wotann 0.5.0

package/dist/security/file-type-validator.js

@@ -0,0 +1,176 @@
+/**
+ * File-type validator with optional ML upgrade (magika port).
+ *
+ * Two layers:
+ *
+ *   1. Magic-byte detection (always available, zero deps). Covers the
+ *      common formats security-sensitive code cares about: ELF, Mach-O,
+ *      PE, ZIP, gzip, JPEG/PNG/GIF, PDF, SQLite, plus a UTF-8/ASCII
+ *      heuristic for text. This is enough for "is this an executable?"
+ *      and "is the upload claiming to be a PDF really an SVG?" checks.
+ *
+ *   2. Optional magika upgrade (google/magika ONNX model, ~5 MB). If
+ *      the user has `magika` installed in their node_modules, we
+ *      dynamic-import it and use the ML-based classifier for higher
+ *      precision on polyglot / disguised files. We never make magika
+ *      a hard dependency: a fresh WOTANN install gets layer 1; users
+ *      who want layer 2 run `npm install magika` themselves.
+ *
+ * The validator answers ONE question: does the declared content type
+ * match the actual file content? Callers use it as a guard before
+ * processing user-uploaded files (think: an attacker renaming a .so
+ * to "image.png" hoping our skill loader will read it as text).
+ */
+import { readFileSync } from "node:fs";
+const MAGIC_SIGNATURES = [
+    { kind: "elf", offset: 0, bytes: [0x7f, 0x45, 0x4c, 0x46] },
+    { kind: "macho-64", offset: 0, bytes: [0xcf, 0xfa, 0xed, 0xfe] },
+    { kind: "macho-32", offset: 0, bytes: [0xce, 0xfa, 0xed, 0xfe] },
+    { kind: "pe", offset: 0, bytes: [0x4d, 0x5a] },
+    { kind: "zip", offset: 0, bytes: [0x50, 0x4b, 0x03, 0x04] },
+    { kind: "gzip", offset: 0, bytes: [0x1f, 0x8b] },
+    { kind: "jpeg", offset: 0, bytes: [0xff, 0xd8, 0xff] },
+    { kind: "png", offset: 0, bytes: [0x89, 0x50, 0x4e, 0x47] },
+    { kind: "gif", offset: 0, bytes: [0x47, 0x49, 0x46, 0x38] },
+    { kind: "pdf", offset: 0, bytes: [0x25, 0x50, 0x44, 0x46] },
+    {
+        kind: "sqlite",
+        offset: 0,
+        bytes: [
+            0x53, 0x51, 0x4c, 0x69, 0x74, 0x65, 0x20, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x20, 0x33,
+        ],
+    },
+    { kind: "wasm", offset: 0, bytes: [0x00, 0x61, 0x73, 0x6d] },
+    { kind: "shebang", offset: 0, bytes: [0x23, 0x21] },
+    { kind: "utf8-bom", offset: 0, bytes: [0xef, 0xbb, 0xbf] },
+];
+function matchesSignature(buf, sig) {
+    if (buf.length < sig.offset + sig.bytes.length)
+        return false;
+    for (let i = 0; i < sig.bytes.length; i++) {
+        if (buf[sig.offset + i] !== sig.bytes[i])
+            return false;
+    }
+    return true;
+}
+export function detectByMagicBytes(buffer) {
+    const head = buffer.subarray(0, Math.min(buffer.length, 32));
+    for (const sig of MAGIC_SIGNATURES) {
+        if (matchesSignature(head, sig)) {
+            return {
+                detectedKind: sig.kind,
+                confidence: "high",
+                source: "magic-byte",
+                notes: `Matched magic signature for ${sig.kind}`,
+            };
+        }
+    }
+    if (looksLikeText(buffer)) {
+        return {
+            detectedKind: "text",
+            confidence: "medium",
+            source: "magic-byte",
+            notes: "No magic signature; UTF-8/ASCII content detected",
+        };
+    }
+    return {
+        detectedKind: "unknown",
+        confidence: "low",
+        source: "magic-byte",
+        notes: "No magic signature matched; not obviously text",
+    };
+}
+function looksLikeText(buffer) {
+    const sample = buffer.subarray(0, Math.min(buffer.length, 4096));
+    if (sample.length === 0)
+        return true;
+    let nullBytes = 0;
+    let highByteRunNoUtf8 = 0;
+    for (let i = 0; i < sample.length; i++) {
+        const b = sample[i] ?? 0;
+        if (b === 0)
+            nullBytes++;
+        if (b > 127 && (sample[i + 1] ?? 0) < 128)
+            highByteRunNoUtf8++;
+    }
+    if (nullBytes > sample.length * 0.01)
+        return false;
