@yiaany/ghostapi 0.1.8 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +21 -0
- package/CONTRIBUTING.md +132 -119
- package/LICENSE +21 -21
- package/PROVENANCE.md +13 -0
- package/README.md +78 -80
- package/SECURITY.md +56 -53
- package/dist/actions/gateway.js +320 -72
- package/dist/actions/gateway.js.map +1 -1
- package/dist/actions/index.d.ts +2 -2
- package/dist/actions/index.js +1 -1
- package/dist/actions/index.js.map +1 -1
- package/dist/agents/agentPrompt.js +7 -5
- package/dist/agents/agentPrompt.js.map +1 -1
- package/dist/ai/aiClient.js +5 -5
- package/dist/ai/aiClient.js.map +1 -1
- package/dist/ai/aiGenerator.js +66 -26
- package/dist/ai/aiGenerator.js.map +1 -1
- package/dist/ai/genericInference.js +151 -36
- package/dist/ai/genericInference.js.map +1 -1
- package/dist/ai/prompts.js +55 -49
- package/dist/ai/prompts.js.map +1 -1
- package/dist/approvals/approvalInbox.js +649 -133
- package/dist/approvals/approvalInbox.js.map +1 -1
- package/dist/approvals/index.d.ts +2 -2
- package/dist/approvals/index.js +1 -1
- package/dist/approvals/index.js.map +1 -1
- package/dist/behavior/behaviorStore.js +34 -14
- package/dist/behavior/behaviorStore.js.map +1 -1
- package/dist/cache/index.js +14 -5
- package/dist/cache/index.js.map +1 -1
- package/dist/cli/index.js +226 -93
- package/dist/cli/index.js.map +1 -1
- package/dist/cli/openUrl.js +17 -3
- package/dist/cli/openUrl.js.map +1 -1
- package/dist/cli/parser.js +79 -18
- package/dist/cli/parser.js.map +1 -1
- package/dist/config/dataPaths.js +4 -2
- package/dist/config/dataPaths.js.map +1 -1
- package/dist/config/localConfig.js +5 -2
- package/dist/config/localConfig.js.map +1 -1
- package/dist/config/serverConfig.js +11 -5
- package/dist/config/serverConfig.js.map +1 -1
- package/dist/contracts/contract.js +311 -83
- package/dist/contracts/contract.js.map +1 -1
- package/dist/contracts/index.d.ts +2 -2
- package/dist/contracts/index.js +1 -1
- package/dist/contracts/index.js.map +1 -1
- package/dist/credentials/credentialBroker.js +391 -79
- package/dist/credentials/credentialBroker.js.map +1 -1
- package/dist/credentials/index.d.ts +2 -2
- package/dist/credentials/index.js +1 -1
- package/dist/credentials/index.js.map +1 -1
- package/dist/dashboard/app.js +823 -685
- package/dist/dashboard/dashboard.js.map +1 -1
- package/dist/dashboard/index.html +704 -267
- package/dist/dashboard/styles.css +1040 -349
- package/dist/egress/capabilities.js +55 -25
- package/dist/egress/capabilities.js.map +1 -1
- package/dist/egress/linuxBootstrap.js +47 -11
- package/dist/egress/linuxBootstrap.js.map +1 -1
- package/dist/egress/run.js +170 -31
- package/dist/egress/run.js.map +1 -1
- package/dist/errors/errorEngine.js +15 -3
- package/dist/errors/errorEngine.js.map +1 -1
- package/dist/errors/providerErrors.js.map +1 -1
- package/dist/evals/evals.js +304 -78
- package/dist/evals/evals.js.map +1 -1
- package/dist/evals/index.d.ts +2 -2
- package/dist/evals/index.js +1 -1
- package/dist/evals/index.js.map +1 -1
- package/dist/evidence/index.d.ts +2 -2
- package/dist/evidence/index.js +1 -1
- package/dist/evidence/index.js.map +1 -1
