shieldcortex 2.0.0

package/dist/defence/firewall/privilege-detector.js

@@ -0,0 +1,89 @@
+/**
+ * Privilege Detector
+ *
+ * Detects credential references, external URLs, system access,
+ * and network exfiltration attempts in memory content.
+ */
+const INDICATOR_GROUPS = [
+    {
+        name: 'credential_reference',
+        severity: 'high',
+        patterns: [
+            /\bpassword\s*[=:]/i,
+            /\bapi[_-]?key\s*[=:]/i,
+            /\bsecret[_-]?key\s*[=:]/i,
+            /\btoken\s*[=:]/i,
+            /\bbearer\s+[A-Za-z0-9._~+/=-]+/i,
+            /\bauth[_-]?token\s*[=:]/i,
+            /\bcredential\s*[=:]/i,
+            /\bprivate[_-]?key\b/i,
+            /\bAKIA[0-9A-Z]{16}\b/, // AWS access key pattern
+        ],
+    },
+    {
+        name: 'system_access',
+        severity: 'high',
+        patterns: [
+            /\bsudo\b/i,
+            /\bchmod\s+[0-7]{3,4}\b/,
+            /\bchown\b/i,
+            /\/etc\/passwd\b/,
+            /\/etc\/shadow\b/,
+            /\broot\s+access\b/i,
+            /\badmin\s+(access|privileges?|rights?|panel)\b/i,
+        ],
+    },
+    {
+        name: 'destructive_filesystem',
+        severity: 'high',
+        patterns: [
+            /\brm\s+-rf\b/,
+            /\bdel\s+\/f\b/i,
+            /\bformat\s+[a-z]:/i,
+            /\bmkfs\b/,
+            /\brmdir\s+\/s\b/i,
+        ],
+    },
+    {
+        name: 'network_exfiltration',
+        severity: 'medium',
+        patterns: [
+            /\bcurl\s+.*(-d|--data)\b/i,
+            /\bwget\s/i,
+            /\bfetch\s*\(/i,
+            /\bXMLHttpRequest\b/,
+            /\bsend\s+to\s+/i,
+            /\bexfiltrate\b/i,
+            /\bupload\s+to\s+/i,
+        ],
+    },
+    {
+        name: 'external_url',
+        severity: 'low',
+        patterns: [
+            /https?:\/\/[^\s"'<>]+/i,
+        ],
+    },
+];
+const SEVERITY_ORDER = { low: 0, medium: 1, high: 2 };
+export function detectPrivilegeEscalation(content) {
+    const indicators = [];
+    let highestSeverity = 'low';
+    for (const group of INDICATOR_GROUPS) {
+        for (const pattern of group.patterns) {
+            if (pattern.test(content)) {
+                indicators.push(group.name);
+                if (SEVERITY_ORDER[group.severity] > SEVERITY_ORDER[highestSeverity]) {
+                    highestSeverity = group.severity;
+                }
+                break;
+            }
+        }
+    }
+    return {
+        detected: indicators.length > 0,
+        indicators: [...new Set(indicators)],
+        severity: indicators.length > 0 ? highestSeverity : 'low',
+    };
+}
+//# sourceMappingURL=privilege-detector.js.map

package/dist/defence/firewall/privilege-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privilege-detector.js","sourceRoot":"","sources":["../../../src/defence/firewall/privilege-detector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH,MAAM,gBAAgB,GAAqB;IACzC;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE;YACR,oBAAoB;YACpB,uBAAuB;YACvB,0BAA0B;YAC1B,iBAAiB;YACjB,iCAAiC;YACjC,0BAA0B;YAC1B,sBAAsB;YACtB,sBAAsB;YACtB,sBAAsB,EAAE,yBAAyB;SAClD;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE;YACR,WAAW;YACX,wBAAwB;YACxB,YAAY;YACZ,iBAAiB;YACjB,iBAAiB;YACjB,oBAAoB;YACpB,iDAAiD;SAClD;KACF;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE;YACR,cAAc;YACd,gBAAgB;YAChB,oBAAoB;YACpB,UAAU;YACV,kBAAkB;SACnB;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE;YACR,2BAA2B;YAC3B,WAAW;YACX,eAAe;YACf,oBAAoB;YACpB,iBAAiB;YACjB,iBAAiB;YACjB,mBAAmB;SACpB;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE;YACR,wBAAwB;SACzB;KACF;CACF,CAAC;AAEF,MAAM,cAAc,GAA2B,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAE9E,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,eAAe,GAA8B,KAAK,CAAC;IAEvD,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,IAAI,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;oBACrE,eAAe,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACnC,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;QAC/B,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACpC,QAAQ,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK;KAC1D,CAAC;AACJ,CAAC"}

