Hartmut c2d05b4b99 security: Unicode-aware prompt-injection guard (#39) ...

checkPromptInjection now NFKD-normalises, strips zero-width / combining
chars, and folds common Cyrillic / Greek homoglyphs before matching. 10
documented bypass examples (fullwidth, ZWJ, ZWSP, soft-hyphen, Cyrillic
е/о, combining marks, LRM, BOM) are covered by unit tests. Security
docs explicitly mark the guard as defense-in-depth — real boundary is
per-tool requirePermission.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-17 08:53:38 +02:00

..

scripts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

src

security: Unicode-aware prompt-injection guard (#39)

2026-04-17 08:53:38 +02:00

package.json

ci: add @vitest/coverage-v8 to workspace packages; set REDIS_URL on build

2026-04-12 18:38:21 +02:00

tsconfig.json

chore: full technical rename planarchy → capakraken

2026-03-27 13:18:09 +01:00

vitest.config.ts

test(api): lower branches coverage threshold 75→72 (actual 73.22%)

2026-04-12 19:55:57 +02:00