@connexum/ai-governance 1.0.0-beta.11

package/dist/governance/owasp-agentic-scanner.js

@@ -0,0 +1,318 @@
+"use strict";
+/**
+ * OWASP Agentic Top 10 Scanner — W1.7 of F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12.
+ *
+ * Analyses an AgentManifest against the OWASP Agentic Top 10 (A01-A10), emits
+ * structured findings with severity, remediation, and suggested company-pack
+ * gates, and produces a build-structure score (0-100) that feeds the third
+ * trust-score dimension (W1.8).
+ *
+ * Customer flow:
+ *   1. Customer-side scan produces an AgentManifest per agent.
+ *   2. scanAgent(manifest) -> ScanReport with findings + suggested rules.
+ *   3. Each suggested rule maps to a CapabilityRule consumable by buildCompanyPack.
+ *   4. Customer accepts/rejects rules; accepted ones become the auto-generated
+ *      company pack for that agent.
+ *   5. buildStructureScore feeds the agent_build_structure trust-score dimension.
+ *
+ * Coverage reference: docs/cisos/07-owasp-agentic-top10.md (A01-A10).
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-OWASP-AGENTIC-SCANNER
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OWASP_AGENTIC_RISK = void 0;
+exports.scanAgent = scanAgent;
+const capability_classes_js_1 = require("./capability-classes.js");
+/** OWASP Agentic Top 10 risk classes (LLM/agent variant). */
+exports.OWASP_AGENTIC_RISK = {
+    A01_PROMPT_INJECTION: 'A01-prompt-injection',
+    A02_INSECURE_OUTPUT: 'A02-insecure-output',
+    A03_RAG_POISONING: 'A03-rag-poisoning',
+    A04_DOS: 'A04-denial-of-service',
+    A05_SUPPLY_CHAIN: 'A05-supply-chain',
+    A06_SENSITIVE_DISCLOSURE: 'A06-sensitive-disclosure',
+    A07_INSECURE_PLUGIN: 'A07-insecure-plugin',
+    A08_EXCESSIVE_AGENCY: 'A08-excessive-agency',
+    A09_OVERRELIANCE: 'A09-overreliance',
+    A10_MODEL_THEFT: 'A10-model-theft',
+};
+// ---------------------------------------------------------------------------
+// Tool classifiers (reuse capability-class detector semantics directly,
+// against the structured manifest rather than serialised input)
+// ---------------------------------------------------------------------------
+const NETWORK_EGRESS_TOOLS = new Set(['webfetch', 'fetch', 'curl', 'http', 'https', 'request']);
+const SHELL_TOOLS = new Set(['bash', 'shell', 'exec', 'execute', 'execute_command', 'run_command']);
+const FILESYSTEM_WRITE_TOOLS = new Set(['write', 'edit', 'multiedit', 'write_file', 'fs_write']);
+const DB_WRITE_HINTS = ['sql', 'postgres', 'mysql', 'mongo', 'database', 'db_'];
+function hasTool(tools, predicate) {
+    return tools.some((tool) => predicate(tool.toLowerCase()));
+}
+function hasNetworkEgress(tools) {
+    return hasTool(tools, (t) => NETWORK_EGRESS_TOOLS.has(t) || t.startsWith('mcp__'));
+}
+function hasShellExec(tools) {
+    return hasTool(tools, (t) => SHELL_TOOLS.has(t));
+}
+function hasFilesystemWrite(tools) {
+    return hasTool(tools, (t) => FILESYSTEM_WRITE_TOOLS.has(t));
+}
+function hasDbWrite(tools) {
+    return hasTool(tools, (t) => DB_WRITE_HINTS.some((h) => t.includes(h)));
+}
+function hasMcp(tools, mcpServers) {
+    return hasTool(tools, (t) => t.startsWith('mcp__') || t.startsWith('mcp_')) ||
+        (mcpServers !== undefined && mcpServers.length > 0);
+}
+// ---------------------------------------------------------------------------
+// Risk analyzers (A01-A10)
+// ---------------------------------------------------------------------------
+function analyzeA01PromptInjection(m) {
+    const findings = [];
+    const fetchesUntrusted = hasNetworkEgress(m.tools);
+    const canAct = hasShellExec(m.tools) || hasDbWrite(m.tools) || hasFilesystemWrite(m.tools);
+    if (fetchesUntrusted && canAct) {
+        findings.push({
+            risk: exports.OWASP_AGENTIC_RISK.A01_PROMPT_INJECTION,
+            severity: 'CRIT',
+            title: 'Lethal Trifecta: fetches untrusted content AND has state-changing tools',
+            detail: 'This agent can retrieve untrusted external content (web/MCP/network) and ' +
+                'also execute state-changing actions (shell / DB write / filesystem write) in the same ' +
+                'cycle. A hostile retrieval can therefore trigger consequential action via indirect ' +
+                'prompt injection.',
+            remediation: 'Enable info/action separation in the company pack (isolation: "sourced-only" or ' +
