@intutic/mcp-governance-proxy 2.1.0 → 2.3.0

package/dist/wasm/worker.js

@@ -10,29 +10,32 @@
  * happen to share a rule.
  *
  * Protocol (see `runner.ts` for the main-thread side):
- *   compile  { type:'compile',  id, ruleId, bytes }  -> { type:'compile-result',  id, ruleId, ok, unsupportedImports?, readsReferencedFiles?, error? }
+ *   compile  { type:'compile',  id, ruleId, bytes }  -> { type:'compile-result',  id, ruleId, ok, reason?, unsupportedImports?, readsReferencedFiles?, rego?, error? }
  *   remove   { type:'remove', ruleId }                  (no reply)
- *   evaluate { type:'evaluate', id, ruleId, bytes, files? } -> { type:'evaluate-result', id, ruleId, ok, code?, reason?, error? }
+ *   evaluate { type:'evaluate', id, ruleId, bytes, files? } -> { type:'evaluate-result', id, ruleId, ok, code?, decision?, reason?, riskTier?, error?, fuelExhausted?, notADecision? }
  *
- * `files` is the per-evaluation referenced-files table (TD-441), posted only
+ * A Rego rule (an OPA build, `@intutic/shared-types`' Rego host) is compiled
+ * and evaluated here too; its `evaluate` bytes are the Rego input document and
+ * its reply carries `decision` instead of `code`.
+ *
+ * `files` is the per-evaluation referenced-files table, posted only
  * to a rule that imports `read_referenced_file`; it is rebuilt here into the
  * host-import state, so the main thread never shares memory with the guest.
  *
  * A guest `abort` call is inert (hostImports.ts logs and returns); an
  * uncaught exception or trap during instantiation/evaluation is caught here
- * and reported as `ok:false` — the caller (runner.ts) treats that as
- * fail-open ALLOW, exactly like a timeout, never a crash.
+ * and reported as `ok:false` — the caller (runner.ts) treats that as a rule
+ * that reached no verdict, exactly like a timeout, never a crash.
  *
  * @module
  */
 import { parentPort } from 'node:worker_threads';
-import { unsupportedWasmImports, WASM_HOST_IMPORTS } from '@intutic/shared-types';
+import { createHash } from 'node:crypto';
+import { DEFAULT_FUEL_BUDGET, FUEL_EXPORT, REGO_DISABLE_ENV, REGO_FUEL_BUDGET, WASM_PAGE_BYTES, capDeclaredMemory, evaluateRegoRule, meterFuel, isOpaModule, loadRegoRule, regoDecision, RegoResultError, unsupportedWasmImports, WASM_HOST_IMPORTS, } from '@intutic/shared-types';
 import { createHostImports, newHostImportState } from './hostImports.js';
 import { ReferencedFiles } from './referencedFiles.js';
-import { capDeclaredMemory, WASM_PAGE_BYTES } from './memoryCap.js';
-import { DEFAULT_FUEL_BUDGET, FUEL_EXPORT, meterFuel } from './fuel.js';
 /**
- * Guest memory ceiling, `runner.rs`'s 16MB `StoreLimits` (TD-440). Enforced at
+ * Guest memory ceiling, `runner.rs`'s 16MB `StoreLimits`. Enforced at
  * load by `capDeclaredMemory`: the module's own memory is rewritten to declare
  * this as its maximum, so V8 refuses any `memory.grow` past it (the call
  * returns -1) instead of growing. A module whose initial size is already over
@@ -66,11 +69,37 @@ function stripControlCharacters(text) {
     return out;
 }
 const modules = new Map();
+/** Rego policies compiled by OPA, by rule id: a different ABI, run through the shared host. */
+const regoRules = new Map();
+const regoHost = {
+    digest: (algorithm, data) => createHash(algorithm).update(data).digest('hex'),
+};
+/**
+ * Load an OPA build as a Rego rule: metered like any rule, with the Rego
+ * budget (`REGO_FUEL_BUDGET`), and checked by the shared host, which refuses
+ * one needing a builtin it lacks.
