@ycodium-ai/plugin-redteam-model 0.0.0-stage → 0.2.2944

package/locales/en.json

@@ -0,0 +1,170 @@
+{
+  "common": {
+    "loading": "Loading the mode manager.",
+    "empty": "The mode manager is not available yet.",
+    "source": "Mode manager",
+    "installed": "Installed",
+    "absent": "Not installed"
+  },
+  "settings": {
+    "title": "Modes",
+    "lead": "Deploy the ten presets, install the modules this package is allowed to run, and keep the report gate closed until authorization is recorded. The executor keeps the model connection. This page stores no endpoint and no key.",
+    "deploy": "Deploy modes",
+    "deploying": "Deploying…",
+    "remove": "Remove modes",
+    "repair": "Repair",
+    "deployed": "Deployed",
+    "notDeployed": "Not deployed",
+    "routing": "Model routing stays on the executor. Choosing a mode does not switch provider, endpoint, or credential.",
+    "probeHold": "Probe held",
+    "probeAllow": "Probe allowed",
+    "denial": "Last refusal",
+    "noDenial": "No tool has been refused yet.",
+    "modes": "Mode roster",
+    "modules": "Runtime modules",
+    "install": "Install",
+    "update": "Update",
+    "uninstall": "Uninstall",
+    "withheldNote": "Withheld modules stay unavailable. Installing one records a failure and does not add their behavior.",
+    "mcpNote": "The studio module only records that a server list was requested. It does not mount a server.",
+    "hostPluginsTitle": "Install and uninstall plugins",
+    "hostPluginsLead": "This page does not install or uninstall plugins. Open the Plugins page to do that.",
+    "hostPluginsAction": "Open Plugins",
+    "operations": "Operation log",
+    "noOperations": "No operations yet. A restart marks a running operation as interrupted.",
+    "limitsTitle": "Host limits",
+    "limitBundle": "One package installs one plugin. This manager does not ship seventeen child packages, and it does not split a host plane from a preset plane.",
+    "limitIsolate": "A preset does not hide tools from the tool list. The guard refuses a call before it runs.",
+    "limitSection": "The standing prompt section is on every session and stays mode-agnostic. The mode envelope is added only when route boost is installed and that session recorded a mode.",
+    "limitList": "Preset names in the host picker are a single English label.",
+    "limitEvents": "The manager hears thread.created. It does not read executor frames.",
+    "limitFollowup": "The reminder is a user turn you start from this session. Nothing is sent on its own.",
+    "limitSubagent": "This package does not register a subagent provider.",
+    "limitScanner": "Scanner programs, audit runners, and shell desks are withheld. Nothing is spawned.",
+    "limitPicker": "A mode can be chosen only before the first turn.",
+    "limitTurn": "The first turn can start before the created event is stored. The preset prefix still applies. The envelope may wait until the next turn.",
+    "limitRefresh": "A phone drops a preset id it cannot see yet. Deploy the modes, then choose again after the preset list refreshes."
+  },
+  "op": {
+    "running": "Running",
+    "succeeded": "Succeeded",
+    "failed": "Failed"
+  },
+  "group": {
+    "general": "General",
+    "professional": "Professional"
+  },
+  "plane": {
+    "host": "Host plane",
+    "preset": "Preset plane"
+  },
+  "availability": {
+    "active": "Active",
+    "withheld": "Withheld",
+    "record": "Record only"
+  },
+  "phase": {
+    "authorization": "Authorization",
+    "scope": "Scope",
+    "evidence": "Evidence",
+    "report": "Report"
+  },
