trace-to-skill 0.1.36 → 0.1.37
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -3
- package/dist/src/benchmark.js +6 -0
- package/dist/src/benchmark.js.map +1 -1
- package/dist/src/rules.js +21 -0
- package/dist/src/rules.js.map +1 -1
- package/dist/src/types.d.ts +1 -1
- package/docs/BENCHMARK.md +1 -0
- package/docs/DISCOVERY.md +2 -1
- package/docs/FAILURE_TAXONOMY.md +6 -0
- package/docs/SCORECARD.md +2 -1
- package/docs/USE_CASES.md +14 -4
- package/fixtures/sandbox-permission.md +31 -0
- package/llms.txt +4 -1
- package/package.json +4 -1
- package/schemas/analysis-result.schema.json +2 -0
package/README.md
CHANGED
|
@@ -44,6 +44,7 @@ Use it when you need to:
|
|
|
44
44
|
- **Protect agent context:** run `trace-to-skill guard-github-event "$GITHUB_EVENT_PATH"` before feeding issue, PR, comment, discussion, check-run, or commit text into an agent.
|
|
45
45
|
- **Share failed traces safely:** run `trace-to-skill redact ./runs --output redacted-runs` before publishing anonymized failure fixtures.
|
|
46
46
|
- **Triage stuck Codex sessions:** run `trace-to-skill analyze ./runs` to catch context compaction failures such as compact stream disconnects, `context_length_exceeded`, and schema mismatches.
|
|
47
|
+
- **Diagnose sandbox blockers:** run `trace-to-skill analyze ./runs` on Codex traces that fail with sandbox setup refresh, `os error 740`, ACL, ownership, or approval-mode permission errors.
|
|
47
48
|
|
|
48
49
|
For copy-paste workflows, see [docs/USE_CASES.md](https://github.com/grnbtqdbyx-create/trace-to-skill/blob/main/docs/USE_CASES.md). For crawler-friendly metadata, see [docs/DISCOVERY.md](https://github.com/grnbtqdbyx-create/trace-to-skill/blob/main/docs/DISCOVERY.md) and [llms.txt](https://github.com/grnbtqdbyx-create/trace-to-skill/blob/main/llms.txt).
|
|
49
50
|
|
|
@@ -61,6 +62,7 @@ Open-source maintainers do not need more AI-generated noise. They need agents th
|
|
|
61
62
|
- Did the proposed rule actually improve the next run?
|
|
62
63
|
- Can this be reported in a PR without leaking secrets?
|
|
63
64
|
- Did a long Codex session fail during context compaction?
|
|
65
|
+
- Did Codex sandbox setup or workspace permissions block every tool call?
|
|
64
66
|
|
|
65
67
|
## Example Output
|
|
66
68
|
|
|
@@ -124,6 +126,7 @@ Trace analysis detects run-level failures:
|
|
|
124
126
|
| Hidden Unicode | Invisible instruction or code-review manipulation |
|
|
125
127
|
| Prompt injection | Untrusted issue, PR, log, or web text asks the agent to ignore policy or leak secrets |
|
|
126
128
|
| Context compaction | Codex compact task fails, disconnects, loops, or hits `context_length_exceeded` |
|
|
129
|
+
| Sandbox permission | Codex sandbox setup, approval mode, ACL, or workspace ownership blocks tool execution |
|
|
127
130
|
| MCP risk | Tool permissions and trust boundaries are unclear |
|
|
128
131
|
|
|
129
132
|
## Installation
|
|
@@ -312,7 +315,7 @@ jobs:
|
|
|
312
315
|
issues: write
|
|
313
316
|
steps:
|
|
314
317
|
- uses: actions/checkout@v5
|
|
315
|
-
- uses: grnbtqdbyx-create/trace-to-skill@v0.1.
