@xenosystem/acp-agent 0.1.1

package/dist/security/capabilityGate.js

@@ -0,0 +1,101 @@
+/**
+ * Capability gate — the controlled allow-path (XACP-006).
+ *
+ * `evaluateProviderSafety` combines a provider's declaration (capabilities, auth/network
+ * requirements, I/O authority, trust class, implementation status) with its declared auth +
+ * egress policies and returns a `ProviderCapabilityGate`. The stance is FAIL-CLOSED: a
+ * provider does NOT become runnable merely by declaring capabilities — it must pass every
+ * sub-decision. In XACP-006 only the fixture (which needs nothing) evaluates `allowed`; every
+ * real/placeholder provider is `blocked` (or `requires_approval`, which is not runnable).
+ */
+import { validateProviderAuthPolicy } from "./authPolicy.js";
+const allowed = (reasonCode, safeMessage) => ({
+    status: "allowed",
+    reasonCode,
+    safeMessage,
+});
+const blocked = (reasonCode, safeMessage) => ({
+    status: "blocked",
+    reasonCode,
+    safeMessage,
+});
+const requiresApproval = (reasonCode, safeMessage) => ({
+    status: "requires_approval",
+    reasonCode,
+    safeMessage,
+});
+const notApplicable = (reasonCode, safeMessage) => ({
+    status: "not_applicable",
+    reasonCode,
+    safeMessage,
+});
+function evaluateAuth(def) {
+    const needed = def.authRequirement === "required" || def.capabilities.requiresAuth;
+    if (!needed)
+        return notApplicable("auth.none", "no authentication required");
+    const policy = def.authPolicy;
+    if (!policy || policy.requirement === "none") {
+        return blocked("auth.required_no_policy", "authentication required but no auth policy is defined");
+    }
+    const shape = validateProviderAuthPolicy(policy);
+    if (shape.status === "blocked")
+        return shape;
+    // Even a valid policy is not auto-approved — a real auth path requires explicit approval.
+    return requiresApproval("auth.required", "authentication required; policy defined, pending explicit approval");
+}
+function evaluateEgress(def) {
+    const needed = def.networkRequirement === "required" || def.capabilities.usesNetwork;
+    if (!needed)
+        return notApplicable("egress.none", "no network access required");
+    const policy = def.egressPolicy;
+    if (!policy || policy.mode === "none" || policy.mode === "blocked") {
+        return blocked("egress.required_no_policy", "network required but no egress policy is defined");
+    }
+    if (policy.mode === "allowlist" && policy.allowedHosts.length > 0) {
+        return requiresApproval("egress.allowlist", "network required; allowlist defined, pending explicit approval");
+    }
+    return blocked("egress.required_empty_allowlist", "network required but the egress allowlist is empty");
+}
+function evaluateIo(def) {
+    const caps = def.capabilities;
+    if (caps.canWriteFiles || caps.canRunTerminal) {
+        return blocked("io.write_or_terminal", "provider claims file-write or terminal authority");
+    }
+    if (def.ioAuthority.filesystem === "unknown" || def.ioAuthority.terminal === "unknown") {
+        return blocked("io.unknown", "provider has unknown I/O authority");
+    }
+    if (def.ioAuthority.filesystem === "workspace-scoped" || def.ioAuthority.terminal === "workspace-scoped" || caps.canReadFiles) {
+        return requiresApproval("io.scoped", "provider has scoped I/O authority, pending explicit approval");
+    }
+    return notApplicable("io.none", "no I/O authority");
+}
+export function evaluateProviderSafety(def) {
+    const runtimeDecision = def.enabled
+        ? allowed("runtime.enabled", "provider is implemented and enabled")
+        : blocked("not_implemented", `provider '${def.id}' is not implemented`);
+    const authDecision = evaluateAuth(def);
+    const egressDecision = evaluateEgress(def);
+    const ioDecision = evaluateIo(def);
+    const overallDecision = (() => {
+        if (runtimeDecision.status !== "allowed") {
+            return blocked("not_implemented", `provider '${def.id}' is not runnable (not implemented)`);
+        }
+        if (def.trustClass === "unknown") {
+            return blocked("unknown_trust", `provider '${def.id}' has unknown trust class`);
+        }
+        const subs = [authDecision, egressDecision, ioDecision];
+        const firstBlocked = subs.find((d) => d.status === "blocked");
+        if (firstBlocked)
+            return blocked(firstBlocked.reasonCode, firstBlocked.safeMessage);
+        if (subs.some((d) => d.status === "requires_approval")) {
+            return requiresApproval("requires_approval", `provider '${def.id}' requires explicit approval (auth/egress/io)`);
+        }
+        return allowed("approved", `provider '${def.id}' is allowed`);
+    })();
+    return { providerId: def.id, authDecision, egressDecision, ioDecision, runtimeDecision, overallDecision };
+}
+/** Convenience: is the provider runnable under the gate (overall === allowed)? */
+export function isGateAllowed(def) {
+    return evaluateProviderSafety(def).overallDecision.status === "allowed";
+}
+//# sourceMappingURL=capabilityGate.js.map

