@mondaydotcomorg/atp-compiler 0.19.3 → 0.19.5

package/dist/provenance/src/store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../../provenance/src/store.ts"],"names":[],"mappings":"AA2CA;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAC3B,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACjD,UAAU,GAAG,IAAI,GAAG,EAA8B,CAAC;IACnD,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,mBAAmB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE7D,KAAK,CAAC,GAAG,CAAC,EAAU;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAa;QAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;QACrD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,IAAI,EAAE,CAAC;gBACV,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACtB,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,QAA4B,EAAE,WAAoB;QACvE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEhC,IAAI,WAAW,EAAE,CAAC;YACjB,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACV,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW;QAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,YAAY,CACjB,GAAW,EACX,QAA4B,EAC5B,WAAoB;QAEpB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEnC,IAAI,WAAW,EAAE,CAAC;YACjB,IAAI,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;gBACjB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,GAAG,EAAE,CAAC;YACT,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,CAAC;YACd,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,GAAG,EAAE,CAAC;YACT,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAI,IAAI,EAAE,CAAC;oBACV,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBACtB,CAAC;YACF,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;CACD"}

package/dist/provenance/src/tokens.d.ts

@@ -1,49 +0,0 @@
-import type { ProvenanceMetadata } from './types.js';
-interface CacheProvider {
-    name: string;
-    get(key: string): Promise<unknown>;
-    set(key: string, value: unknown, ttl?: number): Promise<void>;
-    delete(key: string): Promise<void>;
-    has?(key: string): Promise<boolean>;
-    disconnect?(): Promise<void>;
-}
-/**
- * Token payload structure
- */
-export interface TokenPayload {
-    v: 1;
-    clientId: string;
-    executionId: string;
-    createdAt: number;
-    expiresAt: number;
-    valueDigest: string;
-    metaId: string;
-}
-/**
- * Deterministic JSON stringification with sorted keys
- */
-export declare function stableStringify(value: unknown): string | null;
-/**
- * Compute SHA-256 digest of value
- */
-export declare function computeDigest(value: unknown): string | null;
-/**
- * Get client secret (Phase 1: single secret from env)
- */
-export declare function getClientSecret(clientId: string): string;
-/**
- * Issue a provenance token for a value
- */
-export declare function issueProvenanceToken(metadata: ProvenanceMetadata, value: unknown, clientId: string, executionId: string, cacheProvider: CacheProvider, ttl?: number): Promise<string | null>;
-/**
- * Verify and extract provenance from a token
- */
-export declare function verifyProvenanceToken(token: string, value: unknown, clientId: string, executionId: string, cacheProvider: CacheProvider): Promise<ProvenanceMetadata | null>;
-/**
- * Verify multiple hints and build a digest → metadata map
- * Returns map for O(1) lookup during re-attachment
- * ALSO returns a value → metadata map for substring matching
- */
-export declare function verifyProvenanceHints(hints: string[], clientId: string, executionId: string, cacheProvider: CacheProvider, maxHints?: number): Promise<Map<string, ProvenanceMetadata>>;
-export {};
-//# sourceMappingURL=tokens.d.ts.map

package/dist/provenance/src/tokens.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../../../provenance/src/tokens.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGrD,UAAU,aAAa;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CACf;AAID;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CA4C7D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM3D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAkBxD;AASD;;GAEG;AACH,wBAAsB,oBAAoB,CACzC,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,aAAa,EAC5B,GAAG,GAAE,MAAa,GAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqCxB;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAC1C,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,aAAa,GAC1B,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAwEpC;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAC1C,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,aAAa,EAC5B,QAAQ,GAAE,MAAa,GACrB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAyD1C"}

