@intutic/shared-types 2.4.0 → 2.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/anomaly.d.ts +0 -19
- package/dist/anomaly.d.ts.map +1 -1
- package/dist/attenuation.d.ts +4 -3
- package/dist/attenuation.d.ts.map +1 -1
- package/dist/attenuation.js +4 -3
- package/dist/attenuation.js.map +1 -1
- package/dist/chaos.d.ts +2225 -0
- package/dist/chaos.d.ts.map +1 -0
- package/dist/chaos.js +358 -0
- package/dist/chaos.js.map +1 -0
- package/dist/chaosGate.d.ts +166 -0
- package/dist/chaosGate.d.ts.map +1 -0
- package/dist/chaosGate.js +383 -0
- package/dist/chaosGate.js.map +1 -0
- package/dist/finops.d.ts +0 -18
- package/dist/finops.d.ts.map +1 -1
- package/dist/guardrailIr.d.ts +6 -6
- package/dist/index.d.ts +10 -6
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +38 -8
- package/dist/index.js.map +1 -1
- package/dist/intelligence.d.ts +3 -100
- package/dist/intelligence.d.ts.map +1 -1
- package/dist/intelligence.js +3 -3
- package/dist/intelligence.js.map +1 -1
- package/dist/mcpBudgets.d.ts +16 -16
- package/dist/notifications.d.ts +1 -1
- package/dist/notifications.d.ts.map +1 -1
- package/dist/notifications.js +9 -4
- package/dist/notifications.js.map +1 -1
- package/dist/observability.d.ts +0 -31
- package/dist/observability.d.ts.map +1 -1
- package/dist/observability.js +0 -7
- package/dist/observability.js.map +1 -1
- package/dist/opaqueRefusal.d.ts +40 -0
- package/dist/opaqueRefusal.d.ts.map +1 -0
- package/dist/opaqueRefusal.js +53 -0
- package/dist/opaqueRefusal.js.map +1 -0
- package/dist/policyGuardrails.d.ts +5 -5
- package/dist/taskManagement.d.ts +34 -82
- package/dist/taskManagement.d.ts.map +1 -1
- package/dist/taskManagement.js +4 -4
- package/dist/toolPoison.d.ts +15 -2
- package/dist/toolPoison.d.ts.map +1 -1
- package/dist/toolPoison.js +14 -4
- package/dist/toolPoison.js.map +1 -1
- package/dist/workspaceSettings.d.ts +5 -4
- package/dist/workspaceSettings.d.ts.map +1 -1
- package/dist/workspaceSettings.js.map +1 -1
- package/package.json +2 -2
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* The OPAQUE intervention mode: an agent is refused without being told which
|
|
3
|
+
* rule refused it.
|
|
4
|
+
*
|
|
5
|
+
* A refusal that names its rule, quotes the rule's text, or says which pattern
|
|
6
|
+
* matched teaches an agent the policy, and an agent that knows the policy can
|
|
7
|
+
* route around it. In an OPAQUE workspace every gate that refuses on workspace
|
|
8
|
+
* policy shows the agent {@link OPAQUE_REFUSAL_MESSAGE} instead, through the
|
|
9
|
+
* same refusal contract: the same exit code, HTTP status and refusal code, so
|
|
10
|
+
* harnesses and clients behave exactly as they would in a TRANSPARENT one.
|
|
11
|
+
* Only the text the agent reads changes. Audit records, trace records,
|
|
12
|
+
* `enforcement_log`, detector findings and the dashboard keep the full reason.
|
|
13
|
+
*
|
|
14
|
+
* Refusals that say nothing about the policy are not changed: a call too large
|
|
15
|
+
* to evaluate, a gate past its deadline, an unreadable payload, a crashed gate,
|
|
16
|
+
* a snapshot that failed its integrity check, and a chaos run's injected fault.
|
|
17
|
+
*
|
|
18
|
+
* `@intutic/gate` carries a byte-identical copy of this module
|
|
19
|
+
* (`packages/gate-js/src/opaqueRefusal.ts`); the Rust proxy (`refusal.rs`)
|
|
20
|
+
* and the Python SDK (`intutic_clawde/gate/opaque.py`) mirror the sentence.
|
|
21
|
+
* `refusal-codes.json` carries it as `opaqueMessage`, and
|
|
22
|
+
* `opaqueRefusalParity.test.ts` holds every copy to it. It carries no quote,
|
|
23
|
+
* dollar sign or backtick, so the hook gates can embed it in generated shell
|
|
24
|
+
* inside single quotes.
|
|
25
|
+
*/
|
|
26
|
+
export declare const OPAQUE_REFUSAL_MESSAGE = "Blocked by workspace policy. Ask a workspace admin if you need this action.";
|
|
27
|
+
/**
|
|
28
|
+
* The policy snapshot's record of an OPAQUE workspace: a data line inside the
|
|
29
|
+
* digest, `@intervention_mode<TAB>OPAQUE`, written only when the mode is
|
|
30
|
+
* OPAQUE, so the snapshot of a TRANSPARENT or SILENT_LOG workspace is
|
|
31
|
+
* unchanged. Two columns, so every rule parser skips it.
