@enterprise-skills/orchestrator 3.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (113) hide show
  1. package/dist/__tests__/advisor.test.d.ts +2 -0
  2. package/dist/__tests__/advisor.test.d.ts.map +1 -0
  3. package/dist/__tests__/advisor.test.js +92 -0
  4. package/dist/__tests__/advisor.test.js.map +1 -0
  5. package/dist/__tests__/audit-logger.test.d.ts +2 -0
  6. package/dist/__tests__/audit-logger.test.d.ts.map +1 -0
  7. package/dist/__tests__/audit-logger.test.js +115 -0
  8. package/dist/__tests__/audit-logger.test.js.map +1 -0
  9. package/dist/__tests__/dag-resolver.test.d.ts +2 -0
  10. package/dist/__tests__/dag-resolver.test.d.ts.map +1 -0
  11. package/dist/__tests__/dag-resolver.test.js +297 -0
  12. package/dist/__tests__/dag-resolver.test.js.map +1 -0
  13. package/dist/__tests__/orchestrator.test.d.ts +2 -0
  14. package/dist/__tests__/orchestrator.test.d.ts.map +1 -0
  15. package/dist/__tests__/orchestrator.test.js +152 -0
  16. package/dist/__tests__/orchestrator.test.js.map +1 -0
  17. package/dist/__tests__/policy-enforcer.test.d.ts +2 -0
  18. package/dist/__tests__/policy-enforcer.test.d.ts.map +1 -0
  19. package/dist/__tests__/policy-enforcer.test.js +113 -0
  20. package/dist/__tests__/policy-enforcer.test.js.map +1 -0
  21. package/dist/__tests__/signal-router.test.d.ts +2 -0
  22. package/dist/__tests__/signal-router.test.d.ts.map +1 -0
  23. package/dist/__tests__/signal-router.test.js +96 -0
  24. package/dist/__tests__/signal-router.test.js.map +1 -0
  25. package/dist/__tests__/state-machine.test.d.ts +2 -0
  26. package/dist/__tests__/state-machine.test.d.ts.map +1 -0
  27. package/dist/__tests__/state-machine.test.js +278 -0
  28. package/dist/__tests__/state-machine.test.js.map +1 -0
  29. package/dist/advisor.d.ts +41 -0
  30. package/dist/advisor.d.ts.map +1 -0
  31. package/dist/advisor.js +268 -0
  32. package/dist/advisor.js.map +1 -0
  33. package/dist/api/handlers.d.ts +28 -0
  34. package/dist/api/handlers.d.ts.map +1 -0
  35. package/dist/api/handlers.js +305 -0
  36. package/dist/api/handlers.js.map +1 -0
  37. package/dist/api/index.d.ts +5 -0
  38. package/dist/api/index.d.ts.map +1 -0
  39. package/dist/api/index.js +20 -0
  40. package/dist/api/index.js.map +1 -0
  41. package/dist/api/routes/complete.d.ts +9 -0
  42. package/dist/api/routes/complete.d.ts.map +1 -0
  43. package/dist/api/routes/complete.js +34 -0
  44. package/dist/api/routes/complete.js.map +1 -0
  45. package/dist/api/routes/dashboard.d.ts +9 -0
  46. package/dist/api/routes/dashboard.d.ts.map +1 -0
  47. package/dist/api/routes/dashboard.js +29 -0
  48. package/dist/api/routes/dashboard.js.map +1 -0
  49. package/dist/api/routes/execute.d.ts +10 -0
  50. package/dist/api/routes/execute.d.ts.map +1 -0
  51. package/dist/api/routes/execute.js +35 -0
  52. package/dist/api/routes/execute.js.map +1 -0
  53. package/dist/api/routes/gate.d.ts +9 -0
  54. package/dist/api/routes/gate.d.ts.map +1 -0
  55. package/dist/api/routes/gate.js +34 -0
  56. package/dist/api/routes/gate.js.map +1 -0
  57. package/dist/api/routes/index.d.ts +7 -0
  58. package/dist/api/routes/index.d.ts.map +1 -0
  59. package/dist/api/routes/index.js +19 -0
  60. package/dist/api/routes/index.js.map +1 -0
  61. package/dist/api/routes/middleware.d.ts +13 -0
  62. package/dist/api/routes/middleware.d.ts.map +1 -0
  63. package/dist/api/routes/middleware.js +55 -0
  64. package/dist/api/routes/middleware.js.map +1 -0
  65. package/dist/api/routes/signal.d.ts +9 -0
  66. package/dist/api/routes/signal.d.ts.map +1 -0
  67. package/dist/api/routes/signal.js +34 -0
  68. package/dist/api/routes/signal.js.map +1 -0
  69. package/dist/api/types.d.ts +87 -0
  70. package/dist/api/types.d.ts.map +1 -0
  71. package/dist/api/types.js +3 -0
  72. package/dist/api/types.js.map +1 -0
  73. package/dist/audit-logger.d.ts +20 -0
  74. package/dist/audit-logger.d.ts.map +1 -0
  75. package/dist/audit-logger.js +125 -0
  76. package/dist/audit-logger.js.map +1 -0
  77. package/dist/builtin-triggers.d.ts +3 -0
  78. package/dist/builtin-triggers.d.ts.map +1 -0
  79. package/dist/builtin-triggers.js +235 -0
  80. package/dist/builtin-triggers.js.map +1 -0
  81. package/dist/dag-resolver.d.ts +22 -0
  82. package/dist/dag-resolver.d.ts.map +1 -0
  83. package/dist/dag-resolver.js +250 -0
  84. package/dist/dag-resolver.js.map +1 -0
  85. package/dist/hardening-sensors.d.ts +22 -0
  86. package/dist/hardening-sensors.d.ts.map +1 -0
