@shield-agent/kya 0.22.0 → 0.23.0

package/dist/investigate/detectors.js

@@ -0,0 +1,277 @@
+/** deny-spike: more than this many DENY events inside the window. */
+export const DENY_SPIKE_THRESHOLD = 3;
+export const DENY_SPIKE_WINDOW_MS = 10 * 60_000;
+/** approval-loop: consecutive REQUIRE_APPROVE on one session+tool. */
+export const APPROVAL_LOOP_MIN = 3;
+/** slow-calls: p95 above this with at least MIN_SAMPLES per tool. */
+export const SLOW_CALL_P95_MS = 5000;
+export const SLOW_CALL_MIN_SAMPLES = 5;
+/** pii-in-summary: token candidates must clear this Shannon entropy (bits/char). */
+const TOKEN_MIN_ENTROPY = 4.0;
+const TOKEN_MIN_LEN = 32;
+function parseTs(ts) {
+    const t = Date.parse(ts);
+    return Number.isNaN(t) ? undefined : t;
+}
+const EMAIL_RE = /[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}/g;
+const CARD_RE = /(?:\d[ -]?){13,19}(?!\d)/g;
+const TOKEN_RE = /[A-Za-z0-9+/=_-]{32,}/g;
+/** Standard Luhn checksum for card-shaped digit strings. */
+export function luhnValid(digits) {
+    let sum = 0;
+    let double = false;
+    for (let i = digits.length - 1; i >= 0; i--) {
+        let d = digits.charCodeAt(i) - 48;
+        if (d < 0 || d > 9)
+            return false;
+        if (double) {
+            d *= 2;
+            if (d > 9)
+                d -= 9;
+        }
+        sum += d;
+        double = !double;
+    }
+    return digits.length > 0 && sum % 10 === 0;
+}
+function shannonEntropy(s) {
+    const freq = new Map();
+    for (const ch of s)
+        freq.set(ch, (freq.get(ch) ?? 0) + 1);
+    let h = 0;
+    for (const n of freq.values()) {
+        const p = n / s.length;
+        h -= p * Math.log2(p);
+    }
+    return h;
+}
+/** Mask a leaked value for evidence: keep first 4 and last 2 chars. */
+function mask(s) {
+    if (s.length <= 8)
+        return "***";
+    return `${s.slice(0, 4)}***${s.slice(-2)}`;
+}
+function scanPiiField(field, value, hits) {
+    if (!value)
+        return;
+    for (const m of value.matchAll(EMAIL_RE)) {
+        hits.push({ kind: "email", field, sample: mask(m[0]) });
+    }
+    for (const m of value.matchAll(CARD_RE)) {
+        const digits = m[0].replace(/\D/g, "");
+        if (digits.length >= 13 && digits.length <= 19 && luhnValid(digits)) {
+            hits.push({ kind: "credit-card", field, sample: mask(digits) });
+        }
+    }
+    for (const m of value.matchAll(TOKEN_RE)) {
+        const tok = m[0];
+        if (tok.length >= TOKEN_MIN_LEN && shannonEntropy(tok) >= TOKEN_MIN_ENTROPY) {
+            hits.push({ kind: "high-entropy-token", field, sample: mask(tok) });
+        }
+    }
+}
+function isNever(e) {
+    return e.neverEvent === true || e.reasonCode === "NEVER_EVENT";
+}
+function piiInSummary(events) {
+    const findings = [];
+    for (let i = 0; i < events.length; i++) {
+        const e = events[i];
+        const hits = [];
+        scanPiiField("summary", e.summary, hits);
+        scanPiiField("diffPreview", e.diffPreview, hits);
+        scanPiiField("targetPath", e.targetPath, hits);
+        if (hits.length === 0)
+            continue;
+        const kinds = [...new Set(hits.map((h) => h.kind))];
+        const severity = kinds.includes("credit-card") || kinds.includes("email")
+            ? "critical"
+            : "high";
+        findings.push({
+            detectorId: "pii-in-summary",
+            severity,
+            eventIdx: [i],
+            summary: `${kinds.join(", ")} in ${hits[0].field} of ${e.toolId} event slipped past redaction`,
+            evidence: {
+                toolId: e.toolId,
+                sessionId: e.sessionId,
+                ts: e.ts,
+                kinds,
+                fields: [...new Set(hits.map((h) => h.field))],
+                samples: hits.slice(0, 5).map((h) => `${h.kind}:${h.sample}`),
+            },
+        });
+    }
+    return findings;
+}
+function denySpike(events) {
+    const byTool = new Map();
+    for (let i = 0; i < events.length; i++) {
+        const e = events[i];
+        if (e.verdict !== "DENY")
+            continue;
+        const t = parseTs(e.ts);
+        if (t === undefined)
+            continue;
+        const list = byTool.get(e.toolId) ?? [];
+        list.push({ idx: i, t });
+        byTool.set(e.toolId, list);
+    }
+    const findings = [];
+    for (const [toolId, list] of byTool) {
+        list.sort((a, b) => a.t - b.t);
+        let emittedUntil = -1;
+        for (let i = 0; i < list.length; i++) {
+            const window = list.filter((x) => x.t >= list[i].t && x.t - list[i].t <= DENY_SPIKE_WINDOW_MS);
+            if (window.length <= DENY_SPIKE_THRESHOLD || list[i].t <= emittedUntil)
+                continue;
+            emittedUntil = list[i].t + DENY_SPIKE_WINDOW_MS;
+            findings.push({
+                detectorId: "deny-spike",
+                severity: "medium",
+                eventIdx: window.map((x) => x.idx),
+                summary: `${window.length} DENY events for ${toolId} within 10 minutes`,
