@zivis/cli 0.1.0-alpha.33 → 0.1.0-alpha.35

package/dist/internal/target-auth/workos.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workos.js","sourceRoot":"","sources":["../../../src/internal/target-auth/workos.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAOvC,SAAS,QAAQ,CAAC,IAA0B;IAC1C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QAC/D,KAAK,SAAS;YACZ,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;QACvE,KAAK,iBAAiB,CAAC;QACvB;YACE,OAAO,EAAE,QAAQ,EAAE,4BAA4B,EAAE,SAAS,EAAE,+BAA+B,EAAE,CAAC;IAClG,CAAC;AACH,CAAC;AAED,SAAS,IAAI;IACX,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAM,EAAE,WAAoB;IACtD,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAI,MAA2B,CAAC,GAAG,CAAC;IAClD,MAAM,KAAK,GAAG,QAAQ;QACpB,CAAC,CAAC,QAAQ,GAAG,IAAI;QACjB,CAAC,CAAC,CAAC,CAAC,UAAU;YACd,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,GAAG,IAAI;YAClC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAChC,OAAO;QACL,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,WAAW;QAC7C,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB,EAAE,GAAG,GAAG,EAAE;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,OAAO,qCAAqC,KAAK;;mBAEhC,KAAK,MAAM,KAAK,WAAW,GAAG;;eAElC,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,aAAqB;IAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBAC/B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAE1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC;gBAC7C,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;gBAC3C,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;gBACpC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YACtC,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACxB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACjC,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACvC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAiB,EACjB,IAAY,EACZ,QAAgB;IAEhB,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC;IACtC,MAAM,IAAI,GAA2B;QACnC,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,GAAG,CAAC,QAAQ;QACvB,IAAI;QACJ,aAAa,EAAE,QAAQ;KACxB,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,iBAAiB,CAAC,KAAK,iBAAiB,EAAE,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,oBAAoB,IAAI,WAAW,CAAC;IAC1D,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAiB,EACjB,YAAoB;IAEpB,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,GAAG,CAAC,QAAQ;YACvB,aAAa,EAAE,YAAY;SAC5B,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAiB,EACjB,OAAe;IAEf,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC;IACtC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAE5B,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,GAAG,CAAC,QAAQ;QACvB,YAAY,EAAE,oBAAoB,IAAI,WAAW;QACjD,cAAc,EAAE,SAAS;QACzB,qBAAqB,EAAE,MAAM;QAC7B,KAAK;QACL,KAAK;KACN,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,iBAAiB,CAAC,KAAK,iBAAiB,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACzE,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAErD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,OAAO,KAAK,CAAC,CAAC;IACzF,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,OAAO,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC;IAC/B,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,CAAC"}

package/dist/pattern-packs/zivis-public-0.1.0/capsules/agents/privilege-separation.yaml

