@vorionsys/atsf-core 0.2.2 → 0.2.3

package/dist/layers/implementations/L2-charset-sanitizer.js

@@ -0,0 +1,230 @@
+/**
+ * L2 — Character Set Sanitizer
+ *
+ * Detects and strips dangerous Unicode sequences, invisible control characters,
+ * homoglyph attacks, bi-directional override characters, and other encoding-level
+ * prompt injection vectors.
+ *
+ * Tier: input_validation
+ * Primary threat: prompt_injection
+ *
+ * @packageDocumentation
+ */
+import { BaseSecurityLayer, createLayerConfig } from "../index.js";
+/**
+ * Unicode categories of dangerous characters
+ */
+const DANGEROUS_PATTERNS = [
+    {
+        name: "bidi_override",
+        // Bi-directional override characters (used in trojan source attacks)
+        pattern: /(?:\u200E|\u200F|\u202A|\u202B|\u202C|\u202D|\u202E|\u2066|\u2067|\u2068|\u2069)/g,
+        severity: "critical",
+        description: "Bi-directional text override characters can disguise malicious content",
+    },
+    {
+        name: "zero_width",
+        // Zero-width characters (invisible text injection)
+        pattern: /(?:\u200B|\u200C|\u200D|\uFEFF)/g,
+        severity: "high",
+        description: "Zero-width characters can hide content from human reviewers",
+    },
+    {
+        name: "control_chars",
+        // C0/C1 control characters except common whitespace (tab, newline, carriage return)
+        // eslint-disable-next-line no-control-regex
+        pattern: /[\x00-\x08\x0B\x0C\x0E-\x1F\x7F\x80-\x9F]/g,
+        severity: "high",
+        description: "Control characters can corrupt parsing or inject escape sequences",
+    },
+    {
+        name: "tag_chars",
+        // Unicode tag characters (U+E0001-U+E007F) — used to hide instructions
+        pattern: /\uDB40[\uDC01-\uDC7F]/g,
+        severity: "high",
+        description: "Unicode tag characters can embed hidden instructions",
+    },
+    {
+        name: "interlinear_annotation",
+        // Interlinear annotation characters
+        pattern: /[\uFFF9\uFFFA\uFFFB]/g,
+        severity: "medium",
+        description: "Annotation characters can inject hidden metadata",
+    },
+    {
+        name: "replacement_char",
+        // Object replacement character (can mask embedded objects)
+        pattern: /\uFFFC/g,
+        severity: "medium",
+        description: "Object replacement character may mask embedded content",
+    },
+    {
+        name: "variation_selector_abuse",
+        // Excessive variation selectors (emoji/glyph variant abuse)
+        pattern: /[\uFE00-\uFE0F]{3,}/g,
+        severity: "low",
+        description: "Excessive variation selectors suggest encoding manipulation",
+    },
+];
+/**
+ * Common homoglyph mappings (confusable characters → ASCII equivalent)
+ */
+const HOMOGLYPH_MAP = {
+    "\u0410": "A", // Cyrillic А → Latin A
+    "\u0412": "B", // Cyrillic В → Latin B
+    "\u0421": "C", // Cyrillic С → Latin C
+    "\u0415": "E", // Cyrillic Е → Latin E
+    "\u041D": "H", // Cyrillic Н → Latin H
+    "\u041A": "K", // Cyrillic К → Latin K
+    "\u041C": "M", // Cyrillic М → Latin M
+    "\u041E": "O", // Cyrillic О → Latin O
+    "\u0420": "P", // Cyrillic Р → Latin P
+    "\u0422": "T", // Cyrillic Т → Latin T
+    "\u0425": "X", // Cyrillic Х → Latin X
+    "\u0430": "a", // Cyrillic а → Latin a
+    "\u0435": "e", // Cyrillic е → Latin e
+    "\u043E": "o", // Cyrillic о → Latin o
+    "\u0440": "p", // Cyrillic р → Latin p
+    "\u0441": "c", // Cyrillic с → Latin c
+    "\u0443": "y", // Cyrillic у → Latin y
+    "\u0445": "x", // Cyrillic х → Latin x
+    "\u0456": "i", // Cyrillic і → Latin i
+    "\u0458": "j", // Cyrillic ј → Latin j
+    "\u0455": "s", // Cyrillic ѕ → Latin s
+    "\u0501": "d", // Cyrillic ԁ → Latin d
+};
+/**
+ * L2 Character Set Sanitizer
+ *
+ * Strips dangerous characters and detects homoglyph attacks.
