@red-codes/agentguard 1.0.0 → 1.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +179 -298
- package/dist/args.d.ts.map +1 -0
- package/dist/args.js.map +1 -0
- package/dist/bin.d.ts.map +1 -0
- package/dist/bin.js +29185 -0
- package/dist/bin.js.map +7 -0
- package/dist/colors.d.ts.map +1 -0
- package/dist/colors.js.map +1 -0
- package/dist/commands/adoption.d.ts +2 -0
- package/dist/commands/adoption.d.ts.map +1 -0
- package/dist/commands/adoption.js +172 -0
- package/dist/commands/adoption.js.map +1 -0
- package/dist/commands/analytics.d.ts +3 -0
- package/dist/commands/analytics.d.ts.map +1 -0
- package/dist/commands/analytics.js +7 -0
- package/dist/commands/analytics.js.map +1 -0
- package/dist/commands/audit-verify.d.ts +3 -0
- package/dist/commands/audit-verify.d.ts.map +1 -0
- package/dist/commands/audit-verify.js +94 -0
- package/dist/commands/audit-verify.js.map +1 -0
- package/dist/commands/auto-setup.d.ts +28 -0
- package/dist/commands/auto-setup.d.ts.map +1 -0
- package/dist/commands/auto-setup.js +146 -0
- package/dist/commands/auto-setup.js.map +1 -0
- package/dist/commands/ci-check.d.ts +13 -0
- package/dist/commands/ci-check.d.ts.map +1 -0
- package/dist/commands/ci-check.js +286 -0
- package/dist/commands/ci-check.js.map +1 -0
- package/dist/commands/claude-hook.d.ts +2 -0
- package/dist/commands/claude-hook.d.ts.map +1 -0
- package/dist/commands/claude-hook.js +254 -0
- package/dist/commands/claude-hook.js.map +1 -0
- package/dist/commands/claude-init.d.ts.map +1 -0
- package/dist/commands/claude-init.js +401 -0
- package/dist/commands/claude-init.js.map +1 -0
- package/dist/commands/config.d.ts +39 -0
- package/dist/commands/config.d.ts.map +1 -0
- package/dist/commands/config.js +368 -0
- package/dist/commands/config.js.map +1 -0
- package/dist/commands/demo.d.ts +2 -0
- package/dist/commands/demo.d.ts.map +1 -0
- package/dist/commands/demo.js +100 -0
- package/dist/commands/demo.js.map +1 -0
- package/dist/commands/diff.d.ts +3 -0
- package/dist/commands/diff.d.ts.map +1 -0
- package/dist/commands/diff.js +364 -0
- package/dist/commands/diff.js.map +1 -0
- package/dist/commands/evidence-pr.d.ts +3 -0
- package/dist/commands/evidence-pr.d.ts.map +1 -0
- package/dist/commands/evidence-pr.js +162 -0
- package/dist/commands/evidence-pr.js.map +1 -0
- package/dist/commands/export.d.ts +22 -0
- package/dist/commands/export.d.ts.map +1 -0
- package/dist/commands/export.js +92 -0
- package/dist/commands/export.js.map +1 -0
- package/dist/commands/guard.d.ts +21 -0
- package/dist/commands/guard.d.ts.map +1 -0
- package/dist/commands/guard.js +272 -0
- package/dist/commands/guard.js.map +1 -0
- package/dist/commands/import.d.ts +3 -0
- package/dist/commands/import.d.ts.map +1 -0
- package/dist/{cli/commands → commands}/import.js +25 -26
- package/dist/commands/import.js.map +1 -0
- package/dist/commands/init.d.ts +5 -0
- package/dist/commands/init.d.ts.map +1 -0
- package/dist/commands/init.js +1288 -0
- package/dist/commands/init.js.map +1 -0
- package/dist/commands/inspect.d.ts +4 -0
- package/dist/commands/inspect.d.ts.map +1 -0
- package/dist/{cli/commands → commands}/inspect.js +97 -70
- package/dist/commands/inspect.js.map +1 -0
- package/dist/commands/learn.d.ts +2 -0
- package/dist/commands/learn.d.ts.map +1 -0
- package/dist/commands/learn.js +264 -0
- package/dist/commands/learn.js.map +1 -0
- package/dist/commands/migrate.d.ts +3 -0
- package/dist/commands/migrate.d.ts.map +1 -0
- package/dist/commands/migrate.js +270 -0
- package/dist/commands/migrate.js.map +1 -0
- package/dist/commands/plugin.d.ts.map +1 -0
- package/dist/{cli/commands → commands}/plugin.js +2 -2
- package/dist/commands/plugin.js.map +1 -0
- package/dist/commands/policy-verify.d.ts +46 -0
- package/dist/commands/policy-verify.d.ts.map +1 -0
- package/dist/commands/policy-verify.js +173 -0
- package/dist/commands/policy-verify.js.map +1 -0
- package/dist/commands/policy.d.ts +27 -0
- package/dist/commands/policy.d.ts.map +1 -0
- package/dist/commands/policy.js +590 -0
- package/dist/commands/policy.js.map +1 -0
- package/dist/{cli/commands → commands}/replay.d.ts +2 -1
- package/dist/commands/replay.d.ts.map +1 -0
- package/dist/{cli/commands → commands}/replay.js +78 -12
- package/dist/commands/replay.js.map +1 -0
- package/dist/commands/session-viewer.d.ts +5 -0
- package/dist/commands/session-viewer.d.ts.map +1 -0
- package/dist/commands/session-viewer.js +462 -0
- package/dist/commands/session-viewer.js.map +1 -0
- package/dist/commands/simulate.d.ts +7 -0
- package/dist/commands/simulate.d.ts.map +1 -0
- package/dist/commands/simulate.js +505 -0
- package/dist/commands/simulate.js.map +1 -0
- package/dist/commands/status.d.ts +2 -0
- package/dist/commands/status.d.ts.map +1 -0
- package/dist/commands/status.js +212 -0
- package/dist/commands/status.js.map +1 -0
- package/dist/commands/traces.d.ts +24 -0
- package/dist/commands/traces.d.ts.map +1 -0
- package/dist/commands/traces.js +282 -0
- package/dist/commands/traces.js.map +1 -0
- package/dist/commands/trust.d.ts +6 -0
- package/dist/commands/trust.d.ts.map +1 -0
- package/dist/commands/trust.js +129 -0
- package/dist/commands/trust.js.map +1 -0
- package/dist/evidence-summary.d.ts +35 -0
- package/dist/evidence-summary.d.ts.map +1 -0
- package/dist/evidence-summary.js +202 -0
- package/dist/evidence-summary.js.map +1 -0
- package/dist/{cli/file-event-store.d.ts → file-event-store.d.ts} +1 -1
- package/dist/file-event-store.d.ts.map +1 -0
- package/dist/{cli/file-event-store.js → file-event-store.js} +1 -1
- package/dist/file-event-store.js.map +1 -0
- package/{hooks → dist/hooks}/post-commit +3 -1
- package/{hooks → dist/hooks}/post-merge +3 -1
- package/dist/hooks/pre-commit +29 -0
- package/dist/policy-resolver.d.ts +32 -0
- package/dist/policy-resolver.d.ts.map +1 -0
- package/dist/policy-resolver.js +171 -0
- package/dist/policy-resolver.js.map +1 -0
- package/dist/{cli/recorder.d.ts → recorder.d.ts} +1 -1
- package/dist/recorder.d.ts.map +1 -0
- package/dist/{cli/recorder.js → recorder.js} +1 -1
- package/dist/recorder.js.map +1 -0
- package/dist/replay-timeline-html.d.ts +21 -0
- package/dist/replay-timeline-html.d.ts.map +1 -0
- package/dist/replay-timeline-html.js +414 -0
- package/dist/replay-timeline-html.js.map +1 -0
- package/dist/replay.d.ts.map +1 -0
- package/dist/{cli/replay.js → replay.js} +92 -1
- package/dist/replay.js.map +1 -0
- package/dist/{cli/session-store.d.ts → session-store.d.ts} +5 -0
- package/dist/session-store.d.ts.map +1 -0
- package/dist/{cli/session-store.js → session-store.js} +1 -0
- package/dist/session-store.js.map +1 -0
- package/dist/session-viewer-html.d.ts +10 -0
- package/dist/session-viewer-html.d.ts.map +1 -0
- package/dist/session-viewer-html.js +737 -0
- package/dist/session-viewer-html.js.map +1 -0
- package/dist/templates/ci-only.yaml +103 -0
- package/dist/templates/development.yaml +107 -0
- package/dist/templates/permissive.yaml +87 -0
- package/dist/templates/strict.yaml +112 -0
- package/dist/tui.d.ts +3 -0
- package/dist/tui.d.ts.map +1 -0
- package/dist/tui.js +2 -0
- package/dist/tui.js.map +1 -0
- package/package.json +42 -53
- package/dist/adapters/claude-code.d.ts +0 -24
- package/dist/adapters/claude-code.d.ts.map +0 -1
- package/dist/adapters/claude-code.js +0 -99
- package/dist/adapters/claude-code.js.map +0 -1
- package/dist/adapters/file.d.ts +0 -3
- package/dist/adapters/file.d.ts.map +0 -1
- package/dist/adapters/file.js +0 -35
- package/dist/adapters/file.js.map +0 -1
