kiokuko-dsh 0.1.0

package/dist/enno-oduno/sanitize.d.ts

@@ -0,0 +1,17 @@
+import type * as z from 'zod/v4';
+import { ennoAnswerSchema, finishSchema, idealSubmissionSchema, meditationSubmissionSchema, planSubmissionSchema, workReportSchema } from './schemas.js';
+type PlanSubmission = z.infer<typeof planSubmissionSchema>;
+type WorkReport = z.infer<typeof workReportSchema>;
+type EnnoAnswer = z.infer<typeof ennoAnswerSchema>;
+type FinishRequest = z.infer<typeof finishSchema>;
+type IdealSubmission = z.infer<typeof idealSubmissionSchema>;
+type MeditationSubmission = z.infer<typeof meditationSubmissionSchema>;
+export declare function verifierCommandContainsSecret(verifier: Pick<PlanSubmission['finalVerifiers'][number], 'executable' | 'args'>): boolean;
+export declare function sanitizePlanSubmission(input: PlanSubmission, repositoryRoot: string): PlanSubmission;
+export declare function sanitizeWorkReport(input: WorkReport, repositoryRoot: string): WorkReport;
+export declare function sanitizeEnnoAnswer(input: EnnoAnswer, repositoryRoot: string): EnnoAnswer;
+export declare function sanitizeFinishRequest(input: FinishRequest, repositoryRoot: string): FinishRequest;
+export declare function sanitizeIdealSubmission(input: IdealSubmission, repositoryRoot: string): IdealSubmission;
+export declare function sanitizeMeditationSubmission(input: MeditationSubmission, repositoryRoot: string): MeditationSubmission;
+export {};
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/enno-oduno/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/enno-oduno/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,CAAC;AAIjC,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,qBAAqB,EACrB,0BAA0B,EAO1B,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAEtB,KAAK,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAC3D,KAAK,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACnD,KAAK,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACnD,KAAK,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAClD,KAAK,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC7D,KAAK,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAavE,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC,GAAG,OAAO,CAOtI;AAcD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,GAAG,cAAc,CA8BpG;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,UAAU,CAGxF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,UAAU,CAIxF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,GAAG,aAAa,CAGjG;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,GAAG,eAAe,CAGvG;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,GAAG,oBAAoB,CAGtH"}

