skillshield 1.0.0 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.ts CHANGED
@@ -33,6 +33,7 @@ export { SlackAdapter, createSlackAdapter } from './channels/slack.js';
33
33
  export { ToolRegistry, type SkillTool, type ToolDefinition, type ToolCallRequest, type ToolCallResult, } from './tools/index.js';
34
34
  export { WebSearchTool, WebExtractTool, WebCrawlTool, WebResearchTool, WebMapTool, createWebTools, } from './tools/web-tools.js';
35
35
  export { nativeSearch, nativeExtract, nativeCrawl, nativeResearch, nativeMap, type SearchResult, type SearchResponse, type ExtractedContent, type ExtractResponse, type CrawlPage, type CrawlResponse, type ResearchSource, type ResearchResponse, type MapResponse, } from './tools/web-engine.js';
36
+ export { SkillShield, NetworkPolicyEngine, parseNetworkPolicy, FilesystemJail, parseFilesystemPolicy, RuntimeMonitor, getDefaultMonitorPolicy, AuditTrail, type ShieldConfig, type ShieldReport, type NetworkPolicy, type NetworkViolation, type FilesystemPolicy, type FilesystemViolation, type MonitorPolicy, type RuntimeEvent, type MonitorReport, type AuditEntry, type AuditEventType, } from './shield/index.js';
36
37
  export { SandboxManager, ProcessSandbox, DockerSandbox, type SandboxType, type SandboxOptions, type SandboxResult, } from './sandbox/index.js';
37
38
  export { Logger, defaultLogger, type LogLevel } from './utils/logger.js';
38
39
  export { SkillKitError, ParseError, ModelError, SecurityError, ChannelError, HubError, SandboxError, ConfigError, ToolError, TimeoutError, formatError, formatErrorForCLI, type ErrorCode, type FormattedError, } from './utils/errors.js';
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAAE,UAAU,IAAI,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,IAAI,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,IAAI,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,cAAc,IAAI,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,cAAc,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAOtD,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,WAAW,EACX,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,SAAS,IAAI,YAAY,EAC9B,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,cAAc,IAAI,kBAAkB,EACzC,KAAK,MAAM,EACX,KAAK,cAAc,IAAI,kBAAkB,EACzC,KAAK,oBAAoB,EACzB,KAAK,QAAQ,GACd,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,WAAW,EACX,KAAK,WAAW,IAAI,iBAAiB,EACrC,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,cAAc,EACd,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,WAAW,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,UAAU,EACV,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,IAAI,gBAAgB,GACvC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,YAAY,IAAI,oBAAoB,EACpC,YAAY,EACZ,aAAa,EACb,WAAW,EACX,WAAW,EACX,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGvE,OAAO,EACL,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,GACpB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,aAAa,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,UAAU,EACV,cAAc,GACf,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,YAAY,EACZ,aAAa,EACb,WAAW,EACX,cAAc,EACd,SAAS,EACT,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,cAAc,EACd,cAAc,EACd,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAG/E,eAAO,MAAM,OAAO,UAAU,CAAC;AAC/B,eAAO,MAAM,QAAQ,aAAa,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAW;IAClC,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,KAAK,CAAc;IAE3B,OAAO;IAQP,uCAAuC;IACvC,MAAM,CAAC,WAAW,IAAI,QAAQ;IAO9B,+BAA+B;IAC/B,QAAQ,IAAI,aAAa;IAEzB,iCAAiC;IACjC,WAAW,IAAI,eAAe;IAE9B,iCAAiC;IACjC,UAAU,IAAI,eAAe;IAE7B,wBAAwB;IACxB,SAAS,IAAI,OAAO;IAEpB,yCAAyC;IACzC,QAAQ,IAAI,WAAW;IAEvB,yCAAyC;IACzC,gBAAgB,IAAI,WAAW;IAE/B;;;;;;;OAOG;WACU,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE;QAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC;KACd,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAsDvC;;;;;OAKG;WACU,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAgB3D;;;;;;OAMG;WACU,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE;IAInF;;;;;;OAMG;WACU,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE;;;;IA4BvF,gCAAgC;WACnB,UAAU;IAIvB,yDAAyD;IACzD,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAK3C,4BAA4B;IAC5B,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAQhE,qCAAqC;IACrC,MAAM,CAAC,iBAAiB,IAAI,MAAM,EAAE;CAIrC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,CAAC,EAAE;IAChD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAuBpB;AAGD,eAAO,MAAM,QAAQ,UAAyB,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAAE,UAAU,IAAI,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,IAAI,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,IAAI,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,cAAc,IAAI,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,cAAc,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAOtD,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,WAAW,EACX,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,SAAS,IAAI,YAAY,EAC9B,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,cAAc,IAAI,kBAAkB,EACzC,KAAK,MAAM,EACX,KAAK,cAAc,IAAI,kBAAkB,EACzC,KAAK,oBAAoB,EACzB,KAAK,QAAQ,GACd,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,WAAW,EACX,KAAK,WAAW,IAAI,iBAAiB,EACrC,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,cAAc,EACd,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,WAAW,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,UAAU,EACV,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,IAAI,gBAAgB,GACvC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,YAAY,IAAI,oBAAoB,EACpC,YAAY,EACZ,aAAa,EACb,WAAW,EACX,WAAW,EACX,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGvE,OAAO,EACL,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,GACpB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,aAAa,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,UAAU,EACV,cAAc,GACf,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,YAAY,EACZ,aAAa,EACb,WAAW,EACX,cAAc,EACd,SAAS,EACT,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,uBAAuB,EACvB,UAAU,EACV,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,cAAc,EACd,cAAc,EACd,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAG/E,eAAO,MAAM,OAAO,UAAU,CAAC;AAC/B,eAAO,MAAM,QAAQ,aAAa,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAW;IAClC,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,KAAK,CAAc;IAE3B,OAAO;IAQP,uCAAuC;IACvC,MAAM,CAAC,WAAW,IAAI,QAAQ;IAO9B,+BAA+B;IAC/B,QAAQ,IAAI,aAAa;IAEzB,iCAAiC;IACjC,WAAW,IAAI,eAAe;IAE9B,iCAAiC;IACjC,UAAU,IAAI,eAAe;IAE7B,wBAAwB;IACxB,SAAS,IAAI,OAAO;IAEpB,yCAAyC;IACzC,QAAQ,IAAI,WAAW;IAEvB,yCAAyC;IACzC,gBAAgB,IAAI,WAAW;IAE/B;;;;;;;OAOG;WACU,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE;QAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC;KACd,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAsDvC;;;;;OAKG;WACU,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAgB3D;;;;;;OAMG;WACU,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE;IAInF;;;;;;OAMG;WACU,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE;;;;IA4BvF,gCAAgC;WACnB,UAAU;IAIvB,yDAAyD;IACzD,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAK3C,4BAA4B;IAC5B,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAQhE,qCAAqC;IACrC,MAAM,CAAC,iBAAiB,IAAI,MAAM,EAAE;CAIrC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,CAAC,EAAE;IAChD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAuBpB;AAGD,eAAO,MAAM,QAAQ,UAAyB,CAAC"}
package/dist/index.js CHANGED
@@ -46,6 +46,8 @@ export { ToolRegistry, } from './tools/index.js';
46
46
  // Native web intelligence tools (no API keys required)
47
47
  export { WebSearchTool, WebExtractTool, WebCrawlTool, WebResearchTool, WebMapTool, createWebTools, } from './tools/web-tools.js';
48
48
  export { nativeSearch, nativeExtract, nativeCrawl, nativeResearch, nativeMap, } from './tools/web-engine.js';
49
+ // ─── Shield (Runtime Security) ──────────────────────────────────────────────
50
+ export { SkillShield, NetworkPolicyEngine, parseNetworkPolicy, FilesystemJail, parseFilesystemPolicy, RuntimeMonitor, getDefaultMonitorPolicy, AuditTrail, } from './shield/index.js';
49
51
  // ─── Sandbox ─────────────────────────────────────────────────────────────────
50
52
  export { SandboxManager, ProcessSandbox, DockerSandbox, } from './sandbox/index.js';
51
53
  // ─── Utilities ───────────────────────────────────────────────────────────────
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,+EAA+E;AAC/E,OAAO,EAAE,cAAc,IAAI,eAAe,EAAE,iBAAiB,IAAI,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC9G,OAAO,EAAE,WAAW,IAAI,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAmC,SAAS,IAAI,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EAAE,UAAU,IAAI,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG7D,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,cAAc,IAAI,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,cAAc,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,IAAI,WAAW,EAAE,aAAa,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAAE,UAAU,IAAI,WAAW,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,YAAY,IAAI,qBAAqB,EAAE,aAAa,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC1I,OAAO,EAAE,SAAS,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE1D,gFAAgF;AAChF,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,WAAW,EACX,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,GAaZ,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,OAAO,EACL,WAAW,GAKZ,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,cAAc,EACd,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAE/B,gFAAgF;AAChF,OAAO,EACL,UAAU,GAIX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,GAIf,MAAM,qBAAqB,CAAC;AAE7B,gFAAgF;AAChF,OAAO,EACL,UAAU,EACV,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,UAAU,GAIX,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,YAAY,IAAI,oBAAoB,EACpC,YAAY,EACZ,aAAa,EACb,WAAW,EACX,WAAW,GAEZ,MAAM,mBAAmB,CAAC;AAE3B,gFAAgF;AAChF,OAAO,EACL,cAAc,EACd,kBAAkB,GAInB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEvE,gFAAgF;AAChF,OAAO,EACL,YAAY,GAKb,MAAM,kBAAkB,CAAC;AAE1B,uDAAuD;AACvD,OAAO,EACL,aAAa,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,UAAU,