@coderifts/agent-guard 17.3.2 → 17.3.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +39 -0
- package/dist/cjs/atomic-profile.d.ts +46 -0
- package/dist/cjs/atomic-profile.d.ts.map +1 -1
- package/dist/cjs/atomic-profile.js +3 -0
- package/dist/cjs/atomic-profile.js.map +1 -1
- package/dist/cjs/cas-adapters/api.d.ts.map +1 -1
- package/dist/cjs/cas-adapters/api.js +5 -0
- package/dist/cjs/cas-adapters/api.js.map +1 -1
- package/dist/cjs/conditional-write.d.ts +36 -0
- package/dist/cjs/conditional-write.d.ts.map +1 -1
- package/dist/cjs/conditional-write.js +14 -1
- package/dist/cjs/conditional-write.js.map +1 -1
- package/dist/cjs/deny-teaching.d.ts +61 -0
- package/dist/cjs/deny-teaching.d.ts.map +1 -0
- package/dist/cjs/deny-teaching.js +130 -0
- package/dist/cjs/deny-teaching.js.map +1 -0
- package/dist/cjs/execute-tool-call.d.ts +13 -0
- package/dist/cjs/execute-tool-call.d.ts.map +1 -1
- package/dist/cjs/execute-tool-call.js +20 -0
- package/dist/cjs/execute-tool-call.js.map +1 -1
- package/dist/cjs/gate-refusal.d.ts +0 -1
- package/dist/cjs/gate-refusal.d.ts.map +1 -1
- package/dist/cjs/gate-refusal.js +14 -0
- package/dist/cjs/gate-refusal.js.map +1 -1
- package/dist/cjs/index.d.ts +2 -0
- package/dist/cjs/index.d.ts.map +1 -1
- package/dist/cjs/index.js +9 -5
- package/dist/cjs/index.js.map +1 -1
- package/dist/cjs/read-decision.d.ts +11 -3
- package/dist/cjs/read-decision.d.ts.map +1 -1
- package/dist/cjs/read-decision.js +11 -3
- package/dist/cjs/read-decision.js.map +1 -1
- package/dist/cjs/vendor/VENDOR.sha256 +12 -5
- package/dist/esm/atomic-profile.d.ts +46 -0
- package/dist/esm/atomic-profile.d.ts.map +1 -1
- package/dist/esm/atomic-profile.js +3 -0
- package/dist/esm/atomic-profile.js.map +1 -1
- package/dist/esm/cas-adapters/api.d.ts.map +1 -1
- package/dist/esm/cas-adapters/api.js +5 -0
- package/dist/esm/cas-adapters/api.js.map +1 -1
- package/dist/esm/conditional-write.d.ts +36 -0
- package/dist/esm/conditional-write.d.ts.map +1 -1
- package/dist/esm/conditional-write.js +14 -1
- package/dist/esm/conditional-write.js.map +1 -1
- package/dist/esm/deny-teaching.d.ts +61 -0
- package/dist/esm/deny-teaching.d.ts.map +1 -0
- package/dist/esm/deny-teaching.js +125 -0
- package/dist/esm/deny-teaching.js.map +1 -0
- package/dist/esm/execute-tool-call.d.ts +13 -0
- package/dist/esm/execute-tool-call.d.ts.map +1 -1
- package/dist/esm/execute-tool-call.js +20 -0
- package/dist/esm/execute-tool-call.js.map +1 -1
- package/dist/esm/gate-refusal.d.ts +0 -1
- package/dist/esm/gate-refusal.d.ts.map +1 -1
- package/dist/esm/gate-refusal.js +14 -0
- package/dist/esm/gate-refusal.js.map +1 -1
- package/dist/esm/index.d.ts +2 -0
- package/dist/esm/index.d.ts.map +1 -1
- package/dist/esm/index.js +1 -0
- package/dist/esm/index.js.map +1 -1
- package/dist/esm/read-decision.d.ts +11 -3
- package/dist/esm/read-decision.d.ts.map +1 -1
- package/dist/esm/read-decision.js +11 -3
- package/dist/esm/read-decision.js.map +1 -1
- package/dist/esm/vendor/VENDOR.sha256 +12 -5
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"read-decision.js","sourceRoot":"","sources":["../../src/read-decision.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"read-decision.js","sourceRoot":"","sources":["../../src/read-decision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,qFAAqF;AACrF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS;IACrC,UAAU;IACV,0BAA0B;IAC1B,kBAAkB;IAClB,MAAM;CACP,CAAC,CAAC;AAEH,8GAA8G;AAC9G,MAAM,kBAAkB,GAAoC;IAC1D,KAAK,EAAE,UAAU;IACjB,IAAI,EAAE,0BAA0B;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,KAAK,EAAE,MAAM;CACd,CAAC;AAmBF,SAAS,cAAc,CAAC,CAAU;IAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,uFAAuF;AACvF,SAAS,eAAe,CAAC,CAAU;IACjC,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,eAAe,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,cAAc,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACtC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAA6B,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAAC,GAA4B;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,OAAO,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,OAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,UAAU,CAAC,GAAG,UAAqB;IAC1C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,CAA0B,EAAE,MAAsC;IACtF,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC,CAAC,cAAc,IAAI,IAAI,IAAI,CAAC,CAAC,cAAc,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,GAAG,GAAG,CAAC,CAAC,qBAAqB,CAAC;IACpC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,sBAAsB,CAAC,CAA0B,EAAE,MAAsC;IAChG,OAAO,CAAC,CAAC,qBAAqB,KAAK,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAiB;IAC5C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,CAAC,GAAG,QAAmC,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,CAAC,eAAe,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjG,wFAAwF;IACxF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO;gBACL,eAAe,EAAE,MAAM,CAAC,gBAAmC;gBAC3D,