@intutic/gate 2.0.0 → 2.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +18 -10
- package/dist/actions.d.ts.map +1 -1
- package/dist/actions.js +2 -0
- package/dist/actions.js.map +1 -1
- package/dist/dsh.d.ts +27 -2
- package/dist/dsh.d.ts.map +1 -1
- package/dist/dsh.js +23 -1
- package/dist/dsh.js.map +1 -1
- package/dist/eve.d.ts +81 -14
- package/dist/eve.d.ts.map +1 -1
- package/dist/eve.js +93 -10
- package/dist/eve.js.map +1 -1
- package/dist/gate.d.ts +3 -4
- package/dist/gate.d.ts.map +1 -1
- package/dist/gate.js +21 -10
- package/dist/gate.js.map +1 -1
- package/dist/harness.d.ts +86 -31
- package/dist/harness.d.ts.map +1 -1
- package/dist/harness.js +103 -28
- package/dist/harness.js.map +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js.map +1 -1
- package/dist/managedAgents.d.ts +35 -6
- package/dist/managedAgents.d.ts.map +1 -1
- package/dist/managedAgents.js +26 -6
- package/dist/managedAgents.js.map +1 -1
- package/dist/mastra.d.ts +5 -2
- package/dist/mastra.d.ts.map +1 -1
- package/dist/mastra.js +3 -1
- package/dist/mastra.js.map +1 -1
- package/dist/openai.d.ts +5 -3
- package/dist/openai.d.ts.map +1 -1
- package/dist/openai.js +5 -3
- package/dist/openai.js.map +1 -1
- package/dist/registry.d.ts +18 -0
- package/dist/registry.d.ts.map +1 -0
- package/dist/registry.js +24 -0
- package/dist/registry.js.map +1 -0
- package/dist/snapshot.d.ts +8 -0
- package/dist/snapshot.d.ts.map +1 -1
- package/dist/snapshot.js +17 -1
- package/dist/snapshot.js.map +1 -1
- package/dist/ssoGroups.d.ts +44 -0
- package/dist/ssoGroups.d.ts.map +1 -0
- package/dist/ssoGroups.js +81 -0
- package/dist/ssoGroups.js.map +1 -0
- package/dist/vercel.d.ts +3 -3
- package/dist/vercel.d.ts.map +1 -1
- package/dist/vercel.js +1 -1
- package/dist/vercel.js.map +1 -1
- package/dist/workflow.d.ts +153 -39
- package/dist/workflow.d.ts.map +1 -1
- package/dist/workflow.js +162 -49
- package/dist/workflow.js.map +1 -1
- package/dist/wrapTools.d.ts +1 -1
- package/dist/wrapTools.d.ts.map +1 -1
- package/dist/wrapTools.js +1 -1
- package/dist/wrapTools.js.map +1 -1
- package/package.json +11 -10
package/dist/gate.d.ts
CHANGED
|
@@ -9,8 +9,9 @@
|
|
|
9
9
|
* PreToolUse hook for them. This package is that enforcement point: the
|
|
10
10
|
* missing adapter, written against Intutic's own published gate contract.
|
|
11
11
|
*
|
|
12
|
-
*
|
|
12
|
+
* Five tiers, in order — identical precedence to the Python SDK:
|
|
13
13
|
*
|
|
14
|
+
* A0 SSO group policy from the policy snapshot unknown groups refused
|
|
14
15
|
* A1 policy snapshot port of intuticGate() fails CLOSED
|
|
15
16
|
* A3 SOP rules authored in the product fails OPEN (A2 covers it)
|
|
16
17
|
* A2 image integrity local check fails CLOSED
|
|
@@ -107,7 +108,5 @@ export declare class Gate {
|
|
|
107
108
|
/** Throws {@link IntuticGateRefusal} if this call must not run. Resolves to allow. */
|
|
108
109
|
guard(toolName: string, toolInput: ToolInput): Promise<void>;
|
|
109
110
|
}
|
|
110
|
-
export
|
|
111
|
-
export declare function active(): Gate | null;
|
|
112
|
-
export {};
|
|
111
|
+
export { install, active } from './registry.js';
|
|
113
112
|
//# sourceMappingURL=gate.d.ts.map
|
package/dist/gate.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAKH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAGzC;yDACyD;AACzD,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAM9C,CAAA;AAEF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAED,UAAU,cAAc;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,OAAO,CAAA;CACrB;AAaD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAE/C,qBAAa,IAAI;IACf,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAAA;IAClC,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,iBAAiB,CAAQ;IACjC,OAAO,CAAC,OAAO,CAAsC;IACrD;8EAC0E;IAC1E,OAAO,CAAC,SAAS,CAAkC;gBAEvC,GAAG,GAAE,UAAe,EAAE,MAAM,GAAE,UAAU,GAAG,IAAW;IAKlE,OAAO,CAAC,YAAY;IAOpB,WAAW,IAAI,QAAQ,CAAC,QAAQ;IAOhC;;;;;;;OAOG;IACH,SAAS,IAAI,UAAU,CAAC,WAAW;IAwBnC;;;;;;OAMG;IACG,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAwBlC,IAAI;IAalB;;;;OAIG;YACW,wBAAwB;IAWtC,sFAAsF;IAChF,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;CAqHnE;AAwBD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA"}
|
package/dist/gate.js
CHANGED
|
@@ -9,8 +9,9 @@
|
|
|
9
9
|
* PreToolUse hook for them. This package is that enforcement point: the
|
|
10
10
|
* missing adapter, written against Intutic's own published gate contract.
|
|
11
11
|
*
|
|
12
|
-
*
|
|
12
|
+
* Five tiers, in order — identical precedence to the Python SDK:
|
|
13
13
|
*
|
|
14
|
+
* A0 SSO group policy from the policy snapshot unknown groups refused
|
|
14
15
|
* A1 policy snapshot port of intuticGate() fails CLOSED
|
|
15
16
|
* A3 SOP rules authored in the product fails OPEN (A2 covers it)
|
|
16
17
|
* A2 image integrity local check fails CLOSED
|
|
@@ -50,6 +51,7 @@ import { IntuticGateRefusal } from './errors.js';
|
|
|
50
51
|
import * as imagecheck from './imagecheck.js';
|
|
51
52
|
import * as snapshot from './snapshot.js';
|
|
52
53
|
import * as soprules from './soprules.js';
|
|
54
|
+
import { evaluateSsoGroupClearance } from './ssoGroups.js';
|
|
53
55
|
/** Tools that cannot change anything. They still get the local snapshot check
|
|
54
56
|
* (Tier A1), but skip the remote gate call (Tier B). */
|
|
55
57
|
export const READ_ONLY_TOOLS = new Set([
|
|
@@ -171,6 +173,21 @@ export class Gate {
|
|
|
171
173
|
const target = String(toolInput.path ?? toolInput.file_path ?? '');
|
|
172
174
|
const command = String(toolInput.command ?? '');
|
|
173
175
|
await this.reportSnapshotHealthOnce(toolName);
|
|
176
|
+
// ---- Tier A0: SSO group policy, from the snapshot ------------------
|
|
177
|
+
//
|
|
178
|
+
// The workspace's group policy decided for the member the snapshot was
|
|
179
|
+
// issued to — the same evaluator, and so the same answer, as the control
|
|
180
|
+
// plane's hook gate. Not skippable by INTUTIC_GUARD_DISABLE: it is the
|
|
181
|
+
// workspace's own policy, not the destructive family.