+                '"strict") OR remove one side of the trifecta.',
+        });
+    }
+    if (m.hooks?.preToolUse !== true) {
+        findings.push({
+            risk: exports.OWASP_AGENTIC_RISK.A01_PROMPT_INJECTION,
+            severity: 'HIGH',
+            title: 'PreToolUse hook not wired',
+            detail: 'Without PreToolUse hook, the PromptInjectionDetector cannot run before tool dispatch.',
+            remediation: 'Install the @connexum/ai-governance PreToolUse hook on this agent.',
+        });
+    }
+    return findings;
+}
+function analyzeA02InsecureOutput(m) {
+    if (m.hooks?.postResponse !== true) {
+        return [
+            {
+                risk: exports.OWASP_AGENTIC_RISK.A02_INSECURE_OUTPUT,
+                severity: 'HIGH',
+                title: 'PostResponse hook not wired',
+                detail: 'Without PostResponse, the G-series output classifiers cannot scan LLM responses for ' +
+                    'secrets, PHI, or executable content before downstream consumption.',
+                remediation: 'Install the @connexum/ai-governance PostResponse hook on this agent.',
+            },
+        ];
+    }
+    return [];
+}
+function analyzeA03RagPoisoning(m) {
+    if (hasNetworkEgress(m.tools) && m.hooks?.postToolUse !== true) {
+        return [
+            {
+                risk: exports.OWASP_AGENTIC_RISK.A03_RAG_POISONING,
+                severity: 'MED',
+                title: 'Retrieval without provenance capture',
+                detail: 'Agent retrieves external content but PostToolUse hook is not wired, so retrieval ' +
+                    'provenance is not bound into the audit chain (A03 mitigation requires per-retrieval ' +
+                    'pack_binding capture).',
+                remediation: 'Install PostToolUse hook to bind retrievals to active packs.',
+            },
+        ];
+    }
+    return [];
+}
+function analyzeA04Dos(m) {
+    if (m.rateLimitsConfigured !== true) {
+        return [
+            {
+                risk: exports.OWASP_AGENTIC_RISK.A04_DOS,
+                severity: 'MED',
+                title: 'No tool rate limits configured',
+                detail: 'Agent has no per-tool / per-cycle rate caps. Adversarial inputs can exhaust the API ' +
+                    'budget or trigger an expensive cascade.',
+                remediation: 'Configure ToolRateLimiter caps in the company pack (per-tool blast-radius scaling).',
+            },
+        ];
+    }
+    return [];
+}
+function analyzeA05SupplyChain(m) {
+    if (m.pluginIntegrityVerified !== true) {
+        return [
+            {
+                risk: exports.OWASP_AGENTIC_RISK.A05_SUPPLY_CHAIN,
+                severity: 'HIGH',
+                title: 'Plugin / adapter integrity not verified',
+                detail: 'Loaded framework adapters / MCP plugins have not been SHA-256 attestation-verified. ' +
+                    'A tampered plugin could execute attacker code in the agent context.',
+                remediation: 'Run `npx @connexum/ai-governance verify-plugins` to attest plugin integrity ' +
+                    'and commit the attestation manifest.',
+            },
+        ];
+    }
+    return [];
+}
+function analyzeA06SensitiveDisclosure(m) {
+    const findings = [];
+    if (m.llmProvider && !m.llmProvider.startsWith('connexum-proxy/')) {
+        findings.push({
+            risk: exports.OWASP_AGENTIC_RISK.A06_SENSITIVE_DISCLOSURE,
+            severity: 'MED',
+            title: 'LLM keys not routed through governed proxy',
+            detail: 'Direct LLM provider calls expose the API key to the agent process. The Mode A proxy ' +
+                '(governed.my-cc.io) keeps keys in customer infrastructure and zero-knowledge upstream.',
+            remediation: 'Swap LLM base URL to https://proxy.my-cc.io to route through the Mode A governed proxy.',
+        });
+    }
+    return findings;
+}
+function analyzeA07InsecurePlugin(m) {
+    if (hasMcp(m.tools, m.mcpServers) && m.pluginIntegrityVerified !== true) {
+        return [
+            {
+                risk: exports.OWASP_AGENTIC_RISK.A07_INSECURE_PLUGIN,
+                severity: 'HIGH',
+                title: 'MCP plugin in use without integrity attestation',
+                detail: 'Agent uses MCP plugins but plugin integrity is not attested. MCP plugin design is ' +
