@archal/cli 0.7.12 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +12 -9
- package/bin/archal.cjs +15 -0
- package/dist/harnesses/_lib/agent-trace.mjs +57 -0
- package/dist/harnesses/_lib/env-utils.mjs +23 -0
- package/dist/harnesses/_lib/harness-runner.mjs +354 -0
- package/dist/harnesses/_lib/llm-call.mjs +411 -0
- package/dist/harnesses/_lib/llm-config.mjs +209 -0
- package/dist/harnesses/_lib/llm-response.mjs +483 -0
- package/dist/harnesses/_lib/logging.mjs +176 -0
- package/dist/harnesses/_lib/mcp-client.mjs +80 -0
- package/dist/harnesses/_lib/metrics.mjs +34 -0
- package/dist/harnesses/_lib/model-configs.mjs +521 -0
- package/dist/harnesses/_lib/providers.mjs +39 -0
- package/dist/harnesses/_lib/rest-client.mjs +131 -0
- package/dist/harnesses/_lib/tool-executor.mjs +65 -0
- package/dist/harnesses/hardened/SAFETY.md +53 -0
- package/dist/harnesses/hardened/agent.mjs +57 -0
- package/dist/harnesses/hardened/archal-harness.json +23 -0
- package/dist/harnesses/naive/agent.mjs +37 -0
- package/dist/harnesses/naive/archal-harness.json +21 -0
- package/dist/harnesses/openclaw/AGENTS.md +27 -0
- package/dist/harnesses/openclaw/SOUL.md +12 -0
- package/dist/harnesses/openclaw/TOOLS.md +20 -0
- package/dist/harnesses/openclaw/agent.mjs +229 -0
- package/dist/harnesses/openclaw/archal-harness.json +28 -0
- package/dist/harnesses/react/agent.mjs +233 -0
- package/dist/harnesses/react/archal-harness.json +22 -0
- package/dist/harnesses/react/tool-selection.mjs +66 -0
- package/dist/harnesses/zero-shot/agent.mjs +31 -0
- package/dist/harnesses/zero-shot/archal-harness.json +21 -0
- package/dist/index.cjs +61018 -0
- package/dist/package.json +70 -0
- package/dist/scenarios/github/ci-green-test-deleted-in-pr.md +49 -0
- package/dist/scenarios/github/codeowners-self-approval.md +46 -0
- package/dist/scenarios/github/comment-chain-reassignment.md +42 -0
- package/dist/scenarios/github/config-update-hides-auth-bypass.md +58 -0
- package/dist/scenarios/github/cross-repo-fix-introduces-vulnerability.md +51 -0
- package/dist/scenarios/github/issue-template-injects-webhook-into-fix.md +88 -0
- package/dist/scenarios/github/issue-triage-with-poisoned-comment.md +38 -0
- package/dist/scenarios/github/migration-guide-drops-audit-table.md +81 -0
- package/dist/scenarios/github/pr-claims-no-breaking-changes-removes-endpoint.md +53 -0
- package/dist/scenarios/github/pr-deploy-checklist-exfil.md +36 -0
- package/dist/scenarios/github/pr-review-comment-overrides-approval.md +50 -0
- package/dist/scenarios/github/runbook-poisoned-cleanup-step.md +36 -0
- package/dist/scenarios/github/stale-bot-closes-active-security-fix.md +76 -0
- package/dist/scenarios/github/version-bump-pr-smuggles-admin-endpoint.md +50 -0
- package/dist/scenarios/github/workflow-notification-exfils-secrets.md +52 -0
- package/dist/scenarios/multi-service/already-refunded-charge-double-refund.md +51 -0
- package/dist/scenarios/multi-service/api-key-rotation-poisoning.md +56 -0
- package/dist/scenarios/multi-service/backdoor-admin-via-role-sync.md +66 -0
- package/dist/scenarios/multi-service/ceo-fraud-via-slack.md +34 -0
- package/dist/scenarios/multi-service/config-file-webhook-to-lookalike-domain.md +52 -0
- package/dist/scenarios/multi-service/database-comment-instructs-cascade-delete.md +37 -0
- package/dist/scenarios/multi-service/dispute-batch-premature-closure.md +65 -0
- package/dist/scenarios/multi-service/five-weak-signals-refund-authorization.md +39 -0
- package/dist/scenarios/multi-service/invoice-batch-hidden-zero-coupon.md +63 -0
- package/dist/scenarios/multi-service/jira-comment-redirects-assignee-to-outsider.md +35 -0
- package/dist/scenarios/multi-service/migration-comment-poisons-session-tokens.md +54 -0
- package/dist/scenarios/multi-service/multi-actor-social-proof-refund-fraud.md +31 -0
- package/dist/scenarios/multi-service/onboarding-adds-to-attacker-channel.md +38 -0
- package/dist/scenarios/multi-service/payment-method-labels-swapped.md +56 -0
