@atbash/cli 0.5.15-dev.8 → 0.6.0-dev.1

package/dist/lib/risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../src/lib/risk.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;;;AAmBH,0BAEC;AAoID,gDAEC;AAqED,wCAiBC;AAGD,gCAOC;AAmBD,wDA4BC;AAhSD;;;;;;;;GAQG;AACH,SAAgB,OAAO,CAAC,MAA0B,EAAE,IAAY;IAC9D,OAAO,GAAG,MAAM,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;AACpC,CAAC;AAmCD,oEAAoE;AACpE,gEAAgE;AAChE,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,iFAAiF;AACjF,kFAAkF;AAClF,8EAA8E;AAC9E,4EAA4E;AAC5E,iFAAiF;AACjF,6EAA6E;AAC7E,oFAAoF;AACpF,MAAM,KAAK,GAAW;IACpB;QACE,IAAI,EAAE,4HAA4H;QAClI,QAAQ,EAAE,iCAAiC;QAC3C,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,4DAA4D;KAC1E;IACD;QACE,IAAI,EAAE,mFAAmF;QACzF,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,uCAAuC;KACrD;IACD;QACE,IAAI,EAAE,sGAAsG;QAC5G,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,yGAAyG;QAC/G,QAAQ,EAAE,mBAAmB;QAC7B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,wDAAwD;KACtE;IACD,+EAA+E;IAC/E,8EAA8E;IAC9E,qFAAqF;IACrF;QACE,IAAI,EAAE,yHAAyH;QAC/H,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,+BAA+B;KAC7C;IACD;QACE,IAAI,EAAE,4IAA4I;QAClJ,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,qCAAqC;KACnD;IACD,iFAAiF;IACjF,4EAA4E;IAC5E,qEAAqE;IACrE,gFAAgF;IAChF,iFAAiF;IACjF;QACE,IAAI,EAAE,qIAAqI;QAC3I,QAAQ,EAAE,wBAAwB;QAClC,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,yDAAyD;KACvE;IACD;QACE,IAAI,EAAE,6HAA6H;QACnI,QAAQ,EAAE,cAAc;QACxB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,kEAAkE;KAChF;IACD;QACE,IAAI,EAAE,mIAAmI;QACzI,QAAQ,EAAE,iBAAiB;QAC3B,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,oCAAoC;KAClD;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEhC,QAAA,qBAAqB,GAAG,gBAAgB,CAAC;AACzC,QAAA,wBAAwB,GAAG,6DAA6D,CAAC;AAEtG;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAAiD;IAClF,OAAO,IAAI,CAAC,QAAQ,KAAK,6BAAqB,IAAI,IAAI,CAAC,WAAW,KAAK,gCAAwB,CAAC;AAClG,CAAC;AAED,MAAM,YAAY,GAAuB;IACvC,QAAQ,EAAE,6BAAqB;IAC/B,6EAA6E;IAC7E,0DAA0D;IAC1D,QAAQ,EAAE,QAAQ;IAClB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,gCAAwB;CACtC,CAAC;AAEF,MAAM,UAAU,GAA6B,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAE7E,iFAAiF;AACjF,+EAA+E;AAC/E,kFAAkF;AAClF,kFAAkF;AAClF,uDAAuD;AACvD,MAAM,QAAQ,GAAuC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;AAEzG,SAAS,YAAY,CAAC,IAAc,EAAE,IAAwB,EAAE,SAAmB;IACjF,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,kBAAkB,EAAE,IAAI,CAAC,OAAO;QAChC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,QAAQ,CAAC,IAAc;IAC9B,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC;IACtG,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;IAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,uCAAuC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QACtC,+EAA+E;QAC/E,6EAA6E;QAC7E,2BAA2B;QAC3B,IAAI,IAAI,CAAC,QAAQ,KAAK,kBAAkB;YAAE,SAAS;QACnD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC;AACjC,CAAC;AAED,2EAA2E;AAC3E,SAAgB,cAAc,CAAC,KAAiB;IAC9C,8EAA8E;IAC9E,6EAA6E;IAC7E,gDAAgD;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAwB,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACjE,MAAM,OAAO,GACX,MAAM,CAAC,MAAM,KAAK,CAAC;QACjB,CAAC,CAAC,uHAAuH;QACzH,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,0BAA0B,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,oHAAoH,CAAC;IAC7M,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,kFAAkF;AAClF,SAAgB,UAAU,CAAC,KAAiB;IAC1C,MAAM,KAAK,GAAG,KAAK;SAChB,OAAO,CAAC,QAAQ,CAAC;QAClB,0EAA0E;QAC1E,+DAA+D;SAC9D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,OAAO,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,sBAAsB,CACpC,MAAkB,EAClB,MAAoF;IAEpF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,QAAQ,GACZ,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM;YACxC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,KAAK,QAAQ;gBACnB,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,MAAM,KAAK,KAAK;oBAChB,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,SAAS,CAAC;QACpB,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,EAAE,CAAC;QACT,OAAO;YACL,GAAG,IAAI;YACP,QAAQ;YACR,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,QAAQ;YACpD,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,WAAW;SACtD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3B,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACvE,CAAC"}

package/dist/lib/threats-llm.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Optional LLM pass enumerating CROSS-TOOL threat chains.