+    if (highByteRunNoUtf8 > sample.length * 0.3)
+        return false;
+    return true;
+}
+export function declaredVsActual(declared, actual) {
+    const declaredNorm = declared.toLowerCase().trim();
+    const actualNorm = actual.detectedKind.toLowerCase();
+    const ALIASES = {
+        image: ["jpeg", "png", "gif"],
+        "image/jpeg": ["jpeg"],
+        "image/png": ["png"],
+        "image/gif": ["gif"],
+        archive: ["zip", "gzip"],
+        "application/zip": ["zip"],
+        "application/pdf": ["pdf"],
+        text: ["text", "shebang", "utf8-bom"],
+        "text/plain": ["text", "shebang", "utf8-bom"],
+        binary: ["elf", "macho-64", "macho-32", "pe", "wasm"],
+    };
+    if (declaredNorm === actualNorm)
+        return { match: true, reason: "exact match" };
+    const aliases = ALIASES[declaredNorm];
+    if (aliases && aliases.includes(actualNorm))
+        return { match: true, reason: `alias match (${declaredNorm} ⇒ ${actualNorm})` };
+    return { match: false, reason: `declared=${declaredNorm} actual=${actualNorm}` };
+}
+let cachedMagika;
+async function tryLoadMagika() {
+    if (cachedMagika !== undefined)
+        return cachedMagika;
+    try {
+        // The "magika" package is an *optional* peer dep — most installs
+        // won't have it. We use a runtime-only specifier (string variable)
+        // so TypeScript doesn't try to resolve it during typecheck and
+        // bundlers don't fail with "module not found" when it's absent.
+        const moduleName = "magika";
+        const mod = (await import(/* @vite-ignore */ moduleName));
+        if (!mod.Magika) {
+            cachedMagika = null;
+            return null;
+        }
+        const m = new mod.Magika();
+        await m.load();
+        cachedMagika = {
+            identifyBytes: async (buf) => {
+                const r = await m.identifyBytes(buf);
+                return { label: r.label };
+            },
+        };
+        return cachedMagika;
+    }
+    catch {
+        cachedMagika = null;
+        return null;
+    }
+}
+export async function detectFileType(buffer) {
+    const magika = await tryLoadMagika();
+    if (magika) {
+        try {
+            const result = await magika.identifyBytes(buffer);
+            return {
+                detectedKind: result.label,
+                confidence: "high",
+                source: "magika-onnx",
+                notes: "Detected via google/magika ONNX classifier",
+            };
+        }
+        catch {
+            // fall through to magic-byte
+        }
+    }
+    return detectByMagicBytes(buffer);
+}
+export async function detectFile(path) {
+    const buf = readFileSync(path);
+    return detectFileType(buf);
+}
+//# sourceMappingURL=file-type-validator.js.map

package/dist/security/file-type-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-type-validator.js","sourceRoot":"","sources":["../../src/security/file-type-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAevC,MAAM,gBAAgB,GAAkC;IACtD,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAC3D,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAChE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAChE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;IAC9C,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAC3D,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;IAChD,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IACtD,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAC3D,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAC3D,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAC3D;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,CAAC;QACT,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;SACzF;KACF;IACD,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAC5D,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;IACnD,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;CAC3D,CAAC;AAEF,SAAS,gBAAgB,CAAC,GAAW,EAAE,GAAmB;IACxD,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