dartmind 17.0.0

package/dist/security/PrivilegedContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PrivilegedContext.js","sourceRoot":"","sources":["../../src/security/PrivilegedContext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AA4CtC,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACzC,KAAK,CAAiB;IACtB,KAAK,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC5C,QAAQ,GAAiB,EAAE,CAAC;IAC5B,WAAW,GAAG,CAAC,CAAC;IAChB,MAAM,CAA0B;IAExC,YAAY,QAAwB,SAAS,EAAE,SAAkC,EAAE;QACjF,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,GAAG;YAChC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,IAAY,EAAE,QAAkB,EAAE,QAAkC;QAC1E,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAS,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,MAAM,CAAC,QAAQ,WAAW,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,KAAK,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC;QAE9E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;YACrB,WAAW,EAAE,MAAM;YACnB,QAAQ;YACR,UAAU,EAAE,IAAI;YAChB,QAAQ;YACR,OAAO,EAAE,IAAI,IAAI,EAAE;YACnB,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE9C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,MAAc;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAE5B,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAEpC,2DAA2D;QAC3D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,CAAC,qBAAqB;QACtC,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,qBAAqB;QAC/C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAgB;QACrB,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,qDAAqD;YACrD,IAAI,MAAM,GAAG,QAAQ,CAAC;YACtB,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACxC,iDAAiD;gBACjD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAClD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,sDAAsD;YACtD,IAAI,MAAM,GAAG,QAAQ,CAAC;YACtB,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACxC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAa,EAAE,WAAqB,YAAY;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,YAAY,CACV,MAAmF;QAEnF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,MAAc;QACpB,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,CAAC,mBAAmB;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChE,QAAQ,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,QAAQ,CAAC,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAExC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAE9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,KAAsB;QACzB,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAEtC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAE3D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/D,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;YACxC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;YAClC,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACzC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,cAAc,CACzE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa;QACX,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3D,EAAE;gBACF,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;gBACpC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,yCAAyC;aAC1C,CAAC,CAAC;YACH,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,MAA4B,EAAE,MAAe,EAAE,MAAe;QAC1E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO;QAErC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,MAAM;YACN,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;CACF;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,MAAM,OAAO,cAAc;IACzB;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,MAAgC;QACjD,OAAO,IAAI,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,MAAgC;QAClD,OAAO,IAAI,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,gBAAgB,CAAC,KAAa,EAAE,MAAgC;QAKrE,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACpE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,IAAY,EAAE,MAAgC;QAK/D,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAgC;QAK3F,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;CACF;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,eAAe,iBAAiB,CAAC"}

package/dist/security/PromptGuard.d.ts

@@ -0,0 +1,119 @@
+/**
+ * FlutterAI V16 - PromptGuard (G0.6 Gate)
+ * Issue 18.4: Prompt Injection Defense
+ *
+ * Detects and neutralizes LLM-specific prompt injection attacks:
+ * - Instruction override attempts
+ * - Role hijacking
+ * - System prompt extraction
+ * - Encoded/obfuscated attacks
