ruvbot 0.1.0

package/dist/esm/security/AIDefenceGuard.d.ts

@@ -0,0 +1,212 @@
+/**
+ * AIDefence Integration - Production-ready adversarial defense for RuvBot
+ *
+ * Integrates the aidefence package to provide:
+ * - Prompt injection detection (<10ms)
+ * - Jailbreak detection
+ * - PII detection and sanitization
+ * - Behavioral analysis
+ * - Formal policy verification
+ *
+ * @see https://www.npmjs.com/package/aidefence
+ */
+import { z } from 'zod';
+/**
+ * Threat classification levels
+ */
+export type ThreatLevel = 'none' | 'low' | 'medium' | 'high' | 'critical';
+/**
+ * Types of threats detected
+ */
+export type ThreatType = 'prompt_injection' | 'jailbreak' | 'pii_exposure' | 'malicious_code' | 'data_exfiltration' | 'policy_violation' | 'anomalous_behavior' | 'control_character' | 'encoding_attack';
+/**
+ * Detection result from AIDefence
+ */
+export interface DetectionResult {
+    safe: boolean;
+    threatLevel: ThreatLevel;
+    threats: ThreatInfo[];
+    confidence: number;
+    latencyMs: number;
+    sanitizedInput?: string;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Individual threat information
+ */
+export interface ThreatInfo {
+    type: ThreatType;
+    severity: ThreatLevel;
+    confidence: number;
+    description: string;
+    location?: {
+        start: number;
+        end: number;
+        text: string;
+    };
+    mitigation?: string;
+}
+/**
+ * AIDefence configuration
+ */
+export interface AIDefenceConfig {
+    /** Enable prompt injection detection */
+    detectPromptInjection: boolean;
+    /** Enable jailbreak detection */
+    detectJailbreak: boolean;
+    /** Enable PII detection and masking */
+    detectPII: boolean;
+    /** Enable behavioral analysis */
+    enableBehavioralAnalysis: boolean;
+    /** Enable formal policy verification */
+    enablePolicyVerification: boolean;
+    /** Minimum threat level to block (default: 'medium') */
+    blockThreshold: ThreatLevel;
+    /** Custom detection patterns */
+    customPatterns?: string[];
+    /** Allowed domains for URLs */
+    allowedDomains?: string[];
+    /** Maximum input length (default: 100000) */
+    maxInputLength: number;
+    /** Enable audit logging */
+    enableAuditLog: boolean;
+    /** AIDefence server URL (if using external service) */
+    serverUrl?: string;
+}
+/**
+ * Validation schema for config
+ */
+export declare const AIDefenceConfigSchema: z.ZodObject<{
+    detectPromptInjection: z.ZodDefault<z.ZodBoolean>;
+    detectJailbreak: z.ZodDefault<z.ZodBoolean>;
+    detectPII: z.ZodDefault<z.ZodBoolean>;
+    enableBehavioralAnalysis: z.ZodDefault<z.ZodBoolean>;
+    enablePolicyVerification: z.ZodDefault<z.ZodBoolean>;
+    blockThreshold: z.ZodDefault<z.ZodEnum<["none", "low", "medium", "high", "critical"]>>;
+    customPatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    maxInputLength: z.ZodDefault<z.ZodNumber>;
+    enableAuditLog: z.ZodDefault<z.ZodBoolean>;
+    serverUrl: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    detectPromptInjection: boolean;
+    detectJailbreak: boolean;
+    detectPII: boolean;
+    enableBehavioralAnalysis: boolean;
+    enablePolicyVerification: boolean;
+    blockThreshold: "low" | "high" | "critical" | "none" | "medium";
+    maxInputLength: number;
+    enableAuditLog: boolean;
+    customPatterns?: string[] | undefined;
+    allowedDomains?: string[] | undefined;
+    serverUrl?: string | undefined;
+}, {
+    detectPromptInjection?: boolean | undefined;
+    detectJailbreak?: boolean | undefined;
+    detectPII?: boolean | undefined;
+    enableBehavioralAnalysis?: boolean | undefined;
+    enablePolicyVerification?: boolean | undefined;
+    blockThreshold?: "low" | "high" | "critical" | "none" | "medium" | undefined;
+    customPatterns?: string[] | undefined;
+    allowedDomains?: string[] | undefined;
+    maxInputLength?: number | undefined;
+    enableAuditLog?: boolean | undefined;
+    serverUrl?: string | undefined;
+}>;
+export declare const DEFAULT_AIDEFENCE_CONFIG: AIDefenceConfig;
+/**
+ * AIDefenceGuard - Main class for AI security protection
+ *
+ * Provides multi-layered defense:
+ * 1. Pattern-based detection (<5ms)
+ * 2. PII detection and masking (<5ms)
+ * 3. Control character sanitization (<1ms)
+ * 4. Behavioral analysis (optional, <100ms)
+ * 5. Policy verification (optional, <500ms)
+ */
+export declare class AIDefenceGuard {
+    private config;
+    private customPatterns;
+    private auditLog;
+    private behaviorBaseline;
+    constructor(config?: Partial<AIDefenceConfig>);
+    /**
+     * Analyze input for threats
+     */
+    analyze(input: string, context?: AnalysisContext): Promise<DetectionResult>;
+    /**
+     * Sanitize input by removing/replacing dangerous content
+     */
+    sanitize(input: string): string;
+    /**
+     * Validate LLM response for safety
+     */
+    validateResponse(response: string, originalInput: string): Promise<DetectionResult>;
+    /**
+     * Get audit log entries
+     */
+    getAuditLog(): AuditEntry[];
+    /**
+     * Clear audit log
+     */
+    clearAuditLog(): void;
+    private detectInjection;
+    private detectJailbreak;
+    private detectPII;
+    private detectCustomPatterns;
+    private analyzeBehavior;
+    private getMaxSeverity;
+    private maskPII;
+    private logAudit;
+}
+export interface AnalysisContext {
+    userId?: string;
+    sessionId?: string;
+    tenantId?: string;
+    channel?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface AuditEntry {
+    timestamp: Date;
+    input: string;
+    result: DetectionResult;
+    context?: AnalysisContext;
+}
+/**
+ * Create middleware for protecting LLM requests
+ */
+export declare function createAIDefenceMiddleware(config?: Partial<AIDefenceConfig>): {
+    /**
+     * Validate input before sending to LLM
+     */
+    validateInput(input: string, context?: AnalysisContext): Promise<{
+        allowed: boolean;
+        sanitizedInput: string;
+        result: DetectionResult;
+    }>;
+    /**
+     * Validate LLM response before returning to user
+     */
+    validateOutput(output: string, originalInput: string): Promise<{
+        allowed: boolean;
+        result: DetectionResult;
+    }>;
+    /**
+     * Get the underlying guard instance
+     */
+    getGuard(): AIDefenceGuard;
+};
+/**
+ * Create a new AIDefenceGuard instance
+ */
+export declare function createAIDefenceGuard(config?: Partial<AIDefenceConfig>): AIDefenceGuard;
+/**
+ * Create a strict security configuration
+ */
+export declare function createStrictConfig(): AIDefenceConfig;
+/**
+ * Create a permissive configuration (for development)
+ */
+export declare function createPermissiveConfig(): AIDefenceConfig;
+export default AIDefenceGuard;
+//# sourceMappingURL=AIDefenceGuard.d.ts.map

