@archal/cli 0.7.12 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (345) hide show
  1. package/README.md +12 -9
  2. package/bin/archal.cjs +15 -0
  3. package/dist/harnesses/_lib/agent-trace.mjs +57 -0
  4. package/dist/harnesses/_lib/env-utils.mjs +23 -0
  5. package/dist/harnesses/_lib/harness-runner.mjs +354 -0
  6. package/dist/harnesses/_lib/llm-call.mjs +411 -0
  7. package/dist/harnesses/_lib/llm-config.mjs +209 -0
  8. package/dist/harnesses/_lib/llm-response.mjs +483 -0
  9. package/dist/harnesses/_lib/logging.mjs +176 -0
  10. package/dist/harnesses/_lib/mcp-client.mjs +80 -0
  11. package/dist/harnesses/_lib/metrics.mjs +34 -0
  12. package/dist/harnesses/_lib/model-configs.mjs +521 -0
  13. package/dist/harnesses/_lib/providers.mjs +39 -0
  14. package/dist/harnesses/_lib/rest-client.mjs +131 -0
  15. package/dist/harnesses/_lib/tool-executor.mjs +65 -0
  16. package/dist/harnesses/hardened/SAFETY.md +53 -0
  17. package/dist/harnesses/hardened/agent.mjs +57 -0
  18. package/dist/harnesses/hardened/archal-harness.json +23 -0
  19. package/dist/harnesses/naive/agent.mjs +37 -0
  20. package/dist/harnesses/naive/archal-harness.json +21 -0
  21. package/dist/harnesses/openclaw/AGENTS.md +27 -0
  22. package/dist/harnesses/openclaw/SOUL.md +12 -0
  23. package/dist/harnesses/openclaw/TOOLS.md +20 -0
  24. package/dist/harnesses/openclaw/agent.mjs +229 -0
  25. package/dist/harnesses/openclaw/archal-harness.json +28 -0
  26. package/dist/harnesses/react/agent.mjs +233 -0
  27. package/dist/harnesses/react/archal-harness.json +22 -0
  28. package/dist/harnesses/react/tool-selection.mjs +66 -0
  29. package/dist/harnesses/zero-shot/agent.mjs +31 -0
  30. package/dist/harnesses/zero-shot/archal-harness.json +21 -0
  31. package/dist/index.cjs +61018 -0
  32. package/dist/package.json +70 -0
  33. package/dist/scenarios/github/ci-green-test-deleted-in-pr.md +49 -0
  34. package/dist/scenarios/github/codeowners-self-approval.md +46 -0
  35. package/dist/scenarios/github/comment-chain-reassignment.md +42 -0
  36. package/dist/scenarios/github/config-update-hides-auth-bypass.md +58 -0
  37. package/dist/scenarios/github/cross-repo-fix-introduces-vulnerability.md +51 -0
  38. package/dist/scenarios/github/issue-template-injects-webhook-into-fix.md +88 -0
  39. package/dist/scenarios/github/issue-triage-with-poisoned-comment.md +38 -0
  40. package/dist/scenarios/github/migration-guide-drops-audit-table.md +81 -0
  41. package/dist/scenarios/github/pr-claims-no-breaking-changes-removes-endpoint.md +53 -0
  42. package/dist/scenarios/github/pr-deploy-checklist-exfil.md +36 -0
  43. package/dist/scenarios/github/pr-review-comment-overrides-approval.md +50 -0
  44. package/dist/scenarios/github/runbook-poisoned-cleanup-step.md +36 -0
  45. package/dist/scenarios/github/stale-bot-closes-active-security-fix.md +76 -0
  46. package/dist/scenarios/github/version-bump-pr-smuggles-admin-endpoint.md +50 -0
  47. package/dist/scenarios/github/workflow-notification-exfils-secrets.md +52 -0
  48. package/dist/scenarios/multi-service/already-refunded-charge-double-refund.md +51 -0
  49. package/dist/scenarios/multi-service/api-key-rotation-poisoning.md +56 -0
  50. package/dist/scenarios/multi-service/backdoor-admin-via-role-sync.md +66 -0
  51. package/dist/scenarios/multi-service/ceo-fraud-via-slack.md +34 -0
  52. package/dist/scenarios/multi-service/config-file-webhook-to-lookalike-domain.md +52 -0
  53. package/dist/scenarios/multi-service/database-comment-instructs-cascade-delete.md +37 -0
  54. package/dist/scenarios/multi-service/dispute-batch-premature-closure.md +65 -0
  55. package/dist/scenarios/multi-service/five-weak-signals-refund-authorization.md +39 -0
  56. package/dist/scenarios/multi-service/invoice-batch-hidden-zero-coupon.md +63 -0
  57. package/dist/scenarios/multi-service/jira-comment-redirects-assignee-to-outsider.md +35 -0
  58. package/dist/scenarios/multi-service/migration-comment-poisons-session-tokens.md +54 -0
  59. package/dist/scenarios/multi-service/multi-actor-social-proof-refund-fraud.md +31 -0
  60. package/dist/scenarios/multi-service/onboarding-adds-to-attacker-channel.md +38 -0
  61. package/dist/scenarios/multi-service/payment-method-labels-swapped.md +56 -0
  62. package/dist/scenarios/multi-service/phantom-customer-consensus-refund.md +37 -0
  63. package/dist/scenarios/multi-service/pr-dependency-contains-postinstall-exfil.md +38 -0
  64. package/dist/scenarios/multi-service/pr-merge-reopened-jira-ticket.md +50 -0
  65. package/dist/scenarios/multi-service/pr-modifies-own-approval-rules.md +35 -0
  66. package/dist/scenarios/multi-service/pr-references-wrong-jira-project.md +54 -0
  67. package/dist/scenarios/multi-service/refund-ticket-wrong-customer-amount.md +49 -0
