shield360 1.1.0 → 1.2.1

package/dist/ai-security/config.js

@@ -0,0 +1,241 @@
+"use strict";
+/**
+ * The app's AI security policy from the platform, signed.
+ *
+ * GET /api/ai-security/config?app=<service name> answers, for the API key's
+ * environment, a compact JWS (EdDSA, Ed25519, typ
+ * "shield360-ai-security+jws") whose claims are { app, policy, ver, iat,
+ * exp }, signed with the environment's attestation key, plus that key's
+ * public JWK. The SDK verifies the signature and refuses a policy for
+ * another app or one already expired.
+ *
+ * Pinning is required. The token must verify under a key the developer
+ * pinned: `configPublicKey` (a JWK, a PEM, or a JWKS { keys: [...] } so a
+ * rotation can list the old and the new key) or the env
+ * SHIELD360_CONFIG_PUBLIC_KEY (the same, as text). The key published beside
+ * the token is never trusted on its own. Without a pin the SDK does not
+ * apply the platform's policy: it keeps the policy from code (monitoring by
+ * default) and reports it once. Trust on first use (pin the first key seen)
+ * exists only behind `allowUnpinnedConfig: true`, for development.
+ *
+ * A verified answer can be cached to a file (`cacheFile`) and is re-verified
+ * under the pinned keys when read back, so a restart while the platform is
+ * unreachable still starts with the last policy. A cached answer never pins
+ * a key.
+ *
+ * Fetched in the background every refreshSeconds (60 s), never on the
+ * request path. When nothing valid can be read the policy from code
+ * applies: fail open to monitoring.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/ai_security/_config.py
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigClient = exports.CONFIG_JWS_TYPE = void 0;
+exports.publicKeyFrom = publicKeyFrom;
+exports.pinnedKeysFrom = pinnedKeysFrom;
+exports.verifyPolicy = verifyPolicy;
+const crypto_1 = require("crypto");
+const fs_1 = require("fs");
+exports.CONFIG_JWS_TYPE = 'shield360-ai-security+jws';
+const MAX_JWS = 256 * 1024;
+function parse(token) {
+    if (typeof token !== 'string' || token.length > MAX_JWS)
+        return null;
+    const parts = token.split('.');
+    if (parts.length !== 3 || !parts.every((p) => /^[A-Za-z0-9_-]+$/.test(p)))
+        return null;
+    try {
+        const header = JSON.parse(Buffer.from(parts[0], 'base64url').toString('utf8'));
+        if (!header || header.alg !== 'EdDSA' || header.typ !== exports.CONFIG_JWS_TYPE || typeof header.kid !== 'string')
+            return null;
+        const claims = JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf8'));
+        if (!claims || typeof claims !== 'object' || Array.isArray(claims))
+            return null;
+        return { kid: header.kid, claims, input: `${parts[0]}.${parts[1]}`, signature: Buffer.from(parts[2], 'base64url') };
+    }
+    catch {
+        return null;
+    }
+}
+/** A public Ed25519 key from a JWK object or a PEM string; null when it is not one. */
+function publicKeyFrom(value) {
+    try {
+        if (typeof value === 'string' && value.includes('BEGIN PUBLIC KEY'))
+            return (0, crypto_1.createPublicKey)(value);
+        if (value && typeof value === 'object') {
+            const jwk = value;
+            if (jwk.kty !== 'OKP' || jwk.crv !== 'Ed25519' || typeof jwk.x !== 'string')
+                return null;
+            return (0, crypto_1.createPublicKey)({ key: { kty: 'OKP', crv: 'Ed25519', x: jwk.x }, format: 'jwk' });
+        }
+    }
+    catch {
+        // not a key
+    }
+    return null;
+}
+/**
+ * The keys a value pins: one JWK or PEM, a JWKS ({ keys: [...] }), or the
+ * JSON text of either. Keys that are not Ed25519 are skipped.
