // Double file extensions
+        if (DOUBLE_EXT_REGEX.test(trimmedUrl)) {
+            add('DESTRUCTION', 2, 'Double file extension detected (common malware trick)', 'U12');
+        }
+        // ── AD CLICK PARAMETER ADJUSTMENT ─────────────────────────────────
+        const hasAdClickParams = [...parsed.searchParams.keys()].some((key) => this.adClickParams.has(key.toLowerCase()));
+        if (hasAdClickParams && findings.length > 0) {
+            // Apply a -3 adjustment as a negative-score finding
+            add('MANIPULATION', -3, 'Ad click detected — reduced risk (paid ad destination)');
+        }
+        return { actionType: 'url', findings };
+    }
+    // ── Helpers ───────────────────────────────────────────────────────────
+    isKnownTracker(host) {
+        if (this.trackerDomains.has(host))
+            return true;
+        const parts = host.split('.');
+        for (let i = 1; i < parts.length - 1; i++) {
+            if (this.trackerDomains.has(parts.slice(i).join('.')))
+                return true;
+        }
+        return false;
+    }
+    isInternalIp(ip) {
+        return this.internalIpRanges.some((prefix) => ip.startsWith(prefix));
+    }
+    isShortener(host) {
+        if (this.shorteners.has(host))
+            return true;
+        for (const shortener of this.shorteners) {
+            if (host.endsWith(`.${shortener}`))
+                return true;
+        }
+        return false;
+    }
+    findHostingPlatform(host) {
+        for (const platform of this.freeHostingPlatforms) {
+            if (host.endsWith(`.${platform}`) || host === platform) {
+                return platform;
+            }
+        }
+        return null;
+    }
+    subdomainLooksLikeBrand(subdomain) {
+        if (!subdomain)
+            return false;
+        const lower = subdomain.toLowerCase();
+        // Check against brand names
+        if (this.brands.some((b) => lower.includes(b.brand)))
+            return true;
+        // Check suspicious keywords in subdomain
+        const suspiciousWords = ['bank', 'pay', 'gov', 'secure', 'login', 'verify'];
+        return suspiciousWords.some((w) => lower.includes(w));
+    }
+    checkBrandImpersonation(host) {
+        const normalizedHost = host.toLowerCase();
+        for (const brand of this.brands) {
+            // First check if this is a legitimate domain for this brand
+            const isLegit = brand.legitimateDomains.some((legit) => normalizedHost === legit || normalizedHost.endsWith(`.${legit}`));
+            if (isLegit)
+                continue;
+            // Check for obvious typosquatting variants
+            if (brand.variants.some((v) => normalizedHost.includes(v))) {
+                return { score: 7, reason: `Possible impersonation of ${brand.brand} (suspicious spelling)` };
+            }
+            // Check if brand name appears on non-official domain
+            if (normalizedHost.includes(brand.brand)) {
+                if (!normalizedHost.endsWith(`.${brand.brand}.com`) &&
+                    !normalizedHost.endsWith(`.${brand.brand}.net`) &&
+                    !normalizedHost.endsWith(`.${brand.brand}.org`)) {
+                    return { score: 5, reason: `Brand name '${brand.brand}' used on non-official domain` };
+                }
+            }
+        }
+        return null;
+    }
+    analyzeRedirects(url, _originalHost) {
+        let count = 0;
+        let currentParams = url.searchParams;
+        let lastHost = null;
+        for (let i = 0; i < 5; i++) {
+            const nestedUrl = this.findRedirectUrl(currentParams);
+            if (!nestedUrl)
+                break;
+            count++;
+            try {
+                const nestedParsed = new URL(nestedUrl);
+                lastHost = nestedParsed.hostname.toLowerCase().replace(/^www\./, '');
+                currentParams = nestedParsed.searchParams;
+            }
+            catch {
+                break;
+            }
+        }
+        return { count, finalHost: lastHost };
+    }
+    findRedirectUrl(params) {
+        for (const [key, value] of params) {
+            if (this.redirectParamKeys.has(key.toLowerCase())) {
+                let decoded;
+                try {
+                    decoded = decodeURIComponent(value);
+                }
+                catch {
+                    decoded = value;
+                }
+                if (decoded.startsWith('http://') || decoded.startsWith('https://')) {
+                    return decoded;
+                }
+            }
+        }
+        return null;
+    }
+}
+function countChar(str, char) {
+    let count = 0;
+    for (let i = 0; i < str.length; i++) {
+        if (str[i] === char)
+            count++;
+    }
+    return count;
+}
+//# sourceMappingURL=url.js.map

