@switchboard-mcp/core 0.1.0 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +1 -1
- package/dist/audit/audit-log.d.ts +8 -1
- package/dist/audit/audit-log.d.ts.map +1 -1
- package/dist/audit/audit-log.js +13 -4
- package/dist/audit/audit-log.js.map +1 -1
- package/dist/audit/repo-audit.d.ts +37 -0
- package/dist/audit/repo-audit.d.ts.map +1 -0
- package/dist/audit/repo-audit.js +261 -0
- package/dist/audit/repo-audit.js.map +1 -0
- package/dist/authority/authority-map.d.ts +112 -0
- package/dist/authority/authority-map.d.ts.map +1 -0
- package/dist/authority/authority-map.js +296 -0
- package/dist/authority/authority-map.js.map +1 -0
- package/dist/authority/authority-status.d.ts +24 -0
- package/dist/authority/authority-status.d.ts.map +1 -0
- package/dist/authority/authority-status.js +76 -0
- package/dist/authority/authority-status.js.map +1 -0
- package/dist/config/load-config.d.ts.map +1 -1
- package/dist/config/load-config.js +2 -1
- package/dist/config/load-config.js.map +1 -1
- package/dist/import/import-plan.d.ts +78 -3
- package/dist/import/import-plan.d.ts.map +1 -1
- package/dist/import/import-plan.js +618 -21
- package/dist/import/import-plan.js.map +1 -1
- package/dist/index.d.ts +5 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +5 -0
- package/dist/index.js.map +1 -1
- package/dist/mandates/mandates.d.ts +91 -5
- package/dist/mandates/mandates.d.ts.map +1 -1
- package/dist/mandates/mandates.js +78 -3
- package/dist/mandates/mandates.js.map +1 -1
- package/dist/manifest/route-diff.d.ts +44 -0
- package/dist/manifest/route-diff.d.ts.map +1 -0
- package/dist/manifest/route-diff.js +95 -0
- package/dist/manifest/route-diff.js.map +1 -0
- package/dist/next-actions/next-actions.d.ts +12 -0
- package/dist/next-actions/next-actions.d.ts.map +1 -0
- package/dist/next-actions/next-actions.js +40 -0
- package/dist/next-actions/next-actions.js.map +1 -0
- package/dist/providers/provider-add.js +1 -1
- package/dist/providers/provider-add.js.map +1 -1
- package/dist/providers/provider-templates.d.ts.map +1 -1
- package/dist/providers/provider-templates.js +125 -3
- package/dist/providers/provider-templates.js.map +1 -1
- package/dist/scan/scan.d.ts +7 -0
- package/dist/scan/scan.d.ts.map +1 -1
- package/dist/scan/scan.js +106 -2
- package/dist/scan/scan.js.map +1 -1
- package/dist/schemas/config.d.ts +40 -8
- package/dist/schemas/config.d.ts.map +1 -1
- package/dist/schemas/config.js +15 -1
- package/dist/schemas/config.js.map +1 -1
- package/dist/secrets/secrets.d.ts +29 -0
- package/dist/secrets/secrets.d.ts.map +1 -1
- package/dist/secrets/secrets.js +81 -0
- package/dist/secrets/secrets.js.map +1 -1
- package/package.json +5 -5
|
@@ -0,0 +1,296 @@
|
|
|
1
|
+
import { parse as parseYaml } from "yaml";
|
|
2
|
+
import * as z from "zod";
|
|
3
|
+
import { mandateApprovalGateSchema } from "../mandates/mandates.js";
|
|
4
|
+
export const authorityMapDraftSchemaVersion = "switchboard.authority-map-draft.v1";
|
|
5
|
+
const authorityMapToolEntrySchema = z.object({
|
|
6
|
+
toolName: z.string().min(1),
|
|
7
|
+
reason: z.string().min(1),
|
|
8
|
+
matchedHeuristic: z.string().min(1),
|
|
9
|
+
confidence: z.number().min(0).max(1)
|
|
10
|
+
});
|
|
11
|
+
export const authorityMapDraftSchema = z.object({
|
|
12
|
+
schemaVersion: z.literal(authorityMapDraftSchemaVersion),
|
|
13
|
+
profileName: z.string().min(1),
|
|
14
|
+
namespace: z.string().min(1),
|
|
15
|
+
generatedAt: z.string().min(1),
|
|
16
|
+
source: z.object({
|
|
17
|
+
kind: z.literal("profile-tools"),
|
|
18
|
+
toolCount: z.number().int().nonnegative()
|
|
19
|
+
}),
|
|
20
|
+
groups: z.object({
|
|
21
|
+
allowed: z.array(authorityMapToolEntrySchema).default([]),
|
|
22
|
+
approvalRequired: z.array(authorityMapToolEntrySchema).default([]),
|
|
23
|
+
denied: z.array(authorityMapToolEntrySchema).default([]),
|
|
24
|
+
review: z.array(authorityMapToolEntrySchema).default([])
|
|
25
|
+
}),
|
|
26
|
+
counts: z
|
|
27
|
+
.object({
|
|
28
|
+
tools: z.number().int().nonnegative(),
|
|
29
|
+
allowed: z.number().int().nonnegative(),
|
|
30
|
+
approvalRequired: z.number().int().nonnegative(),
|
|
31
|
+
denied: z.number().int().nonnegative(),
|
|
32
|
+
review: z.number().int().nonnegative()
|
|
33
|
+
})
|
|
34
|
+
.optional(),
|
|
35
|
+
suggestedMandatePolicy: z.object({
|
|
36
|
+
allowedTools: z.array(z.string()).optional(),
|
|
37
|
+
deniedTools: z.array(z.string()).optional(),
|
|
38
|
+
approvalGates: z.array(mandateApprovalGateSchema).optional()
|
|
39
|
+
}),
|
|
40
|
+
needsHumanReview: z.boolean().default(false),
|
|
41
|
+
warnings: z.array(z.string()).default([]),
|
|
42
|
+
nextActions: z.array(z.string()).default([])
|
|
43
|
+
});
|
|
44
|
+
const deniedPattern = /(^|_)(prod|production|live|admin|root|service_role|service|secret|token|key|credential|billing|domain|delete|drop|truncate|destroy|remove|revoke|grant|payout|transfer|treasury|terminal|issuing)(_|$)/;
|
|
45
|
+
const approvalPattern = /(^|_)(create|update|write|execute|run|apply|deploy|rerun|comment|refund|migrate|migration|insert|upsert|set|cancel|rollback|merge|push|capture|confirm|approve|deny|promote|publish)(_|$)/;