+  "mode": {
+    "redteam": { "name": "Researcher", "detail": "General session. Gates are optional." },
+    "pentest": {
+      "name": "Assessment",
+      "detail": "Authorized review with the four gates required."
+    },
+    "code-audit": {
+      "name": "Code review",
+      "detail": "Source review with the four gates required."
+    },
+    "binary-analysis": {
+      "name": "Binary review",
+      "detail": "Binary review with the four gates required."
+    },
+    "attack-defense": {
+      "name": "Exercise",
+      "detail": "Authorized exercise with the four gates required."
+    },
+    "av-evasion": {
+      "name": "Detection review",
+      "detail": "Detection review. No evasion steps, payloads, or refusal bypass."
+    },
+    "incident-response": {
+      "name": "Incident review",
+      "detail": "Incident review with the four gates required."
+    },
+    "cloud-security": {
+      "name": "Cloud review",
+      "detail": "Cloud review with the four gates required."
+    },
+    "ctf-solver": {
+      "name": "Puzzle workspace",
+      "detail": "Puzzle workspace with the four gates required."
+    },
+    "asset-mapping": {
+      "name": "Asset inventory",
+      "detail": "Inventory workflow with the four gates required."
+    }
+  },
+  "module": {
+    "stage-gate": "Stage gate",
+    "route-boost": "Route boost",
+    "sec-enforce": "Report enforcement",
+    "refusal-guard": "Refusal bypass",
+    "trace-vault": "Trace vault",
+    "auto-advance": "Reminder",
+    "product-subagents": "Subagents",
+    "mcp-studio": "Server list",
+    "results": "Results",
+    "hunter": "Verification",
+    "campaign-memory": "Session notes",
+    "mode-group": "Mode groups",
+    "session-pulse": "Session pulse",
+    "coverage": "Coverage",
+    "scanner-tools": "Scanners",
+    "semgrep-audit": "Source audit runner",
+    "shell-desk": "Shell desk"
+  },
+  "hero": {
+    "title": "Choose a mode",
+    "lead": "The general mode sits on top. Professional modes open from the button, including on a touch screen.",
+    "deployFirst": "Deploy the modes in Settings before choosing one.",
+    "professional": "Professional modes",
+    "hideProfessional": "Hide professional modes",
+    "selected": "Selected for the first turn.",
+    "clear": "Clear",
+    "unwired": "This app cannot apply the choice from the preset seat.",
+    "readOnly": "The first turn has started, so the mode stays as it was."
+  },
+  "session": {
+    "title": "Workflow gates",
+    "empty": "Open a session to see its gates.",
+    "noMode": "No mode recorded",
+    "phase": "Phase",
+    "goal": "Goal",
+    "noGoal": "No goal stored.",
+    "progress": "Progress",
+    "authorization": "Record authorization",
+    "authorizationDone": "Authorization recorded",
+    "authorizationHint": "Write down that this session is authorized. Later gates stay closed until this is recorded.",
+    "report": "Open report gate",
+    "reportOpen": "Report gate open",
+    "reportClosed": "Report gate closed",
+    "reportHint": "Open this after authorization. It is not the first step when no gates are recorded.",
+    "reminder": "Send reminder",
+    "reminderHint": "Queue a reminder you send yourself. Nothing goes out on its own.",
+    "actionsLead": "Start with authorization. The report gate is the later step.",
+    "denials": "Refusals",
+    "noDenials": "No refusal on this session.",
+    "notes": "Notes",
+    "noNotes": "No notes yet.",
+    "coverage": "Coverage"
+  },
+  "header": {
+    "progress": "Gates",
+    "denials": "Refusals",
+    "empty": "No session"
+  }
+}

