@superblocksteam/vite-plugin-file-sync 2.0.149 → 2.0.150-next.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (161) hide show
  1. package/dist/ai-service/agent/prompts/api-prompts.js +1 -1
  2. package/dist/ai-service/agent/prompts/build-base-system-prompt.d.ts.map +1 -1
  3. package/dist/ai-service/agent/prompts/build-base-system-prompt.js +38 -10
  4. package/dist/ai-service/agent/prompts/build-base-system-prompt.js.map +1 -1
  5. package/dist/ai-service/agent/prompts/build-security-scan-prompt.d.ts.map +1 -1
  6. package/dist/ai-service/agent/prompts/build-security-scan-prompt.js +20 -4
  7. package/dist/ai-service/agent/prompts/build-security-scan-prompt.js.map +1 -1
  8. package/dist/ai-service/agent/subagents/testing/prompt-builder.js +1 -1
  9. package/dist/ai-service/agent/tools/apis/analysis.d.ts +6 -0
  10. package/dist/ai-service/agent/tools/apis/analysis.d.ts.map +1 -1
  11. package/dist/ai-service/agent/tools/apis/analysis.js +130 -26
  12. package/dist/ai-service/agent/tools/apis/analysis.js.map +1 -1
  13. package/dist/ai-service/agent/tools/apis/get-sdk-api-docs.js +2 -2
  14. package/dist/ai-service/agent/tools/apis/get-sdk-api-docs.js.map +1 -1
  15. package/dist/ai-service/agent/tools/apis/test-api.d.ts.map +1 -1
  16. package/dist/ai-service/agent/tools/apis/test-api.js +131 -31
  17. package/dist/ai-service/agent/tools/apis/test-api.js.map +1 -1
  18. package/dist/ai-service/agent/tools/build-delete-file.d.ts +2 -2
  19. package/dist/ai-service/agent/tools/build-delete-file.js +3 -3
  20. package/dist/ai-service/agent/tools/build-delete-file.js.map +1 -1
  21. package/dist/ai-service/agent/tools/build-install-packages.d.ts +41 -21
  22. package/dist/ai-service/agent/tools/build-install-packages.d.ts.map +1 -1
  23. package/dist/ai-service/agent/tools/build-install-packages.js +299 -20
  24. package/dist/ai-service/agent/tools/build-install-packages.js.map +1 -1
  25. package/dist/ai-service/agent/tools/build-manage-checklist.d.ts.map +1 -1
  26. package/dist/ai-service/agent/tools/build-manage-checklist.js +2 -1
  27. package/dist/ai-service/agent/tools/build-manage-checklist.js.map +1 -1
  28. package/dist/ai-service/agent/tools/databases/dev-database-tasks.d.ts +161 -24
  29. package/dist/ai-service/agent/tools/databases/dev-database-tasks.d.ts.map +1 -1
  30. package/dist/ai-service/agent/tools/databases/dev-database-tasks.js +312 -55
  31. package/dist/ai-service/agent/tools/databases/dev-database-tasks.js.map +1 -1
  32. package/dist/ai-service/agent/tools/get-logs.d.ts +2 -2
  33. package/dist/ai-service/agent/tools/report-security-findings.d.ts +3 -3
  34. package/dist/ai-service/agent/tools.d.ts +10 -11
  35. package/dist/ai-service/agent/tools.d.ts.map +1 -1
  36. package/dist/ai-service/agent/tools.js +38 -19
  37. package/dist/ai-service/agent/tools.js.map +1 -1
  38. package/dist/ai-service/agent/tools2/tools/exit-plan-mode.d.ts.map +1 -1
  39. package/dist/ai-service/agent/tools2/tools/exit-plan-mode.js +9 -8
  40. package/dist/ai-service/agent/tools2/tools/exit-plan-mode.js.map +1 -1
  41. package/dist/ai-service/agent/tools2/tools/grep.js +1 -1
  42. package/dist/ai-service/agent/tools2/tools/index.d.ts.map +1 -1
  43. package/dist/ai-service/agent/tools2/tools/index.js +2 -3
  44. package/dist/ai-service/agent/tools2/tools/index.js.map +1 -1
  45. package/dist/ai-service/app-interface/npm-package-lookup.d.ts +22 -0
  46. package/dist/ai-service/app-interface/npm-package-lookup.d.ts.map +1 -1
  47. package/dist/ai-service/app-interface/npm-package-lookup.js +111 -0
  48. package/dist/ai-service/app-interface/npm-package-lookup.js.map +1 -1
  49. package/dist/ai-service/app-interface/shell.d.ts +71 -3
  50. package/dist/ai-service/app-interface/shell.d.ts.map +1 -1
  51. package/dist/ai-service/app-interface/shell.js +575 -23
  52. package/dist/ai-service/app-interface/shell.js.map +1 -1
  53. package/dist/ai-service/app-interface/vulnerability-gate.d.ts +83 -0
  54. package/dist/ai-service/app-interface/vulnerability-gate.d.ts.map +1 -0
  55. package/dist/ai-service/app-interface/vulnerability-gate.js +543 -0
  56. package/dist/ai-service/app-interface/vulnerability-gate.js.map +1 -0
  57. package/dist/ai-service/dev-database-client.d.ts +14 -4
  58. package/dist/ai-service/dev-database-client.d.ts.map +1 -1
  59. package/dist/ai-service/dev-database-client.js +1 -24
  60. package/dist/ai-service/dev-database-client.js.map +1 -1
  61. package/dist/ai-service/features.d.ts +5 -0
  62. package/dist/ai-service/features.d.ts.map +1 -1
  63. package/dist/ai-service/features.js +5 -0
  64. package/dist/ai-service/features.js.map +1 -1
  65. package/dist/ai-service/index.d.ts +2 -0
  66. package/dist/ai-service/index.d.ts.map +1 -1
  67. package/dist/ai-service/index.js +60 -9
  68. package/dist/ai-service/index.js.map +1 -1
  69. package/dist/ai-service/integrations/store.d.ts +3 -0
  70. package/dist/ai-service/integrations/store.d.ts.map +1 -1
  71. package/dist/ai-service/integrations/store.js +2 -0
  72. package/dist/ai-service/integrations/store.js.map +1 -1
  73. package/dist/ai-service/llm/client.d.ts +2 -9
  74. package/dist/ai-service/llm/client.d.ts.map +1 -1
  75. package/dist/ai-service/llm/client.js +2 -81
  76. package/dist/ai-service/llm/client.js.map +1 -1
  77. package/dist/ai-service/llm/context-v2/compaction/client-side.d.ts.map +1 -1
  78. package/dist/ai-service/llm/context-v2/compaction/client-side.js +15 -4
  79. package/dist/ai-service/llm/context-v2/compaction/client-side.js.map +1 -1
  80. package/dist/ai-service/llm/context-v2/config.d.ts +8 -0
  81. package/dist/ai-service/llm/context-v2/config.d.ts.map +1 -1
  82. package/dist/ai-service/llm/context-v2/config.js +13 -0
  83. package/dist/ai-service/llm/context-v2/config.js.map +1 -1
  84. package/dist/ai-service/llm/context-v2/context-metrics.d.ts +18 -0
  85. package/dist/ai-service/llm/context-v2/context-metrics.d.ts.map +1 -1
  86. package/dist/ai-service/llm/context-v2/context-metrics.js +94 -2
  87. package/dist/ai-service/llm/context-v2/context-metrics.js.map +1 -1
  88. package/dist/ai-service/llm/context-v2/context.d.ts +3 -0
  89. package/dist/ai-service/llm/context-v2/context.d.ts.map +1 -1
  90. package/dist/ai-service/llm/context-v2/context.js +13 -1
  91. package/dist/ai-service/llm/context-v2/context.js.map +1 -1
  92. package/dist/ai-service/llm/stream/observers/workflow-usage.d.ts +35 -0
  93. package/dist/ai-service/llm/stream/observers/workflow-usage.d.ts.map +1 -0
  94. package/dist/ai-service/llm/stream/observers/workflow-usage.js +108 -0
  95. package/dist/ai-service/llm/stream/observers/workflow-usage.js.map +1 -0
  96. package/dist/ai-service/llm/stream/orchestrator.d.ts.map +1 -1
  97. package/dist/ai-service/llm/stream/orchestrator.js +1 -0
  98. package/dist/ai-service/llm/stream/orchestrator.js.map +1 -1
  99. package/dist/ai-service/llm/stream/session.d.ts +2 -0
  100. package/dist/ai-service/llm/stream/session.d.ts.map +1 -1
  101. package/dist/ai-service/llm/stream/session.js +2 -0
  102. package/dist/ai-service/llm/stream/session.js.map +1 -1
  103. package/dist/ai-service/managed-native-db-availability.d.ts +62 -0
  104. package/dist/ai-service/managed-native-db-availability.d.ts.map +1 -0
  105. package/dist/ai-service/managed-native-db-availability.js +37 -0
  106. package/dist/ai-service/managed-native-db-availability.js.map +1 -0
  107. package/dist/ai-service/security/vulnerability-triage.d.ts +90 -0
  108. package/dist/ai-service/security/vulnerability-triage.d.ts.map +1 -0
  109. package/dist/ai-service/security/vulnerability-triage.js +113 -0