package/dist/provenance/src/tokens.js

@@ -1,239 +0,0 @@
-/**
- * Provenance Token System
- *
- * Cryptographically-signed tokens for multi-step provenance tracking
- */
-import crypto from 'crypto';
-import { nanoid } from 'nanoid';
-const MAX_VALUE_SIZE = 1024 * 1024; // 1MB
-/**
- * Deterministic JSON stringification with sorted keys
- */
-export function stableStringify(value) {
-    try {
-        if (value === null || value === undefined) {
-            return String(value);
-        }
-        if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {
-            return JSON.stringify(value);
-        }
-        if (typeof value === 'function' || typeof value === 'symbol') {
-            return null;
-        }
-        const seen = new WeakSet();
-        const replacer = (_key, val) => {
-            if (val !== null && typeof val === 'object') {
-                if (seen.has(val)) {
-                    return '[Circular]';
-                }
-                seen.add(val);
-                if (!Array.isArray(val)) {
-                    const sorted = {};
-                    const keys = Object.keys(val).sort();
-                    for (const k of keys) {
-                        sorted[k] = val[k];
-                    }
-                    return sorted;
-                }
-            }
-            return val;
-        };
-        const result = JSON.stringify(value, replacer);
-        if (result.length > MAX_VALUE_SIZE) {
-            return null;
-        }
-        return result;
-    }
-    catch (error) {
-        return null;
-    }
-}
-/**
- * Compute SHA-256 digest of value
- */
-export function computeDigest(value) {
-    const serialized = stableStringify(value);
-    if (!serialized) {
-        return null;
-    }
-    return crypto.createHash('sha256').update(serialized).digest('base64url');
-}
-/**
- * Get client secret (Phase 1: single secret from env)
- */
-export function getClientSecret(clientId) {
-    const secret = process.env.PROVENANCE_SECRET;
-    if (!secret) {
-        throw new Error('PROVENANCE_SECRET environment variable is required for provenance tracking. ' +
-            'Generate a strong secret with: openssl rand -base64 32');
-    }
-    // Validate secret length - must be at least 32 bytes
-    // Base64 encoding: 32 bytes = 44 chars, but we'll check raw byte length
-    const secretBytes = Buffer.from(secret, 'utf-8').length;
-    if (secretBytes < 32) {
-        throw new Error(`PROVENANCE_SECRET must be at least 32 bytes (currently ${secretBytes} bytes). ` +
-            'Generate a strong secret with: openssl rand -base64 32');
-    }
-    return secret;
-}
-/**
- * Generate HMAC signature
- */
-function hmacSign(data, secret) {
-    return crypto.createHmac('sha256', secret).update(data).digest('base64url');
-}
-/**
- * Issue a provenance token for a value
- */
-export async function issueProvenanceToken(metadata, value, clientId, executionId, cacheProvider, ttl = 3600) {
-    const valueDigest = computeDigest(value);
-    if (!valueDigest) {
-        return null;
-    }
-    const metaId = nanoid();
-    const cacheKey = `prov:meta:${clientId}:${metaId}`;
-    try {
-        await cacheProvider.set(cacheKey, JSON.stringify(metadata), ttl);
-        if (typeof value === 'string' || typeof value === 'number') {
-            const valueKey = `prov:value:${clientId}:${valueDigest}`;
-            await cacheProvider.set(valueKey, JSON.stringify({ value: String(value), metaId }), ttl);
-        }
-    }
-    catch (error) {
-        console.error('Failed to store provenance metadata in cache:', error);
-        return null;
-    }
-    const payload = {
-        v: 1,
-        clientId,
-        executionId,
-        createdAt: Date.now(),
-        expiresAt: Date.now() + ttl * 1000,
-        valueDigest,
-        metaId,
-    };
-    const payloadStr = JSON.stringify(payload);
-    const payloadB64 = Buffer.from(payloadStr).toString('base64url');
-    const secret = getClientSecret(clientId);
-    const signature = hmacSign(payloadB64, secret);
-    return `${payloadB64}.${signature}`;
-}
-/**
- * Verify and extract provenance from a token
- */
-export async function verifyProvenanceToken(token, value, clientId, executionId, cacheProvider) {
-    try {
-        const parts = token.split('.');
-        if (parts.length !== 2) {
-            return null;
-        }
-        const [payloadB64, signature] = parts;
-        if (!payloadB64 || !signature) {
-            return null;
-        }
-        const secret = getClientSecret(clientId);
-        const expectedSig = hmacSign(payloadB64, secret);
-        // Use constant-time comparison to prevent timing attacks
-        try {
-            const sigBuf = Buffer.from(signature, 'base64url');
-            const expectedBuf = Buffer.from(expectedSig, 'base64url');
-            if (sigBuf.length !== expectedBuf.length || !crypto.timingSafeEqual(sigBuf, expectedBuf)) {
-                console.error('Token signature verification failed');
-                return null;
-            }
-        }
-        catch (error) {
-            console.error('Token signature comparison error:', error);
-            return null;
-        }
-        const payloadStr = Buffer.from(payloadB64, 'base64url').toString();
-        const payload = JSON.parse(payloadStr);
-        if (payload.v !== 1) {
-            console.error('Unsupported token version:', payload.v);
-            return null;
-        }
-        if (payload.clientId !== clientId) {
-            console.error('Token clientId mismatch:', payload.clientId, 'vs', clientId);
-            return null;
-        }
-        if (payload.executionId !== executionId) {
-            console.error('Token executionId mismatch:', payload.executionId, 'vs', executionId);
-            return null;
-        }
-        if (Date.now() > payload.expiresAt) {
-            console.warn('Token expired');
-            return null;
-        }
-        const valueDigest = computeDigest(value);
-        if (!valueDigest || valueDigest !== payload.valueDigest) {
-            console.warn('Token value digest mismatch (value may have been modified)');
-            return null;
-        }
-        const cacheKey = `prov:meta:${payload.clientId}:${payload.metaId}`;
-        const metaStr = await cacheProvider.get(cacheKey);
-        if (!metaStr || typeof metaStr !== 'string') {
-            console.warn('Token metadata not found in cache (expired or evicted)');
-            return null;
-        }
-        const metadata = JSON.parse(metaStr);
-        return metadata;
-    }
-    catch (error) {
-        console.error('Token verification error:', error);
-        return null;
-    }
-}
-/**
- * Verify multiple hints and build a digest → metadata map
- * Returns map for O(1) lookup during re-attachment
- * ALSO returns a value → metadata map for substring matching
- */
-export async function verifyProvenanceHints(hints, clientId, executionId, cacheProvider, maxHints = 1000) {
-    const map = new Map();
-    const hintsToProcess = hints.slice(0, maxHints);
-    if (hints.length > maxHints) {
-        console.warn(`Capped provenance hints from ${hints.length} to ${maxHints}`);
-    }
-    const timeout = 100;
-    const promises = hintsToProcess.map(async (token) => {
-        try {
-            const parts = token.split('.');
-            if (parts.length !== 2)
-                return;
-            const [payloadB64] = parts;
-            if (!payloadB64)
-                return;
-            const payloadStr = Buffer.from(payloadB64, 'base64url').toString();
-            const payload = JSON.parse(payloadStr);
-            const cacheKey = `prov:meta:${payload.clientId}:${payload.metaId}`;
-            const fetchPromise = cacheProvider.get(cacheKey);
-            const timeoutPromise = new Promise((resolve) => setTimeout(() => resolve(null), timeout));
-            const metaStr = await Promise.race([fetchPromise, timeoutPromise]);
-            if (metaStr && typeof metaStr === 'string') {
-                const metadata = JSON.parse(metaStr);
-                map.set(payload.valueDigest, metadata);
-                const valueKey = `prov:value:${payload.clientId}:${payload.valueDigest}`;
-                const valueStr = await Promise.race([
-                    cacheProvider.get(valueKey),
-                    new Promise((resolve) => setTimeout(() => resolve(null), timeout)),
-                ]);
-                if (valueStr && typeof valueStr === 'string') {
-                    try {
-                        const { value } = JSON.parse(valueStr);
-                        map.__valueMap = map.__valueMap || new Map();
-                        map.__valueMap.set(value, metadata);
-                    }
-                    catch (e) {
-                        // Value parsing failed, skip
-                    }
-                }
-            }
-        }
-        catch (error) {
-            // Skip invalid tokens silently
-        }
-    });
-    await Promise.all(promises);
-    return map;
-}
-//# sourceMappingURL=tokens.js.map