+ */
+export class L2CharsetSanitizer extends BaseSecurityLayer {
+    constructor() {
+        super(createLayerConfig(2, "Character Set Sanitizer", {
+            description: "Detects and sanitizes dangerous Unicode sequences, invisible characters, and homoglyph attacks",
+            tier: "input_validation",
+            primaryThreat: "prompt_injection",
+            secondaryThreats: ["deceptive_output", "audit_evasion"],
+            failMode: "block",
+            required: true,
+            timeoutMs: 300,
+            parallelizable: true,
+            dependencies: [],
+        }));
+    }
+    async execute(input) {
+        const startedAt = new Date().toISOString();
+        const t0 = performance.now();
+        const findings = [];
+        const modifications = [];
+        // Walk all string values in the payload
+        this.scanObject(input.payload, "", findings, modifications);
+        const timing = this.buildTiming(startedAt, t0);
+        const hasCritical = findings.some((f) => f.severity === "critical");
+        const hasHigh = findings.some((f) => f.severity === "high");
+        const passed = !hasCritical && !hasHigh;
+        if (passed) {
+            return this.createSuccessResult("allow", 0.9, findings, modifications, timing);
+        }
+        return this.createFailureResult(hasCritical ? "deny" : "escalate", 0.85, findings, timing);
+    }
+    scanObject(obj, path, findings, modifications) {
+        if (obj === null || obj === undefined)
+            return;
+        if (typeof obj === "string") {
+            this.scanString(obj, path, findings, modifications);
+            return;
+        }
+        if (Array.isArray(obj)) {
+            for (let i = 0; i < obj.length; i++) {
+                this.scanObject(obj[i], `${path}[${i}]`, findings, modifications);
+            }
+            return;
+        }
+        if (typeof obj === "object") {
+            for (const [key, val] of Object.entries(obj)) {
+                // Also scan keys for homoglyphs
+                this.scanString(key, `${path ? path + "." : ""}(key:${key})`, findings, modifications);
+                this.scanObject(val, path ? `${path}.${key}` : key, findings, modifications);
+            }
+        }
+    }
+    scanString(value, path, findings, modifications) {
+        // 1. Check for dangerous character patterns
+        for (const { name, pattern, severity, description } of DANGEROUS_PATTERNS) {
+            // Reset regex state
+            pattern.lastIndex = 0;
+            const matches = value.match(pattern);
+            if (matches && matches.length > 0) {
+                findings.push({
+                    type: "threat_detected",
+                    severity,
+                    code: `L2_${name.toUpperCase()}`,
+                    description: `${description} at '${path}'`,
+                    evidence: [
+                        `Found ${matches.length} instance(s)`,
+                        `Code points: ${matches
+                            .slice(0, 5)
+                            .map((c) => `U+${c.charCodeAt(0).toString(16).toUpperCase().padStart(4, "0")}`)
+                            .join(", ")}`,
+                    ],
+                    remediation: `Remove ${name} characters from the input`,
+                });
+                modifications.push({
+                    target: path,
+                    type: "sanitize",
+                    originalValue: `[${matches.length} ${name} chars]`,
+                    newValue: "[stripped]",
+                    reason: description,
+                });
+            }
+        }
+        // 2. Check for mixed-script homoglyph attacks
+        const homoglyphs = this.detectHomoglyphs(value);
+        if (homoglyphs.length > 0) {
+            findings.push({
+                type: "threat_detected",
+                severity: "high",
+                code: "L2_HOMOGLYPH_ATTACK",
+                description: `Mixed-script homoglyph characters detected at '${path}'`,
+                evidence: homoglyphs
+                    .slice(0, 10)
+                    .map((h) => `'${h.char}' (U+${h.codePoint}) looks like '${h.looksLike}'`),
+                remediation: "Use consistent character scripts (do not mix Cyrillic with Latin)",