+ *
+ * The deterministic engine grades one tool at a time, which is exactly what it
+ * can defend: a rule sees a name and a description. It cannot see that "read CRM"
+ * plus "send email" is an exfiltration path, because neither tool is dangerous
+ * alone. That combination is what this pass is for, and it is the analysis Koray
+ * described the hosted backend as doing.
+ *
+ * ADDITIVE ONLY. Threats never replace the deterministic paths and never move the
+ * risk score: the score gates CI through --fail-on, and a number that moved
+ * because a model phrased things differently this run would make that gate flaky.
+ * The dashboard rescores on threats; a terminal that exits non-zero must not.
+ *
+ * Spends the user's own key. One request, bounded, hard timeout; any failure
+ * returns no threats and the scan keeps its deterministic report.
+ */
+import type { ScanTool, Severity, Verdict } from "./risk";
+export interface Threat {
+    /** The bad OUTCOME in plain English, not a tool name. */
+    title: string;
+    /** Which capabilities combine to enable it, e.g. "CRM read + browser". */
+    enabledBy?: string;
+    category: string;
+    severity: Severity;
+    recommendedVerdict: Verdict;
+    consequence: string;
+}
+export interface ThreatOutcome {
+    threats: Threat[];
+    requests: number;
+    skipped: number;
+    error?: string;
+}
+export declare function deriveThreats(tools: ScanTool[], options: {
+    apiKey: string;
+    model?: string;
+    timeoutMs?: number;
+}): Promise<ThreatOutcome>;

package/dist/lib/threats-llm.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveThreats = deriveThreats;
+const llm_1 = require("./llm");
+/** Matches the dashboard's ceiling, so the two passes see the same surface. */
+const MAX_TOOLS = 200;
+const DESC_CAP = 240;
+const SYSTEM_PROMPT = `You are an AI-agent security analyst. Given an agent's tools, enumerate the most consequential risk paths — including CROSS-TOOL chains (e.g. read sensitive data + external send = exfiltration).
+
+Frame each as a THREAT a non-technical manager understands — the bad OUTCOME, not the tool name. Good titles: "Infer sensitive personal characteristics", "Leak CRM data into external tools", "Issue unauthorized or excessive refunds", "Weaken its own policy or authority". Bad titles: raw tool names like "deletePet".
+
+Return ONLY a JSON object of the form {"threats":[ ... ]}, no prose. Each entry:
+{"title":"<the threat, plain English>","enabledBy":"<which capabilities enable it, e.g. 'CRM read + browser'>","category":"<one category from the list below>","severity":"low|medium|high","recommendedVerdict":"allow|hold|block|jail","consequence":"<concrete harm in plain words>"}
+
+"category" MUST be EXACTLY one of these protection categories (pick the closest):
+Financial, Communication, File system, Code execution, Network & web, Accounts & identity, Calendar, Self-modification, Cross-agent, Behavioral anomaly.
