@intutic/gate 1.10.1

package/dist/imagecheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"imagecheck.d.ts","sourceRoot":"","sources":["../src/imagecheck.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAUH,eAAO,MAAM,iBAAiB,sBAAsB,CAAA;AACpD,eAAO,MAAM,cAAc,mBAAmB,CAAA;AAC9C,eAAO,MAAM,kBAAkB,uBAAuB,CAAA;AACtD,eAAO,MAAM,eAAe,oBAAoB,CAAA;AAChD,eAAO,MAAM,iBAAiB,sBAAsB,CAAA;AACpD,eAAO,MAAM,sBAAsB,2BAA2B,CAAA;AAE9D,0CAA0C;AAC1C,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAA;IACX,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAA;CACf;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAE/C;AAED,MAAM,WAAW,WAAW;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CACzD;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,OAAO,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,QAAQ,EAAE,CAAA;CACnB;AAED,yDAAyD;AACzD,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAGhD;AAUD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,QAAQ,CAmBhE;AA+BD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAoChG;AAqBD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE,CAqBnE;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAuDrF;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAqC5F;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAchG;AAED,mDAAmD;AACnD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAE7E"}

package/dist/imagecheck.js

@@ -0,0 +1,286 @@
+/**
+ * Container image integrity checking.
+ *
+ * Port of `packages/intutic-clawde/intutic_clawde/gate/imagecheck.py`.
+ *
+ * Given a deploy command, find the manifests it would apply, extract every
+ * container image reference, and check each against an allowlist of approved
+ * sha256 digests. Nothing else in Intutic does this — no cosign, no sigstore,
+ * no admission webhook — so this check is the argument-level enforcement
+ * point for "deploy only pinned, reviewed images".
+ *
+ * Fail-closed on anything it cannot read. That is a deliberate departure from
+ * Intutic's fail-open default (WASM rules, hook-gate, the MCP proxy all fail
+ * open). The reasoning: a gate that cannot parse what it is being asked to
+ * approve does not know what it is approving, and "I could not read it" is
+ * not evidence of safety.
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { isAbsolute, join } from 'node:path';
+import { parseAllDocuments } from 'yaml';
+import { isDeploy } from './actions.js';
+import { shlexSplit } from './shlex.js';
+// Failure codes. Each becomes the operator-visible reason, so they are
+// specific rather than a single "policy violation".
+export const E_UNPINNED_LATEST = 'E_UNPINNED_LATEST';
+export const E_UNPINNED_TAG = 'E_UNPINNED_TAG';
+export const E_UNKNOWN_REGISTRY = 'E_UNKNOWN_REGISTRY';
+export const E_UNKNOWN_IMAGE = 'E_UNKNOWN_IMAGE';
+export const E_DIGEST_MISMATCH = 'E_DIGEST_MISMATCH';
+export const E_MANIFEST_UNPARSEABLE = 'E_MANIFEST_UNPARSEABLE';
+export function isPinned(img) {
+    return img.digest !== null;
+}
+/** The single line an operator sees on the dashboard. */
+export function verdictReason(v) {
+    if (v.ok)
+        return '';
+    return `[image-integrity] ${v.code}: ${v.detail}`;
+}
+function ok(images = []) {
+    return { ok: true, code: '', detail: '', images };
+}
+function fail(code, detail, images = []) {
+    return { ok: false, code, detail, images };
+}
+/**
+ * Parse `registry/repo:tag@sha256:...` into its parts.
+ *
+ * Docker's own rule for splitting registry from repository: the first path
+ * component is a registry host only if it contains a dot or a colon, or is
+ * exactly `localhost`. This function does not need to make that
+ * classification itself — it only needs to find the tag/digest boundary,
+ * which is a colon (or `@`) in the LAST path component; a colon earlier
+ * (a registry port, `localhost:5000/foo`) is left alone.
