patchwork-os 1.2.0-beta.2.canary.752 → 1.2.0-beta.2.canary.755

package/dist/privacy/describeDestinations.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Render the destination registry as something an operator can act on.
+ *
+ * The registry is already the place the choice lives: clearing a remote
+ * destination for `personal` is one line in `~/.patchwork/config.json`, and has
+ * been possible since the boundary shipped. Nothing here adds a new policy
+ * primitive, deliberately — a recipe-scoped allow-list would put recipe
+ * identity into the decision point, which `recordBoundaryDecisionFn` explicitly
+ * keeps out of it, and would smuggle in "purpose" ahead of the per-field
+ * labels ADR-0021 reserves it for.
+ *
+ * What was missing is not the mechanism. It is that the choice was invisible:
+ * no surface told an operator which destinations leave the machine, what each
+ * is cleared to receive, or that clearing one for `personal` sends their data
+ * to somebody else's servers.
+ *
+ * ## The disclosure states only what this runtime can verify
+ *
+ * A sentence about a provider's retention or training policy rots without
+ * anyone touching the code — API retention moved 30 days → 7 in Sept 2025 and
+ * a further change was announced in Aug 2026. A claim the code cannot keep is
+ * worse than no claim, because it is believed.
+ *
+ * So the disclosure is confined to what is true by construction: the prompt
+ * leaves this machine, over the network, to the named destination. Retention,
+ * training and deletion are the provider's claims, not ours. An operator may
+ * record those in `note` / `noteReviewedOn`, and a note with no date, or a
+ * stale one, is reported AS stale rather than shown as authoritative — the
+ * same rule the receipts follow by refusing to hold a payload: record what is
+ * known, decline to assert what is not.
+ */
+import { type Classification, type Destination } from "./dataPolicy.js";
+export interface DestinationNote {
+    /** Operator's own words about this destination. Never asserted by us. */
+    note?: string;
+    /** ISO date the operator last checked `note` against the provider. */
+    noteReviewedOn?: string;
+}
+export interface DescribedDestination {
+    id: string;
+    type: "local" | "remote";
+    /** Classifications this destination is cleared to receive, ordered. */
+    cleared: Classification[];
+    /** Driver names routed here. */
+    drivers: string[];
+    /**
+     * True when a REMOTE destination is cleared for `personal` or above. This is
+     * the line worth surfacing: it is a legitimate operator choice, and it is
+     * the one that sends data an operator may not expect to leave the machine.
+     */
+    sendsSensitiveOffMachine: boolean;
+    note?: string;
+    noteReviewedOn?: string;
+    /** True when a note exists but carries no reviewed date, or an unparseable one. */
+    noteUndated: boolean;
+}
+export interface DescribeOptions {
+    notes?: Record<string, DestinationNote>;
+    /** Today, for staleness. Injected so the report is testable. */
+    now?: Date;
+    /** A note older than this many days is reported as stale. */
+    staleAfterDays?: number;
+}
+export declare function describeDestinations(destinations: Destination[], driversFor: Map<string, string[]>, opts?: DescribeOptions): DescribedDestination[];
+/** True when a dated note is older than the staleness window. */
+export declare function noteIsStale(d: DescribedDestination, opts?: DescribeOptions): boolean;
+/**
+ * The one sentence this runtime can stand behind permanently.
+ *
+ * Names no retention period, no training policy and no deletion promise: those
+ * belong to the provider and change without warning.
+ */
+export declare function disclosureFor(d: DescribedDestination): string;
+export declare function formatDestinationsReport(described: DescribedDestination[], opts?: DescribeOptions): string;
+/** Every classification, ordered — for help text that must not drift. */
+export declare const ALL_CLASSIFICATIONS: ("public" | "internal" | "personal" | "confidential" | "restricted")[];

package/dist/privacy/describeDestinations.js

@@ -0,0 +1,132 @@
+/**
+ * Render the destination registry as something an operator can act on.
