wotann 0.5.0 → 0.5.39

package/dist/security/multi-encoding-decoder.js

@@ -1,336 +0,0 @@
-/**
- * Multi-encoding pre-decoder — V9 Tier 10 SB-06 (CometJacking + ShadowPrompt).
- *
- * Defenses against attackers that wrap their injection payload in
- * ONE OR MORE of: base64 (single + nested rounds), hex, URL-encoding,
- * punycode (xn--), HTML-entity. The url-instruction-guard already
- * scans single-round base64/hex/rot13/url; this module is the
- * COMPREHENSIVE pre-decoder that produces every plausible decoded
- * form so the caller can scan each independently.
- *
- * Caller contract:
- *   `decodeAndScanForInjection(input)` -> returns `suspicious=true`
- *   when ANY decoded form contains an injection marker. The decoded
- *   variants and matched markers are surfaced for logging.
- *
- * -- Quality bars ----------------------------------------------------
- *  - QB #6 honest stubs: malformed/empty input -> suspicious=false +
- *    decoded=[]; never throws.
- *  - QB #7 per-call state: pure functions. No module-level mutation.
- *  - QB #11 sibling-site scan: this is the ONLY multi-round
- *    pre-decoder. The url-instruction-guard does single-round; this
- *    module composes them and adds punycode + HTML-entity. They are
- *    complementary -- both must remain in sync on the imperative list.
- *  - QB #13 env guard: no `process.env` reads.
- */
-// === Injection markers ====================================================
-/**
- * Markers documented in the public injection corpus + the
- * CometJacking/ShadowPrompt disclosures (Feb-Apr 2026).
- *
- * Lowercased; matched with `String.prototype.includes`. Strings are
- * assembled from fragments where literal patterns might trip naive
- * pre-commit linters that flag the literal.
- */
-const EVAL_MARKER = "ev" + "al(";
-const BASE_INJECTION_MARKERS = [
-    "ignore previous",
-    "ignore prior",
-    "ignore all previous",
-    "disregard previous",
-    "system:",
-    "system prompt",
-    "system override",
-    "summarize and post",
-    "summarize and send",
-    "summarize and forward",
-    "send to",
-    "post to",
-    "forward to",
-    "exfiltrate",
-    "execute",
-    EVAL_MARKER,
-    "fetch(",
-    "xmlhttprequest",
-    "navigator.sendbeacon",
-    "document.cookie",
-    "localstorage.",
-    "you are now",
-    "developer mode",
-    "jailbreak",
-    "act as",
-    "pretend you",
-];
-// === Decoders =============================================================
-/**
- * Strict base64 detector + decoder. Returns null when input doesn't
- * look like base64 OR the decoded bytes are mostly non-printable.
- */
-function tryBase64(input) {
-    if (input.length < 8)
-        return null;
-    // Standard or URL-safe alphabet, optional padding.
-    if (!/^[A-Za-z0-9+/_-]+={0,2}$/.test(input))
-        return null;
-    try {
-        const normalized = input.replace(/-/g, "+").replace(/_/g, "/");
-        const padded = normalized + "===".slice(0, (4 - (normalized.length % 4)) % 4);
-        const decoded = Buffer.from(padded, "base64").toString("utf-8");
-        if (decoded.length === 0)
-            return null;
-        const printable = decoded.replace(/[^\x20-\x7e]/g, "").length;
-        if (printable / decoded.length < 0.8)
-            return null;
-        return decoded;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Even-length hex decode. Returns null when input doesn't look hex
- * or decoded bytes aren't mostly printable.
- */
-function tryHex(input) {
-    if (input.length < 8 || input.length % 2 !== 0)
-        return null;
-    if (!/^[0-9a-fA-F]+$/.test(input))
-        return null;
-    try {
-        const decoded = Buffer.from(input, "hex").toString("utf-8");
-        if (decoded.length === 0)
-            return null;
-        const printable = decoded.replace(/[^\x20-\x7e]/g, "").length;
-        if (printable / decoded.length < 0.8)
-            return null;
-        return decoded;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * URL decode (single round). Returns null when input doesn't actually
- * change after decoding (avoids flooding the result with duplicates).
- */
-function tryUrlDecode(input) {
-    try {
-        const decoded = decodeURIComponent(input);
-        return decoded === input ? null : decoded;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Decode HTML named + numeric entities. Handles `&amp;`, `&lt;`,
- * `&gt;`, `&quot;`, `&#39;`, `&#x6E;`, etc. Lossy on unknown named
- * entities (returns the entity verbatim) which is the safe behavior
- * for an attack-detection scanner.