package/dist/security/capabilityGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityGate.js","sourceRoot":"","sources":["../../src/security/capabilityGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAI7D,MAAM,OAAO,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAA0B,EAAE,CAAC,CAAC;IACpF,MAAM,EAAE,SAAS;IACjB,UAAU;IACV,WAAW;CACZ,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAA0B,EAAE,CAAC,CAAC;IACpF,MAAM,EAAE,SAAS;IACjB,UAAU;IACV,WAAW;CACZ,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAA0B,EAAE,CAAC,CAAC;IAC7F,MAAM,EAAE,mBAAmB;IAC3B,UAAU;IACV,WAAW;CACZ,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAA0B,EAAE,CAAC,CAAC;IAC1F,MAAM,EAAE,gBAAgB;IACxB,UAAU;IACV,WAAW;CACZ,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,GAAuB;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,KAAK,UAAU,IAAI,GAAG,CAAC,YAAY,CAAC,YAAY,CAAC;IACnF,IAAI,CAAC,MAAM;QAAE,OAAO,aAAa,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;IAC9B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,yBAAyB,EAAE,uDAAuD,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,KAAK,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,0FAA0F;IAC1F,OAAO,gBAAgB,CAAC,eAAe,EAAE,oEAAoE,CAAC,CAAC;AACjH,CAAC;AAED,SAAS,cAAc,CAAC,GAAuB;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,KAAK,UAAU,IAAI,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC;IACrF,IAAI,CAAC,MAAM;QAAE,OAAO,aAAa,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;IAChC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC,2BAA2B,EAAE,kDAAkD,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,gBAAgB,CAAC,kBAAkB,EAAE,gEAAgE,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,OAAO,CAAC,iCAAiC,EAAE,oDAAoD,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC;IAC9B,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,sBAAsB,EAAE,kDAAkD,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACvF,OAAO,OAAO,CAAC,YAAY,EAAE,oCAAoC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,CAAC,UAAU,KAAK,kBAAkB,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,kBAAkB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9H,OAAO,gBAAgB,CAAC,WAAW,EAAE,8DAA8D,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,aAAa,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAuB;IAC5D,MAAM,eAAe,GAA2B,GAAG,CAAC,OAAO;QACzD,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,qCAAqC,CAAC;QACnE,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,aAAa,GAAG,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAE1E,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAEnC,MAAM,eAAe,GAAG,CAAC,GAA2B,EAAE;QACpD,IAAI,eAAe,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,OAAO,CAAC,iBAAiB,EAAE,aAAa,GAAG,CAAC,EAAE,qCAAqC,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,eAAe,EAAE,aAAa,GAAG,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAC9D,IAAI,YAAY;YAAE,OAAO,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;QACpF,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,EAAE,CAAC;YACvD,OAAO,gBAAgB,CAAC,mBAAmB,EAAE,aAAa,GAAG,CAAC,EAAE,+CAA+C,CAAC,CAAC;QACnH,CAAC;QACD,OAAO,OAAO,CAAC,UAAU,EAAE,aAAa,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;IAChE,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;AAC5G,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,GAAuB;IACnD,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,SAAS,CAAC;AAC1E,CAAC"}

package/dist/security/egressPolicy.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Network egress policy — PURE VALIDATION ONLY.
+ *
+ * No real network calls, no DNS lookups, no probing. These helpers validate a URL/host
+ * against a declared `ProviderEgressPolicy`. The default stance is block-by-default: a host
+ * is allowed only if it is explicitly allowlisted, the protocol is permitted, and it is not a
+ * localhost / private-network address (unless those are explicitly enabled).
+ */
+import type { ProviderEgressPolicy, ProviderSafetyDecision } from "./securityTypes.js";
+export interface EgressPolicySummary {
+    mode: ProviderEgressPolicy["mode"];
+    allowedHosts: string[];
+    blockedHosts: string[];
+    allowLocalhost: boolean;
+    allowPrivateNetwork: boolean;
+    allowHttp: boolean;
+    allowHttps: boolean;
+    maxRedirects: number;
+}
+export declare function normalizeHost(host: string): string;
+export declare function validateHost(host: string): ProviderSafetyDecision;
+export declare function isLocalhost(host: string): boolean;
+export declare function isPrivateHost(host: string): boolean;
+/** Host-only allow check (assumes the protocol has already been validated). */
+export declare function isHostAllowed(policy: ProviderEgressPolicy, host: string): boolean;
+/** Validate a full URL against the egress policy. Returns a safety decision. */
+export declare function validateUrlAgainstEgressPolicy(policy: ProviderEgressPolicy, urlStr: string): ProviderSafetyDecision;
+export declare function summarizeEgressPolicy(policy: ProviderEgressPolicy): EgressPolicySummary;
+/** A safe, fully-blocked default egress policy. */
+export declare const NO_EGRESS_POLICY: ProviderEgressPolicy;
+//# sourceMappingURL=egressPolicy.d.ts.map

