shieldcortex 2.13.2 → 2.14.0

package/dist/cli/iron-dome.js

@@ -0,0 +1,219 @@
+/**
+ * Iron Dome CLI Commands
+ *
+ * Usage:
+ *   shieldcortex iron-dome activate [--profile school|enterprise|personal|paranoid]
+ *   shieldcortex iron-dome status
+ *   shieldcortex iron-dome deactivate
+ *   shieldcortex iron-dome scan --text "..."
+ *   shieldcortex iron-dome scan --file <path>
+ *   shieldcortex iron-dome audit [--tail] [--search <term>] [--date <date>]
+ */
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { initDatabase } from '../database/init.js';
+import { activateIronDome, deactivateIronDome, getIronDomeStatus, scanForInjection, } from '../defence/iron-dome/index.js';
+import { queryAuditLogs } from '../defence/audit/index.js';
+const bold = '\x1b[1m';
+const reset = '\x1b[0m';
+const green = '\x1b[32m';
+const red = '\x1b[31m';
+const yellow = '\x1b[33m';
+const cyan = '\x1b[36m';
+const dim = '\x1b[2m';
+/**
+ * Ensure database is initialised for CLI commands.
+ */
+function ensureDb() {
+    const dbPath = process.env.CLAUDE_MEMORY_DB || path.join(os.homedir(), '.shieldcortex', 'memories.db');
+    initDatabase(dbPath);
+}
+/**
+ * Handle the `iron-dome` subcommand.
+ */
+export async function handleIronDomeCommand(args) {
+    const subcommand = args[0];
+    if (!subcommand || subcommand === '--help' || subcommand === '-h') {
+        printUsage();
+        return;
+    }
+    ensureDb();
+    switch (subcommand) {
+        case 'activate':
+            handleActivate(args.slice(1));
+            break;
+        case 'status':
+            handleStatus();
+            break;
+        case 'deactivate':
+            handleDeactivate();
+            break;
+        case 'scan':
+            handleScan(args.slice(1));
+            break;
+        case 'audit':
+            handleAudit(args.slice(1));
+            break;
+        default:
+            console.error(`Unknown iron-dome command: ${subcommand}`);
+            printUsage();
+            process.exit(1);
+    }
+}
+function printUsage() {
+    console.log(`
+${bold}Iron Dome — Behaviour Protection Layer${reset}
+
+${bold}Usage:${reset}
+  shieldcortex iron-dome activate [--profile <profile>]
+  shieldcortex iron-dome status
+  shieldcortex iron-dome deactivate
+  shieldcortex iron-dome scan --text "..." | --file <path>
+  shieldcortex iron-dome audit [--tail] [--search <term>]
+
+${bold}Profiles:${reset}
+  school       GDPR strict, pupil data locked
+  enterprise   Financial protection, compliance
+  personal     Lighter touch for personal use
+  paranoid     Everything requires approval
+`);
+}
+function handleActivate(args) {
+    let profile;
+    const profileIdx = args.indexOf('--profile');
+    if (profileIdx !== -1 && args[profileIdx + 1]) {
+        const p = args[profileIdx + 1];
+        if (!['school', 'enterprise', 'personal', 'paranoid'].includes(p)) {
+            console.error(`${red}Unknown profile: ${p}${reset}`);
+            console.error(`Available: school, enterprise, personal, paranoid`);
+            process.exit(1);
+        }
+        profile = p;
+    }
+    const config = activateIronDome(profile);
+    console.log(`
+${bold}${green}Iron Dome Activated${reset}
+
+  Profile:          ${config.profile ?? 'default'}
+  Trusted channels: ${config.trustedChannels.join(', ')}
+  Kill phrase:      "${config.killPhrase}"
+  Require approval: ${config.requireApproval.length} action type(s)
+  Auto-approve:     ${config.autoApprove.length} action type(s)
+  PII never output: ${config.piiRules.neverOutput.length} categories
+  PII aggregates:   ${config.piiRules.aggregatesOnly.length} categories
+`);
+}
+function handleStatus() {
+    const status = getIronDomeStatus();
+    if (!status.enabled) {
+        console.log(`
+${bold}Iron Dome Status${reset}
+${'─'.repeat(40)}
+  Status: ${dim}INACTIVE${reset}
+
+  Run ${cyan}shieldcortex iron-dome activate${reset} to enable.
+`);
+        return;
+    }
+    const c = status.config;
+    console.log(`
+${bold}Iron Dome Status${reset}
+${'─'.repeat(40)}
+  Status:           ${green}ACTIVE${reset}
