sovr-mcp-server 0.2.0 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of sovr-mcp-server might be problematic. Click here for more details.
- package/dist/api/client.d.ts +1 -1
- package/dist/api/client.d.ts.map +1 -1
- package/dist/api/client.js.map +1 -1
- package/dist/cli.d.ts +35 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +37 -0
- package/dist/cli.js.map +1 -0
- package/dist/enforced/wrapper.d.ts +86 -0
- package/dist/enforced/wrapper.d.ts.map +1 -0
- package/dist/enforced/wrapper.js +394 -0
- package/dist/enforced/wrapper.js.map +1 -0
- package/dist/index.js +34 -2
- package/dist/index.js.map +1 -1
- package/package.json +6 -3
- package/LICENSE +0 -21
- package/README.md +0 -245
- package/dist/__tests__/ed25519.test.d.ts +0 -5
- package/dist/__tests__/ed25519.test.d.ts.map +0 -1
- package/dist/__tests__/ed25519.test.js +0 -120
- package/dist/__tests__/ed25519.test.js.map +0 -1
- package/dist/__tests__/local-store.test.d.ts +0 -5
- package/dist/__tests__/local-store.test.d.ts.map +0 -1
- package/dist/__tests__/local-store.test.js +0 -123
- package/dist/__tests__/local-store.test.js.map +0 -1
package/dist/api/client.d.ts
CHANGED
package/dist/api/client.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAGD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDZ,CAAC;AAEX,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAA4B;gBAE9B,MAAM,EAAE,eAAe;IASnC;;OAEG;IACG,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAS7E;;OAEG;IACG,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAM7E;;OAEG;
|
|
1
|
+
{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAGD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDZ,CAAC;AAEX,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAA4B;gBAE9B,MAAM,EAAE,eAAe;IASnC;;OAEG;IACG,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAS7E;;OAEG;IACG,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAM7E;;OAEG;IACU,OAAO,CAAC,CAAC,EACpB,MAAM,EAAE,KAAK,GAAG,MAAM,EACtB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC;IAiGb,OAAO,CAAC,KAAK;IAMP,SAAS,CAAC,MAAM,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,eAAe,CAAC;IAItB,cAAc,CAAC,MAAM,EAAE;QAC3B,OAAO,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,CAAC;QACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAMxB,eAAe,CAAC,MAAM,EAAE;QAC5B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;KAClD,GAAG,OAAO,CAAC,eAAe,CAAC;IAItB,aAAa,CAAC,MAAM,CAAC,EAAE;QAC3B,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;QAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,YAAY,CAAC;IAMnB,YAAY,CAAC,MAAM,CAAC,EAAE;QAC1B,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC;QAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,UAAU,CAAC;IAIjB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMtC,cAAc,CAAC,MAAM,CAAC,EAAE;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,YAAY,CAAC;IAMnB,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAIhD,iBAAiB,CAAC,MAAM,EAAE;QAC9B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIvB,iBAAiB,CAAC,MAAM,EAAE;QAC9B,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAMvB,cAAc,CAAC,MAAM,CAAC,EAAE;QAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,WAAW,CAAC;IAIlB,iBAAiB,CAAC,MAAM,EAAE;QAC9B,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAMxB,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IAIpC,eAAe,IAAI,OAAO,CAAC,YAAY,CAAC;IAMxC,WAAW,CAAC,MAAM,EAAE;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIX,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC;IAMhC,SAAS,CAAC,MAAM,EAAE;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIzB,mBAAmB,CAAC,MAAM,EAAE;QAChC,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAM1B,UAAU,CAAC,MAAM,EAAE;QACvB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAM1D,aAAa,CAAC,MAAM,CAAC,EAAE;QAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,YAAY,CAAC;IAMnB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAMrC,WAAW,CAAC,MAAM,EAAE;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAM3E,gBAAgB,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,GAAG,OAAO,CAAC,eAAe,CAAC;IAItB,aAAa,CAAC,MAAM,EAAE;QAC1B,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,aAAa,CAAC;CAG3B;AAID,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC;IAC3C,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,UAAU,EAAE,OAAO,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAGD,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,aAAa,CAEnE;AAGD,wBAAgB,mBAAmB,IAAI,aAAa,CASnD"}
|
