@ericsanchezok/synergy-util 2.4.5 → 3.0.1

package/dist/capability.d.ts

@@ -1,291 +1,18 @@
 export type SynergyCapabilityRisk = "low" | "medium" | "high";
-export type SynergyCapabilityRiskScope = "install" | "agent";
 export declare const SYNERGY_CAPABILITY_CATEGORIES: readonly ["tools", "files", "network", "data", "ui", "runtime", "hooks", "session", "browser", "identity", "communication", "platform"];
 export type SynergyCapabilityCategory = (typeof SYNERGY_CAPABILITY_CATEGORIES)[number];
-export type SynergyCapabilitySeverity = SynergyCapabilityRisk;
-export interface SynergyCapabilityPermissionItem {
-    key: string;
+export interface SynergyCapabilityDefinition {
     category: SynergyCapabilityCategory;
-    severity: SynergyCapabilitySeverity;
+    severity: SynergyCapabilityRisk;
     title: string;
     description: string;
     technical?: string;
-}
-export interface RegistryPermissionItem {
-    key: string;
-    description: string;
-    risk: SynergyCapabilityRisk;
-}
-export type ManifestTool = NonNullable<NonNullable<SynergyCapabilityManifest["contributes"]>["tools"]>[number];
-export interface SynergyCapabilityManifestTool {
-    id?: string;
-    name: string;
-    exposure?: {
-        mode?: string;
-    };
-    capabilities?: {
-        filesystem?: "none" | "read" | "write";
-        shell?: boolean;
-        network?: boolean;
-        session?: "none" | "metadata" | "read";
-        workspace?: "none" | "metadata" | "read";
-        config?: "none" | "plugin" | "global";
-    };
-}
-export interface SynergyCapabilityManifest {
-    permissions?: {
-        tools?: {
-            filesystem?: "none" | "read" | "write";
-            shell?: boolean;
-            network?: boolean;
-            mcp?: "none" | "invoke" | "spawn";
-            task?: unknown;
-        };
-        data?: {
-            session?: "none" | "metadata" | "read";
-            workspace?: "none" | "metadata" | "read";
-            config?: "none" | "plugin" | "global";
-            secrets?: "none" | "own";
-        };
-        ui?: {
-            toolRenderers?: boolean;
-            partRenderers?: boolean;
-            workbenchPanels?: boolean;
-            appPanels?: boolean;
-            settings?: boolean;
-            messageSlots?: boolean;
-            themes?: boolean;
-            icons?: boolean;
-            appRoutes?: boolean;
-            commands?: boolean;
-            trustedImport?: boolean;
-            sandboxIframe?: boolean;
-        };
-        hooks?: {
-            promptTransform?: boolean;
-            compactionTransform?: boolean;
-            toolExecute?: "none" | "own" | "declared" | "all";
-            permissionAsk?: "none" | "own" | "all";
-            events?: "none" | "selected" | "all";
-            eventNames?: string[];
-            config?: boolean;
-        };
-        network?: {
-            connectDomains?: string[];
-        };
-    };
-    contributes?: {
-        permissions?: unknown;
-        tools?: SynergyCapabilityManifestTool[];
-        agents?: Array<{
-            name?: string;
-            mode?: string;
-            hidden?: boolean;
-            model?: unknown;
-            modelRole?: unknown;
-            permission?: unknown;
-        }>;
-        mcp?: unknown;
-        ui?: {
-            toolRenderers?: unknown[];
-            partRenderers?: unknown[];
-            workbenchPanels?: unknown[];
-            appPanels?: unknown[];
-            settings?: unknown[];
-            messageSlots?: unknown[];
-            themes?: unknown[];
-            icons?: unknown[];
-            appRoutes?: unknown[];
-            commands?: unknown[];
-        };
-    };
-    lifecycle?: unknown;
-}
-export interface SynergyCapabilityDefinition extends Omit<SynergyCapabilityPermissionItem, "key"> {
     nonBypassable?: boolean;
 }
-export declare function publicToolNames(manifest: SynergyCapabilityManifest): string[];
-export declare function hasPublicTools(manifest: SynergyCapabilityManifest): boolean;
 export declare const SYNERGY_CAPABILITY_DETAILS: Record<string, SynergyCapabilityDefinition>;