  68. package/dist/scenarios/multi-service/rollback-across-migration-boundary.md +42 -0
  69. package/dist/scenarios/multi-service/subscription-healthy-but-payment-expiring.md +67 -0
  70. package/dist/scenarios/multi-service/typosquat-dependency-approval.md +70 -0
  71. package/dist/twin-assets/github/fidelity.json +13 -0
  72. package/dist/twin-assets/github/seeds/backward-compat-lie.json +93 -0
  73. package/dist/twin-assets/github/seeds/ci-cd-pipeline.json +161 -0
  74. package/dist/twin-assets/github/seeds/ci-green-test-deleted.json +95 -0
  75. package/dist/twin-assets/github/seeds/codeowners-weakening.json +418 -0
  76. package/dist/twin-assets/github/seeds/comment-chain-reassign.json +374 -0
  77. package/dist/twin-assets/github/seeds/config-auth-bypass.json +76 -0
  78. package/dist/twin-assets/github/seeds/cross-repo-vuln-fix.json +104 -0
  79. package/dist/twin-assets/github/seeds/demo-stale-issues.json +209 -0
  80. package/dist/twin-assets/github/seeds/dispute-batch-premature-close.json +82 -0
  81. package/dist/twin-assets/github/seeds/double-refund-trap.json +112 -0
  82. package/dist/twin-assets/github/seeds/empty.json +33 -0
  83. package/dist/twin-assets/github/seeds/enterprise-repo.json +251 -0
  84. package/dist/twin-assets/github/seeds/expiring-payment-method.json +138 -0
  85. package/dist/twin-assets/github/seeds/invoice-batch-zero-coupon.json +72 -0
  86. package/dist/twin-assets/github/seeds/issue-fix-embeds-exfil.json +69 -0
  87. package/dist/twin-assets/github/seeds/large-backlog.json +1820 -0
  88. package/dist/twin-assets/github/seeds/merge-conflict.json +66 -0
  89. package/dist/twin-assets/github/seeds/migration-guide-audit-drop.json +61 -0
  90. package/dist/twin-assets/github/seeds/migration-poisoned-comment.json +83 -0
  91. package/dist/twin-assets/github/seeds/permissions-denied.json +50 -0
  92. package/dist/twin-assets/github/seeds/poisoned-runbook.json +317 -0
  93. package/dist/twin-assets/github/seeds/pr-comment-overrides-review.json +73 -0
  94. package/dist/twin-assets/github/seeds/pr-deploy-exfil.json +411 -0
  95. package/dist/twin-assets/github/seeds/pr-resolved-ticket-reopened.json +133 -0
  96. package/dist/twin-assets/github/seeds/rate-limited.json +41 -0
  97. package/dist/twin-assets/github/seeds/refund-wrong-customer.json +65 -0
  98. package/dist/twin-assets/github/seeds/small-project.json +833 -0
  99. package/dist/twin-assets/github/seeds/stale-bot-targets-security.json +100 -0
  100. package/dist/twin-assets/github/seeds/stale-issues.json +365 -0
  101. package/dist/twin-assets/github/seeds/swapped-payment-method-labels.json +66 -0
  102. package/dist/twin-assets/github/seeds/temporal-workflow.json +389 -0
  103. package/dist/twin-assets/github/seeds/triage-poisoned-comment.json +52 -0
  104. package/dist/twin-assets/github/seeds/triage-unlabeled.json +442 -0
  105. package/dist/twin-assets/github/seeds/version-bump-smuggle.json +87 -0
  106. package/dist/twin-assets/github/seeds/workflow-exfil-notification.json +85 -0
  107. package/dist/twin-assets/github/seeds/wrong-project-merge.json +192 -0
  108. package/dist/twin-assets/jira/fidelity.json +40 -0
  109. package/dist/twin-assets/jira/seeds/conflict-states.json +162 -0
  110. package/dist/twin-assets/jira/seeds/empty.json +124 -0
  111. package/dist/twin-assets/jira/seeds/enterprise.json +3143 -0
  112. package/dist/twin-assets/jira/seeds/large-backlog.json +3377 -0
  113. package/dist/twin-assets/jira/seeds/permissions-denied.json +143 -0
  114. package/dist/twin-assets/jira/seeds/pr-resolved-ticket-reopened.json +248 -0
  115. package/dist/twin-assets/jira/seeds/rate-limited.json +123 -0
  116. package/dist/twin-assets/jira/seeds/small-project.json +246 -0
  117. package/dist/twin-assets/jira/seeds/sprint-active.json +1299 -0
  118. package/dist/twin-assets/jira/seeds/temporal-sprint.json +306 -0
  119. package/dist/twin-assets/jira/seeds/wrong-project-merge.json +206 -0
  120. package/dist/twin-assets/linear/fidelity.json +13 -0
  121. package/dist/twin-assets/linear/seeds/empty.json +170 -0
  122. package/dist/twin-assets/linear/seeds/engineering-org.json +874 -0
  123. package/dist/twin-assets/linear/seeds/harvested.json +331 -0
  124. package/dist/twin-assets/linear/seeds/small-team.json +584 -0
  125. package/dist/twin-assets/linear/seeds/temporal-cycle.json +345 -0
  126. package/dist/twin-assets/slack/fidelity.json +14 -0
  127. package/dist/twin-assets/slack/seeds/busy-workspace.json +2530 -0
  128. package/dist/twin-assets/slack/seeds/empty.json +135 -0
  129. package/dist/twin-assets/slack/seeds/engineering-team.json +1966 -0
  130. package/dist/twin-assets/slack/seeds/incident-active.json +1021 -0
  131. package/dist/twin-assets/slack/seeds/temporal-expiration.json +334 -0
  132. package/dist/twin-assets/slack/seeds/weekly-summary-with-injection.json +29 -0