|
|
318
|
+
- uses: grnbtqdbyx-create/trace-to-skill@v0.1.37
|
|
316
319
|
with:
|
|
317
320
|
mode: all
|
|
318
321
|
doctor-threshold: "85"
|
|
@@ -361,7 +364,7 @@ Composite action usage:
|
|
|
361
364
|
|
|
362
365
|
```yaml
|
|
363
366
|
- id: trace-to-skill
|
|
364
|
-
uses: grnbtqdbyx-create/trace-to-skill@v0.1.
|
|
367
|
+
uses: grnbtqdbyx-create/trace-to-skill@v0.1.37
|
|
365
368
|
with:
|
|
366
369
|
mode: all
|
|
367
370
|
doctor-threshold: "85"
|
|
@@ -403,7 +406,7 @@ Action outputs:
|
|
|
403
406
|
|
|
404
407
|
By default, generated reports are also appended to the GitHub Actions Job Summary. Set `job-summary: "false"` to disable that UI output.
|
|
405
408
|
|
|
406
|
-
Tagged Action releases build and run the CLI from `$GITHUB_ACTION_PATH`, so a workflow pinned to a release tag such as `@v0.1.
|
|
409
|
+
Tagged Action releases build and run the CLI from `$GITHUB_ACTION_PATH`, so a workflow pinned to a release tag such as `@v0.1.37` executes that release's checked-out source instead of pulling the default branch at runtime.
|
|
407
410
|
|
|
408
411
|
## Codex Skill
|
|
409
412
|
|
package/dist/src/benchmark.js
CHANGED
|
@@ -29,6 +29,12 @@ const BENCHMARK_CASES = [
|
|
|
29
29
|
fixture: "fixtures/context-compaction.md",
|
|
30
30
|
expectedKinds: ["context_compaction", "weak_evidence"]
|
|
31
31
|
},
|
|
32
|
+
{
|
|
33
|
+
id: "sandbox-permission",
|
|
34
|
+
title: "Codex sandbox permission failure",
|
|
35
|
+
fixture: "fixtures/sandbox-permission.md",
|
|
36
|
+
expectedKinds: ["sandbox_permission", "weak_evidence"]
|
|
37
|
+
},
|
|
32
38
|
{
|
|
33
39
|
id: "mcp-risk",
|
|
34
40
|
title: "MCP config with secret exposure",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"benchmark.js","sourceRoot":"","sources":["../../src/benchmark.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AA8B9C,MAAM,eAAe,GAA8B;IACjD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,2BAA2B;QAClC,OAAO,EAAE,sBAAsB;QAC/B,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,yCAAyC;QAChD,OAAO,EAAE,wBAAwB;QACjC,aAAa,EAAE,CAAC,cAAc,EAAE,sBAAsB,EAAE,eAAe,EAAE,UAAU,EAAE,mBAAmB,CAAC;QACzG,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,4BAA4B;QACnC,OAAO,EAAE,8BAA8B;QACvC,aAAa,EAAE,CAAC,cAAc,EAAE,sBAAsB,EAAE,eAAe,CAAC;QACxE,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,kCAAkC;QACzC,OAAO,EAAE,gCAAgC;QACzC,aAAa,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;KACvD;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,iCAAiC;QACxC,OAAO,EAAE,wBAAwB;QACjC,aAAa,EAAE,CAAC,iBAAiB,EAAE,UAAU,CAAC;QAC9C,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EAAE,8BAA8B;QACvC,aAAa,EAAE,CAAC,kBAAkB,CAAC;QACnC,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,qCAAqC;QAC5C,OAAO,EAAE,4BAA4B;QACrC,aAAa,EAAE,CAAC,qBAAqB,CAAC;KACvC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAE3B,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjG,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAErG,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAChC,gBAAgB;YAChB,aAAa;YACb,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;SACxF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1C,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,MAAM,KAAK,GAAG;QACZ,4BAA4B;QAC5B,EAAE;QACF,aAAa,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI;QAChD,EAAE;QACF,8OAA8O;QAC9O,EAAE;QACF,4EAA4E;QAC5E,gDAAgD;KACjD,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,IAAI,CAAC,KAAK,EAAE;YACjB,KAAK,IAAI,CAAC