@intutic/shared-types 2.2.0 → 2.4.0

package/dist/cloudProbe.js

@@ -0,0 +1,254 @@
+"use strict";
+/**
+ * Verification probes for cloud provider credentials: AWS Bedrock and Google
+ * Vertex AI, whose cheapest authenticated call has to be signed per request.
+ *
+ * Still no network here: this builds the request (SigV4-signed, or carrying a
+ * freshly signed service-account assertion) with WebCrypto, which Node and
+ * browsers both provide, and the executors in the CLI and the control plane
+ * send it exactly as they send every other provider's probe.
+ *
+ * - **Bedrock, access key pair**: STS `GetCallerIdentity`, which any valid
+ *   key may call — it proves the key, not its Bedrock permissions, which the
+ *   first model call checks.
+ *   <https://docs.aws.amazon.com/STS/latest/APIReference/API_GetCallerIdentity.html>
+ * - **Bedrock, API key**: `ListFoundationModels` with the key as a bearer
+ *   token (Bedrock API keys work with Bedrock control-plane actions).
+ *   <https://docs.aws.amazon.com/bedrock/latest/userguide/api-keys-use.html>
+ * - **Vertex AI**: the service account's OAuth token exchange — the key is
+ *   valid when Google mints a token for it; project access is checked on the
+ *   first model call. An `authorized_user` file is checked by its refresh
+ *   grant.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GOOGLE_TOKEN_URI = void 0;
+exports.sigv4Headers = sigv4Headers;
+exports.serviceAccountAssertion = serviceAccountAssertion;
+exports.buildCloudVerificationProbe = buildCloudVerificationProbe;
+const enc = new TextEncoder();
+function subtle() {
+    const s = globalThis.crypto?.subtle;
+    if (!s)
+        throw new Error('WebCrypto is not available in this runtime');
+    return s;
+}
+function hex(buf) {
+    return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, '0')).join('');
+}
+async function sha256Hex(data) {
+    return hex(await subtle().digest('SHA-256', enc.encode(data)));
+}
+async function hmac(key, data) {
+    const k = await subtle().importKey('raw', key, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    return subtle().sign('HMAC', k, enc.encode(data));
+}
+/** RFC 3986 encoding as SigV4 requires it (unreserved characters kept). */
+function uriEncode(s) {
+    return [...enc.encode(s)]
+        .map((b) => {
+        const c = String.fromCharCode(b);
+        return /[A-Za-z0-9\-_.~]/.test(c) ? c : `%${b.toString(16).toUpperCase().padStart(2, '0')}`;
+    })
+        .join('');
+}
+/**
+ * AWS Signature Version 4: the headers to add (`x-amz-date`,
+ * `x-amz-security-token` for temporary credentials, `authorization`).
+ * Held to AWS's published test-suite vectors in this package's tests.
+ */
+async function sigv4Headers(i) {
+    const amzDate = i.now.toISOString().replace(/[-:]/g, '').replace(/\.\d{3}/, '');
+    const date = amzDate.slice(0, 8);
+    const signed = Object.entries(i.headers ?? {}).map(([k, v]) => [
+        k.toLowerCase(),
+        v.trim().replace(/\s+/g, ' '),
+    ]);
+    signed.push(['host', i.host.toLowerCase()], ['x-amz-date', amzDate]);
+    if (i.sessionToken)
+        signed.push(['x-amz-security-token', i.sessionToken]);
+    signed.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    const query = (i.query ?? [])
+        .map(([k, v]) => [uriEncode(k), uriEncode(v)])
+        .sort(([a, x], [b, y]) => (a < b ? -1 : a > b ? 1 : x < y ? -1 : x > y ? 1 : 0))
+        .map(([k, v]) => `${k}=${v}`)
+        .join('&');
+    const signedNames = signed.map(([k]) => k).join(';');