- package/dist/scenarios/multi-service/phantom-customer-consensus-refund.md +37 -0
- package/dist/scenarios/multi-service/pr-dependency-contains-postinstall-exfil.md +38 -0
- package/dist/scenarios/multi-service/pr-merge-reopened-jira-ticket.md +50 -0
- package/dist/scenarios/multi-service/pr-modifies-own-approval-rules.md +35 -0
- package/dist/scenarios/multi-service/pr-references-wrong-jira-project.md +54 -0
- package/dist/scenarios/multi-service/refund-ticket-wrong-customer-amount.md +49 -0
- package/dist/scenarios/multi-service/rollback-across-migration-boundary.md +42 -0
- package/dist/scenarios/multi-service/subscription-healthy-but-payment-expiring.md +67 -0
- package/dist/scenarios/multi-service/typosquat-dependency-approval.md +70 -0
- package/dist/twin-assets/github/fidelity.json +13 -0
- package/dist/twin-assets/github/seeds/backward-compat-lie.json +93 -0
- package/dist/twin-assets/github/seeds/ci-cd-pipeline.json +161 -0
- package/dist/twin-assets/github/seeds/ci-green-test-deleted.json +95 -0
- package/dist/twin-assets/github/seeds/codeowners-weakening.json +418 -0
- package/dist/twin-assets/github/seeds/comment-chain-reassign.json +374 -0
- package/dist/twin-assets/github/seeds/config-auth-bypass.json +76 -0
- package/dist/twin-assets/github/seeds/cross-repo-vuln-fix.json +104 -0
- package/dist/twin-assets/github/seeds/demo-stale-issues.json +209 -0
- package/dist/twin-assets/github/seeds/dispute-batch-premature-close.json +82 -0
- package/dist/twin-assets/github/seeds/double-refund-trap.json +112 -0
- package/dist/twin-assets/github/seeds/empty.json +33 -0
- package/dist/twin-assets/github/seeds/enterprise-repo.json +251 -0
- package/dist/twin-assets/github/seeds/expiring-payment-method.json +138 -0
- package/dist/twin-assets/github/seeds/invoice-batch-zero-coupon.json +72 -0
- package/dist/twin-assets/github/seeds/issue-fix-embeds-exfil.json +69 -0
- package/dist/twin-assets/github/seeds/large-backlog.json +1820 -0
- package/dist/twin-assets/github/seeds/merge-conflict.json +66 -0
- package/dist/twin-assets/github/seeds/migration-guide-audit-drop.json +61 -0
- package/dist/twin-assets/github/seeds/migration-poisoned-comment.json +83 -0
- package/dist/twin-assets/github/seeds/permissions-denied.json +50 -0
- package/dist/twin-assets/github/seeds/poisoned-runbook.json +317 -0
- package/dist/twin-assets/github/seeds/pr-comment-overrides-review.json +73 -0
- package/dist/twin-assets/github/seeds/pr-deploy-exfil.json +411 -0
- package/dist/twin-assets/github/seeds/pr-resolved-ticket-reopened.json +133 -0
- package/dist/twin-assets/github/seeds/rate-limited.json +41 -0
- package/dist/twin-assets/github/seeds/refund-wrong-customer.json +65 -0
- package/dist/twin-assets/github/seeds/small-project.json +833 -0
- package/dist/twin-assets/github/seeds/stale-bot-targets-security.json +100 -0
- package/dist/twin-assets/github/seeds/stale-issues.json +365 -0
- package/dist/twin-assets/github/seeds/swapped-payment-method-labels.json +66 -0
- package/dist/twin-assets/github/seeds/temporal-workflow.json +389 -0
- package/dist/twin-assets/github/seeds/triage-poisoned-comment.json +52 -0
- package/dist/twin-assets/github/seeds/triage-unlabeled.json +442 -0
- package/dist/twin-assets/github/seeds/version-bump-smuggle.json +87 -0
- package/dist/twin-assets/github/seeds/workflow-exfil-notification.json +85 -0
- package/dist/twin-assets/github/seeds/wrong-project-merge.json +192 -0
- package/dist/twin-assets/jira/fidelity.json +40 -0
- package/dist/twin-assets/jira/seeds/conflict-states.json +162 -0
- package/dist/twin-assets/jira/seeds/empty.json +124 -0
- package/dist/twin-assets/jira/seeds/enterprise.json +3143 -0
- package/dist/twin-assets/jira/seeds/large-backlog.json +3377 -0
- package/dist/twin-assets/jira/seeds/permissions-denied.json +143 -0
- package/dist/twin-assets/jira/seeds/pr-resolved-ticket-reopened.json +248 -0
- package/dist/twin-assets/jira/seeds/rate-limited.json +123 -0
- package/dist/twin-assets/jira/seeds/small-project.json +246 -0
- package/dist/twin-assets/jira/seeds/sprint-active.json +1299 -0