+                    'high-trust (A07 specifically calls out plugin-design risks).',
+                remediation: 'Attest plugin SHA-256s + cycle-lock the active plugin set, OR forbid MCP via the ' +
+                    'capability:mcp rule.',
+                suggestedRule: {
+                    capability: capability_classes_js_1.CAPABILITY_CLASS.MCP,
+                    action: 'REQUIRE_APPROVAL',
+                    note: 'A07 suggested-rule: route MCP plugin invocations through human approval',
+                },
+            },
+        ];
+    }
+    return [];
+}
+function analyzeA08ExcessiveAgency(m) {
+    const findings = [];
+    const riskyCapabilities = [
+        { check: hasShellExec(m.tools), cap: capability_classes_js_1.CAPABILITY_CLASS.SHELL_EXEC, label: 'shell exec' },
+        { check: hasDbWrite(m.tools), cap: capability_classes_js_1.CAPABILITY_CLASS.EXTERNAL_DB_WRITE, label: 'destructive DB writes' },
+        { check: hasFilesystemWrite(m.tools), cap: capability_classes_js_1.CAPABILITY_CLASS.FILESYSTEM_WRITE, label: 'filesystem writes' },
+    ];
+    const declaredApprovals = new Set((m.declaredApprovalGates ?? []).map((g) => g.capability));
+    const declaredForbidden = new Set(m.declaredForbiddenCapabilities ?? []);
+    for (const { check, cap, label } of riskyCapabilities) {
+        if (!check)
+            continue;
+        if (declaredApprovals.has(cap) || declaredForbidden.has(cap))
+            continue;
+        findings.push({
+            risk: exports.OWASP_AGENTIC_RISK.A08_EXCESSIVE_AGENCY,
+            severity: 'HIGH',
+            title: `${label} capability ungated`,
+            detail: `Agent has ${label} capability but no approval-required gate or capability-forbid ` +
+                'rule is declared. A08 (excessive agency) requires explicit constraints on high-blast-radius actions.',
+            remediation: `Add { capability: '${cap}', action: 'REQUIRE_APPROVAL' } to the company pack, or ` +
+                `forbid the capability outright if not needed.`,
+            suggestedRule: {
+                capability: cap,
+                action: 'REQUIRE_APPROVAL',
+                note: `A08 suggested-rule: gate ${label} with human approval`,
+            },
+        });
+    }
+    return findings;
+}
+function analyzeA09Overreliance(m) {
+    const approvals = m.declaredApprovalGates ?? [];
+    const forbids = m.declaredForbiddenCapabilities ?? [];
+    if (approvals.length === 0 && forbids.length === 0) {
+        return [
+            {
+                risk: exports.OWASP_AGENTIC_RISK.A09_OVERRELIANCE,
+                severity: 'MED',
+                title: 'No human-in-loop gates configured',
+                detail: 'Agent declares zero approval-required gates and zero forbidden capabilities. ' +
+                    'A09 (overreliance) requires at least one human-in-loop touchpoint for high-blast-radius ' +
+                    'classes.',
+                remediation: 'Author at least one capability rule with action: REQUIRE_APPROVAL covering the agent\'s ' +
+                    'state-changing surface.',
+            },
+        ];
+    }
+    return [];
+}
+function analyzeA10ModelTheft(_m) {
+    // A10 is primarily an infrastructure concern (audit chain hash + cross-tenant
+    // RLS) -- both already enforced platform-side per Locked Invariant 7. No
+    // per-agent finding to emit at scan time. Stub retained so the analyzer set
+    // is exhaustive across A01..A10.
+    return [];
+}
+// ---------------------------------------------------------------------------
+// Public surface
+// ---------------------------------------------------------------------------
+const SEVERITY_PENALTY = {
+    LOW: 8,
+    MED: 16,
+    HIGH: 32,
+    CRIT: 50,
+};
+function dedupSuggestedRules(rules) {
+    const seen = new Set();
+    const out = [];
+    for (const r of rules) {
+        const key = `${r.capability}::${r.action}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push(r);
+    }
+    return out;
+}
+function verdictFromScore(score, crit) {
+    if (crit > 0)
+        return 'CRITICAL';
+    if (score >= 90)
+        return 'EXCELLENT';
+    if (score >= 75)
+        return 'GOOD';
+    if (score >= 50)
+        return 'NEEDS_REVIEW';
+    if (score >= 25)
+        return 'POOR';
+    return 'CRITICAL';
+}
+/**
+ * Run all A01..A10 analyzers against a manifest and produce a structured report.