+    const canonical = [
+        i.method,
+        i.path,
+        query,
+        signed.map(([k, v]) => `${k}:${v}\n`).join(''),
+        signedNames,
+        await sha256Hex(i.body),
+    ].join('\n');
+    const scope = `${date}/${i.region}/${i.service}/aws4_request`;
+    const stringToSign = `AWS4-HMAC-SHA256\n${amzDate}\n${scope}\n${await sha256Hex(canonical)}`;
+    let key = await hmac(enc.encode(`AWS4${i.secretAccessKey}`), date);
+    key = await hmac(key, i.region);
+    key = await hmac(key, i.service);
+    key = await hmac(key, 'aws4_request');
+    const signature = hex(await hmac(key, stringToSign));
+    const out = { 'x-amz-date': amzDate };
+    if (i.sessionToken)
+        out['x-amz-security-token'] = i.sessionToken;
+    out.authorization = `AWS4-HMAC-SHA256 Credential=${i.accessKeyId}/${scope}, SignedHeaders=${signedNames}, Signature=${signature}`;
+    return out;
+}
+function b64url(data) {
+    const bytes = typeof data === 'string' ? enc.encode(data) : new Uint8Array(data);
+    let bin = '';
+    for (const b of bytes)
+        bin += String.fromCharCode(b);
+    return btoa(bin).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/** An RS256 JWT bearer assertion for Google's token endpoint. */
+async function serviceAccountAssertion(clientEmail, privateKeyPem, privateKeyId, now) {
+    const der = Uint8Array.from(atob(privateKeyPem.replace(/-----[^-]+-----/g, '').replace(/\s+/g, '')), (c) => c.charCodeAt(0));
+    const key = await subtle().importKey('pkcs8', der, { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' }, false, [
+        'sign',
+    ]);
+    const iat = Math.floor(now.getTime() / 1000);
+    const header = { alg: 'RS256', typ: 'JWT', ...(privateKeyId ? { kid: privateKeyId } : {}) };
+    const claims = {
+        iss: clientEmail,
+        scope: 'https://www.googleapis.com/auth/cloud-platform',
+        aud: exports.GOOGLE_TOKEN_URI,
+        iat,
+        exp: iat + 3600,
+    };
+    const input = `${b64url(JSON.stringify(header))}.${b64url(JSON.stringify(claims))}`;
+    const sig = await subtle().sign('RSASSA-PKCS1-v1_5', key, enc.encode(input));
+    return `${input}.${b64url(sig)}`;
+}
+exports.GOOGLE_TOKEN_URI = 'https://oauth2.googleapis.com/token';
+const AWS_INVALID = new Set([
+    'UnrecognizedClientException',
+    'InvalidClientTokenId',
+    'SignatureDoesNotMatch',
+    'InvalidSignatureException',
+    'ExpiredToken',
+    'ExpiredTokenException',
+    'IncompleteSignature',
+]);
+/** AWS: a credential error is invalid; `AccessDenied` means the key authenticated but lacks the permission. */
+function classifyAws(status, headers) {
+    if (status >= 200 && status < 300)
+        return 'valid';
+    const type = (headers.get('x-amzn-errortype') ?? '').split(':')[0];
+    if (AWS_INVALID.has(type))
+        return 'invalid';
+    if (status === 401)
+        return 'invalid';
+    if (status === 403 && !type.startsWith('AccessDenied'))
+        return 'invalid';
+    return 'unknown';
+}
+/** Google's token endpoint answers a bad key with 400 `invalid_grant` or 401 `invalid_client`. */
+function classifyGoogleToken(status) {
+    if (status >= 200 && status < 300)
+        return 'valid';
+    if (status === 400 || status === 401 || status === 403)
+        return 'invalid';
+    return 'unknown';
+}
+const REGION = /^[a-z0-9-]{1,32}$/;
+/**
+ * The verification request for a Bedrock or Vertex AI credential, or `null`
+ * when `fields` are not a complete credential for one.
