@provos/ironcurtain 0.4.1 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (140) hide show
  1. package/README.md +219 -248
  2. package/dist/cli.js +10 -0
  3. package/dist/cli.js.map +1 -1
  4. package/dist/config/config-command.js +144 -6
  5. package/dist/config/config-command.js.map +1 -1
  6. package/dist/config/constitution-user-base.md +2 -0
  7. package/dist/config/first-start.js +77 -12
  8. package/dist/config/first-start.js.map +1 -1
  9. package/dist/config/generated/compiled-policy.json +199 -72
  10. package/dist/config/generated/tool-annotations.json +1018 -36
  11. package/dist/config/mcp-servers.json +10 -0
  12. package/dist/config/paths.d.ts +31 -0
  13. package/dist/config/paths.js +52 -2
  14. package/dist/config/paths.js.map +1 -1
  15. package/dist/config/types.d.ts +8 -0
  16. package/dist/config/user-config.d.ts +21 -3
  17. package/dist/config/user-config.js +34 -3
  18. package/dist/config/user-config.js.map +1 -1
  19. package/dist/docker/adapters/claude-code.js +64 -8
  20. package/dist/docker/adapters/claude-code.js.map +1 -1
  21. package/dist/docker/agent-adapter.d.ts +18 -1
  22. package/dist/docker/docker-agent-session.d.ts +15 -8
  23. package/dist/docker/docker-agent-session.js +61 -88
  24. package/dist/docker/docker-agent-session.js.map +1 -1
  25. package/dist/docker/docker-infrastructure.d.ts +51 -0
  26. package/dist/docker/docker-infrastructure.js +261 -0
  27. package/dist/docker/docker-infrastructure.js.map +1 -0
  28. package/dist/docker/docker-manager.js +3 -0
  29. package/dist/docker/docker-manager.js.map +1 -1
  30. package/dist/docker/mitm-proxy.js +4 -0
  31. package/dist/docker/mitm-proxy.js.map +1 -1
  32. package/dist/docker/oauth-credentials.d.ts +81 -0
  33. package/dist/docker/oauth-credentials.js +178 -0
  34. package/dist/docker/oauth-credentials.js.map +1 -0
  35. package/dist/docker/orientation.js +1 -1
  36. package/dist/docker/orientation.js.map +1 -1
  37. package/dist/docker/provider-config.d.ts +3 -0
  38. package/dist/docker/provider-config.js +28 -0
  39. package/dist/docker/provider-config.js.map +1 -1
  40. package/dist/docker/pty-session.d.ts +27 -0
  41. package/dist/docker/pty-session.js +420 -0
  42. package/dist/docker/pty-session.js.map +1 -0
  43. package/dist/docker/pty-types.d.ts +24 -0
  44. package/dist/docker/pty-types.js +12 -0
  45. package/dist/docker/pty-types.js.map +1 -0
  46. package/dist/docker/types.d.ts +6 -0
  47. package/dist/escalation/escalation-watcher.d.ts +44 -0
  48. package/dist/escalation/escalation-watcher.js +92 -0
  49. package/dist/escalation/escalation-watcher.js.map +1 -0
  50. package/dist/escalation/listener-command.d.ts +10 -0
  51. package/dist/escalation/listener-command.js +407 -0
  52. package/dist/escalation/listener-command.js.map +1 -0
  53. package/dist/escalation/listener-state.d.ts +49 -0
  54. package/dist/escalation/listener-state.js +104 -0
  55. package/dist/escalation/listener-state.js.map +1 -0
  56. package/dist/escalation/session-registry.d.ts +17 -0
  57. package/dist/escalation/session-registry.js +98 -0
  58. package/dist/escalation/session-registry.js.map +1 -0
  59. package/dist/index.js +15 -0
  60. package/dist/index.js.map +1 -1
  61. package/dist/logger.js +2 -3
  62. package/dist/logger.js.map +1 -1
  63. package/dist/pipeline/annotate.js +35 -15
  64. package/dist/pipeline/annotate.js.map +1 -1
  65. package/dist/pipeline/constitution-customizer.d.ts +2 -1
  66. package/dist/pipeline/constitution-customizer.js +36 -3
  67. package/dist/pipeline/constitution-customizer.js.map +1 -1
  68. package/dist/pipeline/github-identity.d.ts +38 -0
  69. package/dist/pipeline/github-identity.js +64 -0
  70. package/dist/pipeline/github-identity.js.map +1 -0
  71. package/dist/pipeline/handwritten-scenarios.js +34 -0
  72. package/dist/pipeline/handwritten-scenarios.js.map +1 -1
  73. package/dist/sandbox/index.js +12 -3
  74. package/dist/sandbox/index.js.map +1 -1
  75. package/dist/servers/fetch-server.js +2 -2
  76. package/dist/session/base-transport.d.ts +19 -0
  77. package/dist/session/base-transport.js +36 -0
  78. package/dist/session/base-transport.js.map +1 -0
