@gendigital/sage-openclaw 0.14.0 → 0.15.0

package/dist/mcp-server.cjs

@@ -4241,7 +4241,7 @@ var init_zod = __esm({
 });
 
 // ../core/dist/types.js
-var nullLogger, ArtifactTypeSchema, ArtifactSchema, VerdictSeveritySchema, ThreatSchema, DecisionSchema, SensitivitySchema, UrlCheckConfigSchema, CacheConfigSchema, LoggingConfigSchema, OperationalLogLevelSchema, OperationalLoggingConfigSchema, FileCheckConfigSchema, PackageCheckConfigSchema, AmsiCheckConfigSchema, SkillCheckConfigSchema, PiCheckConfigSchema, ExceptionDecisionSchema, ExceptionMatchSchema, ExceptionRuleSchema, ExceptionsFileSchema, ExceptionsConfigSchema, ConfigSchema, HookTypeSchema;
+var nullLogger, ArtifactTypeSchema, ArtifactSchema, VerdictSeveritySchema, ThreatSchema, DecisionSchema, SensitivitySchema, UrlCheckConfigSchema, CacheConfigSchema, LoggingConfigSchema, OperationalLogLevelSchema, OperationalLoggingConfigSchema, FileCheckConfigSchema, PackageCheckConfigSchema, AmsiCheckConfigSchema, SkillCheckConfigSchema, DEFAULT_PI_MEDIUM_RISK_THRESHOLD, PiCheckConfigSchema, ExceptionDecisionSchema, ExceptionMatchSchema, ExceptionRuleSchema, ExceptionsFileSchema, ExceptionsConfigSchema, ConfigSchema, HookTypeSchema;
 var init_types2 = __esm({
   "../core/dist/types.js"() {
     "use strict";
@@ -4330,6 +4330,7 @@ var init_types2 = __esm({
        */
       upload_enabled: external_exports.boolean().default(true)
     });
+    DEFAULT_PI_MEDIUM_RISK_THRESHOLD = 0.5;
     PiCheckConfigSchema = external_exports.object({
       enabled: external_exports.boolean().default(false),
       max_content_length: external_exports.number().default(16384),
@@ -20593,7 +20594,11 @@ function safeTruncate(value, maxLen) {
   return value.slice(0, cutIndex);
 }
 
+// ../core/dist/model-storage.js
+init_config();
+
 // ../core/dist/detection-names.js
+init_types2();
 var REPORTING_ENGINE_SHORTHANDS = {
   package: "sgpk",
   amsi: "sgam",
@@ -20876,7 +20881,7 @@ init_file_utils();
 var import_meta = {};
 function resolveVersion() {
   if (true)
-    return "0.14.0";
+    return "0.15.0";
   try {
     const pkgPath = (0, import_node_path4.join)((0, import_node_path4.dirname)((0, import_node_url.fileURLToPath)(import_meta.url)), "..", "package.json");
     const pkg = JSON.parse(getFileContentSync(pkgPath));
@@ -20888,9 +20893,6 @@ function resolveVersion() {
 }
 var VERSION = resolveVersion();
 
-// ../core/dist/model-storage.js
-init_config();
-
 // ../core/dist/clients/model-downloader.js
 init_types2();
 var STALE_LOCK_MS = 60 * 60 * 1e3;
@@ -21214,6 +21216,12 @@ init_types2();
 // ../core/dist/evaluator.js
 init_config();
 
+// ../core/dist/extractors.js
+var MAX_CONTENT_SIZE = 64 * 1024;
+
+// ../core/dist/deobfuscate.js
+var REPLACEMENT_CHAR = String.fromCharCode(65533);
+
 // ../core/dist/exceptions.js
 init_config();
 init_file_utils();
@@ -21226,9 +21234,6 @@ init_types2();
 // ../core/dist/exceptions.js
 init_types2();
 
-// ../core/dist/extractors.js
-var MAX_CONTENT_SIZE = 64 * 1024;
-
 // ../core/dist/package-checker.js
 init_types2();
 
@@ -21236,17 +21241,43 @@ init_types2();
 init_config();
 init_file_utils();
 
+// ../core/dist/submit-limits.js
+init_config();
+init_file_utils();
+init_types2();
+var SUBMIT_WINDOW_MS = 24 * 60 * 60 * 1e3;
+
 // ../core/dist/threat-loader.js
 var import_yaml2 = __toESM(require_dist(), 1);
+init_config();
 init_file_utils();
 init_types2();
 
 // ../core/dist/evaluator.js
 init_types2();
+function hasReportableDetectionSignals(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const signals = value;
+  const hasEntries = (key) => {
+    const entries = signals[key];
+    return Array.isArray(entries) && entries.length > 0;
+  };
+  return Boolean(hasEntries("heuristics") || hasEntries("url_checks") || hasEntries("file_checks") || hasEntries("package_checks") || hasEntries("amsi_checks") || Array.isArray(signals.pi_checks) && signals.pi_checks.some((result) => {
+    if (!result || typeof result !== "object" || Array.isArray(result))
+      return false;
+    const risk = result.risk;
+    return typeof risk === "number" && Number.isFinite(risk) && risk >= DEFAULT_PI_MEDIUM_RISK_THRESHOLD;
+  }));
+}
 
 // ../core/dist/index.js
 init_file_utils();
 
+// ../core/dist/format.js
+var FP_REPORT_TOOL_NAME = "sage_report_false_positive";
+var SESSION_START_FP_HINT = `If this is a false positive, ask your agent to report it with the ${FP_REPORT_TOOL_NAME} MCP tool.`;
+
 // ../core/dist/guard.js
 init_config();
 init_types2();
@@ -31641,7 +31672,8 @@ function readContentSnippet(entry) {
 function isRuntimeVerdictEntry(v) {
   if (!v || typeof v !== "object" || Array.isArray(v))
     return false;
-  return v.type === "runtime_verdict";
+  const entry = v;
+  return entry.type === "runtime_verdict" && (entry.custom_threat_matched !== true || entry.non_custom_detection_matched === true || hasReportableDetectionSignals(parseRuntimeAuditSignals(entry.signals)));
 }
 function isAnalyzedSkillVerdictEntry(v) {
   if (!v || typeof v !== "object" || Array.isArray(v))
@@ -32192,7 +32224,7 @@ async function main() {
   );
   const branding = resolveBranding(config2.brand_key, logger);
   await runSageMcpServerStdio({
-    version: "0.14.0",
+    version: "0.15.0",
     logger,
     branding
   });