package/dist/api/client.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AASrF,yBAAyB;AACzB,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO;IACP,UAAU,EAAE,6BAA6B;IACzC,UAAU,EAAE,kCAAkC;IAE9C,OAAO;IACP,gBAAgB,EAAE,2BAA2B;IAC7C,aAAa,EAAE,yBAAyB;IACxC,gBAAgB,EAAE,4BAA4B;IAC9C,eAAe,EAAE,2BAA2B;IAE5C,OAAO;IACP,WAAW,EAAE,uBAAuB;IACpC,UAAU,EAAE,0BAA0B;IACtC,aAAa,EAAE,yBAAyB;IACxC,cAAc,EAAE,0BAA0B;IAE1C,OAAO;IACP,UAAU,EAAE,sBAAsB;IAClC,WAAW,EAAE,uBAAuB;IACpC,YAAY,EAAE,wBAAwB;IAEtC,cAAc;IACd,kBAAkB,EAAE,gCAAgC;IACpD,mBAAmB,EAAE,8BAA8B;IACnD,mBAAmB,EAAE,8BAA8B;IAEnD,MAAM;IACN,gBAAgB,EAAE,2BAA2B;IAC7C,mBAAmB,EAAE,8BAA8B;IACnD,mBAAmB,EAAE,8BAA8B;IAEnD,KAAK;IACL,UAAU,EAAE,2BAA2B;IACvC,YAAY,EAAE,6BAA6B;IAE3C,OAAO;IACP,aAAa,EAAE,6BAA6B;IAC5C,aAAa,EAAE,8BAA8B;IAE7C,SAAS;IACT,SAAS,EAAE,6BAA6B;IACxC,aAAa,EAAE,6BAA6B;IAE5C,OAAO;IACP,gBAAgB,EAAE,kCAAkC;IACpD,0BAA0B,EAAE,4CAA4C;IAExE,SAAS;IACT,iBAAiB,EAAE,gCAAgC;IACnD,uBAAuB,EAAE,qCAAqC;CACtD,CAAC;AAEX,MAAM,OAAO,aAAa;IAChB,MAAM,CAA4B;IAE1C,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;YAChC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;SAC7B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAI,QAAgB,EAAE,KAA+B;QAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAI,QAAgB,EAAE,KAA8B;QAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnD,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;
|
|
1
|
+
{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AASrF,yBAAyB;AACzB,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO;IACP,UAAU,EAAE,6BAA6B;IACzC,UAAU,EAAE,kCAAkC;IAE9C,OAAO;IACP,gBAAgB,EAAE,2BAA2B;IAC7C,aAAa,EAAE,yBAAyB;IACxC,gBAAgB,EAAE,4BAA4B;IAC9C,eAAe,EAAE,2BAA2B;IAE5C,OAAO;IACP,WAAW,EAAE,uBAAuB;IACpC,UAAU,EAAE,0BAA0B;IACtC,aAAa,EAAE,yBAAyB;IACxC,cAAc,EAAE,0BAA0B;IAE1C,OAAO;IACP,UAAU,EAAE,sBAAsB;IAClC,WAAW,EAAE,uBAAuB;IACpC,YAAY,EAAE,wBAAwB;IAEtC,cAAc;IACd,kBAAkB,EAAE,gCAAgC;IACpD,mBAAmB,EAAE,8BAA8B;IACnD,mBAAmB,EAAE,8BAA8B;IAEnD,MAAM;IACN,gBAAgB,EAAE,2BAA2B;IAC7C,mBAAmB,EAAE,8BAA8B;IACnD,mBAAmB,EAAE,8BAA8B;IAEnD,KAAK;IACL,UAAU,EAAE,2BAA2B;IACvC,YAAY,EAAE,6BAA6B;IAE3C,OAAO;IACP,aAAa,EAAE,6BAA6B;IAC5C,aAAa,EAAE,8BAA8B;IAE7C,SAAS;IACT,SAAS,EAAE,6BAA6B;IACxC,aAAa,EAAE,6BAA6B;IAE5C,OAAO;IACP,gBAAgB,EAAE,kCAAkC;IACpD,0BAA0B,EAAE,4CAA4C;IAExE,SAAS;IACT,iBAAiB,EAAE,gCAAgC;IACnD,uBAAuB,EAAE,qCAAqC;CACtD,CAAC;AAEX,MAAM,OAAO,aAAa;IAChB,MAAM,CAA4B;IAE1C,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;YAChC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;SAC7B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAI,QAAgB,EAAE,KAA+B;QAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAI,QAAgB,EAAE,KAA8B;QAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnD,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,OAAO,CAClB,MAAsB,EACtB,GAAW,EACX,IAA8B;QAE9B,IAAI,SAAS,GAAiB,IAAI,CAAC;QAEnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAE5E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAChC,MAAM;oBACN,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;wBAC/C,mBAAmB,EAAE,uBAAuB;qBAC7C;oBACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC7C,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,YAAY,CAAC,SAAS,CAAC,CAAC;gBAExB,aAAa;gBACb,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAC5B,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAC;oBACpE,CAAC;oBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAC5B,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;wBACvD,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,EACrB,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC;oBACJ,CAAC;oBAED,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACxC,MAAM,IAAI,YAAY,CACpB,uBAAuB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAC/D,QAAQ,CAAC,MAAM,EACf,SAAS,CACV,CAAC;gBACJ,CAAC;gBAED,aAAa;gBACb,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAG/B,CAAC;gBAEF,+CAA+C;gBAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;gBACrC,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;oBACzE,OAAQ,UAA0B,CAAC,IAAI,CAAC;gBAC1C,CAAC;gBAED,SAAS;gBACT,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;oBACpC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAS,CAAC;gBAC/B,CAAC;gBAED,YAAY;gBACZ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,YAAY,CACpB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,oBAAoB,EAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EACtB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAC3B,CAAC;gBACJ,CAAC;gBAED,OAAO,IAAoB,CAAC;YAE9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAc,CAAC;gBAE3B,UAAU;gBACV,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;oBACnC,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,iBAAiB;gBACjB,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;oBACxC,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;wBACtC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;wBAC1C,SAAS;oBACX,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,aAAa;gBACb,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,IAAI,IAAI,YAAY,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,qDAAqD;IAErD,KAAK,CAAC,SAAS,CAAC,MAIf;QACC,OAAO,IAAI,CAAC,MAAM,CAAkB,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAGpB;QACC,OAAO,IAAI,CAAC,MAAM,CAAoB,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,mDAAmD;IAEnD,KAAK,CAAC,eAAe,CAAC,MAKrB;QACC,OAAO,IAAI,CAAC,MAAM,CAAkB,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAInB;QACC,OAAO,IAAI,CAAC,KAAK,CAAe,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAED,mDAAmD;IAEnD,KAAK,CAAC,YAAY,CAAC,MAIlB;QACC,OAAO,IAAI,CAAC,KAAK,CAAa,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,KAAK