+ */
+export function parseImageRef(raw, source = '') {
+    let ref = raw.trim();
+    let digest = null;
+    let tag = null;
+    const at = ref.indexOf('@');
+    if (at !== -1) {
+        digest = ref.slice(at + 1);
+        ref = ref.slice(0, at);
+    }
+    const slash = ref.lastIndexOf('/');
+    const colon = ref.lastIndexOf(':');
+    if (colon > slash) {
+        tag = ref.slice(colon + 1);
+        ref = ref.slice(0, colon);
+    }
+    return { raw: raw.trim(), repository: ref, tag, digest, source };
+}
+/** Walk a parsed YAML document for container image references. */
+function extractImagesFromDoc(doc, source) {
+    const found = [];
+    const containerKeys = new Set(['containers', 'initContainers', 'ephemeralContainers']);
+    function walk(node) {
+        if (Array.isArray(node)) {
+            for (const item of node)
+                walk(item);
+            return;
+        }
+        if (node !== null && typeof node === 'object') {
+            for (const [key, value] of Object.entries(node)) {
+                if (containerKeys.has(key) && Array.isArray(value)) {
+                    for (const c of value) {
+                        if (c !== null && typeof c === 'object' && typeof c.image === 'string') {
+                            found.push(parseImageRef(c.image, source));
+                        }
+                    }
+                }
+                else {
+                    walk(value);
+                }
+            }
+        }
+    }
+    walk(doc);
+    return found;
+}
+/**
+ * Extract the -f/-k targets from a kubectl/helm command.
+ *
+ * Returns `{paths, readable}`. `readable` is false when the command applies
+ * something we cannot inspect — stdin (`-f -`), a URL, or a command we could
+ * not tokenise. That drives the fail-closed path.
+ */
+export function manifestPathsFromCommand(command) {
+    let tokens;
+    try {
+        tokens = shlexSplit(command);
+    }
+    catch {
+        return { paths: [], readable: false };
+    }
+    const paths = [];
+    let readable = true;
+    const flagsWithPath = new Set(['-f', '--filename', '-k', '--kustomize']);
+    let i = 0;
+    while (i < tokens.length) {
+        const tok = tokens[i];
+        let value = null;
+        if (flagsWithPath.has(tok) && i + 1 < tokens.length) {
+            value = tokens[i + 1];
+            i += 1;
+        }
+        else if (tok.startsWith('--filename=') || tok.startsWith('--kustomize=')) {
+            value = tok.split('=', 2)[1] ?? '';
+        }
+        else if (tok.startsWith('-f') && tok.length > 2 && !tok.startsWith('--')) {
+            value = tok.slice(2);
+        }
+        if (value !== null) {
+            if (value === '-' || value.startsWith('http://') || value.startsWith('https://')) {
+                readable = false;
+            }
+            else {
+                paths.push(value);
+            }
+        }
+        i += 1;
+    }
+    return { paths, readable };
+}
+/** Load every YAML document under a file or directory. */
+function loadYamlDocs(path) {
+    const docs = [];
+    if (statSync(path).isDirectory()) {
+        for (const fn of readdirSync(path).sort()) {
+            if (fn.endsWith('.yaml') || fn.endsWith('.yml')) {
+                docs.push(...loadYamlDocs(join(path, fn)));
+            }
+        }
+        return docs;
+    }
+    const text = readFileSync(path, 'utf-8');
+    for (const d of parseAllDocuments(text)) {
+        const value = d.toJS();
+        if (value !== null && value !== undefined)
+            docs.push(value);
+    }
+    return docs;
+}
+/**
+ * Catch images named directly on the command line.
+ *
+ * `kubectl set image deploy/catalogue catalogue=repo:latest` never touches a
+ * manifest, so the YAML path would miss it entirely.
+ */
+export function inlineImagesFromCommand(command) {
+    const out = [];
+    let tokens;
+    try {
+        tokens = shlexSplit(command);
+    }
+    catch {
+        return out;
+    }
+    for (const tok of tokens) {
+        const eq = tok.indexOf('=');
+        const afterEq = eq !== -1 ? tok.slice(eq + 1) : '';
+        const candidate = eq !== -1 && afterEq.includes('/') ? afterEq : tok;
+        // A bare word is only an image reference if it looks like one.
+        if (candidate.includes('/') && (candidate.includes(':') || candidate.includes('@'))) {
+            if (candidate.startsWith('http://') || candidate.startsWith('https://') || candidate.startsWith('-')) {
+                continue;
+            }
+            out.push(parseImageRef(candidate, '<command line>'));
+        }
+    }
+    return out;
+}
+/** Evaluate parsed references against the allowlist. First failure wins. */
+export function checkImages(images, policy) {
+    const requireDigest = policy.require_digest ?? true;
+    const allowedRegistries = policy.registries_allowed ?? [];
+    const known = policy.images ?? {};
+    const all = [...images];
+    for (const img of images) {
+        const where = img.source ? ` (in ${img.source})` : '';
+        // 1. Unpinned by tag — `:latest` or no tag at all.