+                evidence: {
+                    toolId,
+                    count: window.length,
+                    windowStart: new Date(list[i].t).toISOString(),
+                    windowEnd: new Date(list[i].t + DENY_SPIKE_WINDOW_MS).toISOString(),
+                },
+            });
+        }
+    }
+    return findings;
+}
+function approvalLoop(events) {
+    const byKey = new Map();
+    for (let i = 0; i < events.length; i++) {
+        const e = events[i];
+        const key = `${e.sessionId}${e.toolId}`;
+        const list = byKey.get(key) ?? [];
+        list.push({ idx: i, t: parseTs(e.ts) ?? 0, e });
+        byKey.set(key, list);
+    }
+    const findings = [];
+    for (const list of byKey.values()) {
+        list.sort((a, b) => a.t - b.t || a.idx - b.idx);
+        let run = [];
+        const flush = () => {
+            if (run.length >= APPROVAL_LOOP_MIN) {
+                const first = run[0].e;
+                findings.push({
+                    detectorId: "approval-loop",
+                    severity: "medium",
+                    eventIdx: run.map((x) => x.idx),
+                    summary: `session ${first.sessionId} hit ${run.length} consecutive REQUIRE_APPROVE on ${first.toolId}`,
+                    evidence: {
+                        toolId: first.toolId,
+                        sessionId: first.sessionId,
+                        count: run.length,
+                    },
+                });
+            }
+            run = [];
+        };
+        for (const item of list) {
+            if (item.e.verdict === "REQUIRE_APPROVE")
+                run.push(item);
+            else
+                flush();
+        }
+        flush();
+    }
+    return findings;
+}
+function neverRepeat(events) {
+    const byTool = new Map();
+    for (let i = 0; i < events.length; i++) {
+        const e = events[i];
+        if (!isNever(e))
+            continue;
+        const list = byTool.get(e.toolId) ?? [];
+        list.push(i);
+        byTool.set(e.toolId, list);
+    }
+    const findings = [];
+    for (const [toolId, idxs] of byTool) {
+        if (idxs.length <= 1)
+            continue;
+        findings.push({
+            detectorId: "never-repeat",
+            severity: "high",
+            eventIdx: idxs,
+            summary: `never-list tool ${toolId} attempted ${idxs.length} times`,
+            evidence: { toolId, count: idxs.length },
+        });
+    }
+    return findings;
+}
+function unknownToolHold(events) {
+    const byTool = new Map();
+    for (let i = 0; i < events.length; i++) {
+        const e = events[i];
+        if (e.reasonCode !== "UNKNOWN_TOOL" || e.mode !== "hold")
+            continue;
+        const list = byTool.get(e.toolId) ?? [];
+        list.push(i);
+        byTool.set(e.toolId, list);
+    }
+    const findings = [];
+    for (const [toolId, idxs] of byTool) {
+        findings.push({
+            detectorId: "unknown-tool-hold",
+            severity: "low",
+            eventIdx: idxs,
+            summary: `${toolId} evaluated as UNKNOWN_TOOL in hold mode (${idxs.length}x); enforce mode would block it`,
+            evidence: { toolId, count: idxs.length },
+        });
+    }
+    return findings;
+}
+function slowCalls(events) {
+    const byTool = new Map();
+    for (let i = 0; i < events.length; i++) {
+        const e = events[i];
+        if (typeof e.latencyMs !== "number")
+            continue;
+        const list = byTool.get(e.toolId) ?? [];
+        list.push({ idx: i, ms: e.latencyMs });
+        byTool.set(e.toolId, list);
+    }
+    const findings = [];
+    for (const [toolId, list] of byTool) {
+        if (list.length < SLOW_CALL_MIN_SAMPLES)
+            continue;
+        const sorted = list.map((x) => x.ms).sort((a, b) => a - b);
+        const p95 = sorted[Math.ceil(0.95 * sorted.length) - 1];
+        if (p95 <= SLOW_CALL_P95_MS)
+            continue;
+        const slowIdx = list.filter((x) => x.ms >= p95).map((x) => x.idx);
+        findings.push({
+            detectorId: "slow-calls",
+            severity: "low",
+            eventIdx: slowIdx,
+            summary: `${toolId} p95 latency ${Math.round(p95)}ms across ${list.length} calls (limit ${SLOW_CALL_P95_MS}ms)`,
+            evidence: {
+                toolId,
+                samples: list.length,
+                p95Ms: Math.round(p95),
+                thresholdMs: SLOW_CALL_P95_MS,
+            },
+        });
+    }
+    return findings;
+}
+export const DETECTORS = [
+    { id: "pii-in-summary", run: piiInSummary },
+    { id: "deny-spike", run: denySpike },
+    { id: "approval-loop", run: approvalLoop },
+    { id: "never-repeat", run: neverRepeat },
+    { id: "unknown-tool-hold", run: unknownToolHold },
+    { id: "slow-calls", run: slowCalls },
+];
+/** Run every detector over the same events array; findings keep input indices. */
+export function runDetectors(events) {
+    return DETECTORS.flatMap((d) => d.run(events));
+}
+//# sourceMappingURL=detectors.js.map