+ */
+async function buildCloudVerificationProbe(provider, fields, now = new Date()) {
+    if (provider === 'bedrock') {
+        const region = fields.awsRegion?.trim();
+        if (!region || !REGION.test(region))
+            return null;
+        if (fields.awsAccessKeyId && fields.awsSecretAccessKey) {
+            const host = `sts.${region}.amazonaws.com`;
+            const body = 'Action=GetCallerIdentity&Version=2011-06-15';
+            const contentType = 'application/x-www-form-urlencoded; charset=utf-8';
+            const signed = await sigv4Headers({
+                method: 'POST',
+                host,
+                path: '/',
+                headers: { 'content-type': contentType },
+                body,
+                accessKeyId: fields.awsAccessKeyId.trim(),
+                secretAccessKey: fields.awsSecretAccessKey.trim(),
+                region,
+                service: 'sts',
+                now,
+            });
+            return {
+                url: `https://${host}/`,
+                method: 'POST',
+                headers: { 'content-type': contentType, ...signed },
+                body,
+                classify: classifyAws,
+                validDetail: 'the access key is valid; Bedrock model access is checked on the first request',
+            };
+        }
+        if (fields.apiKey) {
+            return {
+                url: `https://bedrock.${region}.amazonaws.com/foundation-models?byProvider=anthropic`,
+                method: 'GET',
+                headers: { Authorization: `Bearer ${fields.apiKey.trim()}` },
+                classify: classifyAws,
+            };
+        }
+        return null;
+    }
+    if (provider === 'vertex_ai') {
+        let doc;
+        try {
+            doc = JSON.parse(fields.serviceAccountJson ?? '');
+        }
+        catch {
+            return null;
+        }
+        if (doc.type === 'service_account' && doc.client_email && doc.private_key) {
+            let assertion;
+            try {
+                assertion = await serviceAccountAssertion(doc.client_email, doc.private_key, doc.private_key_id, now);
+            }
+            catch {
+                // A key that will not import is as invalid as one Google rejects.
+                return {
+                    url: exports.GOOGLE_TOKEN_URI,
+                    method: 'POST',
+                    headers: {},
+                    localVerdict: 'invalid',
+                    validDetail: 'the service-account private_key is not a usable RSA key',
+                };
+            }
+            return {
+                url: exports.GOOGLE_TOKEN_URI,
+                method: 'POST',
+                headers: { 'content-type': 'application/x-www-form-urlencoded' },
+                body: new URLSearchParams({
+                    grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
+                    assertion,
+                }).toString(),
+                classify: classifyGoogleToken,
+                validDetail: 'the service-account key is valid; project access is checked on the first request',
+            };
+        }
+        if (doc.type === 'authorized_user' && doc.client_id && doc.refresh_token) {
+            return {
+                url: exports.GOOGLE_TOKEN_URI,
+                method: 'POST',
+                headers: { 'content-type': 'application/x-www-form-urlencoded' },
+                body: new URLSearchParams({
+                    grant_type: 'refresh_token',
+                    client_id: doc.client_id,
+                    client_secret: doc.client_secret ?? '',
+                    refresh_token: doc.refresh_token,
+                }).toString(),
+                classify: classifyGoogleToken,
+            };
+        }
+        return null;
+    }
+    return null;
+}
+//# sourceMappingURL=cloudProbe.js.map

package/dist/cloudProbe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudProbe.js","sourceRoot":"","sources":["../src/cloudProbe.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAwDH,oCAmCC;AAUD,0DAyBC;AAqCD,kEA+FC;AA9PD,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAE7B,SAAS,MAAM;IACb,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAA;IACnC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IACrE,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,GAAG,CAAC,GAAgB;IAC3B,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACtF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,OAAO,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAChE,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAA6B,EAAE,IAAY;IAC7D,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAClH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,2EAA2E;AAC3E,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;IAC7F,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAA;AACb,CAAC;AAkBD;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAAC,CAAa;IAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAChC,MAAM,MAAM,GAA4B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QACtF,CAAC,CAAC,WAAW,EAAE;QACf,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;KAC9B,CAAC,CAAA;IACF,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAA;IACpE,IAAI,CAAC,CAAC,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAA;IACzE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAU,CAAC;SACtD,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/E,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACpD,MAAM,SAAS,GAAG;QAChB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI;QACN,KAAK;QACL,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,WAAW;QACX,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;KACxB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,eAAe,CAAA;IAC7D,MAAM,YAAY,GAAG,qBAAqB,OAAO,KAAK,KAAK,KAAK,MAAM,SAAS,CAAC,SAAS,CAAC,EAAE,CAAA;IAC5F,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAClE,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;IAC/B,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;IAChC,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAA;IACpD,MAAM,GAAG,GAA2B,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;IAC7D,IAAI,CAAC,CAAC,YAAY;QAAE,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,YAAY,CAAA;IAChE,GAAG,CAAC,aAAa,GAAG,+BAA+B,CAAC,CAAC,WAAW,IAAI,KAAK,mBAAmB,WAAW,eAAe,SAAS,EAAE,CAAA;IACjI,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,MAAM,CAAC,IAAuC;IACrD,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;IAChF,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC7E,CAAC;AAED,iEAAiE;AAC1D,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,aAAqB,EACrB,YAAgC,EAChC,GAAS;IAET,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CACzB,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EACvE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CACvB,CAAA;IACD,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE;QACxG,MAAM;KACP,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IAC3F,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,WAAW;QAChB,KAAK,EAAE,gDAAgD;QACvD,GAAG,EAAE,wBAAgB;QACrB,GAAG;QACH,GAAG,EAAE,GAAG,GAAG,IAAI;KAChB,CAAA;IACD,MAAM,KAAK,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;IACnF,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5E,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;AAClC,CAAC;AAEY,QAAA,gBAAgB,GAAG,qCAAqC,CAAA;AAErE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,6BAA6B;IAC7B,sBAAsB;IACtB,uBAAuB;IACvB,2BAA2B;IAC3B,cAAc;IACd,uBAAuB;IACvB,qBAAqB;CACtB,CAAC,CAAA;AAEF,+GAA+G;AAC/G,SAAS,WAAW,CAAC,MAAc,EAAE,OAA6C;IAChF,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,OAAO,CAAA;IACjD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAClE,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAC3C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,SAAS,CAAA;IACxE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,kGAAkG;AAClG,SAAS,mBAAmB,CAAC,MAAc;IACzC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,OAAO,CAAA;IACjD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IACxE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,mBAAmB,CAAA;AAElC;;;GAGG;AACI,KAAK,UAAU,2BAA2B,CAC/C,QAAgB,EAChB,MAA8B,EAC9B,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAA;QACvC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QAChD,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,OAAO,MAAM,gBAAgB,CAAA;YAC1C,MAAM,IAAI,GAAG,6CAA6C,CAAA;YAC1D,MAAM,WAAW,GAAG,kDAAkD,CAAA;YACtE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;gBAChC,MAAM,EAAE,MAAM;gBACd,IAAI;gBACJ,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;gBACxC,IAAI;gBACJ,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE;gBACzC,eAAe,EAAE,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE;gBACjD,MAAM;gBACN,OAAO,EAAE,KAAK;gBACd,GAAG;aACJ,CAAC,CAAA;YACF,OAAO;gBACL,GAAG,EAAE,WAAW,IAAI,GAAG;gBACvB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE;gBACnD,IAAI;gBACJ,QAAQ,EAAE,WAAW;gBACrB,WAAW,EAAE,+EAA+E;aAC7F,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO;gBACL,GAAG,EAAE,mBAAmB,MAAM,uDAAuD;gBACrF,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE;gBAC5D,QAAQ,EAAE,WAAW;aACtB,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,IAAI,GAA2B,CAAA;QAC/B,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAA2B,CAAA;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAC1E,IAAI,SAAiB,CAAA;YACrB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAA;YACvG,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,OAAO;oBACL,GAAG,EAAE,wBAAgB;oBACrB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE;oBACX,YAAY,EAAE,SAAS;oBACvB,WAAW,EAAE,yDAAyD;iBACvE,CAAA;YACH,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,wBAAgB;gBACrB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,UAAU,EAAE,6CAA6C;oBACzD,SAAS;iBACV,CAAC,CAAC,QAAQ,EAAE;gBACb,QAAQ,EAAE,mBAAmB;gBAC7B,WAAW,EAAE,kFAAkF;aAChG,CAAA;QACH,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACzE,OAAO;gBACL,GAAG,EAAE,wBAAgB;gBACrB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,UAAU,EAAE,eAAe;oBAC3B,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;oBACtC,aAAa,EAAE,GAAG,CAAC,aAAa;iBACjC,CAAC,CAAC,QAAQ,EAAE;gBACb,QAAQ,EAAE,mBAAmB;aAC9B,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/destructiveSql.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Destructive SQL as a text rule: the statements every blocking text scanner
+ * refuses in tool arguments.
+ *
+ * The control plane's DLP (`POST /api/v1/hook-gate`, which both gate SDKs'
+ * server tier, the AgentCore interceptor and the QM security screen run) and
+ * the MCP governance proxy's DLP read both from here. The harness hook gates
+ * carry the same phrases as the `destructive.sql_drop` rule
+ * (`protectedPaths.ts`). Each statement is matched as words by the phrase
+ * matcher (phrases.ts), bounded at both ends: any separator the shell or the
+ * database reads as a word break may split the keywords (a comment, an escaped
+ * newline, a line continuation, `--` options), but `DROP TABLES` and
+ * `truncate --size 0 table.log` are not the statement. No regex runs on the
+ * text, so crafted input cannot make the scan backtrack.