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC;gBACjD,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;gBAC5B,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC;aAC3B,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,+EAA+E;YAC/E,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC;YACpC,OAAO;gBACL,eAAe,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;gBACvD,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC;gBACjD,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;gBAC5B,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC;gBAC1B,MAAM,EAAE,+BAA+B;aACxC,CAAC;QACJ,CAAC;QACD,gGAAgG;IAClG,CAAC;IAED,iCAAiC;IACjC,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,GAAG,GAAuB;YAC9B,eAAe,EAAE,CAAC,CAAC,gBAAmC;YACtD,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACnD,CAAC;QACF,4EAA4E;QAC5E,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAClC,GAAG,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,CAAC,CAAC,gBAAgB,CAAC;QAC/B,MAAM,GAAG,GAAuB;YAC9B,eAAe,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YACvD,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YAClD,MAAM,EAAE,+BAA+B;SACxC,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAClC,GAAG,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,uFAAuF;IACvF,yEAAyE;IACzE,IAAI,sBAAsB,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,WAAW,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,EAAE,CAAC;YACzF,OAAO;gBACL,eAAe,EAAE,kBAAkB,CAAC,WAAW,CAAE;gBACjD,QAAQ,EAAE,WAAW;aACtB,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,IAAI,WAAW,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,EAAE,CAAC;YACzF,OAAO;gBACL,eAAe,EAAE,kBAAkB,CAAC,WAAW,CAAE;gBACjD,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBACjD,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;aAChD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6FAA6F;IAC7F,MAAM,UAAU,GAAuB;QACrC,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QAClD,MAAM,EAAE,qBAAqB;KAC9B,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACzC,UAAU,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC"}
|
|
@@ -31,7 +31,7 @@
|
|
|
31
31
|
|
|
32
32
|
# ── THE RECEIPT-VERIFIER CORE IS PINNED TO A RELEASED TAG ───────────────────────────────────
|
|
33
33
|
#
|
|
34
|
-
# The shared verification core here comes from receipt-verifier **v1.0.
|
|
34
|
+
# The shared verification core here comes from receipt-verifier **v1.0.2**, peeled commit
|
|
35
35
|
# 51a8224439959a5b46c0b09e9a2cd67117f05d56.
|
|
36
36
|
#
|
|
37
37
|
# It was pinned to a WORKING TREE and to per-file commits. Both are honest about where the bytes
|
|
@@ -50,19 +50,26 @@
|
|
|
50
50
|
# can move. v1.0.1 is annotated and SSH-signed, so the pin now resolves to an identity and not
|
|
51
51
|
# only to bytes.
|
|
52
52
|
#
|
|
53
|
-
# tag object
|
|
54
|
-
# peeled commit
|
|
53
|
+
# tag object 99567ea1c88b9b6e348118eeacd03592e3f1075f
|
|
54
|
+
# peeled commit ac683b16c19662c9124c8cdab785223b28d2d0c6
|
|
55
55
|
# signer zsobpeter@gmail.com
|
|
56
56
|
# fingerprint SHA256:7yRXTm9zKGicfFpzL+7lpwFoPaoSwxAJlabB3jwxw2Y
|
|
57
57
|
#
|
|
58
58
|
# Verify it yourself, in a checkout of receipt-verifier:
|
|
59
59
|
#
|
|
60
|
-
# git tag -v v1.0.
|
|
60
|
+
# git tag -v v1.0.2
|
|
61
61
|
# -> Good "git" signature for zsobpeter@gmail.com with ED25519 key SHA256:7yRXTm9zKGicfFpzL+7lpwFoPaoSwxAJlabB3jwxw2Y
|
|
62
62
|
#
|
|
63
|
+
# WHY v1.0.2 AND NOT v1.0.1: the CORE IS BYTE-IDENTICAL between them — every hash line
|
|
64
|
+
# below is unchanged, and this re-pin moves none of them. v1.0.2 adds two things to the
|
|
65
|
+
# RELEASE: RECEIPT_FORMAT.md section 14 (the authority model) is in the tagged tree, and
|
|
66
|
+
# verification/allowed_signers ships in the repo so `git tag -v` names a principal on a
|
|
67
|
+
# machine that has never seen this project. A doc committed after a tag is not in that
|
|
68
|
+
# release, however committed it is — which is why the tag moved rather than the bytes.
|
|
69
|
+
#
|
|
63
70
|
# The peeled commit is UNCHANGED from v1.0.0 — the core is byte-identical and this re-pin moves no
|
|
64
71
|
# hash line. What it adds is who stands behind the bytes.
|
|
65
|
-
# source_commit:
|
|
72
|
+
# source_commit: ac683b16c19662c9124c8cdab785223b28d2d0c6 (receipt-verifier v1.0.2, signed)
|
|
66
73
|
#
|
|
67
74
|
|
|
68
75
|
verify.js 348d3f851cd79bf63298b51da422d11be980820576ab0bf0a2990b9f007d6249
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@coderifts/agent-guard",
|
|
3
|
-
"version": "17.3.
|
|
3
|
+
"version": "17.3.4",
|
|
4
4
|
"description": "Fail-closed guard for AI agent tool calls — preflight contract changes before they execute. Security core frozen (agent-guard-api v1.0); v1.1 adds client-side enforcement: receipt→envelope binding, decision↔action reconciliation, safe_for_agent + degraded fail-closed, and enforced⟺executed (P0 client-enforcement pack).",
|
|
5
5
|
"main": "./dist/cjs/index.js",
|
|
6
6
|
"module": "./dist/esm/index.js",
|