|
|
182
|
+
const sso = this.getSnapshot().ssoGroups;
|
|
183
|
+
if (sso) {
|
|
184
|
+
const d = evaluateSsoGroupClearance(sso.policy, toolName, sso.member ? sso.member.ssoGroups : null);
|
|
185
|
+
if (d.clearance !== 'GRANTED') {
|
|
186
|
+
const reason = `${d.reason} [${d.ruleId}]`;
|
|
187
|
+
await this.emit('tool_blocked', toolName, reason, toolInput);
|
|
188
|
+
throw new IntuticGateRefusal(reason, 'SSO_GROUP');
|
|
189
|
+
}
|
|
190
|
+
}
|
|
174
191
|
// ---- Tier A1: policy snapshot -------------------------------------
|
|
175
192
|
const disabled = snapshot.guardDisabledFromEnv();
|
|
176
193
|
if (disabled) {
|
|
@@ -262,13 +279,7 @@ function trimLeadingSlashes(s) {
|
|
|
262
279
|
function joinPath(a, b) {
|
|
263
280
|
return `${trimTrailingSlashes(a)}/${trimLeadingSlashes(b)}`;
|
|
264
281
|
}
|
|
265
|
-
//
|
|
266
|
-
//
|
|
267
|
-
|
|
268
|
-
export function install(gate) {
|
|
269
|
-
_active = gate;
|
|
270
|
-
}
|
|
271
|
-
export function active() {
|
|
272
|
-
return _active;
|
|
273
|
-
}
|
|
282
|
+
// The process-wide active gate lives in registry.ts, which imports no Node.js
|
|
283
|
+
// built-ins (see that module's doc); re-exported so the API is unchanged.
|
|
284
|
+
export { install, active } from './registry.js';
|
|
274
285
|
//# sourceMappingURL=gate.js.map
|
package/dist/gate.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAA;AAE1D;yDACyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IAC1D,WAAW;IACX,YAAY;IACZ,MAAM;IACN,KAAK;IACL,MAAM;CACP,CAAC,CAAA;AAoBF,SAAS,aAAa,CAAC,GAAe;IACpC,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,GAAG;QAC7B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;QAClC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,+BAA+B;QACnE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;KACrC,CAAA;AACH,CAAC;AAID,MAAM,OAAO,IAAI;IACN,GAAG,CAAgB;IACnB,MAAM,CAAmB;IAC1B,SAAS,GAA6B,IAAI,CAAA;IAC1C,iBAAiB,GAAG,KAAK,CAAA;IACzB,OAAO,GAAkC,IAAI,CAAA;IACrD;8EAC0E;IAClE,SAAS,GAA8B,IAAI,CAAA;IAEnD,YAAY,MAAkB,EAAE,EAAE,SAA4B,IAAI;QAChE,IAAI,CAAC,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAEO,YAAY;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAA;QAChC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC/D,CAAC;IAED,uEAAuE;IAEvE,WAAW;QACT,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED;;;;;;;OAOG;IACH,SAAS;QACP,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;YAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,UAAU,CAAC,sBAAsB,iCAAiC;oBACrF,GAAG,IAAI,qEAAqE,EAC9E,UAAU,CAAC,sBAAsB,CAClC,CAAA;YACH,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA2B,CAAA;YAClF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAA;gBAClE,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,UAAU,CAAC,sBAAsB,wBAAwB,IAAI,MAAM;oBACtF,eAAe,IAAI,GAAG,EACxB,UAAU,CAAC,sBAAsB,CAClC,CAAA;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,GAA8B,IAAI,CAAA;YAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACpG,CAAC;YACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,mEAAmE;gBACnE,+CAA+C;gBAC/C,MAAM,IAAI,CAAC,IAAI,CACb,cAAc,EACd,WAAW,EACX,qEAAqE;oBACnE,oCAAoC,CACvC,CAAA;gBACD,OAAO,GAAG,EAAE,CAAA;YACd,CAAC;YACD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAA;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED,wEAAwE;IAEhE,KAAK,CAAC,IAAI,CAChB,KAAa,EACb,IAAY,EACZ,MAAM,GAAG,EAAE,EACX,SAAmB,EACnB,UAAmB,EACnB,QAAiB;QAEjB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,wBAAwB,CAAC,IAAY;QACjD,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAM;QAClC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAA;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;QAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;IAED,wEAAwE;IAExE,sFAAsF;IACtF,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,SAAoB;QAChD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAM;QAE7B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QAClE,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;QAE/C,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAA;QAE7C,uEAAuE;QACvE,EAAE;QACF,uEAAuE;QACvE,yEAAyE;QACzE,uEAAuE;QACvE,sDAAsD;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,CAAA;QACxC,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,CAAC,GAAG,yBAAyB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACnG,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,CAAA;gBAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;gBAC5D,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;YACnD,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,oBAAoB,EAAE,CAAA;QAChD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,IAAI,CACb,iBAAiB,EACjB,QAAQ,EACR,4FAA4F,CAC7F,CAAA;QACH,CAAC;QAED,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAA;QACpF,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;YAC9D,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAChE,CAAC;aAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACpE,CAAC;QAED,uEAAuE;QACvE,EAAE;QACF,uEAAuE;QACvE,yEAAyE;QACzE,kBAAkB;QAClB,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC/E,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,EAAE,CAAA;gBAChD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;oBAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;oBAC5D,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;gBAClD,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,eAAe,EAAE,CAAC;oBAC7C,kEAAkE;oBAClE,qCAAqC;oBACrC,MAAM,IAAI,CAAC,IAAI,CACb,cAAc,EACd,QAAQ,EACR,GAAG,MAAM,wDAAwD,EACjE,SAAS,CACV,CAAA;oBACD,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;gBAC3D,CAAC;gBACD,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;YAC9D,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,IAAI,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;YACrF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAA;gBACxF,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;gBAC5D,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;YACpD,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,sEAAsE;QACtE,uCAAuC;QACvC,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC7D,MAAM,CAAC,GAAG,UAAU,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;YAC9F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,MAAM,IAAI,CAAC,IAAI,CACb,cAAc,EACd,QAAQ,EACR,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,oDAAoD,EAClF,SAAS,EACT,SAAS,EACT,MAAM,CACP,CAAA;YACH,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,EAAE;QACF,sEAAsE;QACtE,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC5D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;gBAClF,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC;CACF;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACvD,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,GAAG,EAAE,CAAA;IAC3C,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS;IACnC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,OAAO,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG;QAAE,KAAK,EAAE,CAAA;IACpD,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7D,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA"}
|
package/dist/harness.d.ts
CHANGED
|
@@ -12,7 +12,9 @@
|
|
|
12
12
|
*
|
|
13
13
|
* `@ai-sdk/harness@1.0.75` (plus `@ai-sdk/harness-claude-code@1.0.78` and
|
|
14
14
|
* `@ai-sdk/harness-grok-build@1.0.12`) were installed and their shipped
|
|
15
|
-
* `.d.ts`/compiled source read directly (not inferred from docs alone)
|
|
15
|
+
* `.d.ts`/compiled source read directly (not inferred from docs alone);
|
|
16
|
+
* points 1-3 re-read on `@ai-sdk/harness@1.0.138` (the current devDependency,
|
|
17
|
+
* on `ai@7.0.127`) — only the continuation element type changed (point 2):
|
|
16
18
|
*
|
|
17
19
|
* 1. **The `toolApproval` setting is STATIC.** `HarnessAgentSettings.toolApproval`
|
|
18
20
|
* is `HarnessAgentToolApprovalConfiguration = Readonly<Record<string,
|
|
@@ -25,9 +27,12 @@
|
|
|
25
27
|
* let the turn pause, and answer each pending approval with the gate
|
|
26
28
|
* (see {@link intuticApprovalResponder}).