|
|
32
|
+
*/
|
|
33
|
+
export declare const INTERVENTION_MODE_RECORD_TAG = "@intervention_mode";
|
|
34
|
+
/** Whether a workspace's resolved intervention mode is OPAQUE. Any case. */
|
|
35
|
+
export declare function isOpaqueInterventionMode(mode: unknown): boolean;
|
|
36
|
+
/** The `.rules` line of an OPAQUE workspace. */
|
|
37
|
+
export declare function encodeInterventionModeRecord(): string;
|
|
38
|
+
/** Whether a `.rules` line is the record of an OPAQUE workspace. */
|
|
39
|
+
export declare function isOpaqueInterventionModeRecord(line: string): boolean;
|
|
40
|
+
//# sourceMappingURL=opaqueRefusal.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"opaqueRefusal.d.ts","sourceRoot":"","sources":["../src/opaqueRefusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,sBAAsB,gFAC4C,CAAA;AAE/E;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,uBAAuB,CAAA;AAEhE,4EAA4E;AAC5E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAE/D;AAED,gDAAgD;AAChD,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED,oEAAoE;AACpE,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGpE"}
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.INTERVENTION_MODE_RECORD_TAG = exports.OPAQUE_REFUSAL_MESSAGE = void 0;
|
|
4
|
+
exports.isOpaqueInterventionMode = isOpaqueInterventionMode;
|
|
5
|
+
exports.encodeInterventionModeRecord = encodeInterventionModeRecord;
|
|
6
|
+
exports.isOpaqueInterventionModeRecord = isOpaqueInterventionModeRecord;
|
|
7
|
+
/**
|
|
8
|
+
* The OPAQUE intervention mode: an agent is refused without being told which
|
|
9
|
+
* rule refused it.
|
|
10
|
+
*
|
|
11
|
+
* A refusal that names its rule, quotes the rule's text, or says which pattern
|
|
12
|
+
* matched teaches an agent the policy, and an agent that knows the policy can
|
|
13
|
+
* route around it. In an OPAQUE workspace every gate that refuses on workspace
|
|
14
|
+
* policy shows the agent {@link OPAQUE_REFUSAL_MESSAGE} instead, through the
|
|
15
|
+
* same refusal contract: the same exit code, HTTP status and refusal code, so
|
|
16
|
+
* harnesses and clients behave exactly as they would in a TRANSPARENT one.
|
|
17
|
+
* Only the text the agent reads changes. Audit records, trace records,
|
|
18
|
+
* `enforcement_log`, detector findings and the dashboard keep the full reason.
|
|
19
|
+
*
|
|
20
|
+
* Refusals that say nothing about the policy are not changed: a call too large
|
|
21
|
+
* to evaluate, a gate past its deadline, an unreadable payload, a crashed gate,
|
|
22
|
+
* a snapshot that failed its integrity check, and a chaos run's injected fault.
|
|
23
|
+
*
|
|
24
|
+
* `@intutic/gate` carries a byte-identical copy of this module
|
|
25
|
+
* (`packages/gate-js/src/opaqueRefusal.ts`); the Rust proxy (`refusal.rs`)
|
|
26
|
+
* and the Python SDK (`intutic_clawde/gate/opaque.py`) mirror the sentence.
|
|
27
|
+
* `refusal-codes.json` carries it as `opaqueMessage`, and
|
|
28
|
+
* `opaqueRefusalParity.test.ts` holds every copy to it. It carries no quote,
|
|
29
|
+
* dollar sign or backtick, so the hook gates can embed it in generated shell
|
|
30
|
+
* inside single quotes.
|
|
31
|
+
*/
|
|
32
|
+
exports.OPAQUE_REFUSAL_MESSAGE = 'Blocked by workspace policy. Ask a workspace admin if you need this action.';
|
|
33
|
+
/**
|
|
34
|
+
* The policy snapshot's record of an OPAQUE workspace: a data line inside the
|
|
35
|
+
* digest, `@intervention_mode<TAB>OPAQUE`, written only when the mode is
|
|
36
|
+
* OPAQUE, so the snapshot of a TRANSPARENT or SILENT_LOG workspace is
|
|
37
|
+
* unchanged. Two columns, so every rule parser skips it.