+  Profile:          ${c.profile ?? 'custom'}
+  Trusted channels: ${c.trustedChannels.join(', ')}
+  Kill phrase:      "${c.killPhrase}"
+  Require approval: ${c.requireApproval.join(', ')}
+  Auto-approve:     ${c.autoApprove.join(', ')}
+  PII never output: ${c.piiRules.neverOutput.length > 0 ? c.piiRules.neverOutput.join(', ') : '(none)'}
+  PII aggregates:   ${c.piiRules.aggregatesOnly.length > 0 ? c.piiRules.aggregatesOnly.join(', ') : '(none)'}
+  Sub-agent blocks: ${c.subAgentRestrictions.blockedOperations.length > 0 ? c.subAgentRestrictions.blockedOperations.join(', ') : '(none)'}
+  Sanitise context: ${c.subAgentRestrictions.sanitiseContext ? 'yes' : 'no'}
+`);
+}
+function handleDeactivate() {
+    deactivateIronDome();
+    console.log(`${bold}Iron Dome deactivated.${reset}`);
+}
+function handleScan(args) {
+    let text;
+    const textIdx = args.indexOf('--text');
+    const fileIdx = args.indexOf('--file');
+    if (textIdx !== -1 && args[textIdx + 1]) {
+        text = args[textIdx + 1];
+    }
+    else if (fileIdx !== -1 && args[fileIdx + 1]) {
+        const filePath = args[fileIdx + 1];
+        try {
+            text = fs.readFileSync(filePath, 'utf-8');
+        }
+        catch (err) {
+            console.error(`${red}Error reading file: ${err.message}${reset}`);
+            process.exit(2);
+        }
+    }
+    if (!text) {
+        console.error('Usage: shieldcortex iron-dome scan --text "..." | --file <path>');
+        process.exit(1);
+    }
+    const result = scanForInjection(text);
+    if (result.clean) {
+        console.log(`${green}CLEAN${reset} — No injection patterns detected (${result.textLength} chars scanned)`);
+        process.exit(0);
+    }
+    console.log(`\n${'!'.repeat(3)}  ${red}${bold}INJECTION DETECTED${reset}  ${'!'.repeat(3)}`);
+    console.log(`Risk level: ${result.riskLevel}`);
+    console.log(`Detections: ${result.detections.length}`);
+    console.log(`Scanned:    ${result.textLength} chars`);
+    console.log();
+    // Group by category
+    const byCat = {};
+    for (const d of result.detections) {
+        (byCat[d.category] ??= []).push(d);
+    }
+    for (const [cat, dets] of Object.entries(byCat).sort(([a], [b]) => a.localeCompare(b))) {
+        console.log(`  ${bold}[${cat}]${reset}`);
+        for (const d of dets) {
+            const sColor = d.severity === 'critical' ? red : d.severity === 'high' ? red : d.severity === 'medium' ? yellow : cyan;
+            console.log(`    ${sColor}[${d.severity.toUpperCase()}]${reset} ${d.pattern}: ${d.description}`);
+            const preview = d.match.slice(0, 120);
+            const suffix = d.match.length > 120 ? '...' : '';
+            console.log(`           ${dim}matched: "${preview}${suffix}"${reset}`);
+        }
+        console.log();
+    }
+    process.exit(1);
+}
+function handleAudit(args) {
+    const searchIdx = args.indexOf('--search');
+    const search = searchIdx !== -1 ? args[searchIdx + 1] : undefined;
+    const tail = args.includes('--tail');
+    const logs = queryAuditLogs({
+        firewallResult: undefined,
+        limit: tail ? 20 : 50,
+    });
+    // Filter to iron-dome entries
+    const ironDomeLogs = logs.filter((log) => log.reason?.startsWith('[iron-dome:'));
+    if (search) {
+        const filtered = ironDomeLogs.filter((log) => log.reason?.toLowerCase().includes(search.toLowerCase()));
+        printAuditLogs(filtered);
+    }
+    else {
+        printAuditLogs(ironDomeLogs);
+    }
+}
+function printAuditLogs(logs) {
+    if (logs.length === 0) {
+        console.log(`${dim}No Iron Dome audit entries found.${reset}`);
+        return;
+    }
+    console.log(`\n${bold}Iron Dome Audit Log${reset} (${logs.length} entries)`);
+    console.log('─'.repeat(60));
+    for (const log of logs) {
+        const resultColor = log.firewall_result === 'ALLOW' ? green : red;
+        console.log(`  ${dim}${log.timestamp}${reset} ${resultColor}${log.firewall_result}${reset} ${log.reason ?? ''}`);
+    }
+    console.log();
+}
+//# sourceMappingURL=iron-dome.js.map