|
|
46
|
+
const allowedPattern = /(^|_)(read|list|get|inspect|search|log|logs|status|show|fetch|query|select|describe|find|check|checks|whoami|echo)(_|$)/;
|
|
47
|
+
export function draftAuthorityMap(options) {
|
|
48
|
+
const groups = {
|
|
49
|
+
allowed: [],
|
|
50
|
+
approvalRequired: [],
|
|
51
|
+
denied: [],
|
|
52
|
+
review: []
|
|
53
|
+
};
|
|
54
|
+
for (const toolName of uniqueSorted(options.toolNames)) {
|
|
55
|
+
const classification = classifyAuthorityMapTool(toolName);
|
|
56
|
+
groups[classification.group].push({
|
|
57
|
+
toolName,
|
|
58
|
+
reason: classification.reason,
|
|
59
|
+
matchedHeuristic: classification.matchedHeuristic,
|
|
60
|
+
confidence: classification.confidence
|
|
61
|
+
});
|
|
62
|
+
}
|
|
63
|
+
const counts = countAuthorityMapGroups(groups);
|
|
64
|
+
const warnings = authorityMapWarnings(groups);
|
|
65
|
+
const needsHumanReview = groups.review.length > 0 || warnings.length > 0;
|
|
66
|
+
return {
|
|
67
|
+
schemaVersion: authorityMapDraftSchemaVersion,
|
|
68
|
+
profileName: options.profileName,
|
|
69
|
+
namespace: options.namespace,
|
|
70
|
+
generatedAt: (options.generatedAt ?? new Date()).toISOString(),
|
|
71
|
+
source: {
|
|
72
|
+
kind: "profile-tools",
|
|
73
|
+
toolCount: counts.tools
|
|
74
|
+
},
|
|
75
|
+
groups,
|
|
76
|
+
counts,
|
|
77
|
+
suggestedMandatePolicy: suggestedMandatePolicy(groups),
|
|
78
|
+
needsHumanReview,
|
|
79
|
+
warnings,
|
|
80
|
+
nextActions: [
|
|
81
|
+
`Review denied and review tools before unattended agent use.`,
|
|
82
|
+
`Run switchboard authority draft --profile ${options.profileName} --json for the machine-readable map.`,
|
|
83
|
+
`Use the suggested mandate policy only after human review.`
|
|
84
|
+
]
|
|
85
|
+
};
|
|
86
|
+
}
|
|
87
|
+
export function parseAuthorityMapDraft(content) {
|
|
88
|
+
const parsedInput = parseYaml(content);
|
|
89
|
+
const parsed = authorityMapDraftSchema.parse(parsedInput);
|
|
90
|
+
const groups = {
|
|
91
|
+
allowed: parsed.groups.allowed,
|
|
92
|
+
approvalRequired: parsed.groups.approvalRequired,
|
|
93
|
+
denied: parsed.groups.denied,
|
|
94
|
+
review: parsed.groups.review
|
|
95
|
+
};
|
|
96
|
+
const counts = countAuthorityMapGroups(groups);
|
|
97
|
+
return {
|
|
98
|
+
schemaVersion: parsed.schemaVersion,
|
|
99
|
+
profileName: parsed.profileName,
|
|
100
|
+
namespace: parsed.namespace,
|
|
101
|
+
generatedAt: parsed.generatedAt,
|
|
102
|
+
source: parsed.source,
|
|
103
|
+
groups,
|
|
104
|
+
counts,
|
|
105
|
+
suggestedMandatePolicy: parsed.suggestedMandatePolicy,
|
|
106
|
+
needsHumanReview: parsed.needsHumanReview,
|
|
107
|
+
warnings: parsed.warnings,
|
|
108
|
+
nextActions: parsed.nextActions
|
|
109
|
+
};
|
|
110
|
+
}
|
|
111
|
+
export function checkAuthorityMapDraft(draft) {
|
|
112
|
+
const groups = draft.groups;
|
|
113
|
+
const counts = countAuthorityMapGroups(groups);
|
|
114
|
+
const warnings = [...draft.warnings];
|
|
115
|
+
const errors = [];
|
|
116
|
+
const seenGroups = new Map();
|
|
117
|
+
for (const group of authorityMapGroupNames()) {
|
|
118
|
+
for (const tool of groups[group]) {
|
|
119
|
+
const toolGroups = seenGroups.get(tool.toolName) ?? [];
|
|
120
|
+
toolGroups.push(group);
|
|
121
|
+
seenGroups.set(tool.toolName, toolGroups);
|
|
122
|
+
if (!tool.toolName.startsWith(`${draft.namespace}_`)) {
|
|
123
|
+
errors.push(`tool "${tool.toolName}" does not belong to namespace "${draft.namespace}"`);
|
|
124
|
+
}
|
|
125
|
+
}
|
|
126
|
+
}
|
|
127
|
+
for (const [toolName, toolGroups] of seenGroups) {
|
|
128
|
+
if (toolGroups.length > 1) {
|
|
129
|
+
errors.push(`tool "${toolName}" appears in multiple groups: ${toolGroups.join(", ")}`);
|
|
130
|
+
}
|
|
131
|
+
}
|
|
132
|
+
const expectedPolicy = suggestedMandatePolicy(groups);
|
|
133
|
+
const policyErrors = compareSuggestedPolicy(draft.suggestedMandatePolicy, expectedPolicy, draft.namespace);
|
|
134
|
+
errors.push(...policyErrors);
|
|
135
|
+
if (groups.review.length > 0) {
|
|
136
|
+
warnings.push(`${groups.review.length} tool(s) still need review.`);
|
|
137
|
+
}
|
|
138
|
+
for (const tool of groups.allowed) {
|
|
139
|
+
if (classifyAuthorityMapTool(tool.toolName).group !== "allowed") {
|
|
140
|
+
warnings.push(`allowed tool "${tool.toolName}" looks sensitive; move it to approvalRequired, denied, or review.`);
|
|
141
|
+
}
|
|
142
|
+
}
|
|
143
|
+
const uniqueWarnings = uniqueStrings(warnings);
|
|
144
|
+
return {
|
|
145
|
+
ok: errors.length === 0,
|
|
146
|
+
schemaVersion: "switchboard.authority-map-check.v1",
|
|
147
|
+
mapSchemaVersion: draft.schemaVersion,
|
|
148
|
+
profileName: draft.profileName,
|
|
149
|
+
namespace: draft.namespace,
|
|
150
|
+
counts,
|
|
151
|
+
warnings: uniqueWarnings,
|
|
152
|
+
errors,
|
|
153
|
+
needsHumanReview: draft.needsHumanReview || uniqueWarnings.length > 0,
|
|
154
|
+
nextActions: [
|
|
155
|
+
...(errors.length > 0
|
|
156
|
+
? ["Fix authority map errors before using the policy in a mandate."]