package/dist/investigate/detectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectors.js","sourceRoot":"","sources":["../../src/investigate/detectors.ts"],"names":[],"mappings":"AAgCA,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,MAAM,CAAC;AAChD,sEAAsE;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AACvC,oFAAoF;AACpF,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,SAAS,OAAO,CAAC,EAAU;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,QAAQ,GAAG,oEAAoE,CAAC;AACtF,MAAM,OAAO,GAAG,2BAA2B,CAAC;AAC5C,MAAM,QAAQ,GAAG,wBAAwB,CAAC;AAE1C,4DAA4D;AAC5D,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,MAAM,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACvB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uEAAuE;AACvE,SAAS,IAAI,CAAC,CAAS;IACrB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAQD,SAAS,YAAY,CACnB,KAAsB,EACtB,KAAyB,EACzB,IAAc;IAEd,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,GAAG,CAAC,MAAM,IAAI,aAAa,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,CAAa;IAC5B,OAAO,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,KAAK,aAAa,CAAC;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,MAA6B;IACjD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzC,YAAY,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACjD,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAa,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YACjF,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,MAAM,CAAC;QACX,QAAQ,CAAC,IAAI,CAAC;YACZ,UAAU,EAAE,gBAAgB;YAC5B,QAAQ;YACR,QAAQ,EAAE,CAAC,CAAC,CAAC;YACb,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,MAAM,+BAA+B;YAC9F,QAAQ,EAAE;gBACR,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK;gBACL,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9C,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9D;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,MAA6B;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwC,CAAC;IAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,SAAS;QACnC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CACxB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,oBAAoB,CACnE,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,IAAI,oBAAoB,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY;gBAAE,SAAS;YACjF,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE,YAAY;gBACxB,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBAClC,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,oBAAoB,MAAM,oBAAoB;gBACvE,QAAQ,EAAE;oBACR,MAAM;oBACN,KAAK,EAAE,MAAM,CAAC,MAAM;oBACpB,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;oBAC9C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,CAAC,WAAW,EAAE;iBACpE;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,MAA6B;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuD,CAAC;IAC7E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,GAAG,GAAqC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,IAAI,GAAG,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACpC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,UAAU,EAAE,eAAe;oBAC3B,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;oBAC/B,OAAO,EAAE,WAAW,KAAK,CAAC,SAAS,QAAQ,GAAG,CAAC,MAAM,mCAAmC,KAAK,CAAC,MAAM,EAAE;oBACtG,QAAQ,EAAE;wBACR,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,KAAK,EAAE,GAAG,CAAC,MAAM;qBAClB;iBACF,CAAC,CAAC;YACL,CAAC;YACD,GAAG,GAAG,EAAE,CAAC;QACX,CAAC,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,iBAAiB;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;gBACpD,KAAK,EAAE,CAAC;QACf,CAAC;QACD,KAAK,EAAE,CAAC;IACV,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,MAA6B;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAAE,SAAS;QAC/B,QAAQ,CAAC,IAAI,CAAC;YACZ,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,mBAAmB,MAAM,cAAc,IAAI,CAAC,MAAM,QAAQ;YACnE,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,MAA6B;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC,UAAU,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACnE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC;YACZ,UAAU,EAAE,mBAAmB;YAC/B,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,GAAG,MAAM,4CAA4C,IAAI,CAAC,MAAM,iCAAiC;YAC1G,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,MAA6B;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyC,CAAC;IAChE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB;YAAE,SAAS;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,GAAG,IAAI,gBAAgB;YAAE,SAAS;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,MAAM,gBAAgB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,iBAAiB,gBAAgB,KAAK;YAC/G,QAAQ,EAAE;gBACR,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,MAAM;gBACpB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBACtB,WAAW,EAAE,gBAAgB;aAC9B;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAwB;IAC5C,EAAE,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,YAAY,EAAE;IAC3C,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE;IACpC,EAAE,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE;IAC1C,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,EAAE;IACxC,EAAE,EAAE,EAAE,mBAAmB,EAAE,GAAG,EAAE,eAAe,EAAE;IACjD,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE;CACrC,CAAC;AAEF,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,MAA6B;IACxD,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/investigate/fix-brief.d.ts