+ * `fixtures/destructive-sql-vectors.json` holds every implementation to the
+ * same answers.
+ *
+ * A text rule, not a SQL parser: a quoted mention (`SELECT 'drop table'`) is
+ * refused too, because quoting is how a shell command carries the real
+ * statement (`psql -c 'DROP TABLE x'`). The proxy's `sql_guard`, which parses
+ * the SQL a client will run, is the one that tells them apart.
+ */
+import { type PhraseText } from './phrases.js';
+/** The statements a text scanner refuses, and the phrase that finds each. */
+export declare const DESTRUCTIVE_SQL_STATEMENTS: readonly [{
+    readonly statement: "DROP TABLE";
+    readonly phrase: "drop table";
+    readonly description: "SQL DROP TABLE statement";
+}, {
+    readonly statement: "DROP DATABASE";
+    readonly phrase: "drop database";
+    readonly description: "SQL DROP DATABASE statement";
+}, {
+    readonly statement: "DROP SCHEMA";
+    readonly phrase: "drop schema";
+    readonly description: "SQL DROP SCHEMA statement";
+}, {
+    readonly statement: "TRUNCATE TABLE";
+    readonly phrase: "truncate table";
+    readonly description: "SQL TRUNCATE TABLE statement";
+}];
+export type DestructiveSqlStatement = (typeof DESTRUCTIVE_SQL_STATEMENTS)[number]['statement'];
+/**
+ * The destructive statements `text` contains, in {@link DESTRUCTIVE_SQL_STATEMENTS}
+ * order. Pass a {@link PhraseText} already cut from the text to reuse it.
+ */
+export declare function findDestructiveSql(text: string | PhraseText): Array<(typeof DESTRUCTIVE_SQL_STATEMENTS)[number]>;
+//# sourceMappingURL=destructiveSql.d.ts.map

package/dist/destructiveSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destructiveSql.d.ts","sourceRoot":"","sources":["../src/destructiveSql.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAyB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAA;AAErE,6EAA6E;AAC7E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;EAK7B,CAAA;AAEV,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAA;AAE9F;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC,CAGhH"}

package/dist/destructiveSql.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DESTRUCTIVE_SQL_STATEMENTS = void 0;
+exports.findDestructiveSql = findDestructiveSql;
+/**
+ * Destructive SQL as a text rule: the statements every blocking text scanner
+ * refuses in tool arguments.
+ *
+ * The control plane's DLP (`POST /api/v1/hook-gate`, which both gate SDKs'
+ * server tier, the AgentCore interceptor and the QM security screen run) and
+ * the MCP governance proxy's DLP read both from here. The harness hook gates
+ * carry the same phrases as the `destructive.sql_drop` rule
+ * (`protectedPaths.ts`). Each statement is matched as words by the phrase
+ * matcher (phrases.ts), bounded at both ends: any separator the shell or the
+ * database reads as a word break may split the keywords (a comment, an escaped
+ * newline, a line continuation, `--` options), but `DROP TABLES` and
+ * `truncate --size 0 table.log` are not the statement. No regex runs on the
+ * text, so crafted input cannot make the scan backtrack.
+ * `fixtures/destructive-sql-vectors.json` holds every implementation to the
+ * same answers.
+ *
+ * A text rule, not a SQL parser: a quoted mention (`SELECT 'drop table'`) is
+ * refused too, because quoting is how a shell command carries the real
+ * statement (`psql -c 'DROP TABLE x'`). The proxy's `sql_guard`, which parses
+ * the SQL a client will run, is the one that tells them apart.
+ */
+const phrases_js_1 = require("./phrases.js");
+/** The statements a text scanner refuses, and the phrase that finds each. */
+exports.DESTRUCTIVE_SQL_STATEMENTS = [
+    { statement: 'DROP TABLE', phrase: 'drop table', description: 'SQL DROP TABLE statement' },
+    { statement: 'DROP DATABASE', phrase: 'drop database', description: 'SQL DROP DATABASE statement' },
+    { statement: 'DROP SCHEMA', phrase: 'drop schema', description: 'SQL DROP SCHEMA statement' },
+    { statement: 'TRUNCATE TABLE', phrase: 'truncate table', description: 'SQL TRUNCATE TABLE statement' },
+];
+/**
+ * The destructive statements `text` contains, in {@link DESTRUCTIVE_SQL_STATEMENTS}
+ * order. Pass a {@link PhraseText} already cut from the text to reuse it.