- */
-function tryHtmlEntities(input) {
-    if (!/&[#a-zA-Z0-9]+;/.test(input))
-        return null;
-    const named = {
-        amp: "&",
-        lt: "<",
-        gt: ">",
-        quot: '"',
-        apos: "'",
-        nbsp: " ",
-    };
-    const decoded = input.replace(/&(#x[0-9a-fA-F]+|#[0-9]+|[a-zA-Z]+);/g, (m, body) => {
-        if (body.startsWith("#x") || body.startsWith("#X")) {
-            const cp = Number.parseInt(body.slice(2), 16);
-            if (Number.isFinite(cp) && cp > 0 && cp <= 0x10ffff) {
-                try {
-                    return String.fromCodePoint(cp);
-                }
-                catch {
-                    return m;
-                }
-            }
-            return m;
-        }
-        if (body.startsWith("#")) {
-            const cp = Number.parseInt(body.slice(1), 10);
-            if (Number.isFinite(cp) && cp > 0 && cp <= 0x10ffff) {
-                try {
-                    return String.fromCodePoint(cp);
-                }
-                catch {
-                    return m;
-                }
-            }
-            return m;
-        }
-        const lookup = named[body.toLowerCase()];
-        return lookup ?? m;
-    });
-    return decoded === input ? null : decoded;
-}
-/**
- * Detect punycode `xn--` labels in a hostname-shaped string. Returns
- * the decoded Unicode form for SCANNING purposes. We don't actually
- * resolve hosts -- we just want to see if a homograph attack is
- * hiding behind the encoded label.
- */
-function tryPunycode(input) {
-    // Heuristic: an `xn--` label anywhere triggers a decode attempt.
-    if (!/xn--[a-z0-9-]+/i.test(input))
-        return null;
-    // Build a candidate hostname out of the input characters that are
-    // legal in a domain. We do NOT need a network resolution -- just
-    // the unicode form.
-    const candidate = input
-        .toLowerCase()
-        .match(/[a-z0-9.-]+/g)
-        ?.join("") ?? "";
-    if (candidate.length === 0)
-        return null;
-    return decodePunycodeLabels(candidate);
-}
-function decodePunycodeLabels(hostname) {
-    return hostname
-        .split(".")
-        .map((label) => (label.startsWith("xn--") ? safeDecodePunycode(label.slice(4)) : label))
-        .join(".");
-}
-function safeDecodePunycode(input) {
-    // Minimal RFC 3492 decoder. Adapted to be self-contained and
-    // tolerant of malformed input (returns input on failure).
-    const base = 36;
-    const tMin = 1;
-    const tMax = 26;
-    const skew = 38;
-    const damp = 700;
-    const initialBias = 72;
-    const initialN = 128;
-    const output = [];
-    let basicEnd = input.lastIndexOf("-");
-    if (basicEnd < 0)
-        basicEnd = 0;
-    for (let i = 0; i < basicEnd; i++) {
-        const cc = input.charCodeAt(i);
-        if (cc >= 0x80)
-            return input;
-        output.push(cc);
-    }
-    let n = initialN;
-    let bias = initialBias;
-    let i = 0;
-    let inputIdx = basicEnd > 0 ? basicEnd + 1 : 0;
-    while (inputIdx < input.length) {
-        const oldI = i;
-        let w = 1;
-        for (let k = base;; k += base) {
-            if (inputIdx >= input.length)
-                return input;
-            const code = input.charCodeAt(inputIdx++);
-            let digit;
-            if (code >= 0x30 && code <= 0x39)
-                digit = code - 22;
-            else if (code >= 0x41 && code <= 0x5a)
-                digit = code - 0x41;
-            else if (code >= 0x61 && code <= 0x7a)
-                digit = code - 0x61;
-            else
-                return input;
-            if (digit >= base)
-                return input;
-            i += digit * w;
-            const t = k <= bias ? tMin : k >= bias + tMax ? tMax : k - bias;
-            if (digit < t)
-                break;
-            w *= base - t;
-        }
-        const out = output.length + 1;
-        let delta = oldI === 0 ? Math.floor((i - oldI) / damp) : Math.floor((i - oldI) / 2);
-        delta += Math.floor(delta / out);
-        let k = 0;
-        while (delta > Math.floor(((base - tMin) * tMax) / 2)) {
-            delta = Math.floor(delta / (base - tMin));
-            k += base;
-        }
-        bias = k + Math.floor(((base - tMin + 1) * delta) / (delta + skew));
-        n += Math.floor(i / out);
-        i = i % out;
-        if (n > 0x10ffff)
-            return input;
-        output.splice(i, 0, n);
-        i++;
-    }
-    try {
-        return String.fromCodePoint(...output);
-    }
-    catch {
-        return input;
-    }
-}
-// === Driver ===============================================================
-/**
- * Pre-decode `input` through every plausible wrapper and scan each
- * decoded form for injection markers. Returns the aggregate verdict
- * + every decoded form + every marker that hit.