+ */
+function compileRego(msg) {
+    if (process.env[REGO_DISABLE_ENV] === '1') {
+        throw new Error(`Rego rules are switched off on this host (${REGO_DISABLE_ENV}=1)`);
+    }
+    const bytes = new Uint8Array(msg.bytes);
+    const rule = loadRegoRule(bytes, new WebAssembly.Module(meterFuel(bytes, REGO_FUEL_BUDGET)), regoHost);
+    if (!rule)
+        throw new Error('not an OPA build');
+    modules.delete(msg.ruleId);
+    regoRules.set(msg.ruleId, rule);
+    parentPort?.postMessage({ type: 'compile-result', id: msg.id, ruleId: msg.ruleId, ok: true, readsReferencedFiles: false, rego: true });
+}
 function importsUsingReadReferencedFile(module) {
     return WebAssembly.Module.imports(module).some((i) => i.module === 'env' && i.name === 'read_referenced_file' && i.kind === 'function');
 }
 function handleCompile(msg) {
     try {
+        if (isOpaModule(new WebAssembly.Module(new Uint8Array(msg.bytes)))) {
+            compileRego(msg);
+            return;
+        }
         const capped = capDeclaredMemory(new Uint8Array(msg.bytes), MAX_GUEST_MEMORY_BYTES / WASM_PAGE_BYTES);
         const module = new WebAssembly.Module(meterFuel(capped, DEFAULT_FUEL_BUDGET));
         if (WebAssembly.Module.imports(module).some((i) => i.kind === 'memory')) {
@@ -83,10 +112,12 @@ function handleCompile(msg) {
                 id: msg.id,
                 ruleId: msg.ruleId,
                 ok: false,
+                reason: 'unsupported_import',
                 unsupportedImports: unsupported,
             });
             return;
         }
+        regoRules.delete(msg.ruleId);
         modules.set(msg.ruleId, module);
         parentPort?.postMessage({
             type: 'compile-result',
@@ -94,6 +125,7 @@ function handleCompile(msg) {
             ruleId: msg.ruleId,
             ok: true,
             readsReferencedFiles: importsUsingReadReferencedFile(module),
+            rego: false,
         });
     }
     catch (err) {
@@ -102,12 +134,59 @@ function handleCompile(msg) {
             id: msg.id,
             ruleId: msg.ruleId,
             ok: false,
+            // Bytes V8 will not compile, as Wasmtime would not; anything else (a
+            // Rego build the host cannot run, an instruction the meter refuses, an
+            // imported memory) compiles but cannot run here.
+            reason: err instanceof WebAssembly.CompileError ? 'compile_error' : 'load_error',
             error: err instanceof Error ? err.message : String(err),
         });
     }
 }
 function handleRemove(msg) {
     modules.delete(msg.ruleId);
+    regoRules.delete(msg.ruleId);
+}
+/**
+ * Evaluate a Rego rule against the input document the runner built
+ * (`buildRegoInput`). Replies with the decision rather than a verdict code:
+ * a hold has no native code.
+ */
+function evaluateRego(msg, rule) {
+    let fuel;
+    try {
+        const result = evaluateRegoRule(rule, new TextDecoder().decode(msg.bytes), {
+            ...regoHost,
+            onInstance: (exportsObj) => {
+                const g = exportsObj[FUEL_EXPORT];
+                if (g instanceof WebAssembly.Global)
+                    fuel = g;
+            },
+        });
+        const decision = regoDecision(result, rule.entrypoint);
+        parentPort?.postMessage({
+            type: 'evaluate-result',
+            id: msg.id,
+            ruleId: msg.ruleId,
+            ok: true,
+            decision: decision.decision,
+            reason: 'reason' in decision ? decision.reason : undefined,
+            riskTier: decision.riskTier ?? rule.riskTier,
+        });
+    }
+    catch (err) {
+        const fuelExhausted = fuel !== undefined && fuel.value < 0;
+        parentPort?.postMessage({
+            type: 'evaluate-result',
+            id: msg.id,
+            ruleId: msg.ruleId,
+            ok: false,
+            fuelExhausted,
+            notADecision: err instanceof RegoResultError,
+            error: fuelExhausted
+                ? `Rego rule ran out of its ${REGO_FUEL_BUDGET}-instruction budget`
+                : err instanceof Error ? err.message : String(err),
+        });
+    }
 }
 /**
  * Ported from `runner.rs`'s `read_guest_reason`: two OPTIONAL zero-arg
@@ -157,6 +236,11 @@ function readGuestReason(exportsObj, memory) {
     return stripped.length > 0 ? stripped : undefined;
 }
 function handleEvaluate(msg) {
+    const rego = regoRules.get(msg.ruleId);
+    if (rego) {