EACV,cAAc,GACf,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,YAAY,EACZ,aAAa,EACb,WAAW,EACX,cAAc,EACd,SAAS,GAUV,MAAM,uBAAuB,CAAC;AAE/B,gFAAgF;AAChF,OAAO,EACL,cAAc,EACd,cAAc,EACd,aAAa,GAId,MAAM,oBAAoB,CAAC;AAE5B,gFAAgF;AAChF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAiB,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAE3B,gFAAgF;AAChF,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,gFAAgF;AAChF,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAC/B,MAAM,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,QAAQ;IAQnB;QACE,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,YAAY,GAAG,IAAI,aAAa,EAAE,CAAC;QACxC,IAAI,CAAC,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;QAC5C,IAAI,CAAC,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IACjC,CAAC;IAED,uCAAuC;IACvC,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,QAAQ,CAAC,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC;IAED,+BAA+B;IAC/B,QAAQ,KAAoB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAEvD,iCAAiC;IACjC,WAAW,KAAsB,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAE9D,iCAAiC;IACjC,UAAU,KAAsB,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAE7D,wBAAwB;IACxB,SAAS,KAAc,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5C,yCAAyC;IACzC,QAAQ,KAAkB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE9C,yCAAyC;IACzC,gBAAgB,KAAkB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtD;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,UAShC,EAAE;QACJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QAEnC,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,eAAe,SAAS,EAAE,CAAC,CAAC;QAE5D,0BAA0B;QAC1B,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;YAClC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,WAAW,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,cAAc,CACtB,gCAAgC,MAAM,CAAC,OAAO,EAAE,EAChD,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,KAAK,iBAAiB,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,0BAA0B;QAC1B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,IAAI,WAAW,CAAC;QAC/F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC;QAE/C,kCAAkC;QAClC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE;YACnF,KAAK;YACL,QAAQ,EAAE,QAAe;YACzB,SAAS,EAAE,OAAO,CAAC,MAAM;YACzB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM;SACnC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,KAAK,EAAE,CAAC,CAAC;QAEjF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAc;QAC9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAExC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;YACvB,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QAED,OAAO,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,OAAgD;QACjF,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,OAAiD;QACrF,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QAEnC,MAAM,CAAC,IAAI,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAE5C,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAE7C,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,cAAc,CACtB,uCAAuC,MAAM,CAAC,WAAW,wEAAwE,EACjI,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE;YACrF,MAAM,EAAE,aAAa,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC;IAED,gCAAgC;IAChC,MAAM,CAAC,KAAK,CAAC,UAAU;QACrB,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED,yDAAyD;IACzD,MAAM,CAAC,aAAa;QAClB,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACrD,CAAC;IAED,4BAA4B;IAC5B,MAAM,CAAC,SAAS;QACd,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,qCAAqC;IACrC,MAAM,CAAC,iBAAiB;QACtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAC;IACrD,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAKxC;IACC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;IAE/B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;QACnB,UAAU,CAAC,MAAM,CAAC,MAAa,CAAC,CAAC;IACnC,CAAC;IAED,qEAAqE;IACrE,6CAA6C;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,uBAAuB,EAAE,CAAC;IAC3D,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAC;IAClH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,KAAK,QAAQ,eAAe,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,+EAA+E;AAC/E,OAAO,EAAE,cAAc,IAAI,eAAe,EAAE,iBAAiB,IAAI,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC9G,OAAO,EAAE,WAAW,IAAI,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAmC,SAAS,IAAI,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EAAE,UAAU,IAAI,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG7D,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,cAAc,IAAI,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,cAAc,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,IAAI,WAAW,EAAE,aAAa,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAAE,UAAU,IAAI,WAAW,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,YAAY,IAAI,qBAAqB,EAAE,aAAa,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC1I,OAAO,EAAE,SAAS,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE1D,gFAAgF;AAChF,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,WAAW,EACX,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,GAaZ,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,