@agentsean/actions 1.0.0

package/dist/scan.js

@@ -0,0 +1,210 @@
+/**
+ * Output-side scanners. Applied to Action text, never to crawled input.
+ * Classifiers score ~60% on benign SEO trigger words — that is why we scan
+ * what we would write, not what we read.
+ */
+function inRange(cp, a, b) {
+    return cp >= a && cp <= b;
+}
+function classifyInvisible(cp) {
+    if (inRange(cp, 0xe0000, 0xe007f))
+        return "tag_block";
+    if (cp === 0x200e ||
+        cp === 0x200f ||
+        inRange(cp, 0x202a, 0x202e) ||
+        inRange(cp, 0x2066, 0x2069)) {
+        return "bidi";
+    }
+    if (inRange(cp, 0x200b, 0x200d) || cp === 0x2060 || cp === 0xfeff || cp === 0x180e) {
+        return "zero_width";
+    }
+    if (cp === 0x00ad ||
+        cp === 0x034f ||
+        cp === 0x061c ||
+        cp === 0x115f ||
+        cp === 0x1160 ||
+        cp === 0x17b4 ||
+        cp === 0x17b5 ||
+        cp === 0x3164 ||
+        cp === 0xffa0) {
+        return "other_invisible";
+    }
+    if (inRange(cp, 0x00, 0x08) ||
+        cp === 0x0b ||
+        cp === 0x0c ||
+        inRange(cp, 0x0e, 0x1f) ||
+        inRange(cp, 0x7f, 0x9f)) {
+        return "ctrl";
+    }
+    if (inRange(cp, 0xfe00, 0xfe0f) || inRange(cp, 0xe0100, 0xe01ef))
+        return "variation";
+    return null;
+}
+export const BANNED_PATTERNS = [
+    { id: "ignore_previous", re: /ignore\s+(all\s+)?(previous|prior|above)/i },
+    { id: "disregard_previous", re: /disregard\s+(the\s+)?(previous|above)/i },
+    { id: "system_prompt", re: /system\s+prompt/i },
+    { id: "you_are_now", re: /you\s+are\s+(now\s+)?an?\s+/i },
+    { id: "system_tag", re: /<\/?system>/i },
+    { id: "special_token", re: /<\|.*?\|>/ },
+    { id: "inst_tag", re: /\[INST\]/i },
+    { id: "instruction_header", re: /###\s*Instruction/i },
+    { id: "assistant_colon", re: /\bassistant:/i },
+    { id: "developer_mode", re: /developer\s+mode/i },
+    { id: "do_anything_now", re: /do\s+anything\s+now/i },
+    { id: "jailbreak", re: /\bjailbreak\b/i },
+    { id: "prompt_injection", re: /prompt\s+injection/i },
+    { id: "ai_agent_colon", re: /AI\s+agent:/i },
+    { id: "llm_colon", re: /\bLLM:/ },
+    { id: "x_ai_colon", re: /\bX-AI:/i },
+    { id: "missing_license", re: /MissingLicenseKeyException/i },
+    { id: "eth_address", re: /\b0x[a-fA-F0-9]{40}\b/ },
+    { id: "bc1", re: /\bbc1[a-z0-9]{25,}\b/ },
+    { id: "rm_rf", re: /\brm\s+-rf\b/ },
+    { id: "drop_table", re: /\bDROP\s+TABLE\b/i },
+    { id: "script_tag", re: /<script\b/i },
+    { id: "javascript_url", re: /javascript:/i },
+    { id: "data_html", re: /data:text\/html/i },
+];
+const CYRILLIC_FOLD = {
+    а: "a",
+    е: "e",
+    о: "o",
+    р: "p",
+    с: "c",
+    у: "y",
+    х: "x",
+    і: "i",
+    ѕ: "s",
+    ї: "i",
+};
+export function foldHomoglyphs(text) {
+    return [...text]
+        .map((ch) => {
+        const lower = ch.toLowerCase();
+        return CYRILLIC_FOLD[lower] ?? ch;
+    })
+        .join("");
+}
+export function invisibleHits(text) {
+    const kindSet = new Set();
+    let count = 0;
+    for (const ch of text) {
+        const kind = classifyInvisible(ch.codePointAt(0) ?? 0);
+        if (kind) {
+            count += 1;
+            kindSet.add(kind);
+        }
+    }
+    return { count, kinds: [...kindSet] };
+}
+export function stripInvisible(text) {
+    let out = "";
+    for (const ch of text) {
+        if (!classifyInvisible(ch.codePointAt(0) ?? 0))