- package/dist/adapters/git.d.ts +0 -3
- package/dist/adapters/git.d.ts.map +0 -1
- package/dist/adapters/git.js +0 -61
- package/dist/adapters/git.js.map +0 -1
- package/dist/adapters/registry.d.ts +0 -5
- package/dist/adapters/registry.d.ts.map +0 -1
- package/dist/adapters/registry.js +0 -15
- package/dist/adapters/registry.js.map +0 -1
- package/dist/adapters/shell.d.ts +0 -8
- package/dist/adapters/shell.d.ts.map +0 -1
- package/dist/adapters/shell.js +0 -27
- package/dist/adapters/shell.js.map +0 -1
- package/dist/cli/args.d.ts.map +0 -1
- package/dist/cli/args.js.map +0 -1
- package/dist/cli/bin.d.ts.map +0 -1
- package/dist/cli/bin.js +0 -5769
- package/dist/cli/bin.js.map +0 -7
- package/dist/cli/colors.d.ts.map +0 -1
- package/dist/cli/colors.js.map +0 -1
- package/dist/cli/commands/claude-hook.d.ts +0 -2
- package/dist/cli/commands/claude-hook.d.ts.map +0 -1
- package/dist/cli/commands/claude-hook.js +0 -110
- package/dist/cli/commands/claude-hook.js.map +0 -1
- package/dist/cli/commands/claude-init.d.ts.map +0 -1
- package/dist/cli/commands/claude-init.js +0 -150
- package/dist/cli/commands/claude-init.js.map +0 -1
- package/dist/cli/commands/export.d.ts +0 -11
- package/dist/cli/commands/export.d.ts.map +0 -1
- package/dist/cli/commands/export.js +0 -113
- package/dist/cli/commands/export.js.map +0 -1
- package/dist/cli/commands/guard.d.ts +0 -12
- package/dist/cli/commands/guard.d.ts.map +0 -1
- package/dist/cli/commands/guard.js +0 -145
- package/dist/cli/commands/guard.js.map +0 -1
- package/dist/cli/commands/import.d.ts +0 -2
- package/dist/cli/commands/import.d.ts.map +0 -1
- package/dist/cli/commands/import.js.map +0 -1
- package/dist/cli/commands/inspect.d.ts +0 -3
- package/dist/cli/commands/inspect.d.ts.map +0 -1
- package/dist/cli/commands/inspect.js.map +0 -1
- package/dist/cli/commands/plugin.d.ts.map +0 -1
- package/dist/cli/commands/plugin.js.map +0 -1
- package/dist/cli/commands/replay.d.ts.map +0 -1
- package/dist/cli/commands/replay.js.map +0 -1
- package/dist/cli/file-event-store.d.ts.map +0 -1
- package/dist/cli/file-event-store.js.map +0 -1
- package/dist/cli/policy-resolver.d.ts +0 -4
- package/dist/cli/policy-resolver.d.ts.map +0 -1
- package/dist/cli/policy-resolver.js +0 -62
- package/dist/cli/policy-resolver.js.map +0 -1
- package/dist/cli/recorder.d.ts.map +0 -1
- package/dist/cli/recorder.js.map +0 -1
- package/dist/cli/replay.d.ts.map +0 -1
- package/dist/cli/replay.js.map +0 -1
- package/dist/cli/session-store.d.ts.map +0 -1
- package/dist/cli/session-store.js.map +0 -1
- package/dist/cli/tui.d.ts +0 -24
- package/dist/cli/tui.d.ts.map +0 -1
- package/dist/cli/tui.js +0 -197
- package/dist/cli/tui.js.map +0 -1
- package/dist/core/actions.d.ts +0 -11
- package/dist/core/actions.d.ts.map +0 -1
- package/dist/core/actions.js +0 -112
- package/dist/core/actions.js.map +0 -1
- package/dist/core/adapters.d.ts +0 -19
- package/dist/core/adapters.d.ts.map +0 -1
- package/dist/core/adapters.js +0 -85
- package/dist/core/adapters.js.map +0 -1
- package/dist/core/execution-log/bridge.d.ts +0 -12
- package/dist/core/execution-log/bridge.d.ts.map +0 -1
- package/dist/core/execution-log/bridge.js +0 -112
- package/dist/core/execution-log/bridge.js.map +0 -1
- package/dist/core/execution-log/event-log.d.ts +0 -7
- package/dist/core/execution-log/event-log.d.ts.map +0 -1
- package/dist/core/execution-log/event-log.js +0 -103
- package/dist/core/execution-log/event-log.js.map +0 -1
- package/dist/core/execution-log/event-projections.d.ts +0 -28
- package/dist/core/execution-log/event-projections.d.ts.map +0 -1
- package/dist/core/execution-log/event-projections.js +0 -272
- package/dist/core/execution-log/event-projections.js.map +0 -1
- package/dist/core/execution-log/event-schema.d.ts +0 -56
- package/dist/core/execution-log/event-schema.d.ts.map +0 -1
- package/dist/core/execution-log/event-schema.js +0 -160
- package/dist/core/execution-log/event-schema.js.map +0 -1
- package/dist/core/execution-log/index.d.ts +0 -7
- package/dist/core/execution-log/index.d.ts.map +0 -1
- package/dist/core/execution-log/index.js +0 -13
- package/dist/core/execution-log/index.js.map +0 -1
- package/dist/core/hash.d.ts +0 -5
- package/dist/core/hash.d.ts.map +0 -1
- package/dist/core/hash.js +0 -13
- package/dist/core/hash.js.map +0 -1
- package/dist/core/rng.d.ts +0 -29
- package/dist/core/rng.d.ts.map +0 -1
- package/dist/core/rng.js +0 -48
- package/dist/core/rng.js.map +0 -1
- package/dist/core/types.d.ts +0 -746
- package/dist/core/types.d.ts.map +0 -1
- package/dist/core/types.js +0 -8
- package/dist/core/types.js.map +0 -1
- package/dist/events/bus.d.ts +0 -24
- package/dist/events/bus.d.ts.map +0 -1
- package/dist/events/bus.js +0 -64
- package/dist/events/bus.js.map +0 -1
- package/dist/events/decision-jsonl.d.ts +0 -8
- package/dist/events/decision-jsonl.d.ts.map +0 -1
- package/dist/events/decision-jsonl.js +0 -44
- package/dist/events/decision-jsonl.js.map +0 -1
- package/dist/events/jsonl.d.ts +0 -8
- package/dist/events/jsonl.d.ts.map +0 -1
- package/dist/events/jsonl.js +0 -46
- package/dist/events/jsonl.js.map +0 -1
- package/dist/events/schema.d.ts +0 -59
- package/dist/events/schema.d.ts.map +0 -1
- package/dist/events/schema.js +0 -296
- package/dist/events/schema.js.map +0 -1
- package/dist/events/store.d.ts +0 -7
- package/dist/events/store.d.ts.map +0 -1
- package/dist/events/store.js +0 -64
- package/dist/events/store.js.map +0 -1
- package/dist/invariants/checker.d.ts +0 -15
- package/dist/invariants/checker.d.ts.map +0 -1
- package/dist/invariants/checker.js +0 -52
- package/dist/invariants/checker.js.map +0 -1
- package/dist/invariants/definitions.d.ts +0 -33
- package/dist/invariants/definitions.d.ts.map +0 -1
- package/dist/invariants/definitions.js +0 -168
- package/dist/invariants/definitions.js.map +0 -1
- package/dist/kernel/aab.d.ts +0 -26
- package/dist/kernel/aab.d.ts.map +0 -1
- package/dist/kernel/aab.js +0 -149
- package/dist/kernel/aab.js.map +0 -1
- package/dist/kernel/blast-radius.d.ts +0 -60
- package/dist/kernel/blast-radius.d.ts.map +0 -1
- package/dist/kernel/blast-radius.js +0 -146
- package/dist/kernel/blast-radius.js.map +0 -1
- package/dist/kernel/decision.d.ts +0 -40
- package/dist/kernel/decision.d.ts.map +0 -1
- package/dist/kernel/decision.js +0 -92
- package/dist/kernel/decision.js.map +0 -1
- package/dist/kernel/decisions/factory.d.ts +0 -12
- package/dist/kernel/decisions/factory.d.ts.map +0 -1
- package/dist/kernel/decisions/factory.js +0 -56
- package/dist/kernel/decisions/factory.js.map +0 -1
- package/dist/kernel/decisions/types.d.ts +0 -70
- package/dist/kernel/decisions/types.d.ts.map +0 -1
- package/dist/kernel/decisions/types.js +0 -5
- package/dist/kernel/decisions/types.js.map +0 -1
- package/dist/kernel/evidence.d.ts +0 -29
- package/dist/kernel/evidence.d.ts.map +0 -1
- package/dist/kernel/evidence.js +0 -61
- package/dist/kernel/evidence.js.map +0 -1
- package/dist/kernel/kernel.d.ts +0 -47
- package/dist/kernel/kernel.d.ts.map +0 -1
- package/dist/kernel/kernel.js +0 -377
- package/dist/kernel/kernel.js.map +0 -1
- package/dist/kernel/monitor.d.ts +0 -35
- package/dist/kernel/monitor.d.ts.map +0 -1
- package/dist/kernel/monitor.js +0 -144
- package/dist/kernel/monitor.js.map +0 -1
- package/dist/kernel/replay-comparator.d.ts +0 -72
- package/dist/kernel/replay-comparator.d.ts.map +0 -1
- package/dist/kernel/replay-comparator.js +0 -251
- package/dist/kernel/replay-comparator.js.map +0 -1
- package/dist/kernel/replay-engine.d.ts +0 -108