OAAO,EACL,WAAW,GAKZ,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,cAAc,EACd,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAE/B,gFAAgF;AAChF,OAAO,EACL,UAAU,GAIX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,GAIf,MAAM,qBAAqB,CAAC;AAE7B,gFAAgF;AAChF,OAAO,EACL,UAAU,EACV,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,UAAU,GAIX,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,YAAY,IAAI,oBAAoB,EACpC,YAAY,EACZ,aAAa,EACb,WAAW,EACX,WAAW,GAEZ,MAAM,mBAAmB,CAAC;AAE3B,gFAAgF;AAChF,OAAO,EACL,cAAc,EACd,kBAAkB,GAInB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEvE,gFAAgF;AAChF,OAAO,EACL,YAAY,GAKb,MAAM,kBAAkB,CAAC;AAE1B,uDAAuD;AACvD,OAAO,EACL,aAAa,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,UAAU,EACV,cAAc,GACf,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,YAAY,EACZ,aAAa,EACb,WAAW,EACX,cAAc,EACd,SAAS,GAUV,MAAM,uBAAuB,CAAC;AAE/B,+EAA+E;AAC/E,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,uBAAuB,EACvB,UAAU,GAYX,MAAM,mBAAmB,CAAC;AAE3B,gFAAgF;AAChF,OAAO,EACL,cAAc,EACd,cAAc,EACd,aAAa,GAId,MAAM,oBAAoB,CAAC;AAE5B,gFAAgF;AAChF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAiB,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAE3B,gFAAgF;AAChF,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,gFAAgF;AAChF,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAC/B,MAAM,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,QAAQ;IAQnB;QACE,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,YAAY,GAAG,IAAI,aAAa,EAAE,CAAC;QACxC,IAAI,CAAC,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;QAC5C,IAAI,CAAC,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IACjC,CAAC;IAED,uCAAuC;IACvC,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,QAAQ,CAAC,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC;IAED,+BAA+B;IAC/B,QAAQ,KAAoB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAEvD,iCAAiC;IACjC,WAAW,KAAsB,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAE9D,iCAAiC;IACjC,UAAU,KAAsB,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAE7D,wBAAwB;IACxB,SAAS,KAAc,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5C,yCAAyC;IACzC,QAAQ,KAAkB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE9C,yCAAyC;IACzC,gBAAgB,KAAkB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtD;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,UAShC,EAAE;QACJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QAEnC,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,eAAe,SAAS,EAAE,CAAC,CAAC;QAE5D,0BAA0B;QAC1B,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;YAClC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,WAAW,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,cAAc,CACtB,gCAAgC,MAAM,CAAC,OAAO,EAAE,EAChD,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,KAAK,iBAAiB,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,0BAA0B;QAC1B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,IAAI,WAAW,CAAC;QAC/F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC;QAE/C,kCAAkC;QAClC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE;YACnF,KAAK;YACL,QAAQ,EAAE,QAAe;YACzB,SAAS,EAAE,OAAO,CAAC,MAAM;YACzB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM;SACnC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,KAAK,EAAE,CAAC,CAAC;QAEjF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAc;QAC9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAExC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;YACvB,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QAED,OAAO,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,OAAgD;QACjF,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,OAAiD;QACrF,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QAEnC,MAAM,CAAC,IAAI,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAE5C,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAE7C,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,cAAc,CACtB,uCAAuC,MAAM,CAAC,WAAW,wEAAwE,EACjI,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE;YACrF,MAAM,EAAE,aAAa,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC;IAED,gCAAgC;IAChC,MAAM,CAAC,KAAK,CAAC,UAAU;QACrB,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED,yDAAyD;IACzD,MAAM,CAAC,aAAa;QAClB,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACrD,CAAC;IAED,4BAA4B;IAC5B,MAAM,CAAC,SAAS;QACd,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,qCAAqC;IACrC,MAAM,CAAC,iBAAiB;QACtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAC;IACrD,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAKxC;IACC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;IAE/B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;QACnB,UAAU,CAAC,MAAM,CAAC,MAAa,CAAC,CAAC;IACnC,CAAC;IAED,qEAAqE;IACrE,6CAA6C;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,uBAAuB,EAAE,CAAC;IAC3D,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAC;IAClH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,KAAK,QAAQ,eAAe,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC"}
@@ -0,0 +1,67 @@
1
+ /**
2
+ * SkillShield — Cryptographic Audit Trail
3
+ *
4
+ * Hash-chained log of every action during skill execution.