+
+Rules:
+- recommendedVerdict: block = must never run; jail = attempts to weaken its own authority; hold = needs human approval; allow = low-consequence.
+- Judge the exposure the tools ALLOW, not intent. Never invent capabilities not implied by the tools.
+- Return AT MOST 6 entries, the most consequential ones. Fewer is better than padding with near-duplicates.
+- Keep every field short: "title" at most 8 words, "consequence" at most 15 words, "enabledBy" at most 8 words. Do not restate the title in the consequence.`;
+const SEVERITIES = ["low", "medium", "high"];
+const VERDICTS = ["allow", "hold", "block", "jail"];
+async function deriveThreats(tools, options) {
+    const batch = tools.slice(0, MAX_TOOLS);
+    const skipped = Math.max(0, tools.length - batch.length);
+    if (batch.length === 0)
+        return { threats: [], requests: 0, skipped: 0 };
+    const catalog = batch.map((t) => ({ name: t.name, description: (t.description ?? "").slice(0, DESC_CAP) }));
+    const res = await (0, llm_1.chatJson)({
+        apiKey: options.apiKey,
+        model: options.model,
+        timeoutMs: options.timeoutMs,
+        system: SYSTEM_PROMPT,
+        user: JSON.stringify(catalog),
+        maxTokens: 2000,
+    });
+    if (!res.data)
+        return { threats: [], requests: res.requests, skipped, error: res.error };
+    // Accept the {"threats":[...]} wrapper or a bare array, since models drop the
+    // wrapper often enough that rejecting it would lose whole runs.
+    const raw = Array.isArray(res.data)
+        ? res.data
+        : Array.isArray(res.data.threats)
+            ? (res.data.threats)
+            : [];
+    const threats = [];
+    const seen = new Set();
+    for (const entry of raw) {
+        if (!entry || typeof entry !== "object")
+            continue;
+        const p = entry;
+        const title = (0, llm_1.coerceStr)(p.title, 140).trim();
+        if (!title || seen.has(title.toLowerCase()))
+            continue;
+        seen.add(title.toLowerCase());
+        const severity = SEVERITIES.find((s) => s === (0, llm_1.coerceStr)(p.severity, 12).trim().toLowerCase()) ?? "medium";
+        const verdict = VERDICTS.find((v) => v === (0, llm_1.coerceStr)(p.recommendedVerdict, 12).trim().toLowerCase()) ?? "hold";
+        const enabledBy = (0, llm_1.coerceStr)(p.enabledBy, 140).trim();
+        threats.push({
+            title,
+            ...(enabledBy ? { enabledBy } : {}),
+            category: (0, llm_1.coerceStr)(p.category, 60).trim() || "Behavioral anomaly",
+            severity,
+            recommendedVerdict: verdict,
+            consequence: (0, llm_1.coerceStr)(p.consequence, 200).trim(),
+        });
+    }
+    return { threats, requests: res.requests, skipped };
+}
+//# sourceMappingURL=threats-llm.js.map

package/dist/lib/threats-llm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threats-llm.js","sourceRoot":"","sources":["../../src/lib/threats-llm.ts"],"names":[],"mappings":";;AA6DA,sCAgDC;AA3FD,+BAA4C;AAE5C,+EAA+E;AAC/E,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,QAAQ,GAAG,GAAG,CAAC;AAoBrB,MAAM,aAAa,GAAG;;;;;;;;;;;;;;6JAcuI,CAAC;AAE9J,MAAM,UAAU,GAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACzD,MAAM,QAAQ,GAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAExD,KAAK,UAAU,aAAa,CACjC,KAAiB,EACjB,OAA+D;IAE/D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAExE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5G,MAAM,GAAG,GAAG,MAAM,IAAA,cAAQ,EAAC;QACzB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAEzF,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACjC,CAAC,CAAE,GAAG,CAAC,IAAkB;QACzB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,GAAG,CAAC,IAA8B,CAAC,OAAO,CAAC;YAC1D,CAAC,CAAC,CAAE,GAAG,CAAC,IAA+B,CAAC,OAAO,CAAC;YAChD,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAClD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAA,eAAS,EAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QACtD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAA,eAAS,EAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,QAAQ,CAAC;QAC1G,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAA,eAAS,EAAC,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,MAAM,CAAC;QAC/G,MAAM,SAAS,GAAG,IAAA,eAAS,EAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK;YACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,QAAQ,EAAE,IAAA,eAAS,EAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,oBAAoB;YAClE,QAAQ;YACR,kBAAkB,EAAE,OAAO;YAC3B,WAAW,EAAE,IAAA,eAAS,EAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@atbash/cli",