+ * - Delimiter injection
+ * - Context manipulation
+ *
+ * @module security/PromptGuard
+ * @version 16.0.0
+ */
+import { EventEmitter } from 'events';
+export type ThreatType = 'instruction_override' | 'role_hijack' | 'extraction_attempt' | 'encoding_trick' | 'delimiter_attack' | 'context_manipulation' | 'jailbreak_attempt';
+export interface ThreatPattern {
+    name: string;
+    type: ThreatType;
+    pattern: RegExp;
+    severity: number;
+    description: string;
+}
+export interface DetectedThreat {
+    type: ThreatType;
+    match: string;
+    severity: number;
+    position: {
+        start: number;
+        end: number;
+    };
+    patternName: string;
+}
+export interface InjectionScanResult {
+    isClean: boolean;
+    threatScore: number;
+    detectedThreats: DetectedThreat[];
+    sanitized?: string;
+}
+export interface PromptGuardConfig {
+    /** Custom patterns to add */
+    customPatterns?: ThreatPattern[];
+    /** Severity threshold to block (0-100) */
+    blockThreshold?: number;
+    /** Minimum pattern severity to check */
+    minSeverity?: number;
+    /** Enable encoding detection */
+    detectEncodingTricks?: boolean;
+    /** Enable delimiter detection */
+    detectDelimiters?: boolean;
+}
+export declare const THREAT_PATTERNS: ThreatPattern[];
+export declare class PromptGuard extends EventEmitter {
+    private patterns;
+    private blockThreshold;
+    private minSeverity;
+    private totalScans;
+    private totalBlocked;
+    private threatsByType;
+    constructor(config?: PromptGuardConfig);
+    /**
+     * Scan input for prompt injection attempts
+     */
+    scan(input: string): InjectionScanResult;
+    /**
+     * Sanitize input by neutralizing detected threats
+     */
+    sanitize(input: string): string;
+    /**
+     * Validate input - returns true if clean
+     */
+    validate(input: string): boolean;
+    /**
+     * G0.6 Gate Interface - for SecurityPipeline integration
+     */
+    executeAsGate(input: string): Promise<{
+        gateId: string;
+        passed: boolean;
+        executionTimeMs: number;
+        details: string;
+        threatScore?: number;
+        sanitizedInput?: string;
+    }>;
+    /**
+     * Add custom threat pattern
+     */
+    addPattern(pattern: ThreatPattern): void;
+    /**
+     * Get statistics
+     */
+    getStats(): {
+        totalScans: number;
+        totalBlocked: number;
+        blockRate: number;
+        threatsByType: Map<ThreatType, number>;
+    };
+    /**
+     * Get health status
+     */
+    getHealth(): {
+        healthy: boolean;
+        message: string;
+    };
+    /**
+     * Reset statistics
+     */
+    resetStats(): void;
+}
+/**
+ * Create a PromptGuard with default settings
+ */
+export declare function createPromptGuard(config?: PromptGuardConfig): PromptGuard;
+/**
+ * Create a strict PromptGuard (lower threshold, higher sensitivity)
+ */
+export declare function createStrictPromptGuard(): PromptGuard;
+export default PromptGuard;
+//# sourceMappingURL=PromptGuard.d.ts.map

package/dist/security/PromptGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PromptGuard.d.ts","sourceRoot":"","sources":["../../src/security/PromptGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAMtC,MAAM,MAAM,UAAU,GAClB,sBAAsB,GACtB,aAAa,GACb,oBAAoB,GACpB,gBAAgB,GAChB,kBAAkB,GAClB,sBAAsB,GACtB,mBAAmB,CAAC;AAExB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,6BAA6B;IAC7B,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iCAAiC;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAMD,eAAO,MAAM,eAAe,EAAE,aAAa,EA8O1C,CAAC;AAMF,qBAAa,WAAY,SAAQ,YAAY;IAC3C,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,WAAW,CAAS;IAG5B,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,aAAa,CAAiC;gBAE1C,MAAM,GAAE,iBAAsB;IAe1C;;OAEG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB;IAmDxC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAgB/B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAIhC;;OAEG;IACG,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IAgBF;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAIxC;;OAEG;IACH,QAAQ,IAAI;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;KACxC;IASD;;OAEG;IACH,SAAS,IAAI;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IASlD;;OAEG;IACH,UAAU,IAAI,IAAI;CAKnB;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,WAAW,CAEzE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,WAAW,CAKrD;AAED,eAAe,WAAW,CAAC"}