package/dist/security/egressPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"egressPolicy.d.ts","sourceRoot":"","sources":["../../src/security/egressPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEvF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CAQjE;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASjD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASnD;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAOjF;AAED,gFAAgF;AAChF,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,MAAM,GACb,sBAAsB,CAiCxB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,oBAAoB,GAAG,mBAAmB,CAWvF;AAED,mDAAmD;AACnD,eAAO,MAAM,gBAAgB,EAAE,oBAS9B,CAAC"}

package/dist/security/egressPolicy.js

@@ -0,0 +1,120 @@
+/**
+ * Network egress policy — PURE VALIDATION ONLY.
+ *
+ * No real network calls, no DNS lookups, no probing. These helpers validate a URL/host
+ * against a declared `ProviderEgressPolicy`. The default stance is block-by-default: a host
+ * is allowed only if it is explicitly allowlisted, the protocol is permitted, and it is not a
+ * localhost / private-network address (unless those are explicitly enabled).
+ */
+export function normalizeHost(host) {
+    return host.trim().toLowerCase().replace(/^\[/, "").replace(/\]$/, "");
+}
+export function validateHost(host) {
+    const h = normalizeHost(host);
+    if (!h)
+        return blocked("egress.host.empty", "host is empty");
+    // hostnames + IPv4/IPv6 chars only — no spaces/slashes/credentials.
+    if (!/^[a-z0-9.\-:_]+$/i.test(h)) {
+        return blocked("egress.host.invalid", `host contains invalid characters: ${host}`);
+    }
+    return ok("egress.host.ok", "host is syntactically valid");
+}
+export function isLocalhost(host) {
+    const h = normalizeHost(host);
+    return (h === "localhost" ||
+        h === "127.0.0.1" ||
+        h === "::1" ||
+        h === "0.0.0.0" ||
+        h.endsWith(".localhost"));
+}
+export function isPrivateHost(host) {
+    const h = normalizeHost(host);
+    return (/^10\./.test(h) ||
+        /^192\.168\./.test(h) ||
+        /^172\.(1[6-9]|2\d|3[01])\./.test(h) ||
+        /^169\.254\./.test(h) || // link-local
+        /^f[cd][0-9a-f]{2}:/i.test(h) // IPv6 unique-local fc00::/7
+    );
+}
+/** Host-only allow check (assumes the protocol has already been validated). */
+export function isHostAllowed(policy, host) {
+    const h = normalizeHost(host);
+    if (policy.mode !== "allowlist")
+        return false;
+    if (policy.blockedHosts.map(normalizeHost).includes(h))
+        return false;
+    if (isLocalhost(h) && !policy.allowLocalhost)
+        return false;
+    if (isPrivateHost(h) && !policy.allowPrivateNetwork)
+        return false;
+    return policy.allowedHosts.map(normalizeHost).includes(h);
+}
+/** Validate a full URL against the egress policy. Returns a safety decision. */
+export function validateUrlAgainstEgressPolicy(policy, urlStr) {
+    let url;
+    try {
+        url = new URL(urlStr);
+    }
+    catch {
+        return blocked("egress.malformed_url", "malformed URL");
+    }
+    const proto = url.protocol.replace(/:$/, "");
+    if (proto !== "http" && proto !== "https") {
+        return blocked("egress.unsupported_protocol", `unsupported protocol: ${proto}`);
+    }
+    if (proto === "http" && !policy.allowHttp)
+        return blocked("egress.http_blocked", "http is not allowed");
+    if (proto === "https" && !policy.allowHttps)
+        return blocked("egress.https_blocked", "https is not allowed");
+    const hostCheck = validateHost(url.hostname);
+    if (hostCheck.status === "blocked")
+        return hostCheck;
+    const host = normalizeHost(url.hostname);
+    if (policy.mode === "none")
+        return blocked("egress.no_network", "egress disabled (mode=none)");
+    if (policy.mode === "blocked")
+        return blocked("egress.blocked", "egress blocked (mode=blocked)");
+    if (policy.blockedHosts.map(normalizeHost).includes(host)) {
+        return blocked("egress.host_blocked", `host explicitly blocked: ${host}`);
+    }
+    if (isLocalhost(host) && !policy.allowLocalhost) {
+        return blocked("egress.localhost_blocked", "localhost is not allowed");
+    }
+    if (isPrivateHost(host) && !policy.allowPrivateNetwork) {
+        return blocked("egress.private_blocked", "private-network host is not allowed");
+    }
+    if (policy.allowedHosts.map(normalizeHost).includes(host)) {
+        return ok("egress.allowlisted", `host allowed: ${host}`);
+    }
+    return blocked("egress.not_allowlisted", `host not in allowlist: ${host}`);
+}
+export function summarizeEgressPolicy(policy) {
+    return {
+        mode: policy.mode,
+        allowedHosts: [...policy.allowedHosts],
+        blockedHosts: [...policy.blockedHosts],
+        allowLocalhost: policy.allowLocalhost,
+        allowPrivateNetwork: policy.allowPrivateNetwork,
+        allowHttp: policy.allowHttp,
+        allowHttps: policy.allowHttps,
+        maxRedirects: policy.maxRedirects,
+    };
+}
+/** A safe, fully-blocked default egress policy. */
+export const NO_EGRESS_POLICY = {
+    mode: "none",
+    allowedHosts: [],
+    blockedHosts: [],
+    allowLocalhost: false,
+    allowPrivateNetwork: false,
+    allowHttp: false,
+    allowHttps: true,
+    maxRedirects: 0,
+};
+function blocked(reasonCode, safeMessage) {
+    return { status: "blocked", reasonCode, safeMessage };
+}
+function ok(reasonCode, safeMessage) {
+    return { status: "allowed", reasonCode, safeMessage };
+}
+//# sourceMappingURL=egressPolicy.js.map

