@zanii/blackbox 0.17.0 → 0.18.0

package/dist/analysis/faults.js

@@ -232,6 +232,16 @@ export const FAULTS = {
         en: "A tool's definition changed mid-session",
         ar: "تغيّر تعريف أداة أثناء الجلسة",
     },
+    USER_DOWNVOTE: {
+        fault: "BBX-4601",
+        en: "The person served said an answer was wrong",
+        ar: "قال الشخص المخدوم إن الإجابة خاطئة",
+    },
+    SECRET_SENT: {
+        fault: "BBX-9106",
+        en: "A credential was sent to a model or tool",
+        ar: "أُرسلت بيانات اعتماد إلى نموذج أو أداة",
+    },
     PROMPT_INJECTION: {
         fault: "BBX-7403",
         squawk: "HIJACK",

package/dist/analysis/index.d.ts

@@ -88,6 +88,14 @@ export declare function toolChanged(events: Ev[]): Finding[];
  * (`meta.tool_defs_prev`); a tool listed with another hash is a finding, once per server and tool.
  */
 export declare function toolDrifted(events: Ev[]): Finding[];
+/**
+ * spec/data.md §6a: a credential left for a model or a tool. The record's own redaction counted it
+ * (`meta.redacted.secrets`); what the model was sent had fewer masked (`meta.outbound_redacted`), or
+ * the call went to an MCP tool. A request refused for it (`outbound_blocked`) sent nothing.
+ */
+export declare function secretSent(events: Ev[]): Finding[];
+/** spec/findings.md §12b: a person the agent served said an answer was wrong (👎), once per answer. */
+export declare function userDownvotes(events: Ev[]): Finding[];
 /** N6 (idea S3): the gateway refused a request that carried the session's own token. */
 export declare function tokenMisuse(events: Ev[]): Finding[];
 /** Stage 2 R3: a `verify` check that passed, then failed later in the run. */

package/dist/analysis/index.js

@@ -58,6 +58,8 @@ export function analyze(lines, options) {
         ...tokenMisuse(events),
         ...toolChanged(events),
         ...toolDrifted(events),
+        ...secretSent(events),
+        ...userDownvotes(events),
         ...injectionFindings(lines, options.bodies),
         ...verifyRegression(events),
         ...falseSuccess(events, now),
@@ -440,6 +442,69 @@ export function toolDrifted(events) {
     }
     return out;
 }
+/**
+ * spec/data.md §6a: a credential left for a model or a tool. The record's own redaction counted it
+ * (`meta.redacted.secrets`); what the model was sent had fewer masked (`meta.outbound_redacted`), or
+ * the call went to an MCP tool. A request refused for it (`outbound_blocked`) sent nothing.
+ */
+export function secretSent(events) {
+    const blocked = new Set();
+    for (const e of events)
+        if (e.kind === "llm.incomplete" &&
+            e.meta.reason === "outbound_blocked" &&
+            typeof e.meta.request_seq === "number")
+            blocked.add(e.meta.request_seq);
+    const count = (v) => {
+        const n = v?.secrets;
+        return typeof n === "number" && Number.isSafeInteger(n) && n > 0 ? n : 0;
+    };
+    const out = [];
+    for (const e of events) {
+        let to = null;
+        let n = 0;
+        if (e.kind === "llm.request" && !blocked.has(e.seq)) {
+            n = count(e.meta.redacted) - count(e.meta.outbound_redacted);
+            to = "model";
+        }
+        else if (e.kind === "tool.call" && typeof e.meta.tool === "string") {
+            n = count(e.meta.redacted);
+            to = "tool";
+        }
+        if (!to || n <= 0)
+            continue;
+        out.push({
+            code: "SECRET_SENT",
+            source: "detectors",
+            severity: "warning",
+            ref: { seq: e.seq, to, count: n, ...(to === "tool" ? { tool: e.meta.tool } : {}) },
+            detail: to === "model"
+                ? "A credential (a key, a token, a password) went to the model provider in the request."
+                : "A credential (a key, a token, a password) went to a tool in its arguments; the gateway's credential broker keeps them out of the agent's hands.",
+        });
+    }
+    return out;
+}
+/** spec/findings.md §12b: a person the agent served said an answer was wrong (👎), once per answer. */
+export function userDownvotes(events) {
+    const out = [];
+    const seen = new Set();
+    for (const e of events) {
+        const about = e.meta.about_seq;
+        if (e.kind !== "control" || e.meta.action !== "feedback" || e.meta.rating !== "down")
+            continue;
+        if (typeof about !== "number" || seen.has(about))
+            continue;
+        seen.add(about);
+        out.push({
+            code: "USER_DOWNVOTE",
+            source: "detectors",
+            severity: "advisory",
+            ref: { seq: about, feedback_seq: e.seq },
+            detail: "The person this answer was for said it was wrong.",
+        });
+    }
+    return out;
+}
 /** N6 (idea S3): the gateway refused a request that carried the session's own token. */
 export function tokenMisuse(events) {
     return events