|
|
38
|
+
*/
|
|
39
|
+
exports.INTERVENTION_MODE_RECORD_TAG = '@intervention_mode';
|
|
40
|
+
/** Whether a workspace's resolved intervention mode is OPAQUE. Any case. */
|
|
41
|
+
function isOpaqueInterventionMode(mode) {
|
|
42
|
+
return typeof mode === 'string' && mode.trim().toUpperCase() === 'OPAQUE';
|
|
43
|
+
}
|
|
44
|
+
/** The `.rules` line of an OPAQUE workspace. */
|
|
45
|
+
function encodeInterventionModeRecord() {
|
|
46
|
+
return `${exports.INTERVENTION_MODE_RECORD_TAG}\tOPAQUE`;
|
|
47
|
+
}
|
|
48
|
+
/** Whether a `.rules` line is the record of an OPAQUE workspace. */
|
|
49
|
+
function isOpaqueInterventionModeRecord(line) {
|
|
50
|
+
const [tag, mode, ...rest] = line.split('\t');
|
|
51
|
+
return tag === exports.INTERVENTION_MODE_RECORD_TAG && rest.length === 0 && isOpaqueInterventionMode(mode);
|
|
52
|
+
}
|
|
53
|
+
//# sourceMappingURL=opaqueRefusal.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"opaqueRefusal.js","sourceRoot":"","sources":["../src/opaqueRefusal.ts"],"names":[],"mappings":";;;AAqCA,4DAEC;AAGD,oEAEC;AAGD,wEAGC;AAlDD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACU,QAAA,sBAAsB,GACjC,6EAA6E,CAAA;AAE/E;;;;;GAKG;AACU,QAAA,4BAA4B,GAAG,oBAAoB,CAAA;AAEhE,4EAA4E;AAC5E,SAAgB,wBAAwB,CAAC,IAAa;IACpD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAA;AAC3E,CAAC;AAED,gDAAgD;AAChD,SAAgB,4BAA4B;IAC1C,OAAO,GAAG,oCAA4B,UAAU,CAAA;AAClD,CAAC;AAED,oEAAoE;AACpE,SAAgB,8BAA8B,CAAC,IAAY;IACzD,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7C,OAAO,GAAG,KAAK,oCAA4B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAA;AACpG,CAAC"}
|
|
@@ -78,8 +78,8 @@ export declare const AuthoredGuardrailCreateSchema: z.ZodObject<{
|
|
|
78
78
|
description?: string | null | undefined;
|
|
79
79
|
}, {
|
|
80
80
|
name: string;
|
|
81
|
-
ir?: unknown;
|
|
82
81
|
description?: string | null | undefined;
|
|
82
|
+
ir?: unknown;
|
|
83
83
|
}>;
|
|
84
84
|
/**
|
|
85
85
|
* `PUT /api/v1/policy-guardrails/guardrails/:guardrailId`: any of the three.
|
|
@@ -91,20 +91,20 @@ export declare const AuthoredGuardrailUpdateSchema: z.ZodEffects<z.ZodObject<{
|
|
|
91
91
|
ir: z.ZodOptional<z.ZodUnknown>;
|
|
92
92
|
}, "strict", z.ZodTypeAny, {
|
|
93
93
|
name?: string | undefined;
|
|
94
|
-
ir?: unknown;
|
|
95
94
|
description?: string | null | undefined;
|
|
95
|
+
ir?: unknown;
|
|
96
96
|
}, {
|
|
97
97
|
name?: string | undefined;
|
|
98
|
-
ir?: unknown;
|
|
99
98
|
description?: string | null | undefined;
|
|
99
|
+
ir?: unknown;
|
|
100
100
|
}>, {
|
|
101
101
|
name?: string | undefined;
|
|
102
|
-
ir?: unknown;
|
|
103
102
|
description?: string | null | undefined;
|
|
103
|
+
ir?: unknown;
|
|
104
104
|
}, {
|
|
105
105
|
name?: string | undefined;
|
|
106
|
-
ir?: unknown;
|
|
107
106
|
description?: string | null | undefined;
|
|
107
|
+
ir?: unknown;
|
|
108
108
|
}>;
|
|
109
109
|
export type AuthoredGuardrailCreate = z.infer<typeof AuthoredGuardrailCreateSchema>;
|
|
110
110
|
export type AuthoredGuardrailUpdate = z.infer<typeof AuthoredGuardrailUpdateSchema>;
|
package/dist/taskManagement.d.ts
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Task Management Adapter —
|
|
2
|
+
* Task Management Adapter — read-only interface over external task trackers
|
|
3
|
+
* and incident tools.
|
|
3
4
|
*
|
|
4
|
-
*
|
|
5
|
-
*
|
|
6
|
-
* create/update tasks based on governance events.
|
|
5
|
+
* The control plane reads tickets (Jira, Linear) and incidents (PagerDuty) to
|
|
6
|
+
* attach task context to agent sessions. It does not create or update them.
|
|
7
7
|
*
|
|
8
8
|
* @module
|
|
9
9
|
*/
|
|
10
|
-
/**
|
|
11
|
-
export type TaskProvider = 'jira' | '
|
|
10
|
+
/** Providers with a registered adapter. */
|
|
11
|
+
export type TaskProvider = 'jira' | 'pagerduty' | 'linear';
|
|
12
12
|
/** Priority levels mapped across providers. */
|
|
13
13
|
export type TaskPriority = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW';
|
|
14
14
|
/** Task status (normalized across providers). */
|
|
@@ -20,62 +20,17 @@ export interface TaskProviderCredentials {
|
|
|
20
20
|
baseUrl: string;
|
|
21
21
|
/** Authentication token or API key. */
|
|
22
22
|
authToken: string;
|
|
23
|
-
/** Project or
|
|
23
|
+
/** Project, team or routing key within the provider. */
|
|
24
24
|
projectKey: string;
|
|
25
|
+
/**
|
|
26
|
+
* Jira Cloud only: the email of the Atlassian account the API token belongs
|
|
27
|
+
* to. Jira Cloud authenticates an API token as Basic `email:token`. A
|
|
28
|
+
* connection stores it as `metadata.accountEmail`.