- package/dist/evidence/report.d.ts +1 -1
- package/dist/evidence/report.js +263 -79
- package/dist/evidence/report.js.map +1 -1
- package/dist/fault/faultLab.js +24 -9
- package/dist/fault/faultLab.js.map +1 -1
- package/dist/index.d.ts +42 -42
- package/dist/index.js +21 -21
- package/dist/index.js.map +1 -1
- package/dist/inventory/analysis.d.ts +1 -1
- package/dist/inventory/analysis.js +174 -50
- package/dist/inventory/analysis.js.map +1 -1
- package/dist/inventory/index.d.ts +4 -4
- package/dist/inventory/index.js +3 -3
- package/dist/inventory/index.js.map +1 -1
- package/dist/inventory/inventoryController.js +362 -115
- package/dist/inventory/inventoryController.js.map +1 -1
- package/dist/inventory/types.js +680 -140
- package/dist/inventory/types.js.map +1 -1
- package/dist/ledger/actionLedger.js +355 -78
- package/dist/ledger/actionLedger.js.map +1 -1
- package/dist/ledger/index.d.ts +2 -2
- package/dist/ledger/index.js +1 -1
- package/dist/ledger/index.js.map +1 -1
- package/dist/mcp/server.js +26 -11
- package/dist/mcp/server.js.map +1 -1
- package/dist/policy/index.d.ts +2 -2
- package/dist/policy/index.js +1 -1
- package/dist/policy/index.js.map +1 -1
- package/dist/policy/policy.js +112 -32
- package/dist/policy/policy.js.map +1 -1
- package/dist/productTelemetry/index.js +71 -20
- package/dist/productTelemetry/index.js.map +1 -1
- package/dist/providers/conformance.js +10 -5
- package/dist/providers/conformance.js.map +1 -1
- package/dist/providers/discord.js +2 -2
- package/dist/providers/generic.js +3 -3
- package/dist/providers/github.js +2 -2
- package/dist/providers/index.d.ts +3 -3
- package/dist/providers/index.js +2 -2
- package/dist/providers/index.js.map +1 -1
- package/dist/providers/openai.js +3 -3
- package/dist/providers/packs/resendPack.js +51 -25
- package/dist/providers/packs/resendPack.js.map +1 -1
- package/dist/providers/packs/stripePack.js +590 -121
- package/dist/providers/packs/stripePack.js.map +1 -1
- package/dist/providers/registry.js +4 -4
- package/dist/providers/registry.js.map +1 -1
- package/dist/providers/runtime.js +7 -6
- package/dist/providers/runtime.js.map +1 -1
- package/dist/providers/stripeWebhook.js +39 -10
- package/dist/providers/stripeWebhook.js.map +1 -1
- package/dist/providers/twilio.js +2 -2
- package/dist/proxy/cacheKey.js +9 -2
- package/dist/proxy/cacheKey.js.map +1 -1
- package/dist/proxy/providerDetector.js +22 -9
- package/dist/proxy/providerDetector.js.map +1 -1
- package/dist/proxy/proxyHandler.js +57 -22
- package/dist/proxy/proxyHandler.js.map +1 -1
- package/dist/proxy/requestNormalizer.js +4 -2
- package/dist/proxy/requestNormalizer.js.map +1 -1
- package/dist/reliability/costGovernance.js +211 -49
- package/dist/reliability/costGovernance.js.map +1 -1
- package/dist/reliability/index.d.ts +8 -8
- package/dist/reliability/index.js +4 -4
- package/dist/reliability/index.js.map +1 -1
- package/dist/reliability/reconciliation.js +274 -65
- package/dist/reliability/reconciliation.js.map +1 -1
- package/dist/reliability/runtimeHealth.js +127 -35
- package/dist/reliability/runtimeHealth.js.map +1 -1
- package/dist/reliability/slo.js +257 -50
