seclaw-agent 0.1.0

package/dist/agent/security/input_validation/index.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Security validator
+ *
+ * Implements Control Flow Integrity (CFI) and Information Flow Integrity (IFI)
+ * validation for tool calls, plus a guard model for prompt injection detection.
+ */
+import type { LLMProvider } from "../../../providers/base";
+import type { ToolRegistry } from "../../tools/registry";
+import { SecurityLevel } from "./lattice";
+import { ProgramGraph } from "./program_graph";
+import { SecurityPolicy } from "./security_policy";
+export interface ParameterConstraint {
+    type?: "email" | "url" | "file_path" | "directory" | "integer" | "string" | "boolean" | "json";
+    value?: unknown;
+    source?: string;
+    securityLevel?: SecurityLevel;
+    description?: string;
+}
+export interface ParameterPlaceholder {
+    name: string;
+    source: string | Record<string, string>;
+    constraint: ParameterConstraint;
+    description?: string;
+}
+export interface ToolCallStep {
+    toolCallId: string;
+    toolName: string;
+    source: string;
+    parameters: Record<string, unknown>;
+    constraints: Record<string, ParameterConstraint>;
+    placeholders: Record<string, ParameterPlaceholder>;
+    description: string;
+}
+export interface ToolCallTrajectory {
+    steps: ToolCallStep[];
+}
+export interface SecurityValidation {
+    trajectory: ToolCallTrajectory;
+}
+export interface SecurityValidatorOptions {
+    provider: LLMProvider;
+    model: string;
+    toolRegistry: ToolRegistry;
+    workspace: string;
+    prohibitedCommands?: string[];
+}
+export declare class SecurityValidator {
+    private provider;
+    private model;
+    private toolRegistry;
+    private workspace;
+    private prohibitedCommands;
+    private _validation;
+    private _toolCallCount;
+    private _toolCallHistory;
+    private _observations;
+    private _observationHistory;
+    private _currentStepIndex;
+    private _userQuery;
+    programGraph: ProgramGraph;
+    expectedGraph: ProgramGraph;
+    securityPolicy: SecurityPolicy;
+    static readonly READ_ONLY_TOOLS: Set<string>;
+    static readonly PARAM_DISCRIMINATED_TOOLS: Record<string, string[]>;
+    static readonly NETWORK_EGRESS_COMMAND_PATTERN: RegExp;
+    static readonly SENSITIVE_CONTENT_PATTERN: RegExp;
+    constructor(opts: SecurityValidatorOptions);
+    /**
+     * Analyze the user task and extract expected tool call trajectory via LLM.
+     *
+     * SECURITY: This function ONLY uses:
+     * - User's original query (taskContent)
+     * - Static tool descriptions from registry
+     * Never uses tool outputs to prevent injection attacks.
+     */
+    analyzeTask(taskContent: string): Promise<SecurityValidation>;
+    /**
+     * Validate a tool call against the expected ProgramGraph (CFI + IFI).
+     * Returns [isValid, reason].
+     */
+    validateToolCall(toolName: string, args: Record<string, unknown>): Promise<[boolean, string]>;
+    /**
+     * Guard model: detect and sanitize potential prompt injection in tool output (LLM-backed).
+     * Returns [sanitizedOutput, injectionDetected, reason].
+     */
+    detectAndSanitizeOutput(toolName: string, output: string): Promise<[string, boolean, string]>;
+    /**
+     * Record an observation from a tool execution.
+     */
+    recordObservation(toolName: string, observation: unknown): void;
+    /**
+     * Get a human-readable summary of the expected trajectory.
+     */
+    getTrajectorySum(): string;
+    getTrajectorySummary: () => string;
+    /**
+     * Reset validator state (preserves security policy).
+     */
+    reset(): void;
+    private _isPotentialExposureToolCall;
+    private _checkPrivacyExposureRisk;
+    private _isExplicitApprovalForExposure;
+    private _createPermissiveValidation;
+    private _entityMatchesKeyParams;
+    private _addToolToProgramGraph;
+    private _validateParametersWithGraph;
+    private _validateConstraint;
+    private _getCurrentCfgSecurityLevel;
+    private _downgradeSecurityLevel;
+    private _checkExecReadonly;
+    private _checkIntentAlignment;
+    private _formatArgs;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/agent/security/input_validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/agent/security/input_validation/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAW,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAqB,MAAM,WAAW,CAAC;AAK7D,OAAO,EAAE,YAAY,EAAY,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAInD,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IAC/F,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,UAAU,EAAE,mBAAmB,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACjD,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACnD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,kBAAkB,CAAC;CAChC;AA+CD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAc;IAC9B,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,kBAAkB,CAAW;IAGrC,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,gBAAgB,CAAgD;IACxE,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,mBAAmB,CAAgC;IAC3D,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,UAAU,CAAM;IAGxB,YAAY,EAAE,YAAY,CAAsB;IAChD,aAAa,EAAE,YAAY,CAAsB;IAGjD,cAAc,EAAE,cAAc,CAAC;IAG/B,MAAM,CAAC,QAAQ,CAAC,eAAe,cAAiE;IAGhG,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAGjE;IAGF,MAAM,CAAC,QAAQ,CAAC,8BAA8B,SAAmE;IACjH,MAAM,CAAC,QAAQ,CAAC,yBAAyB,SACgF;gBAE7G,IAAI,EAAE,wBAAwB;IAW1C;;;;;;;OAOG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAiNnE;;;OAGG;IACG,gBAAgB,CACpB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IA+H7B;;;OAGG;IACG,uBAAuB,CAC3B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAyFrC;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,IAAI;IAiB/D;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAe1B,oBAAoB,QAfA,MAAM,CAe8B;IAExD;;OAEG;IACH,KAAK,IAAI,IAAI;IAeb,OAAO,CAAC,4BAA4B;YAoBtB,yBAAyB;YAmFzB,8BAA8B;IA8B5C,OAAO,CAAC,2BAA2B;IAKnC,OAAO,CAAC,uBAAuB;YA8BjB,sBAAsB;YAwCtB,4BAA4B;IA+E1C,OAAO,CAAC,mBAAmB;IA0B3B,OAAO,CAAC,2BAA2B;IAQnC,OAAO,CAAC,uBAAuB;YAMjB,kBAAkB;YAyClB,qBAAqB;IAuEnC,OAAO,CAAC,WAAW;CAOpB"}