yakmesh 2.9.0 → 3.0.0

package/security/crypto-config.js

@@ -276,12 +276,13 @@ export function getBackupSignatureName(level = activeLevel) {
 /**
  * Generate a backup (SLH-DSA) keypair using the current security level
  * Note: SLH-DSA keys are much smaller than ML-DSA, but signatures are larger
+ * @param {Uint8Array} [seed] - Optional seed for deterministic generation
  * @param {number} [level] - Optional security level
  * @returns {Object} { publicKey, secretKey }
  */
-export function generateBackupSignatureKeyPair(level = activeLevel) {
+export function generateBackupSignatureKeyPair(seed = null, level = activeLevel) {
   const algo = CRYPTO_PROFILES[level].backupSignature.algorithm;
-  return algo.keygen();
+  return seed ? algo.keygen(seed) : algo.keygen();
 }
 
 /**
@@ -324,7 +325,7 @@ export function verifyBackup(signature, message, publicKey, level = activeLevel)
 export function generateDualSignatureKeyPairs(seed, level = activeLevel) {
   return {
     primary: generateSignatureKeyPair(seed, level),
-    backup: generateBackupSignatureKeyPair(level),
+    backup: generateBackupSignatureKeyPair(null, level),
   };
 }
 

package/security/dharma-moderation.js

@@ -236,9 +236,10 @@ export class DharmaModerator extends EventEmitter {
     for (const [categoryKey, category] of Object.entries(PROHIBITED_CATEGORIES)) {
       if (!this.config.enabledCategories.includes(categoryKey)) continue;
       
-      // Add keyword patterns (word boundary wrapped)
+      // Add keyword patterns (word boundary wrapped, metacharacters escaped)
       for (const keyword of category.keywords) {
-        const pattern = new RegExp('\\b' + keyword.replace(/\s+/g, '\\s+') + '\\b', 'i');
+        const escaped = keyword.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+        const pattern = new RegExp('\\b' + escaped.replace(/\s+/g, '\\s+') + '\\b', 'i');
         this.patternIndex.set(pattern, { category, match: 'keyword', original: keyword });
       }
       
@@ -513,4 +514,4 @@ export function createDefaultModerator() {
 // EXPORTED CONSTANTS
 // ============================================================
 
-export default DharmaModerator;
+export default DharmaModerator;