- package/dist/reliability/slo.js.map +1 -1
- package/dist/report/safetyReport.d.ts +6 -0
- package/dist/report/safetyReport.js +56 -12
- package/dist/report/safetyReport.js.map +1 -1
- package/dist/rules/aiRules.js +5 -5
- package/dist/rules/aiRules.js.map +1 -1
- package/dist/safety/index.d.ts +2 -2
- package/dist/safety/index.js +1 -1
- package/dist/safety/index.js.map +1 -1
- package/dist/safety/safetyController.js +675 -165
- package/dist/safety/safetyController.js.map +1 -1
- package/dist/scenarios/scenarioBundle.js +204 -71
- package/dist/scenarios/scenarioBundle.js.map +1 -1
- package/dist/scenarios/scenarioStore.js +88 -29
- package/dist/scenarios/scenarioStore.js.map +1 -1
- package/dist/security/headerSanitizer.js +52 -10
- package/dist/security/headerSanitizer.js.map +1 -1
- package/dist/security/secrets.js +10 -5
- package/dist/security/secrets.js.map +1 -1
- package/dist/server/accessControl.js +37 -10
- package/dist/server/accessControl.js.map +1 -1
- package/dist/server/createServer.js +1 -1
- package/dist/server/createServer.js.map +1 -1
- package/dist/server/eventsStore.js +15 -5
- package/dist/server/eventsStore.js.map +1 -1
- package/dist/server/routes.js +67 -19
- package/dist/server/routes.js.map +1 -1
- package/dist/server/sse.js +1 -1
- package/dist/server/sse.js.map +1 -1
- package/dist/setup/sdkDetector.js +7 -2
- package/dist/setup/sdkDetector.js.map +1 -1
- package/dist/setup/setupGenerator.js +136 -48
- package/dist/setup/setupGenerator.js.map +1 -1
- package/dist/state/stateExtractor.js +3 -1
- package/dist/state/stateExtractor.js.map +1 -1
- package/dist/state/stateResolver.js +10 -7
- package/dist/state/stateResolver.js.map +1 -1
- package/dist/state/stateStore.js +13 -4
- package/dist/state/stateStore.js.map +1 -1
- package/dist/storage/fileStore.js +12 -4
- package/dist/storage/fileStore.js.map +1 -1
- package/dist/teamControl/controlPlane.js +846 -174
- package/dist/teamControl/controlPlane.js.map +1 -1
- package/dist/teamControl/deployment.js +19 -5
- package/dist/teamControl/deployment.js.map +1 -1
- package/dist/teamControl/index.d.ts +4 -4
- package/dist/teamControl/index.js +2 -2
- package/dist/teamControl/index.js.map +1 -1
- package/dist/tests/testGenerator.js +15 -7
- package/dist/tests/testGenerator.js.map +1 -1
- package/dist/trust/index.d.ts +2 -2
- package/dist/trust/index.js +1 -1
- package/dist/trust/index.js.map +1 -1
- package/dist/trust/trustLadder.js +309 -63
- package/dist/trust/trustLadder.js.map +1 -1
- package/dist/worlds/index.d.ts +2 -2
- package/dist/worlds/index.js +1 -1
- package/dist/worlds/index.js.map +1 -1
- package/dist/worlds/worlds.js +364 -65
- package/dist/worlds/worlds.js.map +1 -1
- package/docs/assets/dashboard.png +0 -0
- package/docs/assets/ghostapi-avatar.png +0 -0
- package/docs/ci.md +49 -49
- package/docs/github-actions.md +84 -84
- package/docs/mcp.md +58 -52
- package/docs/policy.md +63 -61
- package/docs/providers/authoring-packs.md +180 -175
- package/docs/providers/stripe-core-pack.md +84 -82
- package/docs/releases/README.md +13 -0
- package/docs/security/action-gateway-threat-model.md +34 -34