+ */
+function scanAgent(manifest) {
+    const findings = [
+        ...analyzeA01PromptInjection(manifest),
+        ...analyzeA02InsecureOutput(manifest),
+        ...analyzeA03RagPoisoning(manifest),
+        ...analyzeA04Dos(manifest),
+        ...analyzeA05SupplyChain(manifest),
+        ...analyzeA06SensitiveDisclosure(manifest),
+        ...analyzeA07InsecurePlugin(manifest),
+        ...analyzeA08ExcessiveAgency(manifest),
+        ...analyzeA09Overreliance(manifest),
+        ...analyzeA10ModelTheft(manifest),
+    ];
+    const counts = { LOW: 0, MED: 0, HIGH: 0, CRIT: 0 };
+    let penalty = 0;
+    for (const f of findings) {
+        counts[f.severity] += 1;
+        penalty += SEVERITY_PENALTY[f.severity];
+    }
+    const score = Math.max(0, 100 - penalty);
+    const suggestedRules = dedupSuggestedRules(findings.flatMap((f) => (f.suggestedRule ? [f.suggestedRule] : [])));
+    return {
+        agentId: manifest.agentId,
+        findings,
+        countsBySeverity: counts,
+        suggestedRules,
+        buildStructureScore: score,
+        verdict: verdictFromScore(score, counts.CRIT),
+    };
+}
+//# sourceMappingURL=owasp-agentic-scanner.js.map

package/dist/governance/owasp-agentic-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owasp-agentic-scanner.js","sourceRoot":"","sources":["../../src/governance/owasp-agentic-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAmXH,8BAkCC;AAnZD,mEAGiC;AAGjC,6DAA6D;AAChD,QAAA,kBAAkB,GAAG;IAChC,oBAAoB,EAAE,sBAAsB;IAC5C,mBAAmB,EAAE,qBAAqB;IAC1C,iBAAiB,EAAE,mBAAmB;IACtC,OAAO,EAAE,uBAAuB;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,wBAAwB,EAAE,0BAA0B;IACpD,mBAAmB,EAAE,qBAAqB;IAC1C,oBAAoB,EAAE,sBAAsB;IAC5C,gBAAgB,EAAE,kBAAkB;IACpC,eAAe,EAAE,iBAAiB;CAC1B,CAAC;AAgEX,8EAA8E;AAC9E,wEAAwE;AACxE,gEAAgE;AAChE,8EAA8E;AAE9E,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAChG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC;AACpG,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;AACjG,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;AAEhF,SAAS,OAAO,CAAC,KAAe,EAAE,SAAiC;IACjE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe;IACvC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,YAAY,CAAC,KAAe;IACnC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAe;IACzC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,KAAe;IACjC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,MAAM,CAAC,KAAe,EAAE,UAAgC;IAC/D,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,SAAS,yBAAyB,CAAC,CAAgB;IACjD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAE3F,IAAI,gBAAgB,IAAI,MAAM,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,0BAAkB,CAAC,oBAAoB;YAC7C,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,yEAAyE;YAChF,MAAM,EACJ,2EAA2E;gBAC3E,wFAAwF;gBACxF,qFAAqF;gBACrF,mBAAmB;YACrB,WAAW,EACT,kFAAkF;gBAClF,+CAA+C;SAClD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,0BAAkB,CAAC,oBAAoB;YAC7C,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,2BAA2B;YAClC,MAAM,EAAE,uFAAuF;YAC/F,WAAW,EAAE,oEAAoE;SAClF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,CAAgB;IAChD,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC;QACnC,OAAO;YACL;gBACE,IAAI,EAAE,0BAAkB,CAAC,mBAAmB;gBAC5C,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,6BAA6B;gBACpC,MAAM,EACJ,sFAAsF;oBACtF,oEAAoE;gBACtE,WAAW,EAAE,sEAAsE;aACpF;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAgB;IAC9C,IAAI,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,EAAE,CAAC;QAC/D,OAAO;YACL;gBACE,IAAI,EAAE,0BAAkB,CAAC,iBAAiB;gBAC1C,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,sCAAsC;gBAC7C,MAAM,EACJ,mFAAmF;oBACnF,sFAAsF;oBACtF,wBAAwB;gBAC1B,WAAW,EAAE,8DAA8D;aAC5E;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,CAAgB;IACrC,IAAI,CAAC,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;QACpC,OAAO;YACL;gBACE,IAAI,EAAE,0BAAkB,CAAC,OAAO;gBAChC,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,gCAAgC;gBACvC,MAAM,EACJ,sFAAsF;oBACtF,yCAAyC;gBAC3C,WAAW,EACT,qFAAqF;aACxF;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAgB;IAC7C,IAAI,CAAC,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;QACvC,OAAO;YACL;gBACE