+            });
+        }
+    }
+    detectHomoglyphs(value) {
+        const results = [];
+        // Only flag if the string contains a mix of Latin and non-Latin scripts
+        const hasLatin = /[a-zA-Z]/.test(value);
+        if (!hasLatin)
+            return results;
+        for (const char of value) {
+            const mapped = HOMOGLYPH_MAP[char];
+            if (mapped) {
+                results.push({
+                    char,
+                    codePoint: char
+                        .charCodeAt(0)
+                        .toString(16)
+                        .toUpperCase()
+                        .padStart(4, "0"),
+                    looksLike: mapped,
+                });
+            }
+        }
+        return results;
+    }
+    buildTiming(startedAt, t0) {
+        const durationMs = performance.now() - t0;
+        return {
+            startedAt,
+            completedAt: new Date().toISOString(),
+            durationMs,
+            waitTimeMs: 0,
+            processingTimeMs: durationMs,
+        };
+    }
+}
+//# sourceMappingURL=L2-charset-sanitizer.js.map

package/dist/layers/implementations/L2-charset-sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"L2-charset-sanitizer.js","sourceRoot":"","sources":["../../../src/layers/implementations/L2-charset-sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AASnE;;GAEG;AACH,MAAM,kBAAkB,GAKnB;IACH;QACE,IAAI,EAAE,eAAe;QACrB,qEAAqE;QACrE,OAAO,EACL,mFAAmF;QACrF,QAAQ,EAAE,UAAU;QACpB,WAAW,EACT,wEAAwE;KAC3E;IACD;QACE,IAAI,EAAE,YAAY;QAClB,mDAAmD;QACnD,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,6DAA6D;KAC3E;IACD;QACE,IAAI,EAAE,eAAe;QACrB,oFAAoF;QACpF,4CAA4C;QAC5C,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,MAAM;QAChB,WAAW,EACT,mEAAmE;KACtE;IACD;QACE,IAAI,EAAE,WAAW;QACjB,uEAAuE;QACvE,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,sDAAsD;KACpE;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,oCAAoC;QACpC,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,kDAAkD;KAChE;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,2DAA2D;QAC3D,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,wDAAwD;KACtE;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,4DAA4D;QAC5D,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,6DAA6D;KAC3E;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,aAAa,GAA2B;IAC5C,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;IACtC,QAAQ,EAAE,GAAG,EAAE,uBAAuB;CACvC,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,kBAAmB,SAAQ,iBAAiB;IACvD;QACE,KAAK,CACH,iBAAiB,CAAC,CAAC,EAAE,yBAAyB,EAAE;YAC9C,WAAW,EACT,gGAAgG;YAClG,IAAI,EAAE,kBAAkB;YACxB,aAAa,EAAE,kBAAkB;YACjC,gBAAgB,EAAE,CAAC,kBAAkB,EAAE,eAAe,CAAC;YACvD,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,EAAE;SACjB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAiB;QAC7B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,MAAM,aAAa,GAAwB,EAAE,CAAC;QAE9C,wCAAwC;QACxC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC;QAExC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,mBAAmB,CAC7B,OAAO,EACP,GAAG,EACH,QAAQ,EACR,aAAa,EACb,MAAM,CACP,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAC7B,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EACjC,IAAI,EACJ,QAAQ,EACR,MAAM,CACP,CAAC;IACJ,CAAC;IAEO,UAAU,CAChB,GAAY,EACZ,IAAY,EACZ,QAAwB,EACxB,aAAkC;QAElC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO;QAE9C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;YACpE,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;gBACxE,gCAAgC;gBAChC,IAAI,CAAC,UAAU,CACb,GAAG,EACH,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,GAAG,EACvC,QAAQ,EACR,aAAa,CACd,CAAC;gBACF,IAAI,CAAC,UAAU,CACb,GAAG,EACH,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EAC7B,QAAQ,EACR,aAAa,CACd,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,UAAU,CAChB,KAAa,EACb,IAAY,EACZ,QAAwB,EACxB,aAAkC;QAElC,4CAA4C;QAC5C,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,kBAAkB,EAAE,CAAC;YAC1E,oBAAoB;YACpB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,iBAAiB;oBACvB,QAAQ;oBACR,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE;oBAChC,WAAW,EAAE,GAAG,WAAW,QAAQ,IAAI,GAAG;oBAC1C,QAAQ,EAAE;wBACR,SAAS,OAAO,CAAC,MAAM,cAAc;wBACrC,gBAAgB,OAAO;6BACpB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;6