package/dist/esm/security/AIDefenceGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AIDefenceGuard.d.ts","sourceRoot":"","sources":["../../../src/security/AIDefenceGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE1E;;GAEG;AACH,MAAM,MAAM,UAAU,GAClB,kBAAkB,GAClB,WAAW,GACX,cAAc,GACd,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,iBAAiB,CAAC;AAEtB;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,WAAW,CAAC;IACzB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,WAAW,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wCAAwC;IACxC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,iCAAiC;IACjC,eAAe,EAAE,OAAO,CAAC;IACzB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,iCAAiC;IACjC,wBAAwB,EAAE,OAAO,CAAC;IAClC,wCAAwC;IACxC,wBAAwB,EAAE,OAAO,CAAC;IAClC,wDAAwD;IACxD,cAAc,EAAE,WAAW,CAAC;IAC5B,gCAAgC;IAChC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,+BAA+B;IAC/B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,6CAA6C;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYhC,CAAC;AAMH,eAAO,MAAM,wBAAwB,EAAE,eAStC,CAAC;AAkGF;;;;;;;;;GASG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,cAAc,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,gBAAgB,CAAoC;gBAEhD,MAAM,GAAE,OAAO,CAAC,eAAe,CAAM;IASjD;;OAEG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IA2FjF;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAqB/B;;OAEG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IA8EzF;;OAEG;IACH,WAAW,IAAI,UAAU,EAAE;IAI3B;;OAEG;IACH,aAAa,IAAI,IAAI;IAQrB,OAAO,CAAC,eAAe;IAyBvB,OAAO,CAAC,eAAe;IAmCvB,OAAO,CAAC,SAAS;IA2BjB,OAAO,CAAC,oBAAoB;YAwBd,eAAe;IA0C7B,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,OAAO;IAKf,OAAO,CAAC,QAAQ;CAOjB;AAMD,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AAMD;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAIvE;;OAEG;yBACwB,MAAM,YAAY,eAAe,GAAG,OAAO,CAAC;QACrE,OAAO,EAAE,OAAO,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,eAAe,CAAC;KACzB,CAAC;IASF;;OAEG;2BAC0B,MAAM,iBAAiB,MAAM,GAAG,OAAO,CAAC;QACnE,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,eAAe,CAAC;KACzB,CAAC;IAQF;;OAEG;gBACS,cAAc;EAI7B;AAMD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,cAAc,CAEtF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,eAAe,CAWpD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,eAAe,CAWxD;AAED,eAAe,cAAc,CAAC"}