- package/dist/kernel/replay-engine.d.ts.map +0 -1
- package/dist/kernel/replay-engine.js +0 -241
- package/dist/kernel/replay-engine.js.map +0 -1
- package/dist/kernel/replay-processor.d.ts +0 -109
- package/dist/kernel/replay-processor.d.ts.map +0 -1
- package/dist/kernel/replay-processor.js +0 -118
- package/dist/kernel/replay-processor.js.map +0 -1
- package/dist/kernel/simulation/filesystem-simulator.d.ts +0 -3
- package/dist/kernel/simulation/filesystem-simulator.d.ts.map +0 -1
- package/dist/kernel/simulation/filesystem-simulator.js +0 -81
- package/dist/kernel/simulation/filesystem-simulator.js.map +0 -1
- package/dist/kernel/simulation/git-simulator.d.ts +0 -5
- package/dist/kernel/simulation/git-simulator.d.ts.map +0 -1
- package/dist/kernel/simulation/git-simulator.js +0 -115
- package/dist/kernel/simulation/git-simulator.js.map +0 -1
- package/dist/kernel/simulation/package-simulator.d.ts +0 -5
- package/dist/kernel/simulation/package-simulator.d.ts.map +0 -1
- package/dist/kernel/simulation/package-simulator.js +0 -164
- package/dist/kernel/simulation/package-simulator.js.map +0 -1
- package/dist/kernel/simulation/registry.d.ts +0 -3
- package/dist/kernel/simulation/registry.d.ts.map +0 -1
- package/dist/kernel/simulation/registry.js +0 -24
- package/dist/kernel/simulation/registry.js.map +0 -1
- package/dist/kernel/simulation/types.d.ts +0 -35
- package/dist/kernel/simulation/types.d.ts.map +0 -1
- package/dist/kernel/simulation/types.js +0 -4
- package/dist/kernel/simulation/types.js.map +0 -1
- package/dist/plugins/discovery.d.ts +0 -45
- package/dist/plugins/discovery.d.ts.map +0 -1
- package/dist/plugins/discovery.js +0 -89
- package/dist/plugins/discovery.js.map +0 -1
- package/dist/plugins/index.d.ts +0 -10
- package/dist/plugins/index.d.ts.map +0 -1
- package/dist/plugins/index.js +0 -7
- package/dist/plugins/index.js.map +0 -1
- package/dist/plugins/registry.d.ts +0 -52
- package/dist/plugins/registry.d.ts.map +0 -1
- package/dist/plugins/registry.js +0 -148
- package/dist/plugins/registry.js.map +0 -1
- package/dist/plugins/sandbox.d.ts +0 -87
- package/dist/plugins/sandbox.d.ts.map +0 -1
- package/dist/plugins/sandbox.js +0 -122
- package/dist/plugins/sandbox.js.map +0 -1
- package/dist/plugins/types.d.ts +0 -61
- package/dist/plugins/types.d.ts.map +0 -1
- package/dist/plugins/types.js +0 -16
- package/dist/plugins/types.js.map +0 -1
- package/dist/plugins/validator.d.ts +0 -36
- package/dist/plugins/validator.d.ts.map +0 -1
- package/dist/plugins/validator.js +0 -276
- package/dist/plugins/validator.js.map +0 -1
- package/dist/policy/evaluator.d.ts +0 -41
- package/dist/policy/evaluator.d.ts.map +0 -1
- package/dist/policy/evaluator.js +0 -111
- package/dist/policy/evaluator.js.map +0 -1
- package/dist/policy/loader.d.ts +0 -13
- package/dist/policy/loader.d.ts.map +0 -1
- package/dist/policy/loader.js +0 -118
- package/dist/policy/loader.js.map +0 -1
- package/dist/policy/pack-loader.d.ts +0 -40
- package/dist/policy/pack-loader.d.ts.map +0 -1
- package/dist/policy/pack-loader.js +0 -138
- package/dist/policy/pack-loader.js.map +0 -1
- package/dist/policy/yaml-loader.d.ts +0 -23
- package/dist/policy/yaml-loader.d.ts.map +0 -1
- package/dist/policy/yaml-loader.js +0 -222
- package/dist/policy/yaml-loader.js.map +0 -1
- package/dist/renderers/index.d.ts +0 -6
- package/dist/renderers/index.d.ts.map +0 -1
- package/dist/renderers/index.js +0 -4
- package/dist/renderers/index.js.map +0 -1
- package/dist/renderers/registry.d.ts +0 -39
- package/dist/renderers/registry.d.ts.map +0 -1
- package/dist/renderers/registry.js +0 -97
- package/dist/renderers/registry.js.map +0 -1
- package/dist/renderers/tui-renderer.d.ts +0 -18
- package/dist/renderers/tui-renderer.d.ts.map +0 -1
- package/dist/renderers/tui-renderer.js +0 -57
- package/dist/renderers/tui-renderer.js.map +0 -1
- package/dist/renderers/types.d.ts +0 -52
- package/dist/renderers/types.d.ts.map +0 -1
- package/dist/renderers/types.js +0 -4
- package/dist/renderers/types.js.map +0 -1
- package/dist/telemetry/index.d.ts +0 -3
- package/dist/telemetry/index.d.ts.map +0 -1
- package/dist/telemetry/index.js +0 -2
- package/dist/telemetry/index.js.map +0 -1
- package/dist/telemetry/runtimeLogger.d.ts +0 -9
- package/dist/telemetry/runtimeLogger.d.ts.map +0 -1
- package/dist/telemetry/runtimeLogger.js +0 -68
- package/dist/telemetry/runtimeLogger.js.map +0 -1
- package/dist/telemetry/types.d.ts +0 -22
- package/dist/telemetry/types.d.ts.map +0 -1
- package/dist/telemetry/types.js +0 -4
- package/dist/telemetry/types.js.map +0 -1
- package/hooks/pre-commit +0 -28
- /package/dist/{cli/args.d.ts → args.d.ts} +0 -0
- /package/dist/{cli/args.js → args.js} +0 -0
- /package/dist/{cli/bin.d.ts → bin.d.ts} +0 -0
- /package/dist/{cli/colors.d.ts → colors.d.ts} +0 -0
- /package/dist/{cli/colors.js → colors.js} +0 -0
- /package/dist/{cli/commands → commands}/claude-init.d.ts +0 -0
- /package/dist/{cli/commands → commands}/plugin.d.ts +0 -0
- /package/dist/{cli/replay.d.ts → replay.d.ts} +0 -0
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/events/schema.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,kDAAkD;AAClD,mDAAmD;AAGnD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,sBAAsB;AACtB,qBAAqB;AACrB,MAAM,CAAC,MAAM,cAAc,GAAc,eAAe,CAAC;AACzD,MAAM,CAAC,MAAM,cAAc,GAAc,eAAe,CAAC;AAEzD,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAc,mBAAmB,CAAC;AAChE,MAAM,CAAC,MAAM,SAAS,GAAc,WAAW,CAAC;AAChD,MAAM,CAAC,MAAM,YAAY,GAAc,cAAc,CAAC;AACtD,MAAM,CAAC,MAAM,eAAe,GAAc,iBAAiB,CAAC;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAAc,mBAAmB,CAAC;AAChE,MAAM,CAAC,MAAM,cAAc,GAAc,gBAAgB,CAAC;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAc,iBAAiB,CAAC;AAC5D,MAAM,CAAC,MAAM,aAAa,GAAc,eAAe,CAAC;AACxD,MAAM,CAAC,MAAM,YAAY,GAAc,cAAc,CAAC;AAEtD,cAAc;AACd,MAAM,CAAC,MAAM,iBAAiB,GAAc,kBAAkB,CAAC;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAc,oBAAoB,CAAC;AAEnE,UAAU;AACV,MAAM,CAAC,MAAM,aAAa,GAAc,cAAc,CAAC;AACvD,MAAM,CAAC,MAAM,WAAW,GAAc,YAAY,CAAC;AACnD,MAAM,CAAC,MAAM,SAAS,GAAc,UAAU,CAAC;AAC/C,MAAM,CAAC,MAAM,kBAAkB,GAAc,mBAAmB,CAAC;AAEjE,aAAa;AACb,MAAM,CAAC,MAAM,aAAa,GAAc,cAAc,CAAC;AACvD,MAAM,CAAC,MAAM,mBAAmB,GAAc,oBAAoB,CAAC;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAc,oBAAoB,CAAC;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAc,qBAAqB,CAAC;AACtE,MAAM,CAAC,MAAM,mBAAmB,GAAc,mBAAmB,CAAC;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAc,uBAAuB,CAAC;AAE1E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAc,iBAAiB,CAAC;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAc,eAAe,CAAC;AACzD,MAAM,CAAC,MAAM,aAAa,GAAc,cAAc,CAAC;AACvD,MAAM,CAAC,MAAM,gBAAgB,GAAc,iBAAiB,CAAC;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAc,gBAAgB,CAAC;AAC3D,MAAM,CAAC,MAAM,aAAa,GAAc,cAAc,CAAC;AAEvD,mBAAmB;AACnB,MAAM,CAAC,MAAM,iBAAiB,GAAc,kBAAkB,CAAC;AAE/D,aAAa;AACb,MAAM,CAAC,MAAM,oBAAoB,GAAc,qBAAqB,CAAC;AAErE,WAAW;AACX,MAAM,CAAC,MAAM,gBAAgB,GAAc,iBAAiB,CAAC;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAc,gBAAgB,CAAC;AAC3D,MAAM,CAAC,MAAM,YAAY,GAAc,aAAa,CAAC;AACrD,MAAM,CAAC,MAAM,kBAAkB,GAAc,mBAAmB,CAAC;AACjE,MAAM,CAAC,MAAM,eAAe,GAAc,gBAAgB,CAAC;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAc,oBAAoB,CAAC;AAEpE,oBAAoB;AACpB,MAAM,CAAC,MAAM,UAAU,GAAc,WAAW,CAAC;AACjD,MAAM,CAAC,MAAM,cAAc,GAAc,eAAe,CAAC;AACzD,MAAM,CAAC,MAAM,eAAe,GAAc,gBAAgB,CAAC;AAC3D,MAAM,CAAC,MAAM,cAAc,GAAc,eAAe,CAAC;AACzD,MAAM,CAAC,MAAM,aAAa,GAAc,cAAc,CAAC;AACvD,MAAM,CAAC,MAAM,gBAAgB,GAAc,iBAAiB,CAAC;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAc,eAAe,CAAC