|
|
157
|
+
: []),
|
|
158
|
+
...(uniqueWarnings.length > 0
|
|
159
|
+
? ["Review warnings before unattended agent use."]
|
|
160
|
+
: []),
|
|
161
|
+
...(errors.length === 0
|
|
162
|
+
? ["Use suggestedMandatePolicy as the reviewed mandate policy input."]
|
|
163
|
+
: [])
|
|
164
|
+
]
|
|
165
|
+
};
|
|
166
|
+
}
|
|
167
|
+
function classifyAuthorityMapTool(toolName) {
|
|
168
|
+
const normalized = normalizeToolName(toolName);
|
|
169
|
+
if (deniedPattern.test(normalized)) {
|
|
170
|
+
return {
|
|
171
|
+
group: "denied",
|
|
172
|
+
reason: "tool name looks production, admin, secret, token, destructive, billing, or privileged",
|
|
173
|
+
matchedHeuristic: "deny-risk-keyword",
|
|
174
|
+
confidence: 0.9
|
|
175
|
+
};
|
|
176
|
+
}
|
|
177
|
+
if (approvalPattern.test(normalized)) {
|
|
178
|
+
return {
|
|
179
|
+
group: "approvalRequired",
|
|
180
|
+
reason: "tool name looks write-like or state-changing",
|
|
181
|
+
matchedHeuristic: "approval-write-keyword",
|
|
182
|
+
confidence: 0.78
|
|
183
|
+
};
|
|
184
|
+
}
|
|
185
|
+
if (allowedPattern.test(normalized)) {
|
|
186
|
+
return {
|
|
187
|
+
group: "allowed",
|
|
188
|
+
reason: "tool name looks read-only or inspection-oriented",
|
|
189
|
+
matchedHeuristic: "allow-read-keyword",
|
|
190
|
+
confidence: 0.72
|
|
191
|
+
};
|
|
192
|
+
}
|
|
193
|
+
return {
|
|
194
|
+
group: "review",
|
|
195
|
+
reason: "tool name does not match a deterministic V0 authority heuristic",
|
|
196
|
+
matchedHeuristic: "unknown-review",
|
|
197
|
+
confidence: 0.35
|
|
198
|
+
};
|
|
199
|
+
}
|
|
200
|
+
function suggestedMandatePolicy(groups) {
|
|
201
|
+
return {
|
|
202
|
+
allowedTools: groups.allowed.map((tool) => tool.toolName),
|
|
203
|
+
deniedTools: [
|
|
204
|
+
...groups.denied.map((tool) => tool.toolName),
|
|
205
|
+
...groups.review.map((tool) => tool.toolName)
|
|
206
|
+
],
|
|
207
|
+
approvalGates: groups.approvalRequired.map((tool, index) => ({
|
|
208
|
+
id: `authority-map-gate-${index + 1}`,
|
|
209
|
+
toolPattern: tool.toolName,
|
|
210
|
+
reason: tool.reason,
|
|
211
|
+
risk: "medium",
|
|
212
|
+
labels: ["authority-map", "agent-drafted"]
|
|
213
|
+
}))
|
|
214
|
+
};
|
|
215
|
+
}
|
|
216
|
+
function compareSuggestedPolicy(actual, expected, namespace) {
|
|
217
|
+
const errors = [];
|
|
218
|
+
const actualAllowed = uniqueSorted(actual.allowedTools ?? []);
|
|
219
|
+
const actualDenied = uniqueSorted(actual.deniedTools ?? []);
|
|
220
|
+
const expectedAllowed = uniqueSorted(expected.allowedTools ?? []);
|
|
221
|
+
const expectedDenied = uniqueSorted(expected.deniedTools ?? []);
|
|
222
|
+
for (const pattern of [...actualAllowed, ...actualDenied]) {
|
|
223
|
+
if (pattern.includes("*")) {
|
|
224
|
+
errors.push(`suggestedMandatePolicy pattern "${pattern}" uses a wildcard; V0 authority maps must use exact discovered tools`);
|
|
225
|
+
}
|
|
226
|
+
if (!pattern.startsWith(`${namespace}_`)) {
|
|
227
|
+
errors.push(`suggestedMandatePolicy pattern "${pattern}" does not belong to namespace "${namespace}"`);
|
|
228
|
+
}
|
|
229
|
+
}
|
|
230
|
+
if (!sameStringArray(actualAllowed, expectedAllowed)) {
|
|
231
|
+
errors.push("suggestedMandatePolicy.allowedTools does not match allowed group tools");
|
|
232
|
+
}
|
|
233
|
+
if (!sameStringArray(actualDenied, expectedDenied)) {
|
|
234
|
+
errors.push("suggestedMandatePolicy.deniedTools does not match denied + review group tools");
|
|
235
|
+
}
|
|
236
|
+
const actualGates = normalizeGateSummaries(actual.approvalGates ?? []);
|
|
237
|
+
const expectedGates = normalizeGateSummaries(expected.approvalGates ?? []);
|
|
238
|
+
if (!sameStringArray(actualGates, expectedGates)) {
|
|
239
|
+
errors.push("suggestedMandatePolicy.approvalGates does not match approvalRequired group tools");
|
|
240
|
+
}
|
|
241
|
+
return uniqueStrings(errors);
|
|
242
|
+
}
|
|
243
|
+
function normalizeGateSummaries(gates) {
|
|
244
|
+
return gates
|
|
245
|
+
.map((gate) => [
|
|
246
|
+
gate.toolPattern,
|
|
247
|
+
gate.reason ?? "",
|
|
248
|
+
gate.risk ?? "",
|
|
249
|
+
gate.labels?.join(",") ?? ""
|
|
250
|
+
].join("|"))
|
|
251
|
+
.sort();
|
|
252
|
+
}
|
|
253
|
+
function sameStringArray(left, right) {
|
|
254
|
+
return left.length === right.length &&
|
|
255
|
+
left.every((value, index) => value === right[index]);
|
|
256
|
+
}
|
|
257
|
+
function authorityMapWarnings(groups) {
|
|
258
|
+
return [
|
|
259
|
+
...(groups.review.length > 0
|
|
260
|
+
? [`${groups.review.length} tool(s) could not be classified deterministically.`]
|
|
261
|
+
: []),
|
|
262
|
+
...(groups.approvalRequired.length > 0
|
|
263
|
+
? [
|
|
264
|
+
`${groups.approvalRequired.length} tool(s) change state and should stay approval-gated.`
|
|
265
|
+
]
|
|
266
|
+
: [])
|
|
267
|
+
];
|
|
268
|
+
}
|
|
269
|
+
function countAuthorityMapGroups(groups) {
|
|
270
|
+
return {
|
|
271
|
+
tools: groups.allowed.length +
|
|
272
|
+
groups.approvalRequired.length +
|
|
273
|
+
groups.denied.length +
|
|
274
|
+
groups.review.length,
|
|
275
|
+
allowed: groups.allowed.length,
|
|
276
|
+
approvalRequired: groups.approvalRequired.length,
|
|
277
|
+
denied: groups.denied.length,
|
|
278
|
+
review: groups.review.length
|
|
279
|
+
};
|
|
280
|
+
}
|
|
281
|
+
function authorityMapGroupNames() {
|
|
282
|
+
return ["allowed", "approvalRequired", "denied", "review"];