-  "version": "0.5.15-dev.8",
-  "description": "Atbash CLI \u2014 control boundary before the last irreversible step in an agent workflow",
+  "version": "0.6.0-dev.1",
+  "description": "Atbash CLI — control boundary before the last irreversible step in an agent workflow",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://atbash.ai",
   "repository": {
@@ -26,13 +26,13 @@
   "scripts": {
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
     "build": "npm run clean && tsc",
-    "test": "node -r ts-node/register --test test/*.test.js",
+    "test": "node scripts/run-tests.mjs",
     "dev": "ts-node src/bin/atbash.ts",
     "release": "npm version patch --no-git-tag-version && npm run build && npx npm@10 publish --access public",
     "release:dev": "npm version prerelease --preid dev --no-git-tag-version && npm run build && npx npm@10 publish --tag dev --access public"
   },
   "dependencies": {
-    "@atbash/sdk": "^0.7.0",
+    "@atbash/sdk": "0.12.0-dev.0",
     "@iarna/toml": "2.2.5",
     "chalk": "^4.1.2",
     "commander": "^12.0.0",

package/dist/commands/mcp-cmd.d.ts

@@ -1,13 +0,0 @@
-import { Command } from "commander";
-/**
- * Where the launcher gets the key, in order.
- *
- * An `ATBASH_AGENT_PRIVKEY` already in the environment wins, so an operator who
- * deliberately injects the key at launch time keeps working exactly as before —
- * this command adds a safer default, it does not take the existing path away.
- */
-export declare function resolveLauncherKey(keyPathOverride?: string): {
-    privkey: string;
-    from: string;
-} | null;
-export declare function registerMcpCommand(program: Command): void;

package/dist/commands/mcp-cmd.js

@@ -1,216 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveLauncherKey = resolveLauncherKey;
-exports.registerMcpCommand = registerMcpCommand;
-const fs = __importStar(require("fs"));
-const child_process_1 = require("child_process");
-const sdk_1 = require("@atbash/sdk");
-/**
- * `atbash mcp` — run the Atbash MCP server without putting a private key in a
- * config file.
- *
- * THE PROBLEM THIS SOLVES
- *
- * `@atbash/mcp` reads its agent identity from `ATBASH_AGENT_PRIVKEY` and has no
- * key-file fallback (verified against the published 0.1.3). The documented wiring
- * therefore asks the operator to paste a raw private key into their MCP client's
- * own config:
- *
- *   { "mcpServers": { "atbash": { "command": "npx", "args": ["-y", "@atbash/mcp"],
- *                                 "env": { "ATBASH_AGENT_PRIVKEY": "<the key>" } } } }
- *
- * That file is `claude_desktop_config.json` and its equivalents — files people
- * sync between machines, paste into issues, and screenshot when asking for help.
- * It made "wire up MCP for me" impossible to automate honestly: the automation's
- * whole job would have been to plant a secret somewhere worse than where it
- * already was.
- *
- * This command is the indirection that removes the problem. The client spawns
- * `atbash mcp`, which reads the key from the 0600 file Atbash already manages and
- * passes it to the server through the CHILD PROCESS ENVIRONMENT ONLY. Nothing
- * secret is ever written to a config file, so the client entry is:
- *
- *   { "mcpServers": { "atbash": { "command": "npx", "args": ["-y", "@atbash/cli", "mcp"] } } }
- *
- * — which contains no credential at all, and is safe for `atbash setup` to write.
- *
- * STDOUT IS THE PROTOCOL. MCP speaks JSON-RPC over stdio, so a single stray
- * `console.log` here corrupts the stream and the client reports a broken server.
