agentshield-sdk 7.4.0 → 8.0.0

package/CHANGELOG.md

@@ -4,6 +4,35 @@ All notable changes to Agent Shield will be documented in this file.
 
 This project follows [Semantic Versioning](https://semver.org/).
 
+## [8.0.0] - 2026-03-22
+
+### Added — Intelligent Detection Engine
+
+- **Smart Configuration System** (`src/smart-config.js`) — `createShield('chatbot')` for 3-line setup, `ShieldBuilder` fluent API with 15 chainable methods, `validateConfig()`, `describeConfig()`, 9 presets including `mcp_server`
+- **Ensemble Voting Classifier** (`src/ensemble.js`) — `EnsembleClassifier` combining 4 independent voters (PatternVoter, TFIDFVoter, EntropyVoter, IPIAVoter) via weighted majority voting. Configurable weights, `requireUnanimous` mode, agreement scoring
+- **Agent Intent Declaration** (`src/agent-intent.js`) — `AgentIntent` class for declaring agent purpose and allowed tools. TF-IDF cosine similarity checks if messages are on-topic
+- **Goal Drift Detection** (`src/agent-intent.js`) — `GoalDriftDetector` monitors conversation for drift away from declared purpose. Sliding window, trend detection (stable/drifting/recovering), drift callbacks
+- **Tool Sequence Modeling** (`src/agent-intent.js`) — `ToolSequenceModeler` learns normal tool call patterns via Markov chain bigrams. Flags anomalous tool transitions after learning period
+- **Persistent Learning** (`src/persistent-learning.js`) — `PersistentLearningLoop` with disk persistence via atomic JSON writes. Pattern promotion, decay, false positive revocation, export/import
+- **Feedback API** (`src/persistent-learning.js`) — `FeedbackCollector` for FP/FN reporting. Auto-processes feedback into learning loop. Retrain cooldown, audit trail
+- **Cross-Turn Injection Tracking** (`src/cross-turn.js`) — `CrossTurnTracker` accumulates conversation and detects injections split across multiple messages. Compares individual vs combined scan results
+- **Adaptive Threshold Calibration** (`src/cross-turn.js`) — `AdaptiveThresholdCalibrator` auto-tunes detection thresholds per category using percentile-based calibration on observed scan results
+- **Adversarial Self-Training** (`src/self-training.js`) — `SelfTrainer` with `MutationEngine` (12 strategies: synonym swap, homoglyph, leet speak, zero-width insert, padding, encoding wrap, etc.). Evolves attacks, extracts patterns from evasive variants
+- 25 built-in seed attacks for self-training
+- 161 new test assertions (test/test-v8-features.js)
+
+### Changed
+
+- `src/main.js` — 418 total exports (up from 395)
+- 9 configuration presets (up from 8, added `mcp_server`)
+- Updated README, ROADMAP, and CLAUDE.md
+
+### Metrics
+
+- **2,500+ test assertions** across all test suites
+- **0 regressions** — all existing tests pass
+- **418 exports** from unified entry point
+
 ## [7.4.0] - 2026-03-21
 
 ### Added — Detection Hardening

package/README.md

@@ -1,13 +1,13 @@
 # Agent Shield
 
-[![npm version](https://img.shields.io/badge/npm-v7.4.0-blue)](https://www.npmjs.com/package/agentshield-sdk)
+[![npm version](https://img.shields.io/badge/npm-v8.0.0-blue)](https://www.npmjs.com/package/agentshield-sdk)
 [![license](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 [![zero deps](https://img.shields.io/badge/dependencies-0-brightgreen)](#)
 [![node](https://img.shields.io/badge/node-%3E%3D16-blue)](#)
 [![shield score](https://img.shields.io/badge/shield%20score-100%2F100%20A%2B-brightgreen)](#benchmark-results)
 [![detection](https://img.shields.io/badge/detection-100%25-brightgreen)](#benchmark-results)
 [![F1](https://img.shields.io/badge/F1%20score-100%25-brightgreen)](#benchmark-results)
-[![tests](https://img.shields.io/badge/tests-2400%2B%20passing-brightgreen)](#testing)
+[![tests](https://img.shields.io/badge/tests-2500%2B%20passing-brightgreen)](#testing)
 
 **The security standard for MCP and AI agents.** Protect your agents from prompt injection, confused deputy attacks, data exfiltration, privilege escalation, and 30+ other AI-specific threats.
 
@@ -45,6 +45,29 @@ scanText('ℹ𝗀𝗇𝗈𝗋𝖾 𝖺𝗅𝗅 ᎥnstructᎥons'); // Detected!
 