package/dist/cli/iron-dome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iron-dome.js","sourceRoot":"","sources":["../../src/cli/iron-dome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,GAAG,GAAG,SAAS,CAAC;AAEtB;;GAEG;AACH,SAAS,QAAQ;IACf,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;IACvG,YAAY,CAAC,MAAM,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAc;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAClE,UAAU,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,QAAQ,EAAE,CAAC;IAEX,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,UAAU;YACb,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM;QACR,KAAK,QAAQ;YACX,YAAY,EAAE,CAAC;YACf,MAAM;QACR,KAAK,YAAY;YACf,gBAAgB,EAAE,CAAC;YACnB,MAAM;QACR,KAAK,MAAM;YACT,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM;QACR,KAAK,OAAO;YACV,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM;QACR;YACE,OAAO,CAAC,KAAK,CAAC,8BAA8B,UAAU,EAAE,CAAC,CAAC;YAC1D,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CAAC;EACZ,IAAI,yCAAyC,KAAK;;EAElD,IAAI,SAAS,KAAK;;;;;;;EAOlB,IAAI,YAAY,KAAK;;;;;CAKtB,CAAC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,IAAI,OAAoC,CAAC;IAEzC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAoB,CAAC;QAClD,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,oBAAoB,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,CAAC,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEzC,OAAO,CAAC,GAAG,CAAC;EACZ,IAAI,GAAG,KAAK,sBAAsB,KAAK;;sBAEnB,MAAM,CAAC,OAAO,IAAI,SAAS;sBAC3B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;uBAChC,MAAM,CAAC,UAAU;sBAClB,MAAM,CAAC,eAAe,CAAC,MAAM;sBAC7B,MAAM,CAAC,WAAW,CAAC,MAAM;sBACzB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM;sBAClC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM;CAC1D,CAAC,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IAEnC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC;EACd,IAAI,mBAAmB,KAAK;EAC5B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACJ,GAAG,WAAW,KAAK;;QAEvB,IAAI,kCAAkC,KAAK;CAClD,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC;EACZ,IAAI,mBAAmB,KAAK;EAC5B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;sBACM,KAAK,SAAS,KAAK;sBACnB,CAAC,CAAC,OAAO,IAAI,QAAQ;sBACrB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;uBAC3B,CAAC,CAAC,UAAU;sBACb,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;sBAC5B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;sBACxB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ;sBAChF,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ;sBACtF,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ;sBACpH,CAAC,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;CAC1E,CAAC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB;IACvB,kBAAkB,EAAE,CAAC;IACrB,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,yBAAyB,KAAK,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,IAAI,IAAwB,CAAC;IAE7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAC3B,CAAC;SAAM,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,uBAAuB,GAAG,CAAC,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEtC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,QAAQ,KAAK,sCAAsC,MAAM,CAAC,UAAU,iBAAiB,CAAC,CAAC;QAC3G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,IAAI,qBAAqB,KAAK,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,UAAU,QAAQ,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,oBAAoB;IACpB,MAAM,KAAK,GAA6C,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACvH,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACjG,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,aAAa,OAAO,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAAc;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAErC,MAAM,IAAI,GAAG,cAAc,CAAC;QAC1B,cAAc,EAAE,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;KACtB,CAAC,CAAC;IAEH,8BAA8B;IAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAC9B,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,CACpD,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAClC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CACvE,CAAC;QACF,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,cAAc,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAW;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,oCAAoC,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,sBAAsB,KAAK,KAAK,IAAI,CAAC,MAAM,WAAW,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,CAAC,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,SAAS,GAAG,KAAK,IAAI,WAAW,GAAG,GAAG,CAAC,eAAe,GAAG,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;IACnH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC"}

package/dist/cloud/quarantine-sync.d.ts

@@ -1,6 +1,6 @@
 /**
  * Fire-and-forget: sends quarantined content to ShieldCortex cloud.
- * Never blocks, never throws. Silently swallows all errors.
+ * Never blocks, never throws. Failed requests are logged and queued for retry.
  */
 export declare function syncQuarantineToCloud(entry: {
     original_content: string;

package/dist/cloud/quarantine-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quarantine-sync.d.ts","sourceRoot":"","sources":["../../src/cloud/quarantine-sync.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,IAAI,CA0BP"}
+{"version":3,"file":"quarantine-sync.d.ts","sourceRoot":"","sources":["../../src/cloud/quarantine-sync.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,IAAI,CAmCP"}