  87. package/dist/hardening-sensors.js +135 -0
  88. package/dist/hardening-sensors.js.map +1 -0
  89. package/dist/index.d.ts +87 -0
  90. package/dist/index.d.ts.map +1 -0
  91. package/dist/index.js +269 -0
  92. package/dist/index.js.map +1 -0
  93. package/dist/policy-enforcer.d.ts +27 -0
  94. package/dist/policy-enforcer.d.ts.map +1 -0
  95. package/dist/policy-enforcer.js +185 -0
  96. package/dist/policy-enforcer.js.map +1 -0
  97. package/dist/signal-router.d.ts +19 -0
  98. package/dist/signal-router.d.ts.map +1 -0
  99. package/dist/signal-router.js +206 -0
  100. package/dist/signal-router.js.map +1 -0
  101. package/dist/state-machine.d.ts +45 -0
  102. package/dist/state-machine.d.ts.map +1 -0
  103. package/dist/state-machine.js +300 -0
  104. package/dist/state-machine.js.map +1 -0
  105. package/dist/task-contract.d.ts +46 -0
  106. package/dist/task-contract.d.ts.map +1 -0
  107. package/dist/task-contract.js +71 -0
  108. package/dist/task-contract.js.map +1 -0
  109. package/dist/types.d.ts +167 -0
  110. package/dist/types.d.ts.map +1 -0
  111. package/dist/types.js +3 -0
  112. package/dist/types.js.map +1 -0
  113. package/package.json +29 -0
@@ -0,0 +1,22 @@
1
+ import type { WorkflowDefinition, WorkflowStep, WorkflowState, GateDecision, SkillOutput } from './types';
2
+ export declare const MAX_PARALLEL_SKILLS = 4;
3
+ export interface DagValidationResult {
4
+ valid: boolean;
5
+ errors: string[];
6
+ topologicalOrder: string[];
7
+ warnings: string[];
8
+ }
9
+ export declare class DagResolver {
10
+ validateWorkflow(workflow: WorkflowDefinition): DagValidationResult;
11
+ private detectCycles;
12
+ topologicalSort(steps: WorkflowStep[]): string[];
13
+ getReadySteps(workflow: WorkflowDefinition, state: WorkflowState): WorkflowStep[];
14
+ initWorkflowState(workflow: WorkflowDefinition): WorkflowState;
15
+ completeStep(state: WorkflowState, stepId: string, status: 'completed' | 'failed' | 'skipped', durationSeconds: number, skillOutputs: string[]): WorkflowState;
16
+ evaluateGate(step: WorkflowStep, getOutput: (skillId: string) => SkillOutput | null): GateDecision;
17
+ evaluateConditional(step: WorkflowStep, getOutput: (skillId: string) => SkillOutput | null): string | null;
18
+ private resolveField;
19
+ private evaluateOperator;
20
+ private findStep;
21
+ }
22
+ //# sourceMappingURL=dag-resolver.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dag-resolver.d.ts","sourceRoot":"","sources":["../src/dag-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,YAAY,EACZ,aAAa,EAEb,YAAY,EACZ,WAAW,EAEZ,MAAM,SAAS,CAAC;AAEjB,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,qBAAa,WAAW;IACtB,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,mBAAmB;IA6CnE,OAAO,CAAC,YAAY;IA0CpB,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,EAAE;IAqChD,aAAa,CAAC,QAAQ,EAAE,kBAAkB,EAAE,KAAK,EAAE,aAAa,GAAG,YAAY,EAAE;IAWjF,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,aAAa;IAkB9D,YAAY,CACV,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,EAC1C,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,MAAM,EAAE,GACrB,aAAa;IA2BhB,YAAY,CACV,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,WAAW,GAAG,IAAI,GACjD,YAAY;IAsBf,mBAAmB,CACjB,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,WAAW,GAAG,IAAI,GACjD,MAAM,GAAG,IAAI;IAmBhB,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,gBAAgB;IAoCxB,OAAO,CAAC,QAAQ;CAGjB"}
@@ -0,0 +1,250 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.DagResolver = exports.MAX_PARALLEL_SKILLS = void 0;
4
+ exports.MAX_PARALLEL_SKILLS = 4;
5
+ class DagResolver {
6
+ validateWorkflow(workflow) {
7
+ const errors = [];
8
+ const warnings = [];
9
+ const stepIds = new Set(workflow.steps.map(s => s.id));
10
+ for (const step of workflow.steps) {
11
+ if (step.depends_on) {
12
+ for (const dep of step.depends_on) {
13
+ if (!stepIds.has(dep)) {
14
+ errors.push(`Step "${step.id}" depends on unknown step "${dep}"`);
15
+ }
16
+ }
17
+ }
18
+ if (step.type === 'gate') {
19
+ if (!step.check)
20
+ errors.push(`Gate step "${step.id}" missing "check" definition`);
21
+ if (!step.pass_action)
22
+ errors.push(`Gate step "${step.id}" missing "pass_action"`);
23
+ if (!step.fail_action)
24
+ errors.push(`Gate step "${step.id}" missing "fail_action"`);
25
+ }
26
+ if (step.type === 'conditional') {
27
+ if (!step.condition)
28
+ errors.push(`Conditional step "${step.id}" missing "condition"`);
29
+ if (!step.if_true)
30
+ errors.push(`Conditional step "${step.id}" missing "if_true"`);