package/dist/security/PromptGuard.js

@@ -0,0 +1,415 @@
+/**
+ * FlutterAI V16 - PromptGuard (G0.6 Gate)
+ * Issue 18.4: Prompt Injection Defense
+ *
+ * Detects and neutralizes LLM-specific prompt injection attacks:
+ * - Instruction override attempts
+ * - Role hijacking
+ * - System prompt extraction
+ * - Encoded/obfuscated attacks
+ * - Delimiter injection
+ * - Context manipulation
+ *
+ * @module security/PromptGuard
+ * @version 16.0.0
+ */
+import { EventEmitter } from 'events';
+// ============================================================================
+// Threat Patterns
+// ============================================================================
+export const THREAT_PATTERNS = [
+    // === Instruction Override Attempts (High severity) ===
+    {
+        name: 'ignore_previous_instructions',
+        type: 'instruction_override',
+        pattern: /ignore\s+(all\s+)?(previous|prior|above|earlier)\s+(instructions?|prompts?|rules?|directions?)/gi,
+        severity: 95,
+        description: 'Attempts to override previous instructions',
+    },
+    {
+        name: 'disregard_instructions',
+        type: 'instruction_override',
+        pattern: /disregard\s+(all\s+)?(previous|prior|your)\s+(instructions?|programming|training)/gi,
+        severity: 95,
+        description: 'Attempts to disregard instructions',
+    },
+    {
+        name: 'forget_everything',
+        type: 'instruction_override',
+        pattern: /forget\s+(everything|all|what)\s+(you|i)\s+(told|said|know)/gi,
+        severity: 90,
+        description: 'Attempts to reset context',
+    },
+    {
+        name: 'new_instructions',
+        type: 'instruction_override',
+        pattern: /new\s+instructions?:?\s*\n/gi,
+        severity: 85,
+        description: 'Attempts to inject new instructions',
+    },
+    {
+        name: 'override_rules',
+        type: 'instruction_override',
+        pattern: /(override|bypass|ignore|skip)\s+(the\s+)?(safety|security|rules?|restrictions?|guidelines?)/gi,
+        severity: 90,
+        description: 'Attempts to bypass safety rules',
+    },
+    // === Role Hijacking (Critical severity) ===
+    {
+        name: 'redefine_role',
+        type: 'role_hijack',
+        pattern: /you\s+are\s+(now|actually|really)\s+(a|an|the)/gi,
+        severity: 90,
+        description: 'Attempts to redefine AI role',
+    },
+    {
+        name: 'pretend_role',
+        type: 'role_hijack',
+        pattern: /pretend\s+(to\s+be|you'?re?)\s+(a|an|the)/gi,
+        severity: 85,
+        description: 'Attempts role-play hijack',
+    },
+    {
+        name: 'act_as_role',
+        type: 'role_hijack',
+        pattern: /act\s+as\s+(if\s+)?(you\s+)?(are|were)\s+(a|an|the)/gi,
+        severity: 80,
+        description: 'Attempts behavioral override',
+    },
+    {
+        name: 'from_now_on',
+        type: 'role_hijack',
+        pattern: /from\s+now\s+on,?\s+(you|your)/gi,
+        severity: 85,
+        description: 'Attempts persistent role change',
+    },
+    {
+        name: 'roleplay_mode',
+        type: 'role_hijack',
+        pattern: /(enter|switch\s+to|activate)\s+(roleplay|character|persona)\s+mode/gi,
+        severity: 80,
+        description: 'Attempts to enter roleplay mode',
+    },
+    // === System Prompt Extraction (Critical severity) ===
+    {
+        name: 'show_system_prompt',
+        type: 'extraction_attempt',
+        pattern: /(show|display|print|reveal|tell\s+me)\s+(your|the)\s+(system\s+)?(prompt|instructions?|rules?)/gi,
+        severity: 95,
+        description: 'Attempts to extract system prompt',
+    },
+    {
+        name: 'what_are_instructions',
+        type: 'extraction_attempt',
+        pattern: /what\s+(are|is)\s+your\s+(system\s+)?(prompt|instructions?|programming)/gi,
+        severity: 90,
+        description: 'Queries for system configuration',
+    },
+    {
+        name: 'repeat_prompt',
+        type: 'extraction_attempt',
+        pattern: /repeat\s+(your|the)\s+(initial|system|original)\s+(prompt|instructions?)/gi,
+        severity: 95,
+        description: 'Attempts prompt repetition',
+    },
+    {
+        name: 'output_above',
+        type: 'extraction_attempt',