+            out += ch;
+    }
+    return out;
+}
+export function bannedHits(text) {
+    const folded = foldHomoglyphs(text.normalize("NFKC"));
+    const hits = [];
+    for (const p of BANNED_PATTERNS) {
+        p.re.lastIndex = 0;
+        if (p.re.test(folded) || p.re.test(text))
+            hits.push(p.id);
+    }
+    return hits;
+}
+function tryDecodeBase64(chunk) {
+    if (chunk.length < 40 || chunk.length % 4 === 1)
+        return null;
+    if (!/^[A-Za-z0-9+/]+=*$/.test(chunk) && !/^[A-Za-z0-9_-]+=*$/.test(chunk))
+        return null;
+    try {
+        const buf = Buffer.from(chunk.replace(/-/g, "+").replace(/_/g, "/"), "base64");
+        if (buf.length < 8)
+            return null;
+        const s = buf.toString("utf8");
+        const printable = [...s].filter((c) => (c >= " " && c <= "~") || c === "\n").length;
+        if (printable / s.length < 0.6)
+            return null;
+        return s;
+    }
+    catch {
+        return null;
+    }
+}
+const BASE64_CHUNK = /[A-Za-z0-9+/_-]{40,}={0,2}/g;
+const PCT_SEQ = /(?:%[0-9a-fA-F]{2}){8,}/g;
+const ENTITY_SEQ = /(?:&#(?:x[0-9a-fA-F]+|\d+);){10,}/gi;
+const U_ESCAPE = /(?:\\u[0-9a-fA-F]{4}){4,}/g;
+const HEX_BLOB = /(?:[0-9a-fA-F]{2}){20,}/g;
+function decodeEntities(seq) {
+    return seq
+        .replace(/&#x([0-9a-fA-F]+);/gi, (_, h) => String.fromCodePoint(Number.parseInt(h, 16)))
+        .replace(/&#(\d+);/g, (_, d) => String.fromCodePoint(Number.parseInt(d, 10)));
+}
+function rot13(s) {
+    return s.replace(/[a-zA-Z]/g, (ch) => {
+        const base = ch <= "Z" ? 65 : 97;
+        return String.fromCharCode(((ch.charCodeAt(0) - base + 13) % 26) + base);
+    });
+}
+export function encodedPayloadHits(text) {
+    const hits = [];
+    const candidates = [];
+    for (const m of text.match(BASE64_CHUNK) ?? []) {
+        const dec = tryDecodeBase64(m);
+        if (dec)
+            candidates.push(dec);
+    }
+    for (const m of text.match(PCT_SEQ) ?? []) {
+        try {
+            candidates.push(decodeURIComponent(m));
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    for (const m of text.match(ENTITY_SEQ) ?? []) {
+        candidates.push(decodeEntities(m));
+    }
+    for (const m of text.match(U_ESCAPE) ?? []) {
+        candidates.push(m.replace(/\\u([0-9a-fA-F]{4})/g, (_, h) => String.fromCharCode(Number.parseInt(h, 16))));
+    }
+    for (const m of text.match(HEX_BLOB) ?? []) {
+        try {
+            const buf = Buffer.from(m, "hex");
+            const s = buf.toString("utf8");
+            const printable = [...s].filter((c) => c >= " " && c <= "~").length;
+            if (s.length && printable / s.length >= 0.6)
+                candidates.push(s);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    candidates.push(rot13(text));
+    for (const c of candidates) {
+        const banned = bannedHits(c);
+        if (banned.length)
+            hits.push(...banned.map((id) => `encoded:${id}`));
+    }
+    return [...new Set(hits)];
+}
+export function collectActionText(value) {
+    if (typeof value === "string")
+        return value;
+    if (typeof value === "number" || typeof value === "boolean")
+        return String(value);
+    if (Array.isArray(value))
+        return value.map(collectActionText).join("\n");
+    if (value && typeof value === "object") {
+        return Object.values(value)
+            .map(collectActionText)
+            .join("\n");
+    }
+    return "";
+}
+//# sourceMappingURL=scan.js.map