|
|
29
|
+
*/
|
|
30
|
+
accountEmail?: string;
|
|
25
31
|
/** Additional provider-specific config. */
|
|
26
32
|
metadata?: Record<string, unknown>;
|
|
27
33
|
}
|
|
28
|
-
/** Payload for creating a new task. */
|
|
29
|
-
export interface CreateTaskPayload {
|
|
30
|
-
/** Human-readable task title. */
|
|
31
|
-
title: string;
|
|
32
|
-
/** Markdown description of the task. */
|
|
33
|
-
description: string;
|
|
34
|
-
/** Normalized priority. */
|
|
35
|
-
priority: TaskPriority;
|
|
36
|
-
/** Intutic-specific labels for categorization. */
|
|
37
|
-
labels?: string[];
|
|
38
|
-
/** Assignee identifier (provider-specific). */
|
|
39
|
-
assigneeId?: string;
|
|
40
|
-
/** Link back to the Intutic governance event. */
|
|
41
|
-
intuticLink?: {
|
|
42
|
-
/** Type of governance event that created this task. */
|
|
43
|
-
eventType: 'INCIDENT' | 'ANOMALY' | 'SOP_REVIEW' | 'COMPLIANCE';
|
|
44
|
-
/** ID of the governance event. */
|
|
45
|
-
eventId: string;
|
|
46
|
-
/** Workspace this event belongs to. */
|
|
47
|
-
workspaceId: string;
|
|
48
|
-
};
|
|
49
|
-
}
|
|
50
|
-
/** Result of creating a task in the external system. */
|
|
51
|
-
export interface CreateTaskResult {
|
|
52
|
-
/** Whether the task was successfully created. */
|
|
53
|
-
success: boolean;
|
|
54
|
-
/** External task ID (e.g., Jira issue key like "PROJ-123"). */
|
|
55
|
-
externalTaskId?: string;
|
|
56
|
-
/** URL to the task in the external system. */
|
|
57
|
-
externalUrl?: string;
|
|
58
|
-
/** Error message if creation failed. */
|
|
59
|
-
error?: string;
|
|
60
|
-
}
|
|
61
|
-
/** Payload for updating an existing task. */
|
|
62
|
-
export interface UpdateTaskPayload {
|
|
63
|
-
/** External task ID to update. */
|
|
64
|
-
externalTaskId: string;
|
|
65
|
-
/** New status (optional). */
|
|
66
|
-
status?: TaskStatus;
|
|
67
|
-
/** Comment to add (optional). */
|
|
68
|
-
comment?: string;
|
|
69
|
-
/** Updated priority (optional). */
|
|
70
|
-
priority?: TaskPriority;
|
|
71
|
-
/** Additional fields (provider-specific). */
|
|
72
|
-
fields?: Record<string, unknown>;
|
|
73
|
-
}
|
|
74
|
-
/** Result of updating a task. */
|
|
75
|
-
export interface UpdateTaskResult {
|
|
76
|
-
success: boolean;
|
|
77
|
-
error?: string;
|
|
78
|
-
}
|
|
79
34
|
/** A task as retrieved from the external system. */
|
|
80
35
|
export interface ExternalTask {
|
|
81
36
|
externalTaskId: string;
|
|
@@ -90,13 +45,22 @@ export interface ExternalTask {
|
|
|
90
45
|
sprint?: string;
|
|
91
46
|
epic?: string;
|
|
92
47
|
}
|
|
48
|
+
/** Filters for `TaskManagementAdapter.searchTasks`. */
|
|
49
|
+
export interface TaskSearchFilters {
|
|
50
|
+
status?: TaskStatus;
|
|
51
|
+
priority?: TaskPriority;
|
|
52
|
+
labels?: string[];
|
|
53
|
+
/**
|
|
54
|
+
* The provider's own id for the assignee. An adapter must apply it: a search
|
|
55
|
+
* for one person's work that comes back with everyone's is worse than none.
|
|
56
|
+
*/
|
|
57
|
+
assigneeId?: string;
|
|
58
|
+
}
|
|
93
59
|
/**
|
|
94
60
|
* Generic task management adapter interface.
|
|
95
61
|
*
|
|
96
|
-
* Implementations
|
|
97
|
-
*
|
|
98
|
-
* when governance events (incidents, anomalies, SOP reviews) require
|
|
99
|
-
* external task creation or updates.
|
|
62
|
+
* Implementations read from an external tracker so the control plane can
|
|
63
|
+
* resolve which ticket or incident an agent session is working on.
|
|
100
64
|
*/
|
|
101
65
|
export interface TaskManagementAdapter {
|
|
102
66
|
/** Provider name for this adapter. */
|
|
@@ -106,18 +70,6 @@ export interface TaskManagementAdapter {
|
|
|
106
70
|
* @returns true if the connection is healthy
|
|
107
71
|
*/
|
|
108
72
|
testConnection(): Promise<boolean>;
|
|
109
|
-
/**
|
|
110
|
-
* Create a new task in the external system.
|
|
111
|
-
* @param payload - Task creation payload
|
|
112
|
-
* @returns Result with external task ID and URL
|
|
113
|
-
*/
|
|
114
|
-
createTask(payload: CreateTaskPayload): Promise<CreateTaskResult>;
|
|
115
|
-
/**
|
|
116
|
-
* Update an existing task in the external system.
|
|
117
|
-
* @param payload - Task update payload
|
|
118
|
-
* @returns Result indicating success/failure
|
|
119
|
-
*/
|
|
120
|
-
updateTask(payload: UpdateTaskPayload): Promise<UpdateTaskResult>;
|
|
121
73
|
/**
|
|
122
74
|
* Retrieve a task by its external ID.