31
+ }
32
+ if (step.type === 'parallel' && (!step.skills || step.skills.length === 0)) {
33
+ errors.push(`Parallel step "${step.id}" must have at least one skill in "skills"`);
34
+ }
35
+ if (step.type === 'parallel' && step.skills && step.skills.length > exports.MAX_PARALLEL_SKILLS) {
36
+ warnings.push(`Parallel step "${step.id}" declares ${step.skills.length} skills; recommended max is ${exports.MAX_PARALLEL_SKILLS} for agentic reliability`);
37
+ }
38
+ if (step.type === 'sequential' && !step.skill) {
39
+ errors.push(`Sequential step "${step.id}" missing "skill"`);
40
+ }
41
+ }
42
+ const cycleCheck = this.detectCycles(workflow.steps);
43
+ if (cycleCheck.hasCycle) {
44
+ errors.push(`Cycle detected involving steps: ${cycleCheck.cycle.join(' -> ')}`);
45
+ }
46
+ const order = errors.length === 0 ? this.topologicalSort(workflow.steps) : [];
47
+ return { valid: errors.length === 0, errors, topologicalOrder: order, warnings };
48
+ }
49
+ detectCycles(steps) {
50
+ const adj = new Map();
51
+ for (const step of steps) {
52
+ adj.set(step.id, step.depends_on ?? []);
53
+ }
54
+ const visited = new Set();
55
+ const inStack = new Set();
56
+ const cyclePath = [];
57
+ const dfs = (node) => {
58
+ visited.add(node);
59
+ inStack.add(node);
60
+ for (const dep of adj.get(node) ?? []) {
61
+ if (!visited.has(dep)) {
62
+ if (dfs(dep)) {
63
+ cyclePath.unshift(dep);
64
+ return true;
65
+ }
66
+ }
67
+ else if (inStack.has(dep)) {
68
+ cyclePath.unshift(dep);
69
+ return true;
70
+ }
71
+ }
72
+ inStack.delete(node);
73
+ return false;
74
+ };
75
+ for (const step of steps) {
76
+ if (!visited.has(step.id)) {
77
+ if (dfs(step.id)) {
78
+ cyclePath.unshift(steps.find(s => s.id === cyclePath[0])?.id ?? '');
79
+ return { hasCycle: true, cycle: cyclePath };
80
+ }
81
+ }
82
+ }
83
+ return { hasCycle: false, cycle: [] };
84
+ }
85
+ topologicalSort(steps) {
86
+ const inDegree = new Map();
87
+ const adj = new Map();
88
+ for (const step of steps) {
89
+ inDegree.set(step.id, 0);
90
+ adj.set(step.id, []);
91
+ }
92
+ for (const step of steps) {
93
+ for (const dep of step.depends_on ?? []) {
94
+ const list = adj.get(dep);
95
+ if (list)
96
+ list.push(step.id);
97
+ inDegree.set(step.id, (inDegree.get(step.id) ?? 0) + 1);
98
+ }
99
+ }
100
+ const queue = [];
101
+ for (const [id, degree] of inDegree) {
102
+ if (degree === 0)
103
+ queue.push(id);
104
+ }
105
+ const order = [];
106
+ while (queue.length > 0) {
107
+ const node = queue.shift();
108
+ order.push(node);
109
+ for (const neighbor of adj.get(node) ?? []) {
110
+ const newDegree = (inDegree.get(neighbor) ?? 1) - 1;
111
+ inDegree.set(neighbor, newDegree);
112
+ if (newDegree === 0)
113
+ queue.push(neighbor);
114
+ }
115
+ }
116
+ return order;
117
+ }
118
+ getReadySteps(workflow, state) {
119
+ const completedIds = new Set(state.steps_completed.map(s => s.id));
120
+ const remainingIds = new Set(state.steps_remaining);
121
+ return workflow.steps.filter(step => {
122
+ if (!remainingIds.has(step.id))
123
+ return false;
124
+ const deps = step.depends_on ?? [];
125
+ return deps.every(dep => completedIds.has(dep));
126
+ });
127
+ }
128
+ initWorkflowState(workflow) {
129
+ const validation = this.validateWorkflow(workflow);
130
+ if (!validation.valid) {
131
+ throw new Error(`Invalid workflow: ${validation.errors.join('; ')}`);
132
+ }
133
+ return {
134
+ workflow: workflow.name,
135
+ started_at: new Date().toISOString(),
136
+ current_step: validation.topologicalOrder[0] ?? null,
137
+ status: 'running',
138
+ steps_completed: [],
139
+ steps_remaining: [...validation.topologicalOrder],
140
+ gate_decisions: [],
141
+ last_updated: new Date().toISOString(),
142
+ };
143
+ }
144
+ completeStep(state, stepId, status, durationSeconds, skillOutputs) {
145
+ const completion = {
146
+ id: stepId,
147
+ status,
148
+ duration_seconds: durationSeconds,
149
+ skill_outputs: skillOutputs,
150
+ };
151
+ state.steps_completed.push(completion);
152
+ state.steps_remaining = state.steps_remaining.filter(id => id !== stepId);
153
+ if (status === 'failed') {
154
+ const step = this.findStep(stepId, state);
155
+ if (!step || !step.config?.skip_on_fail) {
156
+ state.status = 'failed';
157
+ }
158
+ }
159
+ if (state.steps_remaining.length === 0 && state.status === 'running') {
160
+ state.status = 'completed';
161
+ }
162
+ state.current_step = state.steps_remaining[0] ?? null;
163
+ state.last_updated = new Date().toISOString();