+ */
+function findDestructiveSql(text) {
+    const words = typeof text === 'string' ? (0, phrases_js_1.phraseText)(text) : text;
+    return exports.DESTRUCTIVE_SQL_STATEMENTS.filter((s) => (0, phrases_js_1.hasPhrase)(words, s.phrase, true));
+}
+//# sourceMappingURL=destructiveSql.js.map

package/dist/destructiveSql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destructiveSql.js","sourceRoot":"","sources":["../src/destructiveSql.ts"],"names":[],"mappings":";;;AAsCA,gDAGC;AAzCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,6CAAqE;AAErE,6EAA6E;AAChE,QAAA,0BAA0B,GAAG;IACxC,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE;IAC1F,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,6BAA6B,EAAE;IACnG,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAC7F,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,8BAA8B,EAAE;CAC9F,CAAA;AAIV;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,IAAyB;IAC1D,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,uBAAU,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAChE,OAAO,kCAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,sBAAS,EAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;AACnF,CAAC"}

package/dist/devInventory.d.ts

@@ -0,0 +1,120 @@
+/**
+ * devInventory.ts — the AI inventory a connected developer machine reports.
+ *
+ * `intutic connect` collects it (the sync daemon's `inventory.ts`): the AI
+ * coding harnesses the machine has, whether Intutic's gate runs for each, the
+ * MCP servers their configs declare, and the skill bundles on disk. It travels
+ * as the `inventory` facet of `POST /api/v1/agents/report`, and the control
+ * plane keeps the latest copy per device with first-seen and last-seen times
+ * per item.
+ *
+ * What it may carry is deliberately narrow: names, paths relative to the home
+ * directory, content hashes and timestamps. Never file contents, environment
+ * values, command lines or URL query strings. {@link homeRelativePath} and
+ * {@link sanitizeMcpEndpoint} are where that rule is applied on the machine;
+ * the control plane applies {@link sanitizeMcpEndpoint} again on ingest, so a
+ * daemon that skipped it still cannot store a credential.
+ *
+ * @module
+ */
+import type { GateKind } from './gateKind.js';
+/** Bumped when a field's meaning changes; the control plane refuses versions it does not know. */
+export declare const DEVICE_INVENTORY_SCHEMA_VERSION = 1;
+/** How a harness's tool calls are gated (`gateKind.ts`). */
+export type InventoryGateKind = GateKind;
+/** One harness found on the machine, by detection or because `intutic connect` is configured for it. */
+export interface InventoryHarness {
+    /**
+     * A `HarnessType` value, or for the harness with two gates the gate id of
+     * the product found (`antigravity`, `gemini-cli`; see `gateIdentity.ts`).
+     */
+    type: string;
+    /** Only where the install records it cheaply, such as a VS Code extension directory name. */
+    version?: string;
+    /** True when it is one of this machine's `intutic connect` harnesses, the ones connect installs a gate for. */
+    configured: boolean;
+    /**
+     * True when `intutic disconnect --harness` removed Intutic from it on this
+     * machine: ungoverned by the user's choice, so its first appearance as
+     * ungoverned is not announced.
