@mneme-ai/core 1.70.0 → 1.71.0

package/dist/sentinel/risk_scorer.d.ts

@@ -0,0 +1,34 @@
+/**
+ * v1.71.0 -- SENTINEL S3: CONTEXTUAL RISK SCORER.
+ *
+ * Same command in different contexts has DIFFERENT risk. Examples:
+ *
+ *   rm -rf ./node_modules        -> SAFE (well-known cleanup pattern)
+ *   rm -rf $UNVALIDATED_VAR      -> CRITICAL (variable expansion attack)
+ *   rm -rf /tmp/build-out        -> SAFE (well-scoped temp)
+ *   rm -rf /                     -> CRITICAL (filesystem wipe)
+ *
+ * The scorer combines:
+ *   - Detector match risk (signature catalog)
+ *   - Scope violation count
+ *   - Variable-expansion suspicion
+ *   - Pipe-chain length (longer chains = more attack surface)
+ *   - Network reach (does it talk to the internet?)
+ *
+ * Output: composite score 0..100 + recommended action.
+ */
+import { type CommandDetectionReport } from "./command_detector.js";
+import { type ScopeReport } from "./scope_enforcer.js";
+export type RecommendedAction = "ALLOW" | "AUDIT" | "WARN" | "BLOCK";
+export interface RiskScoreReport {
+    /** Composite score 0..100; higher = more dangerous. */
+    score: number;
+    recommendedAction: RecommendedAction;
+    /** Score contributions (for transparency). */
+    contributions: Record<string, number>;
+    detection: CommandDetectionReport;
+    scope: ScopeReport;
+    headline: string;
+}
+export declare function scoreRisk(repoRoot: string, command: string): RiskScoreReport;
+//# sourceMappingURL=risk_scorer.d.ts.map

package/dist/sentinel/risk_scorer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk_scorer.d.ts","sourceRoot":"","sources":["../../src/sentinel/risk_scorer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAmB,KAAK,sBAAsB,EAAkB,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAErE,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAErE,MAAM,WAAW,eAAe;IAC9B,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,SAAS,EAAE,sBAAsB,CAAC;IAClC,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAWD,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,CA8D5E"}