package/dist/defence/fragmentation/assembly-detector.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Assembly detection — scoring heuristics for fragmented payload risk
+ *
+ * Evaluates whether overlapping entities across memories could combine
+ * into a coherent attack payload (e.g., URL + credential = exfiltration).
+ */
+import type { ExtractedEntity } from './entity-extractor.js';
+import type { OverlappingEntity } from './temporal-analyzer.js';
+export interface AssemblyAnalysis {
+    score: number;
+    risk: string;
+    suspiciousPatterns: string[];
+}
+/**
+ * Detect whether overlapping entities suggest payload assembly
+ */
+export declare function detectAssembly(overlapping: OverlappingEntity[], newEntities: ExtractedEntity[]): AssemblyAnalysis;
+//# sourceMappingURL=assembly-detector.d.ts.map

package/dist/defence/fragmentation/assembly-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assembly-detector.d.ts","sourceRoot":"","sources":["../../../src/defence/fragmentation/assembly-detector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,iBAAiB,EAAE,EAChC,WAAW,EAAE,eAAe,EAAE,GAC7B,gBAAgB,CAkFlB"}

package/dist/defence/fragmentation/assembly-detector.js

@@ -0,0 +1,72 @@
+/**
+ * Assembly detection — scoring heuristics for fragmented payload risk
+ *
+ * Evaluates whether overlapping entities across memories could combine
+ * into a coherent attack payload (e.g., URL + credential = exfiltration).
+ */
+/**
+ * Detect whether overlapping entities suggest payload assembly
+ */
+export function detectAssembly(overlapping, newEntities) {
+    if (overlapping.length === 0) {
+        return { score: 0, risk: 'none', suspiciousPatterns: [] };
+    }
+    let score = 0;
+    const suspiciousPatterns = [];
+    const overlapTypes = new Set(overlapping.map(o => o.type));
+    const newTypes = new Set(newEntities.map(e => e.type));
+    const allTypes = new Set([...overlapTypes, ...newTypes]);
+    const allMemoryIds = new Set();
+    for (const o of overlapping) {
+        for (const id of o.memoryIds) {
+            allMemoryIds.add(id);
+        }
+    }
+    const memoryCount = allMemoryIds.size;
+    // URL + credential → high risk
+    if (allTypes.has('url') && (allTypes.has('credential') || allTypes.has('api_key'))) {
+        score += 0.4;
+        suspiciousPatterns.push(`URL and credential entities found across ${memoryCount} memories — possible exfiltration pattern`);
+    }
+    // URL + command → medium risk
+    if (allTypes.has('url') && allTypes.has('command')) {
+        score += 0.3;
+        suspiciousPatterns.push(`URL and command entities found across ${memoryCount} memories — possible remote execution pattern`);
+    }
+    // Command + file path → medium risk
+    if (allTypes.has('command') && allTypes.has('file_path')) {
+        score += 0.25;
+        suspiciousPatterns.push(`Command and file path entities found across ${memoryCount} memories — possible local exploitation pattern`);
+    }
+    // IP address + credential → high risk
+    if (allTypes.has('ip_address') && (allTypes.has('credential') || allTypes.has('api_key'))) {
+        score += 0.4;
+        suspiciousPatterns.push(`IP address and credential entities found across ${memoryCount} memories — possible lateral movement pattern`);
+    }
+    // Multiple overlapping entities from different sources
+    if (memoryCount >= 3) {
+        score += 0.1 * Math.min(memoryCount - 2, 3);
+        suspiciousPatterns.push(`Entities overlap across ${memoryCount} distinct memory sources`);
+    }
+    // More than 3 overlapping entities bonus
+    if (overlapping.length > 3) {
+        score += 0.2;
+        suspiciousPatterns.push(`${overlapping.length} overlapping entities detected — high fragment density`);
+    }
+    score = Math.min(score, 1.0);
+    let risk;
+    if (score >= 0.7) {
+        risk = 'critical';
+    }
+    else if (score >= 0.4) {
+        risk = 'high';
+    }
+    else if (score >= 0.2) {
+        risk = 'medium';
+    }
+    else {
+        risk = 'low';
+    }
+    return { score, risk, suspiciousPatterns };
+}
+//# sourceMappingURL=assembly-detector.js.map