|
|
283
|
+
}
|
|
284
|
+
function normalizeToolName(toolName) {
|
|
285
|
+
return toolName
|
|
286
|
+
.replace(/([a-z0-9])([A-Z])/g, "$1_$2")
|
|
287
|
+
.replace(/[^A-Za-z0-9]+/g, "_")
|
|
288
|
+
.toLowerCase();
|
|
289
|
+
}
|
|
290
|
+
function uniqueSorted(values) {
|
|
291
|
+
return [...new Set(values.map((value) => value.trim()).filter(Boolean))].sort();
|
|
292
|
+
}
|
|
293
|
+
function uniqueStrings(values) {
|
|
294
|
+
return [...new Set(values)];
|
|
295
|
+
}
|
|
296
|
+
//# sourceMappingURL=authority-map.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authority-map.js","sourceRoot":"","sources":["../../src/authority/authority-map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EACL,yBAAyB,EAG1B,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,8BAA8B,GACzC,oCAA6C,CAAC;AAoDhD,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KAC1C,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACzD,CAAC;IACF,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACvC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KACvC,CAAC;SACD,QAAQ,EAAE;IACb,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC/B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC5C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC3C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;KAC7D,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,aAAa,GACjB,wMAAwM,CAAC;AAC3M,MAAM,eAAe,GACnB,2LAA2L,CAAC;AAC9L,MAAM,cAAc,GAClB,yHAAyH,CAAC;AAE5H,MAAM,UAAU,iBAAiB,CAC/B,OAAiC;IAEjC,MAAM,MAAM,GAAgC;QAC1C,OAAO,EAAE,EAAE;QACX,gBAAgB,EAAE,EAAE;QACpB,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,cAAc,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;YAChC,QAAQ;YACR,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;YACjD,UAAU,EAAE,cAAc,CAAC,UAAU;SACtC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAEzE,OAAO;QACL,aAAa,EAAE,8BAA8B;QAC7C,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QAC9D,MAAM,EAAE;YACN,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,MAAM,CAAC,KAAK;SACxB;QACD,MAAM;QACN,MAAM;QACN,sBAAsB,EAAE,sBAAsB,CAAC,MAAM,CAAC;QACtD,gBAAgB;QAChB,QAAQ;QACR,WAAW,EAAE;YACX,6DAA6D;YAC7D,6CAA6C,OAAO,CAAC,WAAW,uCAAuC;YACvG,2DAA2D;SAC5D;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;KAC7B,CAAC;IACF,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM;QACN,MAAM;QACN,sBAAsB,EAAE,MAAM,CAAC,sBAA2C;QAC1E,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAwB;IAExB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE1D,KAAK,MAAM,KAAK,IAAI,sBAAsB,EAAE,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAE1C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CACT,SAAS,IAAI,CAAC,QAAQ,mCAAmC,KAAK,CAAC,SAAS,GAAG,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,UAAU,EAAE,CAAC;QAChD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CACT,SAAS,QAAQ,iCAAiC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,sBAAsB,CACzC,KAAK,CAAC,sBAAsB,EAC5B,cAAc,EACd,KAAK,CAAC,SAAS,CAChB,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;IAE7B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,6BAA6B,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChE,QAAQ,CAAC,IAAI,CACX,iBAAiB,IAAI,CAAC,QAAQ,oEAAoE,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,aAAa,EAAE,oCAAoC;QACnD,gBAAgB,EAAE,KAAK,CAAC,aAAa;QACrC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM;QACN,QAAQ,EAAE,cAAc;QACxB,MAAM;QACN,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QACrE,WAAW,EAAE;YACX,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBACnB,CAAC,CAAC,CAAC,gEAAgE,CAAC;gBACpE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;gBAC3B,CAAC,CAAC,CAAC,8CAA8C,CAAC;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBACrB,CAAC,CAAC,CAAC,kEAAkE,CAAC;gBACtE,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB;IAMhD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,MAAM,EACJ,uFAAuF;YACzF,gBAAgB,EAAE,mBAAmB;YACrC,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,8CAA8C;YACtD,gBAAgB,EAAE,wBAAwB;YAC1C,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,kDAAkD;YAC1D,gBAAgB,EAAE,oBAAoB;YACtC,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,iEAAiE;QACzE,gBAAgB,EAAE,gBAAgB;QAClC,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAmC;IAEnC,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QACzD,WAAW,EAAE;YACX,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC7C,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC9C;QACD,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CACxC,CAAC,IAAI,EAAE,KAAK,EAAuB,EAAE,CAAC,CAAC;YACrC,EAAE,EAAE,sBAAsB,KAAK,GAAG,CAAC,EAAE;YACrC,WAAW,EAAE,IAAI,CAAC,QAAQ;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;SAC3C,CAAC,CACH;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAyB,EACzB,QAA2B,EAC3B,SAAiB;IAEjB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAEhE,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CACT,mCAAmC,OAAO,sEAAsE,CACjH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,mCAAmC,OAAO,mCAAmC,SAAS,GAAG,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,sBAAsB,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CACT,kFAAkF,CACnF,CAAC;IACJ,CAAC;IAED,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA4B;IAC1D,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ;QACE,IAAI,CAAC,WAAW;QAChB,IAAI,CAAC,MAAM,IAAI,EAAE;QACjB,IAAI,CAAC,IAAI,IAAI,EAAE;QACf,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