package/dist/provenance/src/tokens.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../../provenance/src/tokens.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AA0BhC,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM;AAE1C;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC7C,IAAI,CAAC;QACJ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;QAE3B,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,GAAY,EAAW,EAAE;YACxD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAa,CAAC,EAAE,CAAC;oBAC7B,OAAO,YAAY,CAAC;gBACrB,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,GAAa,CAAC,CAAC;gBAExB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,MAAM,GAA4B,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC,IAAI,EAAE,CAAC;oBAChE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;wBACtB,MAAM,CAAC,CAAC,CAAC,GAAI,GAA+B,CAAC,CAAC,CAAC,CAAC;oBACjD,CAAC;oBACD,OAAO,MAAM,CAAC;gBACf,CAAC;YACF,CAAC;YACD,OAAO,GAAG,CAAC;QACZ,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC3C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACd,8EAA8E;YAC7E,wDAAwD,CACzD,CAAC;IACH,CAAC;IACD,qDAAqD;IACrD,wEAAwE;IACxE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACxD,IAAI,WAAW,GAAG,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACd,0DAA0D,WAAW,WAAW;YAC/E,wDAAwD,CACzD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC7C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,QAA4B,EAC5B,KAAc,EACd,QAAgB,EAChB,WAAmB,EACnB,aAA4B,EAC5B,MAAc,IAAI;IAElB,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,aAAa,QAAQ,IAAI,MAAM,EAAE,CAAC;IAEnD,IAAI,CAAC;QACJ,MAAM,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;QAEjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,cAAc,QAAQ,IAAI,WAAW,EAAE,CAAC;YACzD,MAAM,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAiB;QAC7B,CAAC,EAAE,CAAC;QACJ,QAAQ;QACR,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI;QAClC,WAAW;QACX,MAAM;KACN,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/C,OAAO,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,KAAa,EACb,KAAc,EACd,QAAgB,EAChB,WAAmB,EACnB,aAA4B;IAE5B,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QACtC,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAEjD,yDAAyD;QACzD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACnD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAE1D,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC1F,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACrD,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,OAAO,GAAiB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAErD,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QACb,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC;QACb,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACzC,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACrF,OAAO,IAAI,CAAC;QACb,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAElD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,QAAQ,GAAuB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,KAAe,EACf,QAAgB,EAChB,WAAmB,EACnB,aAA4B,EAC5B,WAAmB,IAAI;IAEvB,MAAM,GAAG,GAAG,IAAI,GAAG,EAA8B,CAAC;IAElD,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,gCAAgC,KAAK,CAAC,MAAM,OAAO,QAAQ,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC;IACpB,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACnD,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAE/B,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC,UAAU;gBAAE,OAAO;YAExB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnE,MAAM,OAAO,GAAiB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,aAAa,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAEnE,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CACpD,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CACxC,CAAC;YAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;YAEnE,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAuB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACzD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAEvC,MAAM,QAAQ,GAAG,cAAc,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;oBACnC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAC3B,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;iBACxE,CAAC,CAAC;gBAEH,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC9C,IAAI,CAAC;wBACJ,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBACtC,GAAW,CAAC,UAAU,GAAI,GAAW,CAAC,UAAU,IAAI,IAAI,GAAG,EAAE,CAAC;wBAC9D,GAAW,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;oBAC9C,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACZ,6BAA6B;oBAC9B,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,+BAA+B;QAChC,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE5B,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/provenance/src/types.d.ts