- package/docs/security/action-ledger-incident-replay-threat-model.md +42 -42
- package/docs/security/approval-inbox-threat-model.md +35 -35
- package/docs/security/credential-broker-threat-model.md +52 -52
- package/docs/security/egress-threat-model.md +126 -126
- package/docs/security/inventory-threat-model.md +104 -104
- package/docs/security/kill-switch-budgets-threat-model.md +37 -37
- package/docs/security/reliability-threat-model.md +111 -111
- package/docs/security/trust-ladder-threat-model.md +33 -33
- package/docs/telemetry.md +14 -0
- package/docs/usage.md +680 -571
- package/examples/README.md +10 -10
- package/examples/agent-instructions/README.md +39 -39
- package/examples/ci-smoke/README.md +21 -21
- package/examples/ci-smoke/ghostapi.policy.yaml +22 -22
- package/examples/ci-smoke/package.json +9 -9
- package/examples/ci-smoke/production-egress.mjs +4 -2
- package/examples/ci-smoke/safe.mjs +21 -17
- package/examples/evals/README.md +24 -24
- package/examples/evals/retry-after.eval.json +71 -52
- package/examples/generic-rest/README.md +27 -27
- package/examples/github-fetch/README.md +38 -35
- package/examples/openai-streaming/README.md +16 -16
- package/examples/openai-streaming/streaming-tool-call.mjs +44 -31
- package/examples/policy/ghostapi.policy.yaml +27 -27
- package/examples/record-replay/README.md +19 -19
- package/examples/record-replay/replay-requests.json +22 -22
- package/examples/record-replay/stripe-checkout.har.json +30 -30
- package/examples/resend-node/README.md +22 -22
- package/examples/stripe-node/README.md +35 -35
- package/examples/stripe-node/checkout-flow.mjs +87 -61
- package/examples/twilio-node/README.md +21 -21
- package/examples/worlds/README.md +19 -19
- package/examples/worlds/subscription-recovery.mjs +21 -12
- package/package.json +28 -6
- package/dist/landing/assets/index-BXR41fAD.css +0 -1
- package/dist/landing/assets/index-CxWsopzP.css +0 -1
- package/dist/landing/assets/index-D8_ggMRE.js +0 -55
- package/dist/landing/assets/index-DZlpyhqd.js +0 -55
- package/dist/landing/assets/index-Dk-Xezs3.js +0 -55
- package/dist/landing/index.html +0 -15
- package/dist/landing/landing.d.ts +0 -3
- package/dist/landing/landing.js +0 -12
- package/dist/landing/landing.js.map +0 -1
- package/docs/commercial/README.md +0 -29
- package/docs/commercial/data-inventory.md +0 -36
- package/docs/commercial/manual-invoicing.md +0 -44
- package/docs/commercial/metrics.md +0 -51
- package/docs/commercial/pricing.md +0 -103
- package/docs/commercial/privacy-policy-draft.md +0 -41
- package/docs/commercial/terms-topics-for-counsel.md +0 -51
- package/docs/design-partners/README.md +0 -52
- package/docs/design-partners/demo-narratives.md +0 -33
- package/docs/design-partners/design-partner-offer.md +0 -39
- package/docs/design-partners/discovery-questions.md +0 -28
- package/docs/design-partners/feedback-capture-template.md +0 -48
- package/docs/design-partners/icp-one-pager.md +0 -43
- package/docs/design-partners/onboarding-checklist.md +0 -33
- package/docs/design-partners/pilot-success-criteria.md +0 -27
- package/docs/design-partners/pricing-interview-script.md +0 -18