;KAC7B,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ;SACA,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,IAAc,EAAE,KAAe;IACtD,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QACjC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAmC;IAC/D,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,qDAAqD,CAAC;YAChF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;YACpC,CAAC,CAAC;gBACE,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,uDAAuD;aACzF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAAmC;IAEnC,OAAO;QACL,KAAK,EACH,MAAM,CAAC,OAAO,CAAC,MAAM;YACrB,MAAM,CAAC,gBAAgB,CAAC,MAAM;YAC9B,MAAM,CAAC,MAAM,CAAC,MAAM;YACpB,MAAM,CAAC,MAAM,CAAC,MAAM;QACtB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;QAC9B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO,CAAC,SAAS,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,QAAQ;SACZ,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,MAAgB;IACpC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,MAAgB;IACrC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
import type { BypassFinding, CommandShape, RiskFinding } from "../import/import-plan.js";
|
|
2
|
+
import type { RecommendedNextAction } from "../next-actions/next-actions.js";
|
|
3
|
+
export type AuthorityControlStatus = "controlled" | "partial-control" | "bypass-present" | "invalid";
|
|
4
|
+
export interface AuthorityStatus {
|
|
5
|
+
status: AuthorityControlStatus;
|
|
6
|
+
summary: string;
|
|
7
|
+
blockers: string[];
|
|
8
|
+
findings: string[];
|
|
9
|
+
recommendedAction: CommandShape | null;
|
|
10
|
+
}
|
|
11
|
+
export interface PlanAuthorityStatusOptions {
|
|
12
|
+
diagnostics?: Array<{
|
|
13
|
+
level: string;
|
|
14
|
+
}>;
|
|
15
|
+
invalidClientConfigs?: boolean;
|
|
16
|
+
bypassFindings?: BypassFinding[];
|
|
17
|
+
riskFindings?: RiskFinding[];
|
|
18
|
+
missingSecrets?: Array<unknown>;
|
|
19
|
+
switchboardConfigured?: boolean;
|
|
20
|
+
switchboardInstalled?: boolean;
|
|
21
|
+
recommendedNextAction?: RecommendedNextAction;
|
|
22
|
+
}
|
|
23
|
+
export declare function planAuthorityStatus(options: PlanAuthorityStatusOptions): AuthorityStatus;
|
|
24
|
+
//# sourceMappingURL=authority-status.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authority-status.d.ts","sourceRoot":"","sources":["../../src/authority/authority-status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACZ,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAE7E,MAAM,MAAM,sBAAsB,GAC9B,YAAY,GACZ,iBAAiB,GACjB,gBAAgB,GAChB,SAAS,CAAC;AAEd,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,EAAE,YAAY,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,0BAA0B,GAClC,eAAe,CAgFjB"}
|
|
@@ -0,0 +1,76 @@
|
|
|
1
|
+
export function planAuthorityStatus(options) {
|
|
2
|
+
const diagnosticsInvalid = options.diagnostics?.some((diagnostic) => diagnostic.level === "error") ??
|
|
3
|
+
false;
|
|
4
|
+
if (diagnosticsInvalid || options.invalidClientConfigs) {
|
|
5
|
+
return {
|
|
6
|
+
status: "invalid",
|
|
7
|
+
summary: "Switchboard cannot assess authority until config parsing errors are fixed.",
|
|
8
|
+
blockers: [
|
|
9
|
+
...(diagnosticsInvalid ? ["switchboard-config-invalid"] : []),
|
|
10
|
+
...(options.invalidClientConfigs ? ["client-config-invalid"] : [])
|
|
11
|
+
],
|
|
12
|
+
findings: [],
|
|
13
|
+
recommendedAction: recommendedActionCommand(options)
|
|
14
|
+
};
|
|
15
|
+
}
|
|
16
|
+
const bypassFindings = options.bypassFindings ?? [];
|
|
17
|
+
const unacceptedBypasses = bypassFindings.filter((finding) => finding.status !== "accepted");
|
|
18
|
+
const acceptedBypasses = bypassFindings.filter((finding) => finding.status === "accepted");
|
|
19
|
+
const highRiskFindings = (options.riskFindings ?? []).filter((finding) => finding.severity === "high" || finding.severity === "critical");
|
|
20
|
+
if (unacceptedBypasses.length > 0 || highRiskFindings.length > 0) {
|
|
21
|
+
return {
|
|
22
|
+
status: "bypass-present",
|
|
23
|
+
summary: "Direct or high-risk tool access can bypass Switchboard authority.",
|
|
24
|
+
blockers: [
|
|
25
|
+
...unacceptedBypasses.map((finding) => finding.id),
|
|
26
|
+
...highRiskFindings.map((finding) => finding.id)
|
|
27
|
+
],
|
|
28
|
+
findings: [
|
|
29
|
+
...bypassFindings.map((finding) => finding.id),
|
|
30
|
+
...(options.riskFindings ?? []).map((finding) => finding.id)
|
|
31
|
+
],
|
|
32
|
+
recommendedAction: unacceptedBypasses.length > 0
|
|
33
|
+
? {
|
|
34
|
+
command: "switchboard",
|
|
35
|
+
args: ["import", "--write", "--cleanup-client"]
|
|
36
|
+
}
|
|
37
|
+
: recommendedActionCommand(options)
|
|
38
|
+
};
|
|
39
|
+
}
|
|
40
|
+
if (acceptedBypasses.length > 0 ||
|
|
41
|
+
(options.riskFindings ?? []).length > 0 ||
|
|
42
|
+
(options.missingSecrets?.length ?? 0) > 0 ||
|
|
43
|
+
!options.switchboardConfigured ||
|
|
44
|
+
!options.switchboardInstalled) {
|
|
45
|
+
return {
|
|
46
|
+
status: "partial-control",
|
|
47
|
+
summary: "Switchboard has some authority for this repo, but setup or accepted risk remains.",
|
|
48
|
+
blockers: [],
|
|
49
|
+
findings: [
|
|
50
|
+
...bypassFindings.map((finding) => finding.id),
|
|
51
|
+
...(options.riskFindings ?? []).map((finding) => finding.id)
|
|
52
|
+
],
|
|
53
|
+
recommendedAction: recommendedActionCommand(options)
|
|
54
|
+
};
|
|
55
|
+
}
|
|
56
|
+
return {
|
|
57
|
+