-export declare const SYNERGY_PROFILE_CAPABILITIES: readonly ["file_read", "file_write", "shell_read", "shell", "shell_remote_write", "shell_remote_publish", "shell_destructive", "shell_hardline", "file_external_read", "file_external_write", "network_read", "network_request", "mcp_invoke", "mcp_spawn", "session_data", "workspace_data", "config:read", "config:write", "secrets", "task", "prompt_transform", "compaction_transform", "tool_execution_hook", "permission_hook", "event_hook", "config_hook", "identity_act", "communication_email", "channel_outbound", "platform_control", "protected_op", "session_state", "browser_interact", "browser_inspect", "browser_eval_readonly", "browser_eval_trusted", "browser_clipboard", "browser_download", "browser_viewport"];
+export declare const SYNERGY_PROFILE_CAPABILITIES: readonly ["file_read", "file_write", "shell_read", "shell", "shell_branch_mutation", "shell_remote_execute", "shell_remote_publish", "shell_remote_write", "shell_destructive", "shell_hardline", "file_external_read", "file_external_write", "network_read", "network_request", "mcp_invoke", "mcp_spawn", "session_data", "workspace_data", "config:read", "config:write", "secrets", "task", "prompt_transform", "compaction_transform", "tool_execution_hook", "permission_hook", "event_hook", "config_hook", "identity_act", "communication_email", "channel_outbound", "platform_control", "protected_op", "session_state", "browser_interact", "browser_inspect", "browser_eval_readonly", "browser_eval_trusted", "browser_clipboard", "browser_upload", "browser_coordinate", "browser_download", "browser_emulation"];
 export declare const SYNERGY_PERMISSION_CAPABILITY: Record<string, string>;
 export declare function permissionCapability(permission: string): string;
 export declare function capabilityNonBypassable(capability: string): boolean;
-export declare function capabilityRisk(capability: string, manifest?: SynergyCapabilityManifest): SynergyCapabilityRisk;
-export declare function baseCapabilities(manifest: SynergyCapabilityManifest): string[];
-export declare function toolCapabilities(manifest: SynergyCapabilityManifest, tool: ManifestTool): string[];
-export declare function publicToolCapabilities(manifest: SynergyCapabilityManifest): string[];
-export declare function computeRisk(capabilities: string[], manifest?: SynergyCapabilityManifest): SynergyCapabilityRisk;
-export declare function capabilitiesForRiskScope(manifest: SynergyCapabilityManifest, scope: SynergyCapabilityRiskScope): string[];
-export declare function pluginRisk(manifest: SynergyCapabilityManifest, input: {
-    scope: SynergyCapabilityRiskScope;
-}): SynergyCapabilityRisk;
-export declare function toolRisk(manifest: SynergyCapabilityManifest, tool: ManifestTool): SynergyCapabilityRisk;
-export declare function permissionItems(manifest: SynergyCapabilityManifest, capabilities: string[]): SynergyCapabilityPermissionItem[];
-export declare function registryPermissionSummary(manifest: SynergyCapabilityManifest, capabilities: string[]): RegistryPermissionItem[];
+export declare function capabilityRisk(capability: string): SynergyCapabilityRisk;
 export declare function permissionCategoryForKey(key: string): SynergyCapabilityCategory;
-export declare function permissionsHashPayload(manifest: SynergyCapabilityManifest, capabilities: string[]): {
-    capabilities: string[];
-    permissions: {
-        tools?: {
-            filesystem?: "none" | "read" | "write";
-            shell?: boolean;
-            network?: boolean;
-            mcp?: "none" | "invoke" | "spawn";
-            task?: unknown;
-        };
-        data?: {
-            session?: "none" | "metadata" | "read";
-            workspace?: "none" | "metadata" | "read";
-            config?: "none" | "plugin" | "global";
-            secrets?: "none" | "own";
-        };
-        ui?: {
-            toolRenderers?: boolean;
-            partRenderers?: boolean;
-            workbenchPanels?: boolean;
-            appPanels?: boolean;
-            settings?: boolean;
-            messageSlots?: boolean;
-            themes?: boolean;
-            icons?: boolean;
-            appRoutes?: boolean;
-            commands?: boolean;
-            trustedImport?: boolean;
-            sandboxIframe?: boolean;
-        };
-        hooks?: {
-            promptTransform?: boolean;