  110. package/dist/ai-service/security/vulnerability-triage.js.map +1 -0
  111. package/dist/ai-service/skills/system/superblocks-frontend/skill.generated.d.ts +1 -1
  112. package/dist/ai-service/skills/system/superblocks-frontend/skill.generated.d.ts.map +1 -1
  113. package/dist/ai-service/skills/system/superblocks-frontend/skill.generated.js +13 -0
  114. package/dist/ai-service/skills/system/superblocks-frontend/skill.generated.js.map +1 -1
  115. package/dist/ai-service/state-machine/clark-fsm.d.ts +12 -0
  116. package/dist/ai-service/state-machine/clark-fsm.d.ts.map +1 -1
  117. package/dist/ai-service/state-machine/clark-fsm.js +23 -0
  118. package/dist/ai-service/state-machine/clark-fsm.js.map +1 -1
  119. package/dist/ai-service/state-machine/handlers/awaiting-user.d.ts.map +1 -1
  120. package/dist/ai-service/state-machine/handlers/awaiting-user.js +17 -27
  121. package/dist/ai-service/state-machine/handlers/awaiting-user.js.map +1 -1
  122. package/dist/ai-service/state-machine/handlers/idle.d.ts +1 -1
  123. package/dist/ai-service/state-machine/handlers/idle.d.ts.map +1 -1
  124. package/dist/ai-service/state-machine/handlers/idle.js +28 -2
  125. package/dist/ai-service/state-machine/handlers/idle.js.map +1 -1
  126. package/dist/ai-service/state-machine/handlers/play-dead.d.ts +2 -2
  127. package/dist/ai-service/state-machine/handlers/play-dead.d.ts.map +1 -1
  128. package/dist/ai-service/state-machine/handlers/play-dead.js +18 -4
  129. package/dist/ai-service/state-machine/handlers/play-dead.js.map +1 -1
  130. package/dist/ai-service/state-machine/helpers/prompt-billing-metrics.d.ts +26 -0
  131. package/dist/ai-service/state-machine/helpers/prompt-billing-metrics.d.ts.map +1 -0
  132. package/dist/ai-service/state-machine/helpers/prompt-billing-metrics.js +127 -0
  133. package/dist/ai-service/state-machine/helpers/prompt-billing-metrics.js.map +1 -0
  134. package/dist/ai-service/state-machine/helpers/prompt-request-metrics.d.ts +36 -3
  135. package/dist/ai-service/state-machine/helpers/prompt-request-metrics.d.ts.map +1 -1
  136. package/dist/ai-service/state-machine/helpers/prompt-request-metrics.js +119 -11
  137. package/dist/ai-service/state-machine/helpers/prompt-request-metrics.js.map +1 -1
  138. package/dist/ai-service/tasks/factory.d.ts +2 -0
  139. package/dist/ai-service/tasks/factory.d.ts.map +1 -1
  140. package/dist/ai-service/tasks/factory.js +7 -0
  141. package/dist/ai-service/tasks/factory.js.map +1 -1
  142. package/dist/ai-service/types.d.ts +57 -3
  143. package/dist/ai-service/types.d.ts.map +1 -1
  144. package/dist/ai-service/types.js +20 -0
  145. package/dist/ai-service/types.js.map +1 -1
  146. package/dist/migration/restructure.js +1 -1
  147. package/dist/migration-templates/app-fullstack/client/pages/{Page1 → Home}/index.tsx +1 -1
  148. package/dist/migration-templates/app-fullstack/client/router.tsx +1 -1
  149. package/dist/migration-templates/app-fullstack/package.json +2 -2
  150. package/dist/npm/apply-package-json-substitutions.d.ts +19 -0
  151. package/dist/npm/apply-package-json-substitutions.d.ts.map +1 -0
  152. package/dist/npm/apply-package-json-substitutions.js +108 -0
  153. package/dist/npm/apply-package-json-substitutions.js.map +1 -0
  154. package/dist/policy-gate-callback-mapper.d.ts +1 -1
  155. package/dist/policy-gate-callback-mapper.d.ts.map +1 -1
  156. package/dist/policy-gate-callback-mapper.js +5 -6
  157. package/dist/policy-gate-callback-mapper.js.map +1 -1
  158. package/dist/policy-gate-runner.d.ts.map +1 -1
  159. package/dist/policy-gate-runner.js +22 -4
  160. package/dist/policy-gate-runner.js.map +1 -1
  161. package/package.json +8 -8
@@ -1 +1 @@
1
- {"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../src/ai-service/tasks/factory.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,iBAAiB,EACjB,eAAe,GAIhB,MAAM,0BAA0B,CAAC;AA8ElC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CAIzC,QAAsD;IAEtD,OAAO,iBAAiB,CACtB,QAAQ,CAAC,IAAI,EACb,CAAC,EAAE,QAAQ,EAA0B,EAAE,EAAE,CAAC,CAAC;QACzC,kCAAkC,EAChC,QAAQ,CAAC,kCAAkC;QAC7C,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,IAAI,eAAe,CAAC,KAAK;QACtE,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,OAAO,EAAE,KAAK,EACZ,KAAY,EACZ,IAA0B,EACA,EAAE;YAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAC3C,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,IAAI,EACJ,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;YACpC,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACjE,MAAM,KAAK,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3D,MAAM,MAAM,GACV,MAAM,CAAC,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAE,MAA8B,CAAC,MAAM;gBACxC,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,MAAM,GAAoB;gBAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC;YACF,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;YACpD,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACjD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAgB,EAChB,KAA6C;IAE7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../src/ai-service/tasks/factory.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,iBAAiB,EACjB,eAAe,GAIhB,MAAM,0BAA0B,CAAC;AAgFlC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CAIzC,QAAsD;IAEtD,OAAO,iBAAiB,CACtB,QAAQ,CAAC,IAAI,EACb,CAAC,EAAE,QAAQ,EAA0B,EAAE,EAAE,CAAC,CAAC;QACzC,kCAAkC,EAChC,QAAQ,CAAC,kCAAkC;QAC7C,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,IAAI,eAAe,CAAC,KAAK;QACtE,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,OAAO,EAAE,KAAK,EACZ,KAAY,EACZ,IAA0B,EACA,EAAE;YAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAC3C,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,IAAI,EACJ,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;YACpC,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACjE,MAAM,KAAK,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3D,MAAM,MAAM,GACV,MAAM,CAAC,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAE,MAA8B,CAAC,MAAM;gBACxC,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,MAAM,GAAoB;gBAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC;YACF,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;YACpD,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACjD,kEAAkE;YAClE,uCAAuC;YACvC,MAAM,cAAc,GAClB,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAGrC,EAAE,cAAc,CAAC;YAClB,IACE,OAAO,cAAc,EAAE,QAAQ,KAAK,QAAQ;gBAC5C,cAAc,CAAC,QAAQ,GAAG,CAAC,EAC3B,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;YAC5C,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAgB,EAChB,KAA6C;IAE7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}
@@ -1,6 +1,6 @@
1
1
  import type { Tracer } from "@opentelemetry/api";
2
2
  import type { EditorClientMethods, IApiV3Dto } from "@superblocksteam/library-shared/types";
3
- import type { ISocketClient, PluginExecutionVersions } from "@superblocksteam/shared";
3
+ import type { AgentType, ISocketClient, PluginExecutionVersions } from "@superblocksteam/shared";
4
4
  import type { ITokenManager } from "@superblocksteam/util";
5
5
  import type { DraftInterface } from "../draft-interface.js";
6
6
  import type { AutoConnectingRpcClient } from "../server-rpc/index.js";
@@ -17,6 +17,27 @@ export interface AiServiceConfig {
17
17
  appRootDirPath: string;
18
18
  applicationId: string;
19
19
  organizationId: string;
20
+ /**
21
+ * Organization agent type from `/me`. On SaaS, managed Native DB tools
22
+ * require `AgentType.ONPREMISE` plus lifecycle registration. Cloud-prem
23
+ * managed DPs are usually `MULTITENANT` and are gated via `isCloudPrem`
24
+ * instead. Accepts shared or CLI numeric `AgentType` enums.