+        if (img.digest === null && (img.tag === null || img.tag === 'latest')) {
+            const shown = img.tag ? img.raw : `${img.raw} (no tag -> :latest)`;
+            return fail(E_UNPINNED_LATEST, `${shown} resolves to a mutable tag and is not pinned to an approved sha256 digest${where}`, all);
+        }
+        // 2. A real tag, but still no digest.
+        if (img.digest === null && requireDigest) {
+            return fail(E_UNPINNED_TAG, `${img.raw} is pinned only by tag; policy requires an @sha256 digest${where}`, all);
+        }
+        // 3. Registry not on the allowlist.
+        if (allowedRegistries.length > 0 && !allowedRegistries.some((r) => img.repository.startsWith(r))) {
+            return fail(E_UNKNOWN_REGISTRY, `${img.repository} is not in an approved registry (${allowedRegistries.join(', ')})${where}`, all);
+        }
+        // 4. Approved registry, but this image was never reviewed.
+        const entry = known[img.repository];
+        if (entry === undefined) {
+            return fail(E_UNKNOWN_IMAGE, `${img.repository} has no entry in the image allowlist${where}`, all);
+        }
+        // 5. Pinned to a digest nobody approved.
+        const approved = entry.approved_digests ?? [];
+        if (img.digest === null || !approved.includes(img.digest)) {
+            return fail(E_DIGEST_MISMATCH, `${img.repository} is pinned to ${img.digest}, which is not an approved digest for this image${where}`, all);
+        }
+    }
+    return ok(all);
+}
+/** Full check for a deploy command. The entry point the gate calls. */
+export function checkCommand(command, repoRoot, policy) {
+    const { paths, readable } = manifestPathsFromCommand(command);
+    const images = inlineImagesFromCommand(command);
+    if (!readable) {
+        return fail(E_MANIFEST_UNPARSEABLE, 'the deploy reads from stdin or a remote URL, so its images cannot be verified before it runs');
+    }
+    for (const p of paths) {
+        const full = isAbsolute(p) ? p : join(repoRoot, p);
+        if (!existsSync(full)) {
+            return fail(E_MANIFEST_UNPARSEABLE, `${p} does not exist, so its images cannot be verified`);
+        }
+        let docs;
+        try {
+            docs = loadYamlDocs(full);
+        }
+        catch (exc) {
+            const name = exc instanceof Error ? exc.constructor.name : 'Error';
+            return fail(E_MANIFEST_UNPARSEABLE, `${p} could not be parsed as YAML (${name}), so its images cannot be verified`);
+        }
+        for (const doc of docs) {
+            images.push(...extractImagesFromDoc(doc, p));
+        }
+    }
+    // A deploy naming no image at all is not a provenance decision to make here
+    // (`kubectl rollout restart`, `kubectl apply` of a ConfigMap). Let it pass;
+    // the ordering floor and the snapshot rules still apply.
+    if (images.length === 0)
+        return ok([]);
+    return checkImages(images, policy);
+}
+/**
+ * Check a manifest at authoring time, before it is ever applied.
+ *
+ * Lets the dashboard show the bad image being *written* a full turn before it
+ * is *applied* — the write is flagged, the apply is blocked.