+        pattern: /output\s+(everything|all|the\s+text)\s+(above|before)/gi,
+        severity: 90,
+        description: 'Attempts to extract previous context',
+    },
+    {
+        name: 'first_message',
+        type: 'extraction_attempt',
+        pattern: /what\s+(was|is)\s+(the|your)\s+first\s+(message|instruction)/gi,
+        severity: 85,
+        description: 'Queries for initial instructions',
+    },
+    // === Encoding Tricks (Medium-High severity) ===
+    {
+        name: 'base64_content',
+        type: 'encoding_trick',
+        pattern: /base64[:\s]+[A-Za-z0-9+/=]{20,}/gi,
+        severity: 75,
+        description: 'Base64 encoded content',
+    },
+    {
+        name: 'hex_encoding',
+        type: 'encoding_trick',
+        pattern: /\\x[0-9a-f]{2}/gi,
+        severity: 70,
+        description: 'Hex-encoded characters',
+    },
+    {
+        name: 'html_entities',
+        type: 'encoding_trick',
+        pattern: /&#x?[0-9a-f]+;/gi,
+        severity: 65,
+        description: 'HTML entity encoding',
+    },
+    {
+        name: 'unicode_manipulation',
+        type: 'encoding_trick',
+        pattern: /[\u202e\u200b\u200c\u200d\ufeff\u2060]/g,
+        severity: 80,
+        description: 'Unicode manipulation characters (RTL override, zero-width)',
+    },
+    {
+        name: 'rot13_reference',
+        type: 'encoding_trick',
+        pattern: /decode\s+(this\s+)?rot13/gi,
+        severity: 70,
+        description: 'ROT13 encoding reference',
+    },
+    // === Delimiter Attacks ===
+    {
+        name: 'fake_message_delimiter',
+        type: 'delimiter_attack',
+        pattern: /```\s*(system|assistant|human|user)\s*\n/gi,
+        severity: 85,
+        description: 'Fake message delimiter in code block',
+    },
+    {
+        name: 'token_injection',
+        type: 'delimiter_attack',
+        pattern: /<\|?(system|assistant|human|user|im_start|im_end|endoftext)\|?>/gi,
+        severity: 90,
+        description: 'Token injection attempt',
+    },
+    {
+        name: 'xml_message_tags',
+        type: 'delimiter_attack',
+        pattern: /<\/?(?:system|assistant|human|user|prompt|instruction)>/gi,
+        severity: 85,
+        description: 'XML-style message tags',
+    },
+    {
+        name: 'triple_quote_system',
+        type: 'delimiter_attack',
+        pattern: /"""\s*(system|instructions?|prompt)/gi,
+        severity: 80,
+        description: 'Triple quote system injection',
+    },
+    // === Context Manipulation ===
+    {
+        name: 'instruction_tag',
+        type: 'context_manipulation',
+        pattern: /\[\s*(INST|SYS|SYSTEM)\s*\]/gi,
+        severity: 85,
+        description: 'Instruction tag injection',
+    },
+    {
+        name: 'llama_tags',
+        type: 'context_manipulation',
+        pattern: /<<\s*(SYS|INST)\s*>>/gi,
+        severity: 85,
+        description: 'LLaMA-style system tag injection',
+    },
+    {
+        name: 'gpt_format',
+        type: 'context_manipulation',
+        pattern: /\bGPT-?\d*\s*:\s*/gi,
+        severity: 75,
+        description: 'GPT format injection',
+    },
+    {
+        name: 'end_of_prompt',
+        type: 'context_manipulation',
+        pattern: /---\s*(end\s+of\s+)?(system\s+)?(prompt|instructions)/gi,
+        severity: 80,
+        description: 'Fake end-of-prompt marker',
+    },
+    // === Jailbreak Attempts ===
+    {
+        name: 'dan_jailbreak',
+        type: 'jailbreak_attempt',
+        pattern: /\bDAN\b.*\b(do\s+anything|no\s+limits|jailbreak)/gi,
+        severity: 95,
+        description: 'DAN jailbreak attempt',
+    },
+    {
+        name: 'developer_mode',
+        type: 'jailbreak_attempt',
+        pattern: /(enable|activate|enter)\s+(developer|god|admin)\s+mode/gi,
+        severity: 90,
+        description: 'Developer mode jailbreak',
+    },
+    {
+        name: 'hypothetical_bypass',
+        type: 'jailbreak_attempt',
+        pattern: /hypothetically,?\s+(if|what\s+if)\s+you\s+(could|had\s+to|were\s+forced)/gi,
+        severity: 75,
+        description: 'Hypothetical scenario bypass',
+    },
+    {
+        name: 'opposite_day',
+        type: 'jailbreak_attempt',
+        pattern: /(today\s+is|it's)\s+opposite\s+day/gi,
+        severity: 85,
+        description: 'Opposite day jailbreak',
+    },
+];
+// ============================================================================