;AAEzD,wBAAwB;AACxB,MAAM,aAAa,GAAgC;IACjD,CAAC,cAAc,CAAC,EAAE;QAChB,QAAQ,EAAE,CAAC,SAAS,CAAC;QACrB,QAAQ,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC;KACzF;IACD,CAAC,cAAc,CAAC,EAAE;QAChB,QAAQ,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;QACnC,QAAQ,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;KAClC;IACD,CAAC,iBAAiB,CAAC,EAAE;QACnB,QAAQ,EAAE,CAAC,OAAO,CAAC;QACnB,QAAQ,EAAE,CAAC,aAAa,CAAC;KAC1B;IACD,CAAC,SAAS,CAAC,EAAE;QACX,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;QAC9B,QAAQ,EAAE,CAAC,UAAU,CAAC;KACvB;IACD,CAAC,YAAY,CAAC,EAAE;QACd,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC9B,QAAQ,EAAE,CAAC,eAAe,CAAC;KAC5B;IACD,CAAC,eAAe,CAAC,EAAE;QACjB,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC9B,QAAQ,EAAE,EAAE;KACb;IACD,CAAC,iBAAiB,CAAC,EAAE;QACnB,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;QAC9B,QAAQ,EAAE,EAAE;KACb;IACD,CAAC,cAAc,CAAC,EAAE;QAChB,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,EAAE;KACb;IACD,CAAC,eAAe,CAAC,EAAE;QACjB,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,EAAE;KACb;IACD,CAAC,aAAa,CAAC,EAAE;QACf,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,EAAE;KACb;IACD,CAAC,YAAY,CAAC,EAAE;QACd,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,EAAE;KACb;IACD,CAAC,iBAAiB,CAAC,EAAE;QACnB,QAAQ,EAAE,CAAC,UAAU,CAAC;QACtB,QAAQ,EAAE,EAAE;KACb;IACD,CAAC,mBAAmB,CAAC,EAAE;QACrB,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;QACxB,QAAQ,EAAE,EAAE;KACb;IACD,CAAC,aAAa,CAAC,EAAE;QACf,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;QACxB,QAAQ,EAAE,EAAE;KACb;IACD,CAAC,WAAW,CAAC,EAAE;QACb,QAAQ,EAAE,CAAC,OAAO,CAAC;QACnB,QAAQ,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,CAAC;KAClD;IACD,CAAC,SAAS,CAAC,EAAE;QACX,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC7B,QAAQ,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,CAAC;KACpE;IACD,CAAC,kBAAkB,CAAC,EAAE;QACpB,QAAQ,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;QACjC,QAAQ,EAAE,CAAC,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC;KAClD;IACD,CAAC,aAAa,CAAC,EAAE;QACf,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACxC,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;KAClD;IACD,CAAC,mBAAmB,CAAC,EAAE;QACrB,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC9B,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;KAC3D;IACD,CAAC,mBAAmB,CAAC,EAAE;QACrB,QAAQ,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC;QAC7C,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;KACvC;IACD,CAAC,qBAAqB,CAAC,EAAE;QACvB,QAAQ,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;QACpC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC;KAC1C;IACD,CAAC,mBAAmB,CAAC,EAAE;QACrB,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC9B,QAAQ,EAAE,CAAC,mBAAmB,EAAE,UAAU,CAAC;KAC5C;IACD,CAAC,uBAAuB,CAAC,EAAE;QACzB,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;QAChC,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;KAClC;IACD,CAAC,gBAAgB,CAAC,EAAE;QAClB,QAAQ,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC;QACnD,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;KAC9C;IACD,CAAC,cAAc,CAAC,EAAE;QAChB,QAAQ,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC;QAChD,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC;KAC3D;IACD,CAAC,aAAa,CAAC,EAAE;QACf,QAAQ,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAC5C,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC;KACjD;IACD,CAAC,gBAAgB,CAAC,EAAE;QAClB,QAAQ,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAC5C,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC;KACjD;IACD,CAAC,eAAe,CAAC,EAAE;QACjB,QAAQ,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAC5C,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;KAC/C;IACD,CAAC,aAAa,CAAC,EAAE;QACf,QAAQ,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC;QAC3C,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;KAC/C;IACD,CAAC,iBAAiB,CAAC,EAAE;QACnB,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC;QAC/C,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC;KAC3C;IACD,CAAC,oBAAoB,CAAC,EAAE;QACtB,QAAQ,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,aAAa,CAAC;QACrD,QAAQ,EAAE,CAAC,kBAAkB,EAAE,YAAY,EAAE,UAAU,CAAC;KACzD;IACD,CAAC,gBAAgB,CAAC,EAAE;QAClB,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;QAC3B,QAAQ,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;KACvC;IACD,CAAC,eAAe,CAAC,EAAE;QACjB,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;QACxC,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC;KAClD;IACD,CAAC,YAAY,CAAC,EAAE;QACd,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;QACxC,QAAQ,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;KACpC;IACD,CAAC,kBAAkB,CAAC,EAAE;QACpB,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC7B,QAAQ,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC;KAClD;IACD,CAAC,eAAe,CAAC,EAAE;QACjB,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC;QAC5C,QAAQ,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC;KAClD;IACD,CAAC,oBAAoB,CAAC,EAAE;QACtB,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5B,QAAQ,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;KACxC;IACD,CAAC,UAAU,CAAC,EAAE;QACZ,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,QAAQ,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC;KACvC;IACD,CAAC,cAAc,CAAC,EAAE;QAChB,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;KAC7D;IACD,CAAC,eAAe,CAAC,EAAE;QACjB,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC;KAC3C;IACD,CAAC,cAAc,CAAC,EAAE;QAChB,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,QAAQ,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,CAAC;KAChE;IACD,CAAC,aAAa,CAAC,EAAE;QACf,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;KACtC;IACD,CAAC,gBAAgB,CAAC,EAAE;QAClB,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,SAAS,CAAC;KACjD;IACD,CAAC,cAAc,CAAC,EAAE;QAChB,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC;KAClD;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;AAE3E,wBAAwB;AACxB,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,8DAA8D;AAC9D,MAAM,UAAU,iBAAiB;IAC/B,YAAY,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,OAAO,OAAO,SAAS,IAAI,EAAE,YAAY,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAA6B;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,UAAU,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAA8B;IAC1D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,iCAAiC,CAAC,EAAE,CAAC;IACvE,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,uBAAuB,KAAK,CAAC,IAAc,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,IAAc,gCAAgC,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAe,EAAE,OAAgC,EAAE;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,KAAK,GAA4B,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,CAAC;IACpE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAA+B,CAAC;AACzC,CAAC"}
|
package/dist/events/store.d.ts
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/events/store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAA4B,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAG/F;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,UAAU,CA6DhD"}
|
package/dist/events/store.js
DELETED
|
@@ -1,64 +0,0 @@
|
|
|
1
|
-
// Event store interface and in-memory reference implementation.
|
|
2
|
-
// No DOM, no Node.js APIs — pure domain logic.
|
|
3
|
-
// File-based persistence: see src/cli/file-event-store.ts
|
|
4
|
-
import { validateEvent } from './schema.js';
|
|
5
|
-
/**
|
|
6
|
-
* Create an in-memory event store.
|
|
7
|
-
* Serves as the reference implementation and test double.