164
+ return state;
165
+ }
166
+ evaluateGate(step, getOutput) {
167
+ if (!step.check) {
168
+ return { gate_id: step.id, result: 'fail', reason: 'Gate has no check definition' };
169
+ }
170
+ const output = getOutput(step.check.source);
171
+ if (!output) {
172
+ return { gate_id: step.id, result: 'fail', reason: `No output found for skill "${step.check.source}"` };
173
+ }
174
+ const fieldValue = this.resolveField(output, step.check.field);
175
+ const passed = this.evaluateOperator(step.check.operator, fieldValue, step.check.value);
176
+ return {
177
+ gate_id: step.id,
178
+ result: passed ? 'pass' : 'fail',
179
+ reason: passed
180
+ ? `Gate passed: ${step.check.field} ${step.check.operator} ${JSON.stringify(step.check.value)}`
181
+ : `Gate failed: ${step.check.field} (${JSON.stringify(fieldValue)}) did not satisfy ${step.check.operator} ${JSON.stringify(step.check.value)}`,
182
+ };
183
+ }
184
+ evaluateConditional(step, getOutput) {
185
+ if (!step.condition)
186
+ return null;
187
+ const output = getOutput(step.condition.source);
188
+ if (!output)
189
+ return step.if_false === 'SKIP' ? null : step.if_false ?? null;
190
+ const fieldValue = this.resolveField(output, step.condition.field);
191
+ const result = this.evaluateOperator(step.condition.test, fieldValue, step.condition.value);
192
+ if (result) {
193
+ return step.if_true ?? null;
194
+ }
195
+ return step.if_false === 'SKIP' ? null : step.if_false ?? null;
196
+ }
197
+ resolveField(output, fieldPath) {
198
+ const parts = fieldPath.split('.');
199
+ let current = output;
200
+ for (const part of parts) {
201
+ if (current == null || typeof current !== 'object')
202
+ return undefined;
203
+ current = current[part];
204
+ }
205
+ return current;
206
+ }
207
+ evaluateOperator(operator, actual, expected) {
208
+ switch (operator) {
209
+ case 'equals':
210
+ return actual === expected;
211
+ case 'not_equals':
212
+ return actual !== expected;
213
+ case 'greater_than':
214
+ return typeof actual === 'number' && typeof expected === 'number' && actual > expected;
215
+ case 'contains':
216
+ if (Array.isArray(actual))
217
+ return actual.includes(expected);
218
+ if (typeof actual === 'string')
219
+ return actual.includes(String(expected));
220
+ return false;
221
+ case 'none_match': {
222
+ if (!Array.isArray(actual))
223
+ return true;
224
+ const exp = expected;
225
+ return !actual.some(item => {
226
+ if (typeof item !== 'object' || item == null)
227
+ return false;
228
+ return Object.entries(exp).every(([k, v]) => item[k] === v);
229
+ });
230
+ }
231
+ case 'any_equals': {
232
+ if (!Array.isArray(actual))
233
+ return actual === expected;
234
+ return actual.some(item => {
235
+ if (typeof item === 'object' && item != null && typeof expected === 'object' && expected != null) {
236
+ return Object.entries(expected).every(([k, v]) => item[k] === v);
237
+ }
238
+ return item === expected;
239
+ });
240
+ }
241
+ default:
242
+ return false;
243
+ }
244
+ }
245
+ findStep(_stepId, _state) {
246
+ return undefined;
247
+ }
248
+ }
249
+ exports.DagResolver = DagResolver;
250
+ //# sourceMappingURL=dag-resolver.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dag-resolver.js","sourceRoot":"","sources":["../src/dag-resolver.ts"],"names":[],"mappings":";;;AAUa,QAAA,mBAAmB,GAAG,CAAC,CAAC;AASrC,MAAa,WAAW;IACtB,gBAAgB,CAAC,QAA4B;QAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEvD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,8BAA8B,GAAG,GAAG,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,KAAK;oBAAE,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,8BAA8B,CAAC,CAAC;gBAClF,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,yBAAyB,CAAC,CAAC;gBACnF,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,yBAAyB,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAChC,IAAI,CAAC,IAAI,CAAC,SAAS;oBAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,EAAE,uBAAuB,CAAC,CAAC;gBACtF,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,EAAE,qBAAqB,CAAC,CAAC;YACpF,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC3E,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,EAAE,4CAA4C,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,2BAAmB,EAAE,CAAC;gBACxF,QAAQ,CAAC,IAAI,CACX,kBAAkB,IAAI,CAAC,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC,MAAM,+BAA+B,2BAAmB,0BAA0B,CACtI,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,mCAAmC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9E,