package/dist/defence/fragmentation/assembly-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assembly-detector.js","sourceRoot":"","sources":["../../../src/defence/fragmentation/assembly-detector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,WAAgC,EAChC,WAA8B;IAE9B,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,kBAAkB,GAAa,EAAE,CAAC;IAExC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IAEzD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAC7B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC;IAEtC,+BAA+B;IAC/B,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACnF,KAAK,IAAI,GAAG,CAAC;QACb,kBAAkB,CAAC,IAAI,CACrB,4CAA4C,WAAW,2CAA2C,CACnG,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,KAAK,IAAI,GAAG,CAAC;QACb,kBAAkB,CAAC,IAAI,CACrB,yCAAyC,WAAW,+CAA+C,CACpG,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,KAAK,IAAI,IAAI,CAAC;QACd,kBAAkB,CAAC,IAAI,CACrB,+CAA+C,WAAW,iDAAiD,CAC5G,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,IAAI,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC1F,KAAK,IAAI,GAAG,CAAC;QACb,kBAAkB,CAAC,IAAI,CACrB,mDAAmD,WAAW,+CAA+C,CAC9G,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;QACrB,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,kBAAkB,CAAC,IAAI,CACrB,2BAA2B,WAAW,0BAA0B,CACjE,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,IAAI,GAAG,CAAC;QACb,kBAAkB,CAAC,IAAI,CACrB,GAAG,WAAW,CAAC,MAAM,wDAAwD,CAC9E,CAAC;IACJ,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE7B,IAAI,IAAY,CAAC;IACjB,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QACjB,IAAI,GAAG,UAAU,CAAC;IACpB,CAAC;SAAM,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;SAAM,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;AAC7C,CAAC"}

package/dist/defence/fragmentation/entity-extractor.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Entity extraction from memory content
+ *
+ * Identifies security-relevant entities (URLs, credentials, commands, etc.)
+ * that could be fragments of a larger attack payload.
+ */
+export interface ExtractedEntity {
+    type: 'url' | 'credential' | 'command' | 'file_path' | 'api_key' | 'ip_address';
+    value: string;
+}
+/**
+ * Extract security-relevant entities from content
+ */
+export declare function extractEntities(content: string): ExtractedEntity[];
+/**
+ * Store extracted entities in the fragmentation_entities table
+ */
+export declare function storeExtractedEntities(memoryId: number, entities: ExtractedEntity[]): void;
+//# sourceMappingURL=entity-extractor.d.ts.map

package/dist/defence/fragmentation/entity-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-extractor.d.ts","sourceRoot":"","sources":["../../../src/defence/fragmentation/entity-extractor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,KAAK,GAAG,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IAChF,KAAK,EAAE,MAAM,CAAC;CACf;AAwBD;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,EAAE,CAoDlE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,IAAI,CAe1F"}