5
+ * Each entry is linked to the previous via SHA-256, creating
6
+ * a tamper-evident chain (like Aegis, but integrated with our
7
+ * scanner + runtime instead of being a separate tool).
8
+ */
9
+ export interface AuditEntry {
10
+ /** Sequential ID */
11
+ id: number;
12
+ /** ISO 8601 timestamp */
13
+ timestamp: string;
14
+ /** SHA-256 hash of this entry (computed from content + previousHash) */
15
+ hash: string;
16
+ /** Hash of the previous entry (genesis = "0") */
17
+ previousHash: string;
18
+ /** Type of event */
19
+ type: AuditEventType;
20
+ /** Skill being executed */
21
+ skillId: string;
22
+ /** Human-readable description */
23
+ description: string;
24
+ /** Structured data for the event */
25
+ data?: Record<string, unknown>;
26
+ /** Severity of the event */
27
+ severity: 'INFO' | 'WARN' | 'CRITICAL';
28
+ }
29
+ export type AuditEventType = 'SCAN_START' | 'SCAN_COMPLETE' | 'THREAT_FOUND' | 'EXECUTION_START' | 'EXECUTION_END' | 'NETWORK_REQUEST' | 'NETWORK_BLOCKED' | 'FILE_READ' | 'FILE_WRITE' | 'FILE_BLOCKED' | 'KILL_SWITCH' | 'POLICY_VIOLATION' | 'RESOURCE_LIMIT' | 'APPROVAL' | 'REJECTION';
30
+ export declare class AuditTrail {
31
+ private chain;
32
+ private skillId;
33
+ constructor(skillId: string);
34
+ /**
35
+ * Record an event in the audit trail.
36
+ */
37
+ record(type: AuditEventType, description: string, severity?: AuditEntry['severity'], data?: Record<string, unknown>): AuditEntry;
38
+ scanStart(patterns: number, categories: number): AuditEntry;
39
+ scanComplete(score: number, threats: number, status: string): AuditEntry;
40
+ threatFound(patternId: string, category: string, severity: string, evidence: string): AuditEntry;
41
+ executionStart(sandbox: string, policies: string[]): AuditEntry;
42
+ executionEnd(exitCode: number | null, durationMs: number, killed: boolean): AuditEntry;
43
+ networkBlocked(domain: string, reason: string): AuditEntry;
44
+ fileBlocked(path: string, operation: string, reason: string): AuditEntry;
45
+ killSwitch(reason: string): AuditEntry;
46
+ /**
47
+ * Verify the integrity of the entire chain.
48
+ * Returns true if no tampering detected.
49
+ */
50
+ verify(): {
51
+ valid: boolean;
52
+ brokenAt?: number;
53
+ details?: string;
54
+ };
55
+ /**
56
+ * Export the full chain as JSON (for storage / compliance).
57
+ */
58
+ toJSON(): string;
59
+ /**
60
+ * Export as compact summary for CLI display.
61
+ */
62
+ toSummary(): string;
63
+ getChain(): AuditEntry[];
64
+ getLength(): number;
65
+ getLatestHash(): string | null;
66
+ }
67
+ //# sourceMappingURL=audit-trail.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"audit-trail.d.ts","sourceRoot":"","sources":["../../src/shield/audit-trail.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,WAAW,UAAU;IACzB,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB;IACpB,IAAI,EAAE,cAAc,CAAC;IACrB,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;CACxC;AAED,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,eAAe,GACf,cAAc,GACd,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,iBAAiB,GACjB,WAAW,GACX,YAAY,GACZ,cAAc,GACd,aAAa,GACb,kBAAkB,GAClB,gBAAgB,GAChB,UAAU,GACV,WAAW,CAAC;AAEhB,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAoB;IACjC,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,MAAM;IAI3B;;OAEG;IACH,MAAM,CACJ,IAAI,EAAE,cAAc,EACpB,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,UAAU,CAAC,UAAU,CAAU,EACzC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,UAAU;IA2Bb,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU;IAI3D,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU;IAKxE,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU;IAIhG,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,UAAU;IAI/D,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,UAAU;IAKtF,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU;IAI1D,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU;IAIxE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU;IAMtC;;;OAGG;IACH,MAAM,IAAI;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE;IAgCjE;;OAEG;IACH,MAAM,IAAI,MAAM;IAWhB;;OAEG;IACH,SAAS,IAAI,MAAM;IAoBnB,QAAQ,IAAI,UAAU,EAAE;IAIxB,SAAS,IAAI,MAAM;IAInB,aAAa,IAAI,MAAM,GAAG,IAAI;CAG/B"}
@@ -0,0 +1,140 @@
1
+ /**
2
+ * SkillShield — Cryptographic Audit Trail
3
+ *
4
+ * Hash-chained log of every action during skill execution.