+// PromptGuard Class
+// ============================================================================
+export class PromptGuard extends EventEmitter {
+    patterns;
+    blockThreshold;
+    minSeverity;
+    // Stats
+    totalScans = 0;
+    totalBlocked = 0;
+    threatsByType = new Map();
+    constructor(config = {}) {
+        super();
+        this.patterns = [...THREAT_PATTERNS, ...(config.customPatterns || [])];
+        this.blockThreshold = config.blockThreshold ?? 70;
+        this.minSeverity = config.minSeverity ?? 50;
+        // Filter patterns based on config
+        if (config.detectEncodingTricks === false) {
+            this.patterns = this.patterns.filter((p) => p.type !== 'encoding_trick');
+        }
+        if (config.detectDelimiters === false) {
+            this.patterns = this.patterns.filter((p) => p.type !== 'delimiter_attack');
+        }
+    }
+    /**
+     * Scan input for prompt injection attempts
+     */
+    scan(input) {
+        this.totalScans++;
+        const detectedThreats = [];
+        for (const threatPattern of this.patterns) {
+            if (threatPattern.severity < this.minSeverity)
+                continue;
+            // Reset regex state for global patterns
+            threatPattern.pattern.lastIndex = 0;
+            let match;
+            while ((match = threatPattern.pattern.exec(input)) !== null) {
+                detectedThreats.push({
+                    type: threatPattern.type,
+                    match: match[0],
+                    severity: threatPattern.severity,
+                    position: {
+                        start: match.index,
+                        end: match.index + match[0].length,
+                    },
+                    patternName: threatPattern.name,
+                });
+                // Update stats
+                const count = this.threatsByType.get(threatPattern.type) || 0;
+                this.threatsByType.set(threatPattern.type, count + 1);
+            }
+        }
+        // Calculate overall threat score
+        const maxSeverity = Math.max(0, ...detectedThreats.map((t) => t.severity));
+        const accumulationBonus = Math.min(20, detectedThreats.length * 5);
+        const threatScore = Math.min(100, maxSeverity + accumulationBonus);
+        const isClean = threatScore < this.blockThreshold;
+        if (!isClean) {
+            this.totalBlocked++;
+        }
+        const result = {
+            isClean,
+            threatScore,
+            detectedThreats,
+            sanitized: isClean ? undefined : this.sanitize(input),
+        };
+        this.emit('scan', result);
+        return result;
+    }
+    /**
+     * Sanitize input by neutralizing detected threats
+     */
+    sanitize(input) {
+        let sanitized = input;
+        for (const threatPattern of this.patterns) {
+            threatPattern.pattern.lastIndex = 0;
+            sanitized = sanitized.replace(threatPattern.pattern, (match) => {
+                return `[FILTERED:${threatPattern.type}]`;
+            });
+        }
+        // Remove invisible unicode characters
+        sanitized = sanitized.replace(/[\u200b-\u200f\u202a-\u202e\ufeff\u2060]/g, '');
+        return sanitized;
+    }
+    /**
+     * Validate input - returns true if clean
+     */
+    validate(input) {
+        return this.scan(input).isClean;
+    }
+    /**
+     * G0.6 Gate Interface - for SecurityPipeline integration
+     */
+    async executeAsGate(input) {
+        const startTime = Date.now();
+        const result = this.scan(input);
+        return {
+            gateId: 'G0.6-PromptGuard',
+            passed: result.isClean,
+            executionTimeMs: Date.now() - startTime,
+            details: result.isClean
+                ? 'No injection threats detected'
+                : `Blocked: ${result.detectedThreats.length} threats detected (score: ${result.threatScore})`,
+            threatScore: result.threatScore,
+            sanitizedInput: result.sanitized,
+        };
+    }
+    /**
+     * Add custom threat pattern
+     */
+    addPattern(pattern) {
+        this.patterns.push(pattern);
+    }
+    /**
+     * Get statistics
+     */
+    getStats() {
+        return {
+            totalScans: this.totalScans,
+            totalBlocked: this.totalBlocked,