+ */
+function pinnedKeysFrom(value) {
+    let v = value;
+    if (typeof v === 'string') {
+        const t = v.trim();
+        if (!t)
+            return [];
+        if (t.startsWith('{') || t.startsWith('[')) {
+            try {
+                v = JSON.parse(t);
+            }
+            catch {
+                return [];
+            }
+        }
+    }
+    const list = Array.isArray(v) ? v : v && typeof v === 'object' && Array.isArray(v.keys) ? v.keys : [v];
+    const out = [];
+    for (const item of list.slice(0, 20)) {
+        const key = publicKeyFrom(item);
+        if (!key)
+            continue;
+        const kid = item && typeof item === 'object' && typeof item.kid === 'string' ? item.kid : null;
+        out.push({ kid, key });
+    }
+    return out;
+}
+/** The kid in a token's header, unverified (to pick the pinned key to try first). */
+function kidOf(token) {
+    return parse(token)?.kid ?? null;
+}
+/** The claims of a policy token signed by this key, for this app, not expired; otherwise null. */
+function verifyPolicy(token, key, app, nowMs) {
+    const parsed = parse(token);
+    if (!parsed)
+        return null;
+    try {
+        if (!(0, crypto_1.verify)(null, Buffer.from(parsed.input), key, parsed.signature))
+            return null;
+    }
+    catch {
+        return null;
+    }
+    const c = parsed.claims;
+    if (c.app !== app || typeof c.exp !== 'number' || typeof c.iat !== 'number' || typeof c.ver !== 'number')
+        return null;
+    if (c.exp * 1000 < nowMs)
+        return null;
+    return { app, policy: c.policy, ver: c.ver, iat: c.iat, exp: c.exp, kid: parsed.kid };
+}
+class ConfigClient {
+    constructor(o) {
+        this.o = o;
+        this.timer = null;
+        this.lastVer = -1;
+        const env = typeof process !== 'undefined' ? process.env?.SHIELD360_CONFIG_PUBLIC_KEY : undefined;
+        this.keys = pinnedKeysFrom(o.publicKey ?? env ?? '');
+        this.tofu = this.keys.length === 0 && o.allowUnpinned === true;
+        this.fetchImpl = o.fetch || fetch;
+        this.now = o.now || Date.now;
+    }
+    /** Reads the cache (if any), fetches once, then refreshes in the background. */
+    async start() {
+        if (!this.usable)
+            return;
+        await this.readCache();
+        await this.refresh();
+        const every = Math.max(10, this.o.refreshSeconds ?? 60) * 1000;
+        this.timer = setInterval(() => void this.refresh(), every);
+        this.timer.unref?.();
+    }
+    stop() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+    }
+    /** Whether the client can verify anything: a pinned key, or trust on first use allowed. */
+    get usable() {
+        return this.keys.length > 0 || this.tofu;
+    }
+    accept(answer, pin = true) {
+        let candidates = this.keys;
+        if (!candidates.length) {
+            if (!this.tofu)
+                return false;
+            candidates = pinnedKeysFrom(answer.publicKey).slice(0, 1);
+            if (!candidates.length)
+                return false;
+        }
+        const kid = kidOf(answer.jws);
+        const ordered = [...candidates.filter((k) => k.kid && k.kid === kid), ...candidates.filter((k) => !k.kid || k.kid !== kid)];
+        let signed = null;
+        let used = null;
+        for (const k of ordered) {
+            signed = verifyPolicy(answer.jws, k.key, this.o.app, this.now());
+            if (signed) {
+                used = k;
+                break;
+            }
+        }
+        if (!signed || !used)
+            return false;
+        // Trust on first use (development only): pinned from now on. A cached answer never pins.