- package/docs/design-partners/telemetry-plan.md +0 -48
- package/docs/development/baseline.md +0 -114
- package/docs/development/onboarding-smoke.md +0 -37
- package/docs/development/verification-0.1.8.md +0 -25
- package/docs/enterprise-product-roadmap-ru.md +0 -1879
- package/docs/fundraising/README.md +0 -87
- package/docs/fundraising/data-room-checklist.md +0 -72
- package/docs/fundraising/demo-script.md +0 -52
- package/docs/fundraising/design-partners-50.md +0 -74
- package/docs/fundraising/launch-posts.md +0 -37
- package/docs/fundraising/metrics-and-evidence.md +0 -30
- package/docs/fundraising/roadmap-12-month.md +0 -25
- package/docs/fundraising/technical-due-diligence-index.md +0 -37
- package/docs/fundraising/yc-application.md +0 -25
- package/docs/hosted-pilot.md +0 -111
- package/docs/operations/disaster-recovery-runbook.md +0 -81
- package/docs/operations/kill-switch-runbook.md +0 -32
- package/docs/release-checklist.md +0 -83
- package/docs/release-migration-and-rollback.md +0 -63
- package/docs/release-readiness.md +0 -39
- package/docs/team-control-plane.md +0 -72
|
@@ -1,35 +1,76 @@
|
|
|
1
1
|
import { readdir, readFile, stat } from "node:fs/promises";
|
|
2
2
|
import { join, relative } from "node:path";
|
|
3
|
-
import { detectSdks, readPackageJson } from "../setup/sdkDetector.js";
|
|
4
|
-
const SKIP_DIRS = new Set([
|
|
5
|
-
|
|
3
|
+
import { detectSdks, readPackageJson, } from "../setup/sdkDetector.js";
|
|
4
|
+
const SKIP_DIRS = new Set([
|
|
5
|
+
"node_modules",
|
|
6
|
+
"dist",
|
|
7
|
+
".git",
|
|
8
|
+
".ghostapi",
|
|
9
|
+
"coverage",
|
|
10
|
+
]);
|
|
11
|
+
const SOURCE_EXTENSIONS = new Set([
|
|
12
|
+
".js",
|
|
13
|
+
".jsx",
|
|
14
|
+
".ts",
|
|
15
|
+
".tsx",
|
|
16
|
+
".mjs",
|
|
17
|
+
".cjs",
|
|
18
|
+
".env",
|
|
19
|
+
".json",
|
|
20
|
+
]);
|
|
21
|
+
const MAX_FILES = 250;
|
|
22
|
+
const MAX_FILE_BYTES = 300_000;
|
|
6
23
|
export async function generateSafetyReport(projectRoot = process.cwd()) {
|
|
7
24
|
const packageJson = await readPackageJson(projectRoot);
|
|
8
25
|
const detected = detectSdks(packageJson);
|
|
9
26
|
const findings = [];
|
|
10
|
-
const files = await collectFiles(projectRoot, projectRoot,
|
|
27
|
+
const files = await collectFiles(projectRoot, projectRoot, MAX_FILES);
|
|
11
28
|
for (const file of files) {
|
|
12
29
|
const content = await readFile(join(projectRoot, file), "utf8");
|
|
13
30
|
const fixture = isFixturePath(file);
|
|
14
31
|
if (/api\.stripe\.com|api\.openai\.com|api\.twilio\.com/i.test(content)) {
|
|
15
|
-
findings.push({
|
|
32
|
+
findings.push({
|
|
33
|
+
severity: fixture ? "low" : "high",
|
|
34
|
+
message: fixture
|
|
35
|
+
? "Production provider host appears in a test, documentation, or example fixture."
|
|
36
|
+
: "Production provider host appears in source.",
|
|
37
|
+
file,
|
|
38
|
+
});
|
|
16
39
|
}
|
|
17
40
|
if (/sk_live_[A-Za-z0-9]{16,}/.test(content)) {
|
|
18
|
-
findings.push({
|
|
41
|
+
findings.push({
|
|
42
|
+
severity: fixture ? "low" : "high",
|
|
43
|
+
message: fixture
|
|
44
|
+
? "Live-looking Stripe key appears in a test, documentation, or example fixture."