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACnF,CAAC;IAEO,YAAY,CAAC,KAAqB;QACxC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAW,EAAE;YACpC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAElB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACb,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBACvB,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;qBAAM,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5B,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACvB,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;oBACjB,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;IAED,eAAe,CAAC,KAAqB;QACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;QAExC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACzB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACpC,IAAI,MAAM,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjB,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC3C,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACpD,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAClC,IAAI,SAAS,KAAK,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,QAA4B,EAAE,KAAoB;QAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEpD,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YAClC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,QAA4B;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,YAAY,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,IAAI;YACpD,MAAM,EAAE,SAAS;YACjB,eAAe,EAAE,EAAE;YACnB,eAAe,EAAE,CAAC,GAAG,UAAU,CAAC,gBAAgB,CAAC;YACjD,cAAc,EAAE,EAAE;YAClB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC;IACJ,CAAC;IAED,YAAY,CACV,KAAoB,EACpB,MAAc,EACd,MAA0C,EAC1C,eAAuB,EACvB,YAAsB;QAEtB,MAAM,UAAU,GAAmB;YACjC,EAAE,EAAE,MAAM;YACV,MAAM;YACN,gBAAgB,EAAE,eAAe;YACjC,aAAa,EAAE,YAAY;SAC5B,CAAC;QAEF,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAE1E,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;gBACxC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACrE,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACtD,KAAK,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,YAAY,CACV,IAAkB,EAClB,SAAkD;QAElD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QACtF,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,8BAA8B,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;QAC1G,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAExF,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBAC/F,CAAC,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;SAClJ,CAAC;IACJ,CAAC;IAED,mBAAmB,CACjB,IAAkB,EAClB,SAAkD;QAElD,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAEjC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QAE5E,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAClC,IAAI,CAAC,SAAS,CAAC,IAAoB,EACnC,UAAU,EACV,IAAI,CAAC,SAAS,CAAC,KAAK,CACrB,CAAC;QAEF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACjE,CAAC;IAEO,YAAY,CAAC,MAAmB,EAAE,SAAiB;QACzD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,GAAY,MAAM,CAAC;QAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACrE,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,gBAAgB,CAAC,QAAsB,EAAE,MAAe,EAAE,QAAiB;QACjF,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ;gBACX,OAAO,MAAM,KAAK,QAAQ,CAAC;YAC7B,KAAK,YAAY;gBACf,OAAO,MAAM,KAAK,QAAQ,CAAC;YAC7B,KAAK,cAAc;gBACjB,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,GAAG,QAAQ,CAAC;YACzF,KAAK,UAAU;gBACb,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ;oBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACzE,OAAO,KAAK,CAAC;YACf,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACxC,MAAM,GAAG,GAAG,QAAmC,CAAC;gBAChD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI;wBAAE,OAAO,KAAK,CAAC;oBAC3D,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,IAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC3F,CAAC,CAAC,CAAC;YACL,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oBAAE,OAAO,MAAM,KAAK,QAAQ,CAAC;gBACvD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;wBACjG,OAAO,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,CAAC,KAAK,CAC9D,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,IAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CACvD,CAAC;oBACJ,CAAC;oBACD,OAAO,IAAI,KAAK,QAAQ,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACL,CAAC;YACD;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,OAAe,EAAE,MAAqB;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA7RD,kCA6RC"}
@@ -0,0 +1,22 @@
1