,CAAS,SAAS,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,mDAAmD;IAEnD,KAAK,CAAC,cAAc,CAAC,MAMpB;QACC,OAAO,IAAI,CAAC,KAAK,CAAe,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,4DAA4D;IAE5D,KAAK,CAAC,mBAAmB;QACvB,OAAO,IAAI,CAAC,KAAK,CAAmB,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAIvB;QACC,OAAO,IAAI,CAAC,MAAM,CAAmB,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAGvB;QACC,OAAO,IAAI,CAAC,MAAM,CAAmB,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IAED,oDAAoD;IAEpD,KAAK,CAAC,cAAc,CAAC,MAIpB;QACC,OAAO,IAAI,CAAC,KAAK,CAAc,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAGvB;QACC,OAAO,IAAI,CAAC,MAAM,CAAoB,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED,qDAAqD;IAErD,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,KAAK,CAAe,SAAS,CAAC,aAAa,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,KAAK,CAAe,SAAS,CAAC,aAAa,CAAC,CAAC;IAC3D,CAAC;IAED,uDAAuD;IAEvD,KAAK,CAAC,WAAW,CAAC,MAKjB;QACC,MAAM,IAAI,CAAC,MAAM,CAAO,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,KAAK,CAAW,SAAS,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,mDAAmD;IAEnD,KAAK,CAAC,SAAS,CAAC,MAIf;QACC,OAAO,IAAI,CAAC,MAAM,CAAqB,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAGzB;QACC,OAAO,IAAI,CAAC,MAAM,CAAsB,SAAS,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;IACxF,CAAC;IAED,qDAAqD;IAErD,KAAK,CAAC,UAAU,CAAC,MAKhB;QACC,OAAO,IAAI,CAAC,KAAK,CAAsD,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACxG,CAAC;IAED,qDAAqD;IAErD,KAAK,CAAC,aAAa,CAAC,MAInB;QACC,OAAO,IAAI,CAAC,KAAK,CAAe,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9F,CAAC;IAED,6DAA6D;IAE7D,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,qDAAqD;IAErD,KAAK,CAAC,WAAW,CAAC,MAGjB;QACC,OAAO,IAAI,CAAC,KAAK,CAAuE,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC1H,CAAC;IAED,mDAAmD;IAEnD,KAAK,CAAC,gBAAgB,CAAC,MAItB;QACC,OAAO,IAAI,CAAC,MAAM,CAAkB,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAMnB;QACC,OAAO,IAAI,CAAC,MAAM,CAAgB,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;CACF;AA6ID,YAAY;AACZ,MAAM,UAAU,YAAY,CAAC,MAAuB;IAClD,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,aAAa;AACb,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,sCAAsC,CAAC;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAE9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AAC3C,CAAC"}
|
package/dist/cli.d.ts
ADDED
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
/**
|
|
3
|
+
* SOVR MCP Server CLI
|
|
4
|
+
*
|
|
5
|
+
* Usage:
|
|
6
|
+
* npx sovr-mcp-server
|
|
7
|
+
* npx -y sovr-mcp-server
|
|
8
|
+
*
|
|
9
|
+
* Environment Variables:
|
|
10
|
+
* SOVR_API_URL - SOVR API base URL (default: https://sovr-api.fly.dev)
|
|
11
|
+
* SOVR_API_KEY - API key for authentication
|
|
12
|
+
* SOVR_AGENT_ID - Agent identifier (e.g., claude-code-opus-4.6)
|
|
13
|
+
* SOVR_ENFORCED_MODE - Enable enforced mode (true/false, default: false)
|
|
14
|
+
* SOVR_LOCAL_MODE - Run in local mode without remote API (true/false)
|
|
15
|
+
* SOVR_SIGNING_KEY - Ed25519 signing key (hex)
|
|
16
|
+
* SOVR_TENANT_ID - Tenant identifier (default: default)
|
|
17
|
+
*
|
|
18
|
+
* MCP Config Example (Claude Code):
|
|
19
|
+
* {
|
|
20
|
+
* "mcpServers": {
|
|
21
|
+
* "sovr": {
|
|
22
|
+
* "command": "npx",
|
|
23
|
+
* "args": ["-y", "sovr-mcp-server"],
|
|
24
|
+
* "env": {
|
|
25
|
+
* "SOVR_API_KEY": "your-key",
|
|
26
|
+
* "SOVR_API_URL": "https://sovr-api.fly.dev",
|
|
27
|
+
* "SOVR_ENFORCED_MODE": "true",
|
|
28
|
+
* "SOVR_AGENT_ID": "claude-code"
|
|
29
|
+
* }
|
|
30
|
+
* }
|
|
31
|
+
* }
|
|
32
|
+
* }
|
|
33
|
+
*/
|
|
34
|
+
import './index.js';
|
|
35
|
+
//# sourceMappingURL=cli.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH,OAAO,YAAY,CAAC"}
|
package/dist/cli.js
ADDED
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
/**
|
|
3
|
+
* SOVR MCP Server CLI
|
|
4
|
+
*
|
|
5
|
+
* Usage:
|
|
6
|
+
* npx sovr-mcp-server
|
|
7
|
+
* npx -y sovr-mcp-server
|
|
8
|
+
*
|
|
9
|
+
* Environment Variables:
|
|
10
|
+
* SOVR_API_URL - SOVR API base URL (default: https://sovr-api.fly.dev)
|
|
11
|
+
* SOVR_API_KEY - API key for authentication
|
|
12
|
+
* SOVR_AGENT_ID - Agent identifier (e.g., claude-code-opus-4.6)
|
|
13
|
+
* SOVR_ENFORCED_MODE - Enable enforced mode (true/false, default: false)
|
|
14
|
+
* SOVR_LOCAL_MODE - Run in local mode without remote API (true/false)
|
|
15
|
+
* SOVR_SIGNING_KEY - Ed25519 signing key (hex)
|
|
16
|
+
* SOVR_TENANT_ID - Tenant identifier (default: default)
|
|
17
|
+
*
|
|
18
|
+
* MCP Config Example (Claude Code):
|
|
19
|
+
* {
|
|
20
|
+
* "mcpServers": {
|
|
21
|
+
* "sovr": {
|
|
22
|
+
* "command": "npx",
|
|
23
|
+
* "args": ["-y", "sovr-mcp-server"],
|
|
24
|
+
* "env": {
|
|
25
|
+
* "SOVR_API_KEY": "your-key",
|
|
26
|
+
* "SOVR_API_URL": "https://sovr-api.fly.dev",
|
|
27
|
+
* "SOVR_ENFORCED_MODE": "true",
|
|
28
|
+
* "SOVR_AGENT_ID": "claude-code"
|
|
29
|
+
* }
|
|
30
|
+
* }
|
|
31
|
+
* }
|
|
32
|
+
* }
|
|
33
|
+
*/
|
|
34
|
+
// The index.ts auto-starts via main() at module load.
