@yiaany/ghostapi 0.1.7 → 0.1.8

package/CHANGELOG.md

@@ -4,6 +4,44 @@ All notable changes to GhostAPI will be documented in this file.
 
 The format follows the spirit of [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project uses semantic versioning once public releases begin.
 
+## 0.1.8 - 2026-08-22
+
+### Security
+
+- Added a local tenant-scoped action ledger with bounded structured redaction, SHA-256 append-only chains, verification/export integrity checks, legal-hold/deletion-request semantics, and no credential or raw payload persistence. Added incident-to-synthetic-world/scenario fixtures that replay only in memory and preserve ambiguous outcomes as reconciliation-required.
+- Added a local tenant-scoped agent inventory and attack-path graph (`inventory.json`) with provenance- and freshness-carrying records and edges, tenant-scoped reads/writes/export, strict payload validation that rejects secret-shaped values, reference-bound operator authorization per action, bounded store, an open export (inventory, policies, eval scenario references, evidence metadata, removal analysis, ROI built only from imported counters and applied remediations), and a remediation workflow whose scope reductions are validated as strict subsets at proposal and apply time. Heuristic blast-radius classifications are explicitly labeled advisory. The enterprise pilot gate is not yet met; results are for local synthetic review.
+- Added a persisted local synthetic safety controller with scoped kill switches, locked budget reservations, circuit breakers, bounded queue/dead-letter handling, audited separately authorized re-enable, final synthetic commit checks, and a scheduled non-destructive game-day drill. No provider, credential, HTTP, or hosted emergency transport was added.
+- Added a local synthetic trust ladder with strict no-side-effect level capabilities, explicit unsupported dry-run/trusted states, verified-owner promotion evidence, deterministic scoped canaries, hash-only shadow/outcome comparison, automatic demotion/circuit-breaker policy, rollback audit reasons, and no provider execution path.
+- Hardened the local approval inbox so inbox-issued artifacts cannot be submitted or executed through the public action-gateway path, and verified approver principals prevent actor aliases from self-approving or satisfying two-person review.
+- Hardened credential execution receipts and revocation handling: vault/provider I/O no longer holds the broker mutation lock, executors must recheck active grants before side effects, and executor errors are recorded as non-retryable unknown outcomes rather than confirmed failures.
+- Added a local approval inbox with action-hash-bound, one-time expiring artifacts, derived risk taxonomy, independent two-person approval, amount/resource/environment/actor/confidence/velocity policy checks, timeout/revoke fail-closed handling, and action-receipt-linked audit records for the synthetic adapter only.
+- Added a credential-broker and workload-identity boundary that stores only metadata, issues scoped server-only short-lived grants bound to action receipts, rechecks revocation/expiry/scope/tenant/workload at execution, invalidates grants on rotation, and ships test-only vault/provider adapters without real credential or network capability.
+- Bound explicit evidence run-input files before parsing and reject malformed JSON, preventing unbounded local memory consumption through `evidence generate --run`.
+- Redact secret-shaped target-start errors before writing Linux run evidence.
+- Redact secret-shaped target stdout/stderr before forwarding it to the operator or CI log, including tokens split across stream chunks; interrupted namespace runs now preserve the caller signal exit code and finalize evidence after escalation.
+- Added bounded queue-body handling to the separate undeployed hosted pilot before signature verification or JSON parsing.
+- Hardened the undeployed hosted pilot with explicit tenant/role authorization, tenant-safe cross-boundary responses, exact-origin mutation checks, secure session/cookie and response-header defaults, and one-time SHA-256-only invitation and ingest secrets.
+- Added hosted request/body limits, concurrency-safe durable quotas, bounded worker/outbox retries and dead-letter state, retention cleanup, and dependency-aware readiness checks; these controls are implemented and locally verified but not yet deployed.
+- Restricted the standard GitHub Actions CI token to `contents: read`.
+
+### Changed
+
+- Published a valid package root with ESM and declaration exports, and extended packed-artifact smoke coverage to import `@yiaany/ghostapi` directly.
+- Corrected repository identity to `yiaany/ghostapi`, standardized public commands on `@yiaany/ghostapi`, removed the bundled landing page so `/` opens the dashboard, and clarified setup generation and scenario arming behavior.
+- Upgraded Vite and Vitest to audited compatible versions, added formatting checks, and expanded CI across Node.js and desktop platforms with package, production audit, and hosted-pilot checks.
+- Clarified that `GET /health` is a liveness response that stays HTTP 200 while `GET /health/readiness` returns the structural report and HTTP 503 when dependencies are degraded.
+- Added deterministic malformed-input regression coverage for policy, OpenAPI, and scenario-bundle parsers.
+- Added release-readiness and migration/rollback documentation with platform-specific guarantees and known gaps.
+
+### Fixed
+
+- Fixed dashboard clear actions so non-2xx responses are reported as failures, filtered request counts reflect visible rows, and malformed SSE messages are ignored without breaking the stream handler.
+- Hardened the safety controller and action gateway: time-bounded synthetic leases with a default 60 s TTL, a two-phase final commit that re-checks the lease and records `action.final_check` after the operation, a tolerant terminal `complete()`, a stable `SAFETY_KILL_SWITCH` error code, and bounded dead-letter eviction. Gateway commit errors are no longer silently swallowed.
+- Hardened the action ledger: caller-claimed basis markers on echoed policy/approval records, per-tenant retention rotation with hash-chain relinking at the 2,000-entry bound, and a `tracked` flag so a tenant without entries verifies distinctly from a broken chain.
+- Hardened local reliability: SLO sampling is batch-bounded and latency counts only successful samples, reconciliation rejects missing worlds structurally and requires the `reconciliation.manage` permission, and cost governance is idempotent with a pure report path and tenant-scoped alerts.
+- Hardened runtime health and backups: the inventory store is part of health checks, restores refuse non-empty directories, and backup exclusions use canonical cache/backup paths instead of folder names.
+- Hardened the inventory controller: stale attack-path edges are filtered and garbage-collected, findings and import runs are bounded with per-tenant rotation, ineffective remediations can be reopened and are gated by injected eval-scenario existence, and remediation targets validate the environment reference.
+
 ## 0.1.7 - 2026-07-18
 