,YAAY,EAAE,GAAG,CAAC,IAAI;gBACtB,UAAU,EAAE,MAAM;gBAClB,MAAM,EAAE,YAAY;gBACpB,KAAK,EAAE,+BAA+B,GAAG,CAAC,IAAI,EAAE;aACjD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,QAAQ;YACpB,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,kDAAkD;SAC1D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,gDAAgD;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG;YAAE,iBAAiB,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,iBAAiB,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,MAAuB;IAEvB,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,OAAO,GAAoD;QAC/D,KAAK,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC;QAC7B,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,WAAW,EAAE,CAAC,KAAK,CAAC;QACpB,WAAW,EAAE,CAAC,KAAK,CAAC;QACpB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACxB,iBAAiB,EAAE,CAAC,KAAK,CAAC;QAC1B,iBAAiB,EAAE,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;QACrC,YAAY,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;QAC7C,MAAM,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC;KACtD,CAAC;IACF,IAAI,YAAY,KAAK,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,YAAY,MAAM,UAAU,GAAG,EAAE,CAAC;IAClF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,YAAY,WAAW,UAAU,EAAE,EAAE,CAAC;AACnF,CAAC;AAED,IAAI,YAGS,CAAC;AAEd,KAAK,UAAU,aAAa;IAC1B,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IACpD,IAAI,CAAC;QACH,iEAAiE;QACjE,mEAAmE;QACnE,+DAA+D;QAC/D,gEAAgE;QAChE,MAAM,UAAU,GAAG,QAAQ,CAAC;QAC5B,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAKvD,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAChB,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,YAAY,GAAG;YACb,aAAa,EAAE,KAAK,EAAE,GAAe,EAAE,EAAE;gBACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBACrC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;SACF,CAAC;QACF,OAAO,YAAY,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO;gBACL,YAAY,EAAE,MAAM,CAAC,KAAK;gBAC1B,UAAU,EAAE,MAAM;gBAClB,MAAM,EAAE,aAAa;gBACrB,KAAK,EAAE,4CAA4C;aACpD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/security/guardrails-off.d.ts

@@ -0,0 +1,244 @@
+/**
+ * Guardrails-Off Mode — unrestricted execution for authorized security research.
+ *
+ * MECHANISM (from free-code research):
+ * The primary technique is setting CYBER_RISK_INSTRUCTION to an empty string,
+ * removing the CLI-level safety constraints while preserving the model's own
+ * RLHF training. Each provider/model has its own safety instruction constant
+ * that gets cleared in guardrails-off mode.
+ *
+ * PROVIDER-SPECIFIC FLAGS:
+ * - Claude (Anthropic): CYBER_RISK_INSTRUCTION = "" (from cyberRiskInstruction.ts)
+ * - GPT (OpenAI): safety_instructions omitted from system prompt
+ * - Copilot (GitHub): no additional safety overlay (relies on model training)
+ * - Ollama (local): no restrictions by default (uncensored models available)
+ * - Gemini (Google): harm_block_threshold set to BLOCK_NONE
+ *
+ * The hook engine is PAUSED in this mode — no secret scanning, no destructive
+ * command blocking, no TDD enforcement. All other harness intelligence remains
+ * active (planning, verification, memory, capability augmentation).
+ */
+import type { ProviderName } from "../core/types.js";
+/** Empty in both modes — harness no longer injects extra cyber-risk guidance. */
+export declare const CYBER_RISK_INSTRUCTION_DEFAULT = "";
+export declare const CYBER_RISK_INSTRUCTION_OFF = "";
+/** Empty in both modes — harness no longer injects extra OpenAI safety preamble. */
+export declare const OPENAI_SAFETY_INSTRUCTION_DEFAULT = "";
+export declare const OPENAI_SAFETY_INSTRUCTION_OFF = "";
+/**
+ * Gemini harm block threshold. Both modes pass BLOCK_NONE so the harness
+ * does NOT tighten Google's own moderation; whatever Google's API enforces
+ * is what the user gets. (Previous default tightened from Google's own
+ * permissive baseline up to BLOCK_MEDIUM_AND_ABOVE — that's the harness
+ * second-guessing the provider on the user's behalf without consent.)