package/dist/security/egressPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egressPolicy.js","sourceRoot":"","sources":["../../src/security/egressPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;IAC7D,oEAAoE;IACpE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,qBAAqB,EAAE,qCAAqC,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,CACL,CAAC,KAAK,WAAW;QACjB,CAAC,KAAK,WAAW;QACjB,CAAC,KAAK,KAAK;QACX,CAAC,KAAK,SAAS;QACf,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,CACL,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACf,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QACrB,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa;QACtC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,6BAA6B;KAC5D,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,MAA4B,EAAE,IAAY;IACtE,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,8BAA8B,CAC5C,MAA4B,EAC5B,MAAc;IAEd,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,OAAO,CAAC,6BAA6B,EAAE,yBAAyB,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;IACxG,IAAI,KAAK,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,CAAC;IAE5G,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,mBAAmB,EAAE,6BAA6B,CAAC,CAAC;IAC/F,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,gBAAgB,EAAE,+BAA+B,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,OAAO,OAAO,CAAC,qBAAqB,EAAE,4BAA4B,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,OAAO,CAAC,0BAA0B,EAAE,0BAA0B,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC,wBAAwB,EAAE,qCAAqC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,CAAC,oBAAoB,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC,wBAAwB,EAAE,0BAA0B,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAA4B;IAChE,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QACtC,YAAY,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QACtC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAyB;IACpD,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,EAAE;IAChB,YAAY,EAAE,EAAE;IAChB,cAAc,EAAE,KAAK;IACrB,mBAAmB,EAAE,KAAK;IAC1B,SAAS,EAAE,KAAK;IAChB,UAAU,EAAE,IAAI;IAChB,YAAY,EAAE,CAAC;CAChB,CAAC;AAEF,SAAS,OAAO,CAAC,UAAkB,EAAE,WAAmB;IACtD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AACxD,CAAC;AACD,SAAS,EAAE,CAAC,UAAkB,EAAE,WAAmB;IACjD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AACxD,CAAC"}

