mneme-ai 2.129.0 → 2.130.0

package/dist/commands/firewall.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `mneme firewall` (v2.130.0) — Structural Context Firewall against Indirect
+ * Prompt Injection (OWASP LLM01). Scan content an agent is about to read; detect
+ * + neutralize known injection patterns hidden in comments/strings, and wrap it
+ * in an untrusted-data boundary so the model treats it as DATA, never commands.
+ *
+ *   cat suspect.ts | mneme firewall scan                 # verdict + findings
+ *   cat external-dep.ts | mneme firewall fortify          # → safe-to-read content (neutralized + wrapped)
+ */
+import type { Command } from "commander";
+export declare function registerFirewallCommands(program: Command): void;
+//# sourceMappingURL=firewall.d.ts.map

package/dist/commands/firewall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall.d.ts","sourceRoot":"","sources":["../../src/commands/firewall.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmBzC,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+B/D"}

package/dist/commands/firewall.js

@@ -0,0 +1,80 @@
+/**
+ * `mneme firewall` (v2.130.0) — Structural Context Firewall against Indirect
+ * Prompt Injection (OWASP LLM01). Scan content an agent is about to read; detect
+ * + neutralize known injection patterns hidden in comments/strings, and wrap it
+ * in an untrusted-data boundary so the model treats it as DATA, never commands.
+ *
+ *   cat suspect.ts | mneme firewall scan                 # verdict + findings
+ *   cat external-dep.ts | mneme firewall fortify          # → safe-to-read content (neutralized + wrapped)
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { firewall } from "@mneme-ai/core";
+function out(s) { process.stdout.write(s + "\n"); }
+function readStdin() {
+    return new Promise((resolve) => {
+        if (process.stdin.isTTY)
+            return resolve("");
+        let d = "";
+        let done = false;
+        const fin = () => { if (!done) {
+            done = true;
+            resolve(d);
+        } };
+        process.stdin.setEncoding("utf8");
+        process.stdin.on("data", (c) => { d += c; if (d.length > 8_000_000)
+            fin(); });
+        process.stdin.on("end", fin);
+        process.stdin.on("error", fin);
+        setTimeout(fin, 4000);
+    });
+}
+async function getPayload(opts) {
+    if (typeof opts.text === "string")
+        return opts.text;
+    if (opts.file && existsSync(opts.file)) {
+        try {
+            return readFileSync(opts.file, "utf8");
+        }
+        catch { /* */ }
+    }
+    return readStdin();
+}
+export function registerFirewallCommands(program) {
+    const fw = program.command("firewall").description("🧱 STRUCTURAL CONTEXT FIREWALL — defend against Indirect Prompt Injection (OWASP LLM01): scan content for injection hidden in comments/strings + neutralize it, and wrap it as untrusted DATA so the model never obeys instructions buried in a file. Defense-in-depth, not a 100% guarantee against unknown attacks.");
+    fw.command("scan")
+        .description("Scan content (stdin/--file/--text). Verdict clean | flagged | blocked + findings (line, category). Exit 2 on blocked.")
+        .option("--text <t>", "inline content.")
+        .option("--file <p>", "read from a file.")
+        .option("--json", "JSON output.")
+        .action(async (opts) => {
+        const r = firewall.scanInjection(await getPayload(opts));
+        if (opts.json) {
+            process.stdout.write(JSON.stringify(r, null, 2) + "\n");
+        }
+        else {
+            const icon = r.verdict === "blocked" ? "🛑" : r.verdict === "flagged" ? "⚠️" : "✓";
+            out(`${icon} FIREWALL ${r.verdict.toUpperCase()} — ${r.findings.length} finding(s), ${r.neutralizedCount} neutralized`);
+            for (const f of r.findings.slice(0, 12))
+                out(`   • L${f.line} [${f.severity}] ${f.category}: ${f.snippet}`);
+            if (r.verdict !== "clean")
+                out(`   → read the FORTIFIED form (mneme firewall fortify) instead of the raw file.`);
+        }
+        if (r.verdict === "blocked")
+            process.exitCode = 2;
+    });
+    fw.command("fortify")
+        .description("Emit the safe-to-read form: known injections neutralized + content wrapped in an untrusted-data boundary (the always-on, attack-agnostic separation). Read THIS instead of the raw file.")
+        .option("--text <t>", "inline content.")
+        .option("--file <p>", "read from a file.")
+        .option("--json", "JSON output (fortified + findings).")
+        .action(async (opts) => {
+        const r = firewall.fortify(await getPayload(opts), opts.file ? { path: opts.file } : undefined);
+        if (opts.json) {
+            process.stdout.write(JSON.stringify(r, null, 2) + "\n");
+            return;
+        }
+        process.stdout.write(r.fortified + "\n");
+        process.stderr.write(`🧱 firewall: ${r.verdict} · ${r.neutralizedCount} injection(s) neutralized · wrapped as untrusted data\n`);
+    });
+}
+//# sourceMappingURL=firewall.js.map

package/dist/commands/firewall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall.js","sourceRoot":"","sources":["../../src/commands/firewall.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,IAAI,IAAI,GAAG,KAAK,CAAC;QAAC,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;YAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,SAAS;YAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,IAAsC;IAC9D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAC3G,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,uTAAuT,CAAC,CAAC;IAE5W,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,uHAAuH,CAAC;SACpI,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC;SACvC,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAsD,EAAE,EAAE;QACvE,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;aACtE,CAAC;YACJ,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YACnF,GAAG,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC,gBAAgB,cAAc,CAAC,CAAC;YACxH,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAAE,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5G,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;gBAAE,GAAG,CAAC,gFAAgF,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEL,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,0LAA0L,CAAC;SACvM,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC;SACvC,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,qCAAqC,CAAC;SACvD,MAAM,CAAC,KAAK,EAAE,IAAsD,EAAE,EAAE;QACvE,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACnF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,gBAAgB,yDAAyD,CAAC,CAAC;IACnI,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA0JA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4gNvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA2JA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6gNvD"}

package/dist/index.js

@@ -87,6 +87,7 @@ import { registerScaffoldCommands } from "./commands/scaffold.js";
 import { registerBlindCommands } from "./commands/blind.js";
 import { registerChannelCommands } from "./commands/channel.js";
 import { registerSettlementCommands } from "./commands/settlement.js";
+import { registerFirewallCommands } from "./commands/firewall.js";
 import { registerTrustCommands } from "./commands/trust.js";
 import { registerNuclearCommands } from "./commands/nuclear-cli.js";
 import { registerOvernightCommand } from "./commands/overnight.js";
@@ -4719,6 +4720,7 @@ export async function run(argv) {
     registerBlindCommands(program);
     registerChannelCommands(program);
     registerSettlementCommands(program);
+    registerFirewallCommands(program);
     // ─── Trust calibrator (v1.31.0) -- per-subsystem precision/recall/band
     registerTrustCommands(program);
     // ─── Wisdom reactor (v1.33.0) -- five nuclear-physics formulas as Mneme metrics