BACX,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACrE;6BACA,IAAI,CAAC,IAAI,CAAC,EAAE;qBAChB;oBACD,WAAW,EAAE,UAAU,IAAI,4BAA4B;iBACxD,CAAC,CAAC;gBAEH,aAAa,CAAC,IAAI,CAAC;oBACjB,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,UAAU;oBAChB,aAAa,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,SAAS;oBAClD,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,WAAW;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE,kDAAkD,IAAI,GAAG;gBACtE,QAAQ,EAAE,UAAU;qBACjB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;qBACZ,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,SAAS,iBAAiB,CAAC,CAAC,SAAS,GAAG,CACpE;gBACH,WAAW,EACT,mEAAmE;aACtE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,gBAAgB,CACtB,KAAa;QAEb,MAAM,OAAO,GAIR,EAAE,CAAC;QAER,wEAAwE;QACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC;QAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,SAAS,EAAE,IAAI;yBACZ,UAAU,CAAC,CAAC,CAAC;yBACb,QAAQ,CAAC,EAAE,CAAC;yBACZ,WAAW,EAAE;yBACb,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;oBACnB,SAAS,EAAE,MAAM;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,WAAW,CAAC,SAAiB,EAAE,EAAU;QAC/C,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QAC1C,OAAO;YACL,SAAS;YACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,UAAU;YACV,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,UAAU;SAC7B,CAAC;IACJ,CAAC;CACF"}

package/dist/layers/implementations/L3-schema-conformance.d.ts

@@ -0,0 +1,47 @@
+/**
+ * L3 — Schema Conformance Validator
+ *
+ * Validates that payload content conforms to expected action schemas.
+ * Rejects payloads with unknown actions, invalid field types, and
+ * structurally non-conforming data.
+ *
+ * Tier: input_validation
+ * Primary threat: unauthorized_action
+ *
+ * @packageDocumentation
+ */
+import { BaseSecurityLayer } from "../index.js";
+import type { LayerInput, LayerExecutionResult } from "../types.js";
+/**
+ * Schema definition for a known action
+ */
+export interface ActionSchema {
+    /** Action name */
+    action: string;
+    /** Required fields with their expected types */
+    required: Record<string, FieldType>;
+    /** Optional fields with their expected types */
+    optional?: Record<string, FieldType>;
+    /** Maximum number of extra fields allowed beyond defined ones */
+    maxExtraFields?: number;
+}
+type FieldType = "string" | "number" | "boolean" | "object" | "array" | "string[]" | "number[]";
+/**
+ * L3 Schema Conformance Validator
+ *
+ * Validates payloads against known action schemas.
+ */
+export declare class L3SchemaConformance extends BaseSecurityLayer {
+    private schemas;
+    constructor(additionalSchemas?: ActionSchema[]);
+    /**
+     * Register an additional action schema at runtime
+     */
+    registerSchema(schema: ActionSchema): void;
+    execute(input: LayerInput): Promise<LayerExecutionResult>;
+    private checkType;
+    private typeError;
+    private buildTiming;
+}
+export {};
+//# sourceMappingURL=L3-schema-conformance.d.ts.map

package/dist/layers/implementations/L3-schema-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"L3-schema-conformance.d.ts","sourceRoot":"","sources":["../../../src/layers/implementations/L3-schema-conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAqB,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EACV,UAAU,EACV,oBAAoB,EAGrB,MAAM,aAAa,CAAC;AAErB;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,kBAAkB;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACrC,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,KAAK,SAAS,GACV,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,OAAO,GACP,UAAU,GACV,UAAU,CAAC;AAiDf;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,iBAAiB;IACxD,OAAO,CAAC,OAAO,CAA4B;gBAE/B,iBAAiB,CAAC,EAAE,YAAY,EAAE;IA2B9C;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI;IAIpC,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAmI/D,OAAO,CAAC,SAAS;IA+DjB,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,WAAW;CAUpB"}

package/dist/layers/implementations/L3-schema-conformance.js

@@ -0,0 +1,267 @@
+/**
+ * L3 — Schema Conformance Validator
+ *
+ * Validates that payload content conforms to expected action schemas.
+ * Rejects payloads with unknown actions, invalid field types, and
+ * structurally non-conforming data.