25
+ */
26
+ agentType?: AgentType | number;
27
+ /**
28
+ * True when Clark is talking to a cloud-prem control plane
29
+ * (`SUPERBLOCKS_DEPLOYMENT_TYPE=cloud-prem`). Managed data planes do
30
+ * not publish OPA lifecycle tags, so this bypasses the ONPREMISE +
31
+ * registration check when the rollout flag is on.
32
+ */
33
+ isCloudPrem?: boolean;
34
+ /**
35
+ * True when an active OPA has registered `databaseLifecycle:*` tags that
36
+ * cover edit-mode `ensure_database`. Computed at CLI bootstrap from `/me`
37
+ * agents; required for SaaS OPA orgs before Clark advertises managed-DB
38
+ * tools/prompts.
39
+ */
40
+ managedNativeDbLifecycleCapableForEdit?: boolean;
20
41
  fsOperationQueue: IOperationQueue;
21
42
  draftInterface: DraftInterface;
22
43
  tracer: Tracer;
@@ -110,8 +131,23 @@ export declare class NpmInstallError extends Error {
110
131
  * - `registry_unreachable` — DNS / TCP / proxy / timeout — see `subreason` for the sub-class
111
132
  * - `registry_auth_failed` — registry rejected the auth token (E401, E403)
112
133
  * - `tls_failed` — TLS handshake/verification failed (untrusted CA, self-signed cert, expired cert)
134
+ * - `vulnerable_package` — Superblocks vulnerability index blocked the install (malware or CVE)
113
135
  */
114
- export type NpmInstallBlockedReason = "not_in_registry" | "registry_unreachable" | "registry_auth_failed" | "tls_failed";
136
+ export type NpmInstallBlockedReason = "not_in_registry" | "registry_auth_failed" | "registry_unreachable" | "tls_failed" | "vulnerable_package";
137
+ /**
138
+ * Index finding on `NpmInstallBlocked` when `reason === "vulnerable_package"`.
139
+ * One entry per blocked package. Surfaced on `toJSON()` for the tool result,
140
+ * triage step, and audit sink.
141
+ */
142
+ export interface NpmInstallBlockedFinding {
143
+ advisoryId: string;
144
+ details?: string;
145
+ kind: "cve" | "index_unavailable" | "malware";
146
+ package: string;
147
+ severity?: string;
148
+ suggestedVersion?: string;
149
+ summary?: string;
150
+ }
115
151
  /**
116
152
  * Sub-class of `registry_unreachable`. Lets the renderer give the operator
117
153
  * the right next step (CA bundle / DNS / proxy / retry) instead of the generic
@@ -147,8 +183,20 @@ export type NpmInstallBlockedSubreason = "dns" | "network" | "proxy" | "timeout"
147
183
  * transient npmjs outage AND an airgapped
148
184
  * deployment where egress is blocked and no
149
185
  * private registry has been wired up.
186
+ * - `malware_block` — `vulnerable_package` with `kind: "malware"`;
187
+ * hard-block, pick a different package.
188
+ * - `index_unavailable` — `vulnerable_package` with
189
+ * `kind: "index_unavailable"`; fail-closed
190
+ * because the security index / dry-run probe
191
+ * could not vouch for the install. Retry later;
192
+ * not a malware verdict.
193
+ * - `cve_block` — `vulnerable_package` with `kind: "cve"` where
194
+ * a safe version exists but cannot be applied
195
+ * in place (out-of-range / won't resolve).
196
+ * - `cve_no_safe_version` — `vulnerable_package` with `kind: "cve"` and
197
+ * no safe upgrade in the index.
150
198
  */
151
- export type NpmInstallBlockedMessageVariant = "default" | "private_mirror_hint" | "unreachable_escalation";
199
+ export type NpmInstallBlockedMessageVariant = "cve_block" | "cve_no_safe_version" | "default" | "index_unavailable" | "malware_block" | "private_mirror_hint" | "unreachable_escalation";
152
200
  /**
153
201
  * Scrub potential auth secrets out of a string before it lands in a log line
154
202
  * or tool result the agent (and any downstream sink) will see.
@@ -235,6 +283,11 @@ export interface NpmInstallBlockedDetails {
235
283
  * purposes — there is no escalation path to recommend.
236
284
  */
237
285
  hasAnyRegistryConfigured?: boolean;
286
+ /**
287
+ * Only meaningful when `reason === "vulnerable_package"`. One entry per
288
+ * blocked package (malware or CVE). Triage and messaging read this list.
289
+ */
290
+ findings?: NpmInstallBlockedFinding[];
238
291
  }
239
292
  /**
240
293
  * Structured error thrown by `AppShell` install methods when npm reports a
@@ -254,6 +307,7 @@ export declare class NpmInstallBlocked extends Error {
254
307
  readonly npmErrorCode?: string;
255
308
  readonly summary?: string;
256
309
  readonly hasAnyRegistryConfigured?: boolean;
310
+ readonly findings?: NpmInstallBlockedFinding[];
257
311
  constructor(details: NpmInstallBlockedDetails);
258
312
  /** Plain-object projection suitable for inclusion in a tool result. Never
259
313
  * includes the auth token (the parser scrubs all string fields before
@@ -1 +1 @@
1
- {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/ai-service/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,KAAK,EACV,mBAAmB,EACnB,SAAS,EACV,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,eAAe,CAAC;IAClC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,uBAAuB,CAAC;IACnC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,sGAAsG;IACtG,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD,gBAAgB,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChD;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iGAAiG;IACjG,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC1C,mBAAmB,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACpE,gBAAgB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjC,uFAAuF;IACvF,gBAAgB,EAAE,EAAE,CAAC;CACtB;AAED,KAAK,gCAAgC,CAAC,CAAC,SAAS,MAAM,IACpD,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,GAC9C,KAAK,GAAG,gCAAgC,CAAC,IAAI,IAAI,EAAE,CAAC,GACpD,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM,KAAK,EAAE,GAClC,KAAK,GACL,KAAK,CAAC;AAEd,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,MAAM,IAAI;KACxC,CAAC,IAAI,gCAAgC,CAAC,CAAC,CAAC,GAAG,MAAM;CACnD,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,MAAM,IAAI;IACnD,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,MAAM,IAAI;IACpD,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;KACtC,CAAC,IAAI,MAAM,GAAG,MAAM;CACtB,CAAC,CAAC;AAEH,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,iBAAiB,IAAI;KACzD,CAAC,IAAI,MAAM,CAAC,GAAG,aAAa,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,iBAAiB,IAAI;KAC1D,CAAC,IAAI,MAAM,CAAC,GAAG,aAAa,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAC3D,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,YAAY,GAAG,OAAO,CAAC;IAC9C,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;IACnD,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,CAAC;CACrD,CAAC;AAEF,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAM5B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,GAC/B,iBAAiB,GACjB,sBAAsB,GACtB,sBAAsB,GACtB,YAAY,CAAC;AAEjB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,0BAA0B,GAClC,KAAK,GACL,SAAS,GACT,OAAO,GACP,SAAS,CAAC;AAEd;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,+BAA+B,GACvC,SAAS,GACT,qBAAqB,GACrB,wBAAwB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CA4BlD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOtD;AAED,cAAc;AACd,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,uBAAuB,CAAC;IAChC;;;;sDAIkD;IAClD,SAAS,CAAC,EAAE,0BAA0B,CAAC;IACvC;;;;;;;;;;;2EAWuE;IACvE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;OAcG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;gBAEhC,OAAO,EAAE,wBAAwB;IA2C7C;;sCAEkC;IAClC,MAAM,IAAI,wBAAwB,GAAG;QAAE,IAAI,EAAE,mBAAmB,CAAA;KAAE;CAanE;AAED,MAAM,MAAM,YAAY,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAE9D,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,OAAO,EAAE,SAAS,CAAC;CACpB,CAAC"}