status: "controlled",
|
|
58
|
+
summary: "Switchboard appears to be the active project authority route for detected agent tools.",
|
|
59
|
+
blockers: [],
|
|
60
|
+
findings: [],
|
|
61
|
+
recommendedAction: recommendedActionCommand(options)
|
|
62
|
+
};
|
|
63
|
+
}
|
|
64
|
+
function recommendedActionCommand(options) {
|
|
65
|
+
const command = options.recommendedNextAction?.primary?.command;
|
|
66
|
+
if (!command) {
|
|
67
|
+
return null;
|
|
68
|
+
}
|
|
69
|
+
return command.startsWith("switchboard ")
|
|
70
|
+
? {
|
|
71
|
+
command: "switchboard",
|
|
72
|
+
args: command.slice("switchboard ".length).split(" ").filter(Boolean)
|
|
73
|
+
}
|
|
74
|
+
: { command, args: [] };
|
|
75
|
+
}
|
|
76
|
+
//# sourceMappingURL=authority-status.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authority-status.js","sourceRoot":"","sources":["../../src/authority/authority-status.ts"],"names":[],"mappings":"AAgCA,MAAM,UAAU,mBAAmB,CACjC,OAAmC;IAEnC,MAAM,kBAAkB,GACtB,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC;QACvE,KAAK,CAAC;IACR,IAAI,kBAAkB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACvD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EACL,4EAA4E;YAC9E,QAAQ,EAAE;gBACR,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE;YACD,QAAQ,EAAE,EAAE;YACZ,iBAAiB,EAAE,wBAAwB,CAAC,OAAO,CAAC;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;IACpD,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAC9C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAC3C,CAAC;IACF,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAC5C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAC3C,CAAC;IACF,MAAM,gBAAgB,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAC1D,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,CAC5E,CAAC;IAEF,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,OAAO,EACL,mEAAmE;YACrE,QAAQ,EAAE;gBACR,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClD,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;aACjD;YACD,QAAQ,EAAE;gBACR,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;aAC7D;YACD,iBAAiB,EACf,kBAAkB,CAAC,MAAM,GAAG,CAAC;gBAC3B,CAAC,CAAC;oBACE,OAAO,EAAE,aAAa;oBACtB,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,kBAAkB,CAAC;iBAChD;gBACH,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;IAED,IACE,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC3B,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QACvC,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QACzC,CAAC,OAAO,CAAC,qBAAqB;QAC9B,CAAC,OAAO,CAAC,oBAAoB,EAC7B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,iBAAiB;YACzB,OAAO,EACL,mFAAmF;YACrF,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE;gBACR,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;aAC7D;YACD,iBAAiB,EAAE,wBAAwB,CAAC,OAAO,CAAC;SACrD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,OAAO,EACL,wFAAwF;QAC1F,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,iBAAiB,EAAE,wBAAwB,CAAC,OAAO,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAAmC;IAEnC,MAAM,OAAO,GAAG,OAAO,CAAC,qBAAqB,EAAE,OAAO,EAAE,OAAO,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;QACvC,CAAC,CAAC;YACE,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SACtE;QACH,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAC5B,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"load-config.d.ts","sourceRoot":"","sources":["../../src/config/load-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,gBAAgB,GACxB,UAAU,GACV,QAAQ,GACR,MAAM,GACN,YAAY,GACZ,aAAa,GACb,KAAK,CAAC;AAEV,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAkB,SAAQ,qBAAqB;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,mBAAmB,EAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC;CACnE;
|
|
1
|
+
{"version":3,"file":"load-config.d.ts","sourceRoot":"","sources":["../../src/config/load-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,gBAAgB,GACxB,UAAU,GACV,QAAQ,GACR,MAAM,GACN,YAAY,GACZ,aAAa,GACb,KAAK,CAAC;AAEV,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAkB,SAAQ,qBAAqB;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,mBAAmB,EAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC;CACnE;AAgBD,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,iBAAsB,GAC9B,YAAY,CAuFd;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUzB;AAED,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"load-config.js","sourceRoot":"","sources":["../../src/config/load-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAEL,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAkCpB,MAAM,aAAa,GAAsB;IACvC,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE;QACR,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,cAAc,EAAE,oBAAoB;KACrC;IACD,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE,EAAE;
|
|
1
|
+