 ### Changed
@@ -14,8 +52,8 @@ The format follows the spirit of [Keep a Changelog](https://keepachangelog.com/e
 
 ### Fixed
 
-- Updated npm package repository, bugs, and homepage URLs to point to `yiaany/ghostapi` instead of broken legacy links.
-- Replaced custom CI badge with live GitHub Actions workflow status badge (`yiaany/ghostapi/actions/workflows/ci.yml/badge.svg`).
+- Updated npm package repository, bugs, and homepage URLs to point to the then-current repository instead of broken legacy links.
+- Replaced the custom CI badge with a live GitHub Actions workflow status badge.
 
 ## 0.1.5 - 2026-07-18
 
@@ -67,6 +105,8 @@ The format follows the spirit of [Keep a Changelog](https://keepachangelog.com/e
 
 ### Security
 
+- Added a local reliability layer with bounded stores and reference-bound capabilities: a local SLO controller (`slo.json`) that records samples only with a verified record capability, restricts configure/evaluate to authenticated operators, trims evaluation windows, and caps samples per metric and store bytes; a local reconciliation service (`reconciliation.json`) that blocks on ledger integrity failure, classifies ledger timelines as committed/not-committed/unknown/compensated/drifted against synthetic provider state, opens resolveable findings, and records duplicate-prevention, receipt-verification, availability, and execution-latency SLI samples; a local cost-governance store (`costs.json`) with capped attribution records, budgets, acknowledgeable alerts, and a linear-extrapolation forecast explicitly labeled as not a provider invoice; and runtime health plus verified local backup/restore (`reliability/backups/`) with sha256 manifests, tamper and path-traversal rejection, and no egress. `GET /health` reports liveness with readiness state at HTTP 200, while `GET /health/readiness` returns the structural report and HTTP 503 when a store is degraded.
+
 - No real external provider API calls by default.
 - Secrets are masked before prompt construction, cache key generation, event logging, and dashboard rendering.
 - `ghostapi doctor` warns about unsafe TLS bypass settings.