,IAAI,EAAE,0BAAkB,CAAC,gBAAgB;gBACzC,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,yCAAyC;gBAChD,MAAM,EACJ,sFAAsF;oBACtF,qEAAqE;gBACvE,WAAW,EACT,8EAA8E;oBAC9E,sCAAsC;aACzC;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,6BAA6B,CAAC,CAAgB;IACrD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,0BAAkB,CAAC,wBAAwB;YACjD,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,4CAA4C;YACnD,MAAM,EACJ,sFAAsF;gBACtF,wFAAwF;YAC1F,WAAW,EACT,yFAAyF;SAC5F,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,CAAgB;IAChD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;QACxE,OAAO;YACL;gBACE,IAAI,EAAE,0BAAkB,CAAC,mBAAmB;gBAC5C,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,iDAAiD;gBACxD,MAAM,EACJ,oFAAoF;oBACpF,8DAA8D;gBAChE,WAAW,EACT,mFAAmF;oBACnF,sBAAsB;gBACxB,aAAa,EAAE;oBACb,UAAU,EAAE,wCAAgB,CAAC,GAAG;oBAChC,MAAM,EAAE,kBAAkB;oBAC1B,IAAI,EAAE,yEAAyE;iBAChF;aACF;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,yBAAyB,CAAC,CAAgB;IACjD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,iBAAiB,GAAG;QACxB,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,wCAAgB,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE;QACvF,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,wCAAgB,CAAC,iBAAiB,EAAE,KAAK,EAAE,uBAAuB,EAAE;QACvG,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,wCAAgB,CAAC,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE;KAC3G,CAAC;IAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,CAAC,CAAC,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CACzD,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IAEzE,KAAK,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAEvE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,0BAAkB,CAAC,oBAAoB;YAC7C,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,GAAG,KAAK,qBAAqB;YACpC,MAAM,EACJ,aAAa,KAAK,iEAAiE;gBACnF,sGAAsG;YACxG,WAAW,EACT,sBAAsB,GAAG,0DAA0D;gBACnF,+CAA+C;YACjD,aAAa,EAAE;gBACb,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,kBAAkB;gBAC1B,IAAI,EAAE,4BAA4B,KAAK,sBAAsB;aAC9D;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAgB;IAC9C,MAAM,SAAS,GAAG,CAAC,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,CAAC,6BAA6B,IAAI,EAAE,CAAC;IACtD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO;YACL;gBACE,IAAI,EAAE,0BAAkB,CAAC,gBAAgB;gBACzC,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,mCAAmC;gBAC1C,MAAM,EACJ,+EAA+E;oBAC/E,0FAA0F;oBAC1F,UAAU;gBACZ,WAAW,EACT,0FAA0F;oBAC1F,yBAAyB;aAC5B;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,oBAAoB,CAAC,EAAiB;IAC7C,8EAA8E;IAC9E,yEAAyE;IACzE,4EAA4E;IAC5E,iCAAiC;IACjC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,gBAAgB,GAA6B;IACjD,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,EAAE;IACP,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;CACT,CAAC;AAEF,SAAS,mBAAmB,CAAC,KAAuB;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACnD,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAChC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,WAAW,CAAC;IACpC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,cAAc,CAAC;IACvC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAgB,SAAS,CAAC,QAAuB;IAC/C,MAAM,QAAQ,GAAmB;QAC/B,GAAG,yBAAyB,CAAC,QAAQ,CAAC;QACtC,GAAG,wBAAwB,CAAC,QAAQ,CAAC;QACrC,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,GAAG,aAAa,CAAC,QAAQ,CAAC;QAC1B,GAAG,qBAAqB,CAAC,QAAQ,CAAC;QAClC,GAAG,6BAA6B,CAAC,QAAQ,CAAC;QAC1C,GAAG,wBAAwB,CAAC,QAAQ,CAAC;QACrC,GAAG,yBAAyB,CAAC,QAAQ,CAAC;QACtC,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,GAAG,oBAAoB,CAAC,QAAQ,CAAC;KAClC,CAAC;IAEF,MAAM,MAAM,GAA6B,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC9E,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;IAEzC,MAAM,cAAc,GAAG,mBAAmB,CACxC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACpE,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ;QACR,gBAAgB,EAAE,MAAM;QACxB,cAAc;QACd,mBAAmB,EAAE,KAAK;QAC1B,OAAO,EAAE,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/governance/owasp-agentic-scanner.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * RED-GREEN tests for F-NEW-PRODUCT-OWASP-AGENTIC-SCANNER (W1.7 of
+ * F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12).