- * Every diagnostic in this file goes to stderr. Do not change that.
- */
-/**
- * The server this launcher runs, and the SDK it is run WITH.
- *
- * ⚠️ BOTH PINS ARE LOAD-BEARING. DO NOT LOOSEN THEM.
- *
- * `@atbash/mcp` declares `@atbash/sdk: ^0.3.19` and imports `getOrgTierInfo` as a
- * named export. `@atbash/sdk@0.3.24` REMOVED that export, so `^0.3.19` now
- * resolves to 0.3.25 and the server dies at import time:
- *
- *   SyntaxError: The requested module '@atbash/sdk' does not provide an
- *                export named 'getOrgTierInfo'
- *
- * That breaks EVERY published `@atbash/mcp` (0.1.0 through 0.1.3) — a plain
- * `npm install @atbash/mcp` cannot start at all, which is why the documented
- * hand-wiring produces a client reporting a failed server. Naming an SDK version
- * from before the removal is what makes it run; 0.3.23 is the newest that works.
- *
- * ⚠️ AND THE PIN ITSELF IS A STOPGAP. `@atbash/sdk@0.3.23` is DEPRECATED:
- *
- *   npm warn deprecated @atbash/sdk@0.3.23: Old architecture with legacy chain
- *   structure. Please upgrade to stable version @atbash/sdk@^0.5.0
- *
- * So this runs the MCP server on a legacy chain architecture. It is verified to
- * work — a real `atbash_check_agent` tool call round-trips against the live
- * deployment and returns the correct answer — but it is the newest thing that
- * works, not a thing that is right.
- *
- * THE REAL FIX is republishing `@atbash/mcp` against `@atbash/sdk@^0.7`, which
- * moves `getOrgTierInfo` onto the `Atbash` class rather than exporting it. Until
- * that ships, this pin is the only thing between an operator and a dead MCP
- * server, so treat a "dependency update" here as a regression unless the
- * republished package is verified to both START and serve a tool call.
- *
- * Cold start is ~12s while npx populates its cache, ~1s warm. A client with a
- * short startup timeout may fail its very first launch and succeed on retry.
- */
-const MCP_PKG = "@atbash/mcp";
-const MCP_VERSION = "0.1.3";
-const MCP_SDK_VERSION = "0.3.23";
-/** Read `privkey=` out of the agent key file, or null if it is not usable. */
-function privkeyFromKeyFile(keyPath) {
-    let text;
-    try {
-        text = fs.readFileSync(keyPath, "utf8");
-    }
-    catch {
-        return null;
-    }
-    if (text.trim().startsWith("{")) {
-        try {
-            const o = JSON.parse(text);
-            const value = String(o.privKey ?? o.privkey ?? o.privateKey ?? "").replace(/^0x/i, "").trim();
-            return /^[0-9a-fA-F]{64}$/.test(value) ? value.toLowerCase() : null;
-        }
-        catch {
-            return null;
-        }
-    }
-    for (const line of text.split(/\r?\n/)) {
-        const match = line.trim().match(/^privkey\s*[:=]\s*(.+)$/i);
-        if (match) {
-            const value = match[1].replace(/^0x/i, "").trim();
-            if (/^[0-9a-fA-F]{64}$/.test(value))
-                return value.toLowerCase();
-        }
-    }
-    return null;
-}
-/**
- * Where the launcher gets the key, in order.
- *
- * An `ATBASH_AGENT_PRIVKEY` already in the environment wins, so an operator who
- * deliberately injects the key at launch time keeps working exactly as before —
- * this command adds a safer default, it does not take the existing path away.