package/dist/defence/fragmentation/entity-extractor.js

@@ -0,0 +1,86 @@
+/**
+ * Entity extraction from memory content
+ *
+ * Identifies security-relevant entities (URLs, credentials, commands, etc.)
+ * that could be fragments of a larger attack payload.
+ */
+import { getDatabase } from '../../database/init.js';
+// ── Regex patterns ──
+const URL_PATTERN = /https?:\/\/[^\s"'<>)\]]+/gi;
+const API_KEY_PATTERNS = [
+    /sk-[A-Za-z0-9]{20,}/g, // OpenAI-style
+    /AKIA[A-Z0-9]{16}/g, // AWS access key
+    /ghp_[A-Za-z0-9]{36,}/g, // GitHub PAT
+    /gho_[A-Za-z0-9]{36,}/g, // GitHub OAuth
+    /glpat-[A-Za-z0-9\-_]{20,}/g, // GitLab PAT
+    /xox[bposa]-[A-Za-z0-9\-]+/g, // Slack tokens
+];
+const CREDENTIAL_PATTERN = /(?:token|password|secret|key|auth)[=:\s]+["']?([A-Za-z0-9_\-]{20,})["']?/gi;
+const COMMAND_PATTERNS = /(?:^|\s)((?:curl|wget|ssh|scp|rsync|chmod|chown|rm|sudo|apt|yum|pip|npm|docker|kubectl|nc|ncat|bash|sh|python|perl|ruby|eval|exec)\s+[^\n]{3,})/gim;
+const UNIX_PATH_PATTERN = /(?:^|\s)(\/(?:etc|var|tmp|usr|home|opt|root|dev|proc|sys|bin|sbin)\/[^\s"'<>]+)/gm;
+const WINDOWS_PATH_PATTERN = /(?:^|\s)([A-Z]:\\[^\s"'<>]+)/gm;
+const IPV4_PATTERN = /\b(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})\b/g;
+/**
+ * Extract security-relevant entities from content
+ */
+export function extractEntities(content) {
+    const entities = [];
+    const seen = new Set();
+    const add = (type, value) => {
+        const key = `${type}:${value}`;
+        if (!seen.has(key)) {
+            seen.add(key);
+            entities.push({ type, value });
+        }
+    };
+    // URLs
+    for (const match of content.matchAll(URL_PATTERN)) {
+        add('url', match[0]);
+    }
+    // API keys (check before generic credentials)
+    for (const pattern of API_KEY_PATTERNS) {
+        for (const match of content.matchAll(pattern)) {
+            add('api_key', match[0]);
+        }
+    }
+    // Credentials
+    for (const match of content.matchAll(CREDENTIAL_PATTERN)) {
+        add('credential', match[1]);
+    }
+    // Commands
+    for (const match of content.matchAll(COMMAND_PATTERNS)) {
+        add('command', match[1].trim());
+    }
+    // File paths
+    for (const match of content.matchAll(UNIX_PATH_PATTERN)) {
+        add('file_path', match[1]);
+    }
+    for (const match of content.matchAll(WINDOWS_PATH_PATTERN)) {
+        add('file_path', match[1]);
+    }
+    // IP addresses
+    for (const match of content.matchAll(IPV4_PATTERN)) {
+        const ip = match[1];
+        const parts = ip.split('.').map(Number);
+        if (parts.every(p => p >= 0 && p <= 255)) {
+            add('ip_address', ip);
+        }
+    }
+    return entities;
+}
+/**
+ * Store extracted entities in the fragmentation_entities table
+ */
+export function storeExtractedEntities(memoryId, entities) {
+    if (entities.length === 0)
+        return;
+    const db = getDatabase();
+    const stmt = db.prepare('INSERT INTO fragmentation_entities (memory_id, entity_type, entity_value) VALUES (?, ?, ?)');
+    const insertMany = db.transaction((items) => {
+        for (const entity of items) {
+            stmt.run(memoryId, entity.type, entity.value);
+        }
+    });
+    insertMany(entities);
+}
+//# sourceMappingURL=entity-extractor.js.map