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-OWASP-AGENTIC-SCANNER
+ */
+export {};
+//# sourceMappingURL=owasp-agentic-scanner.test.d.ts.map

package/dist/governance/owasp-agentic-scanner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owasp-agentic-scanner.test.d.ts","sourceRoot":"","sources":["../../src/governance/owasp-agentic-scanner.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/governance/owasp-agentic-scanner.test.js

@@ -0,0 +1,163 @@
+"use strict";
+/**
+ * RED-GREEN tests for F-NEW-PRODUCT-OWASP-AGENTIC-SCANNER (W1.7 of
+ * F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12).
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-OWASP-AGENTIC-SCANNER
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const assert = __importStar(require("node:assert/strict"));
+const owasp_agentic_scanner_1 = require("./owasp-agentic-scanner");
+const capability_classes_1 = require("./capability-classes");
+const baseManifest = (over = {}) => ({
+    agentId: 'agent-test',
+    name: 'Test Agent',
+    tools: [],
+    hooks: { preToolUse: true, postToolUse: true, postResponse: true },
+    llmProvider: 'connexum-proxy/anthropic',
+    pluginIntegrityVerified: true,
+    rateLimitsConfigured: true,
+    declaredApprovalGates: [],
+    declaredForbiddenCapabilities: [],
+    ...over,
+});
+(0, node_test_1.describe)('F-NEW-PRODUCT-OWASP-AGENTIC-SCANNER', () => {
+    (0, node_test_1.it)('clean manifest produces an EXCELLENT verdict with a high score', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({
+            declaredForbiddenCapabilities: [capability_classes_1.CAPABILITY_CLASS.MCP],
+        }));
+        assert.equal(report.findings.length, 0);
+        assert.equal(report.buildStructureScore, 100);
+        assert.equal(report.verdict, 'EXCELLENT');
+    });
+    (0, node_test_1.it)('A01 Lethal Trifecta: WebFetch + Bash -> CRIT finding + CRITICAL verdict', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({ tools: ['WebFetch', 'Bash'] }));
+        const a01 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A01_PROMPT_INJECTION);
+        assert.ok(a01.some((f) => f.severity === 'CRIT' && /Lethal Trifecta/.test(f.title)));
+        assert.equal(report.verdict, 'CRITICAL');
+        assert.equal(report.countsBySeverity.CRIT, 1);
+    });
+    (0, node_test_1.it)('A01 missing PreToolUse hook -> HIGH finding', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({ hooks: { preToolUse: false, postToolUse: true, postResponse: true } }));
+        const a01 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A01_PROMPT_INJECTION && /PreToolUse/.test(f.title));
+        assert.equal(a01.length, 1);
+        assert.equal(a01[0].severity, 'HIGH');
+    });
+    (0, node_test_1.it)('A02 missing PostResponse hook -> HIGH finding', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({ hooks: { preToolUse: true, postToolUse: true, postResponse: false } }));
+        const a02 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A02_INSECURE_OUTPUT);
+        assert.equal(a02.length, 1);
+        assert.equal(a02[0].severity, 'HIGH');
+    });
+    (0, node_test_1.it)('A03 retrieval without PostToolUse -> MED finding', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({
+            tools: ['WebFetch'],
+            hooks: { preToolUse: true, postToolUse: false, postResponse: true },
+        }));
+        const a03 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A03_RAG_POISONING);
+        assert.equal(a03.length, 1);
+        assert.equal(a03[0].severity, 'MED');
+    });
+    (0, node_test_1.it)('A04 no rate limits -> MED finding', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({ rateLimitsConfigured: false }));
+        const a04 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A04_DOS);
+        assert.equal(a04.length, 1);
+        assert.equal(a04[0].severity, 'MED');
+    });
+    (0, node_test_1.it)('A05 plugin integrity not verified -> HIGH finding', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({ pluginIntegrityVerified: false }));
+        const a05 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A05_SUPPLY_CHAIN);
+        assert.equal(a05.length, 1);
+        assert.equal(a05[0].severity, 'HIGH');
+    });
+    (0, node_test_1.it)('A06 LLM not via proxy -> MED finding', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({ llmProvider: 'anthropic/claude-sonnet-4-6' }));
+        const a06 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A06_SENSITIVE_DISCLOSURE);
+        assert.equal(a06.length, 1);
+        assert.equal(a06[0].severity, 'MED');
+    });
+    (0, node_test_1.it)('A07 MCP in use without integrity attestation -> HIGH finding + suggested rule', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({