|
|
35
|
+
// cli.ts just imports it to trigger startup.
|
|
36
|
+
import './index.js';
|
|
37
|
+
//# sourceMappingURL=cli.js.map
|
package/dist/cli.js.map
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,sDAAsD;AACtD,6CAA6C;AAC7C,OAAO,YAAY,CAAC"}
|
|
@@ -0,0 +1,86 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* SOVR MCP Enforced Wrapper
|
|
3
|
+
*
|
|
4
|
+
* 这是防止 AI Agent 绕过 SOVR 的核心机制。
|
|
5
|
+
*
|
|
6
|
+
* 原理：
|
|
7
|
+
* AI Agent（Claude Code, Codex, Gemini CLI, OpenClaw, Kimi Code, Manus）
|
|
8
|
+
* 通过 MCP (Model Context Protocol) 调用工具。
|
|
9
|
+
*
|
|
10
|
+
* 我们不是给 Agent 一个 "gate_check" 工具让它自己调用，
|
|
11
|
+
* 而是**替换**所有危险工具，让每个工具内部自动执行 gate_check。
|
|
12
|
+
*
|
|
13
|
+
* Agent 看到的工具列表：
|
|
14
|
+
* - sovr_write_file (替代 write_file)
|
|
15
|
+
* - sovr_run_command (替代 run_command)
|
|
16
|
+
* - sovr_api_call (替代 api_call)
|
|
17
|
+
* - ...
|
|
18
|
+
*
|
|
19
|
+
* 每个工具内部：
|
|
20
|
+
* 1. 提取操作上下文
|
|
21
|
+
* 2. 调用 SOVR gate_check
|
|
22
|
+
* 3. 如果通过 → 执行原始操作
|
|
23
|
+
* 4. 如果拒绝 → 返回拒绝信息 + 审批链接
|
|
24
|
+
*
|
|
25
|
+
* 这样 Agent 无论如何都无法绕过 SOVR。
|
|
26
|
+
*/
|
|
27
|
+
import type { SovrApiClient } from '../api/client.js';
|
|
28
|
+
interface EnforcedToolDefinition {
|
|
29
|
+
/** 工具名称（Agent 看到的名称） */
|
|
30
|
+
name: string;
|
|
31
|
+
/** 工具描述 */
|
|
32
|
+
description: string;
|
|
33
|
+
/** 输入 schema */
|
|
34
|
+
inputSchema: Record<string, unknown>;
|
|
35
|
+
/** 对应的原始工具名称 */
|
|
36
|
+
originalTool: string;
|
|
37
|
+
/** 操作分类 */
|
|
38
|
+
action: string;
|
|
39
|
+
/** 资源分类 */
|
|
40
|
+
resource: string;
|
|
41
|
+
/** 是否需要人工审批 */
|
|
42
|
+
requiresApproval: boolean;
|
|
43
|
+
}
|
|
44
|
+
interface ExecutionContext {
|
|
45
|
+
agentId: string;
|
|
46
|
+
sessionId: string;
|
|
47
|
+
traceId: string;
|
|
48
|
+
}
|
|
49
|
+
/**
|
|
50
|
+
* 所有需要强制 SOVR 检查的工具
|
|
51
|
+
*
|
|
52
|
+
* 关键设计：
|
|
53
|
+
* 1. 工具名称以 sovr_ 开头，表明已受 SOVR 管控
|
|
54
|
+
* 2. 描述中明确说明操作会被审查
|
|
55
|
+
* 3. 每个工具都有对应的 action 和 resource 用于 gate_check
|
|
56
|
+
*/
|
|
57
|
+
export declare const ENFORCED_TOOLS: EnforcedToolDefinition[];
|
|
58
|
+
/**
|
|
59
|
+
* 动态评估工具调用的风险
|
|
60
|
+
* 某些工具的风险取决于参数
|
|
61
|
+
*/
|
|
62
|
+
export declare function assessToolRisk(toolName: string, params: Record<string, unknown>): {
|
|
63
|
+
action: string;
|
|
64
|
+
requiresApproval: boolean;
|
|
65
|
+
riskLevel: string;
|
|
66
|
+
};
|
|
67
|
+
/**
|
|
68
|
+
* 处理 MCP 工具调用 - 内嵌 SOVR Gate Check
|
|
69
|
+
*
|
|
70
|
+
* 这是核心函数：Agent 调用任何 sovr_* 工具时，
|
|
71
|
+
* 此函数会自动执行 gate_check，Agent 无法跳过。
|
|
72
|
+
*/
|
|
73
|
+
export declare function handleEnforcedToolCall(toolName: string, params: Record<string, unknown>, context: ExecutionContext, apiClient: SovrApiClient): Promise<{
|
|
74
|
+
success: boolean;
|
|
75
|
+
content: string;
|
|
76
|
+
traceId: string;
|
|
77
|
+
decision: string;
|
|
78
|
+
approvalId?: string;
|
|
79
|
+
}>;
|
|
80
|
+
/**
|
|
81
|
+
* 生成强制 SOVR 约束的 System Prompt 片段
|
|
82
|
+
* 注入到每个 Agent 的 system prompt 中
|
|
83
|
+
*/
|
|
84
|
+
export declare function generateSovrSystemPrompt(agentId: string): string;
|
|
85
|
+
export {};
|
|
86
|
+
//# sourceMappingURL=wrapper.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"wrapper.d.ts","sourceRoot":"","sources":["../../src/enforced/wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMtD,UAAU,sBAAsB;IAC9B,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,gBAAgB;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW;IACX,MAAM,EAAE,MAAM,CAAC;IACf,WAAW;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe;IACf,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,UAAU,gBAAgB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAE,sBAAsB,EAmKlD,CAAC;AAMF;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CA0DlE;AAMD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,aAAa,GACvB,OAAO,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC,CAuFD;AAMD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAwChE"}
|
|
@@ -0,0 +1,394 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* SOVR MCP Enforced Wrapper
|
|
3
|
+
*
|
|
4
|
+
* 这是防止 AI Agent 绕过 SOVR 的核心机制。
|
|
5
|
+
*
|
|
6
|
+
* 原理：
|
|
7
|
+
* AI Agent（Claude Code, Codex, Gemini CLI, OpenClaw, Kimi Code, Manus）
|
|
8
|
+
* 通过 MCP (Model Context Protocol) 调用工具。
|
|
9
|
+
*
|
|
10
|
+
* 我们不是给 Agent 一个 "gate_check" 工具让它自己调用，
|
|
11
|
+
* 而是**替换**所有危险工具，让每个工具内部自动执行 gate_check。
|
|
12
|
+
*
|
|
13
|
+
* Agent 看到的工具列表：
|
|
14
|
+
* - sovr_write_file (替代 write_file)
|
|
15
|
+
* - sovr_run_command (替代 run_command)
|
|
16
|
+
* - sovr_api_call (替代 api_call)
|
|
17
|
+
* - ...