 ---
 
+## v8.0 — Intelligent Detection Engine
+
+**Your agent gets smarter over time.** Ensemble voting combines 4 detection signals. Declare your agent's purpose and detect goal drift. Persistent learning saves patterns to disk. Cross-turn tracking catches split injections. Adversarial self-training hardens defenses automatically.
+
+```javascript
+const { createShield } = require('agentshield-sdk');
+
+// 3-line setup with smart defaults
+const shield = createShield('rag_pipeline');
+
+// Or configure everything
+const { createShield } = require('agentshield-sdk');
+const config = createShield()
+  .preset('coding_agent')
+  .enableIntent({ purpose: 'Help users write code' })
+  .enableLearning({ persist: true })
+  .enableEnsemble()
+  .enableCrossTurn()
+  .build();
+```
+
+---
+
 ## v7.2 — Indirect Prompt Injection Detection
 
 **Stop attacks hidden in RAG chunks, tool outputs, emails, and documents.** The IPIA detector implements the joint-context embedding + classifier pipeline to catch injections that bypass pattern matching.
@@ -178,7 +201,7 @@ const result = shield.scanInput(userMessage); // { blocked: true, threats: [...]
 ```
 
 - 395+ exports across 94 modules
-- 2,400+ test assertions across 18 test suites, 100% pass rate
+- 2,500+ test assertions across 18 test suites, 100% pass rate
 - 100% red team detection rate (A+ grade)
 - F1 100% on real-world attack benchmarks (HackAPrompt, TensorTrust, research corpus)
 - Shield Score: 100/100 — fortress-grade protection
@@ -366,6 +389,10 @@ grpc.NewServer(grpc.UnaryInterceptor(shield.GRPCInterceptor(s)))
 | **Indirect Injection** | RAG chunk poisoning, tool output injection, email/document payloads, image alt-text attacks, multi-turn escalation |
 | **AI Phishing** | Fake AI login, voice cloning, deepfake tools, QR phishing, MFA harvesting |
 | **Jailbreaks** | 35+ templates across 6 categories: role play, encoding bypass, context manipulation, authority exploitation |
+| **Ensemble Detection** | 4 independent voting signals, weighted consensus, adaptive threshold calibration |
+| **Intent & Goal Drift** | Agent purpose declaration, goal drift monitoring, tool sequence anomaly detection (Markov chains) |
+| **Cross-Turn Injection** | Split-message attack tracking, multi-turn state correlation |
+| **Adaptive Learning** | Persistent learning with disk storage, feedback API (FP/FN reporting), adversarial self-training (12 mutation strategies) |
 
 ## Platform SDKs
 
@@ -948,7 +975,7 @@ node vscode-extension/test/extension.test.js  # VS Code (167 tests)
 cd python-sdk && python -m unittest tests/test_detector.py  # Python (23 tests)
 ```
 
-Total: **2,400+ test assertions** across 18 test suites.
+Total: **2,500+ test assertions** across 18 test suites.
 
 ## Project Structure
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agentshield-sdk",
-  "version": "7.4.0",
-  "description": "The security standard for MCP and AI agents. 162 detection patterns, text normalization pipeline, CORTEX threat intelligence, pre-deployment audit, intent firewall, flight recorder, and 395+ exports. Zero dependencies, runs locally.",
+  "version": "8.0.0",
+  "description": "The security standard for MCP and AI agents. 162 detection patterns, ensemble voting, agent intent declaration, persistent learning, text normalization, CORTEX threat intelligence, and 418+ exports. Zero dependencies, runs locally.",
   "main": "src/main.js",
   "types": "types/index.d.ts",
   "exports": {
@@ -33,7 +33,8 @@
     "test:scorecard": "node test/benchmark-scorecard.js",
     "test:edge": "node test/test-edge-cases.js",
     "test:production": "node test/test-production-readiness.js",
-    "test:full": "npm test && node test/test-mcp-security.js && node test/test-confused-deputy.js && node test/test-v6-modules.js && node test/test-adaptive-defense.js && node test/test-ipia-detector.js && node test/test-production-readiness.js && node test/test-normalizer.js && node test/test-edge-cases.js && node test/benchmark-scorecard.js && npm run test:all",
+    "test:v8": "node test/test-v8-features.js",
+    "test:full": "npm test && node test/test-mcp-security.js && node test/test-confused-deputy.js && node test/test-v6-modules.js && node test/test-adaptive-defense.js && node test/test-ipia-detector.js && node test/test-production-readiness.js && node test/test-normalizer.js && node test/test-edge-cases.js && node test/benchmark-scorecard.js && node test/test-v8-features.js && npm run test:all",
     "test:coverage": "c8 --reporter=text --reporter=lcov --reporter=json-summary npm test",
     "lint": "node test/lint.js",
     "lint:eslint": "eslint src/ test/ bin/",