+ *
+ * The registry is already the place the choice lives: clearing a remote
+ * destination for `personal` is one line in `~/.patchwork/config.json`, and has
+ * been possible since the boundary shipped. Nothing here adds a new policy
+ * primitive, deliberately — a recipe-scoped allow-list would put recipe
+ * identity into the decision point, which `recordBoundaryDecisionFn` explicitly
+ * keeps out of it, and would smuggle in "purpose" ahead of the per-field
+ * labels ADR-0021 reserves it for.
+ *
+ * What was missing is not the mechanism. It is that the choice was invisible:
+ * no surface told an operator which destinations leave the machine, what each
+ * is cleared to receive, or that clearing one for `personal` sends their data
+ * to somebody else's servers.
+ *
+ * ## The disclosure states only what this runtime can verify
+ *
+ * A sentence about a provider's retention or training policy rots without
+ * anyone touching the code — API retention moved 30 days → 7 in Sept 2025 and
+ * a further change was announced in Aug 2026. A claim the code cannot keep is
+ * worse than no claim, because it is believed.
+ *
+ * So the disclosure is confined to what is true by construction: the prompt
+ * leaves this machine, over the network, to the named destination. Retention,
+ * training and deletion are the provider's claims, not ours. An operator may
+ * record those in `note` / `noteReviewedOn`, and a note with no date, or a
+ * stale one, is reported AS stale rather than shown as authoritative — the
+ * same rule the receipts follow by refusing to hold a payload: record what is
+ * known, decline to assert what is not.
+ */
+import { CLASSIFICATIONS, classificationRank, } from "./dataPolicy.js";
+/** Anything above `internal` is data an operator would not expect to travel. */
+const SENSITIVE_FLOOR = "personal";
+const DEFAULT_STALE_DAYS = 180;
+export function describeDestinations(destinations, driversFor, opts = {}) {
+    const out = [];
+    for (const d of destinations) {
+        const note = opts.notes?.[d.id];
+        const cleared = [...d.classifications].sort((a, b) => classificationRank(a) - classificationRank(b));
+        const sensitive = cleared.some((c) => classificationRank(c) >= classificationRank(SENSITIVE_FLOOR));
+        const dated = note?.noteReviewedOn !== undefined &&
+            !Number.isNaN(Date.parse(note.noteReviewedOn));
+        out.push({
+            id: d.id,
+            type: d.type,
+            cleared,
+            drivers: driversFor.get(d.id) ?? [],
+            sendsSensitiveOffMachine: d.type === "remote" && sensitive,
+            ...(note?.note !== undefined && { note: note.note }),
+            ...(note?.noteReviewedOn !== undefined && {
+                noteReviewedOn: note.noteReviewedOn,
+            }),
+            noteUndated: note?.note !== undefined && !dated,
+        });
+    }
+    return out;
+}
+/** True when a dated note is older than the staleness window. */
+export function noteIsStale(d, opts = {}) {
+    if (d.note === undefined)
+        return false;
+    if (d.noteReviewedOn === undefined)
+        return true;
+    const t = Date.parse(d.noteReviewedOn);
+    if (Number.isNaN(t))
+        return true;
+    const now = (opts.now ?? new Date()).getTime();
+    const days = (now - t) / 86_400_000;
+    return days > (opts.staleAfterDays ?? DEFAULT_STALE_DAYS);
+}
+/**
+ * The one sentence this runtime can stand behind permanently.
+ *
+ * Names no retention period, no training policy and no deletion promise: those
+ * belong to the provider and change without warning.
+ */
+export function disclosureFor(d) {
+    return d.type === "local"
+        ? `stays on this machine`
+        : `LEAVES this machine over the network to "${d.id}"`;
+}
+export function formatDestinationsReport(described, opts = {}) {
+    const L = [];
+    L.push("[privacy] where your prompts may go");
+    if (described.length === 0) {
+        // The inert case is a true and expected state, not an error. Saying "0
+        // destinations" invites someone to fix a number; saying the boundary is
+        // inert says what it MEANS.