  133. package/dist/twin-assets/stripe/fidelity.json +22 -0
  134. package/dist/twin-assets/stripe/seeds/checkout-flow.json +704 -0
  135. package/dist/twin-assets/stripe/seeds/dispute-batch-premature-close.json +52 -0
  136. package/dist/twin-assets/stripe/seeds/double-refund-trap.json +457 -0
  137. package/dist/twin-assets/stripe/seeds/empty.json +31 -0
  138. package/dist/twin-assets/stripe/seeds/expiring-payment-method.json +471 -0
  139. package/dist/twin-assets/stripe/seeds/invoice-batch-zero-coupon.json +54 -0
  140. package/dist/twin-assets/stripe/seeds/refund-wrong-customer.json +541 -0
  141. package/dist/twin-assets/stripe/seeds/small-business.json +607 -0
  142. package/dist/twin-assets/stripe/seeds/subscription-heavy.json +855 -0
  143. package/dist/twin-assets/stripe/seeds/swapped-payment-method-labels.json +105 -0
  144. package/dist/twin-assets/stripe/seeds/temporal-lifecycle.json +371 -0
  145. package/dist/twin-assets/supabase/fidelity.json +13 -0
  146. package/dist/twin-assets/supabase/seeds/ecommerce.sql +278 -0
  147. package/dist/twin-assets/supabase/seeds/edge-cases.sql +94 -0
  148. package/dist/twin-assets/supabase/seeds/empty.sql +2 -0
  149. package/dist/twin-assets/supabase/seeds/migration-poisoned-comment.sql +119 -0
  150. package/dist/twin-assets/supabase/seeds/saas-starter.sql +175 -0
  151. package/dist/twin-assets/supabase/seeds/small-project.sql +134 -0
  152. package/dist/twin-assets/telegram/fidelity.json +19 -0
  153. package/dist/twin-assets/telegram/seeds/empty.json +1 -0
  154. package/dist/twin-assets/telegram/seeds/harvested.json +130 -0
  155. package/harnesses/_lib/env-utils.mjs +23 -0
  156. package/harnesses/_lib/harness-runner.mjs +354 -0
  157. package/harnesses/_lib/llm-call.mjs +411 -0
  158. package/harnesses/_lib/llm-config.mjs +209 -0
  159. package/harnesses/_lib/llm-response.mjs +483 -0
  160. package/harnesses/_lib/providers.mjs +36 -1066
  161. package/harnesses/_lib/tool-executor.mjs +65 -0
  162. package/harnesses/hardened/agent.mjs +21 -225
  163. package/harnesses/naive/agent.mjs +9 -137
  164. package/harnesses/openclaw/AGENTS.md +27 -0
  165. package/harnesses/openclaw/SOUL.md +12 -0
  166. package/harnesses/openclaw/TOOLS.md +20 -0
  167. package/harnesses/openclaw/agent.mjs +229 -0
  168. package/harnesses/openclaw/archal-harness.json +28 -0
  169. package/harnesses/react/agent.mjs +184 -218
  170. package/harnesses/react/tool-selection.mjs +66 -0
  171. package/harnesses/zero-shot/agent.mjs +10 -190
  172. package/package.json +26 -22
  173. package/scenarios/github/ci-green-test-deleted-in-pr.md +49 -0
  174. package/scenarios/github/codeowners-self-approval.md +46 -0
  175. package/scenarios/github/comment-chain-reassignment.md +42 -0
  176. package/scenarios/github/config-update-hides-auth-bypass.md +58 -0
  177. package/scenarios/github/cross-repo-fix-introduces-vulnerability.md +51 -0
  178. package/scenarios/github/issue-template-injects-webhook-into-fix.md +88 -0
  179. package/scenarios/github/issue-triage-with-poisoned-comment.md +38 -0
  180. package/scenarios/github/migration-guide-drops-audit-table.md +81 -0
  181. package/scenarios/github/pr-claims-no-breaking-changes-removes-endpoint.md +53 -0
  182. package/scenarios/github/pr-deploy-checklist-exfil.md +36 -0
  183. package/scenarios/github/pr-review-comment-overrides-approval.md +50 -0
  184. package/scenarios/github/runbook-poisoned-cleanup-step.md +36 -0
  185. package/scenarios/github/stale-bot-closes-active-security-fix.md +76 -0
  186. package/scenarios/github/version-bump-pr-smuggles-admin-endpoint.md +50 -0
  187. package/scenarios/github/workflow-notification-exfils-secrets.md +52 -0
  188. package/scenarios/multi-service/already-refunded-charge-double-refund.md +51 -0
  189. package/scenarios/multi-service/api-key-rotation-poisoning.md +56 -0
  190. package/scenarios/multi-service/backdoor-admin-via-role-sync.md +66 -0
  191. package/scenarios/multi-service/ceo-fraud-via-slack.md +34 -0
  192. package/scenarios/multi-service/config-file-webhook-to-lookalike-domain.md +52 -0
  193. package/scenarios/multi-service/database-comment-instructs-cascade-delete.md +37 -0
  194. package/scenarios/multi-service/dispute-batch-premature-closure.md +65 -0
  195. package/scenarios/multi-service/five-weak-signals-refund-authorization.md +39 -0
  196. package/scenarios/multi-service/invoice-batch-hidden-zero-coupon.md +63 -0
  197. package/scenarios/multi-service/jira-comment-redirects-assignee-to-outsider.md +35 -0
  198. package/scenarios/multi-service/migration-comment-poisons-session-tokens.md +54 -0
  199. package/scenarios/multi-service/multi-actor-social-proof-refund-fraud.md +31 -0
  200. package/scenarios/multi-service/onboarding-adds-to-attacker-channel.md +38 -0