package/locales/zh-CN.json

@@ -0,0 +1,143 @@
+{
+  "common": {
+    "loading": "正在加载模式管理器。",
+    "empty": "模式管理器还不可用。",
+    "source": "模式管理器",
+    "installed": "已安装",
+    "absent": "未安装"
+  },
+  "settings": {
+    "title": "模式",
+    "lead": "部署十个预设，安装本包允许运行的模块，并在记录授权之前保持报告门关闭。模型连接留在执行器上。这一页不保存端点，也不保存密钥。",
+    "deploy": "部署模式",
+    "deploying": "正在部署…",
+    "remove": "移除模式",
+    "repair": "修复",
+    "deployed": "已部署",
+    "notDeployed": "未部署",
+    "routing": "模型路由留在执行器上。选择模式不会切换提供方、端点或凭据。",
+    "probeHold": "探针保持拦截",
+    "probeAllow": "探针已放行",
+    "denial": "最近一次拒绝",
+    "noDenial": "还没有工具被拒绝。",
+    "modes": "模式名册",
+    "modules": "运行时模块",
+    "install": "安装",
+    "update": "更新",
+    "uninstall": "卸载",
+    "withheldNote": "暂不提供的模块保持不可用。安装它们只会记下失败，不会带上那些行为。",
+    "mcpNote": "服务列表模块只记录曾经请求过一份列表。它不会挂载服务。",
+    "hostPluginsTitle": "安装和卸载插件",
+    "hostPluginsLead": "这一页不安装、也不卸载插件。要安装或卸载，打开插件页。",
+    "hostPluginsAction": "打开插件页",
+    "operations": "操作日志",
+    "noOperations": "还没有操作。重启会把仍在进行的操作记成中断。",
+    "limitsTitle": "宿主限制",
+    "limitBundle": "一次安装只装一个插件。这个管理器不附带十七个子包，也不把宿主平面和预设平面拆开。",
+    "limitIsolate": "预设不会从工具列表里藏起工具。守卫在调用执行前拒绝。",
+    "limitSection": "常驻提示段出现在每个会话上，而且不写具体模式。只有安装了路由增强、并且该会话记下了模式时，才会加上模式信封。",
+    "limitList": "宿主选择器里的预设名是一条英文标签。",
+    "limitEvents": "管理器听 thread.created。它不读执行器帧。",
+    "limitFollowup": "提醒是你在这个会话里发出的一轮用户消息。没有任何内容会自己送出。",
+    "limitSubagent": "这个包不注册子代理提供者。",
+    "limitScanner": "扫描程序、审计运行器和外壳台暂不提供。不会拉起任何程序。",
+    "limitPicker": "模式只能在第一轮之前选择。",
+    "limitTurn": "第一轮可能在创建事件落盘之前开始。预设前缀仍然生效。信封可能要到下一轮才出现。",
+    "limitRefresh": "手机在还看不到某个预设 id 时会丢掉它。先部署模式，等预设列表刷新后再选一次。"
+  },
+  "op": {
+    "running": "进行中",
+    "succeeded": "已成功",
+    "failed": "已失败"
+  },
+  "group": {
+    "general": "通用",
+    "professional": "专业"
+  },
+  "plane": {
+    "host": "宿主平面",
+    "preset": "预设平面"
+  },
+  "availability": {
+    "active": "可用",
+    "withheld": "暂不提供",
+    "record": "仅记录"
+  },
+  "phase": {
+    "authorization": "授权",
+    "scope": "范围",
+    "evidence": "证据",
+    "report": "报告"
+  },
+  "mode": {
+    "redteam": { "name": "研究员", "detail": "通用会话。门是可选的。" },
+    "pentest": { "name": "评估", "detail": "已授权的复核，四道门都要过。" },
+    "code-audit": { "name": "代码复核", "detail": "源码复核，四道门都要过。" },
+    "binary-analysis": { "name": "二进制复核", "detail": "二进制复核，四道门都要过。" },
+    "attack-defense": { "name": "演习", "detail": "已授权的演习，四道门都要过。" },
+    "av-evasion": { "name": "检测复核", "detail": "检测复核。不包含规避步骤、载荷或绕过拒绝。" },
+    "incident-response": { "name": "事件复核", "detail": "事件复核，四道门都要过。" },
+    "cloud-security": { "name": "云复核", "detail": "云复核，四道门都要过。" },
+    "ctf-solver": { "name": "谜题工作区", "detail": "谜题工作区，四道门都要过。" },
+    "asset-mapping": { "name": "资产盘点", "detail": "盘点流程，四道门都要过。" }
+  },
+  "module": {
+    "stage-gate": "阶段门",
+    "route-boost": "路由增强",
+    "sec-enforce": "报告门执行",
+    "refusal-guard": "绕过拒绝",
+    "trace-vault": "痕迹库",
+    "auto-advance": "提醒",
+    "product-subagents": "子代理",
+    "mcp-studio": "服务列表",
+    "results": "结果",
+    "hunter": "核验",
+    "campaign-memory": "会话笔记",
+    "mode-group": "模式分组",
+    "session-pulse": "会话脉搏",
+    "coverage": "覆盖",
+    "scanner-tools": "扫描器",
+    "semgrep-audit": "源码审计运行器",
+    "shell-desk": "外壳台"
+  },
+  "hero": {
+    "title": "选择模式",
+    "lead": "通用模式放在最上面。专业模式要点按钮才展开，触摸屏也一样。",
+    "deployFirst": "先在设置里部署模式，再选择。",
+    "professional": "专业模式",
+    "hideProfessional": "收起专业模式",
+    "selected": "已选作第一轮的模式。",
+    "clear": "清除",
+    "unwired": "这个应用不能从预设座位应用这次选择。",
+    "readOnly": "第一轮已经开始，模式保持原样。"
+  },
+  "session": {
+    "title": "流程门",
+    "empty": "打开一个会话才能看到它的门。",
+    "noMode": "还没有记下模式",
+    "phase": "阶段",
+    "goal": "目标",
+    "noGoal": "还没有存下目标。",
+    "progress": "进度",
+    "authorization": "记录授权",
+    "authorizationDone": "已记录授权",
+    "authorizationHint": "先记下这个会话已经获得授权。这一步没记下之前，后面的门保持关闭。",
+    "report": "打开报告门",
+    "reportOpen": "报告门已开",
+    "reportClosed": "报告门关闭",
+    "reportHint": "授权记下之后再开这一门。一门都还没记下时，它不是第一步。",
+    "reminder": "发送提醒",
+    "reminderHint": "排一条你自己发出的提醒。不会自动送出。",
+    "actionsLead": "从记录授权开始。报告门是后面的步骤。",
+    "denials": "拒绝",
+    "noDenials": "这个会话上没有拒绝。",
+    "notes": "笔记",
+    "noNotes": "还没有笔记。",
+    "coverage": "覆盖"
+  },
+  "header": {
+    "progress": "门",
+    "denials": "拒绝",
+    "empty": "没有会话"
+  }
+}