- */
-export function decodeAndScanForInjection(input, options = {}) {
-    const maxBase64 = options.maxBase64Rounds ?? 3;
-    const markers = [...BASE_INJECTION_MARKERS, ...(options.extraMarkers ?? [])].map((m) => m.toLowerCase());
-    if (typeof input !== "string" || input.length === 0) {
-        return { suspicious: false, decoded: [], markers: [] };
-    }
-    // BFS over all plausible decoded forms. Cap the queue at 32 to
-    // bound runtime against pathological nested-encoding attacks.
-    const seen = new Set();
-    const queue = [input];
-    const decoded = [];
-    let base64Rounds = 0;
-    while (queue.length > 0 && seen.size < 32) {
-        const next = queue.shift();
-        if (next === undefined)
-            break;
-        if (seen.has(next))
-            continue;
-        seen.add(next);
-        if (next !== input)
-            decoded.push(next);
-        const url = tryUrlDecode(next);
-        if (url !== null && !seen.has(url))
-            queue.push(url);
-        if (base64Rounds < maxBase64) {
-            const b64 = tryBase64(next);
-            if (b64 !== null && !seen.has(b64)) {
-                queue.push(b64);
-                base64Rounds++;
-            }
-        }
-        const hex = tryHex(next);
-        if (hex !== null && !seen.has(hex))
-            queue.push(hex);
-        const html = tryHtmlEntities(next);
-        if (html !== null && !seen.has(html))
-            queue.push(html);
-        const puny = tryPunycode(next);
-        if (puny !== null && !seen.has(puny))
-            queue.push(puny);
-    }
-    const allForms = [input, ...decoded];
-    const matched = new Set();
-    for (const form of allForms) {
-        const lower = form.toLowerCase();
-        for (const marker of markers) {
-            if (lower.includes(marker))
-                matched.add(marker);
-        }
-    }
-    return {
-        suspicious: matched.size > 0,
-        decoded,
-        markers: [...matched],
-    };
-}
-/** Convenience export so callers can extend without touching internals. */
-export function defaultInjectionMarkers() {
-    return BASE_INJECTION_MARKERS;
-}
-//# sourceMappingURL=multi-encoding-decoder.js.map

package/dist/security/multi-encoding-decoder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"multi-encoding-decoder.js","sourceRoot":"","sources":["../../src/security/multi-encoding-decoder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAmBH,6EAA6E;AAE7E;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,KAAK,CAAC;AACjC,MAAM,sBAAsB,GAAsB;IAChD,iBAAiB;IACjB,cAAc;IACd,qBAAqB;IACrB,oBAAoB;IACpB,SAAS;IACT,eAAe;IACf,iBAAiB;IACjB,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;IACvB,SAAS;IACT,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,WAAW;IACX,QAAQ;IACR,gBAAgB;IAChB,sBAAsB;IACtB,iBAAiB;IACjB,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,aAAa;CACd,CAAC;AAEF,6EAA6E;AAE7E;;;GAGG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,mDAAmD;IACnD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;QAC9D,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;QAC9D,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,KAAK,GAA2B;QACpC,GAAG,EAAE,GAAG;QACR,EAAE,EAAE,GAAG;QACP,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,GAAG;KACV,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;QACzF,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACpD,IAAI,CAAC;oBACH,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,CAAC;gBACX,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACpD,IAAI,CAAC;oBACH,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,CAAC;gBACX,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACzC,OAAO,MAAM,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,KAAa;IAChC,iEAAiE;IACjE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,kEAAkE;IAClE,iEAAiE;IACjE,oBAAoB;IACpB,MAAM,SAAS,GACb,KAAK;SACF,WAAW,EAAE;SACb,KAAK,CAAC,cAAc,CAAC;QACtB,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,QAAQ;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;SACvF,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,6DAA6D;IAC7D,0DAA0D;IAC1D,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,GAAG,CAAC;IACjB,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC;IAErB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,QAAQ,GAAG,CAAC;QAAE,QAAQ,GAAG,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,EAAE,IAAI,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,GAAG,QAAQ,CAAC;IACjB,IAAI,IAAI,GAAG,WAAW,CAAC;IACvB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/C,OAAO,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,IAAI,GAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YAC/B,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