fullcourtdefense-cli 1.34.22 → 1.34.26
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/actionIdentity.d.ts +1 -0
- package/dist/actionIdentity.js +2 -0
- package/dist/actionPolicyEngine.d.ts +13 -0
- package/dist/actionPolicyEngine.js +559 -47
- package/dist/agentTerminal.d.ts +1 -3
- package/dist/agentTerminal.js +14 -29
- package/dist/approvalPrompt.d.ts +9 -0
- package/dist/approvalPrompt.js +46 -0
- package/dist/askDialog.d.ts +100 -0
- package/dist/askDialog.js +211 -0
- package/dist/blockExplanation.js +18 -6
- package/dist/boundaryVerification.d.ts +20 -0
- package/dist/boundaryVerification.js +147 -0
- package/dist/commands/daemon.js +197 -70
- package/dist/commands/deterministicGuard.d.ts +2 -0
- package/dist/commands/deterministicGuard.js +171 -12
- package/dist/commands/grants.d.ts +23 -0
- package/dist/commands/grants.js +79 -0
- package/dist/commands/hook.js +86 -26
- package/dist/commands/installClaudeHook.js +11 -5
- package/dist/commands/installCursorHook.js +5 -4
- package/dist/commands/mcpGateway.d.ts +2 -0
- package/dist/commands/mcpGateway.js +183 -61
- package/dist/commands/onboard.js +6 -5
- package/dist/commands/onboardingSummary.d.ts +5 -0
- package/dist/commands/onboardingSummary.js +11 -0
- package/dist/commands/protectedRun.d.ts +14 -0
- package/dist/commands/protectedRun.js +207 -0
- package/dist/containment-runtime/index.mjs +30118 -0
- package/dist/containment-runtime/licenses/_anthropic-ai_sandbox-runtime.txt +201 -0
- package/dist/containment-runtime/licenses/_pondwader_socks5-server.txt +20 -0
- package/dist/containment-runtime/licenses/commander.txt +22 -0
- package/dist/containment-runtime/licenses/node-forge.txt +331 -0
- package/dist/containment-runtime/licenses/zod.txt +21 -0
- package/dist/containment-runtime/runtime-version.json +1 -0
- package/dist/containment-runtime/vendor/java-proxy-agent/build.ts +95 -0
- package/dist/containment-runtime/vendor/java-proxy-agent/srt-proxy-agent.jar +0 -0
- package/dist/containment-runtime/vendor/seccomp/arm64/apply-seccomp +0 -0
- package/dist/containment-runtime/vendor/seccomp/build.ts +69 -0
- package/dist/containment-runtime/vendor/seccomp/x64/apply-seccomp +0 -0
- package/dist/containment-runtime/vendor/srt-win/arm64/srt-win.exe +0 -0
- package/dist/containment-runtime/vendor/srt-win/build.ts +21 -0
- package/dist/containment-runtime/vendor/srt-win/x64/srt-win.exe +0 -0
- package/dist/containmentLease.d.ts +5 -0
- package/dist/containmentLease.js +72 -0
- package/dist/detectorBaseline.d.ts +2 -4
- package/dist/detectorBaseline.js +2 -4
- package/dist/devConfirm.d.ts +193 -14
- package/dist/devConfirm.js +570 -118
- package/dist/distress.d.ts +2 -0
- package/dist/distress.js +2 -0
- package/dist/gatewayRuntime.d.ts +19 -0
- package/dist/gatewayRuntime.js +93 -0
- package/dist/hookSlim.js +17 -18
- package/dist/index.js +45 -0
- package/dist/localSafetySnapshot.d.ts +9 -5
- package/dist/localSafetySnapshot.js +42 -15
- package/dist/machineActionVerify.d.ts +7 -0
- package/dist/machineActionVerify.js +7 -1
- package/dist/mcpToolReview.d.ts +17 -0
- package/dist/mcpToolReview.js +127 -0
- package/dist/mcpToolTrust.d.ts +22 -0