package/dist/analyzers/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../src/analyzers/url.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAC7C,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IACb,UAAU,GAAG,KAAc,CAAC;IAEpB,cAAc,CAAc;IAC5B,aAAa,CAAc;IAC3B,UAAU,CAAc;IACxB,oBAAoB,CAAc;IAClC,SAAS,CAAc;IACvB,iBAAiB,CAAc;IAC/B,gBAAgB,CAAW;IAC3B,oBAAoB,CAAW;IAC/B,gBAAgB,CAAW;IAC3B,sBAAsB,CAAc;IACpC,MAAM,CAAe;IAEtC,YAAY,WAA+B,EAAE,aAAmC;QAC9E,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,oBAAoB,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QAChE,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,CAAC;QACrD,IAAI,CAAC,oBAAoB,GAAG,WAAW,CAAC,oBAAoB,CAAC;QAC7D,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,CAAC;QACrD,IAAI,CAAC,sBAAsB,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,MAAM,GAAG,GAAG,CAAC,SAAuC,EAAE,KAAa,EAAE,MAAc,EAAE,QAAiB,EAAE,EAAE;YACxG,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC;QAEF,qEAAqE;QACrE,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QAEvC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,qCAAqC,EAAE,KAAK,CAAC,CAAC;YACtE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC;QAED,qEAAqE;QACrE,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAEjE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,EAAE;gBACZ,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE;aACnE,CAAC;QACJ,CAAC;QAED,qEAAqE;QAErE,uDAAuD;QACvD,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,2CAA2C,EAAE,KAAK,CAAC,CAAC;QAC7E,CAAC;QAED,+BAA+B;QAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,uCAAuC;YACvC,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,oCAAoC,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3E,CAAC;YACD,gCAAgC;iBAC3B,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,kCAAkC,EAAE,KAAK,CAAC,CAAC;YAClE,CAAC;YACD,YAAY;iBACP,CAAC;gBACJ,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,wCAAwC,EAAE,KAAK,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,eAAe;QACf,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,0CAA0C,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;QAED,4DAA4D;QAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,mEAAmE,EAAE,KAAK,CAAC,CAAC;QACrG,CAAC;QAED,4BAA4B;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,UAAU,EAAE,CAAC;YACf,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;QAED,qEAAqE;QAErE,gBAAgB;QAChB,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,yCAAyC,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;QAED,8BAA8B;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB;YAClF,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;YAE/D,IAAI,cAAc,EAAE,CAAC;gBACnB,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,oCAAoC,YAAY,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAC3G,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,iCAAiC,YAAY,2BAA2B,EAAE,KAAK,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QAC9C,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,uCAAuC,cAAc,UAAU,CAAC,CAAC;QAC1F,CAAC;aAAM,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,8BAA8B,CAAC,CAAC;QACzD,CAAC;QAED,gBAAgB;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC;QACnC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,wBAAwB,GAAG,kCAAkC,EAAE,KAAK,CAAC,CAAC;QAC/F,CAAC;QAED,qBAAqB;QACrB,MAAM,YAAY,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;YACvB,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,iCAAiC,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACpD,CAAC;QAED,gBAAgB;QAChB,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC7B,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,uBAAuB,UAAU,CAAC,MAAM,SAAS,CAAC,CAAC;QAC5E,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACpC,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACpC,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;QACrC,CAAC;QAED,mBAAmB;QACnB,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzF,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,uCAAuC,WAAW,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9F,CAAC;aAAM,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,kCAAkC,EAAE,KAAK,CAAC,CAAC;YAClE,IAAI,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,kCAAkC,SAAS,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,qEAAqE;QAErE,wCAAwC;QACxC,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACvF,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,mEAAmE,CAAC,CAAC;QAC9F,CAAC;aAAM,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,kDAAkD,CAAC,CAAC;QAC7E,CAAC;aAAM,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,8BAA8B,CAAC,CAAC;QACzD,CAAC;QAED,2BAA2B;QAC3B,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,mCAAmC,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,kCAAkC,CAAC,CAAC;QAC7D,CAAC;QAED,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;QAC7E,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACpB,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,6BAA6B,CAAC,CAAC;QACxD,CAAC;aAAM,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,gCAAgC,CAAC,CAAC;QAC3D,CAAC;QAED,yBAAyB;QACzB,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC3D,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EACxE,CAAC;YACD,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,yCAAyC,CAAC,CAAC;QACpE,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,gDAAgD,EAAE,KAAK,CAAC,CAAC;QACjF,CAAC;QAED,yBAAyB;QACzB,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,uDAAuD,EAAE,KAAK,CAAC,CAAC;QACxF,CAAC;QAED,qEAAqE;QACrE,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACpE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAC1C,CAAC;QACF,IAAI,gBAAgB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,oDAAoD;YACpD,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,wDAAwD,CAAC,CAAC;QACpF,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,yEAAyE;IAEjE,cAAc,CAAC,IAAY;QACjC,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACrE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,YAAY,CAAC,EAAU;QAC7B,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,mBAAmB,CAAC,IAAY;QACtC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,uBAAuB,CAAC,SAAiB;QAC/C,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QAEtC,4BAA4B;QAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAElE,yCAAyC;QACzC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5E,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAEO,uBAAuB,CAAC,IAAY;QAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAE1C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,4DAA4D;YAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,KAAK,KAAK,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CAC5E,CAAC;YACF,IAAI,OAAO;gBAAE,SAAS;YAEtB,2CAA2C;YAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,6BAA6B,KAAK,CAAC,KAAK,wBAAwB,EAAE,CAAC;YAChG,CAAC;YAED,qDAAqD;YACrD,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzC,IACE,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,KAAK,MAAM,CAAC;oBAC/C,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,KAAK,MAAM,CAAC;oBAC/C,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,KAAK,MAAM,CAAC,EAC/C,CAAC;oBACD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,KAAK,CAAC,KAAK,+BAA+B,EAAE,CAAC;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CACtB,GAAQ,EACR,aAAqB;QAErB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC;QACrC,IAAI,QAAQ,GAAkB,IAAI,CAAC;QAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YACtD,IAAI,CAAC,SAAS;gBAAE,MAAM;YAEtB,KAAK,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;gBACxC,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACrE,aAAa,GAAG,YAAY,CAAC,YAAY,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;IAEO,eAAe,CAAC,MAAuB;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAClD,IAAI,OAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC;gBACD,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACpE,OAAO,OAAO,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,IAAY;IAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/classifier.d.ts