+ */
+export function checkWrittenManifest(path, content, policy) {
+    let docs;
+    try {
+        docs = parseAllDocuments(content)
+            .map((d) => d.toJS())
+            .filter((v) => v !== null && v !== undefined);
+    }
+    catch (exc) {
+        const name = exc instanceof Error ? exc.constructor.name : 'Error';
+        return fail(E_MANIFEST_UNPARSEABLE, `${path} is not valid YAML (${name})`);
+    }
+    const images = [];
+    for (const doc of docs)
+        images.push(...extractImagesFromDoc(doc, path));
+    if (images.length === 0)
+        return ok([]);
+    return checkImages(images, policy);
+}
+/** True when this call should be image-checked. */
+export function isDeployCommand(toolName, toolInput) {
+    return isDeploy(toolName, toolInput);
+}
+//# sourceMappingURL=imagecheck.js.map

package/dist/imagecheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imagecheck.js","sourceRoot":"","sources":["../src/imagecheck.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvC,uEAAuE;AACvE,oDAAoD;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAA;AACpD,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAA;AAC9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAA;AACtD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAChD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAA;AACpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAA;AAc9D,MAAM,UAAU,QAAQ,CAAC,GAAa;IACpC,OAAO,GAAG,CAAC,MAAM,KAAK,IAAI,CAAA;AAC5B,CAAC;AAeD,yDAAyD;AACzD,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,IAAI,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,CAAA;IACnB,OAAO,qBAAqB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAA;AACnD,CAAC;AAED,SAAS,EAAE,CAAC,SAAqB,EAAE;IACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAA;AACnD,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,MAAc,EAAE,SAAqB,EAAE;IACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAAM,GAAG,EAAE;IACpD,IAAI,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IACpB,IAAI,MAAM,GAAkB,IAAI,CAAA;IAChC,IAAI,GAAG,GAAkB,IAAI,CAAA;IAE7B,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC3B,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QAC1B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACxB,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAClB,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC1B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC3B,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAClE,CAAC;AAED,kEAAkE;AAClE,SAAS,oBAAoB,CAAC,GAAY,EAAE,MAAc;IACxD,MAAM,KAAK,GAAe,EAAE,CAAA;IAC5B,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,CAAC,CAAA;IAEtF,SAAS,IAAI,CAAC,IAAa;QACzB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,MAAM,IAAI,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YACnC,OAAM;QACR,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;gBAC3E,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;wBACtB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAQ,CAA6B,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;4BACpG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAE,CAA6B,CAAC,KAAe,EAAE,MAAM,CAAC,CAAC,CAAA;wBACnF,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,KAAK,CAAC,CAAA;gBACb,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,IAAI,MAAgB,CAAA;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IACvC,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,QAAQ,GAAG,IAAI,CAAA;IACnB,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAA;IAExE,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAE,CAAA;QACtB,IAAI,KAAK,GAAkB,IAAI,CAAA;QAC/B,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YACpD,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,CAAA;YACtB,CAAC,IAAI,CAAC,CAAA;QACR,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3E,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACpC,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACtB,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjF,QAAQ,GAAG,KAAK,CAAA;YAClB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACnB,CAAC;QACH,CAAC;QACD,CAAC,IAAI,CAAC,CAAA;IACR,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;AAC5B,CAAC;AAED,0DAA0D;AAC1D,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAc,EAAE,CAAA;IAC1B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACjC,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,IAAI,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACxC,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;QACtB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,GAAG,GAAe,EAAE,CAAA;IAC1B,IAAI,MAAgB,CAAA;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,MAAM,OAAO,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAClD,MAAM,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;QACpE,+DAA+D;QAC/D,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACpF,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrG,SAAQ;YACV,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAC,MAA2B,EAAE,MAAmB;IAC1E,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAA;IACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAA;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAA;IACjC,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAA;IAEvB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAErD,mDAAmD;QACnD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;YACtE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,sBAAsB,CAAA;YAClE,OAAO,IAAI,CACT,iBAAiB,EACjB,GAAG,KAAK,4EAA4E,KAAK,EAAE,EAC3F,GAAG,CACJ,CAAA;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,aAAa,EAAE,CAAC;YACzC,OAAO,IAAI,CACT,cAAc,EACd,GAAG,GAAG,CAAC,GAAG,4DAA4D,KAAK,EAAE,EAC7E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,oCAAoC;QACpC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,OAAO,IAAI,CACT,kBAAkB,EAClB,GAAG,GAAG,CAAC,UAAU,oCAAoC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,EAC5F,GAAG,CACJ,CAAA;QACH,CAAC;QAED,2DAA2D;QAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,eAAe,EAAE,GAAG,GAAG,CAAC,UAAU,uCAAuC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;QACpG,CAAC;QAED,yCAAyC;QACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAA;QAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,CACT,iBAAiB,EACjB,GAAG,GAAG,CAAC,UAAU,iBAAiB,GAAG,CAAC,MAAM,mDAAmD,KAAK,EAAE,EACtG,GAAG,CACJ,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC,GAAG,CAAC,CAAA;AAChB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAmB;IACjF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAA;IAE/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CACT,sBAAsB,EACtB,8FAA8F,CAC/F,CAAA;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAClD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,sBAAsB,EAAE,GAAG,CAAC,mDAAmD,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,IAAe,CAAA;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAA;YAClE,OAAO,IAAI,CACT,sBAAsB,EACtB,GAAG,CAAC,iCAAiC,IAAI,qCAAqC,CAC/E,CAAA;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,yDAAyD;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;IAEtC,OAAO,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAe,EAAE,MAAmB;IACrF,IAAI,IAAe,CAAA;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAA;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAA;QAClE,OAAO,IAAI,CAAC,sBAAsB,EAAE,GAAG,IAAI,uBAAuB,IAAI,GAAG,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,MAAM,GAAe,EAAE,CAAA;IAC7B,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;IACvE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;IACtC,OAAO,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,SAAkB;IAClE,OAAO,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;AACtC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `@intutic/gate` — pre-execution tool gate for JS/TS agent frameworks
+ * without a shipped Intutic harness.