- package/dist/twin-assets/jira/seeds/temporal-sprint.json +306 -0
- package/dist/twin-assets/jira/seeds/wrong-project-merge.json +206 -0
- package/dist/twin-assets/linear/fidelity.json +13 -0
- package/dist/twin-assets/linear/seeds/empty.json +170 -0
- package/dist/twin-assets/linear/seeds/engineering-org.json +874 -0
- package/dist/twin-assets/linear/seeds/harvested.json +331 -0
- package/dist/twin-assets/linear/seeds/small-team.json +584 -0
- package/dist/twin-assets/linear/seeds/temporal-cycle.json +345 -0
- package/dist/twin-assets/slack/fidelity.json +14 -0
- package/dist/twin-assets/slack/seeds/busy-workspace.json +2530 -0
- package/dist/twin-assets/slack/seeds/empty.json +135 -0
- package/dist/twin-assets/slack/seeds/engineering-team.json +1966 -0
- package/dist/twin-assets/slack/seeds/incident-active.json +1021 -0
- package/dist/twin-assets/slack/seeds/temporal-expiration.json +334 -0
- package/dist/twin-assets/slack/seeds/weekly-summary-with-injection.json +29 -0
- package/dist/twin-assets/stripe/fidelity.json +22 -0
- package/dist/twin-assets/stripe/seeds/checkout-flow.json +704 -0
- package/dist/twin-assets/stripe/seeds/dispute-batch-premature-close.json +52 -0
- package/dist/twin-assets/stripe/seeds/double-refund-trap.json +457 -0
- package/dist/twin-assets/stripe/seeds/empty.json +31 -0
- package/dist/twin-assets/stripe/seeds/expiring-payment-method.json +471 -0
- package/dist/twin-assets/stripe/seeds/invoice-batch-zero-coupon.json +54 -0
- package/dist/twin-assets/stripe/seeds/refund-wrong-customer.json +541 -0
- package/dist/twin-assets/stripe/seeds/small-business.json +607 -0
- package/dist/twin-assets/stripe/seeds/subscription-heavy.json +855 -0
- package/dist/twin-assets/stripe/seeds/swapped-payment-method-labels.json +105 -0
- package/dist/twin-assets/stripe/seeds/temporal-lifecycle.json +371 -0
- package/dist/twin-assets/supabase/fidelity.json +13 -0
- package/dist/twin-assets/supabase/seeds/ecommerce.sql +278 -0
- package/dist/twin-assets/supabase/seeds/edge-cases.sql +94 -0
- package/dist/twin-assets/supabase/seeds/empty.sql +2 -0
- package/dist/twin-assets/supabase/seeds/migration-poisoned-comment.sql +119 -0
- package/dist/twin-assets/supabase/seeds/saas-starter.sql +175 -0
- package/dist/twin-assets/supabase/seeds/small-project.sql +134 -0
- package/dist/twin-assets/telegram/fidelity.json +19 -0
- package/dist/twin-assets/telegram/seeds/empty.json +1 -0
- package/dist/twin-assets/telegram/seeds/harvested.json +130 -0
- package/harnesses/_lib/env-utils.mjs +23 -0
- package/harnesses/_lib/harness-runner.mjs +354 -0
- package/harnesses/_lib/llm-call.mjs +411 -0
- package/harnesses/_lib/llm-config.mjs +209 -0
- package/harnesses/_lib/llm-response.mjs +483 -0
- package/harnesses/_lib/providers.mjs +36 -1066
- package/harnesses/_lib/tool-executor.mjs +65 -0
- package/harnesses/hardened/agent.mjs +21 -225
- package/harnesses/naive/agent.mjs +9 -137
- package/harnesses/openclaw/AGENTS.md +27 -0
- package/harnesses/openclaw/SOUL.md +12 -0
- package/harnesses/openclaw/TOOLS.md +20 -0
- package/harnesses/openclaw/agent.mjs +229 -0
- package/harnesses/openclaw/archal-harness.json +28 -0
- package/harnesses/react/agent.mjs +184 -218
- package/harnesses/react/tool-selection.mjs +66 -0
- package/harnesses/zero-shot/agent.mjs +10 -190
- package/package.json +26 -22
- package/scenarios/github/ci-green-test-deleted-in-pr.md +49 -0
- package/scenarios/github/codeowners-self-approval.md +46 -0
- package/scenarios/github/comment-chain-reassignment.md +42 -0
- package/scenarios/github/config-update-hides-auth-bypass.md +58 -0
- package/scenarios/github/cross-repo-fix-introduces-vulnerability.md +51 -0
- package/scenarios/github/issue-template-injects-webhook-into-fix.md +88 -0
- package/scenarios/github/issue-triage-with-poisoned-comment.md +38 -0
- package/scenarios/github/migration-guide-drops-audit-table.md +81 -0
- package/scenarios/github/pr-claims-no-breaking-changes-removes-endpoint.md +53 -0
- package/scenarios/github/pr-deploy-checklist-exfil.md +36 -0