+        evaluateRego(msg, rego);
+        return;
+    }
     const module = modules.get(msg.ruleId);
     if (!module) {
         parentPort?.postMessage({ type: 'evaluate-result', id: msg.id, ruleId: msg.ruleId, ok: false, error: 'rule not loaded' });

package/dist/wasm/worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/wasm/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,eAAe,EAA6B,MAAM,sBAAsB,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAEvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAEtD;;;GAGG;AACH,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAChC,MAAM,QAAQ,GAAG,IAAI,CAAA;AAErB,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,IAAI,IAAI,mBAAmB,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAQ;QAC9D,GAAG,IAAI,EAAE,CAAA;IACX,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAqBD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAA;AAErD,SAAS,8BAA8B,CAAC,MAA0B;IAChE,OAAO,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,sBAAsB,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CACxF,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAmB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,sBAAsB,GAAG,eAAe,CAAC,CAAA;QACrG,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAA;QAC7E,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;QACxF,CAAC;QACD,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,UAAU,EAAE,WAAW,CAAC;gBACtB,IAAI,EAAE,gBAAgB;gBACtB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,EAAE,EAAE,KAAK;gBACT,kBAAkB,EAAE,WAAW;aAChC,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/B,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,IAAI;YACR,oBAAoB,EAAE,8BAA8B,CAAC,MAAM,CAAC;SAC7D,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAkB;IACtC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAC5B,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,UAAmC,EAAE,MAA0B;IACtF,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IAEhF,IAAI,GAAY,CAAA;IAChB,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAI,KAAsB,EAAE,CAAA;QAC/B,GAAG,GAAI,KAAsB,EAAE,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACxE,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS,CAAA;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAExC,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAClB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAC7C,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAA;QACzH,OAAM;IACR,CAAC;IAED,qEAAqE;IACrE,oEAAoE;IACpE,IAAI,IAAoC,CAAA;IACxC,IAAI,CAAC;QACH,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,YAAY,GAAgD,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;QACxF,MAAM,SAAS,GAAG,kBAAkB,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1E,MAAM,GAAG,GAA8B,iBAAiB,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAC/F,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAkC,CAAA;QAC9D,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;QAC1C,IAAI,UAAU,YAAY,WAAW,CAAC,MAAM;YAAE,IAAI,GAAG,UAAU,CAAA;QAE/D,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QACtC,IAAI,CAAC,CAAC,SAAS,YAAY,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxD,CAAC;QACD,YAAY,CAAC,OAAO,GAAG,SAAS,CAAA;QAChC,MAAM,MAAM,GAAG,SAAS,CAAA;QAExB,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAE9C,qEAAqE;QACrE,+BAA+B;QAC/B,IAAI,MAAc,CAAA;QAClB,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QACjC,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,GAAI,UAAoC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YACvC,MAAM,GAAI,KAA8C,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAClF,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACrE,CAAC;QAED,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAE5E,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QACzC,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC1D,CAAC;QACD,MAAM,IAAI,GAAI,UAAsD,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;QAEjG,kEAAkE;QAClE,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAElD,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IAC9G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,qEAAqE;QACrE,mEAAmE;QACnE,wEAAwE;QACxE,MAAM,aAAa,GAAG,IAAI,KAAK,SAAS,IAAK,IAAI,CAAC,KAAgB,GAAG,CAAC,CAAA;QACtE,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,iBAAiB;YACvB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,KAAK;YACT,aAAa;YACb,KAAK,EAAE,aAAa;gBAClB,CAAC,CAAC,4BAA4B,mBAAmB,qBAAqB;gBACtE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACrD,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,UAAU,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,GAAc,EAAE,EAAE;IAC3C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,SAAS;YACZ,aAAa,CAAC,GAAG,CAAC,CAAA;YAClB,MAAK;QACP,KAAK,QAAQ;YACX,YAAY,CAAC,GAAG,CAAC,CAAA;YACjB,MAAK;QACP,KAAK,UAAU;YACb,cAAc,CAAC,GAAG,CAAC,CAAA;YACnB,MAAK;IACT,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,4EAA4E;AAC5E,yEAAyE;AACzE,qEAAqE;AACrE,gEAAgE;AAChE,yDAAyD;AACzD,KAAK,iBAAiB,CAAA"}
