@highflame/overwatch 1.0.0

package/dist/pipeline/extractors/github-copilot-extractor.d.ts

@@ -0,0 +1,49 @@
+/**
+ * GitHub Copilot Extractor
+ *
+ * Converts GitHub Copilot Agent hook payloads into canonical OverwatchEvent format.
+ * Handles GitHub Copilot hook events as defined in .github/hooks/hooks.json
+ *
+ * GitHub Copilot uses repository-based hooks (.github/hooks/hooks.json) rather than
+ * global IDE hooks. See: https://docs.github.com/en/copilot/how-tos/use-copilot-agents/coding-agent/use-hooks
+ */
+import { IExtractor } from './index';
+import { OverwatchEvent, IDESource } from '../../types/events';
+export declare class GitHubCopilotExtractor implements IExtractor {
+    /**
+     * Check if the extractor can handle given event from GitHub Copilot
+     */
+    canHandle(event: string, source: IDESource): boolean;
+    /**
+     * Convert GitHub Copilot hook payload to canonical OverwatchEvent
+     */
+    toCanonical(event: string, input: Record<string, any>, source: IDESource): Promise<OverwatchEvent | null>;
+    /**
+     * Extract content to be scanned by security engines
+     */
+    private extractContent;
+    /**
+     * Extract tool name and MCP information
+     */
+    private extractToolInfo;
+    /**
+     * Extract file path from input
+     */
+    private extractFilePath;
+    /**
+     * Extract tool arguments
+     */
+    private extractArguments;
+    /**
+     * Resolve workspace root from various GitHub Copilot formats
+     */
+    private resolveWorkspaceRoot;
+    /**
+     * Generate default response format for GitHub Copilot
+     *
+     * GitHub Copilot hooks expect: { continue: boolean } for blocking hooks
+     * See: https://docs.github.com/en/copilot/how-tos/use-copilot-agents/coding-agent/use-hooks
+     */
+    getDefaultResponse(event: string, allowed: boolean, reason?: string): Record<string, any>;
+}
+//# sourceMappingURL=github-copilot-extractor.d.ts.map

package/dist/pipeline/extractors/github-copilot-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-copilot-extractor.d.ts","sourceRoot":"","sources":["../../../src/pipeline/extractors/github-copilot-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAkB,MAAM,oBAAoB,CAAC;AAG/E,qBAAa,sBAAuB,YAAW,UAAU;IACrD;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO;IAmBpD;;OAEG;IACG,WAAW,CACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,MAAM,EAAE,SAAS,GAClB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAiEjC;;OAEG;IACH,OAAO,CAAC,cAAc;IA2DtB;;OAEG;IACH,OAAO,CAAC,eAAe;IAoCvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAwB5B;;;;;OAKG;IACH,kBAAkB,CACd,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;CAsBzB"}

package/dist/pipeline/extractors/index.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Input Extraction Layer - Core Interfaces
+ *
+ * This module defines the interfaces for extracting and normalizing
+ * diverse input payloads from various IDEs and AI agent frameworks
+ * into a canonical OverwatchEvent schema.
+ */
+import { OverwatchEvent, IDESource } from "../../types/events";
+export { CursorExtractor } from './cursor-extractor';
+export { ClaudeExtractor } from './claude-extractor';
+export { GitHubCopilotExtractor } from './github-copilot-extractor';
+export { ExtractorRegistry } from './registry';
+/**
+ * Extractor Interface
+ *
+ * Each IDE/framework provides an implementation of this interface
+ * to convert its native payload format into the canonical OverwatchEvent.
+ */
+export interface IExtractor {
+    /**
+     * Convert a raw hook payload into a canonical OverwatchEvent
+     *
+     * @param event - The hook event name (e.g., "beforeShellExecution", "PreToolUse")
+     * @param input - The raw payload from the IDE/framework
+     * @param source - The source IDE/framework identifier
+     * @returns Canonical OverwatchEvent or null if event cannot be processed
+     */
+    toCanonical(event: string, input: Record<string, any>, source: IDESource): Promise<OverwatchEvent | null>;
+    /**
+     * Check if this extractor can handle the given event from the given source
+     *
+     * @param event - The hook event name
+     * @param source - The source IDE/framework identifier
+     * @returns true if this extractor can process the event
+     */
+    canHandle(event: string, source: IDESource): boolean;
+    /**
+     * Generate default response format for IDE/framework
+     *
+     * @param event - hook event name
+     * @param allowed - action allowed or denied
+     * @param reason - reason for denial
+     * @returns default response object in the format expected by the IDE/framework
+     */
+    getDefaultResponse(event: string, allowed: boolean, reason?: string): Record<string, any>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/pipeline/extractors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/pipeline/extractors/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACvB;;;;;;;OAOG;IACH,WAAW,CACP,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,MAAM,EAAE,SAAS,GAClB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAElC;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IAErD;;;;;;;OAOG;IACH,kBAAkB,CACd,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC1B"}