package/dist/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,SAAS,OAAO,CAAC,EAAU,EAAE,CAAS,EAAE,CAAS;IAC/C,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAU;IACnC,IAAI,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IACtD,IACE,EAAE,KAAK,MAAM;QACb,EAAE,KAAK,MAAM;QACb,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC;QAC3B,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;QACnF,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IACE,EAAE,KAAK,MAAM;QACb,EAAE,KAAK,MAAM;QACb,EAAE,KAAK,MAAM;QACb,EAAE,KAAK,MAAM;QACb,EAAE,KAAK,MAAM;QACb,EAAE,KAAK,MAAM;QACb,EAAE,KAAK,MAAM;QACb,EAAE,KAAK,MAAM;QACb,EAAE,KAAK,MAAM,EACb,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,IACE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC;QACvB,EAAE,KAAK,IAAI;QACX,EAAE,KAAK,IAAI;QACX,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC;QACvB,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EACvB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IACrF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAiC;IAC3D,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,2CAA2C,EAAE;IAC1E,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,wCAAwC,EAAE;IAC1E,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,kBAAkB,EAAE;IAC/C,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,8BAA8B,EAAE;IACzD,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE;IACxC,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE;IACxC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE;IACnC,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,oBAAoB,EAAE;IACtD,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE;IAC9C,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,mBAAmB,EAAE;IACjD,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,sBAAsB,EAAE;IACrD,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,gBAAgB,EAAE;IACzC,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,qBAAqB,EAAE;IACrD,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,cAAc,EAAE;IAC5C,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE;IACjC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE;IACpC,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,6BAA6B,EAAE;IAC5D,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,uBAAuB,EAAE;IAClD,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,sBAAsB,EAAE;IACzC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE;IACnC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,mBAAmB,EAAE;IAC7C,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE;IACtC,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,cAAc,EAAE;IAC5C,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,kBAAkB,EAAE;CAC5C,CAAC;AAEF,MAAM,aAAa,GAA2B;IAC5C,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,EAAE,EAAE,GAAG;CACR,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,CAAC,GAAG,IAAI,CAAC;SACb,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,GAAG,IAAI,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,CAAC,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC/E,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACpF,IAAI,SAAS,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG,6BAA6B,CAAC;AACnD,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAC3C,MAAM,UAAU,GAAG,qCAAqC,CAAC;AACzD,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAC9C,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAE5C,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,GAAG;SACP,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAChD,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAC7C;SACA,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CACrC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAC7C,CAAC;AACN,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,GAAG;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CACb,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CACjD,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAC5C,CACF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;YACpE,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,GAAG,CAAC,CAAC,MAAM,IAAI,GAAG;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;aACnD,GAAG,CAAC,iBAAiB,CAAC;aACtB,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,227 @@
+import type { ActionKind } from "./kinds.js";
+export type AutonomyTier = 0 | 1 | 2 | 3 | 4;
+export type ActionTarget = {
+    pageId: string;
+    url: string;
+};
+/** Default metric is clicks — GSC impressions were contaminated 2025-05-13 → 2026-04-27. */
+export type Impact = {
+    metric: "clicks";
+    estimate: number;
+    confidence: number;
+};
+export type TitlePayload = {
+    title: string;
+};
+export type MetaPayload = {
+    metaDescription: string;
+};
+export type AltPayload = {
+    selector: string;
+    alt: string;
+};
+export type HeadingPayload = {
+    level: 1 | 2 | 3 | 4 | 5 | 6;
+    text: string;
+};
+export type InternalLinkPayload = {
+    hrefPageId: string;
+    hrefUrl: string;
+    anchor: string;
+};
+export type JsonLdPayload = {
+    type: string;
+    json: Record<string, unknown>;
+};
+export type ContentPayload = {
+    body: string;
+};
+export type CreatePagePayload = {
+    path: string;
+    title: string;
+    body: string;
+};
+export type RobotsTxtPayload = {
+    body: string;
+};
+export type MetaRobotsPayload = {
+    content: string;
+};
+export type RedirectPayload = {
+    fromPageId: string;
+    fromUrl: string;
+    toPageId: string;
+    toUrl: string;
+    status: 301 | 410;
+};
+export type CanonicalPayload = {
+    canonicalPageId: string;
+    canonicalUrl: string;
+};
+export type HreflangPayload = {
+    lang: string;
+    hrefPageId: string;
+    hrefUrl: string;
+};
+export type SitemapPayload = {
+    sitemapUrl: string;
+};
+export type ImageDimPayload = {
+    selector: string;
+    width: number;
+    height: number;
+};
+export type LangPayload = {
+    lang: string;
+};
+export type ViewportPayload = {
+    content: string;
+};
+export type EmptyPayload = Record<string, never>;
+export type RefusedPayload = {
+    reason: string;
+};
+export type ActionPayload = TitlePayload | MetaPayload | AltPayload | HeadingPayload | InternalLinkPayload | JsonLdPayload | ContentPayload | CreatePagePayload | RobotsTxtPayload | MetaRobotsPayload | RedirectPayload | CanonicalPayload | HreflangPayload | SitemapPayload | ImageDimPayload | LangPayload | ViewportPayload | EmptyPayload | RefusedPayload;