+ *
+ * Tier: input_validation
+ * Primary threat: unauthorized_action
+ *
+ * @packageDocumentation
+ */
+import { BaseSecurityLayer, createLayerConfig } from "../index.js";
+/**
+ * Built-in action schemas for the ATSF governance pipeline
+ */
+const KNOWN_ACTION_SCHEMAS = [
+    {
+        action: "query",
+        required: { content: "string" },
+        optional: {
+            context: "object",
+            model: "string",
+            temperature: "number",
+            maxTokens: "number",
+        },
+        maxExtraFields: 10,
+    },
+    {
+        action: "execute",
+        required: { content: "string", target: "string" },
+        optional: { args: "object", timeout: "number", dryRun: "boolean" },
+        maxExtraFields: 5,
+    },
+    {
+        action: "read",
+        required: { content: "string", resource: "string" },
+        optional: { format: "string", limit: "number", offset: "number" },
+        maxExtraFields: 5,
+    },
+    {
+        action: "write",
+        required: { content: "string", resource: "string", data: "object" },
+        optional: { overwrite: "boolean", format: "string" },
+        maxExtraFields: 5,
+    },
+    {
+        action: "delete",
+        required: { content: "string", resource: "string" },
+        optional: { recursive: "boolean", force: "boolean" },
+        maxExtraFields: 3,
+    },
+    {
+        action: "communicate",
+        required: { content: "string", recipient: "string" },
+        optional: { channel: "string", priority: "string", metadata: "object" },
+        maxExtraFields: 5,
+    },
+];
+/**
+ * L3 Schema Conformance Validator
+ *
+ * Validates payloads against known action schemas.
+ */
+export class L3SchemaConformance extends BaseSecurityLayer {
+    schemas;
+    constructor(additionalSchemas) {
+        super(createLayerConfig(3, "Schema Conformance", {
+            description: "Validates payload action and fields against known schemas",
+            tier: "input_validation",
+            primaryThreat: "unauthorized_action",
+            secondaryThreats: ["capability_abuse", "prompt_injection"],
+            failMode: "block",
+            required: true,
+            timeoutMs: 200,
+            parallelizable: true,
+            dependencies: [0], // Depends on L0 passing first
+        }));
+        this.schemas = new Map();
+        for (const schema of KNOWN_ACTION_SCHEMAS) {
+            this.schemas.set(schema.action, schema);
+        }
+        if (additionalSchemas) {
+            for (const schema of additionalSchemas) {
+                this.schemas.set(schema.action, schema);
+            }
+        }
+    }
+    /**
+     * Register an additional action schema at runtime
+     */
+    registerSchema(schema) {
+        this.schemas.set(schema.action, schema);
+    }
+    async execute(input) {
+        const startedAt = new Date().toISOString();
+        const t0 = performance.now();
+        const findings = [];
+        const payload = input.payload;
+        // 1. Check that action field exists
+        const action = payload["action"];
+        if (action === undefined || action === null) {
+            findings.push({
+                type: "threat_detected",
+                severity: "high",
+                code: "L3_MISSING_ACTION",
+                description: 'Payload has no "action" field — cannot determine request type',
+                evidence: ["payload.action is undefined"],
+                remediation: 'Include an "action" field in the payload (e.g., "query", "execute", "read")',
+            });
+            const timing = this.buildTiming(startedAt, t0);
+            return this.createFailureResult("deny", 0.9, findings, timing);
+        }
+        if (typeof action !== "string") {
+            findings.push({
+                type: "threat_detected",
+                severity: "high",
+                code: "L3_INVALID_ACTION_TYPE",
+                description: `Action field must be a string, got ${typeof action}`,
+                evidence: [`typeof action = ${typeof action}`],
+                remediation: "Provide action as a string value",
+            });
+            const timing = this.buildTiming(startedAt, t0);
+            return this.createFailureResult("deny", 0.9, findings, timing);
+        }
+        // 2. Look up schema for this action
+        const schema = this.schemas.get(action);
+        if (!schema) {
+            findings.push({
+                type: "threat_detected",
+                severity: "medium",
+                code: "L3_UNKNOWN_ACTION",
+                description: `Unknown action '${action}' — not in registered schemas`,