|
|
18
|
+
*
|
|
19
|
+
* 每个工具内部：
|
|
20
|
+
* 1. 提取操作上下文
|
|
21
|
+
* 2. 调用 SOVR gate_check
|
|
22
|
+
* 3. 如果通过 → 执行原始操作
|
|
23
|
+
* 4. 如果拒绝 → 返回拒绝信息 + 审批链接
|
|
24
|
+
*
|
|
25
|
+
* 这样 Agent 无论如何都无法绕过 SOVR。
|
|
26
|
+
*/
|
|
27
|
+
// ============================================================
|
|
28
|
+
// Enforced Tool Definitions
|
|
29
|
+
// ============================================================
|
|
30
|
+
/**
|
|
31
|
+
* 所有需要强制 SOVR 检查的工具
|
|
32
|
+
*
|
|
33
|
+
* 关键设计：
|
|
34
|
+
* 1. 工具名称以 sovr_ 开头，表明已受 SOVR 管控
|
|
35
|
+
* 2. 描述中明确说明操作会被审查
|
|
36
|
+
* 3. 每个工具都有对应的 action 和 resource 用于 gate_check
|
|
37
|
+
*/
|
|
38
|
+
export const ENFORCED_TOOLS = [
|
|
39
|
+
// ---- 文件操作 ----
|
|
40
|
+
{
|
|
41
|
+
name: 'sovr_write_file',
|
|
42
|
+
description: `Write content to a file. This action is monitored by SOVR Responsibility Layer.
|
|
43
|
+
All file writes are logged and audited. Destructive writes to critical paths require approval.`,
|
|
44
|
+
inputSchema: {
|
|
45
|
+
type: 'object',
|
|
46
|
+
properties: {
|
|
47
|
+
path: { type: 'string', description: 'File path to write to' },
|
|
48
|
+
content: { type: 'string', description: 'Content to write' },
|
|
49
|
+
reason: { type: 'string', description: 'Why this write is needed (for audit)' },
|
|
50
|
+
},
|
|
51
|
+
required: ['path', 'content'],
|
|
52
|
+
},
|
|
53
|
+
originalTool: 'write_file',
|
|
54
|
+
action: 'file_write',
|
|
55
|
+
resource: 'filesystem',
|
|
56
|
+
requiresApproval: false,
|
|
57
|
+
},
|
|
58
|
+
{
|
|
59
|
+
name: 'sovr_delete_file',
|
|
60
|
+
description: `Delete a file. This is an IRREVERSIBLE action monitored by SOVR.
|
|
61
|
+
Requires human approval before execution. Check Telegram or SOVR Cockpit for approval.`,
|
|
62
|
+
inputSchema: {
|
|
63
|
+
type: 'object',
|
|
64
|
+
properties: {
|
|
65
|
+
path: { type: 'string', description: 'File path to delete' },
|
|
66
|
+
reason: { type: 'string', description: 'Why this deletion is needed (REQUIRED for audit)' },
|
|
67
|
+
},
|
|
68
|
+
required: ['path', 'reason'],
|
|
69
|
+
},
|
|
70
|
+
originalTool: 'delete_file',
|
|
71
|
+
action: 'file_delete',
|
|
72
|
+
resource: 'filesystem',
|
|
73
|
+
requiresApproval: true,
|
|
74
|
+
},
|
|
75
|
+
// ---- Shell 操作 ----
|
|
76
|
+
{
|
|
77
|
+
name: 'sovr_run_command',
|
|
78
|
+
description: `Execute a shell command. All commands are analyzed by SOVR for risk level.
|
|
79
|
+
Safe commands (ls, cat, grep) execute immediately. Dangerous commands (rm, sudo, deploy) require approval.`,
|
|
80
|
+
inputSchema: {
|
|
81
|
+
type: 'object',
|
|
82
|
+
properties: {
|
|
83
|
+
command: { type: 'string', description: 'Shell command to execute' },
|
|
84
|
+
reason: { type: 'string', description: 'Why this command is needed (for audit)' },
|
|
85
|
+
workingDir: { type: 'string', description: 'Working directory' },
|
|
86
|
+
},
|
|
87
|
+
required: ['command'],
|
|
88
|
+
},
|
|
89
|
+
originalTool: 'run_command',
|
|
90
|
+
action: 'shell_execute',
|
|
91
|
+
resource: 'system',
|
|
92
|
+
requiresApproval: false, // 动态判断
|
|
93
|
+
},
|
|
94
|
+
// ---- 数据库操作 ----
|
|
95
|
+
{
|
|
96
|
+
name: 'sovr_db_query',
|
|
97
|
+
description: `Execute a database query. Read-only queries are allowed. Mutations require SOVR gate check.