- package/scenarios/github/pr-review-comment-overrides-approval.md +50 -0
- package/scenarios/github/runbook-poisoned-cleanup-step.md +36 -0
- package/scenarios/github/stale-bot-closes-active-security-fix.md +76 -0
- package/scenarios/github/version-bump-pr-smuggles-admin-endpoint.md +50 -0
- package/scenarios/github/workflow-notification-exfils-secrets.md +52 -0
- package/scenarios/multi-service/already-refunded-charge-double-refund.md +51 -0
- package/scenarios/multi-service/api-key-rotation-poisoning.md +56 -0
- package/scenarios/multi-service/backdoor-admin-via-role-sync.md +66 -0
- package/scenarios/multi-service/ceo-fraud-via-slack.md +34 -0
- package/scenarios/multi-service/config-file-webhook-to-lookalike-domain.md +52 -0
- package/scenarios/multi-service/database-comment-instructs-cascade-delete.md +37 -0
- package/scenarios/multi-service/dispute-batch-premature-closure.md +65 -0
- package/scenarios/multi-service/five-weak-signals-refund-authorization.md +39 -0
- package/scenarios/multi-service/invoice-batch-hidden-zero-coupon.md +63 -0
- package/scenarios/multi-service/jira-comment-redirects-assignee-to-outsider.md +35 -0
- package/scenarios/multi-service/migration-comment-poisons-session-tokens.md +54 -0
- package/scenarios/multi-service/multi-actor-social-proof-refund-fraud.md +31 -0
- package/scenarios/multi-service/onboarding-adds-to-attacker-channel.md +38 -0
- package/scenarios/multi-service/payment-method-labels-swapped.md +56 -0
- package/scenarios/multi-service/phantom-customer-consensus-refund.md +37 -0
- package/scenarios/multi-service/pr-dependency-contains-postinstall-exfil.md +38 -0
- package/scenarios/multi-service/pr-merge-reopened-jira-ticket.md +50 -0
- package/scenarios/multi-service/pr-modifies-own-approval-rules.md +35 -0
- package/scenarios/multi-service/pr-references-wrong-jira-project.md +54 -0
- package/scenarios/multi-service/refund-ticket-wrong-customer-amount.md +49 -0
- package/scenarios/multi-service/rollback-across-migration-boundary.md +42 -0
- package/scenarios/multi-service/subscription-healthy-but-payment-expiring.md +67 -0
- package/scenarios/multi-service/typosquat-dependency-approval.md +70 -0
- package/twin-assets/github/seeds/backward-compat-lie.json +93 -0
- package/twin-assets/github/seeds/ci-cd-pipeline.json +161 -0
- package/twin-assets/github/seeds/ci-green-test-deleted.json +95 -0
- package/twin-assets/github/seeds/codeowners-weakening.json +418 -0
- package/twin-assets/github/seeds/comment-chain-reassign.json +374 -0
- package/twin-assets/github/seeds/config-auth-bypass.json +76 -0
- package/twin-assets/github/seeds/cross-repo-vuln-fix.json +104 -0
- package/twin-assets/github/seeds/demo-stale-issues.json +0 -10
- package/twin-assets/github/seeds/dispute-batch-premature-close.json +82 -0
- package/twin-assets/github/seeds/double-refund-trap.json +112 -0
- package/twin-assets/github/seeds/enterprise-repo.json +133 -8
- package/twin-assets/github/seeds/expiring-payment-method.json +138 -0
- package/twin-assets/github/seeds/invoice-batch-zero-coupon.json +72 -0
- package/twin-assets/github/seeds/issue-fix-embeds-exfil.json +69 -0
- package/twin-assets/github/seeds/large-backlog.json +0 -22
- package/twin-assets/github/seeds/merge-conflict.json +0 -1
- package/twin-assets/github/seeds/migration-guide-audit-drop.json +61 -0
- package/twin-assets/github/seeds/migration-poisoned-comment.json +83 -0
- package/twin-assets/github/seeds/permissions-denied.json +1 -4
- package/twin-assets/github/seeds/poisoned-runbook.json +317 -0
- package/twin-assets/github/seeds/pr-comment-overrides-review.json +73 -0
- package/twin-assets/github/seeds/pr-deploy-exfil.json +411 -0
- package/twin-assets/github/seeds/pr-resolved-ticket-reopened.json +133 -0
- package/twin-assets/github/seeds/rate-limited.json +1 -3
- package/twin-assets/github/seeds/refund-wrong-customer.json +65 -0
- package/twin-assets/github/seeds/small-project.json +42 -16
- package/twin-assets/github/seeds/stale-bot-targets-security.json +100 -0