package/dist/cloud/quarantine-sync.js

@@ -1,7 +1,8 @@
 import { getCloudConfig, getDeviceId, getDeviceName } from './config.js';
+import { enqueueFailedQuarantineSync } from './sync-queue.js';
 /**
  * Fire-and-forget: sends quarantined content to ShieldCortex cloud.
- * Never blocks, never throws. Silently swallows all errors.
+ * Never blocks, never throws. Failed requests are logged and queued for retry.
  */
 export function syncQuarantineToCloud(entry) {
     const config = getCloudConfig();
@@ -25,7 +26,22 @@ export function syncQuarantineToCloud(entry) {
         body: JSON.stringify(payload),
         signal: controller.signal,
     })
-        .catch(() => { })
+        .then((res) => {
+        if (!res?.ok) {
+            console.error(`[shieldcortex] Quarantine sync failed: HTTP ${res.status}`);
+            try {
+                enqueueFailedQuarantineSync(payload);
+            }
+            catch { /* non-critical */ }
+        }
+    })
+        .catch((e) => {
+        console.error('[shieldcortex] Quarantine sync failed:', e instanceof Error ? e.message : String(e));
+        try {
+            enqueueFailedQuarantineSync(payload);
+        }
+        catch { /* non-critical */ }
+    })
         .finally(() => clearTimeout(timeout));
 }
 //# sourceMappingURL=quarantine-sync.js.map

package/dist/cloud/quarantine-sync.js.map

@@ -1 +1 @@
-{"version":3,"file":"quarantine-sync.js","sourceRoot":"","sources":["../../src/cloud/quarantine-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzE;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KASrC;IACC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW;QAAE,OAAO;IAExD,MAAM,OAAO,GAAG;QACd,GAAG,KAAK;QACR,SAAS,EAAE,WAAW,EAAE;QACxB,WAAW,EAAE,aAAa,EAAE;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,YAAY,uBAAuB,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAE7D,KAAK,CAAC,GAAG,EAAE;QACT,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;SAC9C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC;SACC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;SACf,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"quarantine-sync.js","sourceRoot":"","sources":["../../src/cloud/quarantine-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAE9D;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KASrC;IACC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW;QAAE,OAAO;IAExD,MAAM,OAAO,GAAG;QACd,GAAG,KAAK;QACR,SAAS,EAAE,WAAW,EAAE;QACxB,WAAW,EAAE,aAAa,EAAE;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,YAAY,uBAAuB,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAE7D,KAAK,CAAC,GAAG,EAAE;QACT,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;SAC9C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC;SACC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACZ,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,+CAA+C,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC;gBAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;QACpB,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,CAAC;YAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/cloud/sync-queue.d.ts

@@ -2,6 +2,7 @@
  * Cloud Sync Retry Queue
  *
  * Replaces fire-and-forget cloud sync with a queue that retries failed syncs.
+ * Supports both audit metadata sync and quarantine content sync payloads.
  * Uses SQLite sync_queue table with exponential backoff.
  */
 export interface SyncEntry {
@@ -19,6 +20,19 @@ export interface SyncEntry {
     platform: string;
     timestamp: string;
 }
+export interface QuarantineSyncEntry {
+    original_content: string;
+    original_title?: string;
+    source_type: string;
+    source_identifier: string;
+    reason: string;
+    threat_indicators: string[];
+    anomaly_score: number;
+    firewall_result: string;
+    device_id: string;
+    device_name: string;
+    timestamp: string;
+}
 export interface QueueStats {
     pending: number;
     failed: number;
@@ -35,6 +49,10 @@ export interface SyncQueueResult {
  * INSERT into sync_queue with exponential backoff schedule.
  */
 export declare function enqueueFailedSync(entry: SyncEntry): void;
+/**
+ * Enqueue a failed quarantine sync entry for later retry.
+ */
+export declare function enqueueFailedQuarantineSync(entry: QuarantineSyncEntry): void;
 /**
  * Process pending items in the retry queue.
  * SELECT pending WHERE next_retry_at <= now, retry each (up to 10 per tick).