|
|
27
29
|
* 2. **The portable answer path is continuation-based.**
|
|
28
|
-
* `
|
|
29
|
-
*
|
|
30
|
-
* `
|
|
30
|
+
* `continueTurn`/`continueGenerate`/`continueStream` accept
|
|
31
|
+
* `toolApprovalContinuations` (dist/agent/index.d.ts) — in 1.0.75 an array
|
|
32
|
+
* of `HarnessAgentToolApprovalContinuation` (`{ approvalResponse, toolCall
|
|
33
|
+
* }`), since 1.0.101 an array of bare `ToolApprovalResponse` parts (the
|
|
34
|
+
* old type is no longer exported in 1.0.138); see
|
|
35
|
+
* {@link HarnessToolApprovalContinuation} for how one value serves both. The adapter-session
|
|
31
36
|
* method `session.submitToolApproval?({approvalId, approved, reason})` is
|
|
32
37
|
* OPTIONAL (`dist/index.d.ts` — `HarnessV1PromptControl`), and support
|
|
33
38
|
* genuinely varies per adapter: `@ai-sdk/harness-claude-code@1.0.78`
|
|
@@ -36,14 +41,24 @@
|
|
|
36
41
|
* responder on the continuation path and treats `submitToolApproval` as an
|
|
37
42
|
* optimization when present ({@link intuticSubmitApprovals}).
|
|
38
43
|
* 3. **Built-in sandbox tools are NOT governed by `toolApproval` at all.**
|
|
39
|
-
* They are governed
|
|
44
|
+
* They are governed by `permissionMode: 'allow-reads' | 'allow-edits'
|
|
40
45
|
* | 'allow-all'`, which **defaults to `'allow-all'`** — the shipped doc
|
|
41
46
|
* comment says so verbatim: "Defaults to `'allow-all'`, preserving the
|
|
42
|
-
* existing bypass-permissions behavior unless users opt in."
|
|
43
|
-
*
|
|
44
|
-
*
|
|
45
|
-
*
|
|
46
|
-
*
|
|
47
|
+
* existing bypass-permissions behavior unless users opt in." Under
|
|
48
|
+
* `'allow-all'` nothing pauses. Under the stricter modes the mode decides
|
|
49
|
+
* WHICH built-ins pause, and each paused call is then a genuine per-call
|
|
50
|
+
* approval this gate answers (TD-415, corrected): the
|
|
51
|
+
* `@ai-sdk/harness-claude-code` bridge (`dist/bridge/index.mjs`,
|
|
52
|
+
* `createPermissionSettings`/`nativeToolRequiresApproval`) adds `ask` rules
|
|
53
|
+
* for bash-kind tools (`Bash`, `Monitor`) under `'allow-edits'`, and for
|
|
54
|
+
* edit- and bash-kind tools under `'allow-reads'`, emitting a
|
|
55
|
+
* `tool-approval-request` and blocking on the host's answer;
|
|
56
|
+
* `@ai-sdk/harness/agent` records it as a pending approval with
|
|
57
|
+
* `kind: 'builtin'`, pauses the turn, and delivers the continuation's
|
|
58
|
+
* decision through the adapter's `submitToolApproval`. What never pauses:
|
|
59
|
+
* read-kind built-ins (Read/Glob/Grep/WebFetch/...) in ANY mode, and
|
|
60
|
+
* write/edit under `'allow-edits'`. {@link recommendedHarnessSettings}
|
|
61
|
+
* exists to steer callers off the `'allow-all'` default.
|
|
47
62
|
* 4. **Execution is server-side, in a sandbox.** The agent's tools run inside
|
|
48
63
|
* a microVM (`@ai-sdk/sandbox-vercel` and friends), NOT on the machine
|
|
49
64
|
* where the Intutic proxy runs — the laptop proxy cannot see sandbox
|
|
@@ -68,7 +83,8 @@
|
|
|
68
83
|
*/
|
|
69
84
|
import { type Gate, type ToolInput } from './gate.js';
|
|
70
85
|
/** Structural copy of `ai`'s `ToolApprovalResponse` prompt part (re-exported
|
|
71
|
-
* from `@ai-sdk/provider-utils
|
|
86
|
+
* from `@ai-sdk/provider-utils` — confirmed field-for-field on 5.0.27 and
|
|
87
|
+
* 5.0.53). This is
|
|
72
88
|
* the part a `role: 'tool'` message carries to answer an approval request. */
|
|
73
89
|
export interface HarnessToolApprovalResponse {
|
|
74
90
|
type: 'tool-approval-response';
|
|
@@ -77,7 +93,7 @@ export interface HarnessToolApprovalResponse {
|
|
|
77
93
|
reason?: string;
|
|
78
94
|
providerExecuted?: boolean;
|
|
79
95
|
}
|
|
80
|
-
/** Structural copy of the `toolCall` member of `@ai-sdk/harness`'s
|
|
96
|
+
/** Structural copy of the `toolCall` member of `@ai-sdk/harness` <= 1.0.100's
|
|
81
97
|
* `HarnessAgentToolApprovalContinuation` (dist/agent/index.d.ts). */
|
|
82
98
|
export interface HarnessToolCallPart {
|
|
83
99
|
readonly type: 'tool-call';
|
|
@@ -86,10 +102,24 @@ export interface HarnessToolCallPart {
|
|
|
86
102
|
readonly input: unknown;
|
|
87
103
|
readonly providerExecuted?: boolean;
|
|
88
104
|
}
|
|
89
|
-
/**
|
|
90
|
-
*
|
|
91
|
-
*
|
|
92
|
-
|
|
105
|
+
/**
|
|
106
|
+
* One element of the `toolApprovalContinuations` array
|
|
107
|
+
* `continueGenerate`/`continueStream` accept — shaped to satisfy BOTH
|
|
108
|
+
* upstream contracts, because the shape changed in a patch release:
|
|
109
|
+
*
|
|
110
|
+
* - `@ai-sdk/harness` <= 1.0.100 reads `HarnessAgentToolApprovalContinuation`
|
|
111
|
+
* = `{ approvalResponse, toolCall }`.