5
+ * Each entry is linked to the previous via SHA-256, creating
6
+ * a tamper-evident chain (like Aegis, but integrated with our
7
+ * scanner + runtime instead of being a separate tool).
8
+ */
9
+ import { createHash } from 'crypto';
10
+ export class AuditTrail {
11
+ constructor(skillId) {
12
+ this.chain = [];
13
+ this.skillId = skillId;
14
+ }
15
+ /**
16
+ * Record an event in the audit trail.
17
+ */
18
+ record(type, description, severity = 'INFO', data) {
19
+ const id = this.chain.length;
20
+ const previousHash = id === 0 ? '0' : this.chain[id - 1].hash;
21
+ const timestamp = new Date().toISOString();
22
+ // Compute hash from content + previous hash
23
+ const content = JSON.stringify({ id, timestamp, type, skillId: this.skillId, description, data, previousHash });
24
+ const hash = createHash('sha256').update(content).digest('hex');
25
+ const entry = {
26
+ id,
27
+ timestamp,
28
+ hash,
29
+ previousHash,
30
+ type,
31
+ skillId: this.skillId,
32
+ description,
33
+ data,
34
+ severity,
35
+ };
36
+ this.chain.push(entry);
37
+ return entry;
38
+ }
39
+ // ── Convenience methods ──
40
+ scanStart(patterns, categories) {
41
+ return this.record('SCAN_START', `Scanning skill with ${patterns} patterns across ${categories} categories`, 'INFO', { patterns, categories });
42
+ }
43
+ scanComplete(score, threats, status) {
44
+ const severity = threats > 0 ? (status === 'BLOCKED' ? 'CRITICAL' : 'WARN') : 'INFO';
45
+ return this.record('SCAN_COMPLETE', `Scan complete: score=${score}/100, threats=${threats}, status=${status}`, severity, { score, threats, status });
46
+ }
47
+ threatFound(patternId, category, severity, evidence) {
48
+ return this.record('THREAT_FOUND', `Threat ${patternId} (${category}/${severity}): ${evidence.substring(0, 100)}`, 'CRITICAL', { patternId, category, severity, evidence: evidence.substring(0, 500) });
49
+ }
50
+ executionStart(sandbox, policies) {
51
+ return this.record('EXECUTION_START', `Executing in ${sandbox} sandbox with policies: ${policies.join(', ')}`, 'INFO', { sandbox, policies });
52
+ }
53
+ executionEnd(exitCode, durationMs, killed) {
54
+ const severity = killed ? 'CRITICAL' : (exitCode === 0 ? 'INFO' : 'WARN');
55
+ return this.record('EXECUTION_END', `Execution ended: code=${exitCode}, duration=${durationMs}ms, killed=${killed}`, severity, { exitCode, durationMs, killed });
56
+ }
57
+ networkBlocked(domain, reason) {
58
+ return this.record('NETWORK_BLOCKED', `Network blocked: ${domain} — ${reason}`, 'WARN', { domain, reason });
59
+ }
60
+ fileBlocked(path, operation, reason) {
61
+ return this.record('FILE_BLOCKED', `File ${operation} blocked: ${path} — ${reason}`, 'WARN', { path, operation, reason });
62
+ }
63
+ killSwitch(reason) {
64
+ return this.record('KILL_SWITCH', `Kill switch activated: ${reason}`, 'CRITICAL', { reason });
65
+ }
66
+ // ── Chain operations ──
67
+ /**
68
+ * Verify the integrity of the entire chain.
69
+ * Returns true if no tampering detected.
70
+ */
71
+ verify() {
72
+ for (let i = 0; i < this.chain.length; i++) {
73
+ const entry = this.chain[i];
74
+ // Check previous hash linkage
75
+ if (i === 0 && entry.previousHash !== '0') {
76
+ return { valid: false, brokenAt: 0, details: 'Genesis entry has wrong previousHash' };
77
+ }
78
+ if (i > 0 && entry.previousHash !== this.chain[i - 1].hash) {
79
+ return { valid: false, brokenAt: i, details: `Entry ${i} previousHash doesn't match entry ${i - 1} hash` };
80
+ }
81
+ // Recompute hash
82
+ const content = JSON.stringify({
83
+ id: entry.id,
84
+ timestamp: entry.timestamp,
85
+ type: entry.type,
86
+ skillId: entry.skillId,
87
+ description: entry.description,
88
+ data: entry.data,
89
+ previousHash: entry.previousHash,
90
+ });
91
+ const expectedHash = createHash('sha256').update(content).digest('hex');
92
+ if (entry.hash !== expectedHash) {
93
+ return { valid: false, brokenAt: i, details: `Entry ${i} hash mismatch — data was tampered` };
94
+ }
95
+ }
96
+ return { valid: true };
97
+ }
98
+ /**
99
+ * Export the full chain as JSON (for storage / compliance).