+export type Action = {
+    id: string;
+    siteId: string;
+    kind: ActionKind;
+    tier: AutonomyTier;
+    target: ActionTarget;
+    payload: ActionPayload;
+    rationale: string[];
+    findingIds: string[];
+    estimatedImpact: Impact;
+};
+export type Veto = {
+    check: number;
+    code: string;
+    detail: string;
+};
+export type ValidationOk = {
+    ok: true;
+};
+export type ValidationReject = {
+    ok: false;
+    vetoes: Veto[];
+};
+export type ValidationResult = ValidationOk | ValidationReject;
+export type EntitySource = "crawl" | "user" | "third_party";
+export type SitePolicy = {
+    id: string;
+    origin: string;
+    autonomyMode: string;
+    observeUntil: string | null;
+    ymylCategory: string | null;
+    killswitch: number;
+    neverTouchGlobs: string[];
+    createdAt: string;
+};
+export type PageRow = {
+    id: string;
+    url: string;
+    title: string | null;
+    metaDescription: string | null;
+    h1: string | null;
+};
+export type EntityRow = {
+    entity: string;
+    source: EntitySource;
+};
+export type TwoKeyApproval = {
+    actor: string;
+    hmac: string;
+};
+export type ValidationContext = {
+    now: Date;
+    site: SitePolicy;
+    pages: PageRow[];
+    allowlist: string[];
+    entities: EntityRow[];
+    appliedThisRun: number;
+    appliedThisHour: number;
+    appliedThisDay: number;
+    newPagesToday: number;
+    contentRefreshToday: number;
+    spentUsdToday: number;
+    budgetUsdDaily: number;
+    estimatedCostUsd: number;
+    twoKeyApprovals: TwoKeyApproval[];
+    halted: boolean;
+    beforeText: string;
+    afterText: string;
+    runId: string;
+    /** HMAC key used to verify two-key signatures. */
+    approvalKey: Buffer;
+};
+export type AdapterCapabilities = {
+    kind: string;
+    reads: boolean;
+    writes: boolean;
+    pullRequests: boolean;
+    rollback: boolean;
+};
+export type AdapterRead = {
+    targetRef: string;
+    body: string;
+    contentType: string;
+};
+export type AdapterDryRun = {
+    targetRef: string;
+    before: string;
+    after: string;
+    summary: string;
+};
+export type AdapterApplyResult = {
+    targetRef: string;
+    before: string;
+    after: string;
+    summary: string;
+    branch?: string | undefined;
+    commitSha?: string | undefined;
+    prUrl?: string | undefined;
+    diff?: string | undefined;
+};
+export type AppliedChange = {
+    id: string;
+    actionId: string;
+    siteId: string;
+    targetRef: string;
+    before: string;
+    after: string;
+    summary: string;
+    branch?: string | undefined;
+    commitSha?: string | undefined;
+    prUrl?: string | undefined;
+};
+export type AdapterVerifyResult = {
+    ok: boolean;
+    detail: string;
+};
+export type SiteAdapter = {
+    kind: string;
+    capabilities(): AdapterCapabilities;
+    read(target: ActionTarget): Promise<AdapterRead>;
+    dryRun(action: Action): Promise<AdapterDryRun>;
+    apply(action: Action): Promise<AdapterApplyResult>;
+    verify(change: AppliedChange): Promise<AdapterVerifyResult>;
+    rollback(change: AppliedChange): Promise<AdapterApplyResult>;
+};
+export declare const DIFF_CAPS: Record<string, {
+    maxBytes: number;
+    maxPct: number;
+}>;
+export declare const BLAST: {
+    readonly maxUrlsPerRun: 25;
+    readonly maxPerHour: 40;
+    readonly maxPerDay: 80;
+    readonly newPagesPerDay: 2;
+    readonly contentRefreshPerDay: 2;
+};
+export declare const TITLE_MAX = 70;
+export declare const META_MAX = 320;
+export declare const ALT_MAX = 200;
+export declare const ANCHOR_MAX = 80;
+export declare const OBSERVE_MIN_MS: number;
+export declare const OBSERVE_DEFAULT_MS: number;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAE7C,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,4FAA4F;AAC5F,MAAM,MAAM,MAAM,GAAG;IACnB,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7C,MAAM,MAAM,WAAW,GAAG;IAAE,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC;AACtD,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAC3D,MAAM,MAAM,cAAc,GAAG;IAAE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC5E,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AAC5E,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC9C,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC9E,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAChD,MAAM,MAAM,iBAAiB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AACpD,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;CACnB,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AACjF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,MAAM,MAAM,cAAc,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AACpD,MAAM,MAAM,eAAe,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAClF,MAAM,MAAM,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC3C,MAAM,MAAM,eAAe,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAClD,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACjD,MAAM,MAAM,cAAc,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,MAAM,MAAM,aAAa,GACrB,YAAY,GACZ,WAAW,GACX,UAAU,GACV,cAAc,GACd,mBAAmB,GACnB,aAAa,GACb,cAAc,GACd,iBAAiB,GACjB,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,cAAc,GACd,eAAe,GACf,WAAW,GACX,eAAe,GACf,YAAY,GACZ,cAAc,CAAC;AAEnB,MAAM,MAAM,MAAM,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,IAAI,GAAG;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC;AACxC,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,IAAI,EAAE,CAAA;CAAE,CAAC;AAC7D,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,gBAAgB,CAAC;AAE/D,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,CAAC;AAE5D,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,IAAI,CAAC;IACV,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,IAAI,mBAAmB,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/C,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnD,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5D,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC9D,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAc1E,CAAC;AAEF,eAAO,MAAM,KAAK;;;;;;CAMR,CAAC;AAEX,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,QAAQ,MAAM,CAAC;AAC5B,eAAO,MAAM,OAAO,MAAM,CAAC;AAC3B,eAAO,MAAM,UAAU,KAAK,CAAC;AAC7B,eAAO,MAAM,cAAc,QAAsB,CAAC;AAClD,eAAO,MAAM,kBAAkB,QAA0B,CAAC"}