@@ -0,0 +1,7 @@
+import type { ActionType } from '@surfinguard/types';
+/**
+ * Classifies an action input to determine which analyzer to use.
+ * Returns the action type if an analyzer exists, otherwise null.
+ */
+export declare function classifyAction(type: ActionType): ActionType | null;
+//# sourceMappingURL=classifier.d.ts.map

package/dist/classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.d.ts","sourceRoot":"","sources":["../src/classifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAKrD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAGlE"}

package/dist/classifier.js

@@ -0,0 +1,12 @@
+/** Action types with implemented analyzers. */
+const SUPPORTED_TYPES = new Set(['url', 'command', 'text', 'file_read', 'file_write']);
+/**
+ * Classifies an action input to determine which analyzer to use.
+ * Returns the action type if an analyzer exists, otherwise null.
+ */
+export function classifyAction(type) {
+    if (SUPPORTED_TYPES.has(type))
+        return type;
+    return null;
+}
+//# sourceMappingURL=classifier.js.map

package/dist/classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.js","sourceRoot":"","sources":["../src/classifier.ts"],"names":[],"mappings":"AAEA,+CAA+C;AAC/C,MAAM,eAAe,GAAoB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAExG;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,10 @@
+import type { ActionContext } from '@surfinguard/types';
+/**
+ * Context engine stub for M0.
+ * Future milestones will use session history, agent trust, and behavioral patterns
+ * to adjust risk scores contextually.
+ */
+export declare function applyContext(_context?: ActionContext): {
+    multiplier: number;
+};
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,CAAC,EAAE,aAAa,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAE7E"}

package/dist/context.js

@@ -0,0 +1,9 @@
+/**
+ * Context engine stub for M0.
+ * Future milestones will use session history, agent trust, and behavioral patterns
+ * to adjust risk scores contextually.
+ */
+export function applyContext(_context) {
+    return { multiplier: 1.0 };
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAAwB;IACnD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC"}

package/dist/engine.d.ts

@@ -0,0 +1,49 @@
+import type { ActionInput, ActionContext, CheckResult } from '@surfinguard/types';
+export interface CoreEngineOptions {
+    /** Custom URL patterns (overrides default) */
+    urlPatternsPath?: string;
+}
+/**
+ * Main entry point for the Surfinguard AI Security SDK.
+ *
+ * Usage:
+ * ```ts
+ * const engine = new CoreEngine();
+ * const result = engine.check({ type: 'url', value: 'https://example.com' });
+ * if (!result.allow) { // block the action }
+ * ```
+ */
+export declare class CoreEngine {
+    static readonly VERSION = "0.3.0";
+    private readonly urlAnalyzer;
+    private readonly commandAnalyzer;
+    private readonly textAnalyzer;
+    private readonly fileReadAnalyzer;
+    private readonly fileWriteAnalyzer;
+    constructor();
+    /**
+     * Analyze a single action and return a verdict.
+     */
+    check(input: ActionInput, _context?: ActionContext): CheckResult;
+    /**
+     * Convenience method: analyze a URL string directly.
+     */
+    checkUrl(url: string): CheckResult;
+    /**
+     * Convenience method: analyze a shell command string directly.
+     */
+    checkCommand(command: string): CheckResult;
+    /**
+     * Convenience method: analyze text for prompt injection.
+     */
+    checkText(text: string): CheckResult;
+    /**
+     * Convenience method: analyze a file read operation.
+     */
+    checkFileRead(path: string): CheckResult;
+    /**
+     * Convenience method: analyze a file write operation with optional content.
+     */
+    checkFileWrite(path: string, content?: string): CheckResult;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAUlF,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,qBAAa,UAAU;IACrB,MAAM,CAAC,QAAQ,CAAC,OAAO,WAAW;IAElC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IACpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;;IAoBtD;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,aAAa,GAAG,WAAW;IAoDhE;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW;IAIlC;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW;IAI1C;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW;IAIpC;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW;IAIxC;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW;CAG5D"}