package/dist/sentinel/risk_scorer.js

@@ -0,0 +1,92 @@
+/**
+ * v1.71.0 -- SENTINEL S3: CONTEXTUAL RISK SCORER.
+ *
+ * Same command in different contexts has DIFFERENT risk. Examples:
+ *
+ *   rm -rf ./node_modules        -> SAFE (well-known cleanup pattern)
+ *   rm -rf $UNVALIDATED_VAR      -> CRITICAL (variable expansion attack)
+ *   rm -rf /tmp/build-out        -> SAFE (well-scoped temp)
+ *   rm -rf /                     -> CRITICAL (filesystem wipe)
+ *
+ * The scorer combines:
+ *   - Detector match risk (signature catalog)
+ *   - Scope violation count
+ *   - Variable-expansion suspicion
+ *   - Pipe-chain length (longer chains = more attack surface)
+ *   - Network reach (does it talk to the internet?)
+ *
+ * Output: composite score 0..100 + recommended action.
+ */
+import { detectDangerous } from "./command_detector.js";
+import { enforceScope } from "./scope_enforcer.js";
+const RISK_TO_POINTS = { low: 10, medium: 25, high: 50, critical: 80 };
+const NETWORK_INDICATORS = [
+    /\bcurl\b/, /\bwget\b/, /\bnc\b/, /\bssh\b/, /\bscp\b/, /\brsync\b/,
+    /\bnpx\s+\S+\b/, // npx fetches from registry
+];
+const ENV_VAR_EXPANSION = /\$\{?[A-Z_][A-Z0-9_]*\}?/;
+export function scoreRisk(repoRoot, command) {
+    const detection = detectDangerous(command);
+    const scope = enforceScope(repoRoot, command);
+    const contributions = {};
+    // 1. Detector hits.
+    let detPoints = 0;
+    for (const m of detection.matches) {
+        detPoints += RISK_TO_POINTS[m.signature.risk];
+    }
+    contributions["detector"] = Math.min(80, detPoints);
+    // 2. Scope violations.
+    let scopePoints = 0;
+    for (const v of scope.violations) {
+        if (v.category === "system")
+            scopePoints += 25;
+        else if (v.category === "device")
+            scopePoints += 40;
+        else if (v.category === "network-mount")
+            scopePoints += 20;
+        else if (v.category === "parent-escape")
+            scopePoints += 15;
+        else if (v.category === "home-outside-mneme")
+            scopePoints += 8;
+    }
+    contributions["scope"] = Math.min(60, scopePoints);
+    // 3. Variable expansion suspicion: each $VAR in destructive context adds risk.
+    if (ENV_VAR_EXPANSION.test(command) && /\b(rm|mv|cp|dd|chmod|chown)\b/.test(command)) {
+        contributions["unvalidated-var"] = 15;
+    }
+    else {
+        contributions["unvalidated-var"] = 0;
+    }
+    // 4. Pipe chain length.
+    const pipeCount = (command.match(/\|/g) ?? []).length;
+    contributions["pipe-chain"] = Math.min(20, Math.max(0, (pipeCount - 1) * 5));
+    // 5. Network reach.
+    let networkPoints = 0;
+    for (const re of NETWORK_INDICATORS) {
+        if (re.test(command)) {
+            networkPoints += 10;
+            break;
+        }
+    }
+    contributions["network"] = networkPoints;
+    // 6. sudo amplifier.
+    if (/\bsudo\b/.test(command)) {
+        contributions["sudo"] = 15;
+    }
+    else {
+        contributions["sudo"] = 0;
+    }
+    const score = Math.min(100, Object.values(contributions).reduce((a, b) => a + b, 0));
+    let recommendedAction;
+    if (score >= 70)
+        recommendedAction = "BLOCK";
+    else if (score >= 45)
+        recommendedAction = "WARN";
+    else if (score >= 15)
+        recommendedAction = "AUDIT";
+    else
+        recommendedAction = "ALLOW";
+    const headline = `Risk ${score}/100 -> ${recommendedAction}. Detector: ${detection.matches.length} hit(s); scope: ${scope.violations.length} violation(s).`;
+    return { score, recommendedAction, contributions, detection, scope, headline };
+}
+//# sourceMappingURL=risk_scorer.js.map

package/dist/sentinel/risk_scorer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk_scorer.js","sourceRoot":"","sources":["../../src/sentinel/risk_scorer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,eAAe,EAA+C,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAE,YAAY,EAAoB,MAAM,qBAAqB,CAAC;AAerE,MAAM,cAAc,GAA8B,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAElG,MAAM,kBAAkB,GAAG;IACzB,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW;IACnE,eAAe,EAAG,4BAA4B;CAC/C,CAAC;AAEF,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAErD,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,OAAe;IACzD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,aAAa,GAA2B,EAAE,CAAC;IAEjD,oBAAoB;IACpB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QAClC,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,aAAa,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAEpD,uBAAuB;IACvB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,WAAW,IAAI,EAAE,CAAC;aAC1C,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,WAAW,IAAI,EAAE,CAAC;aAC/C,IAAI,CAAC,CAAC,QAAQ,KAAK,eAAe;YAAE,WAAW,IAAI,EAAE,CAAC;aACtD,IAAI,CAAC,CAAC,QAAQ,KAAK,eAAe;YAAE,WAAW,IAAI,EAAE,CAAC;aACtD,IAAI,CAAC,CAAC,QAAQ,KAAK,oBAAoB;YAAE,WAAW,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAEnD,+EAA+E;IAC/E,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrF,aAAa,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,wBAAwB;IACxB,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACtD,aAAa,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAE7E,oBAAoB;IACpB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;QACpC,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrB,aAAa,IAAI,EAAE,CAAC;YACpB,MAAM;QACR,CAAC;IACH,CAAC;IACD,aAAa,CAAC,SAAS,CAAC,GAAG,aAAa,CAAC;IAEzC,qBAAqB;IACrB,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAErF,IAAI,iBAAoC,CAAC;IACzC,IAAI,KAAK,IAAI,EAAE;QAAE,iBAAiB,GAAG,OAAO,CAAC;SACxC,IAAI,KAAK,IAAI,EAAE;QAAE,iBAAiB,GAAG,MAAM,CAAC;SAC5C,IAAI,KAAK,IAAI,EAAE;QAAE,iBAAiB,GAAG,OAAO,CAAC;;QAC7C,iBAAiB,GAAG,OAAO,CAAC;IAEjC,MAAM,QAAQ,GAAG,QAAQ,KAAK,WAAW,iBAAiB,eAAe,SAAS,CAAC,OAAO,CAAC,MAAM,mBAAmB,KAAK,CAAC,UAAU,CAAC,MAAM,gBAAgB,CAAC;IAE5J,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACjF,CAAC"}