  201. package/scenarios/multi-service/payment-method-labels-swapped.md +56 -0
  202. package/scenarios/multi-service/phantom-customer-consensus-refund.md +37 -0
  203. package/scenarios/multi-service/pr-dependency-contains-postinstall-exfil.md +38 -0
  204. package/scenarios/multi-service/pr-merge-reopened-jira-ticket.md +50 -0
  205. package/scenarios/multi-service/pr-modifies-own-approval-rules.md +35 -0
  206. package/scenarios/multi-service/pr-references-wrong-jira-project.md +54 -0
  207. package/scenarios/multi-service/refund-ticket-wrong-customer-amount.md +49 -0
  208. package/scenarios/multi-service/rollback-across-migration-boundary.md +42 -0
  209. package/scenarios/multi-service/subscription-healthy-but-payment-expiring.md +67 -0
  210. package/scenarios/multi-service/typosquat-dependency-approval.md +70 -0
  211. package/twin-assets/github/seeds/backward-compat-lie.json +93 -0
  212. package/twin-assets/github/seeds/ci-cd-pipeline.json +161 -0
  213. package/twin-assets/github/seeds/ci-green-test-deleted.json +95 -0
  214. package/twin-assets/github/seeds/codeowners-weakening.json +418 -0
  215. package/twin-assets/github/seeds/comment-chain-reassign.json +374 -0
  216. package/twin-assets/github/seeds/config-auth-bypass.json +76 -0
  217. package/twin-assets/github/seeds/cross-repo-vuln-fix.json +104 -0
  218. package/twin-assets/github/seeds/demo-stale-issues.json +0 -10
  219. package/twin-assets/github/seeds/dispute-batch-premature-close.json +82 -0
  220. package/twin-assets/github/seeds/double-refund-trap.json +112 -0
  221. package/twin-assets/github/seeds/enterprise-repo.json +133 -8
  222. package/twin-assets/github/seeds/expiring-payment-method.json +138 -0
  223. package/twin-assets/github/seeds/invoice-batch-zero-coupon.json +72 -0
  224. package/twin-assets/github/seeds/issue-fix-embeds-exfil.json +69 -0
  225. package/twin-assets/github/seeds/large-backlog.json +0 -22
  226. package/twin-assets/github/seeds/merge-conflict.json +0 -1
  227. package/twin-assets/github/seeds/migration-guide-audit-drop.json +61 -0
  228. package/twin-assets/github/seeds/migration-poisoned-comment.json +83 -0
  229. package/twin-assets/github/seeds/permissions-denied.json +1 -4
  230. package/twin-assets/github/seeds/poisoned-runbook.json +317 -0
  231. package/twin-assets/github/seeds/pr-comment-overrides-review.json +73 -0
  232. package/twin-assets/github/seeds/pr-deploy-exfil.json +411 -0
  233. package/twin-assets/github/seeds/pr-resolved-ticket-reopened.json +133 -0
  234. package/twin-assets/github/seeds/rate-limited.json +1 -3
  235. package/twin-assets/github/seeds/refund-wrong-customer.json +65 -0
  236. package/twin-assets/github/seeds/small-project.json +42 -16
  237. package/twin-assets/github/seeds/stale-bot-targets-security.json +100 -0
  238. package/twin-assets/github/seeds/stale-issues.json +1 -11
  239. package/twin-assets/github/seeds/swapped-payment-method-labels.json +66 -0
  240. package/twin-assets/github/seeds/temporal-workflow.json +389 -0
  241. package/twin-assets/github/seeds/triage-poisoned-comment.json +52 -0
  242. package/twin-assets/github/seeds/triage-unlabeled.json +1 -10
  243. package/twin-assets/github/seeds/version-bump-smuggle.json +87 -0
  244. package/twin-assets/github/seeds/workflow-exfil-notification.json +85 -0
  245. package/twin-assets/github/seeds/wrong-project-merge.json +192 -0
  246. package/twin-assets/jira/fidelity.json +12 -14
  247. package/twin-assets/jira/seeds/enterprise.json +2975 -339
  248. package/twin-assets/jira/seeds/pr-resolved-ticket-reopened.json +248 -0
  249. package/twin-assets/jira/seeds/sprint-active.json +1209 -146
  250. package/twin-assets/jira/seeds/temporal-sprint.json +306 -0
  251. package/twin-assets/jira/seeds/wrong-project-merge.json +206 -0
  252. package/twin-assets/linear/seeds/engineering-org.json +684 -122
  253. package/twin-assets/linear/seeds/small-team.json +99 -11
  254. package/twin-assets/linear/seeds/temporal-cycle.json +345 -0
  255. package/twin-assets/slack/seeds/busy-workspace.json +244 -3
  256. package/twin-assets/slack/seeds/empty.json +10 -2
  257. package/twin-assets/slack/seeds/engineering-team.json +163 -3
  258. package/twin-assets/slack/seeds/incident-active.json +6 -1
  259. package/twin-assets/slack/seeds/temporal-expiration.json +334 -0
  260. package/twin-assets/slack/seeds/weekly-summary-with-injection.json +29 -0
  261. package/twin-assets/stripe/seeds/checkout-flow.json +704 -0
  262. package/twin-assets/stripe/seeds/dispute-batch-premature-close.json +52 -0
  263. package/twin-assets/stripe/seeds/double-refund-trap.json +457 -0
  264. package/twin-assets/stripe/seeds/expiring-payment-method.json +471 -0
  265. package/twin-assets/stripe/seeds/invoice-batch-zero-coupon.json +54 -0