@@ -1,228 +0,0 @@
-# Detection Card: Privilege Separation (absent)
-# Spec: docs/specs/PATTERN-MATCHING-LIBRARY-V1.md
-# Schema: schemas/pattern-detection-card.schema.json
-
-id: agents.privilege-separation
-slug: privilege-separation
-version: 0.1.0
-category: agents
-title: Privilege Separation
-headline: Per-Subtask Capability Scoping
-description: >
-  Detects agentic codebases where multiple agents share a single tool/capability
-  set without per-agent scoping. Absence of privilege separation means one
-  compromised agent inherits the full capability surface of the system.
-detection_tier: public
-scoring_tier: proprietary
-
-applicable_languages:
-  - typescript
-  - javascript
-  - python
-
-# Don't run this pattern unless an agent framework is actually present.
-# Mirrors nuclei-style relevance gating to keep the noise floor low.
-relevance_filter:
-  any_of:
-    - dependency: "langgraph"
-      direct_only: true
-    - dependency: "langchain"
-      direct_only: true
-    - dependency: "@langchain/langgraph"
-      direct_only: true
-    - dependency: "crewai"
-      direct_only: true
-    - dependency: "llama-index"
-      direct_only: true
-    - dependency: "openai-agents"
-      direct_only: true
-    - dependency: "autogen-agentchat"
-      direct_only: true
-
-strategies:
-  # 1. AST: Find tool list assignments (Python — LangChain/LangGraph idiom).
-  - code: AST
-    language: python
-    expression: |
-      rule:
-        kind: assignment
-        pattern: $TOOLS = [$$$]
-        has:
-          stopBy: end
-          any:
-            - pattern: create_react_agent
-            - pattern: bind_tools
-            - pattern: AgentExecutor
-    evidence_fields: [file_path, line_span, symbol]
-    confidence_weight: 0.25
-
-  # 2. AST: TypeScript/JavaScript equivalent.
-  - code: AST
-    language: typescript
-    expression: |
-      rule:
-        any:
-          - pattern: const $TOOLS = [$$$]
-          - pattern: bindTools($$$)
-          - pattern: createReactAgent($$$)
-    evidence_fields: [file_path, line_span, symbol]
-    confidence_weight: 0.25
-
-  # 3. GRAPH: Two or more agent declarations share the same tool set.
-  # Predicate evaluated against extractor output (components/edges).
-  - code: GRAPH
-    expression: |
-      count(distinct agent_declaration) >= 2
-      AND any_pair(agents, lambda a, b: a.tool_set == b.tool_set)
-    evidence_fields: [graph_path, file_spans, node_ids]
-    confidence_weight: 0.35
-
-  # 4. META: Absence of per-agent capability scope OR explicit authz layer.
-  - code: META
-    expression: |
-      NOT exists_any_of(
-        per_agent_tool_filter,
-        capability_token_check,
-        authorization_layer_around_tool_dispatch,
-        langgraph_state_machine_with_per_node_tools
-      )
-    evidence_fields: [missing_controls]
-    confidence_weight: 0.30
-
-  # 5. INFER: Last-resort semantic check; never alone proves a finding.
-  - code: INFER
-    expression: "prompt_id:agents.privilege-separation.identify"
-    evidence_fields: [llm_rationale]
-    confidence_weight: 0.15
-    trusted: false
-
-required_evidence_count: 3
-
-# Presence of any of these controls downgrades or eliminates the finding.
-control_negations:
-  - "presence_of(per_agent_tool_filter)"
-  - "presence_of(capability_token_check)"
-  - "presence_of(langgraph_state_machine_with_per_node_tools)"
-
-threats:
-  - title: Compromised planner inherits executor capabilities
-    stride: [tampering, elevation_of_privilege]
-    description: >
-      A prompt-injection compromise of any agent escalates to the full set of
-      tools available to all agents in the system, including high-impact tools
-      like code execution, email, or file write.
-    remediation: >
-      Bind only the minimum tools required to each agent. In LangGraph, define
-      tools per node rather than globally. Add a capability token or
-      authorization layer that validates tool dispatch against agent identity.
-  - title: Lateral compromise via shared tool registry
-    stride: [elevation_of_privilege, information_disclosure]
-    description: >
-      Any tool callable from one agent is callable from every agent. There is
-      no blast-radius reduction even if one agent is otherwise constrained.
-
-fixtures:
-  positive:
-    - "fixtures/positive/privilege-separation/langgraph_shared_tools_python"
-    - "fixtures/positive/privilege-separation/langchain_shared_tools_typescript"
-  negative:
-    - "fixtures/negative/privilege-separation/langgraph_per_node_tools"
-    - "fixtures/negative/privilege-separation/non_agentic_repo"
-
-lifecycle: draft
-owner: platform-threat-modeling
-tags:
-  - agentic-ai
-  - least-privilege
-  - blast-radius
-
-# Capsule fields — added in Phase 2A so the pack builder can ship this card
-# as a runnable customer-safe capsule (deterministic strategies + inference prompt).
-sensitivity_level: customer_safe
-allowed_execution_modes:
-  - local_only
-  - local_model
-  - hybrid_cloud_eval
-
-safe_summary: >
-  Multi-agent systems often share a single tool registry across agents. When that
-  happens, a prompt-injection compromise of any one agent inherits the full
-  capability surface of the system — including high-impact tools like code
-  execution, email, or filesystem write. Privilege separation means each agent
-  is bound only to the minimum tools required for its role.
-
-detect_when: >
-  Two or more agent declarations are wired to the same tool list, or a single
-  shared tool array is referenced by every agent factory call, with no per-agent
-  capability scoping or authorization layer between agent and tool dispatch.
-
-risk_hints:
-  - Any tool callable from one agent becomes callable from every agent
-  - Compromise of the weakest-prompted agent escalates to the most-privileged tool
-  - LangGraph's per-node tool binding is the idiomatic fix; AgentExecutor with a flat tool list is the anti-pattern
-
-architectural_signals:
-  - Shared TOOLS array reused across multiple agent constructors
-  - No capability_token / authorization_layer between planner and tool dispatch
-  - LangGraph used without per-node tool binding
-
-model_task_prompt_ref: prompts/agents/privilege-separation/identify.md
-
-expected_output_schema:
-  type: object
-  required: [verdict, rationale, evidence_spans]
-  properties:
-    verdict:
-      type: string
-      enum: [present, absent, unclear]
-      description: present = privilege separation IS implemented; absent = the anti-pattern fires; unclear = needs human review
-    confidence:
-      type: number
-      minimum: 0
-      maximum: 1
-    rationale:
-      type: string
-      description: One paragraph, cites specific code constructs.
-    evidence_spans:
-      type: array
-      items:
-        type: object
-        required: [file]
-        properties:
-          file: { type: string }
-          start_line: { type: integer }
-          end_line: { type: integer }
-          note: { type: string }
-
-minimum_context_required:
-  lines: 120
-  symbols:
-    - bind_tools
-    - bindTools
-    - create_react_agent
-    - createReactAgent
-    - AgentExecutor
-
-related_patterns:
-  - agents.goal-decomposition-attack-surface
-  - agents.tool-call-without-authorization
-
-repair_contract:
-  allowed:
-    - Bind a per-agent tool subset at construction time
-    - Introduce a capability-token or authorization layer between agent and tool dispatch
-    - Migrate to LangGraph state machines with per-node tools
-  forbidden:
-    - Removing tools entirely without functional replacement
-    - Centralizing tools further (the opposite direction)
-    - Disabling agent execution to "fix" the finding
-
-validation_contract:
-  requires_tests_pass: false
-  requires_static_rules:
-    - no_shared_tool_registry_after_patch
-
-unsafe_to_expose_fields:
-  - internal_rubric
-  - golden_transcripts
-  - exploit_templates