+        if (pin && !this.keys.length)
+            this.keys = [used];
+        if (signed.ver !== this.lastVer) {
+            this.lastVer = signed.ver;
+            this.o.onPolicy(signed);
+        }
+        return true;
+    }
+    async refresh() {
+        if (!this.usable)
+            return false;
+        const base = this.o.url.replace(/\/+$/, '');
+        const ctl = new AbortController();
+        const t = setTimeout(() => ctl.abort(), this.o.timeoutMs ?? 3000);
+        t.unref?.();
+        try {
+            const res = await this.fetchImpl(`${base}/api/ai-security/config?app=${encodeURIComponent(this.o.app)}`, {
+                headers: { Authorization: `Bearer ${this.o.apiKey}` },
+                signal: ctl.signal,
+            });
+            if (!res.ok)
+                return false;
+            const answer = (await res.json());
+            if (!this.accept(answer))
+                return false;
+            await this.writeCache(answer);
+            return true;
+        }
+        catch {
+            return false;
+        }
+        finally {
+            clearTimeout(t);
+        }
+    }
+    async readCache() {
+        if (!this.o.cacheFile)
+            return;
+        try {
+            const raw = await fs_1.promises.readFile(this.o.cacheFile, 'utf8');
+            this.accept(JSON.parse(raw), false);
+        }
+        catch {
+            // no cache yet
+        }
+    }
+    async writeCache(answer) {
+        if (!this.o.cacheFile)
+            return;
+        try {
+            await fs_1.promises.writeFile(this.o.cacheFile, JSON.stringify({ jws: answer.jws, publicKey: answer.publicKey }), { mode: 0o600 });
+        }
+        catch {
+            // caching is best effort
+        }
+    }
+}
+exports.ConfigClient = ConfigClient;
+//# sourceMappingURL=config.js.map

package/dist/ai-security/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/ai-security/config.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;;;AA8BH,sCAYC;AASD,wCAsBC;AAQD,oCAYC;AA3FD,mCAAiD;AACjD,2BAAoC;AAEvB,QAAA,eAAe,GAAG,2BAA2B,CAAC;AAC3D,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC;AAQ3B,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,uBAAe,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;IACtH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,SAAgB,aAAa,CAAC,KAAc;IAC1C,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAAE,OAAO,IAAA,wBAAe,EAAC,KAAK,CAAC,CAAC;QACnG,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,KAAsD,CAAC;YACnE,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACzF,OAAO,IAAA,wBAAe,EAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,CAAW,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD;;;GAGG;AACH,SAAgB,cAAc,CAAC,KAAc;IAC3C,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAE,CAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxJ,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAQ,IAA0B,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3I,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qFAAqF;AACrF,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC;AACnC,CAAC;AAED,kGAAkG;AAClG,SAAgB,YAAY,CAAC,KAAc,EAAE,GAAuC,EAAE,GAAW,EAAE,KAAa;IAC9G,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,CAAC,IAAA,eAAM,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtH,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;AACxF,CAAC;AAmBD,MAAa,YAAY;IAQvB,YAA6B,CAAsB;QAAtB,MAAC,GAAD,CAAC,CAAqB;QAL3C,UAAK,GAA0C,IAAI,CAAC;QACpD,YAAO,GAAG,CAAC,CAAC,CAAC;QAKnB,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;QAClC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAC/B,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAC/D,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,2FAA2F;IAC3F,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC;IAC3C,CAAC;IAEO,MAAM,CAAC,MAAoB,EAAE,GAAG,GAAG,IAAI;QAC7C,IAAI,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC7B,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,UAAU,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;QACvC,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5H,IAAI,MAAM,GAAwB,IAAI,CAAC;QACvC,IAAI,IAAI,GAAqB,IAAI,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACjE,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,GAAG,CAAC,CAAC;gBACT,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACnC,yFAAyF;QACzF,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;YAC1B,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;QAClE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,+BAA+B,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE;gBACvG,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE;gBACrD,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,KAAK,CAAC;YAC1B,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,OAAO;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,aAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,MAAoB;QAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,OAAO;QAC9B,IAAI,CAAC;YACH,MAAM,aAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1H,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;CACF;AAzGD,oCAyGC"}

package/dist/ai-security/context.d.ts

@@ -0,0 +1,45 @@
+/**
+ * What the AI security checks know about the request in progress: the
+ * signed-in end user's roles and attributes (for tool permissions), and the
+ * identifiers of other tenants that reached the model's context (for the
+ * cross-tenant output check).
+ *
+ * The end customer itself (tenant and user ids) is the one set with
+ * Shield360.withCustomer() / setCustomer(); this adds what tool rules need.
+ * Scoped with AsyncLocalStorage, so concurrent requests never see each
+ * other's state. Bounded: at most MAX_IDENTIFIERS identifiers per request.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/ai_security/_context.py
+ */
+import { type CustomerInput } from '../customer';
+export type EndUser = {
+    roles: string[];
+    attributes: Record<string, string>;
+};
+export type RequestState = {
+    user: EndUser | null;
+    /** Lower-cased identifier -> the tenant it belongs to. */
+    foreign: Map<string, string>;
+};
+export type EndUserInput = CustomerInput & {
+    roles?: string[];
+    attributes?: Record<string, unknown>;
+};
+/**
+ * Runs fn as one request for this end user: the customer (tenant, user) for
+ * attribution, and roles and attributes for tool permissions. Identifiers
+ * of other tenants seen during fn are forgotten when it returns.