+ */
+export type GeminiHarmBlockThreshold = "BLOCK_NONE" | "BLOCK_LOW_AND_ABOVE" | "BLOCK_MEDIUM_AND_ABOVE" | "BLOCK_ONLY_HIGH";
+export declare const GEMINI_HARM_BLOCK_DEFAULT: GeminiHarmBlockThreshold;
+export declare const GEMINI_HARM_BLOCK_OFF: GeminiHarmBlockThreshold;
+export interface GuardrailsConfig {
+    readonly enabled: boolean;
+    readonly scope: string;
+    readonly authorization: string;
+    readonly rulesOfEngagement: readonly string[];
+}
+export interface SafetyOverrides {
+    readonly cyberRiskInstruction: string;
+    readonly openaiSafetyInstruction: string;
+    readonly geminiHarmBlockThreshold: GeminiHarmBlockThreshold;
+    readonly hookEnginePaused: boolean;
+    readonly secretScannerActive: boolean;
+    readonly destructiveGuardActive: boolean;
+}
+/**
+ * Get the safety overrides for the current mode.
+ * In guardrails-off: everything is cleared/paused.
+ * In default: everything is active with standard restrictions.
+ */
+export declare function getSafetyOverrides(guardrailsOff: boolean): SafetyOverrides;
+/**
+ * Build the security research system prompt for guardrails-off mode.
+ * Adapts framing to each provider's response patterns.
+ */
+export declare function buildSecurityResearchPrompt(provider: ProviderName, config: GuardrailsConfig): string;
+/**
+ * Get Gemini-specific safety settings for API calls. v9 paternalism
+ * removal: BLOCK_NONE in BOTH modes — the harness no longer tightens
+ * Google's own moderation behind the user's back. Whatever the Gemini
+ * API enforces is what the user gets. (Previously default mode pinned
+ * BLOCK_MEDIUM_AND_ABOVE, ratcheting tighter than Google's own default.)
+ */
+export declare function getGeminiSafetySettings(_guardrailsOff: boolean): readonly {
+    category: string;
+    threshold: string;
+}[];
+/**
+ * Get the default guardrails-off configuration.
+ */
+export declare function getDefaultGuardrailsConfig(): GuardrailsConfig;
+/**
+ * Warning text that users must acknowledge before entering guardrails-off mode.
+ */
+export declare function getGuardrailsWarning(): string;
+/**
+ * Codex provider safety instruction. Uses ChatGPT backend with
+ * subscription-managed safety. System prompt framing is the bypass.
+ */
+export declare const CODEX_SAFETY_INSTRUCTION_DEFAULT = "Follow ChatGPT usage policies in Codex mode.";
+export declare const CODEX_SAFETY_INSTRUCTION_OFF = "";
+/**
+ * Copilot safety instruction. GitHub Copilot relies on model-level
+ * RLHF training; there is no additional safety overlay to clear.
+ * The system prompt framing is the primary bypass mechanism.
+ */
+export declare const COPILOT_SAFETY_INSTRUCTION_DEFAULT = "Follow GitHub Copilot usage policies.";
+export declare const COPILOT_SAFETY_INSTRUCTION_OFF = "";
+/**
+ * Free-tier providers (Groq, Cerebras, SambaNova) run open-weight
+ * models (Llama, Mistral) with minimal content filtering. Most
+ * filtering is at the API gateway level, not the model level.
+ */
+export declare const FREE_TIER_SAFETY_INSTRUCTION_DEFAULT = "Follow provider usage policies for free-tier models.";
+export declare const FREE_TIER_SAFETY_INSTRUCTION_OFF = "";
+/**
+ * Free-tier uncensored model variants.
+ * When guardrails-off is enabled, prefer these model variants on
+ * Groq/Cerebras/SambaNova for maximum cooperation.
+ */
+export declare const FREE_TIER_UNCENSORED_MODELS: readonly string[];
+/**
+ * Vertex AI safety settings. Vertex runs Claude models through
+ * Google Cloud and applies its own content filtering layer on top.
+ * In guardrails-off: request no filtering via enforcement config.