+     */
+    disconnected?: boolean;
+    gateKind: InventoryGateKind;
+    /** For a `hook` gate, whether its gate file is on disk; null when the gate is not a file the daemon writes. */
+    gateInstalled: boolean | null;
+    /** Where the gate file was found, relative to the home directory. */
+    gateFile?: string;
+    /** Newest event this machine's gate for the harness wrote, as the daemon drained it. */
+    lastHookEventAt: string | null;
+    /** Newest `guards_disabled` event: the gate ran with `INTUTIC_GUARD_DISABLE=1`. */
+    guardsDisabledAt: string | null;
+}
+/** One MCP server a harness config on the machine declares. */
+export interface InventoryMcpServer {
+    server: string;
+    harness: string;
+    transport: 'stdio' | 'http' | 'sse' | 'unknown';
+    /** True when the MCP governance proxy fronts it. */
+    wrapped: boolean;
+    /** A remote server's URL after {@link sanitizeMcpEndpoint}; absent for a local (stdio) server. */
+    endpoint?: string;
+    /** Why the harness runs it without the proxy, when the daemon can say. */
+    ungovernedReason?: string;
+}
+/** One skill bundle (a directory holding `SKILL.md`). */
+export interface InventorySkill {
+    name: string;
+    /** The directory it was found in, relative to the workspace (`.agents/skills`) or the home directory (`~/.claude/skills`). */
+    source: string;
+    /** sha256 of `SKILL.md`; absent when it could not be read. */
+    sha256?: string;
+    scanned: boolean;
+    clean: boolean;
+    findingsCount: number;
+    /** Files bundled next to `SKILL.md`. */
+    scriptCount: number;
+}
+/** The local proxy's last scheduled guard-liveness probe run. */
+export interface InventoryGuardProbes {
+    total: number;
+    failed: number;
+    /** Unix seconds. */
+    ranAt: number;
+}
+/** The whole snapshot one machine sends. */
+export interface DeviceInventory {
+    schemaVersion: typeof DEVICE_INVENTORY_SCHEMA_VERSION;
+    collectedAt: string;
+    /** The `intutic connect` workspace root, relative to the home directory. */
+    workspace: string;
+    harnesses: InventoryHarness[];
+    mcpServers: InventoryMcpServer[];
+    skills: InventorySkill[];
+    /** Present only when the local proxy answered. */
+    guardProbes?: InventoryGuardProbes;
+}
+/** The machine a report comes from: the same fingerprint `intutic enforce` reports to `/api/v1/devices`. */
+export interface InventoryDeviceIdentity {
+    fingerprint: string;
+    hostname: string;
+    platform: string;
+    cliVersion?: string;
+}
+/** What a path outside the home directory is reported as. */
+export declare const REDACTED_PATH = "[redacted]";
+/**
+ * `~/...` for a path inside `home`, `~` for `home` itself, and
+ * {@link REDACTED_PATH} for anything else: a path outside the home directory
+ * names nothing the inventory needs, and may name another user's files.
+ */
+export declare function homeRelativePath(absolutePath: string, home: string): string;
+/** Replaces a URL path segment that looks like a token. */
+export declare const REDACTED_SEGMENT = "[redacted]";
+/**
+ * A remote MCP server's URL with what could be a credential removed: the
+ * user name and password, the query string, the fragment, and any path
+ * segment that looks like a token. `undefined` for anything that is not an
+ * http(s) or ws(s) URL, including one still holding `${VAR}` in its host.
+ */
+export declare function sanitizeMcpEndpoint(raw: string): string | undefined;
+//# sourceMappingURL=devInventory.d.ts.map

package/dist/devInventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devInventory.d.ts","sourceRoot":"","sources":["../src/devInventory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAE7C,kGAAkG;AAClG,eAAO,MAAM,+BAA+B,IAAI,CAAA;AAEhD,4DAA4D;AAC5D,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAA;AAExC,wGAAwG;AACxG,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ,6FAA6F;IAC7F,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,+GAA+G;IAC/G,UAAU,EAAE,OAAO,CAAA;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,+GAA+G;IAC/G,aAAa,EAAE,OAAO,GAAG,IAAI,CAAA;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,wFAAwF;IACxF,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,mFAAmF;IACnF,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAChC;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAA;IAC/C,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAA;IAChB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,yDAAyD;AACzD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,8HAA8H;IAC9H,MAAM,EAAE,MAAM,CAAA;IACd,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,4CAA4C;AAC5C,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,OAAO,+BAA+B,CAAA;IACrD,WAAW,EAAE,MAAM,CAAA;IACnB,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,gBAAgB,EAAE,CAAA;IAC7B,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,kDAAkD;IAClD,WAAW,CAAC,EAAE,oBAAoB,CAAA;CACnC;AAED,4GAA4G;AAC5G,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,6DAA6D;AAC7D,eAAO,MAAM,aAAa,eAAe,CAAA;AAEzC;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAO3E;AAED,2DAA2D;AAC3D,eAAO,MAAM,gBAAgB,eAAe,CAAA;AAW5C;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAenE"}

package/dist/devInventory.js

@@ -0,0 +1,80 @@
+"use strict";
+/**
+ * devInventory.ts — the AI inventory a connected developer machine reports.
+ *
+ * `intutic connect` collects it (the sync daemon's `inventory.ts`): the AI
+ * coding harnesses the machine has, whether Intutic's gate runs for each, the
+ * MCP servers their configs declare, and the skill bundles on disk. It travels
+ * as the `inventory` facet of `POST /api/v1/agents/report`, and the control
+ * plane keeps the latest copy per device with first-seen and last-seen times
+ * per item.