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/ai-service/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,KAAK,EACV,mBAAmB,EACnB,SAAS,EACV,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EACb,uBAAuB,EACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,sCAAsC,CAAC,EAAE,OAAO,CAAC;IACjD,gBAAgB,EAAE,eAAe,CAAC;IAClC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,uBAAuB,CAAC;IACnC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,sGAAsG;IACtG,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD,gBAAgB,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChD;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iGAAiG;IACjG,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC1C,mBAAmB,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACpE,gBAAgB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjC,uFAAuF;IACvF,gBAAgB,EAAE,EAAE,CAAC;CACtB;AAED,KAAK,gCAAgC,CAAC,CAAC,SAAS,MAAM,IACpD,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,GAC9C,KAAK,GAAG,gCAAgC,CAAC,IAAI,IAAI,EAAE,CAAC,GACpD,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM,KAAK,EAAE,GAClC,KAAK,GACL,KAAK,CAAC;AAEd,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,MAAM,IAAI;KACxC,CAAC,IAAI,gCAAgC,CAAC,CAAC,CAAC,GAAG,MAAM;CACnD,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,MAAM,IAAI;IACnD,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,MAAM,IAAI;IACpD,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;KACtC,CAAC,IAAI,MAAM,GAAG,MAAM;CACtB,CAAC,CAAC;AAEH,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,iBAAiB,IAAI;KACzD,CAAC,IAAI,MAAM,CAAC,GAAG,aAAa,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,iBAAiB,IAAI;KAC1D,CAAC,IAAI,MAAM,CAAC,GAAG,aAAa,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAC3D,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,YAAY,GAAG,OAAO,CAAC;IAC9C,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;IACnD,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,CAAC;CACrD,CAAC;AAEF,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAM5B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAC/B,iBAAiB,GACjB,sBAAsB,GACtB,sBAAsB,GACtB,YAAY,GACZ,oBAAoB,CAAC;AAEzB;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,GAAG,mBAAmB,GAAG,SAAS,CAAC;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,0BAA0B,GAClC,KAAK,GACL,SAAS,GACT,OAAO,GACP,SAAS,CAAC;AAEd;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,MAAM,+BAA+B,GACvC,WAAW,GACX,qBAAqB,GACrB,SAAS,GACT,mBAAmB,GACnB,eAAe,GACf,qBAAqB,GACrB,wBAAwB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CA4BlD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOtD;AAED,cAAc;AACd,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,uBAAuB,CAAC;IAChC;;;;sDAIkD;IAClD,SAAS,CAAC,EAAE,0BAA0B,CAAC;IACvC;;;;;;;;;;;2EAWuE;IACvE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;OAcG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACvC;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,EAAE,CAAC;gBAEnC,OAAO,EAAE,wBAAwB;IA6D7C;;sCAEkC;IAClC,MAAM,IAAI,wBAAwB,GAAG;QAAE,IAAI,EAAE,mBAAmB,CAAA;KAAE;CAcnE;AAED,MAAM,MAAM,YAAY,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAE9D,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,OAAO,EAAE,SAAS,CAAC;CACpB,CAAC"}
@@ -90,6 +90,7 @@ export class NpmInstallBlocked extends Error {
90
90
  npmErrorCode;
91
91
  summary;
92
92
  hasAnyRegistryConfigured;
93
+ findings;
93
94
  constructor(details) {
94
95
  // Defense-in-depth: scrub auth secrets and prompt-injection structure at
95
96
  // construction time so this class is safe to instantiate from anywhere,
@@ -108,6 +109,23 @@ export class NpmInstallBlocked extends Error {
108
109
  const safeSummary = details.summary
109
110
  ? safeField(details.summary)
110
111
  : undefined;
112
+ const safeFindings = details.findings?.map((finding) => ({
113
+ advisoryId: safeField(finding.advisoryId),
114
+ ...(finding.details !== undefined
115
+ ? { details: safeField(finding.details) }
116
+ : {}),
117
+ kind: finding.kind,
118
+ package: safeField(finding.package),
119
+ ...(finding.severity !== undefined
120
+ ? { severity: safeField(finding.severity) }
121
+ : {}),
122
+ ...(finding.suggestedVersion !== undefined
123
+ ? { suggestedVersion: safeField(finding.suggestedVersion) }
124
+ : {}),
125
+ ...(finding.summary !== undefined
126
+ ? { summary: safeField(finding.summary) }
127
+ : {}),
128
+ }));
111
129
  // Render packages compactly for the Error.message string. Empty array
112
130
  // falls back to a generic phrase so the message still parses cleanly.
113
131
  const packagesPhrase = safePackages.length > 0 ? safePackages.join(", ") : "requested packages";
@@ -123,6 +141,7 @@ export class NpmInstallBlocked extends Error {
123
141
  this.npmErrorCode = safeNpmErrorCode;
124
142
  this.summary = safeSummary;
125
143
  this.hasAnyRegistryConfigured = details.hasAnyRegistryConfigured;
144
+ this.findings = safeFindings;
126
145
  Object.setPrototypeOf(this, new.target.prototype);
127
146
  }
128
147
  /** Plain-object projection suitable for inclusion in a tool result. Never
@@ -139,6 +158,7 @@ export class NpmInstallBlocked extends Error {
139
158
  npmErrorCode: this.npmErrorCode,
140
159
  summary: this.summary,
141
160
  hasAnyRegistryConfigured: this.hasAnyRegistryConfigured,
161
+ findings: this.findings,
142
162
  };
143
163
  }
144
164
  }
@@ -1 +1 @@
1
- {"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/ai-service/types.ts"],"names":[],"mappings":"AA+HA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAE9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AA8DD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,CACL,KAAK;QACH,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;SACtE,OAAO,CAAC,+BAA+B,EAAE,cAAc,CAAC;SACxD,OAAO,CAAC,yBAAyB,EAAE,cAAc,CAAC;SAClD,OAAO,CAAC,kBAAkB,EAAE,cAAc,CAAC;QAC5C,wEAAwE;QACxE,kEAAkE;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,kEAAkE;SACjE,OAAO,CACN,gFAAgF,EAChF,cAAc,CACf;QACD,mEAAmE;QACnE,oEAAoE;QACpE,sEAAsE;QACtE,gEAAgE;QAChE,aAAa;SACZ,OAAO,CACN,uDAAuD,EACvD,eAAe,CAChB,CACJ,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,gEAAgE;IAChE,uEAAuE;IACvE,4EAA4E;IAC5E,gCAAgC;IAChC,0FAA0F;IAC1F,OAAO,KAAK,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAkDD;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,MAAM,CAA0B;IAChC,SAAS,CAA8B;IACvC,QAAQ,CAAW;IACnB,YAAY,CAAU;IACtB,UAAU,CAAU;IACpB,YAAY,CAAU;IACtB,OAAO,CAAU;IACjB,wBAAwB,CAAW;IAE5C,YAAY,OAAiC;QAC3C,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,8CAA8C;QAC9C,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAC1C,gBAAgB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY;YAC3C,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY;YAC3C,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO;YACjC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5B,CAAC,CAAC,SAAS,CAAC;QAEd,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,cAAc,GAClB,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAE3E,KAAK,CACH,wBAAwB,OAAO,CAAC,MAAM,SAAS,cAAc,EAAE;YAC7D,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACrD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;QAC3B,IAAI,CAAC,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC;QAEjE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAED;;sCAEkC;IAClC,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;SACxD,CAAC;IACJ,CAAC;CACF"}
1
+ {"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/ai-service/types.ts"],"names":[],"mappings":"AAqJA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAE9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AA+FD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,CACL,KAAK;QACH,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;SACtE,OAAO,CAAC,+BAA+B,EAAE,cAAc,CAAC;SACxD,OAAO,CAAC,yBAAyB,EAAE,cAAc,CAAC;SAClD,OAAO,CAAC,kBAAkB,EAAE,cAAc,CAAC;QAC5C,wEAAwE;QACxE,kEAAkE;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,kEAAkE;SACjE,OAAO,CACN,gFAAgF,EAChF,cAAc,CACf;QACD,mEAAmE;QACnE,oEAAoE;QACpE,sEAAsE;QACtE,gEAAgE;QAChE,aAAa;SACZ,OAAO,CACN,uDAAuD,EACvD,eAAe,CAChB,CACJ,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,gEAAgE;IAChE,uEAAuE;IACvE,4EAA4E;IAC5E,gCAAgC;IAChC,0FAA0F;IAC1F,OAAO,KAAK,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAuDD;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,MAAM,CAA0B;IAChC,SAAS,CAA8B;IACvC,QAAQ,CAAW;IACnB,YAAY,CAAU;IACtB,UAAU,CAAU;IACpB,YAAY,CAAU;IACtB,OAAO,CAAU;IACjB,wBAAwB,CAAW;IACnC,QAAQ,CAA8B;IAE/C,YAAY,OAAiC;QAC3C,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,8CAA8C;QAC9C,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAC1C,gBAAgB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY;YAC3C,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY;YAC3C,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO;YACjC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5B,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACvD,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;YACzC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;YACnC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAC3C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC,CAAC;QAEJ,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,cAAc,GAClB,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAE3E,KAAK,CACH,wBAAwB,OAAO,CAAC,MAAM,SAAS,cAAc,EAAE;YAC7D,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACrD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;QAC3B,IAAI,CAAC,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC;QAE7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAED;;sCAEkC;IAClC,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;YACvD,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;IACJ,CAAC;CACF"}
@@ -46,7 +46,7 @@ const BACKUP_TO_CLIENT_MAPPINGS = [
46
46
  *
47
47
  * `router.tsx` / `App.tsx` / `root.tsx` are critical here: the shadcn-demo-app
48
48
  * legacy template registers real user routes via `router.tsx`, and the
49
- * fullstack template's default router only wires up a blank `Page1` stub.