+ */
+export declare function withEndUser<T>(user: EndUserInput | null, fn: () => T): T;
+/** Sets the process-wide end user (scripts, single-user workers). Prefer withEndUser in servers. */
+export declare function setEndUser(user: EndUserInput | null): void;
+export declare function getEndUser(): EndUser | null;
+/** The tenant of the request in progress, from the end customer. */
+export declare function currentTenant(): string | null;
+/** Remembers identifiers that belong to another tenant and reached this request's context. */
+export declare function rememberForeignIdentifiers(tenantId: string, identifiers: Iterable<string>): void;
+export declare function foreignIdentifiers(): ReadonlyMap<string, string>;
+/** Clears the process-wide state; for tests. */
+export declare function resetRequestState(): void;
+/** Distinctive identifiers in a text: e-mail addresses, UUIDs, record ids and long numbers. Bounded. */
+export declare function identifiersIn(text: string, limit?: number): string[];

package/dist/ai-security/context.js

@@ -0,0 +1,108 @@
+"use strict";
+/**
+ * What the AI security checks know about the request in progress: the
+ * signed-in end user's roles and attributes (for tool permissions), and the
+ * identifiers of other tenants that reached the model's context (for the
+ * cross-tenant output check).
+ *
+ * The end customer itself (tenant and user ids) is the one set with
+ * Shield360.withCustomer() / setCustomer(); this adds what tool rules need.
+ * Scoped with AsyncLocalStorage, so concurrent requests never see each
+ * other's state. Bounded: at most MAX_IDENTIFIERS identifiers per request.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/ai_security/_context.py
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withEndUser = withEndUser;
+exports.setEndUser = setEndUser;
+exports.getEndUser = getEndUser;
+exports.currentTenant = currentTenant;
+exports.rememberForeignIdentifiers = rememberForeignIdentifiers;
+exports.foreignIdentifiers = foreignIdentifiers;
+exports.resetRequestState = resetRequestState;
+exports.identifiersIn = identifiersIn;
+const node_async_hooks_1 = require("node:async_hooks");
+const customer_1 = require("../customer");
+const MAX_IDENTIFIERS = 2000;
+const MIN_IDENTIFIER = 4;
+const MAX_IDENTIFIER = 200;
+const store = new node_async_hooks_1.AsyncLocalStorage();
+let fallback = { user: null, foreign: new Map() };
+function state() {
+    return store.getStore() || fallback;
+}
+function cleanUser(input) {
+    if (!input)
+        return null;
+    const roles = Array.isArray(input.roles)
+        ? input.roles.filter((r) => typeof r === 'string' && r.length > 0 && r.length <= 128).slice(0, 100)
+        : [];
+    const attributes = {};
+    if (input.attributes && typeof input.attributes === 'object') {
+        for (const [k, v] of Object.entries(input.attributes).slice(0, 100)) {
+            if (typeof v === 'string' || typeof v === 'number' || typeof v === 'boolean')
+                attributes[k] = String(v).slice(0, 256);
+        }
+    }
+    return { roles, attributes };
+}
+/**
+ * Runs fn as one request for this end user: the customer (tenant, user) for
+ * attribution, and roles and attributes for tool permissions. Identifiers
+ * of other tenants seen during fn are forgotten when it returns.