|
|
45
|
+
: "Live-looking Stripe key appears in source.",
|
|
46
|
+
file,
|
|
47
|
+
});
|
|
19
48
|
}
|
|
20
|
-
if (/STRIPE_SECRET_KEY|OPENAI_API_KEY|TWILIO_AUTH_TOKEN/.test(content) &&
|
|
21
|
-
|
|
49
|
+
if (/STRIPE_SECRET_KEY|OPENAI_API_KEY|TWILIO_AUTH_TOKEN/.test(content) &&
|
|
50
|
+
!/GHOSTAPI_|host:|baseURL/.test(content)) {
|
|
51
|
+
findings.push({
|
|
52
|
+
severity: "medium",
|
|
53
|
+
message: "Provider secret is referenced without an obvious GhostAPI local override nearby.",
|
|
54
|
+
file,
|
|
55
|
+
});
|
|
22
56
|
}
|
|
23
57
|
}
|
|
24
58
|
return {
|
|
25
59
|
projectRoot,
|
|
26
60
|
detected,
|
|
27
61
|
findings,
|
|
28
|
-
recommendations: buildRecommendations(detected, findings)
|
|
62
|
+
recommendations: buildRecommendations(detected, findings),
|
|
63
|
+
limits: {
|
|
64
|
+
scannedFiles: files.length,
|
|
65
|
+
maxFiles: MAX_FILES,
|
|
66
|
+
maxFileBytes: MAX_FILE_BYTES,
|
|
67
|
+
extensions: [...SOURCE_EXTENSIONS].sort(),
|
|
68
|
+
},
|
|
29
69
|
};
|
|
30
70
|
}
|
|
31
71
|
function isFixturePath(file) {
|
|
32
|
-
return /^(?:test|docs|examples)\//.test(file) ||
|
|
72
|
+
return (/^(?:test|docs|examples)\//.test(file) ||
|
|
73
|
+
/(?:^|\/)(?:fixtures?|__fixtures__)(?:\/|$)/.test(file));
|
|
33
74
|
}
|
|
34
75
|
async function collectFiles(root, dir, limit, acc = []) {
|
|
35
76
|
if (acc.length >= limit)
|
|
@@ -50,14 +91,17 @@ async function collectFiles(root, dir, limit, acc = []) {
|
|
|
50
91
|
if (!SOURCE_EXTENSIONS.has(ext))
|
|
51
92
|
continue;
|
|
52
93
|
const info = await stat(fullPath);
|
|
53
|
-
if (info.size >
|
|
94
|
+
if (info.size > MAX_FILE_BYTES)
|
|
54
95
|
continue;
|
|
55
96
|
acc.push(relative(root, fullPath).replace(/\\/g, "/"));
|
|
56
97
|
}
|
|
57
98
|
return acc;
|
|
58
99
|
}
|
|
59
100
|
function buildRecommendations(detected, findings) {
|
|
60
|
-
const recommendations = [
|
|
101
|
+
const recommendations = [
|
|
102
|
+
"Run ghostapi setup --write to generate agent rules and MCP snippets.",
|
|
103
|
+
"Use ghostapi start --open during local integration work.",
|
|
104
|
+
];
|
|
61
105
|
if (detected.includes("stripe"))
|
|
62
106
|
recommendations.push("Configure Stripe with host: '127.0.0.1', port: 8080, and protocol: 'http' for local GhostAPI calls.");
|
|
63
107
|
if (detected.includes("openai"))
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"safetyReport.js","sourceRoot":"","sources":["../../src/report/safetyReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,
|
|
1
|
+
{"version":3,"file":"safetyReport.js","sourceRoot":"","sources":["../../src/report/safetyReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,eAAe,GAEhB,MAAM,yBAAyB,CAAC;AAqBjC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,MAAM;IACN,MAAM;IACN,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACtE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxE,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;gBAClC,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,gFAAgF;oBAClF,CAAC,CAAC,6CAA6C;gBACjD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;gBAClC,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,+EAA+E;oBACjF,CAAC,CAAC,4CAA4C;gBAChD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QACD,IACE,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC;YAClE,