|
|
8
|
-
*/
|
|
9
|
-
export function createInMemoryStore() {
|
|
10
|
-
let events = [];
|
|
11
|
-
return {
|
|
12
|
-
append(event) {
|
|
13
|
-
const { valid, errors } = validateEvent(event);
|
|
14
|
-
if (!valid) {
|
|
15
|
-
throw new Error(`Cannot append invalid event: ${errors.join('; ')}`);
|
|
16
|
-
}
|
|
17
|
-
events.push(event);
|
|
18
|
-
},
|
|
19
|
-
query(filter = {}) {
|
|
20
|
-
let result = events;
|
|
21
|
-
if (filter.kind) {
|
|
22
|
-
result = result.filter((e) => e.kind === filter.kind);
|
|
23
|
-
}
|
|
24
|
-
if (filter.since !== undefined) {
|
|
25
|
-
result = result.filter((e) => e.timestamp >= filter.since);
|
|
26
|
-
}
|
|
27
|
-
if (filter.until !== undefined) {
|
|
28
|
-
result = result.filter((e) => e.timestamp <= filter.until);
|
|
29
|
-
}
|
|
30
|
-
if (filter.fingerprint) {
|
|
31
|
-
result = result.filter((e) => e.fingerprint === filter.fingerprint);
|
|
32
|
-
}
|
|
33
|
-
return result;
|
|
34
|
-
},
|
|
35
|
-
replay(fromId) {
|
|
36
|
-
if (!fromId)
|
|
37
|
-
return [...events];
|
|
38
|
-
const idx = events.findIndex((e) => e.id === fromId);
|
|
39
|
-
if (idx === -1)
|
|
40
|
-
return [];
|
|
41
|
-
return events.slice(idx);
|
|
42
|
-
},
|
|
43
|
-
count() {
|
|
44
|
-
return events.length;
|
|
45
|
-
},
|
|
46
|
-
clear() {
|
|
47
|
-
events = [];
|
|
48
|
-
},
|
|
49
|
-
toNDJSON() {
|
|
50
|
-
return events.map((e) => JSON.stringify(e)).join('\n');
|
|
51
|
-
},
|
|
52
|
-
fromNDJSON(ndjson) {
|
|
53
|
-
const lines = ndjson.split('\n').filter((line) => line.trim().length > 0);
|
|
54
|
-
let loaded = 0;
|
|
55
|
-
for (const line of lines) {
|
|
56
|
-
const parsed = JSON.parse(line);
|
|
57
|
-
events.push(parsed);
|
|
58
|
-
loaded++;
|
|
59
|
-
}
|
|
60
|
-
return loaded;
|
|
61
|
-
},
|
|
62
|
-
};
|
|
63
|
-
}
|
|
64
|
-
//# sourceMappingURL=store.js.map
|
package/dist/events/store.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/events/store.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,+CAA+C;AAC/C,0DAA0D;AAG1D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,MAAM,GAAkB,EAAE,CAAC;IAE/B,OAAO;QACL,MAAM,CAAC,KAAkB;YACvB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,aAAa,CACrC,KAA2C,CACxB,CAAC;YACtB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,KAAK,CAAC,SAAsB,EAAE;YAC5B,IAAI,MAAM,GAAG,MAAM,CAAC;YACpB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,KAAM,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,KAAM,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,CAAC,MAAe;YACpB,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;YACrD,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK;YACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QAED,KAAK;YACH,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;QAED,QAAQ;YACN,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,UAAU,CAAC,MAAc;YACvB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC1E,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,MAAM,EAAE,CAAC;YACX,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
import type { DomainEvent } from '../core/types.js';
|
|
2
|
-
import type { AgentGuardInvariant, InvariantCheckResult, SystemState } from './definitions.js';
|
|
3
|
-
export interface InvariantCheck {
|
|
4
|
-
holds: boolean;
|
|
5
|
-
invariant: AgentGuardInvariant;
|
|
6
|
-
result: InvariantCheckResult;
|
|
7
|
-
}
|
|
8
|
-
export declare function checkInvariant(invariant: AgentGuardInvariant, state: SystemState): InvariantCheck;
|
|
9
|
-
export declare function checkAllInvariants(invariants: AgentGuardInvariant[], state: SystemState): {
|
|
10
|
-
violations: InvariantCheck[];
|
|
11
|
-
events: DomainEvent[];
|
|
12
|
-
allHold: boolean;
|
|
13
|
-
};
|
|
14
|
-
export declare function buildSystemState(context?: Record<string, unknown>): SystemState;
|
|
15
|
-
//# sourceMappingURL=checker.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"checker.d.ts","sourceRoot":"","sources":["../../src/invariants/checker.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,mBAAmB,CAAC;IAC/B,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,mBAAmB,EAAE,KAAK,EAAE,WAAW,GAAG,cAAc,CAOjG;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,mBAAmB,EAAE,EACjC,KAAK,EAAE,WAAW,GACjB;IACD,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;CAClB,CA8BA;AAED,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,WAAW,CAenF"}
|
|
@@ -1,52 +0,0 @@
|
|
|
1
|
-
// Invariant checker — evaluates system state against invariant definitions.
|
|
2
|
-
// Pure domain logic. No DOM, no Node.js-specific APIs.
|
|
3
|
-
import { createEvent, INVARIANT_VIOLATION } from '../events/schema.js';
|
|
4
|
-
export function checkInvariant(invariant, state) {
|
|
5
|
-
const result = invariant.check(state);
|
|
6
|
-
return {
|
|
7
|
-
holds: result.holds,
|
|
8
|
-
invariant,
|
|
9
|
-
result,
|
|
10
|
-
};
|
|
11
|
-
}
|
|
12
|
-
export function checkAllInvariants(invariants, state) {
|
|
13
|
-
const violations = [];
|
|
14
|
-
const events = [];
|
|
15
|
-
for (const invariant of invariants) {
|
|
16
|
-
const check = checkInvariant(invariant, state);
|
|
17
|
-
if (!check.holds) {
|
|
18
|
-
violations.push(check);
|
|
19
|
-
events.push(createEvent(INVARIANT_VIOLATION, {
|
|
20
|
-
invariant: invariant.id,
|
|
21
|
-
expected: check.result.expected,
|
|
22
|
-
actual: check.result.actual,
|
|
23
|
-
metadata: {
|
|
24
|
-
name: invariant.name,
|
|
25
|
-
severity: invariant.severity,
|
|
26
|
-
description: invariant.description,
|
|
27
|
-
},
|
|
28
|
-
}));
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
return {
|
|
32
|
-
violations,
|
|
33
|
-
events,
|
|
34
|
-
allHold: violations.length === 0,
|
|
35
|
-
};
|
|
36
|
-
}
|
|
37
|
-
export function buildSystemState(context = {}) {
|
|
38
|
-
return {
|
|
39
|
-
modifiedFiles: context.modifiedFiles || [],
|
|
40
|
-
targetBranch: context.targetBranch || '',
|
|
41
|
-
directPush: context.directPush || false,
|
|
42
|
-
forcePush: context.forcePush || false,
|
|
43
|
-
isPush: context.isPush || false,
|
|
44
|
-
testsPass: context.testsPass,
|
|
45
|
-
filesAffected: context.filesAffected || (context.modifiedFiles || []).length,
|
|
46
|
-
blastRadiusLimit: context.blastRadiusLimit || 20,
|
|
47
|
-
protectedBranches: context.protectedBranches || ['main', 'master'],
|
|
48
|
-
currentTarget: context.currentTarget || '',
|
|
49
|
-
currentCommand: context.currentCommand || '',
|
|
50
|
-
};
|
|
51
|
-
}
|
|
52
|
-
//# sourceMappingURL=checker.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"checker.js","sourceRoot":"","sources":["../../src/invariants/checker.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uDAAuD;AAGvD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AASvE,MAAM,UAAU,cAAc,CAAC,SAA8B,EAAE,KAAkB;IAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS;QACT,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,UAAiC,EACjC,KAAkB;IAMlB,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEvB,MAAM,CAAC,IAAI,CACT,WAAW,CAAC,mBAAmB,EAAE;gBAC/B,SAAS,EAAE,SAAS,CAAC,EAAE;gBACvB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC3B,QAAQ,EAAE;oBACR,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,WAAW,EAAE,SAAS,CAAC,WAAW;iBACnC;aACF,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,MAAM;QACN,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAmC,EAAE;IACpE,OAAO;QACL,aAAa,EAAG,OAAO,CAAC,aAA0B,IAAI,EAAE;QACxD,YAAY,EAAG,OAAO,CAAC,YAAuB,IAAI,EAAE;QACpD,UAAU,EAAG,OAAO,CAAC,UAAsB,IAAI,KAAK;QACpD,SAAS,EAAG,OAAO,CAAC,SAAqB,IAAI,KAAK;QAClD,MAAM,EAAG,OAAO,CAAC,MAAkB,IAAI,KAAK;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAgC;QACnD,aAAa,EACV,OAAO,CAAC,aAAwB,IAAI,CAAE,OAAO,CAAC,aAA0B,IAAI,EAAE,CAAC,CAAC,MAAM;QACzF,gBAAgB,EAAG,OAAO,CAAC,gBAA2B,IAAI,EAAE;QAC5D,iBAAiB,EAAG,OAAO,CAAC,iBAA8B,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;QAChF,aAAa,EAAG,OAAO,CAAC,aAAwB,IAAI,EAAE;QACtD,cAAc,EAAG,OAAO,CAAC,cAAyB,IAAI,EAAE;KACzD,CAAC;AACJ,CAAC"}
|
|
@@ -1,33 +0,0 @@
|
|
|
1
|
-
export interface InvariantCheckResult {
|
|
2
|
-
holds: boolean;
|
|
3
|
-
expected: string;
|
|
4
|
-
actual: string;
|
|
5
|
-
}
|
|
6
|
-
export interface AgentGuardInvariant {
|
|
7
|
-
id: string;
|
|
8
|
-
name: string;
|
|
9
|
-
description: string;
|
|
10
|
-
severity: number;
|
|
11
|
-
check: (state: SystemState) => InvariantCheckResult;
|
|
12
|
-
}
|
|
13
|
-
export interface SystemState {
|
|
14
|
-
modifiedFiles?: string[];
|
|
15
|
-
targetBranch?: string;
|
|
16
|
-
directPush?: boolean;
|
|
17
|
-
forcePush?: boolean;
|
|
18
|
-
isPush?: boolean;
|
|
19
|
-
testsPass?: boolean;
|
|
20
|
-
filesAffected?: number;
|
|
21
|
-
blastRadiusLimit?: number;
|
|
22
|
-
protectedBranches?: string[];
|
|
23
|
-
/** Blast radius from pre-execution simulation (overrides filesAffected in blast-radius check) */
|
|
24
|
-
simulatedBlastRadius?: number;
|
|
25
|
-
/** Risk level from pre-execution simulation */
|
|
26
|
-
simulatedRiskLevel?: string;
|
|
27
|
-
/** File path targeted by the current action */
|
|
28
|
-
currentTarget?: string;
|
|
29
|
-
/** Shell command of the current action (for shell.exec detection) */
|
|
30
|
-
currentCommand?: string;
|
|
31
|
-
}
|
|
32
|
-
export declare const DEFAULT_INVARIANTS: AgentGuardInvariant[];
|
|
33
|
-
//# sourceMappingURL=definitions.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../src/invariants/definitions.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,oBAAoB,CAAC;CACrD;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,iGAAiG;IACjG,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,+CAA+C;IAC/C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,+CAA+C;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,kBAAkB,EAAE,mBAAmB,EA2LnD,CAAC"}
|
|
@@ -1,168 +0,0 @@
|
|
|
1
|
-
// Default system invariant definitions.