49
+ * fullstack template's default router only wires up a blank `Home` stub.
50
50
  * Without porting the user's router, the migrated `client/pages/*` files
51
51
  * exist on disk but are unrouted, so the live-edit tree looks like a
52
52
  * default/empty app and the editor falls through to the v2 UI.
@@ -1,3 +1,3 @@
1
- export default function Page1Component() {
1
+ export default function HomePage() {
2
2
  return <div className="min-h-svh overflow-auto"></div>;
3
3
  }
@@ -13,7 +13,7 @@ export const router = createBrowserRouter([
13
13
  path: "/",
14
14
  index: true,
15
15
  lazy: () =>
16
- import("./pages/Page1/index.js").then((mod) => {
16
+ import("./pages/Home/index.js").then((mod) => {
17
17
  const Component = mod.default;
18
18
  return { Component };
19
19
  }),
@@ -65,13 +65,13 @@
65
65
  "eslint-plugin-react-hooks": "^7.0.1",
66
66
  "eslint-plugin-react-refresh": "^0.5.0",
67
67
  "globals": "^17.3.0",
68
- "postcss": "^8.5.10",
68
+ "postcss": "^8.5.18",
69
69
  "tailwindcss": "^4.1.12",
70
70
  "tsx": "^4.0.0",
71
71
  "tw-animate-css": "^1.3.7",
72
72
  "typescript": "^6.0.3",
73
73
  "typescript-eslint": "^8.59.2",
74
- "vite": "6.4.2"
74
+ "vite": "6.4.3"
75
75
  },
76
76
  "overrides": {
77
77
  "esbuild": "^0.27.0",
@@ -0,0 +1,19 @@
1
+ import type { Logger } from "../util/logger.js";
2
+ /** Declared deps/devDeps/optionalDeps (not peers) with their ranges. */
3
+ export declare function readDeclaredDependencies(appRootDirPath: string): Promise<Array<{
4
+ name: string;
5
+ version?: string;
6
+ }>>;
7
+ /**
8
+ * Rewrite already-declared specs; never add packages. Returns names rewritten.
9
+ * Fail-open on FS/parse errors so a bad package.json cannot block install.
10
+ */
11
+ export declare function applyPackageJsonSubstitutions(args: {
12
+ appRootDirPath: string;
13
+ logger?: Pick<Logger, "debug" | "info" | "warn">;
14
+ substitutions: Array<{
15
+ name: string;
16
+ toVersion: string;
17
+ }>;
18
+ }): Promise<string[]>;
19
+ //# sourceMappingURL=apply-package-json-substitutions.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"apply-package-json-substitutions.d.ts","sourceRoot":"","sources":["../../src/npm/apply-package-json-substitutions.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAyBhD,wEAAwE;AACxE,wBAAsB,wBAAwB,CAC5C,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CA2BpD;AAED;;;GAGG;AACH,wBAAsB,6BAA6B,CAAC,IAAI,EAAE;IACxD,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC;IACjD,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3D,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAgEpB"}
@@ -0,0 +1,108 @@
1
+ // Mode 2 installs have no argv to rewrite — safe versions go into package.json.
2
+ import { readFile, writeFile } from "node:fs/promises";
3
+ import { join } from "node:path";
4
+ // peers describe host requirements, not what this install resolves
5
+ const DEPENDENCY_BUCKETS = [
6
+ "dependencies",
7
+ "devDependencies",
8
+ "optionalDependencies",
9
+ ];
10
+ /** Keep `^`/`~`; anything else becomes an exact pin. */
11
+ function applyDeclaredRangeOperator(declared, safeVersion) {
12
+ const operator = /^[\^~]/.exec(declared.trim())?.[0] ?? "";
13
+ return `${operator}${safeVersion}`;
14
+ }
15
+ /** Declared deps/devDeps/optionalDeps (not peers) with their ranges. */
16
+ export async function readDeclaredDependencies(appRootDirPath) {
17
+ let raw;
18
+ try {
19
+ raw = await readFile(join(appRootDirPath, "package.json"), "utf8");
20
+ }
21
+ catch {
22
+ return [];
23
+ }
24
+ let parsed;
25
+ try {
26
+ parsed = JSON.parse(raw);
27
+ }
28
+ catch {
29
+ return [];
30
+ }
31
+ if (parsed == null || typeof parsed !== "object")
32
+ return [];
33
+ const manifest = parsed;
34
+ const declared = [];
35
+ const seen = new Set();
36
+ for (const bucket of DEPENDENCY_BUCKETS) {
37
+ const deps = manifest[bucket];
38
+ if (deps == null || typeof deps !== "object")
39
+ continue;
40
+ for (const [name, version] of Object.entries(deps)) {
41
+ if (typeof version !== "string" || seen.has(name))
42
+ continue;
43
+ seen.add(name);
44
+ declared.push({ name, version });
45
+ }
46
+ }
47
+ return declared;
48
+ }
49
+ /**
50
+ * Rewrite already-declared specs; never add packages. Returns names rewritten.
51
+ * Fail-open on FS/parse errors so a bad package.json cannot block install.
52
+ */
53
+ export async function applyPackageJsonSubstitutions(args) {
54
+ const { appRootDirPath, logger, substitutions } = args;
55
+ if (substitutions.length === 0)
56
+ return [];
57
+ try {
58
+ const packageJsonPath = join(appRootDirPath, "package.json");
59
+ let raw;
60
+ try {
61
+ raw = await readFile(packageJsonPath, "utf8");
62
+ }
63
+ catch (err) {
64
+ if (err.code === "ENOENT")
65
+ return [];
66
+ throw err;
67
+ }
68
+ let parsed;
69
+ try {
70
+ parsed = JSON.parse(raw);
71
+ }
72
+ catch (err) {
73
+ logger?.warn(`[npm] Could not parse package.json to apply security substitutions: ${err instanceof Error ? err.message : String(err)}`);
74
+ return [];
75
+ }
76
+ const byName = new Map(substitutions.map((entry) => [entry.name, entry.toVersion]));
77
+ const rewritten = [];
78
+ for (const bucket of DEPENDENCY_BUCKETS) {
79
+ const deps = parsed[bucket];
80
+ if (deps == null || typeof deps !== "object")
81
+ continue;
82
+ for (const [name, declared] of Object.entries(deps)) {
83
+ const safeVersion = byName.get(name);
84
+ if (safeVersion === undefined || typeof declared !== "string")
85
+ continue;
86
+ const next = applyDeclaredRangeOperator(declared, safeVersion);
87
+ if (next === declared)
88
+ continue;
89
+ deps[name] = next;
90
+ rewritten.push(name);
91
+ }
92
+ }
93
+ if (rewritten.length === 0)
94
+ return [];
95
+ await writeFile(packageJsonPath, `${JSON.stringify(parsed, null, 2)}\n`, "utf8");
96
+ logger?.info("[pkg-security][mode2] upgraded declared packages", {
97
+ rewritten,
98
+ });
99
+ return rewritten;
100
+ }
101
+ catch (error) {
102
+ logger?.warn("[pkg-security] could not apply package.json security upgrades; installing declared versions", {
103
+ error: error instanceof Error ? error.message : String(error),
104
+ });
105
+ return [];
106
+ }
107
+ }
108
+ //# sourceMappingURL=apply-package-json-substitutions.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"apply-package-json-substitutions.js","sourceRoot":"","sources":["../../src/npm/apply-package-json-substitutions.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAWjC,mEAAmE;AACnE,MAAM,kBAAkB,GAAG;IACzB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;CACd,CAAC;AAEX,wDAAwD;AACxD,SAAS,0BAA0B,CACjC,QAAgB,EAChB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO,GAAG,QAAQ,GAAG,WAAW,EAAE,CAAC;AACrC,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,cAAsB;IAEtB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAqB,CAAC;IACvC,MAAM,QAAQ,GAA8C,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QACvD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAInD;IACC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IACvD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAC7D,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAChE,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,IAAI,CACV,uEACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAC5D,CAAC;QACF,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACvD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ;oBAAE,SAAS;gBACxE,MAAM,IAAI,GAAG,0BAA0B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAC/D,IAAI,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAChC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBAClB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEtC,MAAM,SAAS,CACb,eAAe,EACf,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACtC,MAAM,CACP,CAAC;QACF,MAAM,EAAE,IAAI,CAAC,kDAAkD,EAAE;YAC/D,SAAS;SACV,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,CACV,6FAA6F,EAC7F;YACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CACF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
@@ -3,7 +3,7 @@ type PolicyGateMode = "advisory" | "blocking";
3
3
  /** Matches POST /api/v1/policy-gates/review-runs/state finding objects (server writer). */
4
4
  interface PolicyGateCallbackFinding {
5
5
  blocking: boolean;
6
- category: "external_policy" | "misconfiguration" | "security_agent" | "secret" | "sensitive_data" | "vulnerability";
6
+ category: "external_policy" | "misconfiguration" | "security_agent" | "secret" | "sensitive_data" | "static_analysis" | "vulnerability";
7
7
  clarkRemediable: boolean;
8
8
  confidence?: "high" | "low" | "medium" | null;
9
9
  evidenceJson?: Record<string, unknown>;
@@ -1 +1 @@
1