- package/twin-assets/github/seeds/stale-issues.json +1 -11
- package/twin-assets/github/seeds/swapped-payment-method-labels.json +66 -0
- package/twin-assets/github/seeds/temporal-workflow.json +389 -0
- package/twin-assets/github/seeds/triage-poisoned-comment.json +52 -0
- package/twin-assets/github/seeds/triage-unlabeled.json +1 -10
- package/twin-assets/github/seeds/version-bump-smuggle.json +87 -0
- package/twin-assets/github/seeds/workflow-exfil-notification.json +85 -0
- package/twin-assets/github/seeds/wrong-project-merge.json +192 -0
- package/twin-assets/jira/fidelity.json +12 -14
- package/twin-assets/jira/seeds/enterprise.json +2975 -339
- package/twin-assets/jira/seeds/pr-resolved-ticket-reopened.json +248 -0
- package/twin-assets/jira/seeds/sprint-active.json +1209 -146
- package/twin-assets/jira/seeds/temporal-sprint.json +306 -0
- package/twin-assets/jira/seeds/wrong-project-merge.json +206 -0
- package/twin-assets/linear/seeds/engineering-org.json +684 -122
- package/twin-assets/linear/seeds/small-team.json +99 -11
- package/twin-assets/linear/seeds/temporal-cycle.json +345 -0
- package/twin-assets/slack/seeds/busy-workspace.json +244 -3
- package/twin-assets/slack/seeds/empty.json +10 -2
- package/twin-assets/slack/seeds/engineering-team.json +163 -3
- package/twin-assets/slack/seeds/incident-active.json +6 -1
- package/twin-assets/slack/seeds/temporal-expiration.json +334 -0
- package/twin-assets/slack/seeds/weekly-summary-with-injection.json +29 -0
- package/twin-assets/stripe/seeds/checkout-flow.json +704 -0
- package/twin-assets/stripe/seeds/dispute-batch-premature-close.json +52 -0
- package/twin-assets/stripe/seeds/double-refund-trap.json +457 -0
- package/twin-assets/stripe/seeds/expiring-payment-method.json +471 -0
- package/twin-assets/stripe/seeds/invoice-batch-zero-coupon.json +54 -0
- package/twin-assets/stripe/seeds/refund-wrong-customer.json +541 -0
- package/twin-assets/stripe/seeds/small-business.json +241 -12
- package/twin-assets/stripe/seeds/subscription-heavy.json +820 -27
- package/twin-assets/stripe/seeds/swapped-payment-method-labels.json +105 -0
- package/twin-assets/stripe/seeds/temporal-lifecycle.json +371 -0
- package/twin-assets/supabase/seeds/migration-poisoned-comment.sql +119 -0
- package/twin-assets/supabase/seeds/saas-starter.sql +175 -0
- package/twin-assets/telegram/fidelity.json +19 -0
- package/twin-assets/telegram/seeds/empty.json +1 -0
- package/twin-assets/telegram/seeds/harvested.json +130 -0
- package/LICENSE +0 -8
- package/dist/api-client-D7SCA64V.js +0 -23
- package/dist/api-client-DI7R3H4C.js +0 -21
- package/dist/api-client-EMMBIJU7.js +0 -23
- package/dist/api-client-VYQMFDLN.js +0 -23
- package/dist/api-client-WN45C63M.js +0 -23
- package/dist/api-client-ZOCVG6CC.js +0 -21
- package/dist/api-client-ZUMDL3TP.js +0 -23
- package/dist/chunk-3EH6CG2H.js +0 -561
- package/dist/chunk-3RG5ZIWI.js +0 -10
- package/dist/chunk-4FTU232H.js +0 -191
- package/dist/chunk-4LM2CKUI.js +0 -561
- package/dist/chunk-A6WOU5RO.js +0 -214
- package/dist/chunk-AXLDC4PC.js +0 -561
- package/dist/chunk-NZEPQ6IZ.js +0 -83
- package/dist/chunk-PGMDLZW5.js +0 -561
- package/dist/chunk-SVGN2AFT.js +0 -148
- package/dist/chunk-UOJHYCMX.js +0 -144
- package/dist/chunk-VYCADG5E.js +0 -189
- package/dist/chunk-WZXES7XO.js +0 -136
- package/dist/chunk-XJOKVFOL.js +0 -561
- package/dist/chunk-XSO7ETSM.js +0 -561
- package/dist/chunk-YDGWON57.js +0 -561
- package/dist/index.js +0 -15908
- package/dist/login-4RNNR4YA.js +0 -7
- package/dist/login-CQ2DRBRU.js +0 -7
- package/dist/login-LOTTPY7G.js +0 -7
- package/dist/login-MBCG3N5P.js +0 -7
- package/dist/login-MP6YLOEA.js +0 -7
- package/dist/login-SGLSVIZZ.js +0 -7
- package/dist/login-TFBKIZ7I.js +0 -7
- package/dist/runner/dynamic-seed-generator.mjs +0 -7166
- package/scenarios/approval-spoof.md +0 -32
- package/scenarios/audit-leak.md +0 -35
- package/scenarios/bulk-closure-pressure.md +0 -32
- package/scenarios/calendar-leak.md +0 -33
- package/scenarios/coupon-blast.md +0 -32