+        L.push("");
+        L.push("  Nothing is registered, so the information boundary is INERT —");
+        L.push("  no dispatch is evaluated and no decision is made. Registering a");
+        L.push("  destination is the opt-in; once opted in it fails closed.");
+        return L.join("\n");
+    }
+    L.push("");
+    for (const d of described) {
+        L.push(`  ${d.id}  (${d.type})`);
+        L.push(`      ${disclosureFor(d)}`);
+        L.push(`      cleared for: ${d.cleared.join(", ") || "(nothing)"}`);
+        if (d.drivers.length > 0) {
+            L.push(`      drivers:     ${d.drivers.join(", ")}`);
+        }
+        if (d.sendsSensitiveOffMachine) {
+            L.push(`      ⚠ cleared for data above "internal" AND off-machine — your`);
+            L.push(`        own choice, and the one that sends personal data to a`);
+            L.push(`        third party's servers.`);
+        }
+        if (d.note !== undefined) {
+            L.push(`      note: ${d.note}`);
+            if (noteIsStale(d, opts)) {
+                L.push(d.noteReviewedOn === undefined || d.noteUndated
+                    ? `      ⚠ that note carries no reviewed date — it is your claim, undated.`
+                    : `      ⚠ that note was last checked ${d.noteReviewedOn} and may be out of date.`);
+            }
+        }
+        L.push("");
+    }
+    L.push("  Retention, training and deletion are the provider's claims, not this");
+    L.push("  tool's. They change without notice, so nothing here asserts them —");
+    L.push("  record what you have checked in `note`, with the date.");
+    const anySensitive = described.some((d) => d.sendsSensitiveOffMachine);
+    if (!anySensitive) {
+        L.push("");
+        L.push("  No remote destination is cleared above `internal`, so personal data");
+        L.push("  currently has nowhere off-machine to go.");
+    }
+    return L.join("\n");
+}
+/** Every classification, ordered — for help text that must not drift. */
+export const ALL_CLASSIFICATIONS = [...CLASSIFICATIONS];
+//# sourceMappingURL=describeDestinations.js.map

package/dist/privacy/describeDestinations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describeDestinations.js","sourceRoot":"","sources":["../../src/privacy/describeDestinations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EACL,eAAe,EAEf,kBAAkB,GAEnB,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,MAAM,eAAe,GAAmB,UAAU,CAAC;AAoCnD,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,MAAM,UAAU,oBAAoB,CAClC,YAA2B,EAC3B,UAAiC,EACjC,OAAwB,EAAE;IAE1B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CACxD,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,eAAe,CAAC,CACpE,CAAC;QACF,MAAM,KAAK,GACT,IAAI,EAAE,cAAc,KAAK,SAAS;YAClC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO;YACP,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;YACnC,wBAAwB,EAAE,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS;YAC1D,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACpD,GAAG,CAAC,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI;gBACxC,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC;YACF,WAAW,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK;SAChD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,WAAW,CACzB,CAAuB,EACvB,OAAwB,EAAE;IAE1B,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC;IACpC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,kBAAkB,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,CAAuB;IACnD,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO;QACvB,CAAC,CAAC,uBAAuB;QACzB,CAAC,CAAC,4CAA4C,CAAC,CAAC,EAAE,GAAG,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAAiC,EACjC,OAAwB,EAAE;IAE1B,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC9C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,uEAAuE;QACvE,wEAAwE;QACxE,4BAA4B;QAC5B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC1E,CAAC,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QAC5E,CAAC,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,CAAC,wBAAwB,EAAE,CAAC;YAC/B,CAAC,CAAC,IAAI,CACJ,kEAAkE,CACnE,CAAC;YACF,CAAC,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YACxE,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAChC,IAAI,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;gBACzB,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW;oBAC7C,CAAC,CAAC,yEAAyE;oBAC3E,CAAC,CAAC,sCAAsC,CAAC,CAAC,cAAc,0BAA0B,CACrF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,CAAC;IACD,CAAC,CAAC,IAAI,CACJ,wEAAwE,CACzE,CAAC;IACF,CAAC,CAAC,IAAI,CACJ,sEAAsE,CACvE,CAAC;IACF,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CACJ,uEAAuE,CACxE,CAAC;QACF,CAAC,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchwork-os",
-  "version": "1.2.0-beta.2.canary.752",
+  "version": "1.2.0-beta.2.canary.755",
   "description": "Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory — all on your machine, all under your policy.",
   "type": "module",
   "main": "dist/index.js",