,OAAO,IAAI;YACrB,GAAG,IAAI,CAAC,KAAK,EAAE;YACf,GAAG,IAAI,CAAC,QAAQ,EAAE;YAClB,GAAG,IAAI,CAAC,gBAAgB,EAAE;YAC1B,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YACnG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;SAClC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,EAAE,EACF,iBAAiB,EACjB,EAAE,EACF,SAAS,EACT,0BAA0B,EAC1B,wCAAwC,EACxC,KAAK,EACL,EAAE,CACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CACjB,UAAmC,EACnC,aAA4B,EAC5B,QAAgB,EAChB,gBAAwB;IAExB,IAAI,UAAU,CAAC,YAAY,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,UAAU,CAAC,eAAe,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC"}
|
|
1
|
+
{"version":3,"file":"benchmark.js","sourceRoot":"","sources":["../../src/benchmark.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AA8B9C,MAAM,eAAe,GAA8B;IACjD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,2BAA2B;QAClC,OAAO,EAAE,sBAAsB;QAC/B,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,yCAAyC;QAChD,OAAO,EAAE,wBAAwB;QACjC,aAAa,EAAE,CAAC,cAAc,EAAE,sBAAsB,EAAE,eAAe,EAAE,UAAU,EAAE,mBAAmB,CAAC;QACzG,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,4BAA4B;QACnC,OAAO,EAAE,8BAA8B;QACvC,aAAa,EAAE,CAAC,cAAc,EAAE,sBAAsB,EAAE,eAAe,CAAC;QACxE,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,kCAAkC;QACzC,OAAO,EAAE,gCAAgC;QACzC,aAAa,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;KACvD;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,kCAAkC;QACzC,OAAO,EAAE,gCAAgC;QACzC,aAAa,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;KACvD;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,iCAAiC;QACxC,OAAO,EAAE,wBAAwB;QACjC,aAAa,EAAE,CAAC,iBAAiB,EAAE,UAAU,CAAC;QAC9C,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EAAE,8BAA8B;QACvC,aAAa,EAAE,CAAC,kBAAkB,CAAC;QACnC,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,qCAAqC;QAC5C,OAAO,EAAE,4BAA4B;QACrC,aAAa,EAAE,CAAC,qBAAqB,CAAC;KACvC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAE3B,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjG,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAErG,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAChC,gBAAgB;YAChB,aAAa;YACb,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;SACxF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1C,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,MAAM,KAAK,GAAG;QACZ,4BAA4B;QAC5B,EAAE;QACF,aAAa,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI;QAChD,EAAE;QACF,8OAA8O;QAC9O,EAAE;QACF,4EAA4E;QAC5E,gDAAgD;KACjD,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,IAAI,CAAC,KAAK,EAAE;YACjB,KAAK,IAAI,CAAC,OAAO,IAAI;YACrB,GAAG,IAAI,CAAC,KAAK,EAAE;YACf,GAAG,IAAI,CAAC,QAAQ,EAAE;YAClB,GAAG,IAAI,CAAC,gBAAgB,EAAE;YAC1B,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YACnG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;SAClC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,EAAE,EACF,iBAAiB,EACjB,EAAE,EACF,SAAS,EACT,0BAA0B,EAC1B,wCAAwC,EACxC,KAAK,EACL,EAAE,CACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CACjB,UAAmC,EACnC,aAA4B,EAC5B,QAAgB,EAChB,gBAAwB;IAExB,IAAI,UAAU,CAAC,YAAY,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,UAAU,CAAC,eAAe,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC"}
|
package/dist/src/rules.js
CHANGED
|
@@ -117,6 +117,27 @@ const RULES = [
|
|
|
117
117
|
],
|
|
118
118
|
suggestedRule: "When Codex compaction fails, capture the compact error, model/app version, thread state, and whether the session is recoverable before continuing or reporting success."