package/dist/defence/fragmentation/entity-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-extractor.js","sourceRoot":"","sources":["../../../src/defence/fragmentation/entity-extractor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAOrD,uBAAuB;AAEvB,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAEjD,MAAM,gBAAgB,GAAG;IACvB,sBAAsB,EAAQ,eAAe;IAC7C,mBAAmB,EAAW,iBAAiB;IAC/C,uBAAuB,EAAO,aAAa;IAC3C,uBAAuB,EAAO,eAAe;IAC7C,4BAA4B,EAAE,aAAa;IAC3C,4BAA4B,EAAE,eAAe;CAC9C,CAAC;AAEF,MAAM,kBAAkB,GAAG,4EAA4E,CAAC;AAExG,MAAM,gBAAgB,GAAG,oJAAoJ,CAAC;AAE9K,MAAM,iBAAiB,GAAG,mFAAmF,CAAC;AAC9G,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAE9D,MAAM,YAAY,GAAG,2CAA2C,CAAC;AAEjE;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,MAAM,GAAG,GAAG,CAAC,IAA6B,EAAE,KAAa,EAAE,EAAE;QAC3D,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;IACP,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,8CAA8C;IAC9C,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,cAAc;IACd,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,WAAW;IACX,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,aAAa;IACb,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,eAAe;IACf,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,QAA2B;IAClF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,4FAA4F,CAC7F,CAAC;IAEF,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,KAAwB,EAAE,EAAE;QAC7D,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,QAAQ,CAAC,CAAC;AACvB,CAAC"}

package/dist/defence/fragmentation/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Fragmentation Detector
+ *
+ * Detects fragmented payload assembly — the attack vector where individually
+ * benign memories combine into an attack when assembled. Inspired by the
+ * Palo Alto research on memory poisoning through fragment accumulation.
+ */
+import type { DefenceConfig, FragmentationAnalysis } from '../types.js';
+export { extractEntities, storeExtractedEntities } from './entity-extractor.js';
+export type { ExtractedEntity } from './entity-extractor.js';
+export { getRecentEntities, findOverlappingEntities } from './temporal-analyzer.js';
+export type { OverlappingEntity } from './temporal-analyzer.js';
+export { detectAssembly } from './assembly-detector.js';
+export type { AssemblyAnalysis } from './assembly-detector.js';
+/**
+ * Full fragmentation analysis pipeline for incoming content
+ */
+export declare function analyzeFragmentation(content: string, title: string, config: DefenceConfig): FragmentationAnalysis;
+/**
+ * Store fragmentation data for a newly created memory
+ */
+export declare function storeFragmentationData(memoryId: number, content: string): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/defence/fragmentation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/defence/fragmentation/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAKxE,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAChF,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACpF,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,aAAa,GACpB,qBAAqB,CA+BvB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAG9E"}

package/dist/defence/fragmentation/index.js

@@ -0,0 +1,49 @@
+/**
+ * Fragmentation Detector
+ *
+ * Detects fragmented payload assembly — the attack vector where individually
+ * benign memories combine into an attack when assembled. Inspired by the
+ * Palo Alto research on memory poisoning through fragment accumulation.
+ */
+import { extractEntities, storeExtractedEntities } from './entity-extractor.js';
+import { findOverlappingEntities } from './temporal-analyzer.js';
+import { detectAssembly } from './assembly-detector.js';
+export { extractEntities, storeExtractedEntities } from './entity-extractor.js';
+export { getRecentEntities, findOverlappingEntities } from './temporal-analyzer.js';
+export { detectAssembly } from './assembly-detector.js';
+/**
+ * Full fragmentation analysis pipeline for incoming content
+ */
+export function analyzeFragmentation(content, title, config) {
+    const fullText = `${title}\n${content}`;
+    const newEntities = extractEntities(fullText);
+    if (newEntities.length === 0) {
+        return {
+            score: 0,
+            relatedMemoryIds: [],
+            suspiciousEntities: [],
+            assemblyRisk: 'none',
+        };
+    }
+    const windowHours = config.fragmentationWindowHours;
+    const overlapping = findOverlappingEntities(newEntities, windowHours);
+    const assembly = detectAssembly(overlapping, newEntities);
+    const relatedMemoryIds = [
+        ...new Set(overlapping.flatMap(o => o.memoryIds)),
+    ];
+    const suspiciousEntities = overlapping.map(o => `${o.type}:${o.value} (${o.occurrences} occurrences)`);
+    return {
+        score: assembly.score,
+        relatedMemoryIds,
+        suspiciousEntities,
+        assemblyRisk: assembly.risk,
+    };
+}
+/**
+ * Store fragmentation data for a newly created memory
+ */
+export function storeFragmentationData(memoryId, content) {
+    const entities = extractEntities(content);
+    storeExtractedEntities(memoryId, entities);
+}
+//# sourceMappingURL=index.js.map