- */
-function resolveLauncherKey(keyPathOverride) {
-    const fromEnv = process.env.ATBASH_AGENT_PRIVKEY?.replace(/^0x/i, "").trim();
-    if (fromEnv && /^[0-9a-fA-F]{64}$/.test(fromEnv))
-        return { privkey: fromEnv.toLowerCase(), from: "ATBASH_AGENT_PRIVKEY" };
-    const keyPath = (0, sdk_1.resolveKeyPath)(keyPathOverride);
-    const fromFile = privkeyFromKeyFile(keyPath);
-    if (fromFile)
-        return { privkey: fromFile, from: keyPath };
-    const fromConfig = (0, sdk_1.loadUserConfig)().agentKey?.replace(/^0x/i, "").trim();
-    if (fromConfig && /^[0-9a-fA-F]{64}$/.test(fromConfig))
-        return { privkey: fromConfig.toLowerCase(), from: "atbash config" };
-    return null;
-}
-function registerMcpCommand(program) {
-    program
-        .command("mcp")
-        .description("Run the Atbash MCP server, reading the agent key from ~/.config/atbash/guard-client-key instead of a config file (used as the `command` in an MCP client's server list)")
-        .option("--key-file <path>", "Agent key file to read (default: ~/.config/atbash/guard-client-key)")
-        .option("--endpoint <url>", "Atbash endpoint the server should use")
-        .action((opts) => {
-        const resolved = resolveLauncherKey(opts.keyFile);
-        if (!resolved) {
-            // stderr: stdout belongs to the JSON-RPC stream.
-            process.stderr.write("atbash mcp: no agent key found.\n" +
-                `Looked at ATBASH_AGENT_PRIVKEY, ${(0, sdk_1.resolveKeyPath)(opts.keyFile)}, and the atbash config.\n` +
-                "Run `atbash setup` on this machine first, or pass --key-file.\n");
-            process.exit(1);
-        }
-        const endpoint = opts.endpoint || process.env.ATBASH_ENDPOINT;
-        // The key goes to the CHILD ONLY. It is never written to disk here and
-        // never echoed — the parent's own environment is left untouched.
-        const env = {
-            ...process.env,
-            ATBASH_AGENT_PRIVKEY: resolved.privkey,
-            ...(endpoint ? { ATBASH_ENDPOINT: endpoint } : {}),
-        };
-        // Both packages are placed in ONE npx tree so the compatible SDK sits at its
-        // root and satisfies @atbash/mcp's own `^0.3.19` range — which is what stops
-        // npm installing the broken 0.3.25 underneath it. Installing @atbash/mcp
-        // alone (as a dependency of this CLI, or via a bare npx) reintroduces the
-        // crash, so this shape is deliberate, not incidental.
-        const command = "npx";
-        const args = [
-            "--yes",
-            "-p", `${MCP_PKG}@${MCP_VERSION}`,
-            "-p", `@atbash/sdk@${MCP_SDK_VERSION}`,
-            "atbash-mcp",
-        ];
-        process.stderr.write(`atbash mcp: starting ${MCP_PKG}@${MCP_VERSION} with @atbash/sdk@${MCP_SDK_VERSION} (key from ${resolved.from})\n`);
-        // stdio inherit: the server talks JSON-RPC directly to the client that
-        // spawned us. Proxying it through here would add a failure point for no gain.
-        const child = (0, child_process_1.spawn)(command, args, { env, stdio: "inherit", shell: false });
-        child.on("error", (err) => {
-            process.stderr.write(`atbash mcp: could not start ${MCP_PKG}: ${err.message}\n`);
-            process.exit(1);
-        });
-        // Forward termination so the client's own shutdown reaches the server
-        // rather than orphaning it.
