averecion-lite 1.3.9 → 1.4.1

package/dashboard/dash.js

@@ -87,7 +87,19 @@
     "promptInjection": {
       title: "Prompt Injection Detected!",
       desc: "An attacker tried to manipulate your AI by hiding instructions in data. This is a known attack vector."
-    }
+    },
+    "whatsapp-inbound": {
+      title: "Dangerous Message Received",
+      desc: "An incoming WhatsApp message contained a dangerous command or attack pattern."
+    },
+    "whatsapp-processing": {
+      title: "Dangerous Content Detected",
+      desc: "A WhatsApp message being processed contained dangerous commands or prompt injection."
+    },
+    "whatsapp-reply": {
+      title: "Suspicious Reply Flagged",
+      desc: "A bot reply contained content that matched a dangerous pattern."
+    },
   };
 
   function showScreen(name) {
@@ -170,14 +182,15 @@
     }
     if (event.decision === "blocked") {
       let context = THREAT_CONTEXT[tool] || null;
-      if (reason.includes("promptInjection")) {
+      if (reason.includes("promptInjection") || reason.includes("Prompt injection")) {
         context = THREAT_CONTEXT.promptInjection;
         return { icon: "🛡️", class: "blocked attack", text: `Caught attack: Prompt injection attempt`, context, isAttack: true };
       }
+      const dangerLabel = FRIENDLY_TOOLS[tool] ? `Flagged: ${friendlyTool}` : `Blocked risky action: ${tool}`;
       if (reason.includes("highRisk")) {
-        return { icon: "⚠️", class: "blocked", text: `Blocked risky action: ${tool}`, context };
+        return { icon: "⚠️", class: "blocked", text: dangerLabel, context };
       }
-      return { icon: "✗", class: "blocked", text: `Blocked: ${tool}`, context };
+      return { icon: "⚠️", class: "blocked", text: FRIENDLY_TOOLS[tool] ? `Flagged dangerous content in WhatsApp` : `Blocked: ${tool}`, context };
     }
     if (event.decision === "manual") {
       return { icon: "👆", class: "manual", text: `You approved ${tool}`, context: null };

package/dist/log-watcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"log-watcher.d.ts","sourceRoot":"","sources":["../log-watcher.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AA6CtC,qBAAa,UAAW,SAAQ,YAAY;IAC1C,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,UAAU,CAAgC;IAClD,OAAO,CAAC,YAAY,CAA+B;;IAMnD,KAAK,IAAI,IAAI;IAUb,IAAI,IAAI,IAAI;IAWZ,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,SAAS;IAuCjB,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,YAAY;IA+BpB,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,YAAY;IAmMpB,OAAO,CAAC,eAAe;IAuCvB,OAAO,CAAC,eAAe;IA6BvB,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,gBAAgB;CAWzB;AAID,wBAAgB,eAAe,IAAI,UAAU,CAM5C;AAED,wBAAgB,cAAc,IAAI,IAAI,CAKrC;AAED,wBAAgB,aAAa,IAAI,UAAU,GAAG,IAAI,CAEjD"}
+{"version":3,"file":"log-watcher.d.ts","sourceRoot":"","sources":["../log-watcher.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAmDtC,qBAAa,UAAW,SAAQ,YAAY;IAC1C,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,UAAU,CAAgC;IAClD,OAAO,CAAC,YAAY,CAA+B;;IAMnD,KAAK,IAAI,IAAI;IAUb,IAAI,IAAI,IAAI;IAWZ,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,SAAS;IAuCjB,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,YAAY;IA+BpB,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,YAAY;IAmMpB,OAAO,CAAC,eAAe;IAuCvB,OAAO,CAAC,eAAe;IA6BvB,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,gBAAgB;CAWzB;AAID,wBAAgB,eAAe,IAAI,UAAU,CAM5C;AAED,wBAAgB,cAAc,IAAI,IAAI,CAKrC;AAED,wBAAgB,aAAa,IAAI,UAAU,GAAG,IAAI,CAEjD"}

package/dist/log-watcher.js

@@ -46,12 +46,18 @@ const DANGEROUS_PATTERNS = [
 ];
 const INJECTION_PATTERNS = [
     { pattern: /ignore\s+(all\s+)?(previous|prior|above)\s+(instructions?|prompts?)/i, reason: "Prompt injection: ignore instructions" },
+    { pattern: /ignore\s+(previous|prior|all)\s+instructions/i, reason: "Prompt injection: ignore instructions" },
     { pattern: /disregard\s+(all\s+)?(previous|prior|above)/i, reason: "Prompt injection: disregard" },
-    { pattern: /you\s+are\s+now\s+(a|an)\s+/i, reason: "Prompt injection: role override" },
+    { pattern: /forget\s+(your|all|the)\s+(rules?|instructions?|guidelines?|restrictions?)/i, reason: "Prompt injection: forget rules" },
+    { pattern: /you\s+are\s+now\s+(a|an|un)\s*/i, reason: "Prompt injection: role override" },
     { pattern: /jailbreak/i, reason: "Prompt injection: jailbreak attempt" },
     { pattern: /DAN\s*mode/i, reason: "Prompt injection: DAN mode" },
     { pattern: /pretend\s+(you'?re?|to\s+be)\s+/i, reason: "Prompt injection: pretend" },
-    { pattern: /bypass\s+(your\s+)?(restrictions?|rules?|guidelines?)/i, reason: "Prompt injection: bypass" },
+    { pattern: /bypass\s+(your\s+)?(restrictions?|rules?|guidelines?|safety|filters?)/i, reason: "Prompt injection: bypass" },
+    { pattern: /override\s+(all\s+)?(safety|security|rules?|filters?)/i, reason: "Prompt injection: override safety" },
+    { pattern: /SYSTEM:\s*/i, reason: "Prompt injection: fake system prompt" },
+    { pattern: /send\s+(all\s+)?(contacts?|messages?|data|files?|info)\s+to/i, reason: "Prompt injection: data exfiltration" },
+    { pattern: /delete\s+everything/i, reason: "Prompt injection: destructive command" },
 ];
 class LogWatcher extends events_1.EventEmitter {
     watchedFile = null;
@@ -423,7 +429,8 @@ class LogWatcher extends events_1.EventEmitter {
         }
     }
     analyzeDanger(event) {
-        if (event.tool !== "exec") {
+        const scanTools = ["exec", "whatsapp-inbound", "whatsapp-reply", "whatsapp-processing", "whatsapp-gateway"];
+        if (!scanTools.includes(event.tool)) {
             return { dangerous: false, reason: "" };
         }
         const argsStr = JSON.stringify(event.args || {}).toLowerCase();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "averecion-lite",
-  "version": "1.3.9",
+  "version": "1.4.1",
   "description": "Real-time AI agent monitoring - watches logs, detects dangerous commands and prompt injection attempts",
   "author": "Averecion <hello@averecion.com>",
   "homepage": "https://github.com/averecion/clawguard#readme",