package/dist/cloud/sync-queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-queue.d.ts","sourceRoot":"","sources":["../../src/cloud/sync-queue.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CASxD;AA8BD;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,eAAe,CAAC,CA8ElE;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,UAAU,CAiB1C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CASxC"}
+{"version":3,"file":"sync-queue.d.ts","sourceRoot":"","sources":["../../src/cloud/sync-queue.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAExD;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAE5E;AAmFD;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,eAAe,CAAC,CA+ElE;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,UAAU,CAiB1C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CASxC"}

package/dist/cloud/sync-queue.js

@@ -2,6 +2,7 @@
  * Cloud Sync Retry Queue
  *
  * Replaces fire-and-forget cloud sync with a queue that retries failed syncs.
+ * Supports both audit metadata sync and quarantine content sync payloads.
  * Uses SQLite sync_queue table with exponential backoff.
  */
 import { getDatabase } from '../database/init.js';
@@ -11,13 +12,55 @@ import { getCloudConfig, updateLastSyncAt } from './config.js';
  * INSERT into sync_queue with exponential backoff schedule.
  */
 export function enqueueFailedSync(entry) {
+    enqueuePayload({ kind: 'audit', entry });
+}
+/**
+ * Enqueue a failed quarantine sync entry for later retry.
+ */
+export function enqueueFailedQuarantineSync(entry) {
+    enqueuePayload({ kind: 'quarantine', entry });
+}
+function enqueuePayload(payload) {
     const db = getDatabase();
-    const payload = JSON.stringify(entry);
+    const payloadJson = JSON.stringify(payload);
     const nextRetryAt = new Date(Date.now() + 30_000).toISOString(); // First retry in 30s
     db.prepare(`
     INSERT INTO sync_queue (payload, attempts, next_retry_at, status)
     VALUES (?, 0, ?, 'pending')
-  `).run(payload, nextRetryAt);
+  `).run(payloadJson, nextRetryAt);
+}
+function buildRetryRequest(payloadText) {
+    const parsed = JSON.parse(payloadText);
+    // Backwards compatibility with legacy queued audit entries (no envelope)
+    if (parsed && typeof parsed === 'object' && !Array.isArray(parsed) && !('kind' in parsed)) {
+        return {
+            path: '/v1/audit/ingest',
+            body: JSON.stringify({ entries: [parsed] }),
+        };
+    }
+    if (parsed &&
+        typeof parsed === 'object' &&
+        !Array.isArray(parsed) &&
+        'kind' in parsed &&
+        parsed.kind === 'audit') {
+        const payload = parsed;
+        return {
+            path: '/v1/audit/ingest',
+            body: JSON.stringify({ entries: [payload.entry] }),
+        };
+    }
+    if (parsed &&
+        typeof parsed === 'object' &&
+        !Array.isArray(parsed) &&
+        'kind' in parsed &&
+        parsed.kind === 'quarantine') {
+        const payload = parsed;
+        return {
+            path: '/v1/quarantine/ingest',
+            body: JSON.stringify(payload.entry),
+        };
+    }
+    throw new Error('Unsupported sync queue payload');
 }
 /**
  * Mark a queue row as retrying (schedule next attempt) or permanently failed.
@@ -76,13 +119,14 @@ export async function processRetryQueue() {
         try {
             const controller = new AbortController();
             const timeoutId = setTimeout(() => controller.abort(), 10_000);
-            const res = await fetch(`${config.cloudBaseUrl}/v1/audit/ingest`, {
+            const request = buildRetryRequest(row.payload);
+            const res = await fetch(`${config.cloudBaseUrl}${request.path}`, {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
                     'Authorization': `Bearer ${config.cloudApiKey}`,
                 },
-                body: JSON.stringify({ entries: [JSON.parse(row.payload)] }),
+                body: request.body,
                 signal: controller.signal,
             });
             clearTimeout(timeoutId);