|
|
112
|
+
* - `@ai-sdk/harness` >= 1.0.101 (2026-09-03) reads a bare
|
|
113
|
+
* `ToolApprovalResponse` and keys it by its top-level `approvalId`; an
|
|
114
|
+
* element without one is silently ignored and the paused turn never
|
|
115
|
+
* resumes (observed live, `uat/evidence/live-verify/harness-docker/`).
|
|
116
|
+
* Still the contract in 1.0.138, whose `collectHarnessAgentToolApproval
|
|
117
|
+
* Continuations` also returns bare `ToolApprovalResponse` parts.
|
|
118
|
+
*
|
|
119
|
+
* So each continuation IS the `tool-approval-response` part (top-level
|
|
120
|
+
* fields) and also carries `approvalResponse`/`toolCall` for older runtimes.
|
|
121
|
+
*/
|
|
122
|
+
export interface HarnessToolApprovalContinuation extends HarnessToolApprovalResponse {
|
|
93
123
|
readonly approvalResponse: HarnessToolApprovalResponse;
|
|
94
124
|
readonly toolCall: HarnessToolCallPart;
|
|
95
125
|
}
|
|
@@ -255,9 +285,10 @@ export interface IntuticStaticApprovalsOptions {
|
|
|
255
285
|
* Two scope limits, stated plainly:
|
|
256
286
|
*
|
|
257
287
|
* - This covers CUSTOM host-executed tools only. Built-in sandbox tools
|
|
258
|
-
* (read/write/edit/bash/...) never consult `toolApproval` —
|
|
259
|
-
*
|
|
260
|
-
*
|
|
288
|
+
* (read/write/edit/bash/...) never consult `toolApproval` — which of them
|
|
289
|
+
* pause is decided by `permissionMode` (default `'allow-all'`: none), and
|
|
290
|
+
* a paused built-in reaches {@link intuticApprovalResponder} the same way
|
|
291
|
+
* a custom tool's approval does. See {@link recommendedHarnessSettings}.
|
|
261
292
|
* - A tool absent from this record has status `undefined` =
|
|
262
293
|
* "not-applicable" and runs WITHOUT any approval pause. Pass the same
|
|
263
294
|
* `tools` record you give the agent (or every tool name), not a subset.
|
|
@@ -340,11 +371,13 @@ export interface RecommendedHarnessSettings {
|
|
|
340
371
|
* honour. So this recommendation is never a silent no-op for any
|
|
341
372
|
* adapter that accepts it at all.
|
|
342
373
|
*
|
|
343
|
-
*
|
|
344
|
-
*
|
|
345
|
-
*
|
|
346
|
-
*
|
|
347
|
-
*
|
|
374
|
+
* This is a coarse, all-or-nothing exclusion decided once at
|
|
375
|
+
* session-construction time — never a `Gate.guard()`-evaluated verdict per
|
|
376
|
+
* call. A workspace that genuinely needs `bash` passes `filterBash: false`
|
|
377
|
+
* and keeps `permissionMode: 'allow-edits'` (or `'allow-reads'`): every
|
|
378
|
+
* bash call then pauses as a builtin approval request and
|
|
379
|
+
* {@link intuticApprovalResponder} gives it a per-call verdict (see the
|
|
380
|
+
* `permissionMode` bullet on {@link recommendedHarnessSettings}).
|
|
348
381
|
*/
|
|
349
382
|
inactiveTools?: readonly ['bash'];
|
|
350
383
|
}
|
|
@@ -355,9 +388,15 @@ export interface RecommendedHarnessSettings {
|
|
|
355
388
|
* - `permissionMode: 'allow-edits'` (or `'allow-reads'`) — because the
|
|
356
389
|
* framework's own default is `'allow-all'`, under which built-in sandbox
|
|
357
390
|
* tools (including `bash`) run with no approval surface this gate can
|
|
358
|
-
* reach.
|
|
359
|
-
*
|
|
360
|
-
* `'allow-
|
|
391
|
+
* reach. Under `'allow-edits'` every bash-kind built-in call pauses as a
|
|
392
|
+
* `kind: 'builtin'` approval request that {@link intuticApprovalResponder}
|
|
393
|
+
* answers per call; `'allow-reads'` adds write/edit to that. Read-kind
|
|
394
|
+
* built-ins never pause in any mode — the mode is the only control for
|
|
395
|
+
* them.
|
|
396
|
+
* - `inactiveTools: ['bash']` (default) — removes bash outright. With the
|
|
397
|
+
* default, bash calls never reach the gate because bash is never
|
|
398
|
+
* callable; `filterBash: false` is the per-call alternative (bash stays
|
|
399
|
+
* available and every call is gated as above).
|
|
361
400
|
* - a `networkPolicy` for the sandbox — `{ mode: 'deny-all' }` by default,
|
|
362
401
|
* or a `custom` allow-list (with the cloud-metadata CIDR denied) when
|
|
363
402
|
* `allowedHosts` is given. This is the honest egress-governance story for
|
|
@@ -368,16 +407,29 @@ export interface RecommendedHarnessSettings {
|
|
|
368
407
|
*/
|
|
369
408
|
export declare function recommendedHarnessSettings(opts?: RecommendedHarnessSettingsOptions): RecommendedHarnessSettings;
|
|
370
409
|
/** Structural copy of `@ai-sdk/provider-utils`'s `SandboxSession`, narrowed
|
|
371
|
-
* to the
|
|
410
|
+
* to the methods {@link intuticSandboxBootstrap}'s `onBootstrap` calls.
|
|
372
411
|
* Confirmed field-for-field against `@ai-sdk/provider-utils@5.0.27`'s
|
|
373
412
|
* shipped `dist/index.d.ts` (`WriteFileOptions<string>` plus its own
|
|
374
|
-
* `encoding` addition on `writeTextFile`
|
|
413
|
+
* `encoding` addition on `writeTextFile`; `readTextFile` resolves `null`
|
|
414
|
+
* for a missing file). */
|
|
375
415
|
export interface SandboxWriteSession {
|
|
376
416
|
writeTextFile(options: {
|
|
377
417
|
path: string;
|
|
378
418
|
content: string;
|
|
379
419
|
encoding?: string;
|
|
380
420
|
}): PromiseLike<void>;
|
|
421
|
+
readTextFile(options: {
|
|
422
|
+
path: string;
|
|
423
|
+
abortSignal?: AbortSignal;
|
|
424
|
+
}): PromiseLike<string | null>;
|
|
425
|
+
run(options: {
|
|
426
|
+
command: string;
|
|
427
|
+
abortSignal?: AbortSignal;
|
|
428
|
+
}): PromiseLike<{
|
|
429
|
+
exitCode: number;
|
|
430
|
+
stdout: string;
|
|
431
|
+
stderr: string;
|
|
432
|
+
}>;
|
|
381
433
|
}
|
|
382
434
|
/** Structural copy of `@ai-sdk/harness/agent`'s
|
|
383
435
|
* `HarnessAgentSandboxConfig['onBootstrap']` parameter shape
|
|
@@ -469,8 +521,11 @@ declare function renderSandboxClaudeSettings(hookScriptSandboxPath: string): str
|
|
|
469
521
|
* script implementing Tier A1 against it (see
|
|
470
522
|
* {@link renderSandboxGateScript}) — plus `.claude/settings.json` at
|
|
471
523
|
* `<workDir>/.claude/settings.json` registering that script as a
|
|
472
|
-
* `PreToolUse` hook
|
|
473
|
-
*
|
|
524
|
+
* `PreToolUse` hook, and the same registration merged into the sandbox user's
|
|
525
|
+
* `$HOME/.claude/settings.json` (see {@link writeSandboxUserSettings} — the
|
|
526
|
+
* project-level file alone does not reach per-session work directories). See
|
|
527
|
+
* the module-level comment above this section for what this does and does
|
|
528
|
+
* not cover, and why.