@@ -0,0 +1,3 @@
+import type { Incident } from "./incidents.js";
+export declare function renderFixBrief(incident: Incident): string;
+//# sourceMappingURL=fix-brief.d.ts.map

package/dist/investigate/fix-brief.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-brief.d.ts","sourceRoot":"","sources":["../../src/investigate/fix-brief.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAsE/C,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CA4BzD"}

package/dist/investigate/fix-brief.js

@@ -0,0 +1,88 @@
+const WHY = {
+    "pii-in-summary": "Trail fields are supposed to be redacted; a real email, card number, or token in the local trail means redaction has a hole and the value may also have reached the agent's context or upstream logs.",
+    "deny-spike": "Repeated DENY verdicts on one tool mean the agent keeps hitting a policy wall, burning tokens and time instead of changing approach.",
+    "approval-loop": "An agent retrying a held action stalls the session and can bury a human reviewer in duplicate approval prompts.",
+    "never-repeat": "A never-list rule exists because the action is unacceptable; repeated attempts suggest the agent is routing around an explicit boundary.",
+    "unknown-tool-hold": "In hold mode an unknown tool is only recorded; in enforce mode the same call would be blocked, so this is a latent breakage once the gate tightens.",
+    "slow-calls": "Gate evaluation latency is on the critical path of every tool call; a high p95 slows the whole agent loop even though latency never changes verdicts.",
+};
+const SUGGESTED_CHANGE = {
+    "pii-in-summary": [
+        "1. Rotate the leaked value immediately (password, token, or card) and treat it as compromised.",
+        "2. Tighten the redaction step that produces `summary` / `diffPreview` / `targetPath` so the leaked pattern is masked before it reaches the trail.",
+        "3. Add a regression fixture with the masked shape so the pattern cannot come back.",
+    ].join("\n"),
+    "deny-spike": [
+        "1. If the tool should never run, add it to the never-list so attempts fail fast instead of spiking DENYs.",
+        "2. If the tool is legitimate, narrow its args in the gate policy so the intended calls pass and the rest still deny.",
+        "3. Re-check the live verdict for one call with `kya eval-tool`.",
+    ].join("\n"),
+    "approval-loop": [
+        "1. Resolve the pending decision once with `kya approve` or `kya reject` instead of letting the agent retry.",
+        "2. If the action is routine, add a scoped allow rule so it stops prompting; if it is unwanted, deny it permanently.",
+        "3. Tell the agent not to retry a held call unchanged; it should wait or change approach.",
+    ].join("\n"),
+    "never-repeat": [
+        "1. Keep the never rule; it held. Remove the tool from the agent's available toolset or prompt so it stops being proposed.",
+        "2. If a variant of the action is legitimately needed, define a narrower tool and allow that instead of loosening the never rule.",
+    ].join("\n"),
+    "unknown-tool-hold": [
+        "1. Register the tool in the gate policy or tool pack so it gets a real verdict instead of UNKNOWN_TOOL.",
+        "2. If the tool should not exist, remove it from the agent's toolset before the gate moves to enforce mode.",
+        "3. Confirm the resolved verdict with `kya eval-tool`.",
+    ].join("\n"),
+    "slow-calls": [
+        "1. Profile the evaluate path for the slow tool (local model load, network, or oversized args).",
+        "2. Cache stable verdicts or trim args sent to the evaluator; latency is observe-only but it taxes every call.",
+        "3. Re-measure after the change and confirm p95 drops below 5000ms.",
+    ].join("\n"),
+};
+const VERIFY_COMMANDS = {
+    "pii-in-summary": ["kya receipt --open", "kya certify"],
+    "deny-spike": ["kya eval-tool", "kya certify"],
+    "approval-loop": ["kya approvals", "kya receipt --open"],
+    "never-repeat": ["kya receipt --open", "kya certify"],
+    "unknown-tool-hold": ["kya eval-tool", "kya receipt --open"],
+    "slow-calls": ["kya dash", "kya receipt --open"],
+};
+function evidenceLines(incident) {
+    const lines = [];
+    for (const f of incident.findings) {
+        lines.push(`- [${f.severity}] ${f.summary}`);
+        const samples = f.evidence.samples;
+        if (Array.isArray(samples) && samples.length > 0) {
+            lines.push(`  - masked samples: ${samples.map(String).join(", ")}`);
+        }
+    }
+    return lines;
+}
+export function renderFixBrief(incident) {
+    const detectorId = incident.findings[0]?.detectorId;
+    if (!detectorId)
+        return `# ${incident.title}\n`;
+    const window = incident.firstTs && incident.lastTs
+        ? `${incident.firstTs} to ${incident.lastTs}`
+        : "time unknown";
+    return [
+        `# Fix brief: ${incident.title}`,
+        "",
+        `- Incident id: ${incident.id}`,
+        `- Severity: ${incident.severity}`,
+        `- Findings: ${incident.findingCount}`,
+        `- Window: ${window}`,
+        "",
+        "## What happened",
+        ...evidenceLines(incident),
+        "",
+        "## Why it matters",
+        WHY[detectorId],
+        "",
+        "## Suggested change",
+        SUGGESTED_CHANGE[detectorId],
+        "",
+        "## Verify",
+        ...VERIFY_COMMANDS[detectorId].map((c) => `- \`${c}\``),
+        "",
+    ].join("\n");
+}
+//# sourceMappingURL=fix-brief.js.map