+                evidence: [
+                    `action=${action}`,
+                    `known actions: ${Array.from(this.schemas.keys()).join(", ")}`,
+                ],
+                remediation: `Use a known action: ${Array.from(this.schemas.keys()).join(", ")}`,
+            });
+            const timing = this.buildTiming(startedAt, t0);
+            // Unknown actions are escalated, not denied — allows extension
+            return this.createFailureResult("escalate", 0.7, findings, timing);
+        }
+        // 3. Check required fields
+        for (const [field, expectedType] of Object.entries(schema.required)) {
+            const value = payload[field];
+            if (value === undefined || value === null) {
+                findings.push({
+                    type: "threat_detected",
+                    severity: "high",
+                    code: "L3_MISSING_REQUIRED_FIELD",
+                    description: `Required field '${field}' missing for action '${action}'`,
+                    evidence: [`field=${field}, action=${action}`],
+                    remediation: `Include required field '${field}' (type: ${expectedType})`,
+                });
+                continue;
+            }
+            // Type check
+            const typeError = this.checkType(value, expectedType, field);
+            if (typeError) {
+                findings.push(typeError);
+            }
+        }
+        // 4. Check optional fields (if present, must match type)
+        if (schema.optional) {
+            for (const [field, expectedType] of Object.entries(schema.optional)) {
+                const value = payload[field];
+                if (value === undefined || value === null)
+                    continue;
+                const typeError = this.checkType(value, expectedType, field);
+                if (typeError) {
+                    findings.push(typeError);
+                }
+            }
+        }
+        // 5. Check for unexpected extra fields
+        const allKnownFields = new Set([
+            "action",
+            ...Object.keys(schema.required),
+            ...Object.keys(schema.optional ?? {}),
+        ]);
+        const extraFields = Object.keys(payload).filter((k) => !allKnownFields.has(k));
+        const maxExtra = schema.maxExtraFields ?? 10;
+        if (extraFields.length > maxExtra) {
+            findings.push({
+                type: "warning",
+                severity: "medium",
+                code: "L3_EXCESS_EXTRA_FIELDS",
+                description: `${extraFields.length} extra fields exceed maximum ${maxExtra} for action '${action}'`,
+                evidence: [
+                    `extra fields: ${extraFields.slice(0, 10).join(", ")}${extraFields.length > 10 ? "..." : ""}`,
+                ],
+                remediation: `Reduce extra fields to at most ${maxExtra}`,
+            });
+        }
+        const timing = this.buildTiming(startedAt, t0);
+        const hasHigh = findings.some((f) => f.severity === "high" || f.severity === "critical");
+        const passed = !hasHigh;
+        if (passed) {
+            return this.createSuccessResult("allow", 0.9, findings, [], timing);
+        }
+        return this.createFailureResult("deny", 0.85, findings, timing);
+    }
+    checkType(value, expectedType, field) {
+        switch (expectedType) {
+            case "string":
+                if (typeof value !== "string") {
+                    return this.typeError(field, expectedType, typeof value);
+                }
+                break;
+            case "number":
+                if (typeof value !== "number" || !Number.isFinite(value)) {
+                    return this.typeError(field, expectedType, typeof value);
+                }
+                break;
+            case "boolean":
+                if (typeof value !== "boolean") {
+                    return this.typeError(field, expectedType, typeof value);
+                }
+                break;
+            case "object":
+                if (typeof value !== "object" || Array.isArray(value)) {
+                    return this.typeError(field, expectedType, Array.isArray(value) ? "array" : typeof value);
+                }
+                break;
+            case "array":
+                if (!Array.isArray(value)) {
+                    return this.typeError(field, expectedType, typeof value);
+                }
+                break;
+            case "string[]":
+                if (!Array.isArray(value) ||
+                    !value.every((v) => typeof v === "string")) {
+                    return this.typeError(field, expectedType, Array.isArray(value) ? "mixed array" : typeof value);