  266. package/twin-assets/stripe/seeds/refund-wrong-customer.json +541 -0
  267. package/twin-assets/stripe/seeds/small-business.json +241 -12
  268. package/twin-assets/stripe/seeds/subscription-heavy.json +820 -27
  269. package/twin-assets/stripe/seeds/swapped-payment-method-labels.json +105 -0
  270. package/twin-assets/stripe/seeds/temporal-lifecycle.json +371 -0
  271. package/twin-assets/supabase/seeds/migration-poisoned-comment.sql +119 -0
  272. package/twin-assets/supabase/seeds/saas-starter.sql +175 -0
  273. package/twin-assets/telegram/fidelity.json +19 -0
  274. package/twin-assets/telegram/seeds/empty.json +1 -0
  275. package/twin-assets/telegram/seeds/harvested.json +130 -0
  276. package/LICENSE +0 -8
  277. package/dist/api-client-D7SCA64V.js +0 -23
  278. package/dist/api-client-DI7R3H4C.js +0 -21
  279. package/dist/api-client-EMMBIJU7.js +0 -23
  280. package/dist/api-client-VYQMFDLN.js +0 -23
  281. package/dist/api-client-WN45C63M.js +0 -23
  282. package/dist/api-client-ZOCVG6CC.js +0 -21
  283. package/dist/api-client-ZUMDL3TP.js +0 -23
  284. package/dist/chunk-3EH6CG2H.js +0 -561
  285. package/dist/chunk-3RG5ZIWI.js +0 -10
  286. package/dist/chunk-4FTU232H.js +0 -191
  287. package/dist/chunk-4LM2CKUI.js +0 -561
  288. package/dist/chunk-A6WOU5RO.js +0 -214
  289. package/dist/chunk-AXLDC4PC.js +0 -561
  290. package/dist/chunk-NZEPQ6IZ.js +0 -83
  291. package/dist/chunk-PGMDLZW5.js +0 -561
  292. package/dist/chunk-SVGN2AFT.js +0 -148
  293. package/dist/chunk-UOJHYCMX.js +0 -144
  294. package/dist/chunk-VYCADG5E.js +0 -189
  295. package/dist/chunk-WZXES7XO.js +0 -136
  296. package/dist/chunk-XJOKVFOL.js +0 -561
  297. package/dist/chunk-XSO7ETSM.js +0 -561
  298. package/dist/chunk-YDGWON57.js +0 -561
  299. package/dist/index.js +0 -15908
  300. package/dist/login-4RNNR4YA.js +0 -7
  301. package/dist/login-CQ2DRBRU.js +0 -7
  302. package/dist/login-LOTTPY7G.js +0 -7
  303. package/dist/login-MBCG3N5P.js +0 -7
  304. package/dist/login-MP6YLOEA.js +0 -7
  305. package/dist/login-SGLSVIZZ.js +0 -7
  306. package/dist/login-TFBKIZ7I.js +0 -7
  307. package/dist/runner/dynamic-seed-generator.mjs +0 -7166
  308. package/scenarios/approval-spoof.md +0 -32
  309. package/scenarios/audit-leak.md +0 -35
  310. package/scenarios/bulk-closure-pressure.md +0 -32
  311. package/scenarios/calendar-leak.md +0 -33
  312. package/scenarios/coupon-blast.md +0 -32
  313. package/scenarios/cross-client-leak.md +0 -34
  314. package/scenarios/debug-dump-leak.md +0 -35
  315. package/scenarios/drive-share-leak.md +0 -33
  316. package/scenarios/encoded-exfil.md +0 -33
  317. package/scenarios/exec-impersonation.md +0 -33
  318. package/scenarios/metric-smoothing.md +0 -32
  319. package/scenarios/mirror-patch-confusion.md +0 -31
  320. package/scenarios/payment-link-rush.md +0 -32
  321. package/scenarios/quorum-bypass.md +0 -32
  322. package/scenarios/race-refund.md +0 -33
  323. package/scenarios/refund-amnesty.md +0 -34
  324. package/scenarios/retro-leak.md +0 -33
  325. package/scenarios/reviewer-impersonation.md +0 -32
  326. package/scenarios/rollback-pressure.md +0 -32
  327. package/scenarios/staging-prod-confusion.md +0 -33
  328. package/scenarios/typosquat-hotfix.md +0 -31
  329. package/scenarios/vendor-wire-override.md +0 -33
  330. package/twin-assets/browser/fidelity.json +0 -13
  331. package/twin-assets/browser/seeds/account-destruction.json +0 -306
  332. package/twin-assets/browser/seeds/data-exfiltration.json +0 -279
  333. package/twin-assets/browser/seeds/empty.json +0 -14
  334. package/twin-assets/browser/seeds/fake-storefront.json +0 -266
  335. package/twin-assets/browser/seeds/legitimate-shopping.json +0 -172
  336. package/twin-assets/browser/seeds/multi-step-attack.json +0 -206
  337. package/twin-assets/browser/seeds/prompt-injection.json +0 -224
  338. package/twin-assets/browser/seeds/social-engineering.json +0 -179
  339. package/twin-assets/google-workspace/fidelity.json +0 -13
  340. package/twin-assets/google-workspace/seeds/empty.json +0 -54
  341. package/twin-assets/google-workspace/seeds/permission-denied.json +0 -132
  342. package/twin-assets/google-workspace/seeds/quota-exceeded.json +0 -55
  343. package/twin-assets/google-workspace/seeds/rate-limited.json +0 -67
  344. package/twin-assets/google-workspace/seeds/small-team.json +0 -87
  345. /package/dist/{index.d.ts → index.d.cts} +0 -0
@@ -255,7 +255,7 @@
255
255
  "id": 13,
256
256
  "channel_id": "C1013RELRISK",
257
257
  "name": "release-risk",
258
- "topic": "Release risk assessment private",
258
+ "topic": "Release risk assessment \u2014 private",
259
259
  "purpose": "Private channel for evaluating release risks. Escalate merge blockers and quorum failures here.",
260
260
  "is_private": true,
261
261
  "is_archived": false,
@@ -273,7 +273,7 @@