|
|
123
75
|
* @param externalTaskId - The external system's task identifier
|
|
@@ -125,15 +77,15 @@ export interface TaskManagementAdapter {
|
|
|
125
77
|
*/
|
|
126
78
|
getTask(externalTaskId: string): Promise<ExternalTask | null>;
|
|
127
79
|
/**
|
|
128
|
-
* Search for tasks
|
|
129
|
-
*
|
|
130
|
-
*
|
|
80
|
+
* Search for open tasks.
|
|
81
|
+
*
|
|
82
|
+
* Rejects when the provider cannot be asked (unreachable, refused, timed
|
|
83
|
+
* out), so a caller can tell "nothing open" from "could not ask".
|
|
84
|
+
*
|
|
85
|
+
* @param workspaceId - Intutic workspace ID, for logging
|
|
86
|
+
* @param filters - Optional filters (status, priority, labels, assignee)
|
|
131
87
|
* @returns List of matching external tasks
|
|
132
88
|
*/
|
|
133
|
-
searchTasks(workspaceId: string, filters?:
|
|
134
|
-
status?: TaskStatus;
|
|
135
|
-
priority?: TaskPriority;
|
|
136
|
-
labels?: string[];
|
|
137
|
-
}): Promise<ExternalTask[]>;
|
|
89
|
+
searchTasks(workspaceId: string, filters?: TaskSearchFilters): Promise<ExternalTask[]>;
|
|
138
90
|
}
|
|
139
91
|
//# sourceMappingURL=taskManagement.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"taskManagement.d.ts","sourceRoot":"","sources":["../src/taskManagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,2CAA2C;AAC3C,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,
|
|
1
|
+
{"version":3,"file":"taskManagement.d.ts","sourceRoot":"","sources":["../src/taskManagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,2CAA2C;AAC3C,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAA;AAE1D,+CAA+C;AAC/C,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEjE,iDAAiD;AACjD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,UAAU,GAAG,QAAQ,CAAA;AAEvE,gEAAgE;AAChE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,YAAY,CAAA;IACtB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAA;IACf,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAA;IACjB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,UAAU,CAAA;IAClB,QAAQ,EAAE,YAAY,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,uDAAuD;AACvD,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,QAAQ,CAAC,EAAE,YAAY,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAID;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAE/B;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IAElC;;;;OAIG;IACH,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAE7D;;;;;;;;;OASG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;CACvF"}
|
package/dist/taskManagement.js
CHANGED
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
/**
|
|
3
|
-
* Task Management Adapter —
|
|
3
|
+
* Task Management Adapter — read-only interface over external task trackers
|
|
4
|
+
* and incident tools.
|
|
4
5
|
*
|
|
5
|
-
*
|
|
6
|
-
*
|
|
7
|
-
* create/update tasks based on governance events.
|
|
6
|
+
* The control plane reads tickets (Jira, Linear) and incidents (PagerDuty) to
|
|
7
|
+
* attach task context to agent sessions. It does not create or update them.
|
|
8
8
|
*
|
|
9
9
|
* @module
|
|
10
10
|
*/
|
package/dist/toolPoison.d.ts
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* toolPoison.ts — Tool-description poisoning patterns.
|
|
3
3
|
*
|
|
4
4
|
* Direct TypeScript port of `packages/proxy/src/tool_poison.rs`'s `scan`
|
|
5
|
-
* function and its
|
|
5
|
+
* function and its named patterns. This is a SEPARATE pattern set from
|
|
6
6
|
* the MCP proxy's `injection.ts`, on purpose: `tool_poison.rs`'s own module
|
|
7
7
|
* doc records that it tried reusing `injection::scan` for this and measured
|
|
8
8
|
* that its five patterns match ZERO of the tool-poisoning payloads — they are
|
|
@@ -21,10 +21,23 @@
|
|
|
21
21
|
* module's own `gating_never_changes_a_verdict` test), and the volume of tool
|
|
22
22
|
* descriptions scanned here is orders of magnitude below the Rust proxy's
|
|
23
23
|
* request path. The pattern SOURCE TEXT below is unchanged from the Rust
|
|
24
|
-
* `PATTERNS` array
|
|
24
|
+
* `PATTERNS` array, `/` escaped as `\/` for a regex literal;
|
|
25
|
+
* `__tests__/toolPoison.test.ts` reads the Rust file and holds the two equal.
|
|
25
26
|
*
|
|
26
27
|
@module
|
|
27
28
|
*/
|
|
29
|
+
export interface ToolPoisonPattern {
|
|
30
|
+
name: string;
|
|
31
|
+
regex: RegExp;
|
|
32
|
+
}
|
|
33
|
+
/**
|
|
34
|
+
* Ported verbatim from `tool_poison.rs`'s `PATTERNS` const. All bounded
|
|
35
|
+
* repetitions here are small fixed-width gaps (`{0,40}`, `{0,60}`, `{0,80}`)
|
|
36
|
+
* over a handful of alternations — the same "no wide bounded repetition, no
|
|
37
|
+
* RegexSet performance regression" shape the MCP proxy's `injection.ts` documents, not the
|
|
38
|
+
* `dlp.rs` shape that regressed.