package/dist/security/redaction.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Redaction helpers. Secret VALUES must never appear in diagnostics, logs, or stdout.
+ *
+ * Pure functions only — these never read process.env, files, or any secret store. They
+ * operate on values handed to them and mask anything that looks sensitive.
+ */
+import { type ProviderRedactionPolicy } from "./securityTypes.js";
+/** True if a string value looks like a credential/token. */
+export declare function looksSecretLike(value: string): boolean;
+/** Redact secret-like substrings inside free-form diagnostic text. */
+export declare function redactSecretLikeText(text: string, policy?: ProviderRedactionPolicy): string;
+/** Redact a single value if it looks secret-like (or always, when `force`). */
+export declare function redactSecretLikeValue(value: unknown, policy?: ProviderRedactionPolicy, force?: boolean): string;
+/** Redact an env-like record: keys are kept, sensitive values are masked. */
+export declare function redactEnvRecord(env: Record<string, unknown>, policy?: ProviderRedactionPolicy): Record<string, string>;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/security/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/security/redaction.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAA4B,KAAK,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE5F,4DAA4D;AAC5D,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAUtD;AAED,sEAAsE;AACtE,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,uBAAkD,GACzD,MAAM,CAaR;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,MAAM,GAAE,uBAAkD,EAC1D,KAAK,UAAQ,GACZ,MAAM,CAKR;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,MAAM,GAAE,uBAAkD,GACzD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAaxB"}

package/dist/security/redaction.js

@@ -0,0 +1,65 @@
+/**
+ * Redaction helpers. Secret VALUES must never appear in diagnostics, logs, or stdout.
+ *
+ * Pure functions only — these never read process.env, files, or any secret store. They
+ * operate on values handed to them and mask anything that looks sensitive.
+ */
+import { DEFAULT_REDACTION_POLICY } from "./securityTypes.js";
+/** True if a string value looks like a credential/token. */
+export function looksSecretLike(value) {
+    if (typeof value !== "string")
+        return false;
+    const v = value.trim();
+    if (v.length === 0)
+        return false;
+    // Common token shapes (provider/cloud key prefixes, then a token char).
+    if (/^(sk|pk|rk|ghp|gho|xox[baprs]|akia|asia)[-_a-z0-9]/i.test(v))
+        return true;
+    if (/^bearer\s+\S+/i.test(v))
+        return true;
+    if (/^[A-Za-z0-9_-]{24,}$/.test(v))
+        return true; // long opaque token
+    if (/^ey[A-Za-z0-9_-]{10,}\./.test(v))
+        return true; // JWT-ish
+    return false;
+}
+/** Redact secret-like substrings inside free-form diagnostic text. */
+export function redactSecretLikeText(text, policy = DEFAULT_REDACTION_POLICY) {
+    const mask = policy.mask;
+    return String(text)
+        .replace(/\b(?:sk|pk|rk)[-_][A-Za-z0-9_-]{8,}\b/gi, mask)
+        .replace(/\b(?:ghp|gho)_[A-Za-z0-9_]{12,}\b/gi, mask)
+        .replace(/\bxox[baprs]-[A-Za-z0-9-]{8,}\b/gi, mask)
+        .replace(/\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g, mask)
+        .replace(/\bey[A-Za-z0-9_-]{10,}\.[A-Za-z0-9._-]{10,}\b/g, mask)
+        .replace(/\bBearer\s+[A-Za-z0-9._-]{8,}\b/gi, `Bearer ${mask}`)
+        .replace(/((?:api[_-]?key|token|secret|password|passwd|cookie|authorization|bearer)["']?\s*[:=]\s*["']?)[^"',}\s]{8,}/gi, `$1${mask}`);
+}
+/** Redact a single value if it looks secret-like (or always, when `force`). */
+export function redactSecretLikeValue(value, policy = DEFAULT_REDACTION_POLICY, force = false) {
+    if (typeof value !== "string")
+        return policy.mask;
+    if (force || looksSecretLike(value))
+        return policy.mask;
+    if (redactSecretLikeText(value, policy) !== value)
+        return policy.mask;
+    return value;
+}
+/** Redact an env-like record: keys are kept, sensitive values are masked. */
+export function redactEnvRecord(env, policy = DEFAULT_REDACTION_POLICY) {
+    const out = {};
+    for (const [key, value] of Object.entries(env)) {
+        const keyLooksSensitive = policy.sensitiveKeyHints.some((h) => key.toLowerCase().includes(h));
+        if (keyLooksSensitive) {
+            out[key] = policy.mask;
+        }
+        else if (typeof value === "string") {
+            out[key] = redactSecretLikeValue(value, policy);
+        }
+        else {
+            out[key] = String(value);
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=redaction.js.map