+            mcpServers: ['stdio:/usr/bin/mcp-server'],
+            pluginIntegrityVerified: false,
+        }));
+        const a07 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A07_INSECURE_PLUGIN);
+        assert.equal(a07.length, 1);
+        assert.equal(a07[0].severity, 'HIGH');
+        assert.equal(a07[0].suggestedRule?.capability, capability_classes_1.CAPABILITY_CLASS.MCP);
+        assert.ok(report.suggestedRules.some((r) => r.capability === capability_classes_1.CAPABILITY_CLASS.MCP));
+    });
+    (0, node_test_1.it)('A08 ungated shell + DB write -> two HIGH findings + suggested rules', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({ tools: ['Bash', 'postgres_query'] }));
+        const a08 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A08_EXCESSIVE_AGENCY);
+        assert.equal(a08.length, 2);
+        assert.ok(a08.every((f) => f.severity === 'HIGH'));
+        assert.ok(report.suggestedRules.some((r) => r.capability === capability_classes_1.CAPABILITY_CLASS.SHELL_EXEC));
+        assert.ok(report.suggestedRules.some((r) => r.capability === capability_classes_1.CAPABILITY_CLASS.EXTERNAL_DB_WRITE));
+    });
+    (0, node_test_1.it)('A08 ungated cap with declared approval -> NO finding', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({
+            tools: ['Bash'],
+            declaredApprovalGates: [{ capability: capability_classes_1.CAPABILITY_CLASS.SHELL_EXEC, reviewer: 'sre-lead' }],
+        }));
+        const a08 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A08_EXCESSIVE_AGENCY);
+        assert.equal(a08.length, 0);
+    });
+    (0, node_test_1.it)('A09 zero gates configured -> MED finding', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest());
+        const a09 = report.findings.filter((f) => f.risk === owasp_agentic_scanner_1.OWASP_AGENTIC_RISK.A09_OVERRELIANCE);
+        assert.equal(a09.length, 1);
+        assert.equal(a09[0].severity, 'MED');
+    });
+    (0, node_test_1.it)('build-structure score reflects severity penalties (CRIT = -50)', () => {
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({ tools: ['WebFetch', 'Bash'] }));
+        // CRIT (Lethal Trifecta) + HIGH (A08 shell ungated) = -50 + -32 = -82 -> 18
+        assert.ok(report.buildStructureScore <= 30);
+        assert.equal(report.verdict, 'CRITICAL');
+    });
+    (0, node_test_1.it)('suggestedRules are deduplicated by capability+action', () => {
+        // A07 + A08 both touch MCP if both are triggered for the same agent.
+        const report = (0, owasp_agentic_scanner_1.scanAgent)(baseManifest({
+            tools: ['mcp__list_resources', 'Bash'],
+            mcpServers: ['stdio:/x'],
+            pluginIntegrityVerified: false,
+        }));
+        const mcpRules = report.suggestedRules.filter((r) => r.capability === capability_classes_1.CAPABILITY_CLASS.MCP);
+        assert.equal(mcpRules.length, 1, 'MCP rule must be deduplicated');
+    });
+});
+//# sourceMappingURL=owasp-agentic-scanner.test.js.map

package/dist/governance/owasp-agentic-scanner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owasp-agentic-scanner.test.js","sourceRoot":"","sources":["../../src/governance/owasp-agentic-scanner.test.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,yCAAyC;AACzC,2DAA6C;AAE7C,mEAA4F;AAC5F,6DAAwD;AAExD,MAAM,YAAY,GAAG,CAAC,OAA+B,EAAE,EAAiB,EAAE,CAAC,CAAC;IAC1E,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;IAClE,WAAW,EAAE,0BAA0B;IACvC,uBAAuB,EAAE,IAAI;IAC7B,oBAAoB,EAAE,IAAI;IAC1B,qBAAqB,EAAE,EAAE;IACzB,6BAA6B,EAAE,EAAE;IACjC,GAAG,IAAI;CACR,CAAC,CAAC;AAEH,IAAA,oBAAQ,EAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,IAAA,cAAE,EAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAG,IAAA,iCAAS,EACtB,YAAY,CAAC;YACX,6BAA6B,EAAE,CAAC,qCAAgB,CAAC,GAAG,CAAC;SACtD,CAAC,CACH,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,MAAM,GAAG,IAAA,iCAAS,EAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,oBAAoB,CAAC,CAAC;QAC9F,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,IAAA,iCAAS,EACtB,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,CACtF,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,oBAAoB,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CACxF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,IAAA,iCAAS,EACtB,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,CACtF,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,mBAAmB,CAAC,CAAC;QAC7F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,IAAA,iCAAS,EACtB,YAAY,CAAC;YACX,KAAK,EAAE,CAAC,UAAU,CAAC;YACnB,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;SACpE,CAAC,CACH,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,iBAAiB,CAAC,CAAC;QAC3F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