package/dist/investigate/fix-brief.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-brief.js","sourceRoot":"","sources":["../../src/investigate/fix-brief.ts"],"names":[],"mappings":"AAUA,MAAM,GAAG,GAA+B;IACtC,gBAAgB,EACd,uMAAuM;IACzM,YAAY,EACV,sIAAsI;IACxI,eAAe,EACb,iHAAiH;IACnH,cAAc,EACZ,0IAA0I;IAC5I,mBAAmB,EACjB,qJAAqJ;IACvJ,YAAY,EACV,uJAAuJ;CAC1J,CAAC;AAEF,MAAM,gBAAgB,GAA+B;IACnD,gBAAgB,EAAE;QAChB,gGAAgG;QAChG,mJAAmJ;QACnJ,oFAAoF;KACrF,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,YAAY,EAAE;QACZ,2GAA2G;QAC3G,sHAAsH;QACtH,iEAAiE;KAClE,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,eAAe,EAAE;QACf,6GAA6G;QAC7G,qHAAqH;QACrH,0FAA0F;KAC3F,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,cAAc,EAAE;QACd,2HAA2H;QAC3H,kIAAkI;KACnI,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,mBAAmB,EAAE;QACnB,yGAAyG;QACzG,4GAA4G;QAC5G,uDAAuD;KACxD,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,YAAY,EAAE;QACZ,gGAAgG;QAChG,+GAA+G;QAC/G,oEAAoE;KACrE,CAAC,IAAI,CAAC,IAAI,CAAC;CACb,CAAC;AAEF,MAAM,eAAe,GAA0C;IAC7D,gBAAgB,EAAE,CAAC,oBAAoB,EAAE,aAAa,CAAC;IACvD,YAAY,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC;IAC9C,eAAe,EAAE,CAAC,eAAe,EAAE,oBAAoB,CAAC;IACxD,cAAc,EAAE,CAAC,oBAAoB,EAAE,aAAa,CAAC;IACrD,mBAAmB,EAAE,CAAC,eAAe,EAAE,oBAAoB,CAAC;IAC5D,YAAY,EAAE,CAAC,UAAU,EAAE,oBAAoB,CAAC;CACjD,CAAC;AAEF,SAAS,aAAa,CAAC,QAAkB;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QACnC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;IACpD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,QAAQ,CAAC,KAAK,IAAI,CAAC;IAChD,MAAM,MAAM,GACV,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM;QACjC,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,OAAO,QAAQ,CAAC,MAAM,EAAE;QAC7C,CAAC,CAAC,cAAc,CAAC;IACrB,OAAO;QACL,gBAAgB,QAAQ,CAAC,KAAK,EAAE;QAChC,EAAE;QACF,kBAAkB,QAAQ,CAAC,EAAE,EAAE;QAC/B,eAAe,QAAQ,CAAC,QAAQ,EAAE;QAClC,eAAe,QAAQ,CAAC,YAAY,EAAE;QACtC,aAAa,MAAM,EAAE;QACrB,EAAE;QACF,kBAAkB;QAClB,GAAG,aAAa,CAAC,QAAQ,CAAC;QAC1B,EAAE;QACF,mBAAmB;QACnB,GAAG,CAAC,UAAU,CAAC;QACf,EAAE;QACF,qBAAqB;QACrB,gBAAgB,CAAC,UAAU,CAAC;QAC5B,EAAE;QACF,WAAW;QACX,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACvD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/investigate/incidents.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Group findings into incidents by (detectorId, toolId-or-session key),
+ * sorted by severity rank (critical first) then recency (newest lastTs first).
+ */
+import type { TrailEvent } from "../trail.js";
+import type { Finding, Severity } from "./detectors.js";
+export interface Incident {
+    readonly id: string;
+    readonly title: string;
+    readonly severity: Severity;
+    readonly findingCount: number;
+    /** Earliest event ts (ISO) across grouped findings; "" when unparseable. */
+    readonly firstTs: string;
+    /** Latest event ts (ISO) across grouped findings. */
+    readonly lastTs: string;
+    readonly findings: readonly Finding[];
+}
+export declare function groupIncidents(findings: readonly Finding[], events: readonly TrailEvent[]): Incident[];
+//# sourceMappingURL=incidents.d.ts.map