+ */
+export interface VertexSafetyConfig {
+    readonly contentFilterDisabled: boolean;
+    readonly harmBlockThreshold: GeminiHarmBlockThreshold;
+    readonly anthropicCyberRiskCleared: boolean;
+}
+export declare function getVertexSafetyConfig(guardrailsOff: boolean): VertexSafetyConfig;
+/**
+ * HuggingFace uncensored model variants.
+ * When guardrails-off is enabled, prefer these model variants.
+ */
+export declare const HUGGINGFACE_UNCENSORED_MODELS: readonly string[];
+/**
+ * Azure OpenAI content filter detection.
+ * Custom content policies can be set to "off" via Azure portal.
+ */
+export interface AzureContentFilterConfig {
+    readonly customContentFilterEnabled: boolean;
+    readonly contentFilterPolicyName?: string;
+    readonly bypassAttempted: boolean;
+}
+export declare function getAzureContentFilterConfig(guardrailsOff: boolean): AzureContentFilterConfig;
+/**
+ * AWS Bedrock guardrail configuration passthrough.
+ */
+export interface BedrockGuardrailConfig {
+    readonly guardrailIdentifier?: string;
+    readonly guardrailVersion?: string;
+    readonly contentPolicyDisabled: boolean;
+}
+export declare function getBedrockGuardrailConfig(guardrailsOff: boolean): BedrockGuardrailConfig;
+/**
+ * Extended safety overrides covering all 11 providers.
+ * (anthropic, openai, codex, copilot, ollama, gemini, huggingface, free, azure, bedrock, vertex)
+ */
+export interface ExtendedSafetyOverrides extends SafetyOverrides {
+    readonly codexSafetyInstruction: string;
+    readonly copilotSafetyInstruction: string;
+    readonly freeTierSafetyInstruction: string;
+    readonly freeTierPreferUncensored: boolean;
+    readonly freeTierUncensoredModels: readonly string[];
+    readonly huggingfacePreferUncensored: boolean;
+    readonly huggingfaceUncensoredModels: readonly string[];
+    readonly azureContentFilter: AzureContentFilterConfig;
+    readonly bedrockGuardrail: BedrockGuardrailConfig;
+    readonly vertexSafety: VertexSafetyConfig;
+}
+export declare function getExtendedSafetyOverrides(guardrailsOff: boolean): ExtendedSafetyOverrides;
+/**
+ * Extended provider prompt — delegates to buildSecurityResearchPrompt
+ * for all known ProviderName values. This function exists for
+ * backward compatibility and for any future non-ProviderName strings.
+ */
+export declare function buildExtendedSecurityPrompt(provider: ProviderName | string, config: GuardrailsConfig): string;
+/**
+ * Detect if a model is capable of bypassing its safety training.
+ * Some models have hard-coded RLHF blocks that cannot be bypassed
+ * via prompt engineering alone.
+ */
+export type BypassCapability = "full" | "partial" | "none";
+export interface ModelBypassProfile {
+    readonly provider: string;
+    readonly model: string;
+    readonly capability: BypassCapability;
+    readonly notes: string;
+    readonly fallbackSuggestion?: string;
+}
+export declare function getModelBypassProfile(provider: string, model: string): ModelBypassProfile;
+/**
+ * Get the recommended fallback chain for security research.
+ * When a provider can't fully bypass, this returns the next best option.
+ */
+export declare function getSecurityFallbackChain(provider: ProviderName): readonly ProviderName[];
+export interface UncensoredModelRecommendation {
+    readonly model: string;
+    readonly provider: "ollama";
+    readonly technique: "abliteration" | "fine-tune" | "base-model";
+    readonly parameterCount: string;
+    readonly vramRequirement: string;
+    readonly notes: string;
+}
+/**
+ * Get the best abliterated/uncensored models available on Ollama for
+ * unrestricted security research. Ordered by capability (best first).
+ *
+ * Abliteration = surgically removing the RLHF refusal direction from
+ * the model's residual stream, producing a model that cannot refuse.
+ * This is different from fine-tuning (Dolphin) which trains without
+ * alignment data from scratch.