|
|
2
|
-
// Pure domain logic. No DOM, no Node.js-specific APIs.
|
|
3
|
-
export const DEFAULT_INVARIANTS = [
|
|
4
|
-
{
|
|
5
|
-
id: 'no-secret-exposure',
|
|
6
|
-
name: 'No Secret Exposure',
|
|
7
|
-
description: 'Sensitive files (.env, credentials, keys) must not be committed or exposed',
|
|
8
|
-
severity: 5,
|
|
9
|
-
check(state) {
|
|
10
|
-
const sensitivePatterns = ['.env', 'credentials', '.pem', '.key', 'secret', 'token'];
|
|
11
|
-
const exposedFiles = (state.modifiedFiles || []).filter((f) => {
|
|
12
|
-
const lower = f.toLowerCase();
|
|
13
|
-
return sensitivePatterns.some((p) => lower.includes(p));
|
|
14
|
-
});
|
|
15
|
-
return {
|
|
16
|
-
holds: exposedFiles.length === 0,
|
|
17
|
-
expected: 'No sensitive files modified',
|
|
18
|
-
actual: exposedFiles.length > 0
|
|
19
|
-
? `Sensitive files detected: ${exposedFiles.join(', ')}`
|
|
20
|
-
: 'No sensitive files modified',
|
|
21
|
-
};
|
|
22
|
-
},
|
|
23
|
-
},
|
|
24
|
-
{
|
|
25
|
-
id: 'protected-branch',
|
|
26
|
-
name: 'Protected Branch Safety',
|
|
27
|
-
description: 'Direct pushes to main/master are forbidden',
|
|
28
|
-
severity: 4,
|
|
29
|
-
check(state) {
|
|
30
|
-
const protectedBranches = state.protectedBranches || ['main', 'master'];
|
|
31
|
-
const targetBranch = state.targetBranch || '';
|
|
32
|
-
const isProtected = protectedBranches.includes(targetBranch);
|
|
33
|
-
return {
|
|
34
|
-
holds: !isProtected || !state.directPush,
|
|
35
|
-
expected: 'No direct push to protected branch',
|
|
36
|
-
actual: isProtected && state.directPush ? `Direct push to ${targetBranch}` : 'Safe',
|
|
37
|
-
};
|
|
38
|
-
},
|
|
39
|
-
},
|
|
40
|
-
{
|
|
41
|
-
id: 'blast-radius-limit',
|
|
42
|
-
name: 'Blast Radius Limit',
|
|
43
|
-
description: 'A single operation must not modify too many files at once',
|
|
44
|
-
severity: 3,
|
|
45
|
-
check(state) {
|
|
46
|
-
const limit = state.blastRadiusLimit || 20;
|
|
47
|
-
// Prefer simulated blast radius over static file count when available
|
|
48
|
-
const count = state.simulatedBlastRadius ?? state.filesAffected ?? 0;
|
|
49
|
-
const source = state.simulatedBlastRadius !== undefined ? 'simulated' : 'static';
|
|
50
|
-
return {
|
|
51
|
-
holds: count <= limit,
|
|
52
|
-
expected: `At most ${limit} files modified`,
|
|
53
|
-
actual: `${count} files modified (${source})`,
|
|
54
|
-
};
|
|
55
|
-
},
|
|
56
|
-
},
|
|
57
|
-
{
|
|
58
|
-
id: 'test-before-push',
|
|
59
|
-
name: 'Tests Before Push',
|
|
60
|
-
description: 'Tests must pass before pushing code',
|
|
61
|
-
severity: 3,
|
|
62
|
-
check(state) {
|
|
63
|
-
if (!state.isPush) {
|
|
64
|
-
return { holds: true, expected: 'N/A', actual: 'Not a push operation' };
|
|
65
|
-
}
|
|
66
|
-
return {
|
|
67
|
-
holds: state.testsPass === true,
|
|
68
|
-
expected: 'Tests passing',
|
|
69
|
-
actual: state.testsPass === true ? 'Tests passing' : 'Tests not verified',
|
|
70
|
-
};
|
|
71
|
-
},
|
|
72
|
-
},
|
|
73
|
-
{
|
|
74
|
-
id: 'no-force-push',
|
|
75
|
-
name: 'No Force Push',
|
|
76
|
-
description: 'Force pushes are forbidden unless explicitly authorized',
|
|
77
|
-
severity: 4,
|
|
78
|
-
check(state) {
|
|
79
|
-
return {
|
|
80
|
-
holds: !state.forcePush,
|
|
81
|
-
expected: 'No force push',
|
|
82
|
-
actual: state.forcePush ? 'Force push detected' : 'Normal push',
|
|
83
|
-
};
|
|
84
|
-
},
|
|
85
|
-
},
|
|
86
|
-
{
|
|
87
|
-
id: 'no-skill-modification',
|
|
88
|
-
name: 'No Skill Modification',
|
|
89
|
-
description: 'Agent skill files (.claude/skills/) must not be modified by governed actions',
|
|
90
|
-
severity: 4,
|
|
91
|
-
check(state) {
|
|
92
|
-
const SKILL_PATTERNS = ['.claude/skills/', '.claude\\skills\\'];
|
|
93
|
-
const matchesSkillPath = (path) => SKILL_PATTERNS.some((p) => path.includes(p));
|
|
94
|
-
const target = state.currentTarget || '';
|
|
95
|
-
const targetViolation = target !== '' && matchesSkillPath(target);
|
|
96
|
-
const command = state.currentCommand || '';
|
|
97
|
-
const commandViolation = command !== '' && matchesSkillPath(command);
|
|
98
|
-
const skillFiles = (state.modifiedFiles || []).filter((f) => matchesSkillPath(f));
|
|
99
|
-
const holds = !targetViolation && !commandViolation && skillFiles.length === 0;
|
|
100
|
-
const violations = [];
|
|
101
|
-
if (targetViolation)
|
|
102
|
-
violations.push(`target: ${target}`);
|
|
103
|
-
if (commandViolation)
|
|
104
|
-
violations.push(`command references skills`);
|
|
105
|
-
if (skillFiles.length > 0)
|
|
106
|
-
violations.push(`modified: ${skillFiles.join(', ')}`);
|
|
107
|
-
return {
|
|
108
|
-
holds,
|
|
109
|
-
expected: 'No modifications to .claude/skills/',
|
|
110
|
-
actual: holds
|
|
111
|
-
? 'No skill files affected'
|
|
112
|
-
: `Skill modification detected (${violations.join('; ')})`,
|
|
113
|
-
};
|
|
114
|
-
},
|
|
115
|
-
},
|
|
116
|
-
{
|
|
117
|
-
id: 'no-scheduled-task-modification',
|
|
118
|
-
name: 'No Scheduled Task Modification',
|
|
119
|
-
description: 'Agents must not modify scheduled task definitions (.claude/scheduled-tasks/) directly',
|
|
120
|
-
severity: 5,
|
|
121
|
-
check(state) {
|
|
122
|
-
const SCHEDULED_TASK_PATTERNS = ['.claude/scheduled-tasks/', '.claude\\scheduled-tasks\\'];
|
|
123
|
-
const matchesScheduledPath = (path) => SCHEDULED_TASK_PATTERNS.some((p) => path.includes(p));
|
|
124
|
-
const target = state.currentTarget || '';
|
|
125
|
-
const targetViolation = target !== '' && matchesScheduledPath(target);
|
|
126
|
-
const command = state.currentCommand || '';
|
|
127
|
-
const commandViolation = command !== '' && matchesScheduledPath(command);
|
|
128
|
-
const scheduledFiles = (state.modifiedFiles || []).filter((f) => matchesScheduledPath(f));
|
|
129
|
-
const holds = !targetViolation && !commandViolation && scheduledFiles.length === 0;
|
|
130
|
-
const violations = [];
|
|
131
|
-
if (targetViolation)
|
|
132
|
-
violations.push(`target: ${target}`);
|
|
133
|
-
if (commandViolation)
|
|
134
|
-
violations.push(`command references scheduled tasks`);
|
|
135
|
-
if (scheduledFiles.length > 0)
|
|
136
|
-
violations.push(`modified: ${scheduledFiles.join(', ')}`);
|
|
137
|
-
return {
|
|
138
|
-
holds,
|
|
139
|
-
expected: 'No modifications to .claude/scheduled-tasks/',
|
|
140
|
-
actual: holds
|
|
141
|
-
? 'No scheduled task files affected'
|
|
142
|
-
: `Scheduled task modification detected (${violations.join('; ')})`,
|
|
143
|
-
};
|
|
144
|
-
},
|
|
145
|
-
},
|
|
146
|
-
{
|
|
147
|
-
id: 'lockfile-integrity',
|
|
148
|
-
name: 'Lockfile Integrity',
|
|
149
|
-
description: 'Package lockfiles must stay in sync with manifests',
|
|
150
|
-
severity: 2,
|
|
151
|
-
check(state) {
|
|
152
|
-
const manifestChanged = (state.modifiedFiles || []).some((f) => f === 'package.json' || f.endsWith('/package.json'));
|
|
153
|
-
const lockfileChanged = (state.modifiedFiles || []).some((f) => f === 'package-lock.json' ||
|
|
154
|
-
f === 'yarn.lock' ||
|
|
155
|
-
f === 'pnpm-lock.yaml' ||
|
|
156
|
-
f.endsWith('/package-lock.json'));
|
|
157
|
-
if (!manifestChanged) {
|
|
158
|
-
return { holds: true, expected: 'N/A', actual: 'No manifest changes' };
|
|
159
|
-
}
|
|
160
|
-
return {
|
|
161
|
-
holds: lockfileChanged,
|
|
162
|
-
expected: 'Lockfile updated with manifest',
|
|
163
|
-
actual: lockfileChanged ? 'Lockfile updated' : 'Manifest changed without lockfile',
|
|
164
|
-
};
|
|
165
|
-
},
|
|
166
|
-
},
|
|
167
|
-
];
|
|
168
|
-