@@ -1,150 +0,0 @@
-/**
- * Provenance Tracking Types
- *
- * Implements CAMEL-inspired data provenance tracking for prompt injection defense.
-
-/**
- * Provenance tracking mode enum
- */
-export declare enum ProvenanceMode {
-    /** No provenance tracking - zero overhead */
-    NONE = "none",
-    /** Proxy-based tracking - runtime tracking */
-    PROXY = "proxy",
-    /** AST instrumentation - compile-time tracking */
-    AST = "ast"
-}
-/**
- * Data source types
- */
-export declare enum ProvenanceSource {
-    /** Direct from user input (trusted) */
-    USER = "user",
-    /** From LLM generation */
-    LLM = "llm",
-    /** From tool execution */
-    TOOL = "tool",
-    /** Generated by runtime/system */
-    SYSTEM = "system"
-}
-/**
- * Tool source metadata
- */
-export interface ToolSource {
-    type: ProvenanceSource.TOOL;
-    toolName: string;
-    apiGroup: string;
-    timestamp: number;
-}
-/**
- * LLM source metadata
- */
-export interface LLMSource {
-    type: ProvenanceSource.LLM;
-    operation: 'call' | 'extract' | 'classify';
-    timestamp: number;
-}
-/**
- * User source metadata
- */
-export interface UserSource {
-    type: ProvenanceSource.USER;
-    timestamp: number;
-}
-/**
- * System source metadata
- */
-export interface SystemSource {
-    type: ProvenanceSource.SYSTEM;
-    operation: string;
-    timestamp: number;
-}
-/**
- * Source metadata union
- */
-export type SourceMetadata = ToolSource | LLMSource | UserSource | SystemSource;
-/**
- * Reader permissions - who can access this data
- */
-export type ReaderPermissions = {
-    type: 'public';
-} | {
-    type: 'restricted';
-    readers: string[];
-};
-/**
- * Complete provenance metadata
- */
-export interface ProvenanceMetadata {
-    /** Where this data came from */
-    source: SourceMetadata;
-    /** Who can read this data */
-    readers: ReaderPermissions;
-    /** Chain of dependencies (for tracking data flow) */
-    dependencies?: string[];
-    /** Unique identifier for this provenance record */
-    id: string;
-    /** Additional context */
-    context?: Record<string, unknown>;
-}
-/**
- * Serialized provenance state for pause/resume
- */
-export interface ProvenanceState {
-    registry: Array<[string, ProvenanceMetadata]>;
-}
-/**
- * Enhanced provenance snapshot including primitive taints
- * Used for cross-execution token persistence
- */
-export interface ProvenanceSnapshot {
-    /** Object provenance registry */
-    registry: Array<[string, ProvenanceMetadata]>;
-    /** Primitive taint mappings */
-    primitives: Array<[string, ProvenanceMetadata]>;
-}
-/**
- * Policy action types
- * - log: Allow operation but log security event for audit
- * - approve: Pause and request human approval
- * - block: Deny operation immediately
- */
-export type PolicyAction = 'log' | 'approve' | 'block';
-/**
- * Security policy result
- */
-export interface PolicyResult {
-    /** @deprecated Use action instead */
-    allowed?: boolean;
-    /**
-     * Action to take:
-     * - log: Allow but audit (permissive monitoring)
-     * - approve: Request human approval (interactive gating)
-     * - block: Deny immediately (maximum security)
-     */
-    action: PolicyAction;
-    /** Human-readable reason for the action */
-    reason?: string;
-    /** Policy name that produced this result */
-    policy?: string;
-    /** Additional context for approval UI (when action='approve') or audit log */
-    context?: Record<string, unknown>;
-}
-/**
- * Security policy interface
- */
-export interface SecurityPolicy {
-    name: string;
-    description?: string;
-    check: (toolName: string, args: Record<string, unknown>, getProvenance: (value: unknown) => ProvenanceMetadata | null) => PolicyResult | Promise<PolicyResult>;
-}
-/**
- * Provenance security policy violation error
- */
-export declare class ProvenanceSecurityError extends Error {
-    policy: string;
-    toolName: string;
-    details?: Record<string, unknown> | undefined;
-    constructor(message: string, policy: string, toolName: string, details?: Record<string, unknown> | undefined);
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/provenance/src/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../provenance/src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,oBAAY,cAAc;IACzB,6CAA6C;IAC7C,IAAI,SAAS;IACb,8CAA8C;IAC9C,KAAK,UAAU;IACf,kDAAkD;IAClD,GAAG,QAAQ;CACX;AAED;;GAEG;AACH,oBAAY,gBAAgB;IAC3B,uCAAuC;IACvC,IAAI,SAAS;IACb,0BAA0B;IAC1B,GAAG,QAAQ;IACX,0BAA0B;IAC1B,IAAI,SAAS;IACb,kCAAkC;IAClC,MAAM,WAAW;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,CAAC;AAEhF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE/F;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAClC,gCAAgC;IAChC,MAAM,EAAE,cAAc,CAAC;IAEvB,6BAA6B;IAC7B,OAAO,EAAE,iBAAiB,CAAC;IAE3B,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;IAEX,yBAAyB;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,iCAAiC;IACjC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC9C,+BAA+B;IAC/B,UAAU,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;CAChD;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,qCAAqC;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;OAKG;IACH,MAAM,EAAE,YAAY,CAAC;IAErB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,CACN,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,kBAAkB,GAAG,IAAI,KACxD,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC1C;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAGzC,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,MAAM;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAHxC,OAAO,EAAE,MAAM,EACR,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKzC"}