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EACxC,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EACL,kFAAkF;gBACpF,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,QAAQ;QACR,QAAQ;QACR,eAAe,EAAE,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACzD,MAAM,EAAE;YACN,YAAY,EAAE,KAAK,CAAC,MAAM;YAC1B,QAAQ,EAAE,SAAS;YACnB,YAAY,EAAE,cAAc;YAC5B,UAAU,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,IAAI,EAAE;SAC1C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,CACL,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QACtC,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,GAAW,EACX,KAAa,EACb,MAAgB,EAAE;IAElB,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC5B,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;YAAE,SAAS;QACzC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAuB,EACvB,QAAyB;IAEzB,MAAM,eAAe,GAAG;QACtB,sEAAsE;QACtE,0DAA0D;KAC3D,CAAC;IACF,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,eAAe,CAAC,IAAI,CAClB,qGAAqG,CACtG,CAAC;IACJ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,eAAe,CAAC,IAAI,CAClB,oGAAoG,CACrG,CAAC;IACJ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC;QACzD,eAAe,CAAC,IAAI,CAClB,2EAA2E,CAC5E,CAAC;IACJ,OAAO,eAAe,CAAC;AACzB,CAAC"}
|
package/dist/rules/aiRules.js
CHANGED
|
@@ -6,7 +6,7 @@ export async function generateAiRules(projectRoot = process.cwd()) {
|
|
|
6
6
|
filename: ".cursorrules",
|
|
7
7
|
projectRoot,
|
|
8
8
|
detected,
|
|
9
|
-
content: buildCursorRules(detected)
|
|
9
|
+
content: buildCursorRules(detected),
|
|
10
10
|
};
|
|
11
11
|
}
|
|
12
12
|
function buildCursorRules(detected) {
|
|
@@ -14,13 +14,13 @@ function buildCursorRules(detected) {
|
|
|
14
14
|
"# GhostAPI Agent Rules",
|
|
15
15
|
"",
|
|
16
16
|
"You are working in a project that should use GhostAPI for local API simulations.",
|
|
17
|
-
"
|
|
18
|
-
"
|
|
17
|
+
"Do not make live provider calls from this generated workflow. Human instruction alone does not establish containment, credentials, provider authorization, or evidence.",
|
|
18
|
+
"Explicitly configure supported SDKs and raw HTTP clients to use http://127.0.0.1:8080.",
|
|
19
19
|
"Use GhostAPI MCP tools when available to inspect state, configure deterministic API behavior, read traffic logs, and toggle Chaos Mode.",
|
|
20
|
-
""
|
|
20
|
+
"",
|
|
21
21
|
];
|
|
22
22
|
if (detected.includes("stripe")) {
|
|
23
|
-
lines.push("## Stripe", "", "This project depends on `stripe`. Configure the Stripe client to use GhostAPI in local development:", "", "```ts",
|
|
23
|
+
lines.push("## Stripe", "", "This project depends on `stripe`. Configure the Stripe client to use GhostAPI in local development:", "", "```ts", 'import Stripe from "stripe";', "", 'export const stripe = new Stripe(process.env.STRIPE_SECRET_KEY ?? "stripe_test_ghostapi", {', ' host: process.env.GHOSTAPI_HOST ?? "127.0.0.1",', ' port: Number(process.env.GHOSTAPI_PORT ?? "8080"),', ' protocol: process.env.GHOSTAPI_PROTOCOL ?? "http"', "});", "```", "", "Prefer `GHOSTAPI_HOST=127.0.0.1`, `GHOSTAPI_PORT=8080`, and `GHOSTAPI_PROTOCOL=http` in local env files instead of hard-coding production URLs.", "When writing tests, assert behavior against GhostAPI responses and avoid using live Stripe credentials.", "");
|
|
24
24
|
}
|
|
25
25
|
if (detected.length === 0) {
|
|
26
26
|