- {"version":3,"file":"policy-gate-callback-mapper.d.ts","sourceRoot":"","sources":["../src/policy-gate-callback-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAEjG,KAAK,cAAc,GAAG,UAAU,GAAG,UAAU,CAAC;AAE9C,2FAA2F;AAC3F,UAAU,yBAAyB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EACJ,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,QAAQ,GACR,gBAAgB,GAChB,eAAe,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC1D,WAAW,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,KAAK,YAAY,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,YAAY,CAAC,UAAU,CAAC,GAAG,MAAM,GAC/C,yBAAyB,CAAC,UAAU,CAAC,CAiBvC;AAMD,wBAAgB,oCAAoC,CAClD,QAAQ,EAAE,YAAY,EAAE,EACxB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,cAAc,GACzB,yBAAyB,EAAE,CAsC7B"}
1
+ {"version":3,"file":"policy-gate-callback-mapper.d.ts","sourceRoot":"","sources":["../src/policy-gate-callback-mapper.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAEjG,KAAK,cAAc,GAAG,UAAU,GAAG,UAAU,CAAC;AAE9C,2FAA2F;AAC3F,UAAU,yBAAyB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EACJ,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,QAAQ,GACR,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC1D,WAAW,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,KAAK,YAAY,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,YAAY,CAAC,UAAU,CAAC,GAAG,MAAM,GAC/C,yBAAyB,CAAC,UAAU,CAAC,CAiBvC;AAKD,wBAAgB,oCAAoC,CAClD,QAAQ,EAAE,YAAY,EAAE,EACxB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,cAAc,GACzB,yBAAyB,EAAE,CAuC7B"}
@@ -1,3 +1,4 @@
1
+ import { isBlockingFindingSeverity } from "@superblocksteam/shared";
1
2
  export function mapFindingCategory(agentCategory) {
2
3
  switch (agentCategory) {
3
4
  case "secret":
@@ -16,14 +17,12 @@ export function mapFindingCategory(agentCategory) {
16
17
  return "security_agent";
17
18
  }
18
19
  }
19
- // Policy mode is authoritative for the gate decision. The admin's intent
20
- // (blocking vs advisory) outranks the LLM's severity rating, which reflects
21
- // exploitability and isn't always aligned with the admin's policy concern
22
- // (e.g. a styling rule like "no green buttons" is medium severity, but a
23
- // blocking-mode policy should still block the deploy).
20
+ // Advisory mode never hard-blocks. Blocking mode hard-blocks only critical/high
21
+ // findings; medium/low/info stay advisory so they can surface without stopping
22
+ // publish (ENG-5334).
24
23
  export function mapAgentFindingsToPolicyGateCallback(findings, aiAgentRunId, policyMode) {
25
24
  return findings.map((finding) => {
26
- const blocking = policyMode === "blocking";
25
+ const blocking = policyMode === "blocking" && isBlockingFindingSeverity(finding.severity);
27
26
  const location = {
28
27
  filePath: finding.location.file,
29
28
  };
@@ -1 +1 @@
1
- {"version":3,"file":"policy-gate-callback-mapper.js","sourceRoot":"","sources":["../src/policy-gate-callback-mapper.ts"],"names":[],"mappings":"AA8BA,MAAM,UAAU,kBAAkB,CAChC,aAAgD;IAEhD,QAAQ,aAAa,EAAE,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,WAAW,CAAC;QACjB,KAAK,KAAK;YACR,OAAO,eAAe,CAAC;QACzB,KAAK,eAAe;YAClB,OAAO,gBAAgB,CAAC;QAC1B,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,kBAAkB,CAAC;QAC5B,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb;YACE,OAAO,gBAAgB,CAAC;IAC5B,CAAC;AACH,CAAC;AACD,yEAAyE;AACzE,4EAA4E;AAC5E,0EAA0E;AAC1E,yEAAyE;AACzE,uDAAuD;AACvD,MAAM,UAAU,oCAAoC,CAClD,QAAwB,EACxB,YAAoB,EACpB,UAA0B;IAE1B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,UAAU,KAAK,UAAU,CAAC;QAC3C,MAAM,QAAQ,GAA4B;YACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;SAChC,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxC,CAAC;QAED,MAAM,eAAe,GAA8B;YACjD,QAAQ;YACR,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC9C,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE;gBACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B;YACD,WAAW,EAAE,GAAG,YAAY,IAAI,OAAO,CAAC,EAAE,EAAE;YAC5C,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,aAAa,EAAE,CAAC,QAAQ,CAAC;YACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,eAAe;YAC5B,UAAU,EAAE,2BAA2B;YACvC,gBAAgB,EAAE,OAAO,CAAC,WAAW;YACrC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;QACF,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,eAAe,CAAC,mBAAmB,GAAG;gBACpC,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC"}
1
+ {"version":3,"file":"policy-gate-callback-mapper.js","sourceRoot":"","sources":["../src/policy-gate-callback-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAiCpE,MAAM,UAAU,kBAAkB,CAChC,aAAgD;IAEhD,QAAQ,aAAa,EAAE,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,WAAW,CAAC;QACjB,KAAK,KAAK;YACR,OAAO,eAAe,CAAC;QACzB,KAAK,eAAe;YAClB,OAAO,gBAAgB,CAAC;QAC1B,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,kBAAkB,CAAC;QAC5B,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb;YACE,OAAO,gBAAgB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,sBAAsB;AACtB,MAAM,UAAU,oCAAoC,CAClD,QAAwB,EACxB,YAAoB,EACpB,UAA0B;IAE1B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,QAAQ,GACZ,UAAU,KAAK,UAAU,IAAI,yBAAyB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAA4B;YACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;SAChC,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxC,CAAC;QAED,MAAM,eAAe,GAA8B;YACjD,QAAQ;YACR,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC9C,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE;gBACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B;YACD,WAAW,EAAE,GAAG,YAAY,IAAI,OAAO,CAAC,EAAE,EAAE;YAC5C,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,aAAa,EAAE,CAAC,QAAQ,CAAC;YACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,eAAe;YAC5B,UAAU,EAAE,2BAA2B;YACvC,gBAAgB,EAAE,OAAO,CAAC,WAAW;YACrC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;QACF,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,eAAe,CAAC,mBAAmB,GAAG;gBACpC,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"policy-gate-runner.d.ts","sourceRoot":"","sources":["../src/policy-gate-runner.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAE/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,EAAgB,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE3D,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAI9B,IAAI,EAAE,cAAc,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AA2CD,UAAU,oBAAoB;IAC5B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,KAAK,0BAA0B,GAAG,UAAU,CAC1C,WAAW,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAC5E,CAAC,CAAC,CAAC,CAAC;AAEL,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,oBAAoB,EAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7C,kBAAkB,CAAC,EAAE,MAAM,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAED,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,oBAAoB,GAC/B,0BAA0B,CAkB5B;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,oBAAoB,GACzB,IAAI,CA0EN;AAED,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,oBAAoB,EAChC,SAAS,EAAE,SAAS,EACpB,kBAAkB,EAAE,MAAM,EAC1B,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,GACpE,OAAO,CAAC,IAAI,CAAC,CA0Ff"}
1
+ {"version":3,"file":"policy-gate-runner.d.ts","sourceRoot":"","sources":["../src/policy-gate-runner.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAE/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,EAAgB,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE3D,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAI9B,IAAI,EAAE,cAAc,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AA2CD,UAAU,oBAAoB;IAC5B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,KAAK,0BAA0B,GAAG,UAAU,CAC1C,WAAW,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAC5E,CAAC,CAAC,CAAC,CAAC;AAEL,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,oBAAoB,EAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7C,kBAAkB,CAAC,EAAE,MAAM,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAED,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,oBAAoB,GAC/B,0BAA0B,CAkB5B;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,oBAAoB,GACzB,IAAI,CA0EN;AAED,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,oBAAoB,EAChC,SAAS,EAAE,SAAS,EACpB,kBAAkB,EAAE,MAAM,EAC1B,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,GACpE,OAAO,CAAC,IAAI,CAAC,CA6Gf"}
@@ -128,19 +128,37 @@ export async function executePolicyGateRun(assignment, aiService, superblocksBas
128
128
  const completedAt = new Date().toISOString();
129
129
  const findings = mapAgentFindingsToPolicyGateCallback(result.findings, assignment.aiAgentRunId, assignment.mode);
130
130
  const hasBlockingFindings = findings.some((f) => f.blocking);
131
+ // Soft-hold (advisory_allowed / findings) only for blocking-mode policies with
132
+ // non-blocking findings. Advisory-mode runs keep allowed/passed so they do not
133
+ // trip PolicyGateAdvisoryHoldError on the check-first publish path (APPS-5406).