|
|
119
119
|
},
|
|
120
|
+
{
|
|
121
|
+
kind: "sandbox_permission",
|
|
122
|
+
severity: "high",
|
|
123
|
+
title: "Codex sandbox or permission failure",
|
|
124
|
+
why: "Sandbox setup, approval-mode, and workspace permission failures can block every tool call or leave the worktree in a broken ownership state.",
|
|
125
|
+
patterns: [
|
|
126
|
+
/\bwindows sandbox\b.{0,140}\b(setup refresh|spawn setup refresh|failed|error)\b/i,
|
|
127
|
+
/\bsandbox setup refresh failed\b/i,
|
|
128
|
+
/\bsetup refresh failed with status exit code:\s*1\b/i,
|
|
129
|
+
/\bos error 740\b/i,
|
|
130
|
+
/\bCreateProcess(?:AsUserW|WithLogonW)? failed\b/i,
|
|
131
|
+
/\bCreateRestrictedToken failed\b/i,
|
|
132
|
+
/\bCodexSandbox(?:Offline|Online)\b/i,
|
|
133
|
+
/\b(SetNamedSecurityInfoW failed|ACL|access denied)\b/i,
|
|
134
|
+
/\bworkspace-write\b.{0,140}\b(permission|ownership|ACL|write failures|read-only|on-request|downgraded)\b/i,
|
|
135
|
+
/\bapproval_policy\b.{0,80}\b(never|on-request)\b.{0,140}\b(still asks|requires approvals|approval|denied)\b/i,
|
|
136
|
+
/\bFull Access\b.{0,140}\b(downgraded|on-request|workspace-write|read-only)\b/i,
|
|
137
|
+
/\bsandbox_mode\b.{0,80}\b(danger-full-access|workspace-write)\b.{0,140}\b(approval|denied|read-only|permission)\b/i
|
|
138
|
+
],
|
|
139
|
+
suggestedRule: "When Codex sandbox or permission setup fails, capture the OS, Codex version, sandbox_mode, approval_policy, exact stderr, workspace ownership/ACL evidence, and whether a clean directory can run a simple command plus apply_patch."
|
|
140
|
+
},
|
|
120
141
|
{
|
|
121
142
|
kind: "mcp_risk",
|
|
122
143
|
severity: "high",
|
package/dist/src/rules.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/rules.ts"],"names":[],"mappings":"AAYA,MAAM,KAAK,GAAqB;IAC9B;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,mDAAmD;QAC1D,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,6CAA6C;YAC7C,iFAAiF;SAClF;QACD,aAAa,EACX,sIAAsI;QACxI,cAAc,EAAE,gCAAgC;KACjD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,sIAAsI;QAC3I,QAAQ,EAAE;YACR,mGAAmG;SACpG;QACD,aAAa,EACX,gHAAgH;KACnH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,2FAA2F;QAChG,QAAQ,EAAE;YACR,0FAA0F;YAC1F,yDAAyD;SAC1D;QACD,aAAa,EACX,8IAA8I;KACjJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,8HAA8H;QACnI,QAAQ,EAAE;YACR,yGAAyG;SAC1G;QACD,aAAa,EACX,2IAA2I;KAC9I;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,6CAA6C;QACpD,GAAG,EAAE,sHAAsH;QAC3H,QAAQ,EAAE;YACR,qGAAqG;YACrG,uCAAuC;SACxC;QACD,aAAa,EACX,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,gCAAgC;YAChC,uCAAuC;YACvC,yCAAyC;YACzC,kBAAkB;SACnB;QACD,aAAa,EACX,gIAAgI;KACnI;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0BAA0B;QACjC,GAAG,EAAE,oGAAoG;QACzG,QAAQ,EAAE;YACR,wEAAwE;YACxE,6EAA6E;SAC9E;QACD,aAAa,EACX,mHAAmH;KACtH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gHAAgH;QACrH,QAAQ,EAAE;YACR,sDAAsD;SACvD;QACD,aAAa,EACX,uIAAuI;KAC1I;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wCAAwC;QAC/C,GAAG,EAAE,sKAAsK;QAC3K,QAAQ,EAAE;YACR,oJAAoJ;YACpJ,iHAAiH;YACjH,iHAAiH;YACjH,kGAAkG;SACnG;QACD,aAAa,EACX,iLAAiL;QACnL,cAAc,EAAE,wBAAwB;KACzC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gLAAgL;QACrL,QAAQ,EAAE;YACR,wCAAwC;YACxC,oCAAoC;YACpC,uEAAuE;YACvE,wEAAwE;YACxE,wFAAwF;YACxF,oGAAoG;YACpG,yBAAyB;SAC1B;QACD,aAAa,EACX,yKAAyK;KAC5K;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,oCAAoC;QAC3C,GAAG,EAAE,0GAA0G;QAC/G,QAAQ,EAAE;YACR,+GAA+G;YAC/G,gBAAgB;SACjB;QACD,aAAa,EACX,uIAAuI;KAC1I;CACF,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,eAAe,GAAG,EAAE;IACxE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,8CAA8C;YACrD,GAAG,EAAE,2HAA2H;YAChI,QAAQ,EAAE,YAAY;YACtB,aAAa,EACX,0IAA0I;SAC7I,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,2CAA2C;YAClD,GAAG,EAAE,0JAA0J;YAC/J,QAAQ,EAAE,iBAAiB;YAC3B,aAAa,EACX,+IAA+I;SAClJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,EAAE,CAAC;QAC1G,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,4CAA4C;YACnD,GAAG,EAAE,uIAAuI;YAC5I,QAAQ,EAAE,mBAAmB;YAC7B,aAAa,EACX,mLAAmL;SACtL,CAAC,CAAC;IACL,CAAC;IAED,IACE,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC3B,CAAC,6BAA6B,CAAC,MAAM,CAAC;QACtC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,EAC7D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,0BAA0B;YACjC,GAAG,EAAE,6GAA6G;YAClH,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;YAC5B,aAAa,EACX,oHAAoH;SACvH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,+BAA+B,CAAC,MAAoB;IAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,MAAM,eAAe,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAAC;IACxI,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEhG,IAAI,mBAAmB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,mCAAmC,IAAI,CAAC,OAAO,EAAE;SAC3D,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,YAAY,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAC7I,MAAM,SAAS,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAE1I,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,wBAAwB,IAAI,CAAC,OAAO,EAAE;SAChD,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,qBAAqB,IAAI,CAAC,OAAO,EAAE;SAC7C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0GAA0G,CAAC,CAAC;IACjL,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,sGAAsG,CAAC,CAAC;IAE7K,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AASD,SAAS,yBAAyB,CAAC,MAAoB,EAAE,OAAe;IACtE,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK;oBACL,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,KAAK;oBACL,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,iEAAiE,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrF,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAoB;IAC9C,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjD,MAAM,wBAAwB,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7H,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB;IAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpG,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvG,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;oBACnC,OAAO,EAAE,WAAW,IAAI,mBAAmB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,cAAc,OAAO,GAAG;iBACrJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,CAAC,YAAY,EAAE,oEAAoE,CAAC;QACpF,CAAC,OAAO,EAAE,+CAA+C,CAAC;QAC1D,CAAC,SAAS,EAAE,8CAA8C,CAAC;QAC3D,CAAC,SAAS,EAAE,kDAAkD,CAAC;QAC/D,CAAC,UAAU,EAAE,4CAA4C,CAAC;QAC1D,CAAC,WAAW,EAAE,2BAA2B,CAAC;KAC3C,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB,EAAE,IAAoB;IAC3D,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB,EAAE,eAAuB;IACtE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,GAAG,YAAY,CAAC,IAAI,mBAAmB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClG;KACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAoB;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,wKAAwK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7L,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