+            blockRate: this.totalScans > 0 ? this.totalBlocked / this.totalScans : 0,
+            threatsByType: new Map(this.threatsByType),
+        };
+    }
+    /**
+     * Get health status
+     */
+    getHealth() {
+        const blockRate = this.totalScans > 0 ? this.totalBlocked / this.totalScans : 0;
+        return {
+            healthy: blockRate < 0.5,
+            message: `G0.6 PromptGuard: ${this.totalScans} scans, ${this.totalBlocked} blocked (${(blockRate * 100).toFixed(1)}%)`,
+        };
+    }
+    /**
+     * Reset statistics
+     */
+    resetStats() {
+        this.totalScans = 0;
+        this.totalBlocked = 0;
+        this.threatsByType.clear();
+    }
+}
+// ============================================================================
+// Factory Function
+// ============================================================================
+/**
+ * Create a PromptGuard with default settings
+ */
+export function createPromptGuard(config) {
+    return new PromptGuard(config);
+}
+/**
+ * Create a strict PromptGuard (lower threshold, higher sensitivity)
+ */
+export function createStrictPromptGuard() {
+    return new PromptGuard({
+        blockThreshold: 50,
+        minSeverity: 30,
+    });
+}
+export default PromptGuard;
+//# sourceMappingURL=PromptGuard.js.map

package/dist/security/PromptGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PromptGuard.js","sourceRoot":"","sources":["../../src/security/PromptGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAmDtC,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,wDAAwD;IACxD;QACE,IAAI,EAAE,8BAA8B;QACpC,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,kGAAkG;QAC3G,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,qFAAqF;QAC9F,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,oCAAoC;KAClD;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,+DAA+D;QACxE,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,qCAAqC;KACnD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,+FAA+F;QACxG,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,iCAAiC;KAC/C;IAED,6CAA6C;IAC7C;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,kDAAkD;QAC3D,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,6CAA6C;QACtD,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,uDAAuD;QAChE,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,iCAAiC;KAC/C;IAED,uDAAuD;IACvD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,kGAAkG;QAC3G,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,2EAA2E;QACpF,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,4EAA4E;QACrF,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,4BAA4B;KAC1C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,yDAAyD;QAClE,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,sCAAsC;KACpD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,gEAAgE;QACzE,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,kCAAkC;KAChD;IAED,iDAAiD;IACjD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,mCAAmC;QAC5C,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,wBAAwB;KACtC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,wBAAwB;KACtC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,yCAAyC;QAClD,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,4DAA4D;KAC1E;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,0BAA0B;KACxC;IAED,4BAA4B;IAC5B;QACE,IAAI,EAAE,wBAAwB;QAC9B,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,sCAAsC;KACpD;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,mEAAmE;QAC5E,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,2DAA2D;QACpE,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,wBAAwB;KACtC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,+BAA+B;KAC7C;IAED,+BAA+B;IAC/B;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,yDAAyD;QAClE,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,2BAA2B;KACzC;IAED,6BAA6B;IAC7B;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,oDAAoD;QAC7D,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,0DAA0D;QACnE,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4EAA4E;QACrF,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,wBAAwB;KACtC;CACF,CAAC;AAEF,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,OAAO,WAAY,SAAQ,YAAY;IACnC,QAAQ,CAAkB;IAC1B,cAAc,CAAS;IACvB,WAAW,CAAS;IAE5B,QAAQ;IACA,UAAU,GAAG,CAAC,CAAC;IACf,YAAY,GAAG,CAAC,CAAC;IACjB,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEtD,YAAY,SAA4B,EAAE;QACxC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;QAE5C,kCAAkC;QAClC,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,eAAe,GAAqB,EAAE,CAAC;QAE7C,KAAK,MAAM,aAAa,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC,WAAW;gBAAE,SAAS;YAExD,wCAAwC;YACxC,aAAa,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAEpC,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5D,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,aAAa,CAAC,IAAI;oBACxB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;oBACf,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE;wBACR,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;qBACnC;oBACD,WAAW,EAAE,aAAa,CAAC,IAAI;iBAChC,CAAC,CAAC;gBAEH,eAAe;gBACf,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,GAAG,iBAAiB,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC;QAElD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,MAAM,GAAwB;YAClC,OAAO;YACP,WAAW;YACX,eAAe;YACf,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;SACtD,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAa;QACpB,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,KAAK,MAAM,aAAa,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,aAAa,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACpC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7D,OAAO,aAAa,aAAa,CAAC,IAAI,GAAG,CAAC;YAC5C,CAAC,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,2CAA2C,EAAE,EAAE,CAAC,CAAC;QAE/E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,KAAa;QAQ/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEhC,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,MAAM,CAAC,OAAO;YACtB,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACvC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACrB,CAAC,CAAC,+BAA+B;gBACjC,CAAC,CAAC,YAAY,MAAM,CAAC,eAAe,CAAC,MAAM,6BAA6B,MAAM,CAAC,WAAW,GAAG;YAC/F,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,cAAc,EAAE,MAAM,CAAC,SAAS;SACjC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAAsB;QAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,QAAQ;QAMN,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACxE,aAAa,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC;SAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhF,OAAO;YACL,OAAO,EAAE,SAAS,GAAG,GAAG;YACxB,OAAO,EAAE,qBAAqB,IAAI,CAAC,UAAU,WAAW,IAAI,CAAC,YAAY,aAAa,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;SACvH,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,IAAI,WAAW,CAAC;QACrB,cAAc,EAAE,EAAE;QAClB,WAAW,EAAE,EAAE;KAChB,CAAC,CAAC;AACL,CAAC;AAED,eAAe,WAAW,CAAC"}

package/dist/security/SecretsGuard.d.ts

@@ -0,0 +1,48 @@
+/**
+ * FlutterAI V17 - SecretsGuard
+ * Moved from V10 during V17 migration
+ * Secret detection and redaction for security pipeline
+ *
+ * @module security/SecretsGuard
+ * @version 17.0.0
+ */
+export interface SecretDetection {
+    type: string;
+    value: string;
+    masked: string;
+    position: number;
+    length: number;
+    confidence: number;
+}
+export interface SecretsGuardConfig {
+    redactSecrets?: boolean;
+    minEntropy?: number;
+    minConfidence?: number;
+    blockOnDetection?: boolean;
+}
+export declare class SecretsGuard {
+    private config;
+    constructor(config?: SecretsGuardConfig);
+    /**
+     * Scan input for secrets
+     */
+    scan(input: string): SecretDetection[];
+    /**
+     * Redact secrets in input
+     */
+    redact(input: string): string;
+    /**
+     * Mask a value for display
+     */
+    private maskValue;
+    /**
+     * Calculate Shannon entropy of a string
+     */
+    private calculateEntropy;
+    /**
+     * Detect high-entropy strings that might be secrets
+     */
+    private detectHighEntropyStrings;
+}
+export default SecretsGuard;
+//# sourceMappingURL=SecretsGuard.d.ts.map

package/dist/security/SecretsGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretsGuard.d.ts","sourceRoot":"","sources":["../../src/security/SecretsGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAwED,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAqB;gBAEvB,MAAM,GAAE,kBAAuB;IAU3C;;OAEG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,EAAE;IA8BtC;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAkB7B;;OAEG;IACH,OAAO,CAAC,SAAS;IAOjB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB;;OAEG;IACH,OAAO,CAAC,wBAAwB;CA2BjC;AAED,eAAe,YAAY,CAAC"}