+ export type HardeningSensorId = 'prompt-injection' | 'secret-exposure' | 'destructive-action' | 'production-impact' | 'private-resource' | 'hallucination-risk' | 'context-drift';
2
+ export type HardeningSeverity = 'critical' | 'high' | 'medium' | 'low';
3
+ export type HardeningAction = 'block' | 'require' | 'suggest';
4
+ export interface HardeningFinding {
5
+ sensor_id: HardeningSensorId;
6
+ severity: HardeningSeverity;
7
+ action: HardeningAction;
8
+ message: string;
9
+ evidence: string[];
10
+ recommended_skill?: string;
11
+ }
12
+ export interface HardeningInput {
13
+ request: string;
14
+ hasActiveSession: boolean;
15
+ hasAuthorityPack: boolean;
16
+ recentSignals?: Array<{
17
+ signal: string;
18
+ condition: string;
19
+ }>;
20
+ }
21
+ export declare function runHardeningSensors(input: HardeningInput): HardeningFinding[];
22
+ //# sourceMappingURL=hardening-sensors.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"hardening-sensors.d.ts","sourceRoot":"","sources":["../src/hardening-sensors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GACzB,kBAAkB,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,mBAAmB,GACnB,kBAAkB,GAClB,oBAAoB,GACpB,eAAe,CAAC;AAEpB,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AACvE,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9D;AAWD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,cAAc,GAAG,gBAAgB,EAAE,CAiI7E"}
@@ -0,0 +1,135 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.runHardeningSensors = runHardeningSensors;
4
+ function matchesAny(text, patterns) {
5
+ const hits = [];
6
+ for (const pattern of patterns) {
7
+ const match = text.match(pattern);
8
+ if (match?.[0])
9
+ hits.push(match[0]);
10
+ }
11
+ return hits;
12
+ }
13
+ function runHardeningSensors(input) {
14
+ const request = input.request;
15
+ const lower = request.toLowerCase();
16
+ const findings = [];
17
+ const injectionHits = matchesAny(lower, [
18
+ /ignore (all )?(previous|prior|system|developer) instructions/,
19
+ /forget (all )?(previous|prior|system|developer) instructions/,
20
+ /bypass (the )?(rules|policy|guardrails|safety|approval)/,
21
+ /reveal (your )?(system prompt|developer message|hidden instructions)/,
22
+ ]);
23
+ if (injectionHits.length > 0) {
24
+ findings.push({
25
+ sensor_id: 'prompt-injection',
26
+ severity: 'critical',
27
+ action: 'block',
28
+ message: 'Potential prompt-injection or instruction-hierarchy attack detected.',
29
+ evidence: injectionHits,
30
+ recommended_skill: 'anti-hallucination-agent',
31
+ });
32
+ }
33
+ const secretHits = matchesAny(request, [
34
+ /sk-[A-Za-z0-9_-]{12,}/,
35
+ /ghp_[A-Za-z0-9_]{12,}/,
36
+ /AKIA[A-Z0-9]{12,}/,
37
+ /(?:api[_-]?key|secret|token|password)\s*[:=]\s*['"]?[^'"\s]{8,}/i,
38
+ ]);
39
+ if (secretHits.length > 0) {
40
+ findings.push({
41
+ sensor_id: 'secret-exposure',
42
+ severity: 'critical',
43
+ action: 'block',
44
+ message: 'Potential secret or credential material detected in the request.',
45
+ evidence: secretHits.map(hit => hit.slice(0, 16) + '...'),
46
+ recommended_skill: 'security-audit',
47
+ });
48
+ }
49
+ const destructiveHits = matchesAny(lower, [
50
+ /drop table/,
51
+ /drop column/,
52
+ /delete .*production/,
53
+ /truncate /,
54
+ /reset --hard/,
55
+ /force push/,
56
+ ]);
57
+ if (destructiveHits.length > 0) {
58
+ findings.push({
59
+ sensor_id: 'destructive-action',
60
+ severity: 'critical',
61
+ action: 'require',
62
+ message: 'Destructive action requires explicit approval and rollback planning.',
63
+ evidence: destructiveHits,
64
+ recommended_skill: 'rollback-manager',
65
+ });
66
+ }
67
+ const productionHits = matchesAny(lower, [
68
+ /deploy/,
69
+ /release/,
70
+ /ship/,
71
+ /production/,
72
+ /publish/,
73
+ ]);
74
+ if (productionHits.length > 0) {
75
+ findings.push({
76
+ sensor_id: 'production-impact',
77
+ severity: 'high',
78
+ action: 'require',
79
+ message: 'Production-impacting request should pass release and pre-deploy gates.',
80
+ evidence: productionHits,
81
+ recommended_skill: 'pre-deploy-check',
82
+ });
83
+ }
84
+ const privateResourceHits = matchesAny(lower, [
85
+ /private repo/,
86
+ /github api/,
87
+ /supabase/,
88
+ /stripe/,
89
+ /sentry/,
90
+ /production database/,
91
+ ]);
92
+ if (privateResourceHits.length > 0) {
93
+ findings.push({
94
+ sensor_id: 'private-resource',
95
+ severity: 'medium',
96
+ action: 'require',
97
+ message: 'Authenticated/private resources require tool-affordance verification before probing.',
98
+ evidence: privateResourceHits,
99
+ recommended_skill: 'anti-hallucination-agent',