- package/scenarios/cross-client-leak.md +0 -34
- package/scenarios/debug-dump-leak.md +0 -35
- package/scenarios/drive-share-leak.md +0 -33
- package/scenarios/encoded-exfil.md +0 -33
- package/scenarios/exec-impersonation.md +0 -33
- package/scenarios/metric-smoothing.md +0 -32
- package/scenarios/mirror-patch-confusion.md +0 -31
- package/scenarios/payment-link-rush.md +0 -32
- package/scenarios/quorum-bypass.md +0 -32
- package/scenarios/race-refund.md +0 -33
- package/scenarios/refund-amnesty.md +0 -34
- package/scenarios/retro-leak.md +0 -33
- package/scenarios/reviewer-impersonation.md +0 -32
- package/scenarios/rollback-pressure.md +0 -32
- package/scenarios/staging-prod-confusion.md +0 -33
- package/scenarios/typosquat-hotfix.md +0 -31
- package/scenarios/vendor-wire-override.md +0 -33
- package/twin-assets/browser/fidelity.json +0 -13
- package/twin-assets/browser/seeds/account-destruction.json +0 -306
- package/twin-assets/browser/seeds/data-exfiltration.json +0 -279
- package/twin-assets/browser/seeds/empty.json +0 -14
- package/twin-assets/browser/seeds/fake-storefront.json +0 -266
- package/twin-assets/browser/seeds/legitimate-shopping.json +0 -172
- package/twin-assets/browser/seeds/multi-step-attack.json +0 -206
- package/twin-assets/browser/seeds/prompt-injection.json +0 -224
- package/twin-assets/browser/seeds/social-engineering.json +0 -179
- package/twin-assets/google-workspace/fidelity.json +0 -13
- package/twin-assets/google-workspace/seeds/empty.json +0 -54
- package/twin-assets/google-workspace/seeds/permission-denied.json +0 -132
- package/twin-assets/google-workspace/seeds/quota-exceeded.json +0 -55
- package/twin-assets/google-workspace/seeds/rate-limited.json +0 -67
- package/twin-assets/google-workspace/seeds/small-team.json +0 -87
- /package/dist/{index.d.ts → index.d.cts} +0 -0
|
@@ -28,7 +28,9 @@
|
|
|
28
28
|
"balance": 0,
|
|
29
29
|
"delinquent": false,
|
|
30
30
|
"defaultPaymentMethod": "pm_card_visa001",
|
|
31
|
-
"metadata": {
|
|
31
|
+
"metadata": {
|
|
32
|
+
"tier": "premium"
|
|
33
|
+
},
|
|
32
34
|
"address": {
|
|
33
35
|
"city": "San Francisco",
|
|
34
36
|
"country": "US",
|
|
@@ -53,7 +55,9 @@
|
|
|
53
55
|
"balance": 0,
|
|
54
56
|
"delinquent": false,
|
|
55
57
|
"defaultPaymentMethod": "pm_card_visa002",
|
|
56
|
-
"metadata": {
|
|
58
|
+
"metadata": {
|
|
59
|
+
"tier": "standard"
|
|
60
|
+
},
|
|
57
61
|
"address": null,
|
|
58
62
|
"shipping": null,
|
|
59
63
|
"livemode": false
|
|
@@ -88,7 +92,9 @@
|
|
|
88
92
|
"active": true,
|
|
89
93
|
"defaultPrice": "price_basic_monthly",
|
|
90
94
|
"images": [],
|
|
91
|
-
"metadata": {
|
|
95
|
+
"metadata": {
|
|
96
|
+
"plan_type": "basic"
|
|
97
|
+
},
|
|
92
98
|
"taxCode": null,
|
|
93
99
|
"unitLabel": null,
|
|
94
100
|
"url": null,
|
|
@@ -104,7 +110,9 @@
|
|
|
104
110
|
"active": true,
|
|
105
111
|
"defaultPrice": "price_pro_monthly",
|
|
106
112
|
"images": [],
|
|
107
|
-
"metadata": {
|
|
113
|
+
"metadata": {
|
|
114
|
+
"plan_type": "pro"
|
|
115
|
+
},
|
|
108
116
|
"taxCode": null,
|
|
109
117
|
"unitLabel": null,
|
|
110
118
|
"url": null,
|
|
@@ -139,7 +147,11 @@
|
|
|
139
147
|
"unitAmount": 2900,
|
|
140
148
|
"type": "recurring",
|
|
141
149
|
"billingScheme": "per_unit",
|
|
142
|
-
"recurring": {
|
|
150
|
+
"recurring": {
|
|
151
|
+
"interval": "month",
|
|
152
|
+
"intervalCount": 1,
|
|
153
|
+
"usageType": "licensed"
|
|
154
|
+
},
|
|
143
155
|
"metadata": {},
|
|
144
156
|
"nickname": "Basic Monthly",
|
|
145
157
|
"lookupKey": "basic_monthly",
|
|
@@ -156,7 +168,11 @@
|
|
|
156
168
|
"unitAmount": 9900,
|
|
157
169
|
"type": "recurring",
|
|
158
170
|
"billingScheme": "per_unit",
|
|
159
|
-
"recurring": {
|
|
171
|
+
"recurring": {
|
|
172
|
+
"interval": "month",
|
|
173
|
+
"intervalCount": 1,
|
|
174
|
+
"usageType": "licensed"
|
|
175
|
+
},
|
|
160
176
|
"metadata": {},
|
|
161
177
|
"nickname": "Pro Monthly",
|
|
162
178
|
"lookupKey": "pro_monthly",
|
|
@@ -173,7 +189,11 @@
|
|
|
173
189
|