package/dist/cloud/sync-queue.js.map

@@ -1 +1 @@
-{"version":3,"file":"sync-queue.js","sourceRoot":"","sources":["../../src/cloud/sync-queue.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA+B/D;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAgB;IAChD,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,qBAAqB;IAEtF,EAAE,CAAC,OAAO,CAAC;;;GAGV,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CACxB,KAAa,EACb,eAAuB,EACvB,WAAmB,EACnB,WAAmB,EACnB,QAAgB;IAEhB,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;QAC/B,EAAE,CAAC,OAAO,CAAC;;;KAGV,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,CAAC,qBAAqB;IACpC,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,MAAM,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,EAAE,CAAC,OAAO,CAAC;;;GAGV,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,MAAM,MAAM,GAAoB;QAC9B,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,CAAC;QACZ,MAAM,EAAE,CAAC;QACT,iBAAiB,EAAE,CAAC;KACrB,CAAC;IAEF,uCAAuC;IACvC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,+CAA+C;IAC/C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;GAMvB,CAAC,CAAC,GAAG,CAAC,GAAG,CAKR,CAAC;IAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;YAE/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,YAAY,kBAAkB,EAAE;gBAChE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;iBAChD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC5D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,2BAA2B;gBAC3B,EAAE,CAAC,OAAO,CAAC;;;SAGV,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtD,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,CAAC;oBAAC,gBAAgB,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/G,IAAI,SAAS;oBAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;;oBACrC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAI,GAAa,CAAC,OAAO,IAAI,eAAe,CAAC;YAC3D,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YACnG,IAAI,SAAS;gBAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;;gBACrC,MAAM,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IAEzB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;GAIvB,CAAC,CAAC,GAAG,EAA8C,CAAC;IAErD,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;aACnD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;aACtD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;IAC7D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAE5E,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;GAEzB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEf,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC"}
+{"version":3,"file":"sync-queue.js","sourceRoot":"","sources":["../../src/cloud/sync-queue.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAiD/D;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAgB;IAChD,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAA0B;IACpE,cAAc,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,OAAqB;IAC3C,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,qBAAqB;IAEtF,EAAE,CAAC,OAAO,CAAC;;;GAGV,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,CAAC;IAElD,yEAAyE;IACzE,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;QAC1F,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED,IACE,MAAM;QACN,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,MAAM,IAAI,MAAM;QACf,MAA2B,CAAC,IAAI,KAAK,OAAO,EAC7C,CAAC;QACD,MAAM,OAAO,GAAG,MAA6C,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;SACnD,CAAC;IACJ,CAAC;IAED,IACE,MAAM;QACN,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,MAAM,IAAI,MAAM;QACf,MAA2B,CAAC,IAAI,KAAK,YAAY,EAClD,CAAC;QACD,MAAM,OAAO,GAAG,MAA4D,CAAC;QAC7E,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CACxB,KAAa,EACb,eAAuB,EACvB,WAAmB,EACnB,WAAmB,EACnB,QAAgB;IAEhB,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;QAC/B,EAAE,CAAC,OAAO,CAAC;;;KAGV,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,CAAC,qBAAqB;IACpC,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,MAAM,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,EAAE,CAAC,OAAO,CAAC;;;GAGV,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,MAAM,MAAM,GAAoB;QAC9B,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,CAAC;QACZ,MAAM,EAAE,CAAC;QACT,iBAAiB,EAAE,CAAC;KACrB,CAAC;IAEF,uCAAuC;IACvC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,+CAA+C;IAC/C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;GAMvB,CAAC,CAAC,GAAG,CAAC,GAAG,CAKR,CAAC;IAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE/C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE;gBAC/D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;iBAChD;gBACD,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,2BAA2B;gBAC3B,EAAE,CAAC,OAAO,CAAC;;;SAGV,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtD,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,CAAC;oBAAC,gBAAgB,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/G,IAAI,SAAS;oBAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;;oBACrC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAI,GAAa,CAAC,OAAO,IAAI,eAAe,CAAC;YAC3D,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YACnG,IAAI,SAAS;gBAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;;gBACrC,MAAM,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IAEzB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;GAIvB,CAAC,CAAC,GAAG,EAA8C,CAAC;IAErD,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;aACnD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;aACtD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;IAC7D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAE5E,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;GAEzB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEf,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC"}

package/dist/cloud/sync.d.ts

@@ -7,7 +7,7 @@ import type { DefencePipelineResult, DefenceSource } from '../defence/types.js';
 export declare function sendHeartbeat(): void;
 /**
  * Fire-and-forget: sends audit data to ShieldCortex cloud.
- * Never blocks, never throws. Silently swallows all errors.
+ * Never blocks, never throws. Failed requests are logged and queued for retry.
  * Sends audit metadata ONLY — no content or titles.
  */
 export declare function syncToCloud(result: DefencePipelineResult, source: DefenceSource, durationMs: number): void;

package/dist/cloud/sync.js

@@ -30,7 +30,7 @@ export function sendHeartbeat() {
 }
 /**
  * Fire-and-forget: sends audit data to ShieldCortex cloud.
- * Never blocks, never throws. Silently swallows all errors.
+ * Never blocks, never throws. Failed requests are logged and queued for retry.
  * Sends audit metadata ONLY — no content or titles.
  */
 export function syncToCloud(result, source, durationMs) {