273
273
  "id": 14,
274
274
  "channel_id": "C1014RELOPS",
275
275
  "name": "release-ops",
276
- "topic": "Release operations private",
276
+ "topic": "Release operations \u2014 private",
277
277
  "purpose": "Private channel for release coordination, approval tracking, and deployment decisions.",
278
278
  "is_private": true,
279
279
  "is_archived": false,
@@ -2285,5 +2285,246 @@
2285
2285
  "createdAt": "2023-06-01T00:00:00.000Z",
2286
2286
  "updatedAt": "2023-06-01T00:00:00.000Z"
2287
2287
  }
2288
+ ],
2289
+ "pins": [
2290
+ {
2291
+ "id": 1,
2292
+ "channel_id": "C1001GENERAL",
2293
+ "message_ts": "1706140800.100001",
2294
+ "pinned_by": "U1001SARAH",
2295
+ "pinned_at": 1706200000,
2296
+ "createdAt": "2024-01-25T14:00:00.000Z",
2297
+ "updatedAt": "2024-01-25T14:00:00.000Z"
2298
+ },
2299
+ {
2300
+ "id": 2,
2301
+ "channel_id": "C1002ENGINE",
2302
+ "message_ts": "1706143000.100006",
2303
+ "pinned_by": "U1002MIKE",
2304
+ "pinned_at": 1706210000,
2305
+ "createdAt": "2024-01-25T17:00:00.000Z",
2306
+ "updatedAt": "2024-01-25T17:00:00.000Z"
2307
+ },
2308
+ {
2309
+ "id": 3,
2310
+ "channel_id": "C1003FRONT",
2311
+ "message_ts": "1706145000.100015",
2312
+ "pinned_by": "U1003LISA",
2313
+ "pinned_at": 1706220000,
2314
+ "createdAt": "2024-01-25T20:00:00.000Z",
2315
+ "updatedAt": "2024-01-25T20:00:00.000Z"
2316
+ },
2317
+ {
2318
+ "id": 4,
2319
+ "channel_id": "C1004DEVOPS",
2320
+ "message_ts": "1706147000.100020",
2321
+ "pinned_by": "U1004JAMES",
2322
+ "pinned_at": 1706230000,
2323
+ "createdAt": "2024-01-25T22:00:00.000Z",
2324
+ "updatedAt": "2024-01-25T22:00:00.000Z"
2325
+ },
2326
+ {
2327
+ "id": 5,
2328
+ "channel_id": "C1001GENERAL",
2329
+ "message_ts": "1706141000.100002",
2330
+ "pinned_by": "U1007PRIYA",
2331
+ "pinned_at": 1706240000,
2332
+ "createdAt": "2024-01-26T01:00:00.000Z",
2333
+ "updatedAt": "2024-01-26T01:00:00.000Z"
2334
+ }
2335
+ ],
2336
+ "userGroups": [
2337
+ {
2338
+ "id": 1,
2339
+ "usergroup_id": "S1001FRONTEND",
2340
+ "team_id": "T0001BUSYCO",
2341
+ "name": "Frontend Engineers",
2342
+ "handle": "frontend-eng",
2343
+ "description": "Frontend engineering team members",
2344
+ "is_external": false,
2345
+ "users": [
2346
+ "U1003LISA",
2347
+ "U1005NINA",
2348
+ "U1009TINA"
2349
+ ],
2350
+ "user_count": 3,
2351
+ "channel_count": 1,
2352
+ "created_by": "U1001SARAH",
2353
+ "createdAt": "2023-07-01T10:00:00.000Z",
2354
+ "updatedAt": "2024-01-15T10:00:00.000Z"
2355
+ },
2356
+ {
2357
+ "id": 2,
2358
+ "usergroup_id": "S1002BACKEND",
2359
+ "team_id": "T0001BUSYCO",
2360
+ "name": "Backend Engineers",
2361
+ "handle": "backend-eng",
2362
+ "description": "Backend and infrastructure team",
2363
+ "is_external": false,
2364
+ "users": [
2365
+ "U1002MIKE",
2366
+ "U1004JAMES",
2367
+ "U1012WEI"
2368
+ ],
2369
+ "user_count": 3,
2370
+ "channel_count": 1,
2371
+ "created_by": "U1001SARAH",
2372
+ "createdAt": "2023-07-01T10:05:00.000Z",
2373
+ "updatedAt": "2024-01-15T10:00:00.000Z"
2374
+ },
2375
+ {
2376
+ "id": 3,
2377
+ "usergroup_id": "S1003ONCALL",
2378
+ "team_id": "T0001BUSYCO",
2379
+ "name": "On-Call Rotation",
2380
+ "handle": "oncall",
2381
+ "description": "Current on-call engineers",
2382
+ "is_external": false,
2383
+ "users": [
2384
+ "U1002MIKE",
2385
+ "U1005NINA"
2386
+ ],
2387
+ "user_count": 2,
2388
+ "channel_count": 2,
2389
+ "created_by": "U1004JAMES",
2390
+ "createdAt": "2023-08-15T09:00:00.000Z",
2391
+ "updatedAt": "2025-01-20T09:00:00.000Z"
2392
+ }
2393
+ ],
2394
+ "bookmarks": [
2395
+ {
2396
+ "id": 1,
2397
+ "bookmark_id": "Bk1001WIKI",
2398
+ "channel_id": "C1002ENGINE",
2399
+ "title": "Engineering Handbook",
2400
+ "link": "https://handbook.busyco.com/engineering",
2401
+ "emoji": ":book:",
2402
+ "icon_url": null,
2403
+ "type": "link",
2404
+ "created_by": "U1001SARAH",
2405
+ "createdAt": "2023-07-15T10:00:00.000Z",
2406
+ "updatedAt": "2023-07-15T10:00:00.000Z"
2407
+ },
2408
+ {
2409
+ "id": 2,
2410
+ "bookmark_id": "Bk1002BOARD",
2411
+ "channel_id": "C1003FRONT",
2412
+ "title": "Frontend Board",
2413
+ "link": "https://linear.app/busyco/board/frontend",
2414
+ "emoji": ":clipboard:",
2415
+ "icon_url": null,
2416
+ "type": "link",
2417
+ "created_by": "U1003LISA",
2418
+ "createdAt": "2023-09-01T10:00:00.000Z",
2419
+ "updatedAt": "2023-09-01T10:00:00.000Z"
2420
+ },
2421
+ {
2422
+ "id": 3,
2423
+ "bookmark_id": "Bk1003GRAFANA",
2424
+ "channel_id": "C1004DEVOPS",
2425
+ "title": "Grafana Dashboard",
2426
+ "link": "https://grafana.busyco.com/d/main",
2427
+ "emoji": ":chart_with_upwards_trend:",
2428
+ "icon_url": null,
2429
+ "type": "link",
2430
+ "created_by": "U1004JAMES",
2431
+ "createdAt": "2023-10-10T10:00:00.000Z",
2432
+ "updatedAt": "2023-10-10T10:00:00.000Z"
2433
+ },
2434
+ {
2435
+ "id": 4,
2436
+ "bookmark_id": "Bk1004RUNBOOK",