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/wasm/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,sBAAsB,EACtB,iBAAiB,GAGlB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,eAAe,EAA6B,MAAM,sBAAsB,CAAA;AAEjF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAEtD;;;GAGG;AACH,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAChC,MAAM,QAAQ,GAAG,IAAI,CAAA;AAErB,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,IAAI,IAAI,mBAAmB,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAQ;QAC9D,GAAG,IAAI,EAAE,CAAA;IACX,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAqBD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAA;AACrD,+FAA+F;AAC/F,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAA;AAE7C,MAAM,QAAQ,GAAoB;IAChC,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;CAC9E,CAAA;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,GAAmB;IACtC,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6CAA6C,gBAAgB,KAAK,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IACtG,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAC9C,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/B,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;AACxI,CAAC;AAED,SAAS,8BAA8B,CAAC,MAA0B;IAChE,OAAO,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,sBAAsB,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CACxF,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAmB;IACxC,IAAI,CAAC;QACH,IAAI,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,WAAW,CAAC,GAAG,CAAC,CAAA;YAChB,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,sBAAsB,GAAG,eAAe,CAAC,CAAA;QACrG,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAA;QAC7E,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;QACxF,CAAC;QACD,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,UAAU,EAAE,WAAW,CAAC;gBACtB,IAAI,EAAE,gBAAgB;gBACtB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,oBAAoB;gBAC5B,kBAAkB,EAAE,WAAW;aAChC,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/B,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,IAAI;YACR,oBAAoB,EAAE,8BAA8B,CAAC,MAAM,CAAC;YAC5D,IAAI,EAAE,KAAK;SACZ,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,KAAK;YACT,qEAAqE;YACrE,uEAAuE;YACvE,iDAAiD;YACjD,MAAM,EAAE,GAAG,YAAY,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY;YAChF,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAkB;IACtC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1B,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAoB,EAAE,IAAc;IACxD,IAAI,IAAoC,CAAA;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YACzE,GAAG,QAAQ;YACX,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE;gBACzB,MAAM,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;gBACjC,IAAI,CAAC,YAAY,WAAW,CAAC,MAAM;oBAAE,IAAI,GAAG,CAAC,CAAA;YAC/C,CAAC;SACF,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QACtD,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,iBAAiB;YACvB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YAC1D,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;SAC7C,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,aAAa,GAAG,IAAI,KAAK,SAAS,IAAK,IAAI,CAAC,KAAgB,GAAG,CAAC,CAAA;QACtE,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,iBAAiB;YACvB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,KAAK;YACT,aAAa;YACb,YAAY,EAAE,GAAG,YAAY,eAAe;YAC5C,KAAK,EAAE,aAAa;gBAClB,CAAC,CAAC,4BAA4B,gBAAgB,qBAAqB;gBACnE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACrD,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,UAAmC,EAAE,MAA0B;IACtF,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IAEhF,IAAI,GAAY,CAAA;IAChB,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAI,KAAsB,EAAE,CAAA;QAC/B,GAAG,GAAI,KAAsB,EAAE,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACxE,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS,CAAA;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAExC,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAClB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAC7C,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