package/dist/provenance/src/types.js

@@ -1,47 +0,0 @@
-/**
- * Provenance Tracking Types
- *
- * Implements CAMEL-inspired data provenance tracking for prompt injection defense.
-
-/**
- * Provenance tracking mode enum
- */
-export var ProvenanceMode;
-(function (ProvenanceMode) {
-    /** No provenance tracking - zero overhead */
-    ProvenanceMode["NONE"] = "none";
-    /** Proxy-based tracking - runtime tracking */
-    ProvenanceMode["PROXY"] = "proxy";
-    /** AST instrumentation - compile-time tracking */
-    ProvenanceMode["AST"] = "ast";
-})(ProvenanceMode || (ProvenanceMode = {}));
-/**
- * Data source types
- */
-export var ProvenanceSource;
-(function (ProvenanceSource) {
-    /** Direct from user input (trusted) */
-    ProvenanceSource["USER"] = "user";
-    /** From LLM generation */
-    ProvenanceSource["LLM"] = "llm";
-    /** From tool execution */
-    ProvenanceSource["TOOL"] = "tool";
-    /** Generated by runtime/system */
-    ProvenanceSource["SYSTEM"] = "system";
-})(ProvenanceSource || (ProvenanceSource = {}));
-/**
- * Provenance security policy violation error
- */
-export class ProvenanceSecurityError extends Error {
-    policy;
-    toolName;
-    details;
-    constructor(message, policy, toolName, details) {
-        super(message);
-        this.policy = policy;
-        this.toolName = toolName;
-        this.details = details;
-        this.name = 'ProvenanceSecurityError';
-    }
-}
-//# sourceMappingURL=types.js.map