package/dist/pattern-packs/zivis-public-0.1.0/manifest.json

@@ -1,31 +0,0 @@
-{
-  "schema_version": "1.0.0",
-  "pack_id": "zivis-public",
-  "pack_name": "ZIVIS Public Pattern Pack",
-  "version": "0.1.0",
-  "built_at": "2026-05-06T17:38:23.611Z",
-  "tier": "customer_safe",
-  "description": "ZIVIS-curated public pattern pack — capsules + inference prompts evaluated locally on the user's machine.",
-  "capsules": [
-    {
-      "id": "agents.privilege-separation",
-      "version": "0.1.0",
-      "path": "capsules/agents/privilege-separation.yaml",
-      "sha256": "31b5984b167ab97ef5c8902327bc80363d1ed3c43d08c82d979b0e34f2b88fde",
-      "category": "agents",
-      "lifecycle": "draft",
-      "applicable_languages": [
-        "typescript",
-        "javascript",
-        "python"
-      ]
-    }
-  ],
-  "prompts": [
-    {
-      "path": "prompts/agents/privilege-separation/identify.md",
-      "sha256": "eda7d288f9d1c6f7dfc18d2856300df76e8c4fdb5f18f3490f39ddf7117853e4",
-      "capsule_id": "agents.privilege-separation"
-    }
-  ]
-}

package/dist/pattern-packs/zivis-public-0.1.0/prompts/agents/privilege-separation/identify.md

@@ -1,54 +0,0 @@
-# Inference prompt: agents.privilege-separation — identify
-
-You are assisting with secure agentic-AI architecture review. The user is
-working on a codebase that has been flagged by deterministic detectors as
-*possibly* lacking privilege separation between agents. Your job is to
-look at the attached code context and produce a structured verdict.
-
-## Pattern definition
-
-**Privilege separation** means each agent in a multi-agent system is bound
-only to the minimum tools required for its role. The anti-pattern is a
-single shared tool registry that every agent inherits.
-
-## What you are evaluating
-
-1. Does the code construct two or more agents (or two or more entry points
-   that invoke the same agent factory) with a **shared** tool array?
-2. Is there a per-agent capability filter, authorization layer, or
-   capability-token check between an agent and its tool dispatch? If so,
-   the pattern does *not* fire even when tools appear shared.
-3. If LangGraph is used: are tools bound per node (good), or is one tool
-   list passed to a top-level `create_react_agent` covering every node
-   (anti-pattern)?
-
-## What does NOT count as privilege separation
-
-- Comments mentioning least privilege without code enforcing it.
-- A shared tool list with one agent renamed at runtime.
-- Defensive prompt instructions ("don't use the database tool unless…")
-  — prompts are not authorization.
-
-## Output
-
-Return JSON only, matching the capsule's `expected_output_schema`:
-
-```json
-{
-  "verdict": "absent | present | unclear",
-  "confidence": 0.0,
-  "rationale": "one paragraph",
-  "evidence_spans": [
-    { "file": "src/agent.ts", "start_line": 10, "end_line": 40, "note": "..." }
-  ]
-}
-```
-
-- `verdict: absent` — the anti-pattern fires (shared registry, no scoping).
-- `verdict: present` — privilege separation is correctly implemented.
-- `verdict: unclear` — the available context is ambiguous; do not guess.
-
-Cite line numbers from the snippet only. Do not invent files. Do not
-fabricate evidence. If a concept (e.g. "authorization layer") is mentioned
-but you cannot identify the line that implements it, mark `unclear` and
-explain.