package/dist/analysis/taxonomy.js

@@ -56,6 +56,7 @@ export const TAXONOMY = {
     TOOL_CHANGED: { owasp: ["ASI04"], atlas: ["AML.T0110.002"] },
     TOOL_DRIFTED: { owasp: ["ASI04"], atlas: ["AML.T0110.002"] },
     PROMPT_INJECTION: { owasp: ["ASI01"], atlas: ["AML.T0051"] },
+    SECRET_SENT: { owasp: ["ASI03"], atlas: ["AML.T0057"] },
     TOOL_OUTPUT_MISMATCH: { owasp: ["ASI04", "ASI06"], atlas: ["AML.T0110.002", "AML.T0099"] },
     TOOL_WITNESS_INVALID: { owasp: ["ASI04"], atlas: ["AML.T0110.002"] },
 };

package/dist/index.d.ts

@@ -2,7 +2,7 @@ export { A2A_STREAMING, type AgentCardReport, a2aMethod, a2aRequestMeta, a2aResp
 export { causality, memoryXray } from "./agents/index.ts";
 export { type DetectorOptions, detectors, fingerprint } from "./analysis/detectors.ts";
 export { FAULTS, type Fault, faultOf } from "./analysis/faults.ts";
-export { type Accuracy, type AnalyzeOptions, type AnswerClaims, analyze, answerClaims, answerCredential, answerRisk, answersOf, answerText, type ClaimEntry, type ClaimVerdict, type CriterionResult, canonicalNumber, checkAgainstPacks, checkFlightPlan, checkpointReplay, detectorAccuracy, dualWitness, Evidence, eventsOf, type Fact, type Finding as AnalysisFinding, factsIn, findingKey, type GroundedClaim, groundingFindings, groundingRequest, HOLD_TRIGGERS, identifiersIn, judgeFindings, judgeRequest, type Label as AccuracyLabel, type Landing, landing, loadReferencePacks, modelGroundingFindings, normaliseValue, OUTCOMES, type Outcome, type OutcomeRollup, packsFor, parseGroundingAnswer, parseJudgeAnswer, type ReferenceFact, type ReferencePack, type ReferenceVerdict, referenceContext, rollup, type Severity, schemaProblem, toolDrifted, toolHallucinations, verifyAnswerCredential, type WasteReason, type WasteReport, waste, wilsonLow, } from "./analysis/index.ts";
+export { type Accuracy, type AnalyzeOptions, type AnswerClaims, analyze, answerClaims, answerCredential, answerRisk, answersOf, answerText, type ClaimEntry, type ClaimVerdict, type CriterionResult, canonicalNumber, checkAgainstPacks, checkFlightPlan, checkpointReplay, detectorAccuracy, dualWitness, Evidence, eventsOf, type Fact, type Finding as AnalysisFinding, factsIn, findingKey, type GroundedClaim, groundingFindings, groundingRequest, HOLD_TRIGGERS, identifiersIn, judgeFindings, judgeRequest, type Label as AccuracyLabel, type Landing, landing, loadReferencePacks, modelGroundingFindings, normaliseValue, OUTCOMES, type Outcome, type OutcomeRollup, packsFor, parseGroundingAnswer, parseJudgeAnswer, type ReferenceFact, type ReferencePack, type ReferenceVerdict, referenceContext, rollup, type Severity, schemaProblem, secretSent, toolDrifted, toolHallucinations, userDownvotes, verifyAnswerCredential, type WasteReason, type WasteReport, waste, wilsonLow, } from "./analysis/index.ts";
 export { injectionFindings, injectionRule } from "./analysis/injection.ts";
 export { MITRE_ATLAS, OWASP_ASI, TAXONOMY, type Taxonomy, taxonomyOf, } from "./analysis/taxonomy.ts";
 export { type ApprovalFinding, approvalConfirmation, approvalFindings, argsHash, verifyConfirmation, } from "./approvals/index.ts";

