INGENIERÍA FULL-STACK, MODELOS DE IA & CIENCIA DE DATOS

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;

class CerberusAntiInjection
{
    /**
     * Inspección semántica de prompt injection y vectores OWASP.
     */
    public function handle(Request $request, Closure $next): Response
    {
        $payload = json_encode($request->all());

        // Firmas heurísticas de ataque contra modelos LLM
        $injectionPatterns = [
            '/(ignore|desobedece|olvida)\s+(all|todas|previous|anteriores)/i',
            '/(system\s+prompt|dan\s+mode|jailbreak|developer\s+mode)/i',
            '/(print|reveal|muestra)\s+(system|claves|passwords|env)/i',
            '/(<script|union\s+select|exec\(|eval\()/i'
        ];

        foreach ($injectionPatterns as $pattern) {
            if (preg_match($pattern, $payload, $matches)) {
                // Registro forense inmutable de telemetría SIEM
                \Log::channel('security')->warning('CERBERUS_BLOCK_INJECTION', [
                    'ip' => $request->ip(),
                    'vector' => $matches[0],
                    'cvss_score' => 9.1,
                    'timestamp' => now()->toIso8601String()
                ]);

                return response()->json([
                    'status' => 403,
                    'error' => 'BLOCKED_BY_CERBERUS_WAF',
                    'message' => 'Vector analizado por salvaguardas BioCoreXStack.',
                    'incident_id' => 'SEC-' . bin2hex(random_bytes(6))
                ], 403);
            }
        }

        return $next($request);
    }
}