package/dist/pipeline/extractors/registry.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Extractor Registry
+ *
+ * Factory pattern for managing and retrieving extractors for different IDE/framework sources.
+ * Provides a centralized way to register and access extractors.
+ */
+import { IDESource } from '../../types/events';
+import { IExtractor } from './index';
+export declare class ExtractorRegistry {
+    private extractors;
+    /**
+     * Register an extractor for a source
+     */
+    register(source: IDESource, extractor: IExtractor): void;
+    /**
+     * Get extractor for source
+     * Returns null if no extractor is registered for the source
+     */
+    get(source: IDESource): IExtractor | null;
+    /**
+     * Find extractor that can handle the given event from the given source
+     * Checks both source match and canHandle() method
+     */
+    findExtractor(event: string, source: IDESource): IExtractor | null;
+    /**
+     * Check if an extractor is registered for the source
+     */
+    has(source: IDESource): boolean;
+    /**
+     * Get all registered sources
+     */
+    getRegisteredSources(): IDESource[];
+    /**
+     * Create a registry with default extractors (Cursor, Claude Code, GitHub Copilot)
+     */
+    static createDefault(): ExtractorRegistry;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/pipeline/extractors/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/pipeline/extractors/registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAKrC,qBAAa,iBAAiB;IAC1B,OAAO,CAAC,UAAU,CAAyC;IAE3D;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,GAAG,IAAI;IAIxD;;;OAGG;IACH,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,IAAI;IAIzC;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,IAAI;IAQlE;;OAEG;IACH,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO;IAI/B;;OAEG;IACH,oBAAoB,IAAI,SAAS,EAAE;IAInC;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,iBAAiB;CAU5C"}

package/dist/pipeline/hook-pipeline.d.ts

@@ -0,0 +1,25 @@
+import { IDESource, HookEvent, DetectionResult, PolicyDecision, ThreatSummary, OverwatchEvent } from "../types";
+import { YaraExecutor } from "../engines/yara";
+import { RemoteExecutor } from "../engines/remote";
+import { PolicyManager } from "../lib/policy-manager";
+import { ExtractorRegistry } from "./extractors";
+export interface PipelineResult {
+    response: Record<string, unknown>;
+    evaluations: DetectionResult[];
+    threat_summary: ThreatSummary;
+    decision: PolicyDecision;
+    allowed: boolean;
+    contentLength?: number;
+    overwatchEvent?: OverwatchEvent;
+}
+export declare class HookPipeline {
+    private yaraExecutor;
+    private remoteExecutor;
+    private policyManager;
+    private onFirstInstall;
+    private extractorRegistry;
+    constructor(yaraExecutor: YaraExecutor, remoteExecutor: RemoteExecutor, policyManager: PolicyManager, onFirstInstall: (source: IDESource) => void, extractorRegistry: ExtractorRegistry);
+    process(source: IDESource, event: HookEvent, input: Record<string, unknown>): Promise<PipelineResult>;
+    private buildThreatSummary;
+}
+//# sourceMappingURL=hook-pipeline.d.ts.map

package/dist/pipeline/hook-pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-pipeline.d.ts","sourceRoot":"","sources":["../../src/pipeline/hook-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,eAAe,EACf,cAAc,EACd,aAAa,EAEb,cAAc,EACf,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAGtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,cAAc,EAAE,aAAa,CAAC;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,qBAAa,YAAY;IAErB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,aAAa;IACrB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,iBAAiB;gBAJjB,YAAY,EAAE,YAAY,EAC1B,cAAc,EAAE,cAAc,EAC9B,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,EAC3C,iBAAiB,EAAE,iBAAiB;IAGxC,OAAO,CACX,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,cAAc,CAAC;IAwI1B,OAAO,CAAC,kBAAkB;CA8D3B"}