- package/dist/mcpToolTrust.js +66 -0
- package/dist/nativeHook.d.ts +4 -0
- package/dist/nativeHook.js +31 -17
- package/dist/policyRefresh.d.ts +3 -0
- package/dist/policyRefresh.js +27 -0
- package/dist/protectionMaintenance.d.ts +10 -0
- package/dist/protectionMaintenance.js +64 -0
- package/dist/protectionProfile.d.ts +26 -0
- package/dist/protectionProfile.js +63 -0
- package/dist/runtimeConfig.d.ts +24 -0
- package/dist/runtimeConfig.js +104 -26
- package/dist/selfTest.d.ts +2 -0
- package/dist/selfTest.js +9 -1
- package/dist/sessionLimits.d.ts +2 -0
- package/dist/sessionLimits.js +24 -0
- package/dist/telemetry.d.ts +4 -1
- package/dist/telemetry.js +9 -4
- package/dist/version.json +1 -1
- package/package.json +9 -5
package/dist/actionIdentity.d.ts
CHANGED
|
@@ -3,6 +3,7 @@ export interface ActionIdentity {
|
|
|
3
3
|
sessionId?: string;
|
|
4
4
|
runId?: string;
|
|
5
5
|
instanceId?: string;
|
|
6
|
+
attemptId?: string;
|
|
6
7
|
}
|
|
7
8
|
export declare function identityPart(value: unknown): string | undefined;
|
|
8
9
|
export declare function captureActionIdentity(payload?: Record<string, unknown>, env?: NodeJS.ProcessEnv): ActionIdentity;
|
package/dist/actionIdentity.js
CHANGED
|
@@ -11,5 +11,7 @@ function captureActionIdentity(payload = {}, env = process.env) {
|
|
|
11
11
|
|| env.FCD_SESSION_ID || env.CLAUDE_CODE_SESSION_ID || env.CODEX_THREAD_ID),
|
|
12
12
|
runId: identityPart(env.FCD_RUN_ID || env.GITHUB_RUN_ID || env.CI_PIPELINE_ID),
|
|
13
13
|
instanceId: identityPart(env.FCD_WORKLOAD_INSTANCE_ID),
|
|
14
|
+
// Never use a generic request id: some clients reuse it for unrelated calls.
|
|
15
|
+
attemptId: identityPart(payload.tool_use_id || payload.tool_call_id),
|
|
14
16
|
};
|
|
15
17
|
}
|
|
@@ -29,13 +29,26 @@ export interface ActionPolicyApproval {
|
|
|
29
29
|
scope?: ActionPolicyApprovalScope;
|
|
30
30
|
remember?: ActionPolicyApprovalRemember;
|
|
31
31
|
onTimeout?: ActionPolicyApprovalOnTimeout;
|
|
32
|
+
/**
|
|
33
|
+
* Caps on a developer's "Always allow" under this rule: lifetime in days
|
|
34
|
+
* (1–30) and uses before the dialog returns (1–10000). Absent = the built-in
|
|
35
|
+
* 30-day lifetime, unlimited uses. The org ceiling delivered with the bundle
|
|
36
|
+
* can only tighten these, never widen them.
|
|
37
|
+
*/
|
|
38
|
+
maxDays?: number;
|
|
39
|
+
maxUses?: number;
|
|
32
40
|
}
|
|
33
41
|
/** Fully-resolved approval options (every field present) attached to a `require_approval` result. */
|
|
34
42
|
export interface ResolvedActionPolicyApproval {
|
|
35
43
|
scope: ActionPolicyApprovalScope;
|
|
36
44
|
remember: ActionPolicyApprovalRemember;
|
|
37
45
|
onTimeout: ActionPolicyApprovalOnTimeout;
|
|
46
|
+
/** "Always allow" caps (see `ActionPolicyApproval`); undefined = built-in default. */
|
|
47
|
+
maxDays?: number;
|
|
48
|
+
maxUses?: number;
|
|
38
49
|
}
|
|
50
|
+
export declare const ACTION_POLICY_GRANT_MAX_DAYS = 30;
|
|
51
|
+
export declare const ACTION_POLICY_GRANT_MAX_USES = 10000;
|
|
39
52
|
export interface ActionPolicyRule {
|
|
40
53
|
/** Explicit, narrowly scoped permission to relax named role actions only. */
|
|
41
54
|
roleException?: {
|