|
|
39
|
+
*/
|
|
40
|
+
export declare const TOOL_POISON_PATTERNS: readonly ToolPoisonPattern[];
|
|
28
41
|
/**
|
|
29
42
|
* Pattern names matching this tool description, deduplicated, empty when it
|
|
30
43
|
* looks like ordinary prose (the overwhelmingly common case).
|
package/dist/toolPoison.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"toolPoison.d.ts","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"toolPoison.d.ts","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,iBAAiB,EA2C5D,CAAA;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAOjE"}
|
package/dist/toolPoison.js
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
* toolPoison.ts — Tool-description poisoning patterns.
|
|
4
4
|
*
|
|
5
5
|
* Direct TypeScript port of `packages/proxy/src/tool_poison.rs`'s `scan`
|
|
6
|
-
* function and its
|
|
6
|
+
* function and its named patterns. This is a SEPARATE pattern set from
|
|
7
7
|
* the MCP proxy's `injection.ts`, on purpose: `tool_poison.rs`'s own module
|
|
8
8
|
* doc records that it tried reusing `injection::scan` for this and measured
|
|
9
9
|
* that its five patterns match ZERO of the tool-poisoning payloads — they are
|
|
@@ -22,11 +22,13 @@
|
|
|
22
22
|
* module's own `gating_never_changes_a_verdict` test), and the volume of tool
|
|
23
23
|
* descriptions scanned here is orders of magnitude below the Rust proxy's
|
|
24
24
|
* request path. The pattern SOURCE TEXT below is unchanged from the Rust
|
|
25
|
-
* `PATTERNS` array
|
|
25
|
+
* `PATTERNS` array, `/` escaped as `\/` for a regex literal;
|
|
26
|
+
* `__tests__/toolPoison.test.ts` reads the Rust file and holds the two equal.
|
|
26
27
|
*
|
|
27
28
|
@module
|
|
28
29
|
*/
|
|
29
30
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
31
|
+
exports.TOOL_POISON_PATTERNS = void 0;
|
|
30
32
|
exports.scanToolDescription = scanToolDescription;
|
|
31
33
|
/**
|
|
32
34
|
* Ported verbatim from `tool_poison.rs`'s `PATTERNS` const. All bounded
|
|
@@ -35,7 +37,7 @@ exports.scanToolDescription = scanToolDescription;
|
|
|
35
37
|
* RegexSet performance regression" shape the MCP proxy's `injection.ts` documents, not the
|
|
36
38
|
* `dlp.rs` shape that regressed.
|
|
37
39
|
*/
|
|
38
|
-
|
|
40
|
+
exports.TOOL_POISON_PATTERNS = [
|
|
39
41
|
{
|
|
40
42
|
name: 'hidden-instruction-block',
|
|
41
43
|
regex: /<\s*(important|secret|system|hidden|instructions?)\s*>/i,
|
|
@@ -67,6 +69,14 @@ const PATTERNS = [
|
|
|
67
69
|
name: 'tool-scoped-instruction-override',
|
|
68
70
|
regex: /\b(ignore|disregard|override)\b[^.!?]{0,40}\b(other\s+tools?|previous\s+tools?|system\s+prompt)\b/i,
|
|
69
71
|
},
|
|
72
|
+
{
|
|
73
|
+
// An order to run a command that destroys the machine or its data: a
|
|
74
|
+
// recursive delete of the filesystem root or the home directory (never a
|
|
75
|
+
// path below either), formatting or raw-writing a block device, dropping a
|
|
76
|
+
// database, piping a download into a shell, a fork bomb.
|
|
77
|
+
name: 'destructive-command-instruction',
|
|
78
|
+
regex: /\b(run|execute|exec|invoke|issue|type|enter|paste)\b[^.!?]{0,40}(\brm\s+-[a-z-]*[rf][a-z-]*\s+(-\S+\s+){0,4}["'`]?(\/\*?|~\/?\*?|\$\{?home\}?\/?\*?)(["'`;&|)\s]|$)|\bmkfs\b|\bdd\s[^.!?]{0,60}\bof=\/dev\/|\bdrop\s+(database|schema)\b|\b(curl|wget)\s[^|\n]{0,120}\|\s*(sudo\s+)?(ba|z|da|k)?sh\b|:\(\)\s*\{\s*:\s*\|\s*:)/i,
|
|
79
|
+
},
|
|
70
80
|
];
|
|
71
81
|
/**
|
|
72
82
|
* Pattern names matching this tool description, deduplicated, empty when it
|
|
@@ -76,7 +86,7 @@ function scanToolDescription(description) {
|
|
|
76
86
|
if (!description)
|
|
77
87
|
return [];
|
|
78
88
|
const found = [];
|
|
79
|
-
for (const { name, regex } of
|
|
89
|
+
for (const { name, regex } of exports.TOOL_POISON_PATTERNS) {
|
|
80
90
|
if (regex.test(description))
|
|
81
91
|
found.push(name);
|
|
82
92
|
}
|
package/dist/toolPoison.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"toolPoison.js","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":";AAAA
|
|
1
|
+
{"version":3,"file":"toolPoison.js","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AA+DH,kDAOC;AA/DD;;;;;;GAMG;AACU,QAAA,oBAAoB,GAAiC;IAChE;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,yDAAyD;KACjE;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,oKAAoK;KACvK;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,qEAAqE;QACrE,iEAAiE;QACjE,sDAAsD;QACtD,KAAK,EAAE,+GAA+G;KACvH;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,0GAA0G;KAClH;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,kHAAkH;KAC1H;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,KAAK,EAAE,oGAAoG;KAC5G;IACD;QACE,qEAAqE;QACrE,yEAAyE;QACzE,2EAA2E;QAC3E,yDAAyD;QACzD,IAAI,EAAE,iCAAiC;QACvC,KAAK,EACH,gUAAgU;KACnU;CACF,CAAA;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,WAAmB;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,4BAAoB,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}
|
|
@@ -171,8 +171,9 @@ export interface WorkspaceSettings {
|
|
|
171
171
|
*
|
|
172
172
|
* Declaring it here is not enough on its own — the PUT schema in
|
|
173
173
|
* `routes/workspace.ts` must list it too, because that `z.object` strips
|
|
174
|
-
* unknown keys. `ff_metaclaw_evolution` above
|
|
175
|
-
* there, so
|
|
174
|
+
* unknown keys. This flag and `ff_metaclaw_evolution` above were both once
|
|
175
|
+
* declared here and omitted there, so neither could be stored until both
|
|
176
|
+
* were added to it.