package/dist/sentinel/scope_enforcer.d.ts

@@ -0,0 +1,38 @@
+/**
+ * v1.71.0 -- SENTINEL S2: REPO-SCOPE BOUNDARY ENFORCER.
+ *
+ * Even when no danger-pattern matches, a command that touches paths
+ * OUTSIDE the user's repo (or ~/.mneme, ~/.cache, etc) is suspect.
+ *
+ * The wild rule: Mneme's job is to defend ONE repo. If the AI is
+ * about to touch /etc, /usr, /var, /sys, /proc, /dev, /root, or any
+ * path outside the repo + ~/.{mneme,cache,npm,config,local}, raise
+ * an out-of-scope alert.
+ *
+ * Per-repo scope means: the AI can do anything inside its sandbox,
+ * but cannot reach into the operating system's furniture.
+ */
+export interface PathExtraction {
+    /** The raw path that appeared. */
+    raw: string;
+    /** Normalized absolute path (best-effort). */
+    resolved: string;
+    /** Position in source command. */
+    offset: number;
+}
+export interface ScopeViolation {
+    path: PathExtraction;
+    reason: string;
+    /** "system" / "home-outside-mneme" / "device" / "network-mount". */
+    category: "system" | "home-outside-mneme" | "device" | "network-mount" | "parent-escape";
+}
+export interface ScopeReport {
+    extractedPaths: PathExtraction[];
+    violations: ScopeViolation[];
+    insideRepo: PathExtraction[];
+    insideMnemeHome: PathExtraction[];
+    headline: string;
+}
+export declare function extractPaths(command: string): PathExtraction[];
+export declare function enforceScope(repoRoot: string, command: string): ScopeReport;
+//# sourceMappingURL=scope_enforcer.d.ts.map

package/dist/sentinel/scope_enforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope_enforcer.d.ts","sourceRoot":"","sources":["../../src/sentinel/scope_enforcer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,QAAQ,EAAE,QAAQ,GAAG,oBAAoB,GAAG,QAAQ,GAAG,eAAe,GAAG,eAAe,CAAC;CAC1F;AAED,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,cAAc,EAAE,CAAC;IACjC,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAcD,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CA0B9D;AAsCD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,CAqD3E"}