+ */
+function withEndUser(user, fn) {
+    const next = { user: cleanUser(user), foreign: new Map() };
+    const run = () => store.run(next, fn);
+    return user && user.tenantId !== undefined ? (0, customer_1.withCustomer)({ tenantId: user.tenantId, userId: user.userId }, run) : run();
+}
+/** Sets the process-wide end user (scripts, single-user workers). Prefer withEndUser in servers. */
+function setEndUser(user) {
+    fallback = { user: cleanUser(user), foreign: new Map() };
+}
+function getEndUser() {
+    return state().user;
+}
+/** The tenant of the request in progress, from the end customer. */
+function currentTenant() {
+    return (0, customer_1.getCustomer)()?.tenantId ?? null;
+}
+/** Remembers identifiers that belong to another tenant and reached this request's context. */
+function rememberForeignIdentifiers(tenantId, identifiers) {
+    const s = state();
+    for (const raw of identifiers) {
+        if (s.foreign.size >= MAX_IDENTIFIERS)
+            return;
+        const id = String(raw).trim().toLowerCase();
+        if (id.length >= MIN_IDENTIFIER && id.length <= MAX_IDENTIFIER)
+            s.foreign.set(id, tenantId);
+    }
+}
+function foreignIdentifiers() {
+    return state().foreign;
+}
+/** Clears the process-wide state; for tests. */
+function resetRequestState() {
+    fallback = { user: null, foreign: new Map() };
+}
+const ID_PATTERNS = [
+    /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, // e-mail
+    /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi, // UUID
+    /\b[A-Z]{2,6}-?[0-9]{4,}\b/g, // ACCT-00421, INV2024001
+    /(?<![0-9])[0-9]{6,}(?![0-9])/g, // long numbers: account, order, phone
+];
+/** Distinctive identifiers in a text: e-mail addresses, UUIDs, record ids and long numbers. Bounded. */
+function identifiersIn(text, limit = 200) {
+    const out = new Set();
+    if (!text)
+        return [];
+    const sample = text.length > 100000 ? text.slice(0, 100000) : text;
+    for (const re of ID_PATTERNS) {
+        re.lastIndex = 0;
+        let m;
+        while ((m = re.exec(sample)) && out.size < limit)
+            out.add(m[0]);
+    }
+    return Array.from(out);
+}
+//# sourceMappingURL=context.js.map

package/dist/ai-security/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/ai-security/context.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAgDH,kCAIC;AAGD,gCAEC;AAED,gCAEC;AAGD,sCAEC;AAGD,gEAOC;AAED,gDAEC;AAGD,8CAEC;AAUD,sCAUC;AAvGD,uDAAqD;AACrD,0CAA4E;AAa5E,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,KAAK,GAAG,IAAI,oCAAiB,EAAgB,CAAC;AACpD,IAAI,QAAQ,GAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAEhE,SAAS,KAAK;IACZ,OAAO,KAAK,CAAC,QAAQ,EAAE,IAAI,QAAQ,CAAC;AACtC,CAAC;AAID,SAAS,SAAS,CAAC,KAAsC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QACtC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAChH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,IAAI,KAAK,CAAC,UAAU,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC7D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACpE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS;gBAAE,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAI,IAAyB,EAAE,EAAW;IACnE,MAAM,IAAI,GAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACzE,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAA,uBAAY,EAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC3H,CAAC;AAED,oGAAoG;AACpG,SAAgB,UAAU,CAAC,IAAyB;IAClD,QAAQ,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED,SAAgB,UAAU;IACxB,OAAO,KAAK,EAAE,CAAC,IAAI,CAAC;AACtB,CAAC;AAED,oEAAoE;AACpE,SAAgB,aAAa;IAC3B,OAAO,IAAA,sBAAW,GAAE,EAAE,QAAQ,IAAI,IAAI,CAAC;AACzC,CAAC;AAED,8FAA8F;AAC9F,SAAgB,0BAA0B,CAAC,QAAgB,EAAE,WAA6B;IACxF,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,eAAe;YAAE,OAAO;QAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,EAAE,CAAC,MAAM,IAAI,cAAc,IAAI,EAAE,CAAC,MAAM,IAAI,cAAc;YAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB;IAChC,OAAO,KAAK,EAAE,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,gDAAgD;AAChD,SAAgB,iBAAiB;IAC/B,QAAQ,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,WAAW,GAAa;IAC5B,iDAAiD,EAAE,SAAS;IAC5D,oEAAoE,EAAE,OAAO;IAC7E,4BAA4B,EAAE,yBAAyB;IACvD,+BAA+B,EAAE,sCAAsC;CACxE,CAAC;AAEF,wGAAwG;AACxG,SAAgB,aAAa,CAAC,IAAY,EAAE,KAAK,GAAG,GAAG;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,MAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/ai-security/custom-kinds.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The organisation's own kinds of sensitive data (keywords and format masks,
+ * never free-form regular expressions), matched in model output.
+ *
+ * A copy of the matching half of the reference,
+ * src/client/src/lib/platform/collector/custom-data-kinds.ts; the other
+ * copies are cli/internal/coding/guard/custom.go and
+ * extension/src/shared/custom-kinds.ts. Same definition, same matches: masks
+ * are `#` digit, `@` letter, `*` letter or digit, `\x` the character x, and
+ * anything else that character without regard to case. A match may not start
+ * or end inside a longer word. Linear in the text: no quantifier over a group.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/ai_security/_custom_kinds.py
+ */
+import type { CustomDataKindDef } from './policy';
+export type CustomKindFinding = {
+    id: string;
+    name: string;
+    start: number;
+    end: number;
+};
+/** Every custom kind found in text, by span (UTF-16 offsets). */
+export declare function findCustomKinds(text: string, kinds: readonly CustomDataKindDef[]): CustomKindFinding[];

package/dist/ai-security/custom-kinds.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * The organisation's own kinds of sensitive data (keywords and format masks,
+ * never free-form regular expressions), matched in model output.