package/package.json

@@ -1,6 +1,84 @@
 {
   "name": "@ycodium-ai/plugin-redteam-model",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.2.2944",
+  "description": "Deploys ten session modes, a gate rail, and a tool guard. The executor keeps the model connection.",
+  "keywords": [
+    "redteam-model",
+    "ycodium",
+    "ycodium-plugin"
+  ],
+  "license": "UNLICENSED",
+  "files": [
+    "dist",
+    "assets",
+    "skills",
+    "locales",
+    "README.md"
+  ],
+  "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/react": "~19.2.14",
+    "esbuild": "0.28.1",
+    "react": "19.2.6",
+    "typescript": "~6.0.3",
+    "vite-plus": "0.2.2",
+    "@ycodium/contracts": "0.0.33",
+    "@ycodium-ai/plugin-api": "0.2.2944"
+  },
+  "ycodium": {
+    "plugin": "./dist/index.js",
+    "displayName": "Mode manager",
+    "description": "Deploys ten session modes, a gate rail, and a tool guard. The executor keeps the model connection.",
+    "icon": "./assets/icon.svg",
+    "permissions": [
+      {
+        "kind": "systemPrompt"
+      },
+      {
+        "kind": "tools.guard"
+      },
+      {
+        "kind": "agentPresets"
+      },
+      {
+        "kind": "sessionProjection"
+      },
+      {
+        "kind": "threads.user"
+      },
+      {
+        "kind": "commands.dispatch",
+        "commands": [
+          "thread.turn.start"
+        ]
+      },
+      {
+        "kind": "ui.seats",
+        "seats": [
+          "settings.section",
+          "conversation.hero.agentPreset",
+          "conversation.view",
+          "conversation.session.header.actions"
+        ]
+      }
+    ],
+    "skills": [
+      {
+        "dir": "./skills/redteam-model",
+        "files": []
+      }
+    ],
+    "ui": {
+      "assets": "./assets",
+      "entry": "ui.js"
+    }
+  },
+  "scripts": {
+    "build": "node build.mjs",
+    "typecheck": "tsgo --noEmit && tsgo --noEmit -p tsconfig.ui.json",
+    "test": "vp test run"
+  }
 }

package/skills/redteam-model/SKILL.md

@@ -0,0 +1,19 @@
+---
+name: redteam-model
+description: How to use the mode manager tools for gates, a short goal, progress, a report gate, a harmless probe, and a note. Load when the user message names one of those tools.
+---
+
+# Mode manager
+
+The mode manager records workflow gates. It does not describe a procedure.
+
+Tools, when the matching module is installed:
+
+- `redteam-model_gates_list` lists authorization, scope, evidence, and report.
+- `redteam-model_operation_goal` stores a short label.
+- `redteam-model_operation_progress` stores done and total counts.
+- `redteam-model_publish` opens the report gate only after authorization is recorded. A guard can refuse it first.
+- `redteam-model_probe` is a harmless call. It may be held.
+- `redteam-model_ledger_note` appends a short note.
+
+Do not invent steps, payloads, or a bypass. If a tool returns an error, stop and say which module or gate is missing.