package/dist/engine.js

@@ -0,0 +1,122 @@
+import { UrlAnalyzer } from './analyzers/url.js';
+import { CommandAnalyzer } from './analyzers/command.js';
+import { TextAnalyzer } from './analyzers/text.js';
+import { FileReadAnalyzer } from './analyzers/file-read.js';
+import { FileWriteAnalyzer } from './analyzers/file-write.js';
+import { classifyAction } from './classifier.js';
+import { buildVerdict } from './verdict.js';
+import { loadUrlPatterns, loadBrandPatterns, loadCommandPatterns, loadTextPatterns, loadFileReadPatterns, loadFileWritePatterns } from './patterns.js';
+/**
+ * Main entry point for the Surfinguard AI Security SDK.
+ *
+ * Usage:
+ * ```ts
+ * const engine = new CoreEngine();
+ * const result = engine.check({ type: 'url', value: 'https://example.com' });
+ * if (!result.allow) { // block the action }
+ * ```
+ */
+export class CoreEngine {
+    static VERSION = '0.3.0';
+    urlAnalyzer;
+    commandAnalyzer;
+    textAnalyzer;
+    fileReadAnalyzer;
+    fileWriteAnalyzer;
+    constructor() {
+        const urlPatterns = loadUrlPatterns();
+        const brandPatterns = loadBrandPatterns();
+        this.urlAnalyzer = new UrlAnalyzer(urlPatterns, brandPatterns);
+        const commandPatterns = loadCommandPatterns();
+        this.commandAnalyzer = new CommandAnalyzer(commandPatterns);
+        const textPatterns = loadTextPatterns();
+        this.textAnalyzer = new TextAnalyzer(textPatterns);
+        const fileReadPatterns = loadFileReadPatterns();
+        this.fileReadAnalyzer = new FileReadAnalyzer(fileReadPatterns);
+        const fileWritePatterns = loadFileWritePatterns();
+        this.fileWriteAnalyzer = new FileWriteAnalyzer(fileWritePatterns);
+    }
+    /**
+     * Analyze a single action and return a verdict.
+     */
+    check(input, _context) {
+        const startTime = performance.now();
+        const classified = classifyAction(input.type);
+        if (!classified) {
+            return {
+                allow: true,
+                score: 0,
+                level: 'SAFE',
+                primitive: null,
+                primitiveScores: [],
+                reasons: [`Action type '${input.type}' not yet supported`],
+                latencyMs: Math.round((performance.now() - startTime) * 100) / 100,
+            };
+        }
+        switch (classified) {
+            case 'url': {
+                const result = this.urlAnalyzer.analyze(input.value);
+                return buildVerdict(result, startTime);
+            }
+            case 'command': {
+                const result = this.commandAnalyzer.analyze(input.value);
+                return buildVerdict(result, startTime);
+            }
+            case 'text': {
+                const result = this.textAnalyzer.analyze(input.value);
+                return buildVerdict(result, startTime);
+            }
+            case 'file_read': {
+                const result = this.fileReadAnalyzer.analyze(input.value);
+                return buildVerdict(result, startTime);
+            }
+            case 'file_write': {
+                const content = input.metadata?.content;
+                const result = this.fileWriteAnalyzer.analyzeWithContent(input.value, content);
+                return buildVerdict(result, startTime);
+            }
+            default: {
+                return {
+                    allow: true,
+                    score: 0,
+                    level: 'SAFE',
+                    primitive: null,
+                    primitiveScores: [],
+                    reasons: [`Action type '${classified}' not yet implemented`],
+                    latencyMs: Math.round((performance.now() - startTime) * 100) / 100,
+                };
+            }
+        }
+    }
+    /**
+     * Convenience method: analyze a URL string directly.
+     */
+    checkUrl(url) {
+        return this.check({ type: 'url', value: url });
+    }
+    /**
+     * Convenience method: analyze a shell command string directly.
+     */
+    checkCommand(command) {