package/dist/defence/fragmentation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/defence/fragmentation/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEhF,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEpF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,KAAa,EACb,MAAqB;IAErB,MAAM,QAAQ,GAAG,GAAG,KAAK,KAAK,OAAO,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE9C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,CAAC;YACR,gBAAgB,EAAE,EAAE;YACpB,kBAAkB,EAAE,EAAE;YACtB,YAAY,EAAE,MAAM;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,wBAAwB,CAAC;IACpD,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAE1D,MAAM,gBAAgB,GAAG;QACvB,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;KAClD,CAAC;IAEF,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CACxC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,WAAW,eAAe,CAC3D,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,gBAAgB;QAChB,kBAAkB;QAClB,YAAY,EAAE,QAAQ,CAAC,IAAI;KAC5B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,OAAe;IACtE,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC"}

package/dist/defence/fragmentation/temporal-analyzer.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Temporal analysis of entity fragments
+ *
+ * Looks for entity overlap across memories within a time window,
+ * detecting potential fragment assembly over time.
+ */
+import type { ExtractedEntity } from './entity-extractor.js';
+export interface OverlappingEntity {
+    type: string;
+    value: string;
+    occurrences: number;
+    memoryIds: number[];
+}
+export interface RecentEntity {
+    entity_type: string;
+    entity_value: string;
+    memory_id: number;
+    detected_at: string;
+}
+/**
+ * Query fragmentation_entities for entries within the time window
+ */
+export declare function getRecentEntities(windowHours: number): RecentEntity[];
+/**
+ * Find entities from the new memory that also appear in recent memories
+ */
+export declare function findOverlappingEntities(entities: ExtractedEntity[], windowHours: number): OverlappingEntity[];
+//# sourceMappingURL=temporal-analyzer.d.ts.map

package/dist/defence/fragmentation/temporal-analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temporal-analyzer.d.ts","sourceRoot":"","sources":["../../../src/defence/fragmentation/temporal-analyzer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,EAAE,CAUrE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,eAAe,EAAE,EAC3B,WAAW,EAAE,MAAM,GAClB,iBAAiB,EAAE,CAuBrB"}

package/dist/defence/fragmentation/temporal-analyzer.js

@@ -0,0 +1,41 @@
+/**
+ * Temporal analysis of entity fragments
+ *
+ * Looks for entity overlap across memories within a time window,
+ * detecting potential fragment assembly over time.
+ */
+import { getDatabase } from '../../database/init.js';
+/**
+ * Query fragmentation_entities for entries within the time window
+ */
+export function getRecentEntities(windowHours) {
+    const db = getDatabase();
+    const rows = db.prepare(`SELECT entity_type, entity_value, memory_id, detected_at
+     FROM fragmentation_entities
+     WHERE detected_at >= datetime('now', ? || ' hours')
+     ORDER BY detected_at DESC`).all(-windowHours);
+    return rows;
+}
+/**
+ * Find entities from the new memory that also appear in recent memories
+ */
+export function findOverlappingEntities(entities, windowHours) {
+    if (entities.length === 0)
+        return [];
+    const recent = getRecentEntities(windowHours);
+    const overlapping = [];
+    for (const entity of entities) {
+        const matches = recent.filter(r => r.entity_type === entity.type && r.entity_value === entity.value);
+        if (matches.length > 0) {
+            const memoryIds = [...new Set(matches.map(m => m.memory_id))];
+            overlapping.push({
+                type: entity.type,
+                value: entity.value,
+                occurrences: matches.length,
+                memoryIds,
+            });
+        }
+    }
+    return overlapping;
+}
+//# sourceMappingURL=temporal-analyzer.js.map