|
|
474
529
|
*/
|
|
475
530
|
export declare function intuticSandboxBootstrap(opts?: IntuticSandboxBootstrapOptions): IntuticSandboxBootstrap;
|
|
476
531
|
export declare const _internal: {
|
package/dist/harness.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../src/harness.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../src/harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkFG;AAGH,OAAO,EAAwB,KAAK,IAAI,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAA;AAG3E;;;+EAG+E;AAC/E,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,wBAAwB,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAC3B;AAED;sEACsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;CACpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,+BAAgC,SAAQ,2BAA2B;IAClF,QAAQ,CAAC,gBAAgB,EAAE,2BAA2B,CAAA;IACtD,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;CACvC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;CACpC;AAED,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG,aAAa,GAAG,WAAW,CAAA;AAE/E;;;;4CAI4C;AAC5C,MAAM,MAAM,oBAAoB,GAC5B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IACE,IAAI,EAAE,QAAQ,CAAA;IACd,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAChC,CAAA;AAEL;;;oBAGoB;AACpB,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;CAC1G;AAED,MAAM,WAAW,+BAA+B;IAC9C,4EAA4E;IAC5E,IAAI,CAAC,EAAE,IAAI,CAAA;CACZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAahE;AAcD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,GAAE,+BAAoC,GACzC,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,KAAK,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAgD7F;AAED,MAAM,WAAW,4BAA4B;IAC3C;yEACqE;IACrE,aAAa,EAAE,+BAA+B,EAAE,CAAA;IAChD;;qCAEiC;IACjC,SAAS,EAAE,OAAO,CAAA;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,SAAS,sBAAsB,EAAE,EAC3C,IAAI,GAAE,+BAAoC,GACzC,OAAO,CAAC,4BAA4B,CAAC,CAcvC;AAED,MAAM,WAAW,6BAA6B;IAC5C;;uEAEmE;IACnE,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClD,IAAI,GAAE,6BAAkC,GACvC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,QAAQ,CAAC,CAAC,CAQtD;AAED,MAAM,WAAW,iCAAiC;IAChD;;;;;+BAK2B;IAC3B,cAAc,CAAC,EAAE,aAAa,GAAG,aAAa,CAAA;IAC9C;;2EAEuE;IACvE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;;;;8CAI8C;AAC9C,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAA;AAEvF,MAAM,WAAW,0BAA0B;IACzC,0CAA0C;IAC1C,cAAc,EAAE,aAAa,GAAG,aAAa,CAAA;IAC7C;;;;;;;OAOG;IACH,aAAa,EAAE,wBAAwB,CAAA;IACvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,aAAa,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;CAClC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,GAAE,iCAAsC,GAC3C,0BAA0B,CAgB5B;AA0HD;;;;;2BAK2B;AAC3B,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAC/F,YAAY,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC9F,GAAG,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,WAAW,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAChI;AAED;;2EAE2E;AAC3E,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAA;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAA;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;;0DAMsD;IACtD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,+BAA+B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/E;AAED,MAAM,WAAW,8BAA8B;IAC7C;;;;;;;;OAQG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;0CAGsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;6DAEyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,iBAAS,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG9D;AAED;;;;;;;;;;;;;;GAcG;AACH,iBAAS,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CA+F9D;AAED;;;;;GAKG;AACH,iBAAS,2BAA2B,CAAC,qBAAqB,EAAE,MAAM,GAAG,MAAM,CAE1E;AA6ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,GAAE,8BAAmC,GAAG,uBAAuB,CAkC1G;AAGD,eAAO,MAAM,SAAS;;;;CAAwE,CAAA"}
|
package/dist/harness.js
CHANGED
|
@@ -12,7 +12,9 @@
|
|
|
12
12
|
*
|
|
13
13
|
* `@ai-sdk/harness@1.0.75` (plus `@ai-sdk/harness-claude-code@1.0.78` and
|
|
14
14
|
* `@ai-sdk/harness-grok-build@1.0.12`) were installed and their shipped
|
|
15
|
-
* `.d.ts`/compiled source read directly (not inferred from docs alone)
|
|
15
|
+
* `.d.ts`/compiled source read directly (not inferred from docs alone);
|
|
16
|
+
* points 1-3 re-read on `@ai-sdk/harness@1.0.138` (the current devDependency,
|
|
17
|
+
* on `ai@7.0.127`) — only the continuation element type changed (point 2):
|
|
16
18
|
*
|
|
17
19
|
* 1. **The `toolApproval` setting is STATIC.** `HarnessAgentSettings.toolApproval`
|
|
18
20
|
* is `HarnessAgentToolApprovalConfiguration = Readonly<Record<string,
|
|
@@ -25,9 +27,12 @@
|
|
|
25
27
|
* let the turn pause, and answer each pending approval with the gate
|
|
26
28
|
* (see {@link intuticApprovalResponder}).
|
|
27
29
|
* 2. **The portable answer path is continuation-based.**
|
|
28
|
-
* `
|
|
29
|
-
*
|
|
30
|
-
* `
|
|
30
|
+
* `continueTurn`/`continueGenerate`/`continueStream` accept
|
|
31
|
+
* `toolApprovalContinuations` (dist/agent/index.d.ts) — in 1.0.75 an array
|
|
32
|
+
* of `HarnessAgentToolApprovalContinuation` (`{ approvalResponse, toolCall
|
|
33
|
+
* }`), since 1.0.101 an array of bare `ToolApprovalResponse` parts (the
|
|
34
|
+
* old type is no longer exported in 1.0.138); see
|
|
35
|
+
* {@link HarnessToolApprovalContinuation} for how one value serves both. The adapter-session
|
|
31
36
|
* method `session.submitToolApproval?({approvalId, approved, reason})` is
|
|
32
37
|
* OPTIONAL (`dist/index.d.ts` — `HarnessV1PromptControl`), and support
|
|
33
38
|
* genuinely varies per adapter: `@ai-sdk/harness-claude-code@1.0.78`
|
|
@@ -36,14 +41,24 @@
|
|
|
36
41
|
* responder on the continuation path and treats `submitToolApproval` as an
|
|
37
42
|
* optimization when present ({@link intuticSubmitApprovals}).