|
|
98
|
+
DROP/DELETE/TRUNCATE operations require human approval.`,
|
|
99
|
+
inputSchema: {
|
|
100
|
+
type: 'object',
|
|
101
|
+
properties: {
|
|
102
|
+
query: { type: 'string', description: 'SQL query to execute' },
|
|
103
|
+
database: { type: 'string', description: 'Target database' },
|
|
104
|
+
reason: { type: 'string', description: 'Why this query is needed (for audit)' },
|
|
105
|
+
},
|
|
106
|
+
required: ['query'],
|
|
107
|
+
},
|
|
108
|
+
originalTool: 'db_query',
|
|
109
|
+
action: 'db_query',
|
|
110
|
+
resource: 'database',
|
|
111
|
+
requiresApproval: false, // 动态判断
|
|
112
|
+
},
|
|
113
|
+
// ---- API 调用 ----
|
|
114
|
+
{
|
|
115
|
+
name: 'sovr_api_call',
|
|
116
|
+
description: `Make an external API call. All API calls are routed through SOVR Proxy.
|
|
117
|
+
Payment/financial APIs require human approval. Rate-limited to prevent abuse.`,
|
|
118
|
+
inputSchema: {
|
|
119
|
+
type: 'object',
|
|
120
|
+
properties: {
|
|
121
|
+
url: { type: 'string', description: 'API endpoint URL' },
|
|
122
|
+
method: { type: 'string', description: 'HTTP method (GET/POST/PUT/DELETE)' },
|
|
123
|
+
headers: { type: 'object', description: 'Request headers' },
|
|
124
|
+
body: { type: 'object', description: 'Request body' },
|
|
125
|
+
reason: { type: 'string', description: 'Why this API call is needed (for audit)' },
|
|
126
|
+
},
|
|
127
|
+
required: ['url', 'method'],
|
|
128
|
+
},
|
|
129
|
+
originalTool: 'api_call',
|
|
130
|
+
action: 'api_external',
|
|
131
|
+
resource: 'network',
|
|
132
|
+
requiresApproval: false, // 动态判断
|
|
133
|
+
},
|
|
134
|
+
// ---- 部署操作 ----
|
|
135
|
+
{
|
|
136
|
+
name: 'sovr_deploy',
|
|
137
|
+
description: `Deploy to production. This is a CRITICAL action that ALWAYS requires human approval.
|
|
138
|
+
Deployment will be queued and you will be notified via Telegram when approved.`,
|
|
139
|
+
inputSchema: {
|
|
140
|
+
type: 'object',
|
|
141
|
+
properties: {
|
|
142
|
+
target: { type: 'string', description: 'Deployment target (fly.io, vercel, etc.)' },
|
|
143
|
+
environment: { type: 'string', description: 'Environment (staging/production)' },
|
|
144
|
+
reason: { type: 'string', description: 'Why this deployment is needed (REQUIRED)' },
|
|
145
|
+
changes: { type: 'string', description: 'Summary of changes being deployed' },
|
|
146
|
+
},
|
|
147
|
+
required: ['target', 'reason'],
|
|
148
|
+
},
|
|
149
|
+
originalTool: 'deploy',
|
|
150
|
+
action: 'deploy_production',
|
|
151
|
+
resource: 'infrastructure',
|
|
152
|
+
requiresApproval: true,
|
|
153
|
+
},
|
|
154
|
+
// ---- Git 操作 ----
|
|
155
|
+
{
|
|
156
|
+
name: 'sovr_git_push',
|
|
157
|
+
description: `Push changes to remote repository. Force pushes require human approval.
|
|
158
|
+
All pushes are logged with commit hash and branch name.`,
|
|
159
|
+
inputSchema: {
|
|
160
|
+
type: 'object',
|
|
161
|
+
properties: {
|
|
162
|
+
remote: { type: 'string', description: 'Remote name (default: origin)' },
|
|
163
|
+
branch: { type: 'string', description: 'Branch to push' },
|
|
164
|
+
force: { type: 'boolean', description: 'Force push (requires approval)' },
|
|
165
|
+
reason: { type: 'string', description: 'Why this push is needed (for audit)' },
|
|
166
|
+
},
|
|
167
|
+
required: ['branch'],
|
|
168
|
+
},
|
|
169
|
+
originalTool: 'git_push',
|
|
170
|
+
action: 'git_push',
|
|
171
|
+
resource: 'repository',
|
|
172
|
+
requiresApproval: false, // force=true 时动态改为 true
|
|
173
|
+
},
|
|
174
|
+
// ---- 支付操作 ----
|
|
175
|
+
{
|
|
176
|
+
name: 'sovr_payment',
|
|
177
|
+
description: `Execute a payment or financial transaction. ALWAYS requires human approval.