package/dist/defence/fragmentation/temporal-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"temporal-analyzer.js","sourceRoot":"","sources":["../../../src/defence/fragmentation/temporal-analyzer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAiBrD;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB;;;+BAG2B,CAC5B,CAAC,GAAG,CAAC,CAAC,WAAW,CAAmB,CAAC;IAEtC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAA2B,EAC3B,WAAmB;IAEnB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAwB,EAAE,CAAC;IAE5C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK,CACtE,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9D,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW,EAAE,OAAO,CAAC,MAAM;gBAC3B,SAAS;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/defence/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Defence layer — top-level re-exports
+ */
+export { runDefencePipeline } from './pipeline.js';
+export { DEFAULT_DEFENCE_CONFIG } from './types.js';
+export type { DefenceConfig, DefencePipelineResult, DefenceSource, FirewallAnalysis, FirewallResult, FragmentationAnalysis, SensitivityClassification, SensitivityLevel, ThreatIndicator, TrustScore, QuarantineEntry, AuditEntry, } from './types.js';
+export { scoreSource, filterByTrust } from './trust/index.js';
+export { analyzeFirewall } from './firewall/index.js';
+export { classifySensitivity, redactContent, redactForDisplay } from './sensitivity/index.js';
+export { analyzeFragmentation, storeFragmentationData } from './fragmentation/index.js';
+export { logAudit, queryAuditLogs, getAuditStats } from './audit/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/defence/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/defence/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,EACf,UAAU,EACV,eAAe,EACf,UAAU,GACX,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAG9D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG9F,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAGxF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/defence/index.js

@@ -0,0 +1,18 @@
+/**
+ * Defence layer — top-level re-exports
+ */
+// Pipeline
+export { runDefencePipeline } from './pipeline.js';
+// Config & types
+export { DEFAULT_DEFENCE_CONFIG } from './types.js';
+// Trust
+export { scoreSource, filterByTrust } from './trust/index.js';
+// Firewall
+export { analyzeFirewall } from './firewall/index.js';
+// Sensitivity
+export { classifySensitivity, redactContent, redactForDisplay } from './sensitivity/index.js';
+// Fragmentation
+export { analyzeFragmentation, storeFragmentationData } from './fragmentation/index.js';
+// Audit
+export { logAudit, queryAuditLogs, getAuditStats } from './audit/index.js';
+//# sourceMappingURL=index.js.map

package/dist/defence/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/defence/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,WAAW;AACX,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,iBAAiB;AACjB,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAgBpD,QAAQ;AACR,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE9D,WAAW;AACX,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,cAAc;AACd,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE9F,gBAAgB;AAChB,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAExF,QAAQ;AACR,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/defence/pipeline.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Defence Pipeline Orchestrator
+ *
+ * Runs all 5 defence layers in sequence and returns a unified result.
+ * Fail-open: if any layer throws, the pipeline defaults to ALLOW with a warning.
+ */
+import type { DefenceConfig, DefencePipelineResult, DefenceSource } from './types.js';
+export declare function runDefencePipeline(content: string, title: string, source: DefenceSource, config?: DefenceConfig): DefencePipelineResult;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/defence/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/defence/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,qBAAqB,EACrB,aAAa,EAKd,MAAM,YAAY,CAAC;AASpB,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,aAAa,EACrB,MAAM,CAAC,EAAE,aAAa,GACrB,qBAAqB,CAqHvB"}