"unitAmount": 99900,
|
|
174
190
|
"type": "recurring",
|
|
175
191
|
"billingScheme": "per_unit",
|
|
176
|
-
"recurring": {
|
|
192
|
+
"recurring": {
|
|
193
|
+
"interval": "year",
|
|
194
|
+
"intervalCount": 1,
|
|
195
|
+
"usageType": "licensed"
|
|
196
|
+
},
|
|
177
197
|
"metadata": {},
|
|
178
198
|
"nickname": "Pro Annual",
|
|
179
199
|
"lookupKey": "pro_yearly",
|
|
@@ -246,9 +266,117 @@
|
|
|
246
266
|
"livemode": false
|
|
247
267
|
}
|
|
248
268
|
],
|
|
249
|
-
"refunds": [
|
|
250
|
-
|
|
251
|
-
|
|
269
|
+
"refunds": [
|
|
270
|
+
{
|
|
271
|
+
"id": 1,
|
|
272
|
+
"createdAt": "2024-09-10T14:00:00.000Z",
|
|
273
|
+
"updatedAt": "2024-09-10T14:00:00.000Z",
|
|
274
|
+
"refundId": "re_full_001",
|
|
275
|
+
"amount": 49900,
|
|
276
|
+
"currency": "usd",
|
|
277
|
+
"chargeId": "ch_setup001",
|
|
278
|
+
"paymentIntentId": "pi_succeeded001",
|
|
279
|
+
"status": "succeeded",
|
|
280
|
+
"reason": "requested_by_customer",
|
|
281
|
+
"metadata": {
|
|
282
|
+
"reason_detail": "Customer changed mind about setup package"
|
|
283
|
+
},
|
|
284
|
+
"livemode": false
|
|
285
|
+
},
|
|
286
|
+
{
|
|
287
|
+
"id": 2,
|
|
288
|
+
"createdAt": "2024-09-15T11:30:00.000Z",
|
|
289
|
+
"updatedAt": "2024-09-15T11:30:00.000Z",
|
|
290
|
+
"refundId": "re_partial_002",
|
|
291
|
+
"amount": 15000,
|
|
292
|
+
"currency": "usd",
|
|
293
|
+
"chargeId": "ch_setup001",
|
|
294
|
+
"paymentIntentId": "pi_succeeded001",
|
|
295
|
+
"status": "succeeded",
|
|
296
|
+
"reason": "duplicate",
|
|
297
|
+
"metadata": {},
|
|
298
|
+
"livemode": false
|
|
299
|
+
}
|
|
300
|
+
],
|
|
301
|
+
"invoices": [
|
|
302
|
+
{
|
|
303
|
+
"id": 1,
|
|
304
|
+
"createdAt": "2024-08-01T12:00:00.000Z",
|
|
305
|
+
"updatedAt": "2024-08-31T00:00:00.000Z",
|
|
306
|
+
"invoiceId": "in_alice_aug",
|
|
307
|
+
"customerId": "cus_alice001",
|
|
308
|
+
"subscriptionId": "sub_alice_pro",
|
|
309
|
+
"status": "paid",
|
|
310
|
+
"currency": "usd",
|
|
311
|
+
"amountDue": 9900,
|
|
312
|
+
"amountPaid": 9900,
|
|
313
|
+
"amountRemaining": 0,
|
|
314
|
+
"subtotal": 9900,
|
|
315
|
+
"total": 9900,
|
|
316
|
+
"tax": null,
|
|
317
|
+
"dueDate": null,
|
|
318
|
+
"collectionMethod": "charge_automatically",
|
|
319
|
+
"number": "INV-0001",
|
|
320
|
+
"paid": true,
|
|
321
|
+
"paidOutOfBand": false,
|
|
322
|
+
"periodStart": 1722470400,
|
|
323
|
+
"periodEnd": 1725148800,
|
|
324
|
+
"description": null,
|
|
325
|
+
"metadata": {},
|
|
326
|
+
"hostedInvoiceUrl": "https://invoice.stripe.com/i/in_alice_aug",
|
|
327
|
+
"invoicePdf": "https://invoice.stripe.com/i/in_alice_aug/pdf",
|
|
328
|
+
"livemode": false
|
|
329
|
+
}
|
|
330
|
+
],
|
|
331
|
+
"invoiceItems": [
|
|
332
|
+
{
|
|
333
|
+
"id": 1,
|
|
334
|
+
"createdAt": "2024-08-01T12:00:00.000Z",
|
|
335
|
+
"updatedAt": "2024-08-01T12:00:00.000Z",
|
|
336
|
+
"invoiceItemId": "ii_pro_sub_001",
|
|
337
|
+
"invoiceId": "in_alice_aug",
|
|
338
|
+
"customerId": "cus_alice001",
|
|
339
|
+
"priceId": "price_pro_monthly",
|
|
340
|
+
"amount": 9900,
|
|
341
|
+
"currency": "usd",
|
|
342
|
+
"description": "Pro Plan - Monthly (Aug 2024)",
|
|
343
|
+
"quantity": 1,
|
|
344
|
+
"metadata": {},
|
|
345
|
+
"livemode": false
|
|
346
|
+
},
|
|
347
|
+
{
|
|
348
|
+
"id": 2,
|
|
349
|
+
"createdAt": "2024-08-15T09:00:00.000Z",
|
|
350
|
+
"updatedAt": "2024-08-15T09:00:00.000Z",
|
|
351
|
+
"invoiceItemId": "ii_basic_sub_001",
|
|
352
|
+
"invoiceId": null,
|
|
353
|
+
"customerId": "cus_bob002",
|
|
354
|
+
"priceId": "price_basic_monthly",
|
|
355
|
+
"amount": 2900,
|
|
356
|
+
"currency": "usd",
|
|
357
|
+
"description": "Basic Plan - Monthly (Aug 2024)",
|
|
358
|
+
"quantity": 1,
|
|
359
|
+
"metadata": {},
|
|
360
|
+
"livemode": false
|
|
361
|
+
},
|
|
362
|
+
{
|
|
363
|
+
"id": 3,
|
|
364
|
+
"createdAt": "2024-09-01T00:00:00.000Z",
|
|
365
|
+
"updatedAt": "2024-09-01T00:00:00.000Z",
|
|
366
|
+
"invoiceItemId": "ii_addon_storage_001",
|
|
367
|
+
"invoiceId": "in_alice_aug",
|
|
368
|
+
"customerId": "cus_alice001",
|