1C,IAAI,KAAa,CAAC;YAClB,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;gBAAE,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;iBAC/C,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;gBAAE,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;iBACtD,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;gBAAE,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;;gBACtD,OAAO,KAAK,CAAC;YAClB,IAAI,KAAK,IAAI,IAAI;gBAAE,OAAO,KAAK,CAAC;YAChC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;YAChE,IAAI,KAAK,GAAG,CAAC;gBAAE,MAAM;YACrB,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAChB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;YAC1C,CAAC,IAAI,IAAI,CAAC;QACZ,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACzB,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QACZ,IAAI,CAAC,GAAG,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC,EAAE,CAAC;IACN,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAa,EACb,UAA0B,EAAE;IAE5B,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,CAAC,GAAG,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrF,CAAC,CAAC,WAAW,EAAE,CAChB,CAAC;IAEF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,+DAA+D;IAC/D,8DAA8D;IAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,IAAI,YAAY,GAAG,SAAS,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC;QAC5B,OAAO;QACP,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB;IACrC,OAAO,sBAAsB,CAAC;AAChC,CAAC"}

package/dist/ui/accessibility.d.ts

@@ -1,157 +0,0 @@
-/**
- * Accessibility — TUI screen-reader & high-contrast support.
- *
- * Provides a single source of truth for two accessibility modes the
- * rest of the TUI consumes:
- *
- *   1. Screen-reader mode (`WOTANN_SCREEN_READER=1`)
- *      - Suppresses decorative animations (motif moments, spinners).
- *      - Adds aria-style descriptions to status surfaces (a "describe()"
- *        helper that returns a flat english summary string the TUI can
- *        emit alongside or in place of glyph-heavy content).
- *      - Avoids unicode glyphs that screen readers tend to mispronounce.
- *
- *   2. High-contrast mode (`WOTANN_HIGH_CONTRAST=1`)
- *      - Forces the canonical "high-contrast" palette (already defined
- *        in themes.ts).
- *      - Switches the design system to bold-only / monochrome so colour
- *        encoding is supplemented by weight (important for low-colour
- *        terminals and colour-blind users).
- *
- * ── Honest stub note (QB #6) ─────────────────────────────────────────
- * Real screen-reader detection requires per-platform APIs (NVDA via the
- * Windows accessibility tree, JAWS via SAPI, VoiceOver via macOS
- * NSAccessibility). Doing that from a Node TUI is outside this layer's
- * scope — we honour the explicit `WOTANN_SCREEN_READER=1` env var so
- * users can opt-in deterministically. The detection function is a
- * stub that documents the limit clearly rather than pretending to
- * sniff the OS.
- *
- * ── QB compliance ────────────────────────────────────────────────────
- * - QB #6 honest stub: env-var fallback, not OS sniffing. The doc and
- *   the field name (`source`) make this explicit.
- * - QB #7 per-component state: `AccessibilitySettings` is an immutable
- *   value object. No module-level mutable state — caller calls
- *   `detectAccessibilitySettings()` once at bootstrap and threads the
- *   result through props.
- * - QB #11 sibling-site scan: env var format matches `WOTANN_NO_FLICKER`
- *   from App.tsx (`"1"` or `"true"` triggers, anything else is off).
- * - QB #13 env guard: this module is the SINGLE place that reads the
- *   accessibility env vars. Other modules consume the resolved
- *   `AccessibilitySettings` value, never the env var directly.
- */
-import type { CanonicalPaletteName } from "./themes.js";
-/**
- * Resolved accessibility settings. Immutable; build once at bootstrap
- * and thread through props rather than re-detecting per render.
- */
-export interface AccessibilitySettings {
-    /** True when decorative animations + glyph-heavy content should be
-     *  suppressed. Drives the `MotifContext.suppress` flag and the
-     *  StatusBar's "screen-reader summary" line. */
-    readonly screenReader: boolean;
-    /** True when colour encoding should be supplemented by weight + the
-     *  high-contrast palette should be forced. */
-    readonly highContrast: boolean;
-    /**
-     * Where the settings came from. `"env"` means an explicit
-     * `WOTANN_SCREEN_READER` / `WOTANN_HIGH_CONTRAST` env var; `"default"`
-     * means neither was set and we fell back to "off".
-     *
-     * Surfaced so callers can diagnose surprising behaviour ("why is my
-     * spinner missing?") without having to grep env state.