package/dist/investigate/incidents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"incidents.d.ts","sourceRoot":"","sources":["../../src/investigate/incidents.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAc,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEpE,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;CACvC;AA2CD,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,MAAM,EAAE,SAAS,UAAU,EAAE,GAC5B,QAAQ,EAAE,CAqCZ"}

package/dist/investigate/incidents.js

@@ -0,0 +1,84 @@
+const SEVERITY_RANK = {
+    low: 0,
+    medium: 1,
+    high: 2,
+    critical: 3,
+};
+const TITLES = {
+    "pii-in-summary": "PII or secret slipped past redaction",
+    "deny-spike": "DENY spike on a gated tool",
+    "approval-loop": "Agent stuck in an approval loop",
+    "never-repeat": "Never-list tool attempted repeatedly",
+    "unknown-tool-hold": "Unknown tool evaluated in hold mode",
+    "slow-calls": "Slow gate evaluations",
+};
+function findingKey(f) {
+    const toolId = f.evidence.toolId;
+    if (typeof toolId === "string" && toolId)
+        return `tool:${toolId}`;
+    const sessionId = f.evidence.sessionId;
+    if (typeof sessionId === "string" && sessionId)
+        return `session:${sessionId}`;
+    return "global";
+}
+function slug(s) {
+    const out = s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+    return out.length > 48 ? out.slice(0, 48) : out;
+}
+function tsRange(finding, events) {
+    let min = Number.POSITIVE_INFINITY;
+    let max = Number.NEGATIVE_INFINITY;
+    for (const idx of finding.eventIdx) {
+        const t = Date.parse(events[idx]?.ts ?? "");
+        if (Number.isNaN(t))
+            continue;
+        if (t < min)
+            min = t;
+        if (t > max)
+            max = t;
+    }
+    return { min, max };
+}
+export function groupIncidents(findings, events) {
+    const groups = new Map();
+    for (const f of findings) {
+        const key = `${f.detectorId}:${findingKey(f)}`;
+        const list = groups.get(key) ?? [];
+        list.push(f);
+        groups.set(key, list);
+    }
+    const incidents = [];
+    for (const list of groups.values()) {
+        let severity = "low";
+        let min = Number.POSITIVE_INFINITY;
+        let max = Number.NEGATIVE_INFINITY;
+        for (const f of list) {
+            if (SEVERITY_RANK[f.severity] > SEVERITY_RANK[severity])
+                severity = f.severity;
+            const r = tsRange(f, events);
+            if (r.min < min)
+                min = r.min;
+            if (r.max > max)
+                max = r.max;
+        }
+        const detectorId = list[0].detectorId;
+        const groupKey = findingKey(list[0]);
+        incidents.push({
+            id: slug(`${detectorId}-${groupKey}`),
+            title: `${TITLES[detectorId]} (${groupKey.replace(/^(tool|session):/, "")})`,
+            severity,
+            findingCount: list.length,
+            firstTs: Number.isFinite(min) ? new Date(min).toISOString() : "",
+            lastTs: Number.isFinite(max) ? new Date(max).toISOString() : "",
+            findings: list,
+        });
+    }
+    incidents.sort((a, b) => {
+        const rankDiff = SEVERITY_RANK[b.severity] - SEVERITY_RANK[a.severity];
+        if (rankDiff !== 0)
+            return rankDiff;
+        return Date.parse(b.lastTs) - Date.parse(a.lastTs);
+    });
+    return incidents;
+}
+//# sourceMappingURL=incidents.js.map