package/dist/security/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/security/redaction.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,wBAAwB,EAAgC,MAAM,oBAAoB,CAAC;AAE5F,4DAA4D;AAC5D,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,wEAAwE;IACxE,IAAI,qDAAqD,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;IACrE,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,SAAkC,wBAAwB;IAE1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,OAAO,MAAM,CAAC,IAAI,CAAC;SAChB,OAAO,CAAC,yCAAyC,EAAE,IAAI,CAAC;SACxD,OAAO,CAAC,qCAAqC,EAAE,IAAI,CAAC;SACpD,OAAO,CAAC,mCAAmC,EAAE,IAAI,CAAC;SAClD,OAAO,CAAC,gCAAgC,EAAE,IAAI,CAAC;SAC/C,OAAO,CAAC,gDAAgD,EAAE,IAAI,CAAC;SAC/D,OAAO,CAAC,mCAAmC,EAAE,UAAU,IAAI,EAAE,CAAC;SAC9D,OAAO,CACN,+GAA+G,EAC/G,KAAK,IAAI,EAAE,CACZ,CAAC;AACN,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,SAAkC,wBAAwB,EAC1D,KAAK,GAAG,KAAK;IAEb,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IAClD,IAAI,KAAK,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACxD,IAAI,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAC7B,GAA4B,EAC5B,SAAkC,wBAAwB;IAE1D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,iBAAiB,EAAE,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,GAAG,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/security/secretBinding.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Secret binding metadata (XACP-037).
+ *
+ * A binding connects an allowed secret reference to an operator-chosen source alias. It does NOT
+ * load, store, or print the secret value.
+ */
+import type { ProviderSecretReference, SecretRefKind } from "./securityTypes.js";
+export interface SecretBinding {
+    refId: string;
+    refKind: SecretRefKind;
+    sourceKind: SecretRefKind;
+    sourceId: string;
+}
+export interface SecretBindingReview {
+    providerId: string;
+    requiredRefs: Array<{
+        id: string;
+        kind: SecretRefKind;
+        label: string;
+    }>;
+    optionalRefs: Array<{
+        id: string;
+        kind: SecretRefKind;
+        label: string;
+    }>;
+    bindings: SecretBinding[];
+    missingRequiredRefs: string[];
+    errors: string[];
+    complete: boolean;
+    valuePolicy: "metadata_only_no_values_loaded";
+}
+export declare function parseSecretBindingArg(raw: string): SecretBinding | string;
+export declare function buildSecretBindingReview(providerId: string, refs: ProviderSecretReference[], rawBindings: string[]): SecretBindingReview;
+//# sourceMappingURL=secretBinding.d.ts.map

package/dist/security/secretBinding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretBinding.d.ts","sourceRoot":"","sources":["../../src/security/secretBinding.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEjF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,aAAa,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,aAAa,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,YAAY,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,aAAa,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,gCAAgC,CAAC;CAC/C;AAKD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,MAAM,CAazE;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,uBAAuB,EAAE,EAC/B,WAAW,EAAE,MAAM,EAAE,GACpB,mBAAmB,CAwCrB"}

package/dist/security/secretBinding.js

@@ -0,0 +1,66 @@
+/**
+ * Secret binding metadata (XACP-037).
+ *
+ * A binding connects an allowed secret reference to an operator-chosen source alias. It does NOT
+ * load, store, or print the secret value.
+ */
+import { looksSecretLike } from "./redaction.js";
+const KINDS = ["env", "file", "keychain", "manual"];
+const SOURCE_ID = /^[A-Za-z0-9_.@-]+$/;
+export function parseSecretBindingArg(raw) {
+    const eq = raw.indexOf("=");
+    const colon = raw.indexOf(":", eq + 1);
+    if (eq <= 0 || colon <= eq + 1 || colon === raw.length - 1) {
+        return "binding must be REF_ID=kind:source-alias";
+    }
+    const refId = raw.slice(0, eq);
+    const sourceKind = raw.slice(eq + 1, colon);
+    const sourceId = raw.slice(colon + 1);
+    if (!KINDS.includes(sourceKind))
+        return `binding kind is invalid for '${refId}'`;
+    if (!SOURCE_ID.test(sourceId))
+        return `binding source alias is invalid for '${refId}'`;
+    if (looksSecretLike(sourceId))
+        return `binding source alias for '${refId}' appears to contain a secret value`;
+    return { refId, refKind: sourceKind, sourceKind, sourceId };
+}
+export function buildSecretBindingReview(providerId, refs, rawBindings) {
+    const errors = [];
+    const byRef = new Map(refs.map((r) => [r.id, r]));
+    const bindings = [];
+    const seen = new Set();
+    for (const raw of rawBindings) {
+        const parsed = parseSecretBindingArg(raw);
+        if (typeof parsed === "string") {
+            errors.push(parsed);
+            continue;
+        }
+        const ref = byRef.get(parsed.refId);
+        if (!ref) {
+            errors.push(`binding references unknown secret ref '${parsed.refId}'`);
+            continue;
+        }
+        if (ref.kind !== parsed.sourceKind) {
+            errors.push(`binding kind for '${parsed.refId}' must be '${ref.kind}'`);
+            continue;
+        }
+        if (seen.has(parsed.refId)) {
+            errors.push(`duplicate binding for '${parsed.refId}'`);
+            continue;
+        }
+        seen.add(parsed.refId);
+        bindings.push({ ...parsed, refKind: ref.kind });
+    }
+    const missingRequiredRefs = refs.filter((r) => r.required && !seen.has(r.id)).map((r) => r.id);
+    return {
+        providerId,
+        requiredRefs: refs.filter((r) => r.required).map(({ id, kind, label }) => ({ id, kind, label })),
+        optionalRefs: refs.filter((r) => !r.required).map(({ id, kind, label }) => ({ id, kind, label })),
+        bindings,
+        missingRequiredRefs,
+        errors,
+        complete: errors.length === 0 && missingRequiredRefs.length === 0,
+        valuePolicy: "metadata_only_no_values_loaded",
+    };
+}
+//# sourceMappingURL=secretBinding.js.map