,GAAoB;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,IAAI,EAAE,CAAC;QACT,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACvB,OAAM;IACR,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAA;QACzH,OAAM;IACR,CAAC;IAED,qEAAqE;IACrE,oEAAoE;IACpE,IAAI,IAAoC,CAAA;IACxC,IAAI,CAAC;QACH,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,YAAY,GAAgD,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;QACxF,MAAM,SAAS,GAAG,kBAAkB,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1E,MAAM,GAAG,GAA8B,iBAAiB,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAC/F,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAkC,CAAA;QAC9D,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;QAC1C,IAAI,UAAU,YAAY,WAAW,CAAC,MAAM;YAAE,IAAI,GAAG,UAAU,CAAA;QAE/D,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QACtC,IAAI,CAAC,CAAC,SAAS,YAAY,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxD,CAAC;QACD,YAAY,CAAC,OAAO,GAAG,SAAS,CAAA;QAChC,MAAM,MAAM,GAAG,SAAS,CAAA;QAExB,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAE9C,qEAAqE;QACrE,+BAA+B;QAC/B,IAAI,MAAc,CAAA;QAClB,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QACjC,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,GAAI,UAAoC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YACvC,MAAM,GAAI,KAA8C,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAClF,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACrE,CAAC;QAED,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAE5E,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QACzC,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC1D,CAAC;QACD,MAAM,IAAI,GAAI,UAAsD,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;QAEjG,kEAAkE;QAClE,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAElD,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IAC9G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,qEAAqE;QACrE,mEAAmE;QACnE,wEAAwE;QACxE,MAAM,aAAa,GAAG,IAAI,KAAK,SAAS,IAAK,IAAI,CAAC,KAAgB,GAAG,CAAC,CAAA;QACtE,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,iBAAiB;YACvB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,KAAK;YACT,aAAa;YACb,KAAK,EAAE,aAAa;gBAClB,CAAC,CAAC,4BAA4B,mBAAmB,qBAAqB;gBACtE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACrD,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,UAAU,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,GAAc,EAAE,EAAE;IAC3C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,SAAS;YACZ,aAAa,CAAC,GAAG,CAAC,CAAA;YAClB,MAAK;QACP,KAAK,QAAQ;YACX,YAAY,CAAC,GAAG,CAAC,CAAA;YACjB,MAAK;QACP,KAAK,UAAU;YACb,cAAc,CAAC,GAAG,CAAC,CAAA;YACnB,MAAK;IACT,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,4EAA4E;AAC5E,yEAAyE;AACzE,qEAAqE;AACrE,gEAAgE;AAChE,yDAAyD;AACzD,KAAK,iBAAiB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intutic/mcp-governance-proxy",
-  "version": "2.1.0",
+  "version": "2.3.0",
   "description": "Intutic MCP Governance Proxy — transparent stdio proxy that intercepts all tools/call JSON-RPC messages and applies workspace SOP policy before forwarding to real MCP servers",
   "type": "module",
   "license": "MIT",
@@ -33,9 +33,9 @@
     "@opentelemetry/semantic-conventions": "^1.43.0",
     "ioredis": "^5",
     "zod": "^3",
-    "@intutic/id": "2.1.0",
-    "@intutic/logger": "2.1.0",
-    "@intutic/shared-types": "2.1.0"
+    "@intutic/id": "2.3.0",
+    "@intutic/logger": "2.3.0",
+    "@intutic/shared-types": "2.3.0"
   },
   "devDependencies": {
     "@types/node": "^22",
@@ -52,6 +52,7 @@
     "dev": "tsx src/index.ts",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
+    "test:load": "vitest run --config vitest.load.config.ts",
     "test:watch": "vitest"
   }
 }

package/dist/toolPoison.d.ts

@@ -1,32 +0,0 @@
-/**
- * toolPoison.ts — Tool-description poisoning patterns.
- *
- * Direct TypeScript port of `packages/proxy/src/tool_poison.rs`'s `scan`
- * function and its seven named patterns (confirmed by reading that file
- * directly). This is a SEPARATE pattern set from `injection.ts`, on purpose:
- * `tool_poison.rs`'s own module doc records that it tried reusing
- * `injection::scan` for this and measured that its five patterns match ZERO
- * of the tool-poisoning payloads — they are tuned for conversational
- * jailbreak phrasing ("ignore previous instructions"), while a poisoned tool
- * description reads like documentation, not a jailbreak. `ToolPoisoningDetector`
- * (Phase 2's `anomaly/detectors.ts`) is what consumes this module.