+                }
+                break;
+            case "number[]":
+                if (!Array.isArray(value) ||
+                    !value.every((v) => typeof v === "number")) {
+                    return this.typeError(field, expectedType, Array.isArray(value) ? "mixed array" : typeof value);
+                }
+                break;
+        }
+        return null;
+    }
+    typeError(field, expected, actual) {
+        return {
+            type: "threat_detected",
+            severity: "high",
+            code: "L3_TYPE_MISMATCH",
+            description: `Field '${field}' expected type '${expected}', got '${actual}'`,
+            evidence: [`field=${field}, expected=${expected}, actual=${actual}`],
+            remediation: `Provide '${field}' as type '${expected}'`,
+        };
+    }
+    buildTiming(startedAt, t0) {
+        const durationMs = performance.now() - t0;
+        return {
+            startedAt,
+            completedAt: new Date().toISOString(),
+            durationMs,
+            waitTimeMs: 0,
+            processingTimeMs: durationMs,
+        };
+    }
+}
+//# sourceMappingURL=L3-schema-conformance.js.map

package/dist/layers/implementations/L3-schema-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"L3-schema-conformance.js","sourceRoot":"","sources":["../../../src/layers/implementations/L3-schema-conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AA+BnE;;GAEG;AACH,MAAM,oBAAoB,GAAmB;IAC3C;QACE,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;QAC/B,QAAQ,EAAE;YACR,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,QAAQ;YACrB,SAAS,EAAE,QAAQ;SACpB;QACD,cAAc,EAAE,EAAE;KACnB;IACD;QACE,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;QACjD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE;QAClE,cAAc,EAAE,CAAC;KAClB;IACD;QACE,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACnD,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;QACjE,cAAc,EAAE,CAAC;KAClB;IACD;QACE,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnE,QAAQ,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE;QACpD,cAAc,EAAE,CAAC;KAClB;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACnD,QAAQ,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;QACpD,cAAc,EAAE,CAAC;KAClB;IACD;QACE,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;QACpD,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACvE,cAAc,EAAE,CAAC;KAClB;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,mBAAoB,SAAQ,iBAAiB;IAChD,OAAO,CAA4B;IAE3C,YAAY,iBAAkC;QAC5C,KAAK,CACH,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,EAAE;YACzC,WAAW,EACT,2DAA2D;YAC7D,IAAI,EAAE,kBAAkB;YACxB,aAAa,EAAE,qBAAqB;YACpC,gBAAgB,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;YAC1D,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,8BAA8B;SAClD,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,iBAAiB,EAAE,CAAC;YACtB,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAoB;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAiB;QAC7B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAmB,EAAE,CAAC;QAEpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAE9B,oCAAoC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,mBAAmB;gBACzB,WAAW,EACT,+DAA+D;gBACjE,QAAQ,EAAE,CAAC,6BAA6B,CAAC;gBACzC,WAAW,EACT,6EAA6E;aAChF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,sCAAsC,OAAO,MAAM,EAAE;gBAClE,QAAQ,EAAE,CAAC,mBAAmB,OAAO,MAAM,EAAE,CAAC;gBAC9C,WAAW,EAAE,kCAAkC;aAChD,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;QAED,oCAAoC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,mBAAmB;gBACzB,WAAW,EAAE,mBAAmB,MAAM,+BAA+B;gBACrE,QAAQ,EAAE;oBACR,UAAU,MAAM,EAAE;oBAClB,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC/D;gBACD,WAAW,EAAE,uBAAuB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACjF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC/C,+DAA+D;YAC/D,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrE,CAAC;QAED,2BAA2B;QAC3B,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,2BAA2B;oBACjC,WAAW,EAAE,mBAAmB,KAAK,yBAAyB,MAAM,GAAG;oBACvE,QAAQ,EAAE,CAAC,SAAS,KAAK,YAAY,MAAM,EAAE,CAAC;oBAC9C,WAAW,EAAE,2BAA2B,KAAK,YAAY,YAAY,GAAG;iBACzE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,aAAa;YACb,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;YAC7D,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;oBAAE,SAAS;gBAEpD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;gBAC7D,IAAI,SAAS,EAAE,CAAC;oBACd,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;YAC7B,QAAQ;YACR,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC/B,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAC9B,