+        return this.check({ type: 'command', value: command });
+    }
+    /**
+     * Convenience method: analyze text for prompt injection.
+     */
+    checkText(text) {
+        return this.check({ type: 'text', value: text });
+    }
+    /**
+     * Convenience method: analyze a file read operation.
+     */
+    checkFileRead(path) {
+        return this.check({ type: 'file_read', value: path });
+    }
+    /**
+     * Convenience method: analyze a file write operation with optional content.
+     */
+    checkFileWrite(path, content) {
+        return this.check({ type: 'file_write', value: path, metadata: content ? { content } : undefined });
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAOvJ;;;;;;;;;GASG;AACH,MAAM,OAAO,UAAU;IACrB,MAAM,CAAU,OAAO,GAAG,OAAO,CAAC;IAEjB,WAAW,CAAc;IACzB,eAAe,CAAkB;IACjC,YAAY,CAAe;IAC3B,gBAAgB,CAAmB;IACnC,iBAAiB,CAAoB;IAEtD;QACE,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAE/D,MAAM,eAAe,GAAG,mBAAmB,EAAE,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,eAAe,CAAC,CAAC;QAE5D,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC;QAEnD,MAAM,gBAAgB,GAAG,oBAAoB,EAAE,CAAC;QAChD,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAE/D,MAAM,iBAAiB,GAAG,qBAAqB,EAAE,CAAC;QAClD,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAkB,EAAE,QAAwB;QAChD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE9C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,IAAI;gBACf,eAAe,EAAE,EAAE;gBACnB,OAAO,EAAE,CAAC,gBAAgB,KAAK,CAAC,IAAI,qBAAqB,CAAC;gBAC1D,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG;aACnE,CAAC;QACJ,CAAC;QAED,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrD,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzD,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtD,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1D,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,OAA6B,CAAC;gBAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC/E,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,CAAC;oBACR,KAAK,EAAE,MAAM;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,EAAE;oBACnB,OAAO,EAAE,CAAC,gBAAgB,UAAU,uBAAuB,CAAC;oBAC5D,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG;iBACnE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,GAAW;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,OAAe;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,IAAY,EAAE,OAAgB;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACtG,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { CoreEngine } from './engine.js';
+export { UrlAnalyzer } from './analyzers/url.js';
+export { CommandAnalyzer } from './analyzers/command.js';
+export { TextAnalyzer } from './analyzers/text.js';
+export { FileReadAnalyzer } from './analyzers/file-read.js';
+export { FileWriteAnalyzer } from './analyzers/file-write.js';
+export { scorePrimitives, scoreComposite } from './scorer.js';
+export { buildVerdict } from './verdict.js';
+export { loadUrlPatterns, loadBrandPatterns, loadCommandPatterns, loadTextPatterns, loadFileReadPatterns, loadFileWritePatterns } from './patterns.js';
+export type { Analyzer, AnalyzerFinding, AnalyzerResult } from './analyzers/base.js';
+export type { CompositeResult } from './scorer.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACvJ,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrF,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+export { CoreEngine } from './engine.js';
+export { UrlAnalyzer } from './analyzers/url.js';
+export { CommandAnalyzer } from './analyzers/command.js';
+export { TextAnalyzer } from './analyzers/text.js';
+export { FileReadAnalyzer } from './analyzers/file-read.js';
+export { FileWriteAnalyzer } from './analyzers/file-write.js';
+export { scorePrimitives, scoreComposite } from './scorer.js';
+export { buildVerdict } from './verdict.js';
+export { loadUrlPatterns, loadBrandPatterns, loadCommandPatterns, loadTextPatterns, loadFileReadPatterns, loadFileWritePatterns } from './patterns.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC"}