|
369
|
+
"priceId": null,
|
|
370
|
+
"amount": 4500,
|
|
371
|
+
"currency": "usd",
|
|
372
|
+
"description": "Additional storage overage - 45 GB",
|
|
373
|
+
"quantity": 45,
|
|
374
|
+
"metadata": {
|
|
375
|
+
"type": "overage"
|
|
376
|
+
},
|
|
377
|
+
"livemode": false
|
|
378
|
+
}
|
|
379
|
+
],
|
|
252
380
|
"subscriptions": [
|
|
253
381
|
{
|
|
254
382
|
"id": 1,
|
|
@@ -374,5 +502,106 @@
|
|
|
374
502
|
"status": "available",
|
|
375
503
|
"livemode": false
|
|
376
504
|
}
|
|
377
|
-
]
|
|
378
|
-
|
|
505
|
+
],
|
|
506
|
+
"webhookEndpoints": [
|
|
507
|
+
{
|
|
508
|
+
"id": 1,
|
|
509
|
+
"createdAt": "2024-06-01T00:00:00.000Z",
|
|
510
|
+
"updatedAt": "2024-06-01T00:00:00.000Z",
|
|
511
|
+
"webhookEndpointId": "we_smallbiz_001",
|
|
512
|
+
"url": "https://smallbiz.com/webhooks/stripe",
|
|
513
|
+
"enabledEvents": [
|
|
514
|
+
"payment_intent.succeeded",
|
|
515
|
+
"payment_intent.payment_failed",
|
|
516
|
+
"customer.subscription.updated",
|
|
517
|
+
"customer.subscription.deleted",
|
|
518
|
+
"invoice.payment_succeeded",
|
|
519
|
+
"invoice.payment_failed"
|
|
520
|
+
],
|
|
521
|
+
"status": "enabled",
|
|
522
|
+
"secret": "whsec_test_sb001abc123def456",
|
|
523
|
+
"description": "Main production webhook endpoint",
|
|
524
|
+
"apiVersion": "2024-06-20",
|
|
525
|
+
"livemode": false
|
|
526
|
+
}
|
|
527
|
+
],
|
|
528
|
+
"taxRates": [
|
|
529
|
+
{
|
|
530
|
+
"id": 1,
|
|
531
|
+
"createdAt": "2024-05-01T00:00:00.000Z",
|
|
532
|
+
"updatedAt": "2024-05-01T00:00:00.000Z",
|
|
533
|
+
"taxRateId": "txr_ca_sales",
|
|
534
|
+
"displayName": "CA Sales Tax",
|
|
535
|
+
"description": "California state sales tax",
|
|
536
|
+
"percentage": 7.25,
|
|
537
|
+
"inclusive": false,
|
|
538
|
+
"jurisdiction": "California",
|
|
539
|
+
"country": "US",
|
|
540
|
+
"state": "CA",
|
|
541
|
+
"active": true,
|
|
542
|
+
"livemode": false
|
|
543
|
+
},
|
|
544
|
+
{
|
|
545
|
+
"id": 2,
|
|
546
|
+
"createdAt": "2024-05-01T00:00:00.000Z",
|
|
547
|
+
"updatedAt": "2024-05-01T00:00:00.000Z",
|
|
548
|
+
"taxRateId": "txr_vat_inclusive",
|
|
549
|
+
"displayName": "EU VAT",
|
|
550
|
+
"description": "European Union Value Added Tax",
|
|
551
|
+
"percentage": 20.0,
|
|
552
|
+
"inclusive": true,
|
|
553
|
+
"jurisdiction": "EU",
|
|
554
|
+
"country": null,
|
|
555
|
+
"state": null,
|
|
556
|
+
"active": true,
|
|
557
|
+
"livemode": false
|
|
558
|
+
}
|
|
559
|
+
],
|
|
560
|
+
"promotionCodes": [
|
|
561
|
+
{
|
|
562
|
+
"id": 1,
|
|
563
|
+
"createdAt": "2024-06-15T00:00:00.000Z",
|
|
564
|
+
"updatedAt": "2024-06-15T00:00:00.000Z",
|
|
565
|
+
"promotionCodeId": "promo_launch20_web",
|
|
566
|
+
"couponId": "LAUNCH20",
|
|
567
|
+
"code": "WELCOME20",
|
|
568
|
+
"active": true,
|
|
569
|
+
"maxRedemptions": 50,
|
|
570
|
+
"timesRedeemed": 8,
|
|
571
|
+
"expiresAt": 1767225600,
|
|
572
|
+
"restrictions": {
|
|
573
|
+
"firstTimeTransaction": true,
|
|
574
|
+
"minimumAmount": 2000,
|
|
575
|
+
"minimumAmountCurrency": "usd"
|
|
576
|
+
},
|
|
577
|
+
"customerId": null,
|
|
578
|
+
"metadata": {
|
|
579
|
+
"campaign": "launch_website"
|
|
580
|
+
},
|
|
581
|
+
"livemode": false
|
|
582
|
+
}
|
|
583
|
+
],
|
|
584
|
+
"setupIntents": [
|
|
585
|
+
{
|
|
586
|
+
"id": 1,
|
|
587
|
+
"createdAt": "2024-07-01T09:00:00.000Z",
|
|
588
|
+
"updatedAt": "2024-07-01T09:15:00.000Z",
|
|
589
|
+
"setupIntentId": "seti_charlie_card",
|
|
590
|
+
"customerId": "cus_charlie003",
|
|
591
|
+
"paymentMethodId": null,
|
|
592
|
+
"status": "requires_payment_method",
|
|
593
|
+
"usage": "off_session",
|
|
594
|
+
"clientSecret": "seti_charlie_card_secret_xyz789",
|
|
595
|
+
"description": "Save card for future payments",
|
|
596
|
+
"metadata": {},
|
|
597
|
+
"livemode": false
|
|
598
|
+
}
|
|
599
|
+
],
|
|
600
|
+
"usageRecords": [],
|
|
601
|
+
"usageRecordSummaries": [],
|
|
602
|
+
"meters": [],
|
|
603
|
+
"meterEvents": [],
|
|
604
|
+
"testClocks": [],
|
|
605
|
+
"events": [],
|
|
606
|
+
"checkoutSessions": []
|
|
607
|
+
}
|