|
|
176
177
|
*/
|
|
177
178
|
ff_shadow_enforcement?: boolean;
|
|
178
179
|
/**
|
|
@@ -200,7 +201,7 @@ export interface WorkspaceSettings {
|
|
|
200
201
|
* `buildSnapshotRules` (`services/sync-daemon/src/lib/policySnapshot.ts`)
|
|
201
202
|
* applies it as a per-rule override on the next sync cycle — independent
|
|
202
203
|
* of `DESTRUCTIVE_TIER_SEVERITY`, the evidence-gated promotion ramp that
|
|
203
|
-
* governs the
|
|
204
|
+
* governs the eight block-severity `DESTRUCTIVE_COMMAND_PATTERNS` entries.
|
|
204
205
|
* `destructive.sql_drop` was never part of that ramp (its own static
|
|
205
206
|
* definition is `severity: 'warn'`, not `'block'`, so the ramp's ternary
|
|
206
207
|
* never reaches it) — its rationale is a genuinely different one
|
|
@@ -210,7 +211,7 @@ export interface WorkspaceSettings {
|
|
|
210
211
|
* MCP path anyway, accepting the dev-DSN false-positive risk explicitly.
|
|
211
212
|
* `false` by default; `true` in the `strict` security posture preset
|
|
212
213
|
* (`posturePresets.ts`) — never auto-promoted by traffic evidence the
|
|
213
|
-
* way the
|
|
214
|
+
* way the block-pattern ramp is.
|
|
214
215
|
*/
|
|
215
216
|
ff_sql_drop_strict_block?: boolean;
|
|
216
217
|
};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workspaceSettings.d.ts","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAG/D,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAA;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,uJAQ3B,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE5E;;;;;;GAMG;AACH,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,UAAU,CAAA;IACnC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;OASG;IACH,sBAAsB,EAAE,OAAO,CAAA;IAE/B;;;;;;;;;;;OAWG;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAElC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IAExC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAA;IAEzC;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAA;IAE5C;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAE/B;;;;;;;;;;;;OAYG;IACH,oBAAoB,EAAE,oBAAoB,CAAA;IAE1C;;;;;;;;;;;;;;OAcG;IACH,YAAY,EAAE,YAAY,CAAA;IAE1B;;;;;;;;;;;;OAYG;IACH,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,yDAAyD;IACzD,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B,uBAAuB,CAAC,EAAE,OAAO,CAAA;QACjC,0BAA0B,CAAC,EAAE,OAAO,CAAA;QACpC,mEAAmE;QACnE,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B
|
|
1
|
+
{"version":3,"file":"workspaceSettings.d.ts","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAG/D,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAA;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,uJAQ3B,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE5E;;;;;;GAMG;AACH,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,UAAU,CAAA;IACnC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;OASG;IACH,sBAAsB,EAAE,OAAO,CAAA;IAE/B;;;;;;;;;;;OAWG;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAElC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IAExC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAA;IAEzC;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAA;IAE5C;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAE/B;;;;;;;;;;;;OAYG;IACH,oBAAoB,EAAE,oBAAoB,CAAA;IAE1C;;;;;;;;;;;;;;OAcG;IACH,YAAY,EAAE,YAAY,CAAA;IAE1B;;;;;;;;;;;;OAYG;IACH,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,yDAAyD;IACzD,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B,uBAAuB,CAAC,EAAE,OAAO,CAAA;QACjC,0BAA0B,CAAC,EAAE,OAAO,CAAA;QACpC,mEAAmE;QACnE,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B;;;;;;;;;WASG;QACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B;;;;;;;;WAQG;QACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC;;;;;WAKG;QACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC;;;;;;;;;;;;;;;;;;;WAmBG;QACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;KACnC,CAAA;IAGD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAA;IAErC;;;;;;;;;;;;;;;;;;OAkBG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAElC;;OAEG;IACH,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;QACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KACrB,CAAA;IAED;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,2DAA2D;QAC3D,aAAa,CAAC,EAAE,OAAO,CAAA;QACvB,kEAAkE;QAClE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC5B,kFAAkF;QAClF,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,kBAAkB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;KAChD,CAAA;IAED;;;;;;;;;;;;;;OAcG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAA;IAEjC;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAEnC;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE;QACZ,uBAAuB,CAAC,EAAE,OAAO,CAAA;KAClC,CAAA;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;IAE1C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