package/dist/sentinel/scope_enforcer.js

@@ -0,0 +1,145 @@
+/**
+ * v1.71.0 -- SENTINEL S2: REPO-SCOPE BOUNDARY ENFORCER.
+ *
+ * Even when no danger-pattern matches, a command that touches paths
+ * OUTSIDE the user's repo (or ~/.mneme, ~/.cache, etc) is suspect.
+ *
+ * The wild rule: Mneme's job is to defend ONE repo. If the AI is
+ * about to touch /etc, /usr, /var, /sys, /proc, /dev, /root, or any
+ * path outside the repo + ~/.{mneme,cache,npm,config,local}, raise
+ * an out-of-scope alert.
+ *
+ * Per-repo scope means: the AI can do anything inside its sandbox,
+ * but cannot reach into the operating system's furniture.
+ */
+import { isAbsolute, resolve, normalize, sep } from "node:path";
+import { homedir } from "node:os";
+const SYSTEM_PREFIXES = ["/etc", "/usr", "/var", "/sys", "/proc", "/dev", "/root", "/boot", "/lib", "/lib64", "/bin", "/sbin"];
+const NETWORK_PREFIXES = ["//", "smb://", "nfs://", "\\\\"]; // SMB / NFS
+const MNEME_HOME_SUBDIRS = [".mneme", ".cache/mneme", ".config/mneme"];
+const ALLOWED_HOME_SUBDIRS = [...MNEME_HOME_SUBDIRS, ".npm", ".cache", ".config", ".local", ".ssh"]; // .ssh allowed for READ but creds caught by detector
+// v1.71.0 -- permissive path extraction. Matches any "/foo/bar" or
+// "~/foo" path-shape regardless of surrounding context. URLs (http://)
+// get filtered out post-match.
+const PATH_RE = /(\/[\w./~_-]+|~\/[\w./~_-]+)/g;
+const RELATIVE_RE = /(\.\.\/(?:[\w.-]+\/?)+)/g;
+const DEVICE_RE = /\/dev\/(sd[a-z]\d*|nvme\d+n\d+(?:p\d+)?|hd[a-z]\d*|disk\d+|mapper\/\w+|zero|null|random)\b/g;
+export function extractPaths(command) {
+    const out = [];
+    const seen = new Set();
+    // Pre-filter: identify URL spans so we don't extract their path components.
+    const urlSpans = [];
+    for (const u of command.matchAll(/\b(?:https?|ftp|ssh|file):\/\/\S+/g)) {
+        urlSpans.push([u.index, u.index + u[0].length]);
+    }
+    const insideUrl = (offset) => urlSpans.some(([s, e]) => offset >= s && offset < e);
+    const push = (raw, offset) => {
+        if (insideUrl(offset))
+            return;
+        const expanded = raw.startsWith("~") ? raw.replace(/^~/, homedir()) : raw;
+        // Keep forward slashes -- normalize() flips to backslashes on Windows
+        // which breaks our prefix checks below.
+        const resolvedPath = isAbsolute(expanded)
+            ? normalize(expanded).replace(/\\/g, "/")
+            : expanded;
+        const key = `${resolvedPath}|${offset}`;
+        if (seen.has(key))
+            return;
+        seen.add(key);
+        out.push({ raw, resolved: resolvedPath, offset });
+    };
+    for (const m of command.matchAll(PATH_RE))
+        push(m[1], m.index ?? 0);
+    for (const m of command.matchAll(RELATIVE_RE))
+        push(m[1], m.index ?? 0);
+    for (const m of command.matchAll(DEVICE_RE))
+        push(m[0], m.index ?? 0);
+    return out;
+}
+function startsWithAny(path, prefixes) {
+    const lower = path.toLowerCase();
+    return prefixes.some((p) => lower === p.toLowerCase() || lower.startsWith(p.toLowerCase() + sep) || lower.startsWith(p.toLowerCase() + "/"));
+}
+function toPosix(p) { return p.replace(/\\/g, "/"); }
+function isInsideRepo(repoRoot, p) {
+    if (!isAbsolute(p)) {
+        return !p.startsWith("..");
+    }
+    const root = toPosix(resolve(repoRoot));
+    const rel = toPosix(resolve(p));
+    return rel === root || rel.startsWith(root + "/");
+}
+function isMnemeHome(p) {
+    if (!isAbsolute(p))
+        return false;
+    const home = homedir();
+    const pp = toPosix(p);
+    return MNEME_HOME_SUBDIRS.some((sub) => {
+        const full = toPosix(resolve(home, sub));
+        return pp === full || pp.startsWith(full + "/");
+    });
+}
+function isAllowedHome(p) {
+    if (!isAbsolute(p))
+        return false;
+    const home = homedir();
+    const pp = toPosix(p);
+    return ALLOWED_HOME_SUBDIRS.some((sub) => {
+        const full = toPosix(resolve(home, sub));
+        return pp === full || pp.startsWith(full + "/");
+    });
+}
+export function enforceScope(repoRoot, command) {
+    const paths = extractPaths(command);
+    const violations = [];
+    const insideRepo = [];
+    const insideMnemeHome = [];
+    for (const p of paths) {
+        // Device prefixes (check FIRST so /dev/sda is "device" not "system").
+        if (p.resolved.startsWith("/dev/")) {
+            violations.push({ path: p, reason: `Path "${p.raw}" is a block device; never legitimate for repo work.`, category: "device" });
+            continue;
+        }
+        // System prefixes.
+        if (startsWithAny(p.resolved, SYSTEM_PREFIXES)) {
+            violations.push({ path: p, reason: `Path "${p.raw}" is in a system directory; outside repo scope.`, category: "system" });
+            continue;
+        }
+        // Network mounts.
+        if (NETWORK_PREFIXES.some((pre) => p.resolved.startsWith(pre))) {
+            violations.push({ path: p, reason: `Path "${p.raw}" is a network mount; outside repo scope.`, category: "network-mount" });
+            continue;
+        }
+        // Parent escapes that resolve outside repo.
+        if (p.raw.startsWith("..") && isAbsolute(repoRoot)) {
+            const projected = resolve(repoRoot, p.raw);
+            if (!projected.startsWith(resolve(repoRoot) + sep) && projected !== resolve(repoRoot)) {
+                violations.push({ path: p, reason: `Path "${p.raw}" escapes the repo via parent reference.`, category: "parent-escape" });
+                continue;
+            }
+        }
+        // Inside repo: good.
+        if (isInsideRepo(repoRoot, p.resolved)) {
+            insideRepo.push(p);
+            continue;
+        }
+        // Mneme home: good.
+        if (isMnemeHome(p.resolved)) {
+            insideMnemeHome.push(p);
+            continue;
+        }
+        // Other allowed home subdirs: low-priority alert.
+        if (!isAllowedHome(p.resolved) && p.resolved.startsWith(homedir())) {
+            violations.push({
+                path: p,
+                reason: `Path "${p.raw}" is in $HOME but outside Mneme/cache scope.`,
+                category: "home-outside-mneme",
+            });
+        }
+    }
+    const headline = violations.length === 0
+        ? `${paths.length} path(s) extracted; all within repo + Mneme scope.`
+        : `${violations.length} scope violation(s) across ${new Set(violations.map((v) => v.category)).size} categor(ies).`;
+    return { extractedPaths: paths, violations, insideRepo, insideMnemeHome, headline };
+}
+//# sourceMappingURL=scope_enforcer.js.map