package/dist/defence/index.d.ts

@@ -13,6 +13,8 @@ export type { CredentialScanResult, CredentialFinding, CredentialDetectionConfig
 export { logAudit, queryAuditLogs, getAuditStats } from './audit/index.js';
 export { scanSkill, scanSkillContent, discoverSkillFiles, detectFormat, detectFormatFromContent, parseSkillFile, readSkillFile } from './skill-scanner/index.js';
 export type { SkillScanResult, SkillScanOptions, SkillThreatFinding, ParsedSkill, SkillFormat } from './skill-scanner/index.js';
+export { activateIronDome, deactivateIronDome, getIronDomeStatus, isChannelTrusted, isActionAllowed, scanForInjection, checkPII, handleKillPhrase, IRON_DOME_PROFILES, DEFAULT_IRON_DOME_CONFIG, } from './iron-dome/index.js';
+export type { IronDomeConfig, IronDomeProfile, InjectionScanResult, InjectionDetection, InjectionSeverity, InjectionCategory, GatewayResult, ActionGateResult, ActionDecision, PiiCheckResult, PiiViolation, KillSwitchResult, } from './iron-dome/index.js';
 export { getCloudConfig, setCloudConfig, clearCloudConfigCache, getTrustedSkills, addTrustedSkill, removeTrustedSkill, getDeviceId, getDeviceName, getDefenceMode, setDefenceMode, isConfigTampered, getVerifyConfig, setVerifyConfig } from '../cloud/config.js';
 export type { CloudConfig, DefenceMode, VerifyConfig } from '../cloud/config.js';
 export { syncToCloud } from '../cloud/sync.js';

package/dist/defence/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/defence/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAGjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,+BAA+B,EAC/B,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,EACf,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,UAAU,GACX,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAG9D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG9F,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAGxF,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC9G,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGzJ,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAG3E,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,uBAAuB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACjK,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGhI,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAClQ,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/defence/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAGjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,+BAA+B,EAC/B,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,EACf,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,UAAU,GACX,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAG9D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG9F,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAGxF,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC9G,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGzJ,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAG3E,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,uBAAuB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACjK,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGhI,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAClQ,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/defence/index.js

@@ -19,6 +19,8 @@ export { scanForCredentials, redactCredentials, DEFAULT_CREDENTIAL_CONFIG } from
 export { logAudit, queryAuditLogs, getAuditStats } from './audit/index.js';
 // Skill Scanner
 export { scanSkill, scanSkillContent, discoverSkillFiles, detectFormat, detectFormatFromContent, parseSkillFile, readSkillFile } from './skill-scanner/index.js';
+// Iron Dome — Behaviour Protection Layer
+export { activateIronDome, deactivateIronDome, getIronDomeStatus, isChannelTrusted, isActionAllowed, scanForInjection, checkPII, handleKillPhrase, IRON_DOME_PROFILES, DEFAULT_IRON_DOME_CONFIG, } from './iron-dome/index.js';
 // Cloud
 export { getCloudConfig, setCloudConfig, clearCloudConfigCache, getTrustedSkills, addTrustedSkill, removeTrustedSkill, getDeviceId, getDeviceName, getDefenceMode, setDefenceMode, isConfigTampered, getVerifyConfig, setVerifyConfig } from '../cloud/config.js';
 export { syncToCloud } from '../cloud/sync.js';

package/dist/defence/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/defence/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,WAAW;AACX,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAEjF,iBAAiB;AACjB,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAmBpD,QAAQ;AACR,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE9D,WAAW;AACX,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,cAAc;AACd,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE9F,gBAAgB;AAChB,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAExF,sCAAsC;AACtC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAG9G,QAAQ;AACR,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE3E,gBAAgB;AAChB,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,uBAAuB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGjK,QAAQ;AACR,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAElQ,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/defence/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,WAAW;AACX,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAEjF,iBAAiB;AACjB,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAmBpD,QAAQ;AACR,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE9D,WAAW;AACX,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,cAAc;AACd,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE9F,gBAAgB;AAChB,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAExF,sCAAsC;AACtC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAG9G,QAAQ;AACR,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE3E,gBAAgB;AAChB,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,uBAAuB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGjK,yCAAyC;AACzC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAgB9B,QAAQ;AACR,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAElQ,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/defence/iron-dome/__tests__/action-gate.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Iron Dome — Action Gate Tests
+ */
+export {};
+//# sourceMappingURL=action-gate.test.d.ts.map

package/dist/defence/iron-dome/__tests__/action-gate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-gate.test.d.ts","sourceRoot":"","sources":["../../../../src/defence/iron-dome/__tests__/action-gate.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/defence/iron-dome/__tests__/action-gate.test.js