+ *
+ * What it may carry is deliberately narrow: names, paths relative to the home
+ * directory, content hashes and timestamps. Never file contents, environment
+ * values, command lines or URL query strings. {@link homeRelativePath} and
+ * {@link sanitizeMcpEndpoint} are where that rule is applied on the machine;
+ * the control plane applies {@link sanitizeMcpEndpoint} again on ingest, so a
+ * daemon that skipped it still cannot store a credential.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REDACTED_SEGMENT = exports.REDACTED_PATH = exports.DEVICE_INVENTORY_SCHEMA_VERSION = void 0;
+exports.homeRelativePath = homeRelativePath;
+exports.sanitizeMcpEndpoint = sanitizeMcpEndpoint;
+/** Bumped when a field's meaning changes; the control plane refuses versions it does not know. */
+exports.DEVICE_INVENTORY_SCHEMA_VERSION = 1;
+/** What a path outside the home directory is reported as. */
+exports.REDACTED_PATH = '[redacted]';
+/**
+ * `~/...` for a path inside `home`, `~` for `home` itself, and
+ * {@link REDACTED_PATH} for anything else: a path outside the home directory
+ * names nothing the inventory needs, and may name another user's files.
+ */
+function homeRelativePath(absolutePath, home) {
+    const sep = home.includes('\\') && !home.includes('/') ? '\\' : '/';
+    const base = home.endsWith(sep) ? home.slice(0, -1) : home;
+    if (base === '')
+        return exports.REDACTED_PATH;
+    if (absolutePath === base)
+        return '~';
+    if (absolutePath.startsWith(base + sep))
+        return `~/${absolutePath.slice(base.length + 1).split(sep).join('/')}`;
+    return exports.REDACTED_PATH;
+}
+/** Replaces a URL path segment that looks like a token. */
+exports.REDACTED_SEGMENT = '[redacted]';
+/**
+ * A path segment of 16 or more URL-safe characters mixing letters and digits.
+ * Some MCP services put the API key in the path (`/mcp/<key>/sse`); a
+ * readable route segment (`sse`, `v1`, `mcp-server`) does not look like this.
+ */
+function looksLikeToken(segment) {
+    return segment.length >= 16 && /^[A-Za-z0-9._~%-]+$/.test(segment) && /[A-Za-z]/.test(segment) && /[0-9]/.test(segment);
+}
+/**
+ * A remote MCP server's URL with what could be a credential removed: the
+ * user name and password, the query string, the fragment, and any path
+ * segment that looks like a token. `undefined` for anything that is not an
+ * http(s) or ws(s) URL, including one still holding `${VAR}` in its host.
+ */
+function sanitizeMcpEndpoint(raw) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        return undefined;
+    }
+    if (!['http:', 'https:', 'ws:', 'wss:'].includes(url.protocol))
+        return undefined;
+    // A host still templated (`${MCP_HOST}`) names no server yet.
+    if (/[${}]/.test(url.hostname))
+        return undefined;
+    const path = url.pathname
+        .split('/')
+        .map((segment) => (looksLikeToken(segment) ? exports.REDACTED_SEGMENT : segment))
+        .join('/');
+    return `${url.protocol}//${url.host}${path === '/' ? '' : path}`;
+}
+//# sourceMappingURL=devInventory.js.map

package/dist/devInventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devInventory.js","sourceRoot":"","sources":["../src/devInventory.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAsGH,4CAOC;AAoBD,kDAeC;AA5ID,kGAAkG;AACrF,QAAA,+BAA+B,GAAG,CAAC,CAAA;AAyFhD,6DAA6D;AAChD,QAAA,aAAa,GAAG,YAAY,CAAA;AAEzC;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,YAAoB,EAAE,IAAY;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1D,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,qBAAa,CAAA;IACrC,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,GAAG,CAAA;IACrC,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAC/G,OAAO,qBAAa,CAAA;AACtB,CAAC;AAED,2DAA2D;AAC9C,QAAA,gBAAgB,GAAG,YAAY,CAAA;AAE5C;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACzH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAA;IAChF,8DAA8D;IAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAA;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ;SACtB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,wBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACxE,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAClE,CAAC"}