100
+ */
101
+ toJSON() {
102
+ return JSON.stringify({
103
+ skillId: this.skillId,
104
+ chainLength: this.chain.length,
105
+ genesisHash: this.chain[0]?.hash || null,
106
+ latestHash: this.chain[this.chain.length - 1]?.hash || null,
107
+ verified: this.verify().valid,
108
+ entries: this.chain,
109
+ }, null, 2);
110
+ }
111
+ /**
112
+ * Export as compact summary for CLI display.
113
+ */
114
+ toSummary() {
115
+ const lines = [];
116
+ const threats = this.chain.filter((e) => e.severity === 'CRITICAL');
117
+ const warnings = this.chain.filter((e) => e.severity === 'WARN');
118
+ const verification = this.verify();
119
+ lines.push(`Audit Trail: ${this.skillId}`);
120
+ lines.push(`Entries: ${this.chain.length} | Threats: ${threats.length} | Warnings: ${warnings.length}`);
121
+ lines.push(`Chain integrity: ${verification.valid ? 'VERIFIED ✓' : 'BROKEN ✗ at entry ' + verification.brokenAt}`);
122
+ if (threats.length > 0) {
123
+ lines.push('\nCritical Events:');
124
+ threats.forEach((e) => {
125
+ lines.push(` [${e.timestamp}] ${e.type}: ${e.description}`);
126
+ });
127
+ }
128
+ return lines.join('\n');
129
+ }
130
+ getChain() {
131
+ return [...this.chain];
132
+ }
133
+ getLength() {
134
+ return this.chain.length;
135
+ }
136
+ getLatestHash() {
137
+ return this.chain.length > 0 ? this.chain[this.chain.length - 1].hash : null;
138
+ }
139
+ }
140
+ //# sourceMappingURL=audit-trail.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"audit-trail.js","sourceRoot":"","sources":["../../src/shield/audit-trail.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAwCpC,MAAM,OAAO,UAAU;IAIrB,YAAY,OAAe;QAHnB,UAAK,GAAiB,EAAE,CAAC;QAI/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,IAAoB,EACpB,WAAmB,EACnB,WAAmC,MAAM,EACzC,IAA8B;QAE9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,MAAM,YAAY,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE3C,4CAA4C;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAChH,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEhE,MAAM,KAAK,GAAe;YACxB,EAAE;YACF,SAAS;YACT,IAAI;YACJ,YAAY;YACZ,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW;YACX,IAAI;YACJ,QAAQ;SACT,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4BAA4B;IAE5B,SAAS,CAAC,QAAgB,EAAE,UAAkB;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB,QAAQ,oBAAoB,UAAU,aAAa,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IACjJ,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,OAAe,EAAE,MAAc;QACzD,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACrF,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,wBAAwB,KAAK,iBAAiB,OAAO,YAAY,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACvJ,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,QAAgB,EAAE,QAAgB,EAAE,QAAgB;QACjF,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,SAAS,KAAK,QAAQ,IAAI,QAAQ,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1M,CAAC;IAED,cAAc,CAAC,OAAe,EAAE,QAAkB;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,OAAO,2BAA2B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChJ,CAAC;IAED,YAAY,CAAC,QAAuB,EAAE,UAAkB,EAAE,MAAe;QACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,yBAAyB,QAAQ,cAAc,UAAU,cAAc,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IACnK,CAAC;IAED,cAAc,CAAC,MAAc,EAAE,MAAc;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,MAAM,MAAM,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,WAAW,CAAC,IAAY,EAAE,SAAiB,EAAE,MAAc;QACzD,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,SAAS,aAAa,IAAI,MAAM,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5H,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,0BAA0B,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,yBAAyB;IAEzB;;;OAGG;IACH,MAAM;QACJ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAE5B,8BAA8B;YAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,GAAG,EAAE,CAAC;gBAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;YACxF,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,qCAAqC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC7G,CAAC;YAED,iBAAiB;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC7B,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAExE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,oCAAoC,EAAE,CAAC;YAChG,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC9B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI;YACxC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI;YAC3D,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK;YAC7B,OAAO,EAAE,IAAI,CAAC,KAAK;SACpB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACd,CAAC;IAED;;OAEG;IACH,SAAS;QACP,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAEnC,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,MAAM,eAAe,OAAO,CAAC,MAAM,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxG,KAAK,CAAC,IAAI,CAAC,oBAAoB,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,oBAAoB,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEnH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACjC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,CAAC;CACF"}
@@ -0,0 +1,80 @@
1
+ /**
2
+ * SkillShield — Filesystem Jail
3
+ *
4
+ * Restricts skill access to specific directories. Skills can only read/write
5
+ * within their jail, and sensitive paths are always blocked.