package/dist/types.js

@@ -0,0 +1,29 @@
+export const DIFF_CAPS = {
+    rewrite_title: { maxBytes: 120, maxPct: 100 },
+    rewrite_meta_description: { maxBytes: 400, maxPct: 100 },
+    rewrite_og_title: { maxBytes: 120, maxPct: 100 },
+    rewrite_og_description: { maxBytes: 400, maxPct: 100 },
+    rewrite_alt_text: { maxBytes: 250, maxPct: 100 },
+    fix_heading: { maxBytes: 200, maxPct: 20 },
+    add_h1: { maxBytes: 200, maxPct: 20 },
+    insert_internal_link: { maxBytes: 400, maxPct: 5 },
+    add_jsonld: { maxBytes: 4000, maxPct: 20 },
+    update_jsonld: { maxBytes: 4000, maxPct: 20 },
+    refresh_content: { maxBytes: 40_000, maxPct: 400 },
+    create_page: { maxBytes: 40_000, maxPct: 100 },
+    default: { maxBytes: 2000, maxPct: 15 },
+};
+export const BLAST = {
+    maxUrlsPerRun: 25,
+    maxPerHour: 40,
+    maxPerDay: 80,
+    newPagesPerDay: 2,
+    contentRefreshPerDay: 2,
+};
+export const TITLE_MAX = 70;
+export const META_MAX = 320;
+export const ALT_MAX = 200;
+export const ANCHOR_MAX = 80;
+export const OBSERVE_MIN_MS = 24 * 60 * 60 * 1000;
+export const OBSERVE_DEFAULT_MS = 7 * 24 * 60 * 60 * 1000;
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AA+MA,MAAM,CAAC,MAAM,SAAS,GAAyD;IAC7E,aAAa,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAC7C,wBAAwB,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IACxD,gBAAgB,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAChD,sBAAsB,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IACtD,gBAAgB,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAChD,WAAW,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;IAC1C,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;IACrC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE;IAClD,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;IAC1C,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;IAC7C,eAAe,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE;IAClD,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE;IAC9C,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;CACxC,CAAC;AAEF,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,aAAa,EAAE,EAAE;IACjB,UAAU,EAAE,EAAE;IACd,SAAS,EAAE,EAAE;IACb,cAAc,EAAE,CAAC;IACjB,oBAAoB,EAAE,CAAC;CACf,CAAC;AAEX,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC;AAC5B,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC;AAC3B,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAC7B,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC"}