package/CONTRIBUTING.md

@@ -1,117 +1,119 @@
-# Contributing to GhostAPI
-
-Thanks for helping improve GhostAPI. This project aims to be small, safe, local-first, and useful for developers and AI coding agents.
-
-## Setup
-
-Requirements:
-
-- Node.js 20 or newer
-- npm
-
-Install dependencies:
-
-```bash
-npm install
-```
-
-Run the local development server:
-
-```bash
-npm run dev
-```
-
-Open:
-
-```text
-http://localhost:8080/dashboard
-```
-
-## Scripts
-
-```bash
-npm run typecheck
-npm test
-npm run build
-npm run dev
-```
-
-Use these before opening a pull request:
-
-```bash
-npm run typecheck
-npm test
-npm run build
-```
-
-## Tests
-
-Tests are written with Vitest and must stay local-only. Do not add tests that call real Stripe, Twilio, Resend, GitHub, OpenAI, or any other external API.
-
-Current test areas include:
-
-- Secret masking
-- Provider detection
-- Cache key stability
-- State save/read/list/delete
-- Provider error formatting
-- Prompt construction and JSON repair
-- Proxy flow integration
-- Dashboard/SSE event formatting
-
-Shared fixtures live in `test/fixtures/`.
-
-## Coding Style
-
-- TypeScript strict mode.
-- ESM modules.
-- Prefer functions and simple objects over classes.
-- Keep modules small and direct.
-- Avoid `any`; use `unknown` and narrow values where possible.
-- Add comments only where behavior is not obvious.
-- Keep user-facing errors actionable.
-- Do not introduce network calls to real provider APIs by default.
-
-## Adding A Provider
-
-GhostAPI intentionally keeps native adapters limited. For the MVP, native adapters are:
-
-- Stripe
-- Twilio
-- Resend
-- GitHub
-- Discord
-- OpenAI
-- Generic fallback
-
-Before adding a new native adapter, ask whether generic fallback plus prompt hints is enough. Native adapters should be reserved for providers where contract-specific behavior, validation, or error formatting is clearly worth maintaining.
-
-If a native adapter is justified:
-
-1. Add the adapter under `src/providers/`.
-2. Register it in `src/providers/registry.ts`.
-3. Add detection rules in `src/proxy/providerDetector.ts`.
-4. Add provider-specific prompt guidance in `src/ai/prompts.ts` only if useful.
-5. Add tests for detection, formatting, validation, and proxy behavior.
-6. Update README provider matrix.
-
-## Adding Prompt Hints
-
-Most services should use generic fallback. To improve generic behavior:
-
-1. Add or refine lightweight inference in `src/ai/genericInference.ts`.
-2. Keep labels best-effort, such as `generic:shopify-like`.
-3. Do not add provider-specific validation or error formats for generic services.
-4. Add tests in `test/genericInference.test.ts`.
-5. Update README coverage if the change affects documented behavior.
-
-## Pull Request Checklist
-
-- The change is scoped and explained clearly.
-- `npm run typecheck` passes.
-- `npm test` passes.
-- `npm run build` passes.
-- New behavior has tests when practical.
-- No real external API calls were added by default.
-- Secrets are not logged, cached, sent to LLM prompts, or exposed in dashboard payloads.
-- README or examples are updated when user-facing behavior changes.
+# Contributing to GhostAPI
+
+Thanks for helping improve GhostAPI. This project aims to be small, safe, local-first, and useful for developers and AI coding agents.
+
+## Setup
+
+Requirements:
+
+- Node.js 20 or newer
+- npm
+
+Install dependencies:
+
+```bash
+npm install
+```
+
+Run the local development server:
+
+```bash
+npm run dev
+```
+
+Open:
+
+```text
+http://localhost:8080/dashboard
+```
+
+## Scripts
+
+```bash
+npm run typecheck
+npm run lint
+npm test
+npm run build
+npm run dev
+```
+
+Use these before opening a pull request:
+
+```bash
+npm run typecheck
+npm run lint
+npm test
+npm run build
+```
+
+## Tests
+
+Tests are written with Vitest and must stay local-only. Do not add tests that call real Stripe, Twilio, Resend, GitHub, OpenAI, or any other external API.
+
+Current test areas include:
+
+- Secret masking
+- Provider detection
+- Cache key stability
+- State save/read/list/delete
+- Provider error formatting
+- Prompt construction and JSON repair
+- Proxy flow integration
+- Dashboard/SSE event formatting
+
+Shared fixtures live in `test/fixtures/`.
+
+## Coding Style
+
+- TypeScript strict mode.
+- ESM modules.
+- Prefer functions and simple objects over classes.
+- Keep modules small and direct.
+- Avoid `any`; use `unknown` and narrow values where possible.
+- Add comments only where behavior is not obvious.
+- Keep user-facing errors actionable.
+- Do not introduce network calls to real provider APIs by default.
+
+## Adding A Provider
+
+GhostAPI intentionally keeps native adapters limited. For the MVP, native adapters are:
+
+- Stripe
+- Twilio
+- Resend
+- GitHub
+- Discord
+- OpenAI
+- Generic fallback
+
+Before adding a new native adapter, ask whether generic fallback plus prompt hints is enough. Native adapters should be reserved for providers where contract-specific behavior, validation, or error formatting is clearly worth maintaining.
+
+If a native adapter is justified:
+
+1. Read `docs/providers/authoring-packs.md`.
+2. Add one built-in pack under `src/providers/packs/`.
+3. Register it in `src/providers/registry.ts` without changing generic fallback.
+4. Add deterministic conformance fixtures and provider regression tests.
+5. Do not import network, filesystem, environment, or state-store capabilities into the pack.
+6. Update README provider coverage and the versioned capability manifest.
+
+## Adding Prompt Hints
+
+Most services should use generic fallback. To improve generic behavior:
+
+1. Add or refine lightweight inference in `src/ai/genericInference.ts`.
+2. Keep labels best-effort, such as `generic:shopify-like`.
+3. Do not add provider-specific validation or error formats for generic services.
+4. Add tests in `test/genericInference.test.ts`.
+5. Update README coverage if the change affects documented behavior.
+
+## Pull Request Checklist
+
+- The change is scoped and explained clearly.
+- `npm run typecheck` passes.
+- `npm test` passes.
+- `npm run build` passes.
+- New behavior has tests when practical.
+- No real external API calls were added by default.
+- Secrets are not logged, cached, sent to LLM prompts, or exposed in dashboard payloads.
+- README or examples are updated when user-facing behavior changes.

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 GhostAPI contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 GhostAPI contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.