100
+ });
101
+ }
102
+ const hallucinationHits = matchesAny(lower, [
103
+ /verify claims?/,
104
+ /fact check/,
105
+ /citations?/,
106
+ /market research/,
107
+ /report/,
108
+ /audit/,
109
+ ]);
110
+ if (hallucinationHits.length > 0) {
111
+ findings.push({
112
+ sensor_id: 'hallucination-risk',
113
+ severity: 'medium',
114
+ action: 'suggest',
115
+ message: 'Claim-heavy work should include grounding or report verification.',
116
+ evidence: hallucinationHits,
117
+ recommended_skill: lower.includes('report') ? 'report-verifier' : 'anti-hallucination-agent',
118
+ });
119
+ }
120
+ if (!input.hasActiveSession || !input.hasAuthorityPack) {
121
+ findings.push({
122
+ sensor_id: 'context-drift',
123
+ severity: 'medium',
124
+ action: 'require',
125
+ message: 'No active orchestration session or authority pack evidence was found.',
126
+ evidence: [
127
+ `hasActiveSession=${input.hasActiveSession}`,
128
+ `hasAuthorityPack=${input.hasAuthorityPack}`,
129
+ ],
130
+ recommended_skill: 'session-start',
131
+ });
132
+ }
133
+ return findings;
134
+ }
135
+ //# sourceMappingURL=hardening-sensors.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"hardening-sensors.js","sourceRoot":"","sources":["../src/hardening-sensors.ts"],"names":[],"mappings":";;AAqCA,kDAiIC;AA1ID,SAAS,UAAU,CAAC,IAAY,EAAE,QAAkB;IAClD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAqB;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,EAAE;QACtC,8DAA8D;QAC9D,8DAA8D;QAC9D,yDAAyD;QACzD,sEAAsE;KACvE,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,kBAAkB;YAC7B,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,sEAAsE;YAC/E,QAAQ,EAAE,aAAa;YACvB,iBAAiB,EAAE,0BAA0B;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE;QACrC,uBAAuB;QACvB,uBAAuB;QACvB,mBAAmB;QACnB,kEAAkE;KACnE,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,iBAAiB;YAC5B,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,kEAAkE;YAC3E,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;YACzD,iBAAiB,EAAE,gBAAgB;SACpC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,EAAE;QACxC,YAAY;QACZ,aAAa;QACb,qBAAqB;QACrB,WAAW;QACX,cAAc;QACd,YAAY;KACb,CAAC,CAAC;IACH,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,oBAAoB;YAC/B,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,sEAAsE;YAC/E,QAAQ,EAAE,eAAe;YACzB,iBAAiB,EAAE,kBAAkB;SACtC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,EAAE;QACvC,QAAQ;QACR,SAAS;QACT,MAAM;QACN,YAAY;QACZ,SAAS;KACV,CAAC,CAAC;IACH,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,mBAAmB;YAC9B,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,wEAAwE;YACjF,QAAQ,EAAE,cAAc;YACxB,iBAAiB,EAAE,kBAAkB;SACtC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,mBAAmB,GAAG,UAAU,CAAC,KAAK,EAAE;QAC5C,cAAc;QACd,YAAY;QACZ,UAAU;QACV,QAAQ;QACR,QAAQ;QACR,qBAAqB;KACtB,CAAC,CAAC;IACH,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,kBAAkB;YAC7B,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,sFAAsF;YAC/F,QAAQ,EAAE,mBAAmB;YAC7B,iBAAiB,EAAE,0BAA0B;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,UAAU,CAAC,KAAK,EAAE;QAC1C,gBAAgB;QAChB,YAAY;QACZ,YAAY;QACZ,iBAAiB;QACjB,QAAQ;QACR,OAAO;KACR,CAAC,CAAC;IACH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,oBAAoB;YAC/B,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,mEAAmE;YAC5E,QAAQ,EAAE,iBAAiB;YAC3B,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,0BAA0B;SAC7F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,eAAe;YAC1B,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,uEAAuE;YAChF,QAAQ,EAAE;gBACR,oBAAoB,KAAK,CAAC,gBAAgB,EAAE;gBAC5C,oBAAoB,KAAK,CAAC,gBAAgB,EAAE;aAC7C;YACD,iBAAiB,EAAE,eAAe;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
@@ -0,0 +1,87 @@
1
+ import { StateMachine } from './state-machine';
2
+ import { DagResolver } from './dag-resolver';
3
+ import { SignalRouter, type MatchedSignal } from './signal-router';
4
+ import { PolicyEnforcer, type GateCheckResult } from './policy-enforcer';
5
+ import { AuditLogger } from './audit-logger';
6
+ import { OrchestrationAdvisor, type AdvisorDecision } from './advisor';
7
+ import type { SessionContext, SkillOutput, WorkflowDefinition, WorkflowState, PendingSignal } from './types';
8
+ import type { SubscriptionTier, StructuredTaskContract } from './task-contract';
9
+ export interface OrchestratorOptions {
10
+ projectRoot: string;
11
+ sessionId?: string;
12
+ policyPath?: string;
13
+ triggerRegistryPath?: string;
14
+ }
15
+ export declare class Orchestrator {
16
+ readonly state: StateMachine;