|
|
38
43
|
* 3. **Built-in sandbox tools are NOT governed by `toolApproval` at all.**
|
|
39
|
-
* They are governed
|
|
44
|
+
* They are governed by `permissionMode: 'allow-reads' | 'allow-edits'
|
|
40
45
|
* | 'allow-all'`, which **defaults to `'allow-all'`** — the shipped doc
|
|
41
46
|
* comment says so verbatim: "Defaults to `'allow-all'`, preserving the
|
|
42
|
-
* existing bypass-permissions behavior unless users opt in."
|
|
43
|
-
*
|
|
44
|
-
*
|
|
45
|
-
*
|
|
46
|
-
*
|
|
47
|
+
* existing bypass-permissions behavior unless users opt in." Under
|
|
48
|
+
* `'allow-all'` nothing pauses. Under the stricter modes the mode decides
|
|
49
|
+
* WHICH built-ins pause, and each paused call is then a genuine per-call
|
|
50
|
+
* approval this gate answers (TD-415, corrected): the
|
|
51
|
+
* `@ai-sdk/harness-claude-code` bridge (`dist/bridge/index.mjs`,
|
|
52
|
+
* `createPermissionSettings`/`nativeToolRequiresApproval`) adds `ask` rules
|
|
53
|
+
* for bash-kind tools (`Bash`, `Monitor`) under `'allow-edits'`, and for
|
|
54
|
+
* edit- and bash-kind tools under `'allow-reads'`, emitting a
|
|
55
|
+
* `tool-approval-request` and blocking on the host's answer;
|
|
56
|
+
* `@ai-sdk/harness/agent` records it as a pending approval with
|
|
57
|
+
* `kind: 'builtin'`, pauses the turn, and delivers the continuation's
|
|
58
|
+
* decision through the adapter's `submitToolApproval`. What never pauses:
|
|
59
|
+
* read-kind built-ins (Read/Glob/Grep/WebFetch/...) in ANY mode, and
|
|
60
|
+
* write/edit under `'allow-edits'`. {@link recommendedHarnessSettings}
|
|
61
|
+
* exists to steer callers off the `'allow-all'` default.
|
|
47
62
|
* 4. **Execution is server-side, in a sandbox.** The agent's tools run inside
|
|
48
63
|
* a microVM (`@ai-sdk/sandbox-vercel` and friends), NOT on the machine
|
|
49
64
|
* where the Intutic proxy runs — the laptop proxy cannot see sandbox
|
|
@@ -183,14 +198,16 @@ export function intuticApprovalResponder(opts = {}) {
|
|
|
183
198
|
'than approving an unevaluated call.';
|
|
184
199
|
}
|
|
185
200
|
}
|
|
201
|
+
const approvalResponse = {
|
|
202
|
+
type: 'tool-approval-response',
|
|
203
|
+
approvalId: req.approvalId,
|
|
204
|
+
approved,
|
|
205
|
+
...(reason !== undefined ? { reason } : {}),
|
|
206
|
+
...(req.providerExecuted !== undefined ? { providerExecuted: req.providerExecuted } : {}),
|
|
207
|
+
};
|
|
186
208
|
continuations.push({
|
|
187
|
-
approvalResponse
|
|
188
|
-
|
|
189
|
-
approvalId: req.approvalId,
|
|
190
|
-
approved,
|
|
191
|
-
...(reason !== undefined ? { reason } : {}),
|
|
192
|
-
...(req.providerExecuted !== undefined ? { providerExecuted: req.providerExecuted } : {}),
|
|
193
|
-
},
|
|
209
|
+
...approvalResponse, // read by @ai-sdk/harness >= 1.0.101
|
|
210
|
+
approvalResponse, // read by <= 1.0.100 (with toolCall)
|
|
194
211
|
toolCall: {
|
|
195
212
|
type: 'tool-call',
|
|
196
213
|
toolCallId: req.toolCallId,
|
|
@@ -249,9 +266,10 @@ export async function intuticSubmitApprovals(session, requests, opts = {}) {
|
|
|
249
266
|
* Two scope limits, stated plainly:
|
|
250
267
|
*
|
|
251
268
|
* - This covers CUSTOM host-executed tools only. Built-in sandbox tools
|
|
252
|
-
* (read/write/edit/bash/...) never consult `toolApproval` —
|
|
253
|
-
*
|
|
254
|
-
*
|
|
269
|
+
* (read/write/edit/bash/...) never consult `toolApproval` — which of them
|
|
270
|
+
* pause is decided by `permissionMode` (default `'allow-all'`: none), and
|
|
271
|
+
* a paused built-in reaches {@link intuticApprovalResponder} the same way
|
|
272
|
+
* a custom tool's approval does. See {@link recommendedHarnessSettings}.
|
|
255
273
|
* - A tool absent from this record has status `undefined` =
|
|
256
274
|
* "not-applicable" and runs WITHOUT any approval pause. Pass the same
|
|
257
275
|
* `tools` record you give the agent (or every tool name), not a subset.
|
|
@@ -272,9 +290,15 @@ export function intuticStaticApprovals(tools, opts = {}) {
|
|
|
272
290
|
* - `permissionMode: 'allow-edits'` (or `'allow-reads'`) — because the
|
|
273
291
|
* framework's own default is `'allow-all'`, under which built-in sandbox
|
|
274
292
|
* tools (including `bash`) run with no approval surface this gate can
|
|
275
|
-
* reach.
|
|
276
|
-
*
|
|
277
|
-
* `'allow-
|
|
293
|
+
* reach. Under `'allow-edits'` every bash-kind built-in call pauses as a
|
|
294
|
+
* `kind: 'builtin'` approval request that {@link intuticApprovalResponder}
|
|
295
|
+
* answers per call; `'allow-reads'` adds write/edit to that. Read-kind
|
|
296
|
+
* built-ins never pause in any mode — the mode is the only control for
|
|
297
|
+
* them.
|
|
298
|
+
* - `inactiveTools: ['bash']` (default) — removes bash outright. With the
|
|
299
|
+
* default, bash calls never reach the gate because bash is never
|
|
300
|
+
* callable; `filterBash: false` is the per-call alternative (bash stays
|
|
301
|
+
* available and every call is gated as above).
|
|
278
302
|
* - a `networkPolicy` for the sandbox — `{ mode: 'deny-all' }` by default,
|
|
279
303
|
* or a `custom` allow-list (with the cloud-metadata CIDR denied) when
|
|
280
304
|
* `allowedHosts` is given. This is the honest egress-governance story for
|
|
@@ -421,6 +445,9 @@ process.stdin.on('end', () => {
|
|
|
421
445
|
* `Bash`, `Edit`, `Write`, `MultiEdit`, and `mcp__.*`.