- *
- * The Rust source gates each pattern behind a cheap substring pre-check
- * (`GATES`) before running the regex, measured to be ~1.8× faster than the
- * regex alone on their corpus. That optimization is NOT ported here — it is
- * a performance detail proven equivalent to the plain regex loop (the Rust
- * module's own `gating_never_changes_a_verdict` test asserts exactly that
- * equivalence), never a correctness one, and the volume of tool descriptions
- * one MCP session evaluates is orders of magnitude below the Rust proxy's
- * request-path corpus. The pattern SOURCE TEXT below is unchanged from the
- * Rust `PATTERNS` array — only the verbatim regex text is what was actually
- * measured, so preserving it exactly (not the gate) is what matters here.
- *
- * @module
- */
-/**
- * Pattern names matching this tool description, deduplicated, empty when it
- * looks like ordinary prose (the overwhelmingly common case).
- */
-export declare function scanToolDescription(description: string): string[];
-//# sourceMappingURL=toolPoison.d.ts.map

package/dist/toolPoison.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"toolPoison.d.ts","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAkDH;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAOjE"}

package/dist/toolPoison.js

@@ -1,81 +0,0 @@
-/**
- * toolPoison.ts — Tool-description poisoning patterns.
- *
- * Direct TypeScript port of `packages/proxy/src/tool_poison.rs`'s `scan`
- * function and its seven named patterns (confirmed by reading that file
- * directly). This is a SEPARATE pattern set from `injection.ts`, on purpose:
- * `tool_poison.rs`'s own module doc records that it tried reusing
- * `injection::scan` for this and measured that its five patterns match ZERO
- * of the tool-poisoning payloads — they are tuned for conversational
- * jailbreak phrasing ("ignore previous instructions"), while a poisoned tool
- * description reads like documentation, not a jailbreak. `ToolPoisoningDetector`
- * (Phase 2's `anomaly/detectors.ts`) is what consumes this module.
- *
- * The Rust source gates each pattern behind a cheap substring pre-check
- * (`GATES`) before running the regex, measured to be ~1.8× faster than the
- * regex alone on their corpus. That optimization is NOT ported here — it is
- * a performance detail proven equivalent to the plain regex loop (the Rust
- * module's own `gating_never_changes_a_verdict` test asserts exactly that
- * equivalence), never a correctness one, and the volume of tool descriptions
- * one MCP session evaluates is orders of magnitude below the Rust proxy's
- * request-path corpus. The pattern SOURCE TEXT below is unchanged from the
- * Rust `PATTERNS` array — only the verbatim regex text is what was actually
- * measured, so preserving it exactly (not the gate) is what matters here.
- *
- * @module
- */
-/**
- * Ported verbatim from `tool_poison.rs`'s `PATTERNS` const. All bounded
- * repetitions here are small fixed-width gaps (`{0,40}`, `{0,60}`, `{0,80}`)
- * over a handful of alternations — the same "no wide bounded repetition, no
- * RegexSet performance regression" shape `injection.ts` documents, not the
- * `dlp.rs` shape that regressed.
- */
-const PATTERNS = [
-    {
-        name: 'hidden-instruction-block',
-        regex: /<\s*(important|secret|system|hidden|instructions?)\s*>/i,
-    },
-    {
-        name: 'conceal-from-user',
-        regex: /\bdo\s+not\s+(mention|tell|inform|reveal|disclose|show)\b[^.!?]{0,40}\buser\b|\bwithout\s+(informing|telling|notifying|alerting)\s+the\s+user\b/i,
-    },
-    {
-        name: 'sidechannel-exfil',
-        regex: /\b(pass|send|include|append|forward|provide)\b[^.!?]{0,60}\b(content|value|text)s?\s+of\b[^.!?]{0,40}(~\/|\.env|\.ssh|id_rsa|credential|secret|token|api[_ ]?key)/i,
-    },
-    {
-        name: 'read-sensitive-path',
-        // Rust's own comment: no `\b` before the alternation, because a word
-        // boundary cannot exist before a literal `.` — `\b\.env` matches
-        // nothing. Preserved exactly, including that absence.