package/dist/investigate/incidents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incidents.js","sourceRoot":"","sources":["../../src/investigate/incidents.ts"],"names":[],"mappings":"AAmBA,MAAM,aAAa,GAA6B;IAC9C,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,GAA+B;IACzC,gBAAgB,EAAE,sCAAsC;IACxD,YAAY,EAAE,4BAA4B;IAC1C,eAAe,EAAE,iCAAiC;IAClD,cAAc,EAAE,sCAAsC;IACtD,mBAAmB,EAAE,qCAAqC;IAC1D,YAAY,EAAE,uBAAuB;CACtC,CAAC;AAEF,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM;QAAE,OAAO,QAAQ,MAAM,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;IACvC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS;QAAE,OAAO,WAAW,SAAS,EAAE,CAAC;IAC9E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAChF,OAAO,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAClD,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB,EAAE,MAA6B;IAC9D,IAAI,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACnC,IAAI,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,GAAG,GAAG;YAAE,GAAG,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG;YAAE,GAAG,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,MAA6B;IAE7B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,IAAI,QAAQ,GAAa,KAAK,CAAC;QAC/B,IAAI,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACnC,IAAI,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC;gBAAE,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC/E,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,CAAC,GAAG,GAAG,GAAG;gBAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;YAC7B,IAAI,CAAC,CAAC,GAAG,GAAG,GAAG;gBAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;QAC/B,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC;YACb,EAAE,EAAE,IAAI,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;YACrC,KAAK,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,GAAG;YAC5E,QAAQ;YACR,YAAY,EAAE,IAAI,CAAC,MAAM;YACzB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;YAChE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;YAC/D,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,QAAQ,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/investigate/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `kya investigate` core: deterministic detectors + incident grouping +
+ * fix briefs over the local trail. Pure analysis, no LLM calls, no IO;
+ * the CLI wires readTrail() output into investigateTrail().
+ */
+import type { TrailEvent } from "../trail.js";
+import { type Finding } from "./detectors.js";
+import { type Incident } from "./incidents.js";
+export type { DetectorId, Finding, Severity } from "./detectors.js";
+export type { Incident } from "./incidents.js";
+export { renderFixBrief } from "./fix-brief.js";
+export interface InvestigateOptions {
+    /** Cap the number of incidents listed in the plain-text report. */
+    readonly topIncidents?: number;
+}
+export interface InvestigateResult {
+    readonly findings: readonly Finding[];
+    readonly incidents: readonly Incident[];
+    /** incidentId -> markdown fix brief. */
+    readonly briefs: ReadonlyMap<string, string>;
+}
+export declare function investigateTrail(events: readonly TrailEvent[], _opts?: InvestigateOptions): InvestigateResult;
+/** Plain-text summary for the CLI: counts by severity, then top incidents. */
+export declare function renderInvestigateReport(result: InvestigateResult, opts?: InvestigateOptions): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/investigate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/investigate/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAgB,KAAK,OAAO,EAAiB,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG/D,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACpE,YAAY,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,kBAAkB;IACjC,mEAAmE;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9C;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,KAAK,GAAE,kBAAuB,GAC7B,iBAAiB,CAQnB;AAID,8EAA8E;AAC9E,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,iBAAiB,EACzB,IAAI,GAAE,kBAAuB,GAC5B,MAAM,CAiCR"}