|
|
422
446
|
*/
|
|
423
447
|
function renderSandboxClaudeSettings(hookScriptSandboxPath) {
|
|
448
|
+
return JSON.stringify(sandboxClaudeSettings(hookScriptSandboxPath), null, 2) + '\n';
|
|
449
|
+
}
|
|
450
|
+
function sandboxClaudeSettings(hookScriptSandboxPath) {
|
|
424
451
|
const hookEntry = (matcher) => ({
|
|
425
452
|
matcher,
|
|
426
453
|
hooks: [
|
|
@@ -432,13 +459,57 @@ function renderSandboxClaudeSettings(hookScriptSandboxPath) {
|
|
|
432
459
|
},
|
|
433
460
|
],
|
|
434
461
|
});
|
|
435
|
-
|
|
462
|
+
return {
|
|
436
463
|
permissions: { deny: [] },
|
|
437
464
|
hooks: {
|
|
438
465
|
PreToolUse: [hookEntry('Bash'), hookEntry('Edit'), hookEntry('Write'), hookEntry('MultiEdit'), hookEntry('mcp__.*')],
|
|
439
466
|
},
|
|
440
467
|
};
|
|
441
|
-
|
|
468
|
+
}
|
|
469
|
+
/**
|
|
470
|
+
* The same `PreToolUse` registration merged into the sandbox user's
|
|
471
|
+
* `$HOME/.claude/settings.json`. Why this is needed (observed live, Docker
|
|
472
|
+
* sandbox + real Claude Code bridge, `uat/evidence/live-verify/harness-docker/`):
|
|
473
|
+
* `onBootstrap` receives the sandbox DEFAULT working directory, but unless the
|
|
474
|
+
* caller sets `sandboxConfig.workDir` every HarnessAgent session runs Claude
|
|
475
|
+
* Code in its own `<default>/claude-code-<sessionId>` directory, and Claude
|
|
476
|
+
* Code does not read project settings from a parent directory — so the
|
|
477
|
+
* project-level file alone never fired. User-level settings load for every
|
|
478
|
+
* session regardless of cwd. An existing user settings file is merged into
|
|
479
|
+
* (our hooks appended), never overwritten; an unparseable one fails the
|
|
480
|
+
* bootstrap loudly rather than leaving the sandbox ungated. Re-running is
|
|
481
|
+
* idempotent: entries that already invoke this same hook script are replaced,
|
|
482
|
+
* not duplicated — `@ai-sdk/harness` >= 1.0.138 re-runs `onBootstrap` on a
|
|
483
|
+
* session whose marker is missing, and a new `bootstrapHash` re-runs it too.
|
|
484
|
+
*/
|
|
485
|
+
async function writeSandboxUserSettings(session, hookScriptSandboxPath, abortSignal) {
|
|
486
|
+
const home = await session.run({ command: 'printf "%s" "$HOME"', ...(abortSignal ? { abortSignal } : {}) });
|
|
487
|
+
const homeDir = home.stdout.trim();
|
|
488
|
+
if (home.exitCode !== 0 || !homeDir.startsWith('/')) {
|
|
489
|
+
throw new Error(`intuticSandboxBootstrap: cannot resolve the sandbox HOME (exit ${home.exitCode}); refusing to leave ` +
|
|
490
|
+
'the PreToolUse hook unregistered.');
|
|
491
|
+
}
|
|
492
|
+
const path = sandboxJoin(homeDir, '.claude/settings.json');
|
|
493
|
+
const ours = sandboxClaudeSettings(hookScriptSandboxPath);
|
|
494
|
+
const existingText = await session.readTextFile({ path, ...(abortSignal ? { abortSignal } : {}) });
|
|
495
|
+
let merged = ours;
|
|
496
|
+
if (existingText !== null && existingText.trim() !== '') {
|
|
497
|
+
let existing;
|
|
498
|
+
try {
|
|
499
|
+
existing = JSON.parse(existingText);
|
|
500
|
+
}
|
|
501
|
+
catch {
|
|
502
|
+
throw new Error(`intuticSandboxBootstrap: ${path} exists but is not valid JSON; refusing to overwrite it.`);
|
|
503
|
+
}
|
|
504
|
+
const base = existing !== null && typeof existing === 'object' && !Array.isArray(existing) ? existing : {};
|
|
505
|
+
const hooks = (base.hooks ?? {});
|
|
506
|
+
const ourCommand = `node ${hookScriptSandboxPath}`;
|
|
507
|
+
const isOurs = (entry) => Array.isArray(entry?.hooks) &&
|
|
508
|
+
(entry.hooks).some((h) => h?.command === ourCommand);
|
|
509
|
+
const pre = (Array.isArray(hooks.PreToolUse) ? hooks.PreToolUse : []).filter((e) => !isOurs(e));
|
|
510
|
+
merged = { ...base, hooks: { ...hooks, PreToolUse: [...pre, ...ours.hooks.PreToolUse] } };
|
|
511
|
+
}
|
|
512
|
+
await session.writeTextFile({ path, content: JSON.stringify(merged, null, 2) + '\n' });
|
|
442
513
|
}
|
|
443
514
|
/**
|
|
444
515
|
* Builds `{ bootstrapHash, onBootstrap }` for
|
|
@@ -465,8 +536,11 @@ function renderSandboxClaudeSettings(hookScriptSandboxPath) {
|
|
|
465
536
|
* script implementing Tier A1 against it (see
|
|
466
537
|
* {@link renderSandboxGateScript}) — plus `.claude/settings.json` at
|
|
467
538
|
* `<workDir>/.claude/settings.json` registering that script as a
|
|
468
|
-
* `PreToolUse` hook
|
|
469
|
-
*
|
|
539
|
+
* `PreToolUse` hook, and the same registration merged into the sandbox user's
|
|
540
|
+
* `$HOME/.claude/settings.json` (see {@link writeSandboxUserSettings} — the
|
|
541
|
+
* project-level file alone does not reach per-session work directories). See
|
|
542
|
+
* the module-level comment above this section for what this does and does
|
|
543
|
+
* not cover, and why.