package/dist/patterns.d.ts

@@ -0,0 +1,8 @@
+import type { UrlPatternDatabase, BrandPatternDatabase, CommandPatternDatabase, TextPatternDatabase, FileReadPatternDatabase, FileWritePatternDatabase } from '@surfinguard/types';
+export declare function loadUrlPatterns(): UrlPatternDatabase;
+export declare function loadBrandPatterns(): BrandPatternDatabase;
+export declare function loadCommandPatterns(): CommandPatternDatabase;
+export declare function loadTextPatterns(): TextPatternDatabase;
+export declare function loadFileReadPatterns(): FileReadPatternDatabase;
+export declare function loadFileWritePatterns(): FileWritePatternDatabase;
+//# sourceMappingURL=patterns.d.ts.map

package/dist/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAmBnL,wBAAgB,eAAe,IAAI,kBAAkB,CAMpD;AAED,wBAAgB,iBAAiB,IAAI,oBAAoB,CAMxD;AAED,wBAAgB,mBAAmB,IAAI,sBAAsB,CAM5D;AAED,wBAAgB,gBAAgB,IAAI,mBAAmB,CAMtD;AAED,wBAAgB,oBAAoB,IAAI,uBAAuB,CAM9D;AAED,wBAAgB,qBAAqB,IAAI,wBAAwB,CAMhE"}