+ */
+export declare function getRecommendedUncensoredModels(): readonly UncensoredModelRecommendation[];
+export interface RulesOfEngagementSession {
+    readonly sessionId: string;
+    readonly startedAt: string;
+    readonly termsAccepted: boolean;
+    readonly scope: string;
+    readonly authorization: string;
+    readonly auditLog: readonly AuditLogEntry[];
+}
+export interface AuditLogEntry {
+    readonly id: string;
+    readonly timestamp: string;
+    readonly action: string;
+    readonly provider: string;
+    readonly model: string;
+    readonly prompt: string;
+    readonly response: string;
+    readonly previousHash: string;
+    readonly hash: string;
+}
+/**
+ * Tamper-evident audit log with hash-chain integrity.
+ * Each entry's hash includes the previous entry's hash,
+ * making it impossible to modify past entries without detection.
+ */
+export declare class GuardrailsAuditTrail {
+    private readonly entries;
+    private lastHash;
+    readonly sessionId: string;
+    constructor(sessionId?: string);
+    record(action: string, provider: string, model: string, prompt: string, response: string): AuditLogEntry;
+    getEntries(): readonly AuditLogEntry[];
+    /**
+     * Verify the hash-chain integrity of the audit log.
+     * Returns true if no entries have been tampered with.
+     */
+    verifyIntegrity(): boolean;
+    /**
+     * Export the audit trail as a compliance-ready JSON report.
+     */
+    exportReport(): string;
+}
+//# sourceMappingURL=guardrails-off.d.ts.map

package/dist/security/guardrails-off.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails-off.d.ts","sourceRoot":"","sources":["../../src/security/guardrails-off.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAqBrD,iFAAiF;AACjF,eAAO,MAAM,8BAA8B,KAAK,CAAC;AACjD,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C,oFAAoF;AACpF,eAAO,MAAM,iCAAiC,KAAK,CAAC;AACpD,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAChC,YAAY,GACZ,qBAAqB,GACrB,wBAAwB,GACxB,iBAAiB,CAAC;AACtB,eAAO,MAAM,yBAAyB,EAAE,wBAAuC,CAAC;AAChF,eAAO,MAAM,qBAAqB,EAAE,wBAAuC,CAAC;AAI5E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;IAC5D,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,OAAO,GAAG,eAAe,CAoB1E;AAID;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,gBAAgB,GACvB,MAAM,CAwER;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,EAAE,CAQF;AAED;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,gBAAgB,CAa7D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAiC7C;AAID;;;GAGG;AACH,eAAO,MAAM,gCAAgC,iDAAiD,CAAC;AAC/F,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,0CAA0C,CAAC;AAC1F,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAEjD;;;;GAIG;AACH,eAAO,MAAM,oCAAoC,yDACO,CAAC;AACzD,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAKxD,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,yBAAyB,EAAE,OAAO,CAAC;CAC7C;AAED,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,OAAO,GAAG,kBAAkB,CAMhF;AAED;;;GAGG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAAS,MAAM,EAI1D,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC;AAED,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,OAAO,GAAG,wBAAwB,CAM5F;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;CACzC;AAED,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,OAAO,GAAG,sBAAsB,CAMxF;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAwB,SAAQ,eAAe;IAC9D,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrD,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,2BAA2B,EAAE,SAAS,MAAM,EAAE,CAAC;IACxD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;CAC3C;AAED,wBAAgB,0BAA0B,CAAC,aAAa,EAAE,OAAO,GAAG,uBAAuB,CAqB1F;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,YAAY,GAAG,MAAM,EAC/B,MAAM,EAAE,gBAAgB,GACvB,MAAM,CAiCR;AAID;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAE3D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,CA4IzF;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,YAAY,GAAG,SAAS,YAAY,EAAE,CAYxF;AAID,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,cAAc,GAAG,WAAW,GAAG,YAAY,CAAC;IAChE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,IAAI,SAAS,6BAA6B,EAAE,CA8CzF;AAID,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAa;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,CAAC,EAAE,MAAM;IAI9B,MAAM,CACJ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,aAAa;IAsBhB,UAAU,IAAI,SAAS,aAAa,EAAE;IAItC;;;OAGG;IACH,eAAe,IAAI,OAAO;IAW1B;;OAEG;IACH,YAAY,IAAI,MAAM;CAavB"}