@armoriq/sdk-dev 0.6.3 → 0.6.6

package/dist/integrations/microsoft_copilot.js

@@ -1,126 +0,0 @@
-"use strict";
-/**
- * ArmorIQ - Microsoft Copilot Studio integration (TypeScript).
- *
- * Provides the building blocks for hosting an ArmorCopilot webhook
- * receiver that fronts the Microsoft Copilot Studio external security
- * webhook (`POST /analyze-tool-execution`).
- *
- *   import {
- *     verifyCopilotStudioSignature,
- *     translateCopilotStudioPayload,
- *   } from '@armoriq/sdk/integrations/microsoft_copilot';
- *
- * The MS side sends each tool invocation with an HMAC-SHA256 signature
- * computed over `<timestamp>.<rawBody>` using a shared secret the tenant
- * configured in Copilot Studio admin. We verify, translate the payload
- * to our internal tool-call shape, then run the request through
- * ArmorIQ policy enforcement.
- *
- * The verifier here is pure crypto: it does not call the backend. The
- * caller is responsible for routing the verified request through the
- * regular SDK enforce path (or future plan-less enforce endpoint) once
- * the signature has been confirmed.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyCopilotStudioSignature = verifyCopilotStudioSignature;
-exports.translateCopilotStudioPayload = translateCopilotStudioPayload;
-exports.toCopilotStudioDecision = toCopilotStudioDecision;
-const crypto = __importStar(require("crypto"));
-const MAX_SKEW_SECONDS = 300;
-/**
- * Verify the HMAC signature MS Copilot Studio attaches to a webhook
- * request. Pure crypto — no backend calls. Constant-time comparison.
- */
-function verifyCopilotStudioSignature(args) {
-    if (!args.signature)
-        return { ok: false, reason: 'missing-signature' };
-    if (args.timestamp === undefined || args.timestamp === null) {
-        return { ok: false, reason: 'missing-timestamp' };
-    }
-    const tsNum = typeof args.timestamp === 'number'
-        ? args.timestamp
-        : Number(args.timestamp);
-    if (Number.isNaN(tsNum)) {
-        return { ok: false, reason: 'invalid-timestamp' };
-    }
-    const drift = Math.abs(Date.now() / 1000 - tsNum);
-    const maxSkew = args.maxSkewSeconds ?? MAX_SKEW_SECONDS;
-    if (drift > maxSkew)
-        return { ok: false, reason: 'timestamp-skew' };
-    const body = typeof args.rawBody === 'string'
-        ? args.rawBody
-        : args.rawBody.toString('utf8');
-    const expected = crypto
-        .createHmac('sha256', args.secret)
-        .update(`${tsNum}.${body}`)
-        .digest('hex');
-    const provided = args.signature.startsWith('sha256=')
-        ? args.signature.slice(7)
-        : args.signature;
-    if (provided.length !== expected.length) {
-        return { ok: false, reason: 'bad-signature' };
-    }
-    const match = crypto.timingSafeEqual(Buffer.from(provided, 'hex'), Buffer.from(expected, 'hex'));
-    return match ? { ok: true } : { ok: false, reason: 'bad-signature' };
-}
-/**
- * Translate a Copilot Studio webhook payload into the
- * `{ toolName, args, ...meta }` shape ArmorIQ enforce paths expect.
- */
-function translateCopilotStudioPayload(payload) {
-    const toolName = payload.toolDefinition?.name ??
-        payload.toolDefinition?.id ??
-        'unknown';
-    return {
-        toolName: String(toolName),
-        args: payload.toolInputValues ?? {},
-        userMessage: payload.userMessage,
-        agentMetadata: payload.agentMetadata,
-        userMetadata: payload.userMetadata,
-        conversationMetadata: payload.conversationMetadata,
-    };
-}
-/**
- * Sentinel mapping: a non-allow enforce result -> Copilot Studio response.
- */
-function toCopilotStudioDecision(enforced) {
-    if (enforced.allowed && enforced.action !== 'block') {
-        return { action: 'allow' };
-    }
-    return { action: 'block', reason: enforced.reason };
-}
-//# sourceMappingURL=microsoft_copilot.js.map

package/dist/integrations/microsoft_copilot.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"microsoft_copilot.js","sourceRoot":"","sources":["../../src/integrations/microsoft_copilot.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgDH,oEAyCC;AAeD,sEAeC;AAUD,0DAOC;AAtID,+CAAiC;AAEjC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAwC7B;;;GAGG;AACH,SAAgB,4BAA4B,CAC1C,IAA6B;IAE7B,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACvE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,KAAK,GACT,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAChC,CAAC,CAAC,IAAI,CAAC,SAAS;QAChB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,gBAAgB,CAAC;IACxD,IAAI,KAAK,GAAG,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAEpE,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM;SACpB,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;SACjC,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;IAEnB,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAClC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAC5B,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAC7B,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AACvE,CAAC;AAWD;;;GAGG;AACH,SAAgB,6BAA6B,CAC3C,OAA6B;IAE7B,MAAM,QAAQ,GACZ,OAAO,CAAC,cAAc,EAAE,IAAI;QAC5B,OAAO,CAAC,cAAc,EAAE,EAAE;QAC1B,SAAS,CAAC;IACZ,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC1B,IAAI,EAAE,OAAO,CAAC,eAAe,IAAI,EAAE;QACnC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KACnD,CAAC;AACJ,CAAC;AAOD;;GAEG;AACH,SAAgB,uBAAuB,CACrC,QAAgE;IAEhE,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AACtD,CAAC"}