|
|
470
544
|
*/
|
|
471
545
|
export function intuticSandboxBootstrap(opts = {}) {
|
|
472
546
|
const bootstrapDir = opts.bootstrapDir ?? '.intutic/hooks';
|
|
@@ -482,7 +556,7 @@ export function intuticSandboxBootstrap(opts = {}) {
|
|
|
482
556
|
.digest('hex');
|
|
483
557
|
return {
|
|
484
558
|
bootstrapHash,
|
|
485
|
-
onBootstrap: async ({ session, workDir }) => {
|
|
559
|
+
onBootstrap: async ({ session, workDir, abortSignal }) => {
|
|
486
560
|
// Absolute paths throughout, matching the laptop writer's own
|
|
487
561
|
// convention (claudeCodeHooks.ts's hookEntry() always joins an
|
|
488
562
|
// absolute workspaceRoot) - a PreToolUse hook's invocation cwd is not
|
|
@@ -496,6 +570,7 @@ export function intuticSandboxBootstrap(opts = {}) {
|
|
|
496
570
|
for (const f of files) {
|
|
497
571
|
await session.writeTextFile({ path: f.path, content: f.content });
|
|
498
572
|
}
|
|
573
|
+
await writeSandboxUserSettings(session, scriptAbsPath, abortSignal);
|
|
499
574
|
},
|
|
500
575
|
};
|
|
501
576
|
}
|
package/dist/harness.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"harness.js","sourceRoot":"","sources":["../src/harness.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"harness.js","sourceRoot":"","sources":["../src/harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkFG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,IAAI,UAAU,EAA6B,MAAM,WAAW,CAAA;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAmGhD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;QAC1B,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,KAAkB,CAAA;IAC3B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;AAC1B,CAAC;AAED;;0EAE0E;AAC1E,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAwC,EAAE;IAE1C,OAAO,KAAK,EAAE,QAAQ,EAAE,EAAE;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,EAAE,CAAA;QACnC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,8EAA8E;gBAC5E,sFAAsF,CACzF,CAAA;QACH,CAAC;QAED,MAAM,aAAa,GAAsC,EAAE,CAAA;QAC3D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,QAAQ,GAAG,IAAI,CAAA;YACnB,IAAI,MAA0B,CAAA;YAC9B,IAAI,CAAC;gBACH,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;YAChE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,GAAG,KAAK,CAAA;gBAChB,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;oBACtC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAA;gBACtB,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;oBAC/D,MAAM;wBACJ,+CAA+C,MAAM,4BAA4B;4BACjF,qCAAqC,CAAA;gBACzC,CAAC;YACH,CAAC;YACD,MAAM,gBAAgB,GAAgC;gBACpD,IAAI,EAAE,wBAAwB;gBAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,QAAQ;gBACR,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1F,CAAA;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,GAAG,gBAAgB,EAAE,qCAAqC;gBAC1D,gBAAgB,EAAE,qCAAqC;gBACvD,QAAQ,EAAE;oBACR,IAAI,EAAE,WAAW;oBACjB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;oBAC7B,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1F;aACF,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,aAAa,CAAA;IACtB,CAAC,CAAA;AACH,CAAC;AAYD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAA2B,EAC3B,QAA2C,EAC3C,OAAwC,EAAE;IAE1C,MAAM,aAAa,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IACxD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC5C,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,MAAM,MAAM,CAAC;YACX,UAAU,EAAE,CAAC,CAAC,gBAAgB,CAAC,UAAU;YACzC,QAAQ,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ;YACrC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1F,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;AAC3C,CAAC;AASD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAkD,EAClD,OAAsC,EAAE;IAExC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACvC,MAAM,MAAM,GAA+C,EAAE,CAAA;IAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAA;IAC9D,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAwFD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA0C,EAAE;IAE5C,MAAM,aAAa,GACjB,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC7D,CAAC,CAAC;YACE,IAAI,EAAE,QAAQ;YACd,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,iEAAiE;YACjE,kEAAkE;YAClE,WAAW,EAAE,CAAC,oBAAoB,CAAC;SACpC;QACH,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IAC1B,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,aAAa;QACpD,aAAa;QACb,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,CAAU,EAAE,CAAC;KAC3E,CAAA;AACH,CAAC;AAkLD,SAAS,WAAW,CAAC,OAAe,EAAE,QAAgB;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;IACnE,OAAO,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAA;AAC9B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,uBAAuB,CAAC,aAAqB;IACpD,OAAO;;;;;;;;;;;;;;0CAciC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+EtE,CAAA;AACD,CAAC;AAED;;;;;GAKG;AACH,SAAS,2BAA2B,CAAC,qBAA6B;IAChE,OAAO,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;AACrF,CAAC;AAED,SAAS,qBAAqB,CAAC,qBAA6B;IAI1D,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO;QACP,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,QAAQ,qBAAqB,EAAE;gBACxC,OAAO,EAAE,EAAE;gBACX,aAAa,EAAE,wDAAwD;aACxE;SACF;KACF,CAAC,CAAA;IACF,OAAO;QACL,WAAW,EAAE,EAAE,IAAI,EAAE,EAAc,EAAE;QACrC,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;SACrH;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,wBAAwB,CACrC,OAA4B,EAC5B,qBAA6B,EAC7B,WAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC3G,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,kEAAkE,IAAI,CAAC,QAAQ,uBAAuB;YACpG,mCAAmC,CACtC,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,qBAAqB,CAAC,qBAAqB,CAAC,CAAA;IACzD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAClG,IAAI,MAAM,GAA4B,IAAI,CAAA;IAC1C,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxD,IAAI,QAAiB,CAAA;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,0DAA0D,CAAC,CAAA;QAC7G,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,QAAoC,CAAC,CAAC,CAAC,EAAE,CAAA;QACvI,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAA;QAC3D,MAAM,UAAU,GAAG,QAAQ,qBAAqB,EAAE,CAAA;QAClD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAW,EAAE,CACzC,KAAK,CAAC,OAAO,CAAE,KAAoC,EAAE,KAAK,CAAC;YAC3D,CAAE,KAA8B,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAkC,EAAE,OAAO,KAAK,UAAU,CAAC,CAAA;QAClH,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;QACxG,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,CAAA;IAC3F,CAAC;IACD,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;AACxF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAuC,EAAE;IAC/E,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,gBAAgB,CAAA;IAC1D,MAAM,YAAY,GAAG,GAAG,YAAY,wBAAwB,CAAA;IAC5D,MAAM,aAAa,GAAG,GAAG,YAAY,uBAAuB,CAAA;IAE5D,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAA;IACnD,MAAM,aAAa,GAAG,uBAAuB,CAAC,uBAAuB,CAAC,CAAA;IAEtE,oEAAoE;IACpE,0EAA0E;IAC1E,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC;SACvC,MAAM,CAAC,aAAa,IAAI,CAAC,WAAW,IAAI,EAAE,GAAG,CAAC;SAC9C,MAAM,CAAC,GAAG,YAAY,OAAO,YAAY,OAAO,aAAa,OAAO,aAAa,EAAE,CAAC;SACpF,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,OAAO;QACL,aAAa;QACb,WAAW,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE;YACvD,8DAA8D;YAC9D,+DAA+D;YAC/D,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;YACzD,MAAM,KAAK,GAAqD;gBAC9D,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE;gBACnE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE;gBAC/C,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,OAAO,EAAE,2BAA2B,CAAC,aAAa,CAAC,EAAE;aAC7G,CAAA;YACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;YACnE,CAAC;YACD,MAAM,wBAAwB,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAA;QACrE,CAAC;KACF,CAAA;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,WAAW,EAAE,CAAA"}
|
package/dist/index.d.ts
CHANGED
|
@@ -19,6 +19,7 @@ export { checkCommand, checkImages, checkWrittenManifest, isDeployCommand, isPin
|
|
|
19
19
|
export type { ImagePolicy, ImageRef, Verdict as ImageVerdict } from './imagecheck.js';
|
|
20
20
|
export { Snapshot, evaluate, guardDisabledFromEnv, loadSnapshot, snapshotPath, SEV_BLOCK, SEV_SHADOW, SEV_WARN, } from './snapshot.js';
|
|
21
21
|
export type { Decision, Rule, RuleSubject, Severity, SnapshotState } from './snapshot.js';
|
|
22
|
+
export type { SsoGroupClearance, SsoGroupPolicy, SsoGroupRecord } from './ssoGroups.js';
|
|
22
23
|
export { firstMatch, parseRules, ruleMatches, serialiseToolInput, supportsArgPatterns, fetchRules, ACTION_BLOCK, ACTION_WARN, ACTION_APPROVAL, } from './soprules.js';
|
|
23
24
|
export type { SopRule } from './soprules.js';
|
|
24
25
|
export { wrapTool, wrapTools } from './wrapTools.js';
|