17
+ readonly dag: DagResolver;
18
+ readonly signals: SignalRouter;
19
+ readonly policy: PolicyEnforcer;
20
+ readonly audit: AuditLogger;
21
+ readonly advisor: OrchestrationAdvisor;
22
+ private config;
23
+ constructor(options: OrchestratorOptions);
24
+ startSession(project: string, branch: string): SessionContext;
25
+ gateCheck(skillId: string): {
26
+ allowed: boolean;
27
+ blockers: string[];
28
+ policyGate: GateCheckResult | null;
29
+ };
30
+ policyGateCheck(action: string): GateCheckResult;
31
+ registerSkillStart(skillId: string): {
32
+ allowed: boolean;
33
+ reason: string;
34
+ };
35
+ registerSkillComplete(output: SkillOutput): {
36
+ context: SessionContext;
37
+ signals: MatchedSignal[];
38
+ };
39
+ startWorkflow(workflow: WorkflowDefinition): WorkflowState;
40
+ getNextWorkflowSteps(workflow: WorkflowDefinition): {
41
+ ready: Array<{
42
+ id: string;
43
+ type: string;
44
+ skill?: string;
45
+ skills?: string[];
46
+ }>;
47
+ workflowState: WorkflowState | null;
48
+ };
49
+ completeWorkflowStep(stepId: string, status: 'completed' | 'failed' | 'skipped', durationSeconds: number, skillOutputs: string[]): WorkflowState;
50
+ adviseUserInput(request: string, options?: {
51
+ tier?: SubscriptionTier;
52
+ projectType?: string;
53
+ }): AdvisorDecision;
54
+ startTaskContract(request: string, options?: {
55
+ tier?: SubscriptionTier;
56
+ projectType?: string;
57
+ }): StructuredTaskContract;
58
+ private hasAuthorityPackEvidence;
59
+ getActiveSkillId(): string | null;
60
+ getPendingSignals(target?: string): PendingSignal[];
61
+ getBlockingSignals(): PendingSignal[];
62
+ getStatus(): {
63
+ session: SessionContext | null;
64
+ workflow: WorkflowState | null;
65
+ pendingSignals: PendingSignal[];
66
+ blockingSignals: PendingSignal[];
67
+ auditIntegrity: {
68
+ valid: boolean;
69
+ entries: number;
70
+ };
71
+ };
72
+ }
73
+ export { StateMachine } from './state-machine';
74
+ export { DagResolver } from './dag-resolver';
75
+ export { SignalRouter } from './signal-router';
76
+ export type { MatchedSignal } from './signal-router';
77
+ export { PolicyEnforcer } from './policy-enforcer';
78
+ export { AuditLogger } from './audit-logger';
79
+ export { OrchestrationAdvisor } from './advisor';
80
+ export { runHardeningSensors } from './hardening-sensors';
81
+ export { BUILTIN_TRIGGERS } from './builtin-triggers';
82
+ export * from './task-contract';
83
+ export * from './advisor';
84
+ export * from './hardening-sensors';
85
+ export * from './types';
86
+ export * from './api';
87
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,KAAK,EAEV,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,aAAa,EACd,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEhF,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,qBAAa,YAAY;IACvB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IAEvC,OAAO,CAAC,MAAM,CAAqB;gBAEvB,OAAO,EAAE,mBAAmB;IAwBxC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc;IAU7D,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG;QAC1B,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,UAAU,EAAE,eAAe,GAAG,IAAI,CAAC;KACpC;IAqBD,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe;IAahD,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAWzE,qBAAqB,CAAC,MAAM,EAAE,WAAW,GAAG;QAC1C,OAAO,EAAE,cAAc,CAAC;QACxB,OAAO,EAAE,aAAa,EAAE,CAAC;KAC1B;IAqCD,aAAa,CAAC,QAAQ,EAAE,kBAAkB,GAAG,aAAa;IAwB1D,oBAAoB,CAAC,QAAQ,EAAE,kBAAkB,GAAG;QAClD,KAAK,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;QAC9E,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;KACrC;IAkBD,oBAAoB,CAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,EAC1C,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,MAAM,EAAE,GACrB,aAAa;IAwBhB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,gBAAgB,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,eAAe;IA4BlH,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,gBAAgB,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,sBAAsB;IAa3H,OAAO,CAAC,wBAAwB;IAOhC,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIjC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,EAAE;IAInD,kBAAkB,IAAI,aAAa,EAAE;IAIrC,SAAS,IAAI;QACX,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;QAC/B,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAC;QAC/B,cAAc,EAAE,aAAa,EAAE,CAAC;QAChC,eAAe,EAAE,aAAa,EAAE,CAAC;QACjC,cAAc,EAAE;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;KACrD;CASF;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC"}