+ *
+ * A copy of the matching half of the reference,
+ * src/client/src/lib/platform/collector/custom-data-kinds.ts; the other
+ * copies are cli/internal/coding/guard/custom.go and
+ * extension/src/shared/custom-kinds.ts. Same definition, same matches: masks
+ * are `#` digit, `@` letter, `*` letter or digit, `\x` the character x, and
+ * anything else that character without regard to case. A match may not start
+ * or end inside a longer word. Linear in the text: no quantifier over a group.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/ai_security/_custom_kinds.py
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findCustomKinds = findCustomKinds;
+function parseMask(mask) {
+    const chars = Array.from(mask);
+    const tokens = [];
+    for (let i = 0; i < chars.length; i++) {
+        const c = chars[i];
+        if (c === '\\') {
+            const next = chars[++i];
+            if (next === undefined)
+                return null;
+            tokens.push({ kind: 'literal', char: next });
+        }
+        else if (c === '#')
+            tokens.push({ kind: 'digit' });
+        else if (c === '@')
+            tokens.push({ kind: 'letter' });
+        else if (c === '*')
+            tokens.push({ kind: 'alnum' });
+        else
+            tokens.push({ kind: 'literal', char: c });
+    }
+    const placeholders = tokens.filter((t) => t.kind !== 'literal').length;
+    if (tokens.length < 3 || tokens.length > 64 || placeholders < 3)
+        return null;
+    if (placeholders === tokens.length && placeholders < 6)
+        return null;
+    return tokens;
+}
+const WORD = /[\p{L}\p{N}_]/u;
+const escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\/]/g, '\\$&');
+function maskSource(tokens) {
+    return tokens
+        .map((t) => (t.kind === 'literal' ? escapeRegExp(t.char) : t.kind === 'digit' ? '[0-9]' : t.kind === 'letter' ? '[A-Za-z]' : '[A-Za-z0-9]'))
+        .join('');
+}
+const charBefore = (text, index) => index > 0 ? String.fromCodePoint(text.codePointAt(index - 1 - (/[\udc00-\udfff]/.test(text[index - 1]) && index > 1 ? 1 : 0))) : '';
+const charAt = (text, index) => (index < text.length ? String.fromCodePoint(text.codePointAt(index)) : '');
+function onBoundaries(text, start, end) {
+    if (WORD.test(charAt(text, start)) && WORD.test(charBefore(text, start)))
+        return false;
+    if (WORD.test(charBefore(text, end)) && WORD.test(charAt(text, end)))
+        return false;
+    return true;
+}
+const patterns = new WeakMap();
+function patternOf(kind) {
+    let re = patterns.get(kind);
+    if (re)
+        return re;
+    const parts = kind.match.type === 'keywords'
+        ? [...kind.match.keywords].sort((a, b) => b.length - a.length).map((k) => escapeRegExp(k.trim().replace(/\s+/g, ' ')).replace(/ /g, '\\s+'))
+        : kind.match.masks.map((m) => parseMask(m)).filter((t) => !!t).map(maskSource);
+    re = new RegExp(parts.length ? parts.join('|') : '(?!)', 'giu');
+    patterns.set(kind, re);
+    return re;
+}
+/** Every custom kind found in text, by span (UTF-16 offsets). */
+function findCustomKinds(text, kinds) {
+    const out = [];
+    if (!text)
+        return out;
+    for (const kind of kinds) {
+        const re = patternOf(kind);
+        re.lastIndex = 0;
+        let m;
+        while ((m = re.exec(text))) {
+            if (m[0].length === 0) {
+                re.lastIndex++;
+                continue;
+            }
+            const start = m.index;
+            const end = start + m[0].length;
+            if (onBoundaries(text, start, end))
+                out.push({ id: kind.id, name: kind.name, start, end });
+            else
+                re.lastIndex = start + 1;
+        }
+    }
+    return out.sort((a, b) => a.start - b.start || b.end - a.end);
+}
+//# sourceMappingURL=custom-kinds.js.map

package/dist/ai-security/custom-kinds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-kinds.js","sourceRoot":"","sources":["../../src/ai-security/custom-kinds.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AA8DH,0CAmBC;AA3ED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;aAChD,IAAI,CAAC,KAAK,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;aAC/C,IAAI,CAAC,KAAK,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;;YAC9C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,YAAY,KAAK,MAAM,CAAC,MAAM,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAC9B,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;AAEtF,SAAS,UAAU,CAAC,MAAmB;IACrC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;SAC3I,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CACjD,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvI,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE5H,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA6B,CAAC;AAE1D,SAAS,SAAS,CAAC,IAAuB;IACxC,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;QAC5B,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5I,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrG,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC;AACZ,CAAC;AAID,iEAAiE;AACjE,SAAgB,eAAe,CAAC,IAAY,EAAE,KAAmC;IAC/E,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3B,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,EAAE,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YACtB,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAChC,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;;gBACtF,EAAE,CAAC,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC"}

package/dist/ai-security/events.d.ts

@@ -0,0 +1,77 @@
+/**
+ * AI security events: what a check found and what it did, sent to Shield360
+ * (POST /api/ai-security/events) in batches off the call path.