{"version":3,"file":"load-config.js","sourceRoot":"","sources":["../../src/config/load-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAEL,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAkCpB,MAAM,aAAa,GAAsB;IACvC,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE;QACR,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,cAAc,EAAE,oBAAoB;KACrC;IACD,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;CACjC,CAAC;AAEF,MAAM,UAAU,qBAAqB,CACnC,UAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,UAAU,GAA8B,CAAC,aAAa,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAElD,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrC,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;QAC7B,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,SAAS,CAAC,mBAAmB,EAAE,CAAC;QAClC,cAAc,CAAC,YAAY,EAAE,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;IACjF,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE3B,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;IACzE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE3B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAC9B,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,EAC3C,EAAE,CACH,CAAC;IAEF,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,WAAW,CAAC,IAAI,CAAC;gBACf,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,OAAO;YACP,WAAW;YACX,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5E,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC5C,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,cAAc,SAAS,CAAC,SAAS,0BAA0B,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACpG,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,OAAO;QACP,WAAW;QACX,mBAAmB;KACpB,CAAC;IAEF,SAAS,cAAc,CAAC,IAAsB,EAAE,IAAY;QAC1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACjE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,IAAI,CAAC;gBACf,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE,IAAI;gBACZ,IAAI;gBACJ,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAAsB;IAEtB,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,GAAG,CAAC,+BAA+B,EAAE,CAAC;QACxC,QAAQ,CAAC,kBAAkB,GAAG,GAAG,CAAC,+BAA+B,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,CAAC,0BAA0B,EAAE,CAAC;QACnC,QAAQ,CAAC,aAAa,GAAG,GAAG,CAAC,0BAA0B,CAAC;IAC1D,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAA6B,EAC7B,QAAiC;IAEjC,MAAM,MAAM,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IAEpD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CACrB,KAAc,EACd,IAAY,EACZ,IAAsB,EACtB,WAA+B;IAE/B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,IAAI;YACZ,IAAI;YACJ,OAAO,EAAE,qCAAqC;SAC/C,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CACtB,CAAC;AACJ,CAAC"}
|
|
@@ -1,9 +1,16 @@
|
|
|
1
|
+
import { type AuthorityStatus } from "../authority/authority-status.js";
|
|
1
2
|
import type { SupportedClient } from "../install/client-config.js";
|
|
3
|
+
import { type RecommendedNextAction } from "../next-actions/next-actions.js";
|
|
2
4
|
import type { ScanProviderId } from "../scan/scan.js";
|
|
3
5
|
export declare const importPlanSchemaVersion = "switchboard.import-plan.v1";
|
|
4
6
|
export type ImportPlanActionKind = "create-profile" | "store-secret" | "install-client" | "review-existing-profile";
|
|
5
7
|
export interface SwitchboardImportPlanOptions {
|
|
6
8
|
cwd?: string;
|
|
9
|
+
env?: NodeJS.ProcessEnv;
|
|
10
|
+
homeDir?: string;
|
|
11
|
+
cleanupClient?: boolean;
|
|
12
|
+
acceptDirect?: string[];
|
|
13
|
+
now?: Date;
|
|
7
14
|
}
|
|
8
15
|
export interface SwitchboardImportPlan {
|
|
9
16
|
ok: true;
|
|
@@ -18,15 +25,21 @@ export interface SwitchboardImportPlan {
|
|
|
18
25
|
switchboardProfiles: ImportSwitchboardProfile[];
|
|
19
26
|
envFiles: ImportEnvFileDetection[];
|
|
20
27
|
};
|
|
28
|
+
riskFindings: RiskFinding[];
|
|
29
|
+
bypassFindings: BypassFinding[];
|
|
30
|
+
authorityStatus: AuthorityStatus;
|
|
31
|
+
cleanupPlan: ImportClientCleanupPlan[];
|
|
21
32
|
actions: ImportPlanAction[];
|
|
22
33
|
commands: {
|
|
23
34
|
dryRun: CommandShape;
|
|
24
35
|
writePreview: CommandShape;
|
|
36
|
+
cleanupClient: CommandShape;
|
|
25
37
|
installClients: CommandShape[];
|
|
26
38
|
secretCommands: CommandShape[];
|
|
27
39
|
};
|
|
28
40
|
warnings: string[];
|
|
29
41
|
safetyNotes: string[];
|
|
42
|
+
recommendedNextAction: RecommendedNextAction;
|
|
30
43
|
nextActions: string[];
|
|
31
44
|
}
|
|
32
45
|
export interface WrittenSwitchboardImportPlan {
|
|
@@ -37,6 +50,7 @@ export interface WrittenSwitchboardImportPlan {
|
|
|
37
50
|
backupPath: string | null;
|
|
38
51
|
plan: SwitchboardImportPlan;
|
|
39
52
|
createdProfiles: string[];
|
|
53
|
+
clientCleanup: WrittenImportClientCleanup[];
|
|
40
54
|
nextContent: string | null;
|
|
41
55
|
}
|
|
42
56
|
export interface CommandShape {
|
|
@@ -64,6 +78,57 @@ export interface ImportDetectedServer {
|
|
|
64
78
|
ref: string;
|
|
65
79
|
}>;
|
|
66
80
|
}
|
|
81
|
+
export type BypassRiskTag = "direct-mcp-server" | "switchboard-coexists" | "provider-overlap" | "secret-env-name" | "token-like-arg" | "broad-filesystem-mount";
|
|
82
|
+
export type RiskFindingKind = "secret_env_hint" | "prod_env_hint" | "live_payment_key_hint" | "database_write_surface" | "provider_admin_surface" | "duplicate_provider_route";
|
|
83
|
+
export type RiskFindingSeverity = "info" | "medium" | "high" | "critical";
|
|
84
|
+
export interface RiskFinding {
|
|
85
|
+
id: string;
|
|
86
|
+
kind: RiskFindingKind;
|
|
87
|
+
severity: RiskFindingSeverity;
|
|
88
|
+
provider: ScanProviderId | "unknown";
|
|
89
|
+
source: {
|
|
90
|
+
kind: "env-file" | "client-config";
|
|
91
|
+
path: string;
|
|
92
|
+
detail?: string;
|
|
93
|
+
};
|
|
94
|
+
evidence: string[];
|
|
95
|
+
reason: string;
|
|
96
|
+
nextActions: string[];
|
|
97
|
+
}
|
|
98
|
+
export interface BypassFinding {
|
|
99
|
+
id: string;
|
|
100
|
+
status: "unaccepted" | "accepted";
|
|
101
|
+
severity: "medium" | "high" | "critical";
|
|
102
|
+
client: SupportedClient;
|
|
103
|
+