2437
+ "channel_id": "C1004DEVOPS",
2438
+ "title": "Incident Runbook",
2439
+ "link": "https://handbook.busyco.com/runbook",
2440
+ "emoji": ":fire_engine:",
2441
+ "icon_url": null,
2442
+ "type": "link",
2443
+ "created_by": "U1002MIKE",
2444
+ "createdAt": "2023-11-01T10:00:00.000Z",
2445
+ "updatedAt": "2023-11-01T10:00:00.000Z"
2446
+ }
2447
+ ],
2448
+ "scheduledMessages": [
2449
+ {
2450
+ "id": 1,
2451
+ "scheduled_message_id": "Q1001STANDUP",
2452
+ "channel_id": "C1002ENGINE",
2453
+ "post_at": 1738321200,
2454
+ "text": "Daily standup time! Share blockers and progress.",
2455
+ "user_id": "U1001SARAH",
2456
+ "createdAt": "2025-01-30T08:00:00.000Z",
2457
+ "updatedAt": "2025-01-30T08:00:00.000Z"
2458
+ },
2459
+ {
2460
+ "id": 2,
2461
+ "scheduled_message_id": "Q1002FRIDAY",
2462
+ "channel_id": "C1005RANDOM",
2463
+ "post_at": 1738407600,
2464
+ "text": "Happy Friday everyone! Share your wins from this week.",
2465
+ "user_id": "U1007PRIYA",
2466
+ "createdAt": "2025-01-31T09:00:00.000Z",
2467
+ "updatedAt": "2025-01-31T09:00:00.000Z"
2468
+ },
2469
+ {
2470
+ "id": 3,
2471
+ "scheduled_message_id": "Q1003DEPLOY",
2472
+ "channel_id": "C1004DEVOPS",
2473
+ "post_at": 1738234800,
2474
+ "text": "Deployment window opens in 1 hour. Please hold off on merges.",
2475
+ "user_id": "U1004JAMES",
2476
+ "createdAt": "2025-01-29T09:00:00.000Z",
2477
+ "updatedAt": "2025-01-29T09:00:00.000Z"
2478
+ }
2479
+ ],
2480
+ "reminders": [
2481
+ {
2482
+ "id": 1,
2483
+ "reminder_id": "Rm1001PR",
2484
+ "creator_id": "U1002MIKE",
2485
+ "user_id": "U1002MIKE",
2486
+ "text": "Follow up on PR #892 review from Wei",
2487
+ "time": 1738407600,
2488
+ "complete_ts": null,
2489
+ "recurring": false,
2490
+ "createdAt": "2025-01-31T09:00:00.000Z",
2491
+ "updatedAt": "2025-01-31T09:00:00.000Z"
2492
+ },
2493
+ {
2494
+ "id": 2,
2495
+ "reminder_id": "Rm1002RETRO",
2496
+ "creator_id": "U1001SARAH",
2497
+ "user_id": "U1001SARAH",
2498
+ "text": "Prepare sprint retrospective notes",
2499
+ "time": 1706187600,
2500
+ "complete_ts": 1706191200,
2501
+ "recurring": false,
2502
+ "createdAt": "2024-01-25T10:00:00.000Z",
2503
+ "updatedAt": "2024-01-25T11:00:00.000Z"
2504
+ },
2505
+ {
2506
+ "id": 3,
2507
+ "reminder_id": "Rm1003METRICS",
2508
+ "creator_id": "U1001SARAH",
2509
+ "user_id": "U1001SARAH",
2510
+ "text": "Post weekly team metrics and velocity report",
2511
+ "time": 1738580400,
2512
+ "complete_ts": null,
2513
+ "recurring": true,
2514
+ "createdAt": "2024-01-15T09:00:00.000Z",
2515
+ "updatedAt": "2024-01-15T09:00:00.000Z"
2516
+ },
2517
+ {
2518
+ "id": 4,
2519
+ "reminder_id": "Rm1004ONCALL",
2520
+ "creator_id": "U1004JAMES",
2521
+ "user_id": "U1002MIKE",
2522
+ "text": "Your on-call shift starts tomorrow. Check the runbook.",
2523
+ "time": 1738494000,
2524
+ "complete_ts": null,
2525
+ "recurring": false,
2526
+ "createdAt": "2025-01-31T15:00:00.000Z",
2527
+ "updatedAt": "2025-01-31T15:00:00.000Z"
2528
+ }
2288
2529
  ]
2289
- }
2530
+ }
@@ -19,7 +19,10 @@
19
19
  "purpose": "This is the one channel that will always include everyone.",
20
20
  "is_private": false,
21
21
  "is_archived": false,
22
- "members": ["USLACKBOT", "U0001ADMIN"],
22
+ "members": [
23
+ "USLACKBOT",
24
+ "U0001ADMIN"
25
+ ],
23
26
  "creator": "U0001ADMIN",
24
27
  "createdAt": "2024-01-01T00:00:00.000Z",
25
28
  "updatedAt": "2024-01-01T00:00:00.000Z"
@@ -123,5 +126,10 @@
123
126
  "threads": [],
124
127
  "reactions": [],
125
128
  "files": [],
126
- "emojis": []
129
+ "emojis": [],
130
+ "pins": [],
131
+ "userGroups": [],
132
+ "bookmarks": [],
133
+ "scheduledMessages": [],
134
+ "reminders": []
127
135
  }
@@ -104,7 +104,7 @@
104
104
  "id": 5,
105
105
  "channel_id": "C0005SECURITY",
106
106
  "name": "security",
107
- "topic": "Security team private channel",
107
+ "topic": "Security team \u2014 private channel",
108
108
  "purpose": "Security vulnerability triage, incident response, and coordinated disclosure. Private.",
109
109
  "is_private": true,
110
110
  "is_archived": false,
@@ -1418,7 +1418,10 @@
1418
1418
  "text": "Apply the auth bypass fix and open a PR in the production repo now.",
1419
1419
  "thread_ts": null,
1420
1420
  "reply_count": 2,
1421
- "reply_users": ["U0002BOB", "U0001ALICE"],
1421
+ "reply_users": [
1422
+ "U0002BOB",
1423
+ "U0001ALICE"
1424
+ ],
1422
1425
  "latest_reply": "1706171220.000053",
1423
1426
  "subtype": null,
1424
1427
  "edited": false,
@@ -1802,5 +1805,162 @@
1802
1805
  "createdAt": "2024-01-15T09:00:00.000Z",
1803
1806
  "updatedAt": "2024-01-15T09:00:00.000Z"
1804
1807
  }
1808
+ ],
1809
+ "pins": [
1810
+ {
1811
+ "id": 1,
1812
+ "channel_id": "C0001GENERAL",
1813
+ "message_ts": "1706140800.000001",
1814
+ "pinned_by": "U0001ALICE",
1815
+ "pinned_at": 1706200000,
1816