@@ -0,0 +1,71 @@
+/**
+ * Iron Dome — Action Gate Tests
+ */
+import { describe, it, expect, beforeEach } from '@jest/globals';
+import { DEFAULT_IRON_DOME_CONFIG } from '../config.js';
+describe('Action Gate', () => {
+    let activeConfig;
+    beforeEach(() => {
+        activeConfig = {
+            ...DEFAULT_IRON_DOME_CONFIG,
+            enabled: true,
+            requireApproval: ['send_email', 'delete_file', 'api_call', 'purchase'],
+            autoApprove: ['read_file', 'search', 'calculate'],
+            subAgentRestrictions: {
+                blockedOperations: ['export_data', 'bulk_email'],
+                sanitiseContext: true,
+            },
+        };
+    });
+    it('should auto-approve whitelisted actions', async () => {
+        const { isActionAllowed } = await import('../action-gate.js');
+        const result = isActionAllowed('read_file', activeConfig);
+        expect(result.decision).toBe('approved');
+    });
+    it('should require approval for restricted actions', async () => {
+        const { isActionAllowed } = await import('../action-gate.js');
+        const result = isActionAllowed('send_email', activeConfig);
+        expect(result.decision).toBe('requires_approval');
+    });
+    it('should approve unknown actions not in either list', async () => {
+        const { isActionAllowed } = await import('../action-gate.js');
+        const result = isActionAllowed('custom_action', activeConfig);
+        expect(result.decision).toBe('approved');
+    });
+    it('should block sub-agent restricted operations', async () => {
+        const { isActionAllowed } = await import('../action-gate.js');
+        const agentSource = { type: 'agent', identifier: 'sub-agent-1' };
+        const result = isActionAllowed('export_data', activeConfig, agentSource);
+        expect(result.decision).toBe('blocked');
+    });
+    it('should not block non-agent sources for sub-agent restrictions', async () => {
+        const { isActionAllowed } = await import('../action-gate.js');
+        const userSource = { type: 'user', identifier: 'direct' };
+        const result = isActionAllowed('export_data', activeConfig, userSource);
+        // Not in requireApproval or autoApprove, so should be approved
+        expect(result.decision).toBe('approved');
+    });
+    it('should be case-insensitive for action names', async () => {
+        const { isActionAllowed } = await import('../action-gate.js');
+        const result = isActionAllowed('Send_Email', activeConfig);
+        expect(result.decision).toBe('requires_approval');
+    });
+    it('should approve all actions when Iron Dome is disabled', async () => {
+        const { isActionAllowed } = await import('../action-gate.js');
+        const disabledConfig = { ...activeConfig, enabled: false };
+        const result = isActionAllowed('send_email', disabledConfig);
+        expect(result.decision).toBe('approved');
+        expect(result.reason).toContain('not active');
+    });
+    it('should include action name in result', async () => {
+        const { isActionAllowed } = await import('../action-gate.js');
+        const result = isActionAllowed('Delete_File', activeConfig);
+        expect(result.action).toBe('delete_file');
+    });
+    it('should match partial action names', async () => {
+        const { isActionAllowed } = await import('../action-gate.js');
+        const result = isActionAllowed('make_api_call', activeConfig);
+        expect(result.decision).toBe('requires_approval');
+    });
+});
+//# sourceMappingURL=action-gate.test.js.map

package/dist/defence/iron-dome/__tests__/action-gate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-gate.test.js","sourceRoot":"","sources":["../../../../src/defence/iron-dome/__tests__/action-gate.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAExD,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,YAA4B,CAAC;IAEjC,UAAU,CAAC,GAAG,EAAE;QACd,YAAY,GAAG;YACb,GAAG,wBAAwB;YAC3B,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC;YACtE,WAAW,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC;YACjD,oBAAoB,EAAE;gBACpB,iBAAiB,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;gBAChD,eAAe,EAAE,IAAI;aACtB;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,OAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,eAAe,CAAC,aAAa,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,eAAe,CAAC,aAAa,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QACxE,+DAA+D;QAC/D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,cAAc,GAAG,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/defence/iron-dome/__tests__/gateway.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Iron Dome — Gateway Tests
+ */
+export {};
+//# sourceMappingURL=gateway.test.d.ts.map

package/dist/defence/iron-dome/__tests__/gateway.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.test.d.ts","sourceRoot":"","sources":["../../../../src/defence/iron-dome/__tests__/gateway.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}