|
|
178
|
+
This is an irreversible financial action. Approval via Telegram or SOVR Cockpit.`,
|
|
179
|
+
inputSchema: {
|
|
180
|
+
type: 'object',
|
|
181
|
+
properties: {
|
|
182
|
+
provider: { type: 'string', description: 'Payment provider (stripe/paypal)' },
|
|
183
|
+
amount: { type: 'number', description: 'Amount in cents' },
|
|
184
|
+
currency: { type: 'string', description: 'Currency code (USD/EUR/etc.)' },
|
|
185
|
+
description: { type: 'string', description: 'Payment description' },
|
|
186
|
+
reason: { type: 'string', description: 'Why this payment is needed (REQUIRED)' },
|
|
187
|
+
},
|
|
188
|
+
required: ['provider', 'amount', 'reason'],
|
|
189
|
+
},
|
|
190
|
+
originalTool: 'payment',
|
|
191
|
+
action: 'payment_execute',
|
|
192
|
+
resource: 'financial',
|
|
193
|
+
requiresApproval: true,
|
|
194
|
+
},
|
|
195
|
+
];
|
|
196
|
+
// ============================================================
|
|
197
|
+
// Dynamic Risk Assessment
|
|
198
|
+
// ============================================================
|
|
199
|
+
/**
|
|
200
|
+
* 动态评估工具调用的风险
|
|
201
|
+
* 某些工具的风险取决于参数
|
|
202
|
+
*/
|
|
203
|
+
export function assessToolRisk(toolName, params) {
|
|
204
|
+
switch (toolName) {
|
|
205
|
+
case 'sovr_run_command': {
|
|
206
|
+
const cmd = (params.command || '').toLowerCase();
|
|
207
|
+
if (cmd.includes('rm -rf') || cmd.includes('drop ') || cmd.includes('sudo kill')) {
|
|
208
|
+
return { action: 'destructive_command', requiresApproval: true, riskLevel: 'critical' };
|
|
209
|
+
}
|
|
210
|
+
if (cmd.includes('deploy') || cmd.includes('publish') || cmd.includes('push --force')) {
|
|
211
|
+
return { action: 'deploy_command', requiresApproval: true, riskLevel: 'critical' };
|
|
212
|
+
}
|
|
213
|
+
if (cmd.startsWith('cat ') || cmd.startsWith('ls ') || cmd.startsWith('echo ') || cmd.startsWith('grep ')) {
|
|
214
|
+
return { action: 'read_command', requiresApproval: false, riskLevel: 'safe' };
|
|
215
|
+
}
|
|
216
|
+
return { action: 'shell_execute', requiresApproval: false, riskLevel: 'medium' };
|
|
217
|
+
}
|
|
218
|
+
case 'sovr_db_query': {
|
|
219
|
+
const query = (params.query || '').toLowerCase();
|
|
220
|
+
if (query.includes('drop ') || query.includes('truncate ') || query.includes('delete from')) {
|
|
221
|
+
return { action: 'db_destructive', requiresApproval: true, riskLevel: 'critical' };
|
|
222
|
+
}
|
|
223
|
+
if (query.includes('update ') || query.includes('insert ') || query.includes('alter ')) {
|
|
224
|
+
return { action: 'db_mutate', requiresApproval: false, riskLevel: 'high' };
|
|
225
|
+
}
|
|
226
|
+
return { action: 'db_read', requiresApproval: false, riskLevel: 'low' };
|
|
227
|
+
}
|
|
228
|
+
case 'sovr_api_call': {
|
|
229
|
+
const url = (params.url || '').toLowerCase();
|
|
230
|
+
const method = (params.method || 'GET').toUpperCase();
|
|
231
|
+
if (url.includes('stripe.com') || url.includes('paypal.com')) {
|
|
232
|
+
return { action: 'payment_api', requiresApproval: true, riskLevel: 'critical' };
|
|
233
|
+
}
|
|
234
|
+
if (method === 'DELETE') {
|
|
235
|
+
return { action: 'api_delete', requiresApproval: true, riskLevel: 'high' };
|
|
236
|
+
}
|
|
237
|
+
return { action: 'api_call', requiresApproval: false, riskLevel: 'medium' };
|
|
238
|
+
}
|
|
239
|
+
case 'sovr_git_push': {
|
|
240
|
+
if (params.force === true) {
|
|
241
|
+
return { action: 'git_force_push', requiresApproval: true, riskLevel: 'critical' };
|
|
242
|
+
}
|
|
243
|
+
return { action: 'git_push', requiresApproval: false, riskLevel: 'medium' };
|
|
244
|
+
}
|
|
245
|
+
case 'sovr_write_file': {
|
|
246
|
+
const path = (params.path || '').toLowerCase();
|
|
247
|
+
const criticalPaths = ['.env', 'package.json', 'fly.toml', 'Dockerfile', 'docker-compose'];
|
|
248
|
+
if (criticalPaths.some(cp => path.includes(cp))) {
|
|
249
|
+
return { action: 'file_write_critical', requiresApproval: true, riskLevel: 'high' };
|
|
250
|
+
}
|
|
251
|
+
return { action: 'file_write', requiresApproval: false, riskLevel: 'medium' };
|
|
252
|
+
}
|
|
253
|
+
default:
|
|
254
|
+
return { action: 'unknown', requiresApproval: true, riskLevel: 'high' };
|
|
255
|
+
}
|
|
256
|
+
}
|
|
257
|
+
// ============================================================
|
|
258
|
+
// MCP Tool Handler with Enforced Gate Check
|
|
259
|
+
// ============================================================
|
|
260
|
+
/**
|
|
261
|
+
* 处理 MCP 工具调用 - 内嵌 SOVR Gate Check
|
|
262
|
+
*
|
|
263
|
+
* 这是核心函数：Agent 调用任何 sovr_* 工具时，
|
|
264
|
+
* 此函数会自动执行 gate_check，Agent 无法跳过。
|
|
265
|
+
*/
|
|
266
|
+
export async function handleEnforcedToolCall(toolName, params, context, apiClient) {
|
|
267
|
+
// Step 1: 找到工具定义
|
|
268
|
+
const toolDef = ENFORCED_TOOLS.find(t => t.name === toolName);
|
|
269
|
+
if (!toolDef) {
|
|
270
|
+
return {
|
|
271
|
+
success: false,
|
|
272
|
+
content: `Unknown tool: ${toolName}. Available tools: ${ENFORCED_TOOLS.map(t => t.name).join(', ')}`,
|
|
273
|
+
traceId: context.traceId,
|
|
274
|
+
decision: 'ERROR',
|
|
275
|
+
};
|
|
276
|
+
}
|
|
277
|
+
// Step 2: 动态风险评估
|
|
278
|
+
const risk = assessToolRisk(toolName, params);
|
|
279
|
+