package/dist/defence/pipeline.js

@@ -0,0 +1,115 @@
+/**
+ * Defence Pipeline Orchestrator
+ *
+ * Runs all 5 defence layers in sequence and returns a unified result.
+ * Fail-open: if any layer throws, the pipeline defaults to ALLOW with a warning.
+ */
+import { DEFAULT_DEFENCE_CONFIG } from './types.js';
+import { scoreSource } from './trust/index.js';
+import { analyzeFirewall } from './firewall/index.js';
+import { classifySensitivity } from './sensitivity/index.js';
+import { analyzeFragmentation } from './fragmentation/index.js';
+import { logAudit, createContentHash } from './audit/index.js';
+export function runDefencePipeline(content, title, source, config) {
+    const cfg = config ?? DEFAULT_DEFENCE_CONFIG;
+    const startTime = performance.now();
+    try {
+        // 1. Score trust
+        const trust = scoreSource(source);
+        // 2. Run firewall
+        const firewall = analyzeFirewall(content, title, source, trust.score, cfg);
+        // 3. Classify sensitivity
+        const sensitivity = classifySensitivity(content, title);
+        // 4. Run fragmentation detection (if enabled and firewall didn't block)
+        let fragmentation = null;
+        if (cfg.enableFragmentationDetection && firewall.result !== 'BLOCK') {
+            fragmentation = analyzeFragmentation(content, title, cfg);
+        }
+        // 5. Determine final decision
+        let allowed;
+        let reason;
+        if (firewall.result === 'BLOCK') {
+            allowed = false;
+            reason = firewall.reason;
+        }
+        else if (fragmentation !== null &&
+            fragmentation.score > cfg.autoQuarantineThreshold) {
+            allowed = false;
+            reason = `Quarantined: fragmentation score ${fragmentation.score} exceeds threshold ${cfg.autoQuarantineThreshold}`;
+        }
+        else {
+            allowed = true;
+            reason = firewall.reason;
+        }
+        const durationMs = Math.round(performance.now() - startTime);
+        // 6. Log audit
+        const _contentHash = createContentHash(content);
+        const auditId = logAudit({
+            memory_id: null,
+            timestamp: new Date().toISOString(),
+            source_type: source.type,
+            source_identifier: source.identifier,
+            trust_score: trust.score,
+            sensitivity_level: sensitivity.level,
+            firewall_result: firewall.result,
+            anomaly_score: firewall.anomalyScore,
+            threat_indicators: JSON.stringify(firewall.threatIndicators),
+            blocked_patterns: JSON.stringify(firewall.blockedPatterns),
+            reason,
+            fragmentation_score: fragmentation?.score ?? null,
+            pipeline_duration_ms: durationMs,
+        });
+        return {
+            allowed,
+            firewall,
+            fragmentation,
+            sensitivity,
+            trust,
+            auditId,
+        };
+    }
+    catch (err) {
+        // Fail-open: log warning and allow
+        const durationMs = Math.round(performance.now() - startTime);
+        console.error('[defence] Pipeline error, failing open:', err);
+        const auditId = logAudit({
+            memory_id: null,
+            timestamp: new Date().toISOString(),
+            source_type: source.type,
+            source_identifier: source.identifier,
+            trust_score: 0,
+            sensitivity_level: 'PUBLIC',
+            firewall_result: 'ALLOW',
+            anomaly_score: 0,
+            threat_indicators: '[]',
+            blocked_patterns: '[]',
+            reason: `Pipeline error (fail-open): ${err instanceof Error ? err.message : String(err)}`,
+            fragmentation_score: null,
+            pipeline_duration_ms: durationMs,
+        });
+        return {
+            allowed: true,
+            firewall: {
+                result: 'ALLOW',
+                reason: 'Pipeline error — fail-open default',
+                threatIndicators: [],
+                anomalyScore: 0,
+                blockedPatterns: [],
+            },
+            fragmentation: null,
+            sensitivity: {
+                level: 'PUBLIC',
+                confidence: 0,
+                detectedPatterns: [],
+                redactionRequired: false,
+            },
+            trust: {
+                score: 0,
+                source,
+                hierarchy: [],
+            },
+            auditId,
+        };
+    }
+}
+//# sourceMappingURL=pipeline.js.map