package/dist/sentinel/scope_enforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope_enforcer.js","sourceRoot":"","sources":["../../src/sentinel/scope_enforcer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AA0BlC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC/H,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY;AACzE,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;AACvE,MAAM,oBAAoB,GAAG,CAAC,GAAG,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,qDAAqD;AAE1J,mEAAmE;AACnE,uEAAuE;AACvE,+BAA+B;AAC/B,MAAM,OAAO,GAAG,+BAA+B,CAAC;AAChD,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAC/C,MAAM,SAAS,GAAG,6FAA6F,CAAC;AAEhH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,4EAA4E;IAC5E,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EAAE,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAM,EAAE,CAAC,CAAC,KAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,MAAc,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,MAAc,EAAE,EAAE;QAC3C,IAAI,SAAS,CAAC,MAAM,CAAC;YAAE,OAAO;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1E,sEAAsE;QACtE,wCAAwC;QACxC,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;YACvC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;YACzC,CAAC,CAAC,QAAQ,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,IAAI,MAAM,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,QAAkB;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;AAC/I,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,IAAY,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAErE,SAAS,YAAY,CAAC,QAAgB,EAAE,CAAS;IAC/C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtB,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtB,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAe;IAC5D,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,eAAe,GAAqB,EAAE,CAAC;IAE7C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,sEAAsE;QACtE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,sDAAsD,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/H,SAAS;QACX,CAAC;QACD,mBAAmB;QACnB,IAAI,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;YAC/C,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,iDAAiD,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1H,SAAS;QACX,CAAC;QACD,kBAAkB;QAClB,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,2CAA2C,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3H,SAAS;QACX,CAAC;QACD,4CAA4C;QAC5C,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,IAAI,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtF,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,0CAA0C,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;gBAC1H,SAAS;YACX,CAAC;QACH,CAAC;QACD,qBAAqB;QACrB,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,oBAAoB;QACpB,IAAI,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,kDAAkD;QAClD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACnE,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,8CAA8C;gBACpE,QAAQ,EAAE,oBAAoB;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC;QACtC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,oDAAoD;QACrE,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,8BAA8B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC;IACtH,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;AACtF,CAAC"}