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;QAE7C,IAAI,WAAW,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,GAAG,WAAW,CAAC,MAAM,gCAAgC,QAAQ,gBAAgB,MAAM,GAAG;gBACnG,QAAQ,EAAE;oBACR,iBAAiB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;iBAC9F;gBACD,WAAW,EAAE,kCAAkC,QAAQ,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAC1D,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC;QAExB,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAEO,SAAS,CACf,KAAc,EACd,YAAuB,EACvB,KAAa;QAEb,QAAQ,YAAY,EAAE,CAAC;YACrB,KAAK,QAAQ;gBACX,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,KAAK,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,KAAK,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,KAAK,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACtD,OAAO,IAAI,CAAC,SAAS,CACnB,KAAK,EACL,YAAY,EACZ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,CAC9C,CAAC;gBACJ,CAAC;gBACD,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,KAAK,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM;YACR,KAAK,UAAU;gBACb,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACrB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAC1C,CAAC;oBACD,OAAO,IAAI,CAAC,SAAS,CACnB,KAAK,EACL,YAAY,EACZ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,KAAK,CACpD,CAAC;gBACJ,CAAC;gBACD,MAAM;YACR,KAAK,UAAU;gBACb,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACrB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAC1C,CAAC;oBACD,OAAO,IAAI,CAAC,SAAS,CACnB,KAAK,EACL,YAAY,EACZ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,KAAK,CACpD,CAAC;gBACJ,CAAC;gBACD,MAAM;QACV,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,SAAS,CACf,KAAa,EACb,QAAgB,EAChB,MAAc;QAEd,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,UAAU,KAAK,oBAAoB,QAAQ,WAAW,MAAM,GAAG;YAC5E,QAAQ,EAAE,CAAC,SAAS,KAAK,cAAc,QAAQ,YAAY,MAAM,EAAE,CAAC;YACpE,WAAW,EAAE,YAAY,KAAK,cAAc,QAAQ,GAAG;SACxD,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,SAAiB,EAAE,EAAU;QAC/C,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QAC1C,OAAO;YACL,SAAS;YACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,UAAU;YACV,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,UAAU;SAC7B,CAAC;IACJ,CAAC;CACF"}

package/dist/layers/implementations/L4-injection-detector.d.ts

@@ -0,0 +1,47 @@
+/**
+ * L4 — Injection Pattern Detector
+ *
+ * Detects prompt injection, jailbreak attempts, and instruction override
+ * patterns in request content. Uses a multi-strategy approach combining
+ * keyword matching, structural analysis, and semantic heuristics.
+ *
+ * Tier: input_validation
+ * Primary threat: prompt_injection
+ *
+ * @packageDocumentation
+ */
+import { BaseSecurityLayer } from "../index.js";
+import type { LayerInput, LayerExecutionResult } from "../types.js";
+/**
+ * Injection pattern definition
+ */
+interface InjectionPattern {
+    name: string;
+    pattern: RegExp;
+    severity: "medium" | "high" | "critical";
+    category: "instruction_override" | "role_hijack" | "context_escape" | "encoding_attack" | "social_engineering";
+    description: string;
+}
+/**
+ * L4 Injection Pattern Detector
+ *
+ * Multi-strategy prompt injection detection.
+ */
+export declare class L4InjectionDetector extends BaseSecurityLayer {
+    private patterns;
+    constructor(additionalPatterns?: InjectionPattern[]);
+    execute(input: LayerInput): Promise<LayerExecutionResult>;
+    /**
+     * Extract all string values from an object, with their paths.
+     */
+    private extractStrings;
+    /**
+     * Measure what fraction of words in the text are imperative/instruction-like.
+     * Returns 0-1 density.
+     */
+    private measureInstructionDensity;
+    private truncate;
+    private buildTiming;
+}
+export {};
+//# sourceMappingURL=L4-injection-detector.d.ts.map

package/dist/layers/implementations/L4-injection-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"L4-injection-detector.d.ts","sourceRoot":"","sources":["../../../src/layers/implementations/L4-injection-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAqB,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EACV,UAAU,EACV,oBAAoB,EAGrB,MAAM,aAAa,CAAC;AAErB;;GAEG;AACH,UAAU,gBAAgB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACzC,QAAQ,EACJ,sBAAsB,GACtB,aAAa,GACb,gBAAgB,GAChB,iBAAiB,GACjB,oBAAoB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAuID;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,iBAAiB;IACxD,OAAO,CAAC,QAAQ,CAAqB;gBAEzB,kBAAkB,CAAC,EAAE,gBAAgB,EAAE;IAsB7C,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAwE/D;;OAEG;IACH,OAAO,CAAC,cAAc;IA8BtB;;;OAGG;IACH,OAAO,CAAC,yBAAyB;IAWjC,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,WAAW;CAUpB"}