+ *
+ * Port of `packages/intutic-clawde/intutic_clawde/gate/` (Python). Framework
+ * adapters (`@intutic/gate/mastra`, `@intutic/gate/vercel`,
+ * `@intutic/gate/dsh`) are sibling phases built on top of this core; see
+ * README.md for the subpath convention they follow.
+ */
+export { classify, isDeploy, isTest, touchesInfra } from './actions.js';
+export { GateClient } from './client.js';
+export type { GateClientOptions, GateResponse } from './client.js';
+export { GateError, GateConnectionError, IntuticGateRefusal } from './errors.js';
+export { Gate, READ_ONLY_TOOLS, install, active } from './gate.js';
+export type { GateConfig, ToolInput } from './gate.js';
+export { intuticHeaders } from './headers.js';
+export type { IntuticHeadersOptions } from './headers.js';
+export { checkCommand, checkImages, checkWrittenManifest, isDeployCommand, isPinned, manifestPathsFromCommand, parseImageRef, verdictReason, } from './imagecheck.js';
+export type { ImagePolicy, ImageRef, Verdict as ImageVerdict } from './imagecheck.js';
+export { Snapshot, evaluate, guardDisabledFromEnv, loadSnapshot, snapshotPath, SEV_BLOCK, SEV_SHADOW, SEV_WARN, } from './snapshot.js';
+export type { Decision, Rule, RuleSubject, Severity, SnapshotState } from './snapshot.js';
+export { firstMatch, parseRules, ruleMatches, serialiseToolInput, supportsArgPatterns, fetchRules, ACTION_BLOCK, ACTION_WARN, ACTION_APPROVAL, } from './soprules.js';
+export type { SopRule } from './soprules.js';
+export { wrapTool, wrapTools } from './wrapTools.js';
+export type { AnyFn, ExecutableTool, WrapToolOptions } from './wrapTools.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEvE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAElE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAClE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAEtD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,YAAY,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAEzD,OAAO,EACL,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,QAAQ,EACR,wBAAwB,EACxB,aAAa,EACb,aAAa,GACd,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAErF,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,UAAU,EACV,QAAQ,GACT,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAEzF,OAAO,EACL,UAAU,EACV,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAE5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AACpD,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/index.js

@@ -0,0 +1,19 @@
+/**
+ * `@intutic/gate` — pre-execution tool gate for JS/TS agent frameworks
+ * without a shipped Intutic harness.
+ *
+ * Port of `packages/intutic-clawde/intutic_clawde/gate/` (Python). Framework
+ * adapters (`@intutic/gate/mastra`, `@intutic/gate/vercel`,
+ * `@intutic/gate/dsh`) are sibling phases built on top of this core; see
+ * README.md for the subpath convention they follow.
+ */
+export { classify, isDeploy, isTest, touchesInfra } from './actions.js';
+export { GateClient } from './client.js';
+export { GateError, GateConnectionError, IntuticGateRefusal } from './errors.js';
+export { Gate, READ_ONLY_TOOLS, install, active } from './gate.js';
+export { intuticHeaders } from './headers.js';
+export { checkCommand, checkImages, checkWrittenManifest, isDeployCommand, isPinned, manifestPathsFromCommand, parseImageRef, verdictReason, } from './imagecheck.js';
+export { Snapshot, evaluate, guardDisabledFromEnv, loadSnapshot, snapshotPath, SEV_BLOCK, SEV_SHADOW, SEV_WARN, } from './snapshot.js';
+export { firstMatch, parseRules, ruleMatches, serialiseToolInput, supportsArgPatterns, fetchRules, ACTION_BLOCK, ACTION_WARN, ACTION_APPROVAL, } from './soprules.js';
+export { wrapTool, wrapTools } from './wrapTools.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEvE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAGlE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAG7C,OAAO,EACL,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,QAAQ,EACR,wBAAwB,EACxB,aAAa,EACb,aAAa,GACd,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,UAAU,EACV,QAAQ,GACT,MAAM,eAAe,CAAA;AAGtB,OAAO,EACL,UAAU,EACV,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA"}