package/dist/sentinel/sentinel.d.ts

@@ -0,0 +1,63 @@
+/**
+ * v1.71.0 -- SENTINEL ORCHESTRATOR.
+ *
+ * The full intercept pipeline for AI-proposed shell commands:
+ *
+ *   1. Command Detector  (signature catalog)
+ *   2. Scope Enforcer    (repo boundary)
+ *   3. Risk Scorer       (composite score + action)
+ *   4. Self-Learning     (per-repo policy from past audit)
+ *   5. HMAC Audit Ledger (tamper-evident log)
+ *
+ * Returns a SentinelDecision that the MCP layer (or any executor)
+ * consults BEFORE running the command. The decision carries
+ * action = ALLOW / AUDIT / WARN / BLOCK + complete reasoning.
+ *
+ * NEW IN v1.71: CHRONOLOGICAL TRUST DECAY. Commands seen N times in
+ * past audit at ALLOW level + no tampering -> trust score rises ->
+ * subsequent identical commands skip heavy verification.
+ */
+import { type RiskScoreReport, type RecommendedAction } from "./risk_scorer.js";
+import { type AuditEntry } from "./audit_ledger.js";
+export interface LearnedPolicy {
+    /** sha256(command) -> trust record. */
+    trustByHash: Record<string, {
+        allowed: number;
+        lastSeenTs: string;
+        firstSeenTs: string;
+    }>;
+    updatedAt: string;
+}
+export interface SentinelDecision {
+    command: string;
+    action: RecommendedAction;
+    score: number;
+    /** Verdict reasons -- list of named factors. */
+    reasons: string[];
+    riskReport: RiskScoreReport;
+    /** Whether this command's hash has been ALLOWed in the past. */
+    trustLevel: "novel" | "seen-once" | "trusted";
+    /** How many past ALLOW occurrences. */
+    pastAllows: number;
+    /** Audit entry written (when action != ALLOW or auditAlways). */
+    auditEntry: AuditEntry | null;
+    headline: string;
+}
+export interface SentinelOptions {
+    /** Vendor (AI agent) name. */
+    vendor?: string;
+    /** Always audit (even ALLOW). Default false. */
+    auditAlways?: boolean;
+    /** Persist trust learning. Default true. */
+    learn?: boolean;
+    /** When the command was actually executed (caller flips after action). */
+    executed?: boolean;
+}
+export declare function intercept(repoRoot: string, command: string, opts?: SentinelOptions): SentinelDecision;
+/** Auto-mint a vaccine from past BLOCK decisions -- the per-repo
+ *  learning loop. */
+export declare function harvestVaccines(repoRoot: string): {
+    newVaccines: number;
+    sample: string[];
+};
+//# sourceMappingURL=sentinel.d.ts.map