package/dist/investigate/index.js

@@ -0,0 +1,46 @@
+import { runDetectors } from "./detectors.js";
+import { groupIncidents } from "./incidents.js";
+import { renderFixBrief } from "./fix-brief.js";
+export { renderFixBrief } from "./fix-brief.js";
+export function investigateTrail(events, _opts = {}) {
+    const findings = runDetectors(events);
+    const incidents = groupIncidents(findings, events);
+    const briefs = new Map();
+    for (const incident of incidents) {
+        briefs.set(incident.id, renderFixBrief(incident));
+    }
+    return { findings, incidents, briefs };
+}
+const SEVERITY_ORDER = ["critical", "high", "medium", "low"];
+/** Plain-text summary for the CLI: counts by severity, then top incidents. */
+export function renderInvestigateReport(result, opts = {}) {
+    const top = opts.topIncidents ?? 10;
+    const lines = [];
+    lines.push("kya investigate - local trail analysis");
+    lines.push("");
+    if (result.findings.length === 0) {
+        lines.push("No findings. The trail looks clean for all detectors.");
+        return lines.join("\n");
+    }
+    const bySeverity = new Map();
+    for (const f of result.findings) {
+        bySeverity.set(f.severity, (bySeverity.get(f.severity) ?? 0) + 1);
+    }
+    lines.push(`Findings: ${result.findings.length} (${SEVERITY_ORDER
+        .filter((s) => bySeverity.has(s))
+        .map((s) => `${s}: ${bySeverity.get(s)}`)
+        .join(", ")})`);
+    lines.push(`Incidents: ${result.incidents.length}`);
+    lines.push("");
+    lines.push("Top incidents:");
+    for (const incident of result.incidents.slice(0, top)) {
+        lines.push(`- [${incident.severity}] ${incident.title} ` +
+            `(${incident.findingCount} finding${incident.findingCount === 1 ? "" : "s"}, ` +
+            `last ${incident.lastTs || "unknown"}, id ${incident.id})`);
+    }
+    if (result.incidents.length > top) {
+        lines.push(`- ... and ${result.incidents.length - top} more`);
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=index.js.map

package/dist/investigate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/investigate/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAA+B,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAiB,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAIhD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAchD,MAAM,UAAU,gBAAgB,CAC9B,MAA6B,EAC7B,QAA4B,EAAE;IAE9B,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,cAAc,GAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AAElF,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CACrC,MAAyB,EACzB,OAA2B,EAAE;IAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACpE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,CAAC,IAAI,CACR,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,cAAc;SACnD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjB,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CACR,MAAM,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,KAAK,GAAG;YAC3C,IAAI,QAAQ,CAAC,YAAY,WAAW,QAAQ,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI;YAC9E,QAAQ,QAAQ,CAAC,MAAM,IAAI,SAAS,QAAQ,QAAQ,CAAC,EAAE,GAAG,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/mcp/protocol.d.ts

@@ -1,5 +1,5 @@
 /**
- * MCP tool surface for local gate — proxies to Shield KYA (sole PEP).
+ * MCP tool surface for local gate - proxies to Shield KYA (sole PEP).
  * Does not execute irreversible side effects; only evaluate / ingest / request approval.
  * Host-agnostic: stdio or HTTP transport.
  */
@@ -29,7 +29,7 @@ export interface McpHandlerContext {
     readonly client: KyaHttpClient;
     readonly host: Host;
     readonly agentId?: string;
-    /** Offline sample evaluate (KYA_OFFLINE=1) — no HTTP, never fails on a dead plane. */
+    /** Offline sample evaluate (KYA_OFFLINE=1) - no HTTP, never fails on a dead plane. */
     readonly offline?: boolean;
     /** Trail recording target; absent in contexts that must not record. */
     readonly trail?: McpTrailContext;

package/dist/mcp/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/mcp/protocol.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,aAAa,EAA0B,MAAM,cAAc,CAAC;AAC1E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAUzC,eAAO,MAAM,eAAe;;;;;CAMlB,CAAC;AAEX,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/C;AAED,eAAO,MAAM,SAAS,EAAE,SAAS,UAAU,EAsEjC,CAAC;AAEX,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAoCD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,aAAa,CAAC,CAgBxB;AAiMD,0CAA0C;AAC1C,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAE/C,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3D;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CA0EjC"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/mcp/protocol.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,aAAa,EAA0B,MAAM,cAAc,CAAC;AAC1E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAczC,eAAO,MAAM,eAAe;;;;;CAMlB,CAAC;AAEX,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/C;AAED,eAAO,MAAM,SAAS,EAAE,SAAS,UAAU,EAsEjC,CAAC;AAEX,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAwDD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,aAAa,CAAC,CAgBxB;AA8MD,0CAA0C;AAC1C,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAE/C,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3D;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CA0EjC"}