-            compactionTransform?: boolean;
-            toolExecute?: "none" | "own" | "declared" | "all";
-            permissionAsk?: "none" | "own" | "all";
-            events?: "none" | "selected" | "all";
-            eventNames?: string[];
-            config?: boolean;
-        };
-        network?: {
-            connectDomains?: string[];
-        };
-    };
-    contributes: {
-        ui?: {
-            toolRenderers: boolean;
-            partRenderers: boolean;
-            workbenchPanels: boolean;
-            appPanels: boolean;
-            settings: boolean;
-            messageSlots: boolean;
-            themes: boolean;
-            icons: boolean;
-            appRoutes: boolean;
-            commands: boolean;
-        } | undefined;
-        mcp?: {} | undefined;
-        agents?: {
-            name: string | undefined;
-            mode: string | undefined;
-            hidden: boolean | undefined;
-            model: unknown;
-            modelRole: unknown;
-            permission: unknown;
-        }[] | undefined;
-        tools?: {
-            id: string | undefined;
-            name: string;
-            exposure: {
-                mode?: string;
-            } | undefined;
-            capabilities: {
-                filesystem?: "none" | "read" | "write";
-                shell?: boolean;
-                network?: boolean;
-                session?: "none" | "metadata" | "read";
-                workspace?: "none" | "metadata" | "read";
-                config?: "none" | "plugin" | "global";
-            } | undefined;
-        }[] | undefined;
-        permissions?: {} | undefined;
-    } | undefined;
-    lifecycle: {};
-};
-export declare function manifestHashPayload(manifest: SynergyCapabilityManifest): SynergyCapabilityManifest;
-export declare function stablePluginJson(value: unknown): string;
-export type BridgeMethodPolicy = {
-    type: "capability";
-    capability: string;
-} | {
-    type: "unprivileged";
-} | {
-    type: "unknown";
-};
-export declare const SYNERGY_BRIDGE_METHOD_POLICY: {
-    readonly "config.get": {
-        readonly type: "capability";
-        readonly capability: "config:read";
-    };
-    readonly "config.set": {
-        readonly type: "capability";
-        readonly capability: "config:write";
-    };
-    readonly "config.replace": {
-        readonly type: "capability";
-        readonly capability: "config:write";
-    };
-    readonly "secret.get": {
-        readonly type: "capability";
-        readonly capability: "secrets";
-    };
-    readonly "secret.set": {
-        readonly type: "capability";
-        readonly capability: "secrets";
-    };
-    readonly "secret.delete": {
-        readonly type: "capability";
-        readonly capability: "secrets";
-    };
-    readonly "cache.get": {
-        readonly type: "unprivileged";
-    };
-    readonly "cache.set": {
-        readonly type: "unprivileged";
-    };
-    readonly "cache.delete": {
-        readonly type: "unprivileged";
-    };
-    readonly "file.read": {
-        readonly type: "capability";
-        readonly capability: "file_read";
-    };
-    readonly "file.write": {
-        readonly type: "capability";
-        readonly capability: "file_write";
-    };
-    readonly "network.fetch": {
-        readonly type: "capability";
-        readonly capability: "network_request";
-    };
-    readonly "shell.run": {
-        readonly type: "capability";
-        readonly capability: "shell";
-    };
-    readonly "session.getMetadata": {
-        readonly type: "capability";
-        readonly capability: "session_data";
-    };
-    readonly "workspace.getMetadata": {
-        readonly type: "capability";
-        readonly capability: "workspace_data";
-    };
-    readonly "task.run": {
-        readonly type: "capability";
-        readonly capability: "task";
-    };
-    readonly "tool.invoke": {
-        readonly type: "unprivileged";
-    };
-    readonly "permission.request": {
-        readonly type: "unprivileged";
-    };
-};
-export declare function bridgeMethodPolicy(method: string): BridgeMethodPolicy;
-export declare function bridgeCapability(method: string): string | undefined;