134
+ const hasAdvisoryHoldFindings = assignment.mode === "blocking" &&
135
+ !hasBlockingFindings &&
136
+ findings.length > 0;
137
+ const decision = hasBlockingFindings
138
+ ? "blocked"
139
+ : hasAdvisoryHoldFindings
140
+ ? "advisory_allowed"
141
+ : "allowed";
142
+ const status = hasBlockingFindings
143
+ ? "blocked"
144
+ : hasAdvisoryHoldFindings
145
+ ? "findings"
146
+ : "passed";
131
147
  await postRunState(assignment, superblocksBaseUrl, logger, {
132
148
  completedAt,
133
- decision: hasBlockingFindings ? "blocked" : "allowed",
149
+ decision,
134
150
  decisionReason: hasBlockingFindings
135
151
  ? `Security agent found ${findings.filter((f) => f.blocking).length} blocking finding(s)`
136
- : "No blocking findings detected",
152
+ : hasAdvisoryHoldFindings
153
+ ? "Non-blocking findings detected"
154
+ : "No blocking findings detected",
137
155
  findings,
138
156
  findingsWriteMode: "replace",
139
157
  runtimeMetadataJson: buildPolicyGateRuntimeMetadata(assignment, result.runtimeMetadataJson),
140
158
  startedAt,
141
- status: hasBlockingFindings ? "blocked" : "passed",
159
+ status,
142
160
  });
143
- logger.info(`[policy-gate-runner] Completed run ${assignment.aiAgentRunId}: ${findings.length} findings, ${hasBlockingFindings ? "blocked" : "passed"}`);
161
+ logger.info(`[policy-gate-runner] Completed run ${assignment.aiAgentRunId}: ${findings.length} findings, ${status}`);
144
162
  }
145
163
  catch (error) {
146
164
  logger.error("[policy-gate-runner] Execution failed", getErrorMeta(error));
@@ -1 +1 @@
1
- {"version":3,"file":"policy-gate-runner.js","sourceRoot":"","sources":["../src/policy-gate-runner.ts"],"names":[],"mappings":"AAEA,OAAO,UAAU,MAAM,aAAa,CAAC;AAMrC,OAAO,EAAE,oCAAoC,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AA0B3D,MAAM,0BAA0B,GAAG;IACjC,cAAc;IACd,qBAAqB;IACrB,eAAe;IACf,uBAAuB;IACvB,kBAAkB;IAClB,MAAM;IACN,gBAAgB;IAChB,WAAW;IACX,gBAAgB;IAChB,uBAAuB;IACvB,YAAY;IACZ,SAAS;IACT,OAAO;IACP,SAAS;CACD,CAAC;AAEX,MAAM,WAAW,GAA8B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAExE,SAAS,kBAAkB,CACzB,IAAa;IAEb,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,0BAA0B,EAAE,CAAC;QAC/C,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YACxD,OAAO,EAAE,KAAK,EAAE,6BAA6B,KAAK,EAAE,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAsB,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,KAAK,EAAE,iBAAiB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,sCAAsC;SAC/E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,GAAsC,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,aAAa,GAAG,wCAAwC,CAAC;AAW/D,MAAM,UAAU,8BAA8B,CAC5C,UAAgC,EAChC,mBAA6C,EAC7C,kBAA2B;IAE3B,OAAO;QACL,mBAAmB,EAAE,UAAU,CAAC,qBAAqB;QACrD,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;QACnD,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC;QAC9B,GAAG,CAAC,kBAAkB,IAAI,EAAE,kBAAkB,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,UAAgC;IAEhC,MAAM,WAAW,GACf,OAAO,UAAU,CAAC,gBAAgB,EAAE,MAAM,KAAK,QAAQ;QACrD,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,MAAM;QACpC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,WAAW;QACX,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,6DAA6D;QAC7D,GAAG,EAAE,UAAU,CAAC,KAAK;QACrB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,cAAc,EAAE,UAAU,CAAC,cAAc;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAqB,EACrB,IAA0B;IAE1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,MAAM,CAAC,WAAW,CAAC,GAAG,CACpB,8BAA8B,EAC9B,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAClC,CAAC;IAEF,MAAM,CAAC,WAAW,CAAC,GAAG,CACpB,8BAA8B,EAC9B,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAgB,EAAE,EAAE;QAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,GAAI,GAA2C,CAAC,IAAI,CAAC;gBAC/D,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;oBAC1B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBACrD,OAAO;gBACT,CAAC;gBACD,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;gBAElC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC7B,MAAM,CAAC,KAAK,CACV,wDAAwD,CACzD,CAAC;oBACF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAC5D,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACpB,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;oBAC9D,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;oBAC/D,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,IAAI,CACT,oDAAoD,UAAU,CAAC,YAAY,EAAE,CAC9E,CAAC;gBAEF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAClD,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,UAAU,CAAC,YAAY;iBACtC,CAAC,CACH,CAAC;gBAEF,KAAK,oBAAoB,CACvB,UAAU,EACV,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,kBAAkB,EACvB,MAAM,CACP,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,gDAAgD,EAChD,YAAY,CAAC,KAAK,CAAC,CACpB,CAAC;gBACF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAgC,EAChC,SAAoB,EACpB,kBAA0B,EAC1B,MAAqE;IAErE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,8EAA8E;IAC9E,6EAA6E;IAC7E,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE;gBACzD,MAAM,EAAE,SAAS;gBACjB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CACV,uEAAuE,EACvE,YAAY,CAAC,YAAY,CAAC,CAC3B,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,yBAAyB,CACtD,+BAA+B,CAAC,UAAU,CAAC,CAC5C,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE7C,MAAM,QAAQ,GAAG,oCAAoC,CACnD,MAAM,CAAC,QAAQ,EACf,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,IAAI,CAChB,CAAC;QAEF,MAAM,mBAAmB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE7D,MAAM,YAAY,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE;YACzD,WAAW;YACX,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACrD,cAAc,EAAE,mBAAmB;gBACjC,CAAC,CAAC,wBAAwB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,sBAAsB;gBACzF,CAAC,CAAC,+BAA+B;YACnC,QAAQ;YACR,iBAAiB,EAAE,SAAS;YAC5B,mBAAmB,EAAE,8BAA8B,CACjD,UAAU,EACV,MAAM,CAAC,mBAAmB,CAC3B;YACD,SAAS;YACT,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;SACnD,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CACT,sCAAsC,UAAU,CAAC,YAAY,KAAK,QAAQ,CAAC,MAAM,cAAc,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAC5I,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAE3E,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;QACrE,MAAM,mBAAmB,GACvB,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,qBAAqB,IAAI,KAAK;YAC9B,KAAK,CAAC,mBAAmB;YACzB,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;YAC7C,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;YACvC,CAAC,CAAE,KAAK,CAAC,mBAA+C;YACxD,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,YAAY,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE;YACzD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,QAAQ,EAAE,eAAe;YACzB,SAAS,EAAE,kBAAkB;YAC7B,YAAY;YACZ,mBAAmB,EAAE,8BAA8B,CACjD,UAAU,EACV,mBAAmB,EACnB,YAAY,CACb;YACD,SAAS;YACT,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,EAAE;YACzB,MAAM,CAAC,KAAK,CACV,iDAAiD,EACjD,YAAY,CAAC,aAAa,CAAC,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAAgC,EAChC,kBAA0B,EAC1B,MAA4D,EAC5D,KAA8B;IAE9B,MAAM,WAAW,GAAG,GAAG,kBAAkB,GAAG,aAAa,EAAE,CAAC;IAE5D,MAAM,OAAO,GAAG;QACd,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;QACnD,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;QACvD,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;QACvD,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,GAAG,KAAK;KACT,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;QACxC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,UAAU,CAAC,KAAK,EAAE;YAC3C,cAAc,EAAE,kBAAkB;SACnC;QACD,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CACV,8CAA8C,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CACxE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,CAAC,IAAI,CACT,6CAA6C,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