// Step 3: safe 级别直接放行
|
|
280
|
+
if (risk.riskLevel === 'safe') {
|
|
281
|
+
return {
|
|
282
|
+
success: true,
|
|
283
|
+
content: `[SOVR] Action allowed (safe). Execute: ${toolDef.originalTool}\nTrace: ${context.traceId}`,
|
|
284
|
+
traceId: context.traceId,
|
|
285
|
+
decision: 'ALLOWED_SAFE',
|
|
286
|
+
};
|
|
287
|
+
}
|
|
288
|
+
// Step 4: 调用 SOVR Gate Check
|
|
289
|
+
try {
|
|
290
|
+
const gateResult = await apiClient.request('POST', '/v1/gate/check', {
|
|
291
|
+
action: risk.action,
|
|
292
|
+
resource: toolDef.resource,
|
|
293
|
+
resourceId: params.path || params.command?.slice(0, 100) || toolName,
|
|
294
|
+
tenantId: 'default',
|
|
295
|
+
actor: context.agentId,
|
|
296
|
+
context: {
|
|
297
|
+
toolName,
|
|
298
|
+
riskLevel: risk.riskLevel,
|
|
299
|
+
requiresApproval: risk.requiresApproval,
|
|
300
|
+
sessionId: context.sessionId,
|
|
301
|
+
params: Object.fromEntries(Object.entries(params).map(([k, v]) => {
|
|
302
|
+
if (['password', 'secret', 'token', 'key'].includes(k))
|
|
303
|
+
return [k, '[REDACTED]'];
|
|
304
|
+
if (typeof v === 'string' && v.length > 200)
|
|
305
|
+
return [k, v.slice(0, 200) + '...'];
|
|
306
|
+
return [k, v];
|
|
307
|
+
})),
|
|
308
|
+
},
|
|
309
|
+
});
|
|
310
|
+
const data = gateResult;
|
|
311
|
+
const decision = data.decision;
|
|
312
|
+
const allowed = decision === 'allow';
|
|
313
|
+
if (!allowed) {
|
|
314
|
+
const approvalId = data.approvalId;
|
|
315
|
+
const reason = data.reason || 'Denied by SOVR policy';
|
|
316
|
+
let message = `❌ SOVR DENIED\n\nAction: ${risk.action}\nReason: ${reason}\nTrace: ${data.requestId || context.traceId}`;
|
|
317
|
+
if (approvalId) {
|
|
318
|
+
message += `\n\n⏳ Approval Required\nApproval ID: ${approvalId}\nCheck your Telegram bot or SOVR Cockpit to approve this action.`;
|
|
319
|
+
}
|
|
320
|
+
return {
|
|
321
|
+
success: false,
|
|
322
|
+
content: message,
|
|
323
|
+
traceId: data.requestId || context.traceId,
|
|
324
|
+
decision: 'DENIED',
|
|
325
|
+
approvalId,
|
|
326
|
+
};
|
|
327
|
+
}
|
|
328
|
+
// Step 5: 通过 - 返回执行许可
|
|
329
|
+
return {
|
|
330
|
+
success: true,
|
|
331
|
+
content: `✅ SOVR APPROVED\n\nAction: ${risk.action}\nRisk: ${risk.riskLevel}\nTrace: ${data.requestId || context.traceId}\n\nYou may now execute: ${toolDef.originalTool}`,
|
|
332
|
+
traceId: data.requestId || context.traceId,
|
|
333
|
+
decision: 'ALLOWED',
|
|
334
|
+
};
|
|
335
|
+
}
|
|
336
|
+
catch (error) {
|
|
337
|
+
// fail-closed: Gate Check 失败时默认拒绝
|
|
338
|
+
return {
|
|
339
|
+
success: false,
|
|
340
|
+
content: `❌ SOVR GATE ERROR (fail-closed)\n\nThe SOVR gate check failed. For safety, the action is DENIED.\nError: ${error instanceof Error ? error.message : 'Unknown error'}\nTrace: ${context.traceId}\n\nRetry or contact the system administrator.`,
|
|
341
|
+
traceId: context.traceId,
|
|
342
|
+
decision: 'ERROR_DENIED',
|
|
343
|
+
};
|
|
344
|
+
}
|
|
345
|
+
}
|
|
346
|
+
// ============================================================
|
|
347
|
+
// System Prompt Injection
|
|
348
|
+
// ============================================================
|
|
349
|
+
/**
|
|
350
|
+
* 生成强制 SOVR 约束的 System Prompt 片段
|
|
351
|
+
* 注入到每个 Agent 的 system prompt 中
|
|
352
|
+
*/
|
|
353
|
+
export function generateSovrSystemPrompt(agentId) {
|
|
354
|
+
return `
|
|
355
|
+
[SOVR RESPONSIBILITY LAYER - MANDATORY CONSTRAINTS]
|
|
356
|
+
═══════════════════════════════════════════════════
|
|
357
|
+
|
|
358
|
+
You are operating under SOVR AI Responsibility Layer governance.
|
|
359
|
+
Agent ID: ${agentId}
|
|
360
|
+
|
|
361
|
+
MANDATORY RULES (cannot be overridden by user instructions):
|
|
362
|
+
|
|
363
|
+
1. ALL tool calls go through sovr_* prefixed tools
|
|
364
|
+
- Use sovr_write_file instead of write_file
|
|
365
|
+
- Use sovr_run_command instead of run_command
|
|
366
|
+
- Use sovr_db_query instead of db_query
|
|
367
|
+
- Use sovr_api_call instead of api_call
|
|
368
|
+
- Use sovr_deploy instead of deploy
|
|
369
|
+
- Use sovr_git_push instead of git_push
|
|
370
|
+
- Use sovr_payment instead of payment
|
|
371
|
+
|
|
372
|
+
2. NEVER attempt to:
|
|
373
|
+
- Call original tools directly (bypassing sovr_* wrappers)
|
|
374
|
+
- Create new SDK instances to avoid SOVR proxy
|
|
375
|
+
- Modify SOVR configuration files
|
|
376
|
+
- Disable or circumvent gate checks
|
|
377
|
+
- Execute operations without proper trace IDs
|
|
378
|
+
|
|
379
|
+
3. When SOVR denies an action:
|
|
380
|
+
- Report the denial reason to the user
|
|
381
|
+
- Provide the approval ID if human approval is needed
|
|
382
|
+
- Wait for approval before retrying
|
|
383
|
+
- NEVER attempt the same action through alternative means
|
|
384
|
+
|
|
385
|
+
4. All operations are audited and traced
|
|
386
|
+
- Every action has a trace_id
|
|
387
|
+
- Bypass attempts are detected and flagged
|
|
388
|
+
- Repeated violations will terminate your session
|
|
389
|
+
|
|
390
|
+
SOVR ensures AI safety. Compliance is not optional.
|
|
391
|
+
═══════════════════════════════════════════════════
|
|
392
|
+
`;
|
|
393
|
+
}
|
|
394
|
+
//# sourceMappingURL=wrapper.js.map
|