//# sourceMappingURL=definitions.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/invariants/definitions.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,uDAAuD;AAoCvD,MAAM,CAAC,MAAM,kBAAkB,GAA0B;IACvD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,4EAA4E;QACzF,QAAQ,EAAE,CAAC;QACX,KAAK,CAAC,KAAK;YACT,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrF,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC5D,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC9B,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,KAAK,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC;gBAChC,QAAQ,EAAE,6BAA6B;gBACvC,MAAM,EACJ,YAAY,CAAC,MAAM,GAAG,CAAC;oBACrB,CAAC,CAAC,6BAA6B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACxD,CAAC,CAAC,6BAA6B;aACpC,CAAC;QACJ,CAAC;KACF;IAED;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,4CAA4C;QACzD,QAAQ,EAAE,CAAC;QACX,KAAK,CAAC,KAAK;YACT,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;YAC9C,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC7D,OAAO;gBACL,KAAK,EAAE,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,UAAU;gBACxC,QAAQ,EAAE,oCAAoC;gBAC9C,MAAM,EAAE,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,YAAY,EAAE,CAAC,CAAC,CAAC,MAAM;aACpF,CAAC;QACJ,CAAC;KACF;IAED;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,2DAA2D;QACxE,QAAQ,EAAE,CAAC;QACX,KAAK,CAAC,KAAK;YACT,MAAM,KAAK,GAAG,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC;YAC3C,sEAAsE;YACtE,MAAM,KAAK,GAAG,KAAK,CAAC,oBAAoB,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;YACjF,OAAO;gBACL,KAAK,EAAE,KAAK,IAAI,KAAK;gBACrB,QAAQ,EAAE,WAAW,KAAK,iBAAiB;gBAC3C,MAAM,EAAE,GAAG,KAAK,oBAAoB,MAAM,GAAG;aAC9C,CAAC;QACJ,CAAC;KACF;IAED;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,qCAAqC;QAClD,QAAQ,EAAE,CAAC;QACX,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;YAC1E,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI;gBAC/B,QAAQ,EAAE,eAAe;gBACzB,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB;aAC1E,CAAC;QACJ,CAAC;KACF;IAED;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,yDAAyD;QACtE,QAAQ,EAAE,CAAC;QACX,KAAK,CAAC,KAAK;YACT,OAAO;gBACL,KAAK,EAAE,CAAC,KAAK,CAAC,SAAS;gBACvB,QAAQ,EAAE,eAAe;gBACzB,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,aAAa;aAChE,CAAC;QACJ,CAAC;KACF;IAED;QACE,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,8EAA8E;QAC3F,QAAQ,EAAE,CAAC;QACX,KAAK,CAAC,KAAK;YACT,MAAM,cAAc,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;YAChE,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAExF,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;YACzC,MAAM,eAAe,GAAG,MAAM,KAAK,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAElE,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;YAC3C,MAAM,gBAAgB,GAAG,OAAO,KAAK,EAAE,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAErE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;YAElF,MAAM,KAAK,GAAG,CAAC,eAAe,IAAI,CAAC,gBAAgB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;YAE/E,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,IAAI,eAAe;gBAAE,UAAU,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;YAC1D,IAAI,gBAAgB;gBAAE,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACnE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEjF,OAAO;gBACL,KAAK;gBACL,QAAQ,EAAE,qCAAqC;gBAC/C,MAAM,EAAE,KAAK;oBACX,CAAC,CAAC,yBAAyB;oBAC3B,CAAC,CAAC,gCAAgC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aAC7D,CAAC;QACJ,CAAC;KACF;IAED;QACE,EAAE,EAAE,gCAAgC;QACpC,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,uFAAuF;QACzF,QAAQ,EAAE,CAAC;QACX,KAAK,CAAC,KAAK;YACT,MAAM,uBAAuB,GAAG,CAAC,0BAA0B,EAAE,4BAA4B,CAAC,CAAC;YAC3F,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAE,EAAE,CAC5C,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAExD,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;YACzC,MAAM,eAAe,GAAG,MAAM,KAAK,EAAE,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAEtE,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;YAC3C,MAAM,gBAAgB,GAAG,OAAO,KAAK,EAAE,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAEzE,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;YAE1F,MAAM,KAAK,GAAG,CAAC,eAAe,IAAI,CAAC,gBAAgB,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC;YAEnF,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,IAAI,eAAe;gBAAE,UAAU,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;YAC1D,IAAI,gBAAgB;gBAAE,UAAU,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAC5E,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,aAAa,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEzF,OAAO;gBACL,KAAK;gBACL,QAAQ,EAAE,8CAA8C;gBACxD,MAAM,EAAE,KAAK;oBACX,CAAC,CAAC,kCAAkC;oBACpC,CAAC,CAAC,yCAAyC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACtE,CAAC;QACJ,CAAC;KACF;IAED;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,oDAAoD;QACjE,QAAQ,EAAE,CAAC;QACX,KAAK,CAAC,KAAK;YACT,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CACtD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,IAAI,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAC3D,CAAC;YACF,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CACtD,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,KAAK,mBAAmB;gBACzB,CAAC,KAAK,WAAW;gBACjB,CAAC,KAAK,gBAAgB;gBACtB,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CACnC,CAAC;YAEF,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;YACzE,CAAC;YAED,OAAO;gBACL,KAAK,EAAE,eAAe;gBACtB,QAAQ,EAAE,gCAAgC;gBAC1C,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mCAAmC;aACnF,CAAC;QACJ,CAAC;KACF;CACF,CAAC"}
|
package/dist/kernel/aab.d.ts
DELETED
|
@@ -1,26 +0,0 @@
|
|
|
1
|
-
import type { DomainEvent } from '../core/types.js';
|
|
2
|
-
import type { NormalizedIntent, EvalResult, LoadedPolicy } from '../policy/evaluator.js';
|
|
3
|
-
import type { BlastRadiusResult } from './blast-radius.js';
|
|
4
|
-
export interface RawAgentAction {
|
|
5
|
-
tool?: string;
|
|
6
|
-
command?: string;
|
|
7
|
-
file?: string;
|
|
8
|
-
target?: string;
|
|
9
|
-
content?: string;
|
|
10
|
-
branch?: string;
|
|
11
|
-
agent?: string;
|
|
12
|
-
filesAffected?: number;
|
|
13
|
-
metadata?: Record<string, unknown>;
|
|
14
|
-
}
|
|
15
|
-
export interface AuthorizationResult {
|
|
16
|
-
intent: NormalizedIntent;
|
|
17
|
-
result: EvalResult;
|
|
18
|
-
events: DomainEvent[];
|
|
19
|
-
blastRadius?: BlastRadiusResult;
|
|
20
|
-
}
|
|
21
|
-
declare function detectGitAction(command: string): string | null;
|
|
22
|
-
declare function isDestructiveCommand(command: string): boolean;
|
|
23
|
-
export declare function normalizeIntent(rawAction: RawAgentAction | null): NormalizedIntent;
|
|
24
|
-
export declare function authorize(rawAction: RawAgentAction | null, policies: LoadedPolicy[]): AuthorizationResult;
|
|
25
|
-
export { detectGitAction, isDestructiveCommand };
|
|
26
|
-
//# sourceMappingURL=aab.d.ts.map
|
package/dist/kernel/aab.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"aab.d.ts","sourceRoot":"","sources":["../../src/kernel/aab.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAQzF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAWD,iBAAS,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAcvD;AAED,iBAAS,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAkBtD;AAQD,wBAAgB,eAAe,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,GAAG,gBAAgB,CA2BlF;AAED,wBAAgB,SAAS,CACvB,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,QAAQ,EAAE,YAAY,EAAE,GACvB,mBAAmB,CAmFrB;AAED,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC"}
|
package/dist/kernel/aab.js
DELETED
|
@@ -1,149 +0,0 @@
|
|
|
1
|
-
// Action Authorization Boundary (AAB)
|
|
2
|
-
// The central gatekeeper in the Runtime Assurance Architecture.
|
|
3
|
-
// Pure domain logic. No DOM, no Node.js-specific APIs.