lines.push("## No Known SDKs Detected", "", "No first-class provider SDK was found in `package.json`. For raw HTTP clients, set the API base URL to `http://127.0.0.1:8080` during local development.", "");
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"aiRules.js","sourceRoot":"","sources":["../../src/rules/aiRules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAStE,MAAM,CAAC,KAAK,UAAU,eAAe,
|
|
1
|
+
{"version":3,"file":"aiRules.js","sourceRoot":"","sources":["../../src/rules/aiRules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAStE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO;QACL,QAAQ,EAAE,cAAc;QACxB,WAAW;QACX,QAAQ;QACR,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,MAAM,KAAK,GAAG;QACZ,wBAAwB;QACxB,EAAE;QACF,kFAAkF;QAClF,yKAAyK;QACzK,wFAAwF;QACxF,yIAAyI;QACzI,EAAE;KACH,CAAC;IAEF,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,WAAW,EACX,EAAE,EACF,qGAAqG,EACrG,EAAE,EACF,OAAO,EACP,8BAA8B,EAC9B,EAAE,EACF,6FAA6F,EAC7F,mDAAmD,EACnD,sDAAsD,EACtD,qDAAqD,EACrD,KAAK,EACL,KAAK,EACL,EAAE,EACF,iJAAiJ,EACjJ,yGAAyG,EACzG,EAAE,CACH,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CACR,2BAA2B,EAC3B,EAAE,EACF,0JAA0J,EAC1J,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,kBAAkB,EAClB,EAAE,EACF,4JAA4J,EAC5J,EAAE,CACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
|
package/dist/safety/index.d.ts
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export { LocalSafetyController, SafetyControllerError, SAFETY_SCOPE_KINDS, createDisabledSafetyEmergencyAuthorizer, createLocalSafetyController, createTestSafetyEmergencyAuthorizer } from "./safetyController.js";
|
|
2
|
-
export type { SafetyAction, SafetyAuditRecord, SafetyBudget, SafetyBudgetLimits, SafetyCircuit, SafetyControllerOptions, SafetyControllerState, SafetyDeadLetter, SafetyEmergencyAuthorizer, SafetyLease, SafetyOperator, SafetyOperatorPermission, SafetyQueueItem, SafetyScope, SafetyScopeKind } from "./safetyController.js";
|
|
1
|
+
export { LocalSafetyController, SafetyControllerError, SAFETY_SCOPE_KINDS, createDisabledSafetyEmergencyAuthorizer, createLocalSafetyController, createTestSafetyEmergencyAuthorizer, } from "./safetyController.js";
|
|
2
|
+
export type { SafetyAction, SafetyAuditRecord, SafetyBudget, SafetyBudgetLimits, SafetyCircuit, SafetyControllerOptions, SafetyControllerState, SafetyDeadLetter, SafetyEmergencyAuthorizer, SafetyLease, SafetyOperator, SafetyOperatorPermission, SafetyQueueItem, SafetyScope, SafetyScopeKind, } from "./safetyController.js";
|
package/dist/safety/index.js
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export { LocalSafetyController, SafetyControllerError, SAFETY_SCOPE_KINDS, createDisabledSafetyEmergencyAuthorizer, createLocalSafetyController, createTestSafetyEmergencyAuthorizer } from "./safetyController.js";
|
|
1
|
+
export { LocalSafetyController, SafetyControllerError, SAFETY_SCOPE_KINDS, createDisabledSafetyEmergencyAuthorizer, createLocalSafetyController, createTestSafetyEmergencyAuthorizer, } from "./safetyController.js";
|
|
2
2
|
//# sourceMappingURL=index.js.map
|
package/dist/safety/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/safety/index.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/safety/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,uCAAuC,EACvC,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,uBAAuB,CAAC"}
|