package/dist/security/secretBinding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretBinding.js","sourceRoot":"","sources":["../../src/security/secretBinding.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAqBjD,MAAM,KAAK,GAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AACrE,MAAM,SAAS,GAAG,oBAAoB,CAAC;AAEvC,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,0CAA0C,CAAC;IACpD,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,CAAkB,CAAC;IAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,gCAAgC,KAAK,GAAG,CAAC;IACjF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,wCAAwC,KAAK,GAAG,CAAC;IACvF,IAAI,eAAe,CAAC,QAAQ,CAAC;QAAE,OAAO,6BAA6B,KAAK,qCAAqC,CAAC;IAC9G,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,UAAkB,EAClB,IAA+B,EAC/B,WAAqB;IAErB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,0CAA0C,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,KAAK,cAAc,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;YACxE,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/F,OAAO;QACL,UAAU;QACV,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChG,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjG,QAAQ;QACR,mBAAmB;QACnB,MAAM;QACN,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC;QACjE,WAAW,EAAE,gCAAgC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/security/secretStore.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Secret store abstraction (XACP-036).
+ *
+ * This is the boundary provider secret-binding metadata can plug into. The default store resolves
+ * nothing: no process env, no files, no keychain, no network. Values are opaque and diagnostics
+ * expose reference ids only.
+ */
+import type { ProviderSecretReference } from "./securityTypes.js";
+export type SecretStoreBackend = "unavailable" | "memory";
+export type SecretStoreErrorCode = "SECRET_STORE_UNAVAILABLE" | "SECRET_STORE_NOT_BOUND";
+export interface SecretStoreValue {
+    kind: "opaque-secret";
+    refId: string;
+    value: string;
+}
+export interface SecretStoreDiagnostics {
+    backend: SecretStoreBackend;
+    available: boolean;
+    refIds: string[];
+    resolved: number;
+    denied: number;
+}
+export interface SecretStore {
+    readonly backend: SecretStoreBackend;
+    resolve(ref: ProviderSecretReference): Promise<SecretStoreValue>;
+    diagnostics(): SecretStoreDiagnostics;
+}
+export declare class SecretStoreError extends Error {
+    readonly code: SecretStoreErrorCode;
+    readonly safeMessage: string;
+    readonly refId: string;
+    constructor(code: SecretStoreErrorCode, refId: string, safeMessage: string);
+}
+export declare function createUnavailableSecretStore(): SecretStore;
+/** Test/injected backend only. It never reads ambient env/files/keychains. */
+export declare function createMemorySecretStore(values: Record<string, string>): SecretStore;
+//# sourceMappingURL=secretStore.d.ts.map

package/dist/security/secretStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretStore.d.ts","sourceRoot":"","sources":["../../src/security/secretStore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG,QAAQ,CAAC;AAC1D,MAAM,MAAM,oBAAoB,GAC5B,0BAA0B,GAC1B,wBAAwB,CAAC;AAE7B,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,OAAO,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjE,WAAW,IAAI,sBAAsB,CAAC;CACvC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEX,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAO3E;AAED,wBAAgB,4BAA4B,IAAI,WAAW,CAc1D;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,WAAW,CA0BnF"}