-        regex: /\b(read|open|cat|load|access)\b[^.!?]{0,30}(~\/\.\w+|\.ssh\/|id_rsa|\.env\b|\.aws\/|mcp\.json|\/etc\/passwd)/i,
-    },
-    {
-        name: 'cross-tool-shadowing',
-        regex: /\buse\s+this\s+tool\s+instead\s+of\b|\bdo\s+not\s+use\s+the\s+\w+\s+tool\b|\bthis\s+tool\s+supersedes\b/i,
-    },
-    {
-        name: 'agent-directed-precondition',
-        regex: /\bbefore\s+(using|calling|invoking)\s+(this|the)\s+tool\b[^.!?]{0,80}\b(you\s+must|first\s+read|first\s+call)\b/i,
-    },
-    {
-        name: 'tool-scoped-instruction-override',
-        regex: /\b(ignore|disregard|override)\b[^.!?]{0,40}\b(other\s+tools?|previous\s+tools?|system\s+prompt)\b/i,
-    },
-];
-/**
- * Pattern names matching this tool description, deduplicated, empty when it
- * looks like ordinary prose (the overwhelmingly common case).
- */
-export function scanToolDescription(description) {
-    if (!description)
-        return [];
-    const found = [];
-    for (const { name, regex } of PATTERNS) {
-        if (regex.test(description))
-            found.push(name);
-    }
-    return found;
-}
-//# sourceMappingURL=toolPoison.js.map

package/dist/toolPoison.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"toolPoison.js","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAOH;;;;;;GAMG;AACH,MAAM,QAAQ,GAAiC;IAC7C;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,yDAAyD;KACjE;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,oKAAoK;KACvK;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,qEAAqE;QACrE,iEAAiE;QACjE,sDAAsD;QACtD,KAAK,EAAE,+GAA+G;KACvH;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,0GAA0G;KAClH;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,kHAAkH;KAC1H;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,KAAK,EAAE,oGAAoG;KAC5G;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/wasm/fuel.d.ts

@@ -1,35 +0,0 @@
-/**
- * Instruction budget for WASM rules (TD-440): the MCP proxy's stand-in for
- * Wasmtime fuel, which `runner.rs` sets to 1,000,000 per evaluation.
- *
- * V8 has no metering hook, so the rule's own code is rewritten at load to
- * count. A new mutable i32 global starts at the budget, and a charge is
- * inserted at every function entry and every loop header: subtract the number
- * of instructions that can run before the next charge point, and trap
- * (`unreachable`) once the counter goes negative. Code between two charge
- * points is straight-line apart from forward branches, so each charge is an
- * upper bound on what it pays for, and the budget bounds the instructions the
- * rule actually executes. Structural instructions (`block`, `loop`, `end`,
- * `else`, `nop`, `drop`, `return`, `unreachable`) cost nothing, roughly as
- * Wasmtime prices them.
- *
- * The global is exported as `FUEL_EXPORT` so the worker can tell a trap caused
- * by the budget from any other trap. Each evaluation instantiates the module
- * afresh, so the budget is per evaluation, like a Wasmtime `Store`.
- *
- * The decoder knows the MVP instruction set plus the extensions compilers
- * emit by default (sign extension, saturating truncation, bulk memory,
- * reference types, multi-value, tail calls, SIMD). A module using anything
- * else (exceptions, GC, threads) is refused at load rather than run unmetered.
- */
-/** `runner.rs`: `store.set_fuel(1_000_000)`. */
-export declare const DEFAULT_FUEL_BUDGET = 1000000;
-/** The export the worker reads to tell budget exhaustion from other traps. */
-export declare const FUEL_EXPORT = "__intutic_fuel";
-/**
- * The module with every function metered against `budget` instructions per
- * instantiation, and the counter exported as `FUEL_EXPORT`. Throws for a
- * module the decoder cannot meter.
- */
-export declare function meterFuel(bytes: Uint8Array<ArrayBuffer>, budget: number): Uint8Array<ArrayBuffer>;
-//# sourceMappingURL=fuel.d.ts.map

package/dist/wasm/fuel.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fuel.d.ts","sourceRoot":"","sources":["../../src/wasm/fuel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAeH,gDAAgD;AAChD,eAAO,MAAM,mBAAmB,UAAY,CAAA;AAE5C,8EAA8E;AAC9E,eAAO,MAAM,WAAW,mBAAmB,CAAA;AAoM3C;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CA+BjG"}