  79. package/dist/session/cli-transport.d.ts +3 -3
  80. package/dist/session/cli-transport.js +7 -4
  81. package/dist/session/cli-transport.js.map +1 -1
  82. package/dist/session/index.js +24 -78
  83. package/dist/session/index.js.map +1 -1
  84. package/dist/session/interaction-log.d.ts +13 -0
  85. package/dist/session/interaction-log.js +28 -0
  86. package/dist/session/interaction-log.js.map +1 -0
  87. package/dist/session/preflight.d.ts +3 -0
  88. package/dist/session/preflight.js +39 -18
  89. package/dist/session/preflight.js.map +1 -1
  90. package/dist/session/types.d.ts +2 -0
  91. package/dist/signal/bot-command.js +5 -0
  92. package/dist/signal/bot-command.js.map +1 -1
  93. package/dist/signal/format.d.ts +21 -1
  94. package/dist/signal/format.js +41 -3
  95. package/dist/signal/format.js.map +1 -1
  96. package/dist/signal/signal-bot-daemon.d.ts +53 -18
  97. package/dist/signal/signal-bot-daemon.js +344 -106
  98. package/dist/signal/signal-bot-daemon.js.map +1 -1
  99. package/dist/signal/signal-config.d.ts +4 -0
  100. package/dist/signal/signal-config.js +2 -0
  101. package/dist/signal/signal-config.js.map +1 -1
  102. package/dist/signal/signal-transport.d.ts +13 -7
  103. package/dist/signal/signal-transport.js +36 -12
  104. package/dist/signal/signal-transport.js.map +1 -1
  105. package/dist/trusted-process/audit-log.d.ts +6 -1
  106. package/dist/trusted-process/audit-log.js +22 -2
  107. package/dist/trusted-process/audit-log.js.map +1 -1
  108. package/dist/trusted-process/audit-redactor.d.ts +25 -0
  109. package/dist/trusted-process/audit-redactor.js +121 -0
  110. package/dist/trusted-process/audit-redactor.js.map +1 -0
  111. package/dist/trusted-process/escalation.d.ts +1 -1
  112. package/dist/trusted-process/escalation.js +6 -1
  113. package/dist/trusted-process/escalation.js.map +1 -1
  114. package/dist/trusted-process/index.d.ts +2 -1
  115. package/dist/trusted-process/index.js +24 -6
  116. package/dist/trusted-process/index.js.map +1 -1
  117. package/dist/trusted-process/mcp-client-manager.js +14 -2
  118. package/dist/trusted-process/mcp-client-manager.js.map +1 -1
  119. package/dist/trusted-process/mcp-error-utils.d.ts +11 -0
  120. package/dist/trusted-process/mcp-error-utils.js +50 -0
  121. package/dist/trusted-process/mcp-error-utils.js.map +1 -0
  122. package/dist/trusted-process/mcp-proxy-server.d.ts +4 -0
  123. package/dist/trusted-process/mcp-proxy-server.js +14 -4
  124. package/dist/trusted-process/mcp-proxy-server.js.map +1 -1
  125. package/dist/trusted-process/sandbox-integration.d.ts +5 -0
  126. package/dist/trusted-process/sandbox-integration.js +1 -1
  127. package/dist/trusted-process/sandbox-integration.js.map +1 -1
  128. package/dist/trusted-process/server-context.d.ts +21 -0
  129. package/dist/trusted-process/server-context.js +42 -0
  130. package/dist/trusted-process/server-context.js.map +1 -0
  131. package/dist/types/argument-roles.d.ts +5 -2
  132. package/dist/types/argument-roles.js +25 -2
  133. package/dist/types/argument-roles.js.map +1 -1
  134. package/docker/Dockerfile.claude-code +8 -3
  135. package/docker/entrypoint-claude-code.sh +64 -4
  136. package/package.json +16 -8
  137. package/src/config/constitution-user-base.md +2 -0
  138. package/src/config/generated/compiled-policy.json +199 -72
  139. package/src/config/generated/tool-annotations.json +1018 -36
  140. package/src/config/mcp-servers.json +10 -0
package/src/config/mcp-servers.json CHANGED
@@ -27,5 +27,15 @@
27
27
  "args": ["./src/servers/fetch-server.ts"],
28
28
  "sandbox": false,
29
29
  "_comment": "sandbox: false because srt's network sandbox (seccomp/bubblewrap) blocks Unix domain sockets needed by tsx in dev mode and cannot selectively allow network while restricting filesystem. The policy engine handles URL-level security (SSRF blocking, domain allowlists) independently."
30
+ },
31
+ "github": {
32
+ "description": "GitHub API operations (issues, pull requests, repos, search)",
33
+ "command": "docker",
34
+ "args": [
35
+ "run", "-i", "--rm",
36
+ "-e", "GITHUB_PERSONAL_ACCESS_TOKEN",
37
+ "ghcr.io/github/github-mcp-server"
38
+ ],
39
+ "sandbox": false
30
40
  }
31
41
  }