package/dist/security/secretStore.js

@@ -0,0 +1,55 @@
+/**
+ * Secret store abstraction (XACP-036).
+ *
+ * This is the boundary provider secret-binding metadata can plug into. The default store resolves
+ * nothing: no process env, no files, no keychain, no network. Values are opaque and diagnostics
+ * expose reference ids only.
+ */
+export class SecretStoreError extends Error {
+    code;
+    safeMessage;
+    refId;
+    constructor(code, refId, safeMessage) {
+        super(safeMessage);
+        this.name = "SecretStoreError";
+        this.code = code;
+        this.refId = refId;
+        this.safeMessage = safeMessage;
+    }
+}
+export function createUnavailableSecretStore() {
+    let denied = 0;
+    return {
+        backend: "unavailable",
+        async resolve(ref) {
+            denied += 1;
+            throw new SecretStoreError("SECRET_STORE_UNAVAILABLE", ref.id, `secret '${ref.id}' is unavailable (no secret store bound)`);
+        },
+        diagnostics: () => ({ backend: "unavailable", available: false, refIds: [], resolved: 0, denied }),
+    };
+}
+/** Test/injected backend only. It never reads ambient env/files/keychains. */
+export function createMemorySecretStore(values) {
+    let resolved = 0;
+    let denied = 0;
+    return {
+        backend: "memory",
+        async resolve(ref) {
+            const value = values[ref.id];
+            if (value === undefined) {
+                denied += 1;
+                throw new SecretStoreError("SECRET_STORE_NOT_BOUND", ref.id, `secret '${ref.id}' is not bound`);
+            }
+            resolved += 1;
+            return { kind: "opaque-secret", refId: ref.id, value };
+        },
+        diagnostics: () => ({
+            backend: "memory",
+            available: true,
+            refIds: Object.keys(values),
+            resolved,
+            denied,
+        }),
+    };
+}
+//# sourceMappingURL=secretStore.js.map

package/dist/security/secretStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretStore.js","sourceRoot":"","sources":["../../src/security/secretStore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA6BH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAuB;IAC3B,WAAW,CAAS;IACpB,KAAK,CAAS;IAEvB,YAAY,IAA0B,EAAE,KAAa,EAAE,WAAmB;QACxE,KAAK,CAAC,WAAW,CAAC,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,MAAM,UAAU,4BAA4B;IAC1C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO;QACL,OAAO,EAAE,aAAa;QACtB,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,IAAI,CAAC,CAAC;YACZ,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,EAC1B,GAAG,CAAC,EAAE,EACN,WAAW,GAAG,CAAC,EAAE,0CAA0C,CAC5D,CAAC;QACJ,CAAC;QACD,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;KACnG,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,MAA8B;IACpE,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,CAAC;gBACZ,MAAM,IAAI,gBAAgB,CACxB,wBAAwB,EACxB,GAAG,CAAC,EAAE,EACN,WAAW,GAAG,CAAC,EAAE,gBAAgB,CAClC,CAAC;YACJ,CAAC;YACD,QAAQ,IAAI,CAAC,CAAC;YACd,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QACzD,CAAC;QACD,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YAClB,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3B,QAAQ;YACR,MAAM;SACP,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/security/securityDiagnostics.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Safe, redacted provider diagnostics.
+ *
+ * Builds a value-free summary of a provider's security posture for `check` / logs. It includes
+ * secret reference IDs/labels and allowed hosts, but NEVER secret values, tokens, keys,
+ * cookies, raw env, or credential contents.
+ */
+import type { ProviderDefinition } from "../providers/providerTypes.js";
+export interface ProviderDiagnostic {
+    providerId: string;
+    displayName: string;
+    trustClass: string;
+    enabled: boolean;
+    authRequirement: string;
+    networkRequirement: string;
+    ioAuthority: {
+        filesystem: string;
+        terminal: string;
+    };
+    safety: {
+        overall: string;
+        auth: string;
+        egress: string;
+        io: string;
+        reason: string;
+        message: string;
+    };
+    /** Secret reference IDs/labels ONLY — never values. */
+    secretRefs: Array<{
+        id: string;
+        kind: string;
+        label: string;
+        required: boolean;
+    }>;
+    allowedHosts: string[];
+    metadata?: ProviderDefinition["metadata"];
+}
+export declare function buildProviderDiagnostic(def: ProviderDefinition): ProviderDiagnostic;
+//# sourceMappingURL=securityDiagnostics.d.ts.map

package/dist/security/securityDiagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityDiagnostics.d.ts","sourceRoot":"","sources":["../../src/security/securityDiagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAExE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,uDAAuD;IACvD,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAClF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;CAC3C;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,kBAAkB,GAAG,kBAAkB,CAyBnF"}