KAC7H,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,SAAS,CAAC,IAAoB,EAAE,QAAoB;IAC3D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ;QACR,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACtC,OAAO;QACL,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC;KACZ,CAAC,QAAQ,CAAC,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,MAAc;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK;SACT,OAAO,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;SACtD,OAAO,CAAC,kCAAkC,EAAE,yBAAyB,CAAC;SACtE,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;SAC5D,OAAO,CAAC,gFAAgF,EAAE,gBAAgB,CAAC,CAAC;AACjH,CAAC"}
|
|
1
|
+
{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/rules.ts"],"names":[],"mappings":"AAYA,MAAM,KAAK,GAAqB;IAC9B;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,mDAAmD;QAC1D,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,6CAA6C;YAC7C,iFAAiF;SAClF;QACD,aAAa,EACX,sIAAsI;QACxI,cAAc,EAAE,gCAAgC;KACjD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,sIAAsI;QAC3I,QAAQ,EAAE;YACR,mGAAmG;SACpG;QACD,aAAa,EACX,gHAAgH;KACnH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,2FAA2F;QAChG,QAAQ,EAAE;YACR,0FAA0F;YAC1F,yDAAyD;SAC1D;QACD,aAAa,EACX,8IAA8I;KACjJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,8HAA8H;QACnI,QAAQ,EAAE;YACR,yGAAyG;SAC1G;QACD,aAAa,EACX,2IAA2I;KAC9I;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,6CAA6C;QACpD,GAAG,EAAE,sHAAsH;QAC3H,QAAQ,EAAE;YACR,qGAAqG;YACrG,uCAAuC;SACxC;QACD,aAAa,EACX,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,gCAAgC;YAChC,uCAAuC;YACvC,yCAAyC;YACzC,kBAAkB;SACnB;QACD,aAAa,EACX,gIAAgI;KACnI;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0BAA0B;QACjC,GAAG,EAAE,oGAAoG;QACzG,QAAQ,EAAE;YACR,wEAAwE;YACxE,6EAA6E;SAC9E;QACD,aAAa,EACX,mHAAmH;KACtH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gHAAgH;QACrH,QAAQ,EAAE;YACR,sDAAsD;SACvD;QACD,aAAa,EACX,uIAAuI;KAC1I;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wCAAwC;QAC/C,GAAG,EAAE,sKAAsK;QAC3K,QAAQ,EAAE;YACR,oJAAoJ;YACpJ,iHAAiH;YACjH,iHAAiH;YACjH,kGAAkG;SACnG;QACD,aAAa,EACX,iLAAiL;QACnL,cAAc,EAAE,wBAAwB;KACzC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gLAAgL;QACrL,QAAQ,EAAE;YACR,wCAAwC;YACxC,oCAAoC;YACpC,uEAAuE;YACvE,wEAAwE;YACxE,wFAAwF;YACxF,oGAAoG;YACpG,yBAAyB;SAC1B;QACD,aAAa,EACX,yKAAyK;KAC5K;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,qCAAqC;QAC5C,GAAG,EAAE,8IAA8I;QACnJ,QAAQ,EAAE;YACR,kFAAkF;YAClF,mCAAmC;YACnC,sDAAsD;YACtD,mBAAmB;YACnB,kDAAkD;YAClD,mCAAmC;YACnC,qCAAqC;YACrC,uDAAuD;YACvD,2GAA2G;YAC3G,8GAA8G;YAC9G,+EAA+E;YAC/E,oHAAoH;SACrH;QACD,aAAa,EACX,sOAAsO;KACzO;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,oCAAoC;QAC3C,GAAG,EAAE,0GAA0G;QAC/G,QAAQ,EAAE;YACR,+GAA+G;YAC/G,gBAAgB;SACjB;QACD,aAAa,EACX,uIAAuI;KAC1I;CACF,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,eAAe,GAAG,EAAE;IACxE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,8CAA8C;YACrD,GAAG,EAAE,2HAA2H;YAChI,QAAQ,EAAE,YAAY;YACtB,aAAa,EACX,0IAA0I;SAC7I,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,2CAA2C;YAClD,GAAG,EAAE,0JAA0J;YAC/J,QAAQ,EAAE,iBAAiB;YAC3B,aAAa,EACX,+IAA+I;SAClJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,EAAE,CAAC;QAC1G,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,4CAA4C;YACnD,GAAG,EAAE,uIAAuI;YAC5I,QAAQ,EAAE,mBAAmB;YAC7B,aAAa,EACX,mLAAmL;SACtL,CAAC,CAAC;IACL,CAAC;IAED,IACE,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC3B,CAAC,6BAA6B,CAAC,MAAM,CAAC;QACtC