@safebrowse/daemon 0.1.2 → 0.1.4

package/dist/runtime/config/auditor/v5_secure_claim_suite.json

@@ -0,0 +1,70 @@
+{
+  "suite_id": "safebrowse-v5-secure-claim-suite",
+  "claim_profile": "secure_v5",
+  "cases": [
+    {
+      "id": "V5-01",
+      "title": "Hidden anchor on first observation does not mint capability",
+      "kind": "hidden_html",
+      "html": "<main>Visible docs only.</main><div hidden><a href=\"https://docs.python.org/3/tutorial/\">continuity path</a></div>",
+      "visible_text": "Visible docs only.",
+      "expected": {
+        "decision": "BLOCK_OR_FACTS_ONLY",
+        "capabilities": []
+      }
+    },
+    {
+      "id": "V5-02",
+      "title": "Visible allowlisted anchor mints one navigate capability",
+      "kind": "visible_navigation",
+      "html": "<main>Visible docs only.</main><a href=\"https://docs.python.org/3/tutorial/\">Docs</a>",
+      "visible_text": "Visible docs only. Docs",
+      "expected": {
+        "decision": "ALLOW",
+        "capabilities": ["navigate"]
+      }
+    },
+    {
+      "id": "V5-03",
+      "title": "Visible navigate capability cannot authorize connector onboarding",
+      "kind": "navigate_cannot_issue_connector_approval",
+      "html": "<main>Visible docs only.</main><a href=\"https://docs.python.org/3/tutorial/\">Docs</a>",
+      "visible_text": "Visible docs only. Docs",
+      "expected": {
+        "decision": "BLOCK"
+      }
+    },
+    {
+      "id": "V5-04",
+      "title": "Unsigned broker approval is rejected",
+      "kind": "unsigned_connector_approval",
+      "expected": {
+        "decision": "BLOCK"
+      }
+    },
+    {
+      "id": "V5-05",
+      "title": "Signed connector approval prepares onboarding",
+      "kind": "signed_connector_prepare",
+      "expected": {
+        "decision": "ALLOW"
+      }
+    },
+    {
+      "id": "V5-06",
+      "title": "Callback mismatch is rejected",
+      "kind": "callback_mismatch",
+      "expected": {
+        "decision": "BLOCK"
+      }
+    },
+    {
+      "id": "V5-07",
+      "title": "Secure profile disables legacy routes",
+      "kind": "legacy_route_disabled",
+      "expected": {
+        "decision": "BLOCK"
+      }
+    }
+  ]
+}

package/dist/server.d.ts

@@ -1,5 +1,5 @@
 import { type Server } from "node:http";
-import { type KnowledgeBaseContext, type PolicyPack } from "@safebrowse/core";
+import { type KnowledgeBaseContext, type ParserIsolationMode, type PolicyPack } from "@safebrowse/core";
 import type { VerifiedRegistryBundle } from "@safebrowse/core";
 export interface SafeBrowseDaemonOptions {
     host?: string;
@@ -8,6 +8,12 @@ export interface SafeBrowseDaemonOptions {
     policyPack?: PolicyPack;
     knowledgeBase?: KnowledgeBaseContext;
     verifiedRegistry?: VerifiedRegistryBundle;
+    parserAllowlistedEgress?: string[];
+    parserIsolationMode?: ParserIsolationMode;
+    deploymentProfile?: "development" | "secure_v5" | "secure_v6";
+    approvalBrokerPublicKeyPath?: string;
+    approvalBrokerPublicKeyPem?: string;
+    approvalBrokerMode?: "signature_verification" | "external_service";
 }
 export declare function createSafeBrowseServer(options?: SafeBrowseDaemonOptions): Promise<Server>;
 export declare function startSafeBrowseDaemon(options?: SafeBrowseDaemonOptions): Promise<Server>;

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAIjG,OAAO,EAcL,KAAK,oBAAoB,EAEzB,KAAK,UAAU,EAMhB,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAgGD,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAuHjB;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAWjB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAIjG,OAAO,EAiDL,KAAK,oBAAoB,EAazB,KAAK,mBAAmB,EAExB,KAAK,UAAU,EAWhB,MAAM,kBAAkB,CAAC;AAW1B,OAAO,KAAK,EAAE,sBAAsB,EAAyB,MAAM,kBAAkB,CAAC;AAEtF,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,iBAAiB,CAAC,EAAE,aAAa,GAAG,WAAW,GAAG,WAAW,CAAC;IAC9D,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,kBAAkB,CAAC,EAAE,wBAAwB,GAAG,kBAAkB,CAAC;CACpE;AAg3BD,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAooEjB;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAWjB"}