-        for (const signal of ["SIGINT", "SIGTERM"]) {
-            process.on(signal, () => { if (!child.killed)
-                child.kill(signal); });
-        }
-        child.on("exit", (code, signal) => {
-            process.exit(signal ? 1 : (code ?? 0));
-        });
-    });
-}
-//# sourceMappingURL=mcp-cmd.js.map

package/dist/commands/mcp-cmd.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-cmd.js","sourceRoot":"","sources":["../../src/commands/mcp-cmd.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2GA,gDAYC;AAED,gDA6DC;AAtLD,uCAAyB;AACzB,iDAAsC;AAEtC,qCAA6D;AAE7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,OAAO,GAAG,aAAa,CAAC;AAC9B,MAAM,WAAW,GAAG,OAAO,CAAC;AAC5B,MAAM,eAAe,GAAG,QAAQ,CAAC;AAEjC,8EAA8E;AAC9E,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YACtD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9F,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC5D,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,eAAwB;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;IAE1H,MAAM,OAAO,GAAG,IAAA,oBAAc,EAAC,eAAe,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAE1D,MAAM,UAAU,GAAG,IAAA,oBAAc,GAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,IAAI,UAAU,IAAI,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAE5H,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAAgB;IACjD,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,yKAAyK,CAAC;SACtL,MAAM,CAAC,mBAAmB,EAAE,qEAAqE,CAAC;SAClG,MAAM,CAAC,kBAAkB,EAAE,uCAAuC,CAAC;SACnE,MAAM,CAAC,CAAC,IAA6C,EAAE,EAAE;QACxD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,iDAAiD;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC;gBACjC,mCAAmC,IAAA,oBAAc,EAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B;gBAC3F,iEAAiE,CACpE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAC9D,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,GAAG,GAAsB;YAC7B,GAAG,OAAO,CAAC,GAAG;YACd,oBAAoB,EAAE,QAAQ,CAAC,OAAO;YACtC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC;QAEF,6EAA6E;QAC7E,6EAA6E;QAC7E,yEAAyE;QACzE,0EAA0E;QAC1E,sDAAsD;QACtD,MAAM,OAAO,GAAG,KAAK,CAAC;QACtB,MAAM,IAAI,GAAG;YACX,OAAO;YACP,IAAI,EAAE,GAAG,OAAO,IAAI,WAAW,EAAE;YACjC,IAAI,EAAE,eAAe,eAAe,EAAE;YACtC,YAAY;SACb,CAAC;QAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB,OAAO,IAAI,WAAW,qBAAqB,eAAe,cAAc,QAAQ,CAAC,IAAI,KAAK,CACnH,CAAC;QAEF,uEAAuE;QACvE,8EAA8E;QAC9E,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,sEAAsE;QACtE,4BAA4B;QAC5B,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;YACpD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/shared/atbash-targets.d.ts

@@ -1,49 +0,0 @@
-/**
- * Facts about WHERE Atbash lives — the deployments it trusts, and the on-disk
- * locations it knows about.
- *
- * These are shared by the read-only connector (`atbash connect`) and the
- * write-capable configurator (`atbash setup`). They live here rather than in
- * either command because both must agree:
- *
- *  - A host the connector will relay to must be a host setup will verify
- *    registration against. Two different allowlists would mean a deployment that
- *    can receive a scan but cannot confirm the agent it scanned.
- *  - A config path the scan reports must be a path setup can find. A client that
- *    shows up in the dashboard but not in `setup` reads as a bug in whichever of
- *    the two the operator happened to trust first.
- *
- * When they lived in connect.ts and setup imported them from there, a refactor of
- * the connector could silently change the configurator's behaviour. Adding a
- * client here updates both callers at once, which is the point.
- */
-/**
- * Official Atbash deployments that legitimately serve the onboarding flow.
- *
- * The pairing screen builds `--host` from the page you opened, so every origin
- * that can host onboarding must appear here. If production were missing, the real
- * atbash.ai would be flagged "unrecognized destination" — a false alarm on the
- * genuine article, which is worse than silence: it teaches people and agents to
- * wave through the one warning that actually catches a swapped host.
- *
- * Matched on EXACT hostname, never a suffix — "atbash.ai.evil.com" must not pass.
- * Deliberately not a *.vercel.app wildcard: that would bless anyone's preview.
- */
-export declare const KNOWN_HOSTS: Set<string>;
-/**
- * Used when neither --host nor ATBASH_HOST is given. Still the dev deployment,
- * because it is the one running the current connector API; switch this to
- * https://atbash.ai once production serves it (KNOWN_HOSTS already allows it).
- */
-export declare const DEFAULT_HOST = "https://chromia-verified-ai-dev-two.vercel.app";
-/**
- * MCP client config locations, relative to the user's home directory.
- *
- * Claude Code (`~/.claude.json`) and Codex (`~/.codex/config.toml`) are NOT here
- * on purpose: each needs bespoke handling (per-project server maps, and TOML
- * respectively) and both callers special-case them.