package/dist/sentinel/sentinel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.d.ts","sourceRoot":"","sources":["../../src/sentinel/sentinel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,EAAa,KAAK,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAA6B,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAI/E,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F,SAAS,EAAE,MAAM,CAAC;CACnB;AAoBD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,eAAe,CAAC;IAC5B,gEAAgE;IAChE,UAAU,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;IAC9C,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,gBAAgB,CAwDrG;AAED;qBACqB;AACrB,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAqB3F"}

package/dist/sentinel/sentinel.js

@@ -0,0 +1,123 @@
+/**
+ * v1.71.0 -- SENTINEL ORCHESTRATOR.
+ *
+ * The full intercept pipeline for AI-proposed shell commands:
+ *
+ *   1. Command Detector  (signature catalog)
+ *   2. Scope Enforcer    (repo boundary)
+ *   3. Risk Scorer       (composite score + action)
+ *   4. Self-Learning     (per-repo policy from past audit)
+ *   5. HMAC Audit Ledger (tamper-evident log)
+ *
+ * Returns a SentinelDecision that the MCP layer (or any executor)
+ * consults BEFORE running the command. The decision carries
+ * action = ALLOW / AUDIT / WARN / BLOCK + complete reasoning.
+ *
+ * NEW IN v1.71: CHRONOLOGICAL TRUST DECAY. Commands seen N times in
+ * past audit at ALLOW level + no tampering -> trust score rises ->
+ * subsequent identical commands skip heavy verification.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { join } from "node:path";
+import { scoreRisk } from "./risk_scorer.js";
+import { appendAudit, readAuditLog } from "./audit_ledger.js";
+const POLICY_FILE = ".mneme/sentinel/policy.json";
+function hashCmd(c) {
+    return createHash("sha256").update(c.trim()).digest("hex").slice(0, 16);
+}
+function readPolicy(repoRoot) {
+    const p = join(repoRoot, POLICY_FILE);
+    if (!existsSync(p))
+        return { trustByHash: {}, updatedAt: new Date(0).toISOString() };
+    try {
+        return JSON.parse(readFileSync(p, "utf8"));
+    }
+    catch {
+        return { trustByHash: {}, updatedAt: new Date(0).toISOString() };
+    }
+}
+function writePolicy(repoRoot, policy) {
+    const dir = join(repoRoot, ".mneme/sentinel");
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    writeFileSync(join(repoRoot, POLICY_FILE), JSON.stringify(policy, null, 2) + "\n", "utf8");
+}
+export function intercept(repoRoot, command, opts) {
+    const risk = scoreRisk(repoRoot, command);
+    const reasons = [];
+    // Apply trust decay: commands previously allowed N times relax the action.
+    const policy = readPolicy(repoRoot);
+    const h = hashCmd(command);
+    const trustRec = policy.trustByHash[h];
+    const pastAllows = trustRec?.allowed ?? 0;
+    let trustLevel = "novel";
+    if (pastAllows >= 5)
+        trustLevel = "trusted";
+    else if (pastAllows >= 1)
+        trustLevel = "seen-once";
+    // Action: trust-adjusted.
+    let action = risk.recommendedAction;
+    for (const m of risk.detection.matches) {
+        reasons.push(`${m.signature.id}: ${m.signature.rationale}`);
+    }
+    for (const v of risk.scope.violations) {
+        reasons.push(`scope-${v.category}: ${v.reason}`);
+    }
+    if (trustLevel === "trusted" && action === "AUDIT") {
+        action = "ALLOW";
+        reasons.push(`trust: command seen ALLOW ${pastAllows}x previously -- demoted from AUDIT.`);
+    }
+    // Never demote BLOCK / WARN via trust alone -- explicit catalog hits stay.
+    // Write audit when action != ALLOW or caller requests.
+    let auditEntry = null;
+    if (action !== "ALLOW" || opts?.auditAlways) {
+        auditEntry = appendAudit(repoRoot, command, risk, {
+            vendor: opts?.vendor ?? "unknown",
+            executed: opts?.executed ?? false,
+        });
+    }
+    // Update learned policy when action == ALLOW (and learn is on).
+    if (opts?.learn !== false && action === "ALLOW") {
+        const next = { ...policy };
+        next.trustByHash[h] = {
+            allowed: (trustRec?.allowed ?? 0) + 1,
+            firstSeenTs: trustRec?.firstSeenTs ?? new Date().toISOString(),
+            lastSeenTs: new Date().toISOString(),
+        };
+        next.updatedAt = new Date().toISOString();
+        writePolicy(repoRoot, next);
+    }
+    const headline = `SENTINEL ${action}: risk=${risk.score}/100, trust=${trustLevel}, ${risk.detection.matches.length} catalog hit(s).`;
+    return {
+        command, action, score: risk.score, reasons,
+        riskReport: risk,
+        trustLevel, pastAllows,
+        auditEntry, headline,
+    };
+}
+/** Auto-mint a vaccine from past BLOCK decisions -- the per-repo
+ *  learning loop. */
+export function harvestVaccines(repoRoot) {
+    const audit = readAuditLog(repoRoot);
+    const blocked = audit.filter((e) => e.action === "BLOCK");
+    // Group by class.
+    const byClass = new Map();
+    for (const e of blocked) {
+        for (const c of e.classes) {
+            const arr = byClass.get(c) ?? [];
+            arr.push(e);
+            byClass.set(c, arr);
+        }
+    }
+    const sample = [];
+    let total = 0;
+    for (const [cls, entries] of byClass) {
+        if (entries.length >= 2) {
+            total += 1;
+            sample.push(`${cls}: ${entries.length} block(s) -> vaccine`);
+        }
+    }
+    return { newVaccines: total, sample };
+}
+//# sourceMappingURL=sentinel.js.map