6
+ *
7
+ * Unlike NVIDIA OpenShell (which needs Landlock/Linux), this works
8
+ * cross-platform by intercepting Node.js fs module calls.
9
+ */
10
+ export interface FilesystemPolicy {
11
+ /** Root directory for the jail (skill can only access within this) */
12
+ jailRoot: string;
13
+ /** Additional readable paths outside jail */
14
+ readablePaths?: string[];
15
+ /** Additional writable paths outside jail */
16
+ writablePaths?: string[];
17
+ /** Completely blocked paths (always denied, overrides everything) */
18
+ blockedPaths?: string[];
19
+ /** Allow reading files outside jail? (default: false) */
20
+ allowReadOutsideJail?: boolean;
21
+ /** Max file size the skill can write (bytes) */
22
+ maxWriteSize?: number;
23
+ /** Max total files the skill can create */
24
+ maxFileCount?: number;
25
+ }
26
+ export interface FilesystemViolation {
27
+ timestamp: string;
28
+ type: 'READ_BLOCKED' | 'WRITE_BLOCKED' | 'DELETE_BLOCKED' | 'SENSITIVE_PATH' | 'SIZE_EXCEEDED' | 'FILE_COUNT_EXCEEDED';
29
+ path: string;
30
+ operation: string;
31
+ details: string;
32
+ }
33
+ export declare class FilesystemJail {
34
+ private policy;
35
+ private violations;
36
+ private fileCount;
37
+ private totalBytesWritten;
38
+ private jailRoot;
39
+ private blockedPaths;
40
+ private homeDir;
41
+ constructor(policy: FilesystemPolicy);
42
+ /**
43
+ * Check if a read operation is allowed.
44
+ */
45
+ checkRead(filePath: string): boolean;
46
+ /**
47
+ * Check if a write operation is allowed.
48
+ */
49
+ checkWrite(filePath: string, size?: number): boolean;
50
+ /**
51
+ * Check if a delete operation is allowed.
52
+ */
53
+ checkDelete(filePath: string): boolean;
54
+ /**
55
+ * Generate Node.js code that enforces filesystem policy at runtime.
56
+ */
57
+ generateEnforcementCode(): string;
58
+ private isSensitivePath;
59
+ private isInsideJail;
60
+ private resolvePath;
61
+ private expandPath;
62
+ private recordViolation;
63
+ getViolations(): FilesystemViolation[];
64
+ getStats(): {
65
+ filesCreated: number;
66
+ bytesWritten: number;
67
+ violations: number;
68
+ };
69
+ }
70
+ /**
71
+ * Parse filesystem policy from SKILL.md frontmatter.
72
+ * Expected format:
73
+ * filesystem:
74
+ * writable: ["./output", "/tmp"]
75
+ * readable: ["./data"]
76
+ * maxWriteMB: 50
77
+ * maxFiles: 100
78
+ */
79
+ export declare function parseFilesystemPolicy(frontmatter: Record<string, unknown>, defaultJailRoot: string): FilesystemPolicy;
80
+ //# sourceMappingURL=filesystem-jail.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"filesystem-jail.d.ts","sourceRoot":"","sources":["../../src/shield/filesystem-jail.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,yDAAyD;IACzD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,cAAc,GAAG,eAAe,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,eAAe,GAAG,qBAAqB,CAAC;IACvH,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAiDD,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,iBAAiB,CAAa;IACtC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAAc;IAClC,OAAO,CAAC,OAAO,CAAS;gBAEZ,MAAM,EAAE,gBAAgB;IAYpC;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAsCpC;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO;IAuDpD;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IA4BtC;;OAEG;IACH,uBAAuB,IAAI,MAAM;IAsEjC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,eAAe;IAIvB,aAAa,IAAI,mBAAmB,EAAE;IAItC,QAAQ,IAAI;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;CAO/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,eAAe,EAAE,MAAM,GACtB,gBAAgB,CAYlB"}