package/dist/enno-oduno/sanitize.js

@@ -0,0 +1,88 @@
+import { KiokukoError } from '../errors.js';
+import { findSecret } from '../memory/secrets.js';
+import { sanitizeJson } from '../security/sanitize.js';
+import { parseEnnoAnswer, parseFinishRequest, parseIdealSubmission, parseMeditationSubmission, parsePlanSubmission, parseWorkReport, } from './schemas.js';
+function sanitizedObject(value, repositoryRoot) {
+    const omitUndefined = (candidate) => {
+        if (Array.isArray(candidate))
+            return candidate.map(omitUndefined);
+        if (typeof candidate !== 'object' || candidate === null)
+            return candidate;
+        return Object.fromEntries(Object.entries(candidate)
+            .filter(([, child]) => child !== undefined)
+            .map(([key, child]) => [key, omitUndefined(child)]));
+    };
+    return sanitizeJson(omitUndefined(value), { workspace: repositoryRoot }).value;
+}
+export function verifierCommandContainsSecret(verifier) {
+    if (findSecret(verifier.executable) !== undefined)
+        return true;
+    return verifier.args.some((argument, index) => (findSecret(argument) !== undefined
+        || index + 1 < verifier.args.length
+            && findSecret(`${argument} ${verifier.args[index + 1]}`) !== undefined));
+}
+function assertSafeVerifierCommands(plan) {
+    const verifiers = [
+        ...plan.finalVerifiers,
+        ...plan.workPlan.units.flatMap((unit) => unit.focusedVerifiers),
+    ];
+    for (const verifier of verifiers) {
+        if (verifierCommandContainsSecret(verifier)) {
+            throw new KiokukoError('SECURITY_REJECTION', 'Verifier command resembles secret material and was rejected');
+        }
+    }
+}
+export function sanitizePlanSubmission(input, repositoryRoot) {
+    assertSafeVerifierCommands(input);
+    const workPlanWithoutVerifierCommands = {
+        ...input.workPlan,
+        units: input.workPlan.units.map((unit) => ({ ...unit, focusedVerifiers: [] })),
+    };
+    const sanitized = sanitizedObject({
+        scope: input.scope,
+        exclusions: input.exclusions,
+        acceptanceCriteria: input.acceptanceCriteria,
+        workPlan: workPlanWithoutVerifierCommands,
+        skillRequirements: input.skillRequirements,
+        advisoryDisposition: input.advisoryDisposition,
+    }, repositoryRoot);
+    const sanitizedWorkPlan = sanitized.workPlan;
+    return parsePlanSubmission({
+        ...input,
+        ...sanitized,
+        workPlan: {
+            ...sanitizedWorkPlan,
+            units: sanitizedWorkPlan.units.map((unit, index) => ({
+                ...unit,
+                focusedVerifiers: input.workPlan.units[index]?.focusedVerifiers.map((verifier) => ({
+                    ...verifier,
+                    args: [...verifier.args],
+                })) ?? [],
+            })),
+        },
+        finalVerifiers: input.finalVerifiers.map((verifier) => ({ ...verifier, args: [...verifier.args] })),
+    });
+}
+export function sanitizeWorkReport(input, repositoryRoot) {
+    const sanitized = sanitizedObject({ result: input.result }, repositoryRoot);
+    return parseWorkReport({ ...input, ...sanitized });
+}
+export function sanitizeEnnoAnswer(input, repositoryRoot) {
+    if (input.requestedChanges === undefined)
+        return input;
+    const sanitized = sanitizedObject({ requestedChanges: input.requestedChanges }, repositoryRoot);
+    return parseEnnoAnswer({ ...input, ...sanitized });
+}
+export function sanitizeFinishRequest(input, repositoryRoot) {
+    const sanitized = sanitizedObject({ review: input.review, advisoryDisposition: input.advisoryDisposition }, repositoryRoot);
+    return parseFinishRequest({ ...input, ...sanitized });
+}
+export function sanitizeIdealSubmission(input, repositoryRoot) {
+    const sanitized = sanitizedObject({ ideal: input.ideal, advisoryDisposition: input.advisoryDisposition }, repositoryRoot);
+    return parseIdealSubmission({ ...input, ...sanitized });
+}
+export function sanitizeMeditationSubmission(input, repositoryRoot) {
+    const sanitized = sanitizedObject({ meditation: input.meditation }, repositoryRoot);
+    return parseMeditationSubmission({ ...input, ...sanitized });
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/enno-oduno/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/enno-oduno/sanitize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAKL,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,eAAe,GAGhB,MAAM,cAAc,CAAC;AAStB,SAAS,eAAe,CAAC,KAAc,EAAE,cAAsB;IAC7D,MAAM,aAAa,GAAG,CAAC,SAAkB,EAAW,EAAE;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC1E,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;aAChD,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;aAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,OAAO,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,KAAgC,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAA+E;IAC3H,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAC7C,UAAU,CAAC,QAAQ,CAAC,KAAK,SAAS;WAC/B,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM;eAC9B,UAAU,CAAC,GAAG,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,SAAS,CACzE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAoB;IACtD,MAAM,SAAS,GAAG;QAChB,GAAG,IAAI,CAAC,cAAc;QACtB,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC;KAChE,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,6BAA6B,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,6DAA6D,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAqB,EAAE,cAAsB;IAClF,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,+BAA+B,GAAG;QACtC,GAAG,KAAK,CAAC,QAAQ;QACjB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;KAC/E,CAAC;IACF,MAAM,SAAS,GAAG,eAAe,CAAC;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,QAAQ,EAAE,+BAA+B;QACzC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC/C,EAAE,cAAc,CAAC,CAAC;IACnB,MAAM,iBAAiB,GAAG,SAAS,CAAC,QAAsC,CAAC;IAC3E,OAAO,mBAAmB,CAAC;QACzB,GAAG,KAAK;QACR,GAAG,SAAS;QACZ,QAAQ,EAAE;YACR,GAAG,iBAAiB;YACpB,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBACnD,GAAG,IAAI;gBACP,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBACjF,GAAG,QAAQ;oBACX,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC;iBACzB,CAAC,CAAC,IAAI,EAAE;aACV,CAAC,CAAC;SACJ;QACD,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KACpG,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,cAAsB;IAC1E,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC;IAC5E,OAAO,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,cAAsB;IAC1E,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE,cAAc,CAAC,CAAC;IAChG,OAAO,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAoB,EAAE,cAAsB;IAChF,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,EAAE,cAAc,CAAC,CAAC;IAC5H,OAAO,kBAAkB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAsB,EAAE,cAAsB;IACpF,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,EAAE,cAAc,CAAC,CAAC;IAC1H,OAAO,oBAAoB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAA2B,EAAE,cAAsB;IAC9F,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,cAAc,CAAC,CAAC;IACpF,OAAO,yBAAyB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AAC/D,CAAC"}