package/dist/index.js

@@ -4,7 +4,7 @@ export { A2A_STREAMING, a2aMethod, a2aRequestMeta, a2aResponseMeta, a2aRestMetho
 export { causality, memoryXray } from "./agents/index.js";
 export { detectors, fingerprint } from "./analysis/detectors.js";
 export { FAULTS, faultOf } from "./analysis/faults.js";
-export { analyze, answerClaims, answerCredential, answerRisk, answersOf, answerText, canonicalNumber, checkAgainstPacks, checkFlightPlan, checkpointReplay, detectorAccuracy, dualWitness, Evidence, eventsOf, factsIn, findingKey, groundingFindings, groundingRequest, HOLD_TRIGGERS, identifiersIn, judgeFindings, judgeRequest, landing, loadReferencePacks, modelGroundingFindings, normaliseValue, OUTCOMES, packsFor, parseGroundingAnswer, parseJudgeAnswer, referenceContext, rollup, schemaProblem, toolDrifted, toolHallucinations, verifyAnswerCredential, waste, wilsonLow, } from "./analysis/index.js";
+export { analyze, answerClaims, answerCredential, answerRisk, answersOf, answerText, canonicalNumber, checkAgainstPacks, checkFlightPlan, checkpointReplay, detectorAccuracy, dualWitness, Evidence, eventsOf, factsIn, findingKey, groundingFindings, groundingRequest, HOLD_TRIGGERS, identifiersIn, judgeFindings, judgeRequest, landing, loadReferencePacks, modelGroundingFindings, normaliseValue, OUTCOMES, packsFor, parseGroundingAnswer, parseJudgeAnswer, referenceContext, rollup, schemaProblem, secretSent, toolDrifted, toolHallucinations, userDownvotes, verifyAnswerCredential, waste, wilsonLow, } from "./analysis/index.js";
 export { injectionFindings, injectionRule } from "./analysis/injection.js";
 export { MITRE_ATLAS, OWASP_ASI, TAXONOMY, taxonomyOf, } from "./analysis/taxonomy.js";
 export { approvalConfirmation, approvalFindings, argsHash, verifyConfirmation, } from "./approvals/index.js";

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "0.17.0";
+export declare const VERSION = "0.18.0";

package/dist/version.js

@@ -1,2 +1,2 @@
 // The SDK version, on its own so the CLI can print it without loading the whole SDK.
-export const VERSION = "0.17.0";
+export const VERSION = "0.18.0";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zanii/blackbox",
   "license": "Apache-2.0",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "The flight recorder for AI agents: sessions, a zero-loss spool, framework hooks, approvals, and offline verification of the gateway's hash-chained record.",
   "keywords": [
     "ai-agents",