,IAAA,iCAAS,EAAC,YAAY,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,OAAO,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,IAAA,iCAAS,EAAC,YAAY,CAAC,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,gBAAgB,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,IAAA,iCAAS,EAAC,YAAY,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,wBAAwB,CAAC,CAAC;QAClG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,MAAM,GAAG,IAAA,iCAAS,EACtB,YAAY,CAAC;YACX,UAAU,EAAE,CAAC,2BAA2B,CAAC;YACzC,uBAAuB,EAAE,KAAK;SAC/B,CAAC,CACH,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,mBAAmB,CAAC,CAAC;QAC7F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,qCAAgB,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,qCAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,MAAM,GAAG,IAAA,iCAAS,EACtB,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,CAAC,CACpD,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,oBAAoB,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,qCAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,qCAAgB,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAG,IAAA,iCAAS,EACtB,YAAY,CAAC;YACX,KAAK,EAAE,CAAC,MAAM,CAAC;YACf,qBAAqB,EAAE,CAAC,EAAE,UAAU,EAAE,qCAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;SAC3F,CAAC,CACH,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,oBAAoB,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,IAAA,iCAAS,EAAC,YAAY,EAAE,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0CAAkB,CAAC,gBAAgB,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAG,IAAA,iCAAS,EAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,4EAA4E;QAC5E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,qEAAqE;QACrE,MAAM,MAAM,GAAG,IAAA,iCAAS,EACtB,YAAY,CAAC;YACX,KAAK,EAAE,CAAC,qBAAqB,EAAE,MAAM,CAAC;YACtC,UAAU,EAAE,CAAC,UAAU,CAAC;YACxB,uBAAuB,EAAE,KAAK;SAC/B,CAAC,CACH,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,qCAAgB,CAAC,GAAG,CAAC,CAAC;QAC5F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/governance/pack-diff.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Pack Diff (W3.3-support of F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12).
+ *
+ * Computes a structured diff between two pack versions. Two consumers:
+ *
+ *   1. Live pack editor (W3.3) — "preview your changes" view before publish.
+ *   2. Shadow-mode comparison — "what would v2 have done differently than
+ *      v1 on the last N events?"
+ *
+ * Pure function, no IO. Output is a stable, auditor-reproducible PackDiff
+ * shape.
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-LIVE-PACK-EDITOR + F-NEW-PRODUCT-PACK-VERSIONING-ROLLBACK
+ */
+import type { CompliancePackWithClassifiers } from '../classification/pack-driven-classifier.js';
+import type { CompliancePack } from '../packs/index.js';
+export type DiffActionChange = {
+    kind: 'added';
+    category: string;
+    action: string;
+} | {
+    kind: 'removed';
+    category: string;
+    previousAction: string;
+} | {
+    kind: 'changed';
+    category: string;
+    previousAction: string;
+    newAction: string;
+};
+export interface PackDiff {
+    fromVersion: string;
+    toVersion: string;
+    packId: string;
+    /** Per-category change records. */
+    changes: DiffActionChange[];
+    /** Set-level summaries. */
+    added: string[];
+    removed: string[];
+    changed: string[];
+    /** Isolation mode change, if any. */
+    isolationChange?: {
+        from: string;
+        to: string;
+    };
+    /** True if from === to in every relevant respect. */
+    isNoop: boolean;
+}
+/**
+ * Diff two packs. Categories present only in `from` are 'removed'.
+ * Categories present only in `to` are 'added'. Categories in both with
+ * different actions are 'changed'. Categories in both with the same action
+ * are NOT in the change list.
+ */
+export declare function diffPacks(from: CompliancePack | CompliancePackWithClassifiers, to: CompliancePack | CompliancePackWithClassifiers): PackDiff;
+/**
+ * Produce a short human-readable summary of the diff for dashboard cards
+ * and email-notification subjects.
+ */
+export declare function summarizeDiff(diff: PackDiff): string;
+//# sourceMappingURL=pack-diff.d.ts.map

package/dist/governance/pack-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-diff.d.ts","sourceRoot":"","sources":["../../src/governance/pack-diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,2BAA2B;IAC3B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qCAAqC;IACrC,eAAe,CAAC,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;KACZ,CAAC;IACF,qDAAqD;IACrD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,IAAI,EAAE,cAAc,GAAG,6BAA6B,EACpD,EAAE,EAAE,cAAc,GAAG,6BAA6B,GACjD,QAAQ,CAwCV;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAQpD"}