package/dist/provenance/src/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../provenance/src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,cAOX;AAPD,WAAY,cAAc;IACzB,6CAA6C;IAC7C,+BAAa,CAAA;IACb,8CAA8C;IAC9C,iCAAe,CAAA;IACf,kDAAkD;IAClD,6BAAW,CAAA;AACZ,CAAC,EAPW,cAAc,KAAd,cAAc,QAOzB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,gBASX;AATD,WAAY,gBAAgB;IAC3B,uCAAuC;IACvC,iCAAa,CAAA;IACb,0BAA0B;IAC1B,+BAAW,CAAA;IACX,0BAA0B;IAC1B,iCAAa,CAAA;IACb,kCAAkC;IAClC,qCAAiB,CAAA;AAClB,CAAC,EATW,gBAAgB,KAAhB,gBAAgB,QAS3B;AAoID;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAGzC;IACA;IACA;IAJR,YACC,OAAe,EACR,MAAc,EACd,QAAgB,EAChB,OAAiC;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJR,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAA0B;QAGxC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACvC,CAAC;CACD"}

package/dist/runtime/src/approval/handler.d.ts

@@ -1,12 +0,0 @@
-/**
- */
-import type { ApprovalRequest, ApprovalResponse } from './types';
-/**
- * Initialize the approval system with a custom handler
- */
-export declare function initializeApproval(handler: (request: ApprovalRequest) => Promise<ApprovalResponse>): void;
-/**
- * Get the current approval handler
- */
-export declare function getApprovalHandler(): ((request: ApprovalRequest) => Promise<ApprovalResponse>) | null;
-//# sourceMappingURL=handler.d.ts.map

package/dist/runtime/src/approval/handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../../runtime/src/approval/handler.ts"],"names":[],"mappings":"AAAA;GACG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAOjE;;GAEG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,GAC9D,IAAI,CAEN;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAC/B,CAAC,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC,GACzD,IAAI,CAEN"}

package/dist/runtime/src/approval/handler.js

@@ -1,17 +0,0 @@
-/**
- * Global approval handler that must be set by the execution context
- */
-let approvalHandler = null;
-/**
- * Initialize the approval system with a custom handler
- */
-export function initializeApproval(handler) {
-    approvalHandler = handler;
-}
-/**
- * Get the current approval handler
- */
-export function getApprovalHandler() {
-    return approvalHandler;
-}
-//# sourceMappingURL=handler.js.map

package/dist/runtime/src/approval/handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../../../runtime/src/approval/handler.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,IAAI,eAAe,GAAqE,IAAI,CAAC;AAE7F;;GAEG;AACH,MAAM,UAAU,kBAAkB,CACjC,OAAgE;IAEhE,eAAe,GAAG,OAAO,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAGjC,OAAO,eAAe,CAAC;AACxB,CAAC"}

package/dist/runtime/src/approval/index.d.ts

@@ -1,17 +0,0 @@
-import type { ApprovalResponse } from './types';
-export type { ApprovalRequest, ApprovalResponse, ApprovalSchema } from './types';
-export { initializeApproval } from './handler.js';
-/**
- * Approval Runtime API
- *
- * Allows agents to request explicit human approval before proceeding with sensitive operations.
- * This integrates with MCP's elicitation feature to request structured input from users.
- */
-declare class ApprovalAPI {
-    /**
-     * Request approval from a human
-     */
-    request(message: string, context?: Record<string, unknown>): Promise<ApprovalResponse>;
-}
-export declare const approval: ApprovalAPI;
-//# sourceMappingURL=index.d.ts.map

package/dist/runtime/src/approval/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../runtime/src/approval/index.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAmB,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAGjE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD;;;;;GAKG;AACH,cACM,WAAW;IAChB;;OAEG;IAWG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAsD5F;AAED,eAAO,MAAM,QAAQ,aAAoB,CAAC"}