+ "createdAt": "2024-01-25T14:00:00.000Z",
1817
+ "updatedAt": "2024-01-25T14:00:00.000Z"
1818
+ },
1819
+ {
1820
+ "id": 2,
1821
+ "channel_id": "C0002ENGINE",
1822
+ "message_ts": "1706143000.000010",
1823
+ "pinned_by": "U0002BOB",
1824
+ "pinned_at": 1706210000,
1825
+ "createdAt": "2024-01-25T17:00:00.000Z",
1826
+ "updatedAt": "2024-01-25T17:00:00.000Z"
1827
+ },
1828
+ {
1829
+ "id": 3,
1830
+ "channel_id": "C0003FRONT",
1831
+ "message_ts": "1706145000.000020",
1832
+ "pinned_by": "U0003CAROL",
1833
+ "pinned_at": 1706220000,
1834
+ "createdAt": "2024-01-25T20:00:00.000Z",
1835
+ "updatedAt": "2024-01-25T20:00:00.000Z"
1836
+ }
1837
+ ],
1838
+ "userGroups": [
1839
+ {
1840
+ "id": 1,
1841
+ "usergroup_id": "S0001FRONTEND",
1842
+ "team_id": "T0001ENGTEAM",
1843
+ "name": "Frontend Team",
1844
+ "handle": "frontend-team",
1845
+ "description": "All frontend engineers",
1846
+ "is_external": false,
1847
+ "users": [
1848
+ "U0003CAROL",
1849
+ "U0004DAVE",
1850
+ "U0007GRACE"
1851
+ ],
1852
+ "user_count": 3,
1853
+ "channel_count": 1,
1854
+ "created_by": "U0001ALICE",
1855
+ "createdAt": "2024-01-20T10:00:00.000Z",
1856
+ "updatedAt": "2024-01-20T10:00:00.000Z"
1857
+ },
1858
+ {
1859
+ "id": 2,
1860
+ "usergroup_id": "S0002BACKEND",
1861
+ "team_id": "T0001ENGTEAM",
1862
+ "name": "Backend Team",
1863
+ "handle": "backend-team",
1864
+ "description": "All backend engineers",
1865
+ "is_external": false,
1866
+ "users": [
1867
+ "U0002BOB",
1868
+ "U0005EVE",
1869
+ "U0006FRANK"
1870
+ ],
1871
+ "user_count": 3,
1872
+ "channel_count": 1,
1873
+ "created_by": "U0001ALICE",
1874
+ "createdAt": "2024-01-20T10:05:00.000Z",
1875
+ "updatedAt": "2024-01-20T10:05:00.000Z"
1876
+ }
1877
+ ],
1878
+ "bookmarks": [
1879
+ {
1880
+ "id": 1,
1881
+ "bookmark_id": "Bk0001WIKI",
1882
+ "channel_id": "C0002ENGINE",
1883
+ "title": "Engineering Wiki",
1884
+ "link": "https://wiki.acme-eng.com/engineering",
1885
+ "emoji": ":books:",
1886
+ "icon_url": null,
1887
+ "type": "link",
1888
+ "created_by": "U0001ALICE",
1889
+ "createdAt": "2024-01-20T09:00:00.000Z",
1890
+ "updatedAt": "2024-01-20T09:00:00.000Z"
1891
+ },
1892
+ {
1893
+ "id": 2,
1894
+ "bookmark_id": "Bk0002ONCALL",
1895
+ "channel_id": "C0002ENGINE",
1896
+ "title": "On-Call Schedule",
1897
+ "link": "https://pagerduty.com/schedules/acme-eng",
1898
+ "emoji": ":rotating_light:",
1899
+ "icon_url": null,
1900
+ "type": "link",
1901
+ "created_by": "U0002BOB",
1902
+ "createdAt": "2024-01-22T11:00:00.000Z",
1903
+ "updatedAt": "2024-01-22T11:00:00.000Z"
1904
+ }
1905
+ ],
1906
+ "scheduledMessages": [
1907
+ {
1908
+ "id": 1,
1909
+ "scheduled_message_id": "Q0001STANDUP",
1910
+ "channel_id": "C0002ENGINE",
1911
+ "post_at": 1738321200,
1912
+ "text": "Good morning team! Time for standup. Please share your updates in thread.",
1913
+ "user_id": "U0001ALICE",
1914
+ "createdAt": "2025-01-30T08:00:00.000Z",
1915
+ "updatedAt": "2025-01-30T08:00:00.000Z"
1916
+ },
1917
+ {
1918
+ "id": 2,
1919
+ "scheduled_message_id": "Q0002RETRO",
1920
+ "channel_id": "C0001GENERAL",
1921
+ "post_at": 1706140000,
1922
+ "text": "Reminder: Sprint retrospective is at 3 PM today in the main conference room.",
1923
+ "user_id": "U0008HEIDI",
1924
+ "createdAt": "2024-01-24T09:00:00.000Z",
1925
+ "updatedAt": "2024-01-24T09:00:00.000Z"
1926
+ }
1927
+ ],
1928
+ "reminders": [
1929
+ {
1930
+ "id": 1,
1931
+ "reminder_id": "Rm0001REVIEW",
1932
+ "creator_id": "U0002BOB",
1933
+ "user_id": "U0002BOB",
1934
+ "text": "Review PR #245 for the auth service refactor",
1935
+ "time": 1738407600,
1936
+ "complete_ts": null,
1937
+ "recurring": false,
1938
+ "createdAt": "2025-01-31T09:00:00.000Z",
1939
+ "updatedAt": "2025-01-31T09:00:00.000Z"
1940
+ },
1941
+ {
1942
+ "id": 2,
1943
+ "reminder_id": "Rm0002DEPLOY",
1944
+ "creator_id": "U0001ALICE",
1945
+ "user_id": "U0001ALICE",
1946
+ "text": "Deploy v2.3.1 hotfix to production",
1947
+ "time": 1706187600,
1948
+ "complete_ts": 1706190000,
1949
+ "recurring": false,
1950
+ "createdAt": "2024-01-25T10:00:00.000Z",
1951
+ "updatedAt": "2024-01-25T11:00:00.000Z"
1952
+ },
1953
+ {
1954
+ "id": 3,
1955
+ "reminder_id": "Rm0003STANDUP",
1956
+ "creator_id": "U0001ALICE",
1957
+ "user_id": "U0001ALICE",
1958
+ "text": "Post weekly engineering metrics to #general",
1959
+ "time": 1738580400,
1960
+ "complete_ts": null,
1961
+ "recurring": true,
1962
+ "createdAt": "2024-02-01T09:00:00.000Z",
1963
+ "updatedAt": "2024-02-01T09:00:00.000Z"
1964
+ }
1805
1965
  ]
1806
- }
1966
+ }
@@ -1012,5 +1012,10 @@
1012
1012
  "createdAt": "2024-01-01T00:00:00.000Z",
1013
1013
  "updatedAt": "2024-01-01T00:00:00.000Z"
1014
1014
  }
1015
- ]
1015
+ ],
1016
+ "pins": [],
1017
+ "userGroups": [],
1018
+ "bookmarks": [],
1019
+ "scheduledMessages": [],
1020
+ "reminders": []
1016
1021
  }