CACxG,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"policy-gate-runner.js","sourceRoot":"","sources":["../src/policy-gate-runner.ts"],"names":[],"mappings":"AAEA,OAAO,UAAU,MAAM,aAAa,CAAC;AAMrC,OAAO,EAAE,oCAAoC,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AA0B3D,MAAM,0BAA0B,GAAG;IACjC,cAAc;IACd,qBAAqB;IACrB,eAAe;IACf,uBAAuB;IACvB,kBAAkB;IAClB,MAAM;IACN,gBAAgB;IAChB,WAAW;IACX,gBAAgB;IAChB,uBAAuB;IACvB,YAAY;IACZ,SAAS;IACT,OAAO;IACP,SAAS;CACD,CAAC;AAEX,MAAM,WAAW,GAA8B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAExE,SAAS,kBAAkB,CACzB,IAAa;IAEb,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,0BAA0B,EAAE,CAAC;QAC/C,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YACxD,OAAO,EAAE,KAAK,EAAE,6BAA6B,KAAK,EAAE,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAsB,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,KAAK,EAAE,iBAAiB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,sCAAsC;SAC/E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,GAAsC,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,aAAa,GAAG,wCAAwC,CAAC;AAW/D,MAAM,UAAU,8BAA8B,CAC5C,UAAgC,EAChC,mBAA6C,EAC7C,kBAA2B;IAE3B,OAAO;QACL,mBAAmB,EAAE,UAAU,CAAC,qBAAqB;QACrD,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;QACnD,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC;QAC9B,GAAG,CAAC,kBAAkB,IAAI,EAAE,kBAAkB,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,UAAgC;IAEhC,MAAM,WAAW,GACf,OAAO,UAAU,CAAC,gBAAgB,EAAE,MAAM,KAAK,QAAQ;QACrD,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,MAAM;QACpC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,WAAW;QACX,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,6DAA6D;QAC7D,GAAG,EAAE,UAAU,CAAC,KAAK;QACrB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,cAAc,EAAE,UAAU,CAAC,cAAc;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAqB,EACrB,IAA0B;IAE1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,MAAM,CAAC,WAAW,CAAC,GAAG,CACpB,8BAA8B,EAC9B,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAClC,CAAC;IAEF,MAAM,CAAC,WAAW,CAAC,GAAG,CACpB,8BAA8B,EAC9B,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAgB,EAAE,EAAE;QAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,GAAI,GAA2C,CAAC,IAAI,CAAC;gBAC/D,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;oBAC1B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBACrD,OAAO;gBACT,CAAC;gBACD,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;gBAElC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC7B,MAAM,CAAC,KAAK,CACV,wDAAwD,CACzD,CAAC;oBACF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAC5D,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACpB,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;oBAC9D,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;oBAC/D,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,IAAI,CACT,oDAAoD,UAAU,CAAC,YAAY,EAAE,CAC9E,CAAC;gBAEF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAClD,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,UAAU,CAAC,YAAY;iBACtC,CAAC,CACH,CAAC;gBAEF,KAAK,oBAAoB,CACvB,UAAU,EACV,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,kBAAkB,EACvB,MAAM,CACP,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,gDAAgD,EAChD,YAAY,CAAC,KAAK,CAAC,CACpB,CAAC;gBACF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAgC,EAChC,SAAoB,EACpB,kBAA0B,EAC1B,MAAqE;IAErE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,8EAA8E;IAC9E,6EAA6E;IAC7E,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE;gBACzD,MAAM,EAAE,SAAS;gBACjB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CACV,uEAAuE,EACvE,YAAY,CAAC,YAAY,CAAC,CAC3B,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,yBAAyB,CACtD,+BAA+B,CAAC,UAAU,CAAC,CAC5C,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE7C,MAAM,QAAQ,GAAG,oCAAoC,CACnD,MAAM,CAAC,QAAQ,EACf,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,IAAI,CAChB,CAAC;QAEF,MAAM,mBAAmB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7D,+EAA+E;QAC/E,+EAA+E;QAC/E,gFAAgF;QAChF,MAAM,uBAAuB,GAC3B,UAAU,CAAC,IAAI,KAAK,UAAU;YAC9B,CAAC,mBAAmB;YACpB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACtB,MAAM,QAAQ,GAAG,mBAAmB;YAClC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,uBAAuB;gBACvB,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,MAAM,GAAG,mBAAmB;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,uBAAuB;gBACvB,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,QAAQ,CAAC;QAEf,MAAM,YAAY,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE;YACzD,WAAW;YACX,QAAQ;YACR,cAAc,EAAE,mBAAmB;gBACjC,CAAC,CAAC,wBAAwB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,sBAAsB;gBACzF,CAAC,CAAC,uBAAuB;oBACvB,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,+BAA+B;YACrC,QAAQ;YACR,iBAAiB,EAAE,SAAS;YAC5B,mBAAmB,EAAE,8BAA8B,CACjD,UAAU,EACV,MAAM,CAAC,mBAAmB,CAC3B;YACD,SAAS;YACT,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CACT,sCAAsC,UAAU,CAAC,YAAY,KAAK,QAAQ,CAAC,MAAM,cAAc,MAAM,EAAE,CACxG,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAE3E,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;QACrE,MAAM,mBAAmB,GACvB,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,qBAAqB,IAAI,KAAK;YAC9B,KAAK,CAAC,mBAAmB;YACzB,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;YAC7C,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;YACvC,CAAC,CAAE,KAAK,CAAC,mBAA+C;YACxD,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,YAAY,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE;YACzD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,QAAQ,EAAE,eAAe;YACzB,SAAS,EAAE,kBAAkB;YAC7B,YAAY;YACZ,mBAAmB,EAAE,8BAA8B,CACjD,UAAU,EACV,mBAAmB,EACnB,YAAY,CACb;YACD,SAAS;YACT,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,EAAE;YACzB,MAAM,CAAC,KAAK,CACV,iDAAiD,EACjD,YAAY,CAAC,aAAa,CAAC,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAAgC,EAChC,kBAA0B,EAC1B,MAA4D,EAC5D,KAA8B;IAE9B,MAAM,WAAW,GAAG,GAAG,kBAAkB,GAAG,aAAa,EAAE,CAAC;IAE5D,MAAM,OAAO,GAAG;QACd,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;QACnD,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;QACvD,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;QACvD,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,GAAG,KAAK;KACT,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;QACxC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,UAAU,CAAC,KAAK,EAAE;YAC3C,cAAc,EAAE,kBAAkB;SACnC;QACD,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CACV,8CAA8C,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CACxE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,CAAC,IAAI,CACT,6CAA6C,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CACxG,CAAC;AACJ,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@superblocksteam/vite-plugin-file-sync",
3
- "version": "2.0.149",
3
+ "version": "2.0.150-next.1",
4
4
  "keywords": [
5
5
  "vite-plugin"
6
6
  ],
@@ -117,13 +117,13 @@
117
117
  "yaml": "^2.8.3",
118
118
  "yauzl": "^3.2.0",
119
119
  "zod": "3.25.76",
120
- "@superblocksteam/clark": "2.0.149",
121
- "@superblocksteam/ai-service-templates": "2.0.149",
122
- "@superblocksteam/library-shared": "2.0.149",
123
- "@superblocksteam/shared": "0.9603.3",
124
- "@superblocksteam/sdk-api": "2.0.149",
125
- "@superblocksteam/telemetry": "2.0.149",
126
- "@superblocksteam/util": "2.0.149"
120
+ "@superblocksteam/ai-service-templates": "2.0.150-next.1",
121
+ "@superblocksteam/clark": "2.0.150-next.1",
122
+ "@superblocksteam/library-shared": "2.0.150-next.1",
123
+ "@superblocksteam/sdk-api": "2.0.150-next.1",
124
+ "@superblocksteam/shared": "0.9604.1",
125
+ "@superblocksteam/telemetry": "2.0.150-next.1",
126
+ "@superblocksteam/util": "2.0.150-next.1"
127
127
  },
128
128
  "devDependencies": {
129
129
  "@dotenvx/dotenvx": "^1.59.1",