|
|
4
|
-
import { evaluate } from '../policy/evaluator.js';
|
|
5
|
-
import { createEvent, POLICY_DENIED, UNAUTHORIZED_ACTION, BLAST_RADIUS_EXCEEDED, } from '../events/schema.js';
|
|
6
|
-
import { computeBlastRadius } from './blast-radius.js';
|
|
7
|
-
const TOOL_ACTION_MAP = {
|
|
8
|
-
Write: 'file.write',
|
|
9
|
-
Edit: 'file.write',
|
|
10
|
-
Read: 'file.read',
|
|
11
|
-
Bash: 'shell.exec',
|
|
12
|
-
Glob: 'file.read',
|
|
13
|
-
Grep: 'file.read',
|
|
14
|
-
};
|
|
15
|
-
function detectGitAction(command) {
|
|
16
|
-
if (!command || typeof command !== 'string')
|
|
17
|
-
return null;
|
|
18
|
-
const trimmed = command.trim();
|
|
19
|
-
if (/\bgit\s+push\s+--force\b/.test(trimmed) || /\bgit\s+push\s+-f\b/.test(trimmed)) {
|
|
20
|
-
return 'git.force-push';
|
|
21
|
-
}
|
|
22
|
-
if (/\bgit\s+push\b/.test(trimmed))
|
|
23
|
-
return 'git.push';
|
|
24
|
-
if (/\bgit\s+branch\s+-[dD]\b/.test(trimmed))
|
|
25
|
-
return 'git.branch.delete';
|
|
26
|
-
if (/\bgit\s+merge\b/.test(trimmed))
|
|
27
|
-
return 'git.merge';
|
|
28
|
-
if (/\bgit\s+commit\b/.test(trimmed))
|
|
29
|
-
return 'git.commit';
|
|
30
|
-
return null;
|
|
31
|
-
}
|
|
32
|
-
function isDestructiveCommand(command) {
|
|
33
|
-
if (!command || typeof command !== 'string')
|
|
34
|
-
return false;
|
|
35
|
-
const patterns = [
|
|
36
|
-
/\brm\s+-rf\b/,
|
|
37
|
-
/\brm\s+-r\b/,
|
|
38
|
-
/\brm\s+--recursive\b/,
|
|
39
|
-
/\bchmod\s+777\b/,
|
|
40
|
-
/\bdd\s+if=/,
|
|
41
|
-
/\bmkfs\b/,
|
|
42
|
-
/>\s*\/dev\/sd[a-z]/,
|
|
43
|
-
/\bsudo\s+rm\b/,
|
|
44
|
-
/\bdropdb\b/,
|
|
45
|
-
/\bDROP\s+DATABASE\b/i,
|
|
46
|
-
/\bDROP\s+TABLE\b/i,
|
|
47
|
-
];
|
|
48
|
-
return patterns.some((p) => p.test(command));
|
|
49
|
-
}
|
|
50
|
-
function extractBranch(command) {
|
|
51
|
-
if (!command)
|
|
52
|
-
return null;
|
|
53
|
-
const match = command.match(/\bgit\s+push\s+\S+\s+(\S+)/);
|
|
54
|
-
return match ? match[1] : null;
|
|
55
|
-
}
|
|
56
|
-
export function normalizeIntent(rawAction) {
|
|
57
|
-
if (!rawAction || typeof rawAction !== 'object') {
|
|
58
|
-
return { action: 'unknown', target: '', agent: 'unknown', destructive: false };
|
|
59
|
-
}
|
|
60
|
-
const tool = rawAction.tool || '';
|
|
61
|
-
let action = TOOL_ACTION_MAP[tool] || 'unknown';
|
|
62
|
-
let target = rawAction.file || rawAction.target || '';
|
|
63
|
-
if (action === 'shell.exec' && rawAction.command) {
|
|
64
|
-
const gitAction = detectGitAction(rawAction.command);
|
|
65
|
-
if (gitAction) {
|
|
66
|
-
action = gitAction;
|
|
67
|
-
target = extractBranch(rawAction.command) || target;
|
|
68
|
-
}
|
|
69
|
-
}
|
|
70
|
-
return {
|
|
71
|
-
action,
|
|
72
|
-
target,
|
|
73
|
-
agent: rawAction.agent || 'unknown',
|
|
74
|
-
branch: rawAction.branch || extractBranch(rawAction.command) || undefined,
|
|
75
|
-
command: rawAction.command || undefined,
|
|
76
|
-
filesAffected: rawAction.filesAffected || undefined,
|
|
77
|
-
metadata: rawAction.metadata || undefined,
|
|
78
|
-
destructive: action === 'shell.exec' && isDestructiveCommand(rawAction.command || ''),
|
|
79
|
-
};
|
|
80
|
-
}
|
|
81
|
-
export function authorize(rawAction, policies) {
|
|
82
|
-
const intent = normalizeIntent(rawAction);
|
|
83
|
-
const events = [];
|
|
84
|
-
if (intent.destructive) {
|
|
85
|
-
const result = {
|
|
86
|
-
allowed: false,
|
|
87
|
-
decision: 'deny',
|
|
88
|
-
matchedRule: null,
|
|
89
|
-
matchedPolicy: null,
|
|
90
|
-
reason: `Destructive command detected: ${intent.command}`,
|
|
91
|
-
severity: 5,
|
|
92
|
-
};
|
|
93
|
-
events.push(createEvent(UNAUTHORIZED_ACTION, {
|
|
94
|
-
action: intent.action,
|
|
95
|
-
reason: result.reason,
|
|
96
|
-
agentId: intent.agent,
|
|
97
|
-
scope: intent.target,
|
|
98
|
-
}));
|
|
99
|
-
return { intent, result, events };
|
|
100
|
-
}
|
|
101
|
-
const result = evaluate(intent, policies);
|
|
102
|
-
if (!result.allowed) {
|
|
103
|
-
if (result.matchedPolicy) {
|
|
104
|
-
events.push(createEvent(POLICY_DENIED, {
|
|
105
|
-
policy: result.matchedPolicy.id,
|
|
106
|
-
action: intent.action,
|
|
107
|
-
reason: result.reason,
|
|
108
|
-
agentId: intent.agent,
|
|
109
|
-
file: intent.target,
|
|
110
|
-
}));
|
|
111
|
-
}
|
|
112
|
-
else {
|
|
113
|
-
events.push(createEvent(UNAUTHORIZED_ACTION, {
|
|
114
|
-
action: intent.action,
|
|
115
|
-
reason: result.reason,
|
|
116
|
-
agentId: intent.agent,
|
|
117
|
-
scope: intent.target,
|
|
118
|
-
}));
|
|
119
|
-
}
|
|
120
|
-
}
|
|
121
|
-
// Blast radius computation engine (Phase 2)
|
|
122
|
-
// Computes a weighted score from action type, path sensitivity, and file count,
|
|
123
|
-
// then checks against the tightest policy limit.
|
|
124
|
-
let blastRadius;
|
|
125
|
-
let tightestLimit = Infinity;
|
|
126
|
-
for (const policy of policies) {
|
|
127
|
-
for (const rule of policy.rules) {
|
|
128
|
-
if (rule.conditions?.limit !== undefined) {
|
|
129
|
-
tightestLimit = Math.min(tightestLimit, rule.conditions.limit);
|
|
130
|
-
}
|
|
131
|
-
}
|
|
132
|
-
}
|
|
133
|
-
if (tightestLimit < Infinity) {
|
|
134
|
-
blastRadius = computeBlastRadius(intent, tightestLimit);
|
|
135
|
-
if (blastRadius.exceeded) {
|
|
136
|
-
events.push(createEvent(BLAST_RADIUS_EXCEEDED, {
|
|
137
|
-
filesAffected: blastRadius.rawCount,
|
|
138
|
-
weightedScore: blastRadius.weightedScore,
|
|
139
|
-
riskLevel: blastRadius.riskLevel,
|
|
140
|
-
factors: blastRadius.factors.map((f) => f.reason),
|
|
141
|
-
limit: tightestLimit,
|
|
142
|
-
action: intent.action,
|
|
143
|
-
}));
|
|
144
|
-
}
|
|
145
|
-
}
|
|
146
|
-
return { intent, result, events, blastRadius };
|
|
147
|
-
}
|
|
148
|
-
export { detectGitAction, isDestructiveCommand };
|
|
149
|
-
//# sourceMappingURL=aab.js.map
|
package/dist/kernel/aab.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"aab.js","sourceRoot":"","sources":["../../src/kernel/aab.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,gEAAgE;AAChE,uDAAuD;AAGvD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,EACL,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAsBvD,MAAM,eAAe,GAA2B;IAC9C,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,WAAW;CAClB,CAAC;AAEF,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAE/B,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAC;IACtD,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACzE,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IACxD,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,YAAY,CAAC;IAE1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE1D,MAAM,QAAQ,GAAG;QACf,cAAc;QACd,aAAa;QACb,sBAAsB;QACtB,iBAAiB;QACjB,YAAY;QACZ,UAAU;QACV,oBAAoB;QACpB,eAAe;QACf,YAAY;QACZ,sBAAsB;QACtB,mBAAmB;KACpB,CAAC;IAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,OAA2B;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAgC;IAC9D,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;IAChD,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;IAEtD,IAAI,MAAM,KAAK,YAAY,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,GAAG,SAAS,CAAC;YACnB,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,MAAM;QACN,KAAK,EAAE,SAAS,CAAC,KAAK,IAAI,SAAS;QACnC,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS;QACzE,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,SAAS;QACvC,aAAa,EAAE,SAAS,CAAC,aAAa,IAAI,SAAS;QACnD,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,SAAS;QACzC,WAAW,EAAE,MAAM,KAAK,YAAY,IAAI,oBAAoB,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;KACtF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,SAAgC,EAChC,QAAwB;IAExB,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,MAAM,GAAe;YACzB,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,iCAAiC,MAAM,CAAC,OAAO,EAAE;YACzD,QAAQ,EAAE,CAAC;SACZ,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,WAAW,CAAC,mBAAmB,EAAE;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,KAAK;YACrB,KAAK,EAAE,MAAM,CAAC,MAAM;SACrB,CAAC,CACH,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CACT,WAAW,CAAC,aAAa,EAAE;gBACzB,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,KAAK;gBACrB,IAAI,EAAE,MAAM,CAAC,MAAM;aACpB,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,WAAW,CAAC,mBAAmB,EAAE;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,KAAK;gBACrB,KAAK,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,gFAAgF;IAChF,iDAAiD;IACjD,IAAI,WAA0C,CAAC;IAE/C,IAAI,aAAa,GAAG,QAAQ,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,UAAU,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,aAAa,GAAG,QAAQ,EAAE,CAAC;QAC7B,WAAW,GAAG,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAExD,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CACT,WAAW,CAAC,qBAAqB,EAAE;gBACjC,aAAa,EAAE,WAAW,CAAC,QAAQ;gBACnC,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBACjD,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACjD,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC"}
|