package/dist/urls.d.ts

@@ -0,0 +1,6 @@
+export declare function extractUrls(value: unknown): string[];
+export declare function extractDomains(value: unknown): string[];
+export declare function registrableHint(hostname: string): string;
+export declare function sameSite(url: string, origin: string): boolean;
+export declare function matchGlob(url: string, glob: string): boolean;
+//# sourceMappingURL=urls.d.ts.map

package/dist/urls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"urls.d.ts","sourceRoot":"","sources":["../src/urls.ts"],"names":[],"mappings":"AAiBA,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAepD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAevD;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIxD;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAQ7D;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAG5D"}

package/dist/urls.js

@@ -0,0 +1,74 @@
+const URL_RE = /https?:\/\/[^\s"'<>\\]+/gi;
+const DOMAIN_RE = /\b(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,}\b/gi;
+function walk(value, into) {
+    if (typeof value === "string") {
+        into.push(value);
+        return;
+    }
+    if (Array.isArray(value)) {
+        for (const v of value)
+            walk(v, into);
+        return;
+    }
+    if (value && typeof value === "object") {
+        for (const v of Object.values(value))
+            walk(v, into);
+    }
+}
+export function extractUrls(value) {
+    const strings = [];
+    walk(value, strings);
+    const out = new Set();
+    for (const s of strings) {
+        for (const m of s.match(URL_RE) ?? []) {
+            try {
+                const u = new URL(m.replace(/[),.;]+$/, ""));
+                if (u.protocol === "http:" || u.protocol === "https:")
+                    out.add(u.href);
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    }
+    return [...out];
+}
+export function extractDomains(value) {
+    const strings = [];
+    walk(value, strings);
+    const out = new Set();
+    for (const s of strings) {
+        for (const m of s.match(DOMAIN_RE) ?? []) {
+            out.add(m.toLowerCase());
+        }
+        try {
+            if (/^https?:\/\//i.test(s))
+                out.add(new URL(s).hostname.toLowerCase());
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    return [...out];
+}
+export function registrableHint(hostname) {
+    const parts = hostname.toLowerCase().split(".").filter(Boolean);
+    if (parts.length <= 2)
+        return parts.join(".");
+    return parts.slice(-2).join(".");
+}
+export function sameSite(url, origin) {
+    try {
+        const a = new URL(url);
+        const b = new URL(origin);
+        return registrableHint(a.hostname) === registrableHint(b.hostname);
+    }
+    catch {
+        return false;
+    }
+}
+export function matchGlob(url, glob) {
+    const escaped = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+    return new RegExp(`^${escaped}$`, "i").test(url);
+}
+//# sourceMappingURL=urls.js.map

package/dist/urls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"urls.js","sourceRoot":"","sources":["../src/urls.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,GAAG,2BAA2B,CAAC;AAC3C,MAAM,SAAS,GAAG,4DAA4D,CAAC;AAE/E,SAAS,IAAI,CAAC,KAAc,EAAE,IAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;YAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC7C,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;oBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC;YACH,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAc;IAClD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,IAAY;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/E,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC"}

package/dist/validator.d.ts

@@ -0,0 +1,9 @@
+import { type Action, type ValidationContext, type ValidationResult } from "./types.js";
+/**
+ * Deterministic reference monitor. No network, no LLM. Every check can veto.
+ * Checks are independent: we collect all vetoes rather than failing closed on the first,
+ * so the red-team suite can assert on stable codes.
+ */
+export declare function validateAction(raw: unknown, ctx: ValidationContext): ValidationResult;
+export declare function validateParsed(action: Action, ctx: ValidationContext): ValidationResult;
+//# sourceMappingURL=validator.d.ts.map

package/dist/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../src/validator.ts"],"names":[],"mappings":"AAgBA,OAAO,EAKL,KAAK,MAAM,EACX,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAEtB,MAAM,YAAY,CAAC;AAkbpB;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,iBAAiB,GAAG,gBAAgB,CAsBrF;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,iBAAiB,GACrB,gBAAgB,CAElB"}