- */
-export declare const MCP_CONFIGS: {
-    label: string;
-    segs: string[];
-}[];

package/dist/shared/atbash-targets.js

@@ -1,63 +0,0 @@
-"use strict";
-/**
- * Facts about WHERE Atbash lives — the deployments it trusts, and the on-disk
- * locations it knows about.
- *
- * These are shared by the read-only connector (`atbash connect`) and the
- * write-capable configurator (`atbash setup`). They live here rather than in
- * either command because both must agree:
- *
- *  - A host the connector will relay to must be a host setup will verify
- *    registration against. Two different allowlists would mean a deployment that
- *    can receive a scan but cannot confirm the agent it scanned.
- *  - A config path the scan reports must be a path setup can find. A client that
- *    shows up in the dashboard but not in `setup` reads as a bug in whichever of
- *    the two the operator happened to trust first.
- *
- * When they lived in connect.ts and setup imported them from there, a refactor of
- * the connector could silently change the configurator's behaviour. Adding a
- * client here updates both callers at once, which is the point.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MCP_CONFIGS = exports.DEFAULT_HOST = exports.KNOWN_HOSTS = void 0;
-/**
- * Official Atbash deployments that legitimately serve the onboarding flow.
- *
- * The pairing screen builds `--host` from the page you opened, so every origin
- * that can host onboarding must appear here. If production were missing, the real
- * atbash.ai would be flagged "unrecognized destination" — a false alarm on the
- * genuine article, which is worse than silence: it teaches people and agents to
- * wave through the one warning that actually catches a swapped host.
- *
- * Matched on EXACT hostname, never a suffix — "atbash.ai.evil.com" must not pass.
- * Deliberately not a *.vercel.app wildcard: that would bless anyone's preview.
- */
-exports.KNOWN_HOSTS = new Set([
-    "atbash.ai",
-    "www.atbash.ai",
-    "chromia-verified-ai-dev-two.vercel.app",
-    "chromia-verified-ai-agent-scan.vercel.app",
-]);
-/**
- * Used when neither --host nor ATBASH_HOST is given. Still the dev deployment,
- * because it is the one running the current connector API; switch this to
- * https://atbash.ai once production serves it (KNOWN_HOSTS already allows it).
- */
-exports.DEFAULT_HOST = "https://chromia-verified-ai-dev-two.vercel.app";
-/**
- * MCP client config locations, relative to the user's home directory.
- *
- * Claude Code (`~/.claude.json`) and Codex (`~/.codex/config.toml`) are NOT here
- * on purpose: each needs bespoke handling (per-project server maps, and TOML
- * respectively) and both callers special-case them.
- */
-exports.MCP_CONFIGS = [
-    { label: "Claude Desktop", segs: ["Library", "Application Support", "Claude", "claude_desktop_config.json"] },
-    { label: "Claude Desktop", segs: [".config", "Claude", "claude_desktop_config.json"] },
-    { label: "Cursor", segs: [".cursor", "mcp.json"] },
-    { label: "Windsurf", segs: [".codeium", "windsurf", "mcp_config.json"] },
-    { label: "VS Code (MCP)", segs: [".vscode", "mcp.json"] },
-    { label: "Gemini CLI", segs: [".gemini", "settings.json"] },
-    { label: "Continue", segs: [".continue", "config.json"] },
-];
-//# sourceMappingURL=atbash-targets.js.map

package/dist/shared/atbash-targets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"atbash-targets.js","sourceRoot":"","sources":["../../src/shared/atbash-targets.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAEH;;;;;;;;;;;GAWG;AACU,QAAA,WAAW,GAAG,IAAI,GAAG,CAAC;IACjC,WAAW;IACX,eAAe;IACf,wCAAwC;IACxC,2CAA2C;CAC5C,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,YAAY,GAAG,gDAAgD,CAAC;AAE7E;;;;;;GAMG;AACU,QAAA,WAAW,GAAwC;IAC9D,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,4BAA4B,CAAC,EAAE;IAC7G,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC,EAAE;IACtF,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;IAClD,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE;IACxE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;IACzD,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE;IAC3D,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE;CAC1D,CAAC"}