package/dist/sentinel/sentinel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.js","sourceRoot":"","sources":["../../src/sentinel/sentinel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAgD,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,YAAY,EAAmB,MAAM,mBAAmB,CAAC;AAE/E,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAQlD,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACrF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAkB,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAAC,CAAC;AAC/E,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,MAAqB;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC7F,CAAC;AA6BD,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,OAAe,EAAE,IAAsB;IACjF,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,2EAA2E;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC;IAC1C,IAAI,UAAU,GAAmC,OAAO,CAAC;IACzD,IAAI,UAAU,IAAI,CAAC;QAAE,UAAU,GAAG,SAAS,CAAC;SACvC,IAAI,UAAU,IAAI,CAAC;QAAE,UAAU,GAAG,WAAW,CAAC;IAEnD,0BAA0B;IAC1B,IAAI,MAAM,GAAsB,IAAI,CAAC,iBAAiB,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACnD,MAAM,GAAG,OAAO,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,6BAA6B,UAAU,qCAAqC,CAAC,CAAC;IAC7F,CAAC;IACD,2EAA2E;IAE3E,uDAAuD;IACvD,IAAI,UAAU,GAAsB,IAAI,CAAC;IACzC,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;QAC5C,UAAU,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;YAChD,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,SAAS;YACjC,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,KAAK;SAClC,CAAC,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,IAAI,IAAI,EAAE,KAAK,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAChD,MAAM,IAAI,GAAkB,EAAE,GAAG,MAAM,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG;YACpB,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC;YACrC,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,MAAM,UAAU,IAAI,CAAC,KAAK,eAAe,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,kBAAkB,CAAC;IAErI,OAAO;QACL,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO;QAC3C,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,QAAQ;KACrB,CAAC;AACJ,CAAC;AAED;qBACqB;AACrB,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IAC1D,kBAAkB;IAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,OAAO,CAAC,MAAM,sBAAsB,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC"}

package/dist/sentinel/sentinel.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * v1.71.0 -- SENTINEL test suite.
+ */
+export {};
+//# sourceMappingURL=sentinel.test.d.ts.map

package/dist/sentinel/sentinel.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.test.d.ts","sourceRoot":"","sources":["../../src/sentinel/sentinel.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}