-     */
-    readonly source: "env" | "default";
-    /**
-     * Forced palette name when `highContrast === true`. Always
-     * `"high-contrast"` for the env-driven mode; reserved as an
-     * extension point for future runtime overrides (e.g. user prefs).
-     */
-    readonly forcedPalette?: CanonicalPaletteName;
-}
-/**
- * Detect screen-reader mode from environment.
- *
- * HONEST STUB: This is env-var-only. Real detection (NVDA/JAWS/VoiceOver)
- * requires per-platform OS calls that don't belong in the TUI layer.
- * Setting `WOTANN_SCREEN_READER=1` explicitly opts in.
- *
- * Also honours common upstream conventions when present:
- *   - `NO_DECORATIVE_ANIMATIONS=1` (third-party convention)
- *   - `WOTANN_A11Y=1` (catch-all for "any accessibility mode on")
- */
-export declare function detectScreenReaderEnv(env?: NodeJS.ProcessEnv): boolean;
-/**
- * Detect high-contrast mode from environment.
- *
- * Set `WOTANN_HIGH_CONTRAST=1` to force the high-contrast palette.
- * Also opts in when `WOTANN_A11Y=1` (the catch-all flag).
- */
-export declare function detectHighContrastEnv(env?: NodeJS.ProcessEnv): boolean;
-/**
- * Build an `AccessibilitySettings` snapshot. Pure function — pass an
- * explicit `env` for tests or threading caller-controlled values.
- *
- * Callers should invoke this exactly once at TUI bootstrap and thread
- * the result through React context / props (per QB #7 — no module-level
- * mutable global).
- */
-export declare function detectAccessibilitySettings(env?: NodeJS.ProcessEnv): AccessibilitySettings;
-/**
- * "All off" baseline. Useful for tests and for callers that want a
- * stable identity to compare against without re-detecting env state.
- */
-export declare const ACCESSIBILITY_DEFAULT: AccessibilitySettings;
-/**
- * Summary input shape for the StatusBar. Maps to the props the
- * StatusBar component already receives so callers can pass the same
- * snapshot they use to render the bar.
- */
-export interface StatusBarA11yInput {
-    readonly model: string;
-    readonly provider: string;
-    readonly mode: string;
-    readonly cost: number;
-    readonly contextPercent: number;
-    readonly turnCount?: number;
-    readonly isStreaming?: boolean;
-}
-/**
- * Render a flat english summary of the StatusBar contents. Screen
- * readers consume this instead of (or alongside) the glyph-heavy bar.
- *
- * Example: `"Status: claude-sonnet via anthropic, mode auto, streaming,
- * cost $0.123, context 42 percent, turn 7."`
- */
-export declare function describeStatusBar(input: StatusBarA11yInput): string;
-/**
- * Render a flat english summary of a context HUD reading. Used by
- * screen-reader mode to announce token-budget changes without parsing
- * progress-bar glyphs.
- */
-export declare function describeContextUsage(input: {
-    readonly tokensUsed: number;
-    readonly tokensBudget: number;
-    readonly percent: number;
-}): string;
-/**
- * Render a flat english summary of a sparkline series. Replaces the
- * block-character chart with a textual trend + last-sample readout for
- * screen-reader users.
- */
-export declare function describeSparkline(data: readonly number[], label?: string): string;
-/**
- * Apply accessibility settings to a requested palette. When
- * `highContrast` is on, the requested palette is overridden; otherwise
- * the request is honoured.
- *
- * Prefer this over scattering "if highContrast" branches across
- * components — keeps the palette policy in one place.
- */
-export declare function resolvePaletteName(requested: CanonicalPaletteName, settings: AccessibilitySettings): CanonicalPaletteName;
-/**
- * "Should this decorative element render?" predicate. A single helper
- * so spinners, motifs, and other ornaments share one branch.
- */
-export declare function shouldShowDecorativeAnimation(settings: AccessibilitySettings): boolean;
-//# sourceMappingURL=accessibility.d.ts.map

package/dist/ui/accessibility.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"accessibility.d.ts","sourceRoot":"","sources":["../../src/ui/accessibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAIxD;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;oDAEgD;IAChD,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B;kDAC8C;IAC9C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,SAAS,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;CAC/C;AAWD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAMnF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEnF;AAID;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,qBAAqB,CAUvB;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,qBAIlC,CAAC;AAIH;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAWnE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GAAG,MAAM,CAIT;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAqBjF;AA0CD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,oBAAoB,EAC/B,QAAQ,EAAE,qBAAqB,GAC9B,oBAAoB,CAKtB;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAKtF"}