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,EAC7D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,0BAA0B;YACjC,GAAG,EAAE,6GAA6G;YAClH,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;YAC5B,aAAa,EACX,oHAAoH;SACvH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,+BAA+B,CAAC,MAAoB;IAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,MAAM,eAAe,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAAC;IACxI,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEhG,IAAI,mBAAmB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,mCAAmC,IAAI,CAAC,OAAO,EAAE;SAC3D,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,YAAY,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAC7I,MAAM,SAAS,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAE1I,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,wBAAwB,IAAI,CAAC,OAAO,EAAE;SAChD,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,qBAAqB,IAAI,CAAC,OAAO,EAAE;SAC7C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0GAA0G,CAAC,CAAC;IACjL,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,sGAAsG,CAAC,CAAC;IAE7K,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AASD,SAAS,yBAAyB,CAAC,MAAoB,EAAE,OAAe;IACtE,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK;oBACL,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,KAAK;oBACL,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,iEAAiE,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrF,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAoB;IAC9C,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjD,MAAM,wBAAwB,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7H,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB;IAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpG,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvG,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;oBACnC,OAAO,EAAE,WAAW,IAAI,mBAAmB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,cAAc,OAAO,GAAG;iBACrJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,CAAC,YAAY,EAAE,oEAAoE,CAAC;QACpF,CAAC,OAAO,EAAE,+CAA+C,CAAC;QAC1D,CAAC,SAAS,EAAE,8CAA8C,CAAC;QAC3D,CAAC,SAAS,EAAE,kDAAkD,CAAC;QAC/D,CAAC,UAAU,EAAE,4CAA4C,CAAC;QAC1D,CAAC,WAAW,EAAE,2BAA2B,CAAC;KAC3C,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB,EAAE,IAAoB;IAC3D,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB,EAAE,eAAuB;IACtE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,GAAG,YAAY,CAAC,IAAI,mBAAmB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClG;KACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAoB;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,wKAAwK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7L,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KAC7H,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,SAAS,CAAC,IAAoB,EAAE,QAAoB;IAC3D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ;QACR,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACtC,OAAO;QACL,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC;KACZ,CAAC,QAAQ,CAAC,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,MAAc;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK;SACT,OAAO,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;SACtD,OAAO,CAAC,kCAAkC,EAAE,yBAAyB,CAAC;SACtE,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;SAC5D,OAAO,CAAC,gFAAgF,EAAE,gBAAgB,CAAC,CAAC;AACjH,CAAC"}
|
package/dist/src/types.d.ts
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