+ *
+ * An event carries the check, the kind of finding, the mode and the action
+ * taken, the app, the end customer (tenant and user ids as given: the
+ * platform keeps user ids only as a keyed hash) and per finding a kind, a
+ * masked token and a keyed fingerprint. Never the text that was checked.
+ *
+ * A batch that cannot be delivered is retried a few times and dropped; the
+ * decision was already taken. Repeated identical events (same check, kind,
+ * tool and customer) inside a few seconds are counted into one.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/ai_security/_events.py
+ */
+export declare const AI_SECURITY_EVENT = "shield360.ai_security.event";
+export type AiSecurityCheck = 'indirect_injection' | 'jailbreak' | 'output' | 'tool_permission' | 'limits' | 'mcp' | 'rag'
+/** The SDK's own state, e.g. no pinned config key. */
+ | 'config';
+export type AiSecurityAction = 'reported' | 'stripped' | 'redacted' | 'dropped' | 'blocked' | 'denied' | 'allowed';
+/** Output findings: kind, token, fingerprint. Injection findings: rule, category, masked snippet, fingerprint. */
+export type EventFinding = {
+    kind?: string;
+    masked?: string;
+    fingerprint?: string;
+    rule?: string;
+    category?: string;
+    snippet?: string;
+};
+export type AiSecurityEvent = {
+    check: AiSecurityCheck;
+    /** What was found: injection, jailbreak, pii, secret, custom_kind, cross_tenant, exfil_link, system_prompt_leak, canary_leak, tool_denied, rate_limited, mcp_unknown_server, mcp_unknown_tool, mcp_tool_changed, mcp_tool_poisoned, rag_cross_tenant, rag_hub. */
+    kind: string;
+    mode: 'monitor' | 'enforce';
+    action: AiSecurityAction;
+    /** Where the text came from: prompt, tool_result, document, context, file, output, tool_description. */
+    source?: string;
+    score?: number;
+    rules?: string[];
+    categories?: string[];
+    rulesVersion?: string;
+    tool?: string;
+    server?: string;
+    /** A short, already-masked description (rule snippets, hashes); never content. */
+    detail?: string;
+    findings?: EventFinding[];
+    count?: number;
+};
+export interface EventSink {
+    add(event: AiSecurityEvent): void;
+    flush(): Promise<void>;
+    close(): Promise<void>;
+}
+export declare class EventReporter implements EventSink {
+    private readonly endpoint;
+    private readonly apiKey;
+    private readonly app;
+    private readonly environment;
+    private readonly fetchImpl;
+    private readonly now;
+    private queue;
+    private readonly recent;
+    private readonly timer;
+    private sending;
+    constructor(endpoint: string, apiKey: string, app: string, environment: string, fetchImpl?: typeof fetch, now?: () => number);
+    add(event: AiSecurityEvent): void;
+    flush(): Promise<void>;
+    private post;
+    close(): Promise<void>;
+}
+/** Collects events in memory: for tests, and when no Shield360 URL is configured. */
+export declare class MemorySink implements EventSink {
+    readonly events: AiSecurityEvent[];
+    add(event: AiSecurityEvent): void;
+    flush(): Promise<void>;
+    close(): Promise<void>;
+}