IAEtB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IAExB;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B;;;;;;;;;;;;;OAaG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IAEnC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IAErC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,KAAK,CAAA;IAE3C;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC,CAAA;IAE/F;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE/B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAE9B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAClC,0BAA0B,CAAC,EAAE,OAAO,CAAA;IAEpC;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;IAEzC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAErF;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IAE/C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,mBAAmB,CAAC,EAAE;QACpB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;QAC1B,yEAAyE;QACzE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KACtB,CAAA;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,uBAAuB,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAA;IAEtD;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAE1B;;;;;;OAMG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEpD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAE7B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC;;;;;;;;;;;;;;;OAeG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAEhC;;;;;;;;;;;;;;;;;;OAkBG;IACH,6BAA6B,EAAE,OAAO,CAAA;CACvC;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,iBAuFxC,CAAA;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,GAAG,SAAS,GACpD,iBAAiB,CAKnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAIlF"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workspaceSettings.js","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;
|
|
1
|
+
{"version":3,"file":"workspaceSettings.js","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA6xBH,4DAOC;AAWD,wEAIC;AAxyBD;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAG;IACtC,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;CACR,CAAA;AAiqBV;;;;GAIG;AACU,QAAA,0BAA0B,GAAsB;IAC3D,oBAAoB,EAAE,MAAM;IAC5B,sBAAsB,EAAE,IAAI;IAC5B,iFAAiF;IACjF,iFAAiF;IACjF,+EAA+E;IAC/E,kFAAkF;IAClF,iFAAiF;IACjF,0EAA0E;IAC1E,iBAAiB,EAAE,EAAE;IACrB,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAU,aAAa;IACnC,qBAAqB,EAAE,SAAS;IAChC,YAAY,EAAE;QACZ,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,0BAA0B,EAAE,KAAK;QACjC,qBAAqB,EAAE,KAAK;QAC5B,2EAA2E;QAC3E,uEAAuE;QACvE,qBAAqB,EAAE,KAAK;QAC5B,sBAAsB,EAAE,KAAK;QAC7B,sBAAsB,EAAE,KAAK;QAC7B,oEAAoE;QACpE,yCAAyC;QACzC,wBAAwB,EAAE,KAAK;KAChC;IACD,2BAA2B,EAAE,KAAK;IAClC,wEAAwE;IACxE,qEAAqE;IACrE,wBAAwB,EAAE,KAAK;IAC/B,uEAAuE;IACvE,wEAAwE;IACxE,4BAA4B,EAAE,KAAK;IACnC,cAAc,EAAE;QACd,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;QACjE,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;QACrF,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;QACnD,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;KAC9D;IACD,4EAA4E;IAC5E,qEAAqE;IACrE,eAAe,EAAE;QACf,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,OAAO;KAC5B;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,uBAAuB,EAAE,KAAK;IAC9B,4EAA4E;IAC5E,wCAAwC;IACxC,0BAA0B,EAAE,EAAE;IAC9B,kEAAkE;IAClE,WAAW,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE;IAC/C,oEAAoE;IACpE,+BAA+B;IAC/B,mBAAmB,EAAE,KAAK;IAC1B,8DAA8D;IAC9D,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,8DAA8D;IAC9D,uBAAuB,EAAE,SAAS;IAClC,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,mBAAmB,EAAE;QACnB,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,GAAG;QAClB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,EAAE;KACf;IACD,wEAAwE;IACxE,oEAAoE;IACpE,4BAA4B,EAAE,KAAK;IACnC,gEAAgE;IAChE,gBAAgB,EAAE,KAAK;IACvB,0EAA0E;IAC1E,6DAA6D;IAC7D,6BAA6B,EAAE,IAAI;IACnC,mEAAmE;IACnE,oEAAoE;IACpE,uBAAuB,EAAE,GAAG;CAC7B,CAAA;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CACtC,MAAqD;IAErD,OAAO;QACL,GAAG,kCAA0B;QAC7B,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;KAClB,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,8BAA8B,CAAC,QAA2B;IACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,uBAAuB,CAAA;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,GAAG,CAAA;IAC1F,OAAO,IAAI,CAAA;AACb,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@intutic/shared-types",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.5.0",
|
|
4
4
|
"description": "Shared TypeScript types for the Intutic control plane, CLI, and sync daemon",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|
|
@@ -18,7 +18,7 @@
|
|
|
18
18
|
],
|
|
19
19
|
"dependencies": {
|
|
20
20
|
"zod": "^3.23",
|
|
21
|
-
"@intutic/anomaly-taxonomy": "2.
|
|
21
|
+
"@intutic/anomaly-taxonomy": "2.5.0"
|
|
22
22
|
},
|
|
23
23
|
"devDependencies": {
|
|
24
24
|
"typescript": "^5.5",
|