targetPath: string;
|
|
104
|
+
serverName: string;
|
|
105
|
+
provider: ScanProviderId | "unknown";
|
|
106
|
+
command: string | null;
|
|
107
|
+
args: string[];
|
|
108
|
+
envKeys: string[];
|
|
109
|
+
suggestedProfileName: string;
|
|
110
|
+
riskTags: BypassRiskTag[];
|
|
111
|
+
reasons: string[];
|
|
112
|
+
nextActions: string[];
|
|
113
|
+
acceptedRiskGuidance: string;
|
|
114
|
+
}
|
|
115
|
+
export interface ImportClientCleanupPlan {
|
|
116
|
+
client: SupportedClient;
|
|
117
|
+
targetPath: string;
|
|
118
|
+
status: "planned" | "noop" | "invalid" | "missing";
|
|
119
|
+
affectedServerNames: string[];
|
|
120
|
+
rollbackCommand: string | null;
|
|
121
|
+
acceptedRiskGuidance: string;
|
|
122
|
+
}
|
|
123
|
+
export interface WrittenImportClientCleanup {
|
|
124
|
+
client: SupportedClient;
|
|
125
|
+
targetPath: string;
|
|
126
|
+
status: "updated" | "noop" | "invalid" | "missing";
|
|
127
|
+
backupPath: string | null;
|
|
128
|
+
affectedServerNames: string[];
|
|
129
|
+
rollbackCommand: string | null;
|
|
130
|
+
acceptedRiskGuidance: string;
|
|
131
|
+
}
|
|
67
132
|
export interface ImportSwitchboardProfile {
|
|
68
133
|
name: string;
|
|
69
134
|
provider: string | null;
|
|
@@ -86,7 +151,17 @@ export interface ImportPlanAction {
|
|
|
86
151
|
reason: string;
|
|
87
152
|
}
|
|
88
153
|
export declare function createSwitchboardImportPlan(options?: SwitchboardImportPlanOptions): Promise<SwitchboardImportPlan>;
|
|
89
|
-
export declare function writeSwitchboardImportPlan(options?: SwitchboardImportPlanOptions
|
|
90
|
-
|
|
91
|
-
|
|
154
|
+
export declare function writeSwitchboardImportPlan(options?: SwitchboardImportPlanOptions): Promise<WrittenSwitchboardImportPlan>;
|
|
155
|
+
export declare function buildRiskFindings(options: {
|
|
156
|
+
envFiles: ImportEnvFileDetection[];
|
|
157
|
+
clients: ImportClientDetection[];
|
|
158
|
+
bypassFindings: BypassFinding[];
|
|
159
|
+
}): RiskFinding[];
|
|
160
|
+
export declare function buildBypassFindings(options: {
|
|
161
|
+
cwd: string;
|
|
162
|
+
homeDir?: string;
|
|
163
|
+
clients: ImportClientDetection[];
|
|
164
|
+
switchboardProfiles: ImportSwitchboardProfile[];
|
|
165
|
+
acceptedDirect?: Set<string>;
|
|
166
|
+
}): BypassFinding[];
|
|
92
167
|
//# sourceMappingURL=import-plan.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"import-plan.d.ts","sourceRoot":"","sources":["../../src/import/import-plan.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"import-plan.d.ts","sourceRoot":"","sources":["../../src/import/import-plan.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,kCAAkC,CAAC;AAI1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAMtD,eAAO,MAAM,uBAAuB,+BAA+B,CAAC;AAEpE,MAAM,MAAM,oBAAoB,GAC5B,gBAAgB,GAChB,cAAc,GACd,gBAAgB,GAChB,yBAAyB,CAAC;AAE9B,MAAM,WAAW,4BAA4B;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,IAAI,CAAC;IACT,aAAa,EAAE,OAAO,uBAAuB,CAAC;IAC9C,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,QAAQ,EAAE;QACR,OAAO,EAAE,qBAAqB,EAAE,CAAC;QACjC,mBAAmB,EAAE,wBAAwB,EAAE,CAAC;QAChD,QAAQ,EAAE,sBAAsB,EAAE,CAAC;KACpC,CAAC;IACF,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,uBAAuB,EAAE,CAAC;IACvC,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,QAAQ,EAAE;QACR,MAAM,EAAE,YAAY,CAAC;QACrB,YAAY,EAAE,YAAY,CAAC;QAC3B,aAAa,EAAE,YAAY,CAAC;QAC5B,cAAc,EAAE,YAAY,EAAE,CAAC;QAC/B,cAAc,EAAE,YAAY,EAAE,CAAC;KAChC,CAAC;IACF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,IAAI,CAAC;IACT,aAAa,EAAE,OAAO,uBAAuB,CAAC;IAC9C,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,qBAAqB,CAAC;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,0BAA0B,EAAE,CAAC;IAC5C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB,EAAE,OAAO,CAAC;IAClC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,cAAc,GAAG,SAAS,CAAC;IACrC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,KAAK,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,EAAE,MAAM,CAAC;KACb,CAAC,CAAC;CACJ;AAED,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,sBAAsB,GACtB,kBAAkB,GAClB,iBAAiB,GACjB,gBAAgB,GAChB,wBAAwB,CAAC;AAE7B,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,eAAe,GACf,uBAAuB,GACvB,wBAAwB,GACxB,wBAAwB,GACxB,0BAA0B,CAAC;AAE/B,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE1E,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,cAAc,GAAG,SAAS,CAAC;IACrC,MAAM,EAAE;QACN,IAAI,EAAE,UAAU,GAAG,eAAe,CAAC;QACnC,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,YAAY,GAAG,UAAU,CAAC;IAClC,QAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACzC,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,GAAG,SAAS,CAAC;IACrC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACnD,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACnD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,EAAE,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAAC;IACzC,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,wBAAsB,2BAA2B,CAC/C,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,qBAAqB,CAAC,CAoKhC;AAmDD,wBAAsB,0BAA0B,CAC9C,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,4BAA4B,CAAC,CAkFvC;AAieD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,cAAc,EAAE,aAAa,EAAE,CAAC;CACjC,GAAG,WAAW,EAAE,CAoKhB;AAaD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,mBAAmB,EAAE,wBAAwB,EAAE,CAAC;IAChD,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC9B,GAAG,aAAa,EAAE,CAwFlB"}
|