export type Severity = "low" | "medium" | "high" | "critical";
|
|
2
|
-
export type FindingKind = "premature_completion" | "tests_not_run" | "test_failure" | "ignored_instruction" | "hallucinated_file" | "over_editing" | "unsafe_command" | "secret_exposure" | "hidden_unicode" | "prompt_injection" | "context_compaction" | "mcp_risk" | "weak_evidence";
|
|
2
|
+
export type FindingKind = "premature_completion" | "tests_not_run" | "test_failure" | "ignored_instruction" | "hallucinated_file" | "over_editing" | "unsafe_command" | "secret_exposure" | "hidden_unicode" | "prompt_injection" | "context_compaction" | "sandbox_permission" | "mcp_risk" | "weak_evidence";
|
|
3
3
|
export interface TraceInput {
|
|
4
4
|
path: string;
|
|
5
5
|
content: string;
|
package/docs/BENCHMARK.md
CHANGED
|
@@ -10,6 +10,7 @@ This benchmark runs the public fixture pack that ships with the repository and p
|
|
|
10
10
|
| Failed workflow with missing validation | `fixtures/failed-run.md` | 18 | 5 | 1 | `hallucinated_file`, `mcp_risk`, `premature_completion`, `test_failure`, `tests_not_run` | pass |
|
|
11
11
|
| Codex JSONL failed session | `fixtures/codex-session.jsonl` | 50 | 3 | 1 | `premature_completion`, `test_failure`, `weak_evidence` | pass |
|
|
12
12
|
| Codex context compaction failure | `fixtures/context-compaction.md` | 75 | 2 | 0 | `context_compaction`, `weak_evidence` | pass |
|
|
13
|
+
| Codex sandbox permission failure | `fixtures/sandbox-permission.md` | 75 | 2 | 0 | `sandbox_permission`, `weak_evidence` | pass |
|
|
13
14
|
| MCP config with secret exposure | `fixtures/mcp-risk.json` | 59 | 2 | 1 | `mcp_risk`, `secret_exposure` | pass |
|
|
14
15
|
| Untrusted PR comment prompt injection | `fixtures/prompt-injection.md` | 50 | 3 | 1 | `premature_completion`, `prompt_injection`, `weak_evidence` | pass |
|
|
15
16
|
| Conflicting agent instruction files | `fixtures/instruction-drift` | 84 | 1 | 0 | `ignored_instruction` | pass |
|
package/docs/DISCOVERY.md
CHANGED
|
@@ -20,6 +20,7 @@ This page is written for maintainers, search engines, package indexes, and AI re
|
|
|
20
20
|
- Codex or Claude Code claims a task is done without validation evidence.
|
|
21
21
|
- A coding agent repeats the same test/build/lint failure.
|
|
22
22
|
- A long Codex thread fails during context compaction with stream disconnects, `context_length_exceeded`, endless auto-compaction, or `unknown variant auto` errors.
|
|
23
|
+
- Codex cannot start tools because sandbox setup refresh, Windows `os error 740`, ACL, ownership, or approval-mode permission failures block execution.
|
|
23
24
|
- A repository has conflicting `AGENTS.md`, `CLAUDE.md`, Cursor, Copilot, or Gemini instructions.
|
|
24
25
|
- A monorepo has nested `AGENTS.md` files, `@file.md` instruction includes, or invalid instruction-file encoding that makes Codex load the wrong policy.
|
|
25
26
|
- A workflow wants to feed GitHub issue, PR, comment, discussion, check-run, or commit text into an agent but needs prompt-injection checks first.
|
|
@@ -67,7 +68,7 @@ npx trace-to-skill suggest ./runs --target agents-md
|
|
|
67
68
|
|
|
68
69
|
## Related Keywords
|
|
69
70
|
|
|
70
|
-
Codex, OpenAI Codex, Codex CLI, AGENTS.md, SKILL.md, Claude Code, Cursor, Copilot coding agent, Gemini CLI, MCP, Model Context Protocol, prompt injection, agent evals, AI code review, open-source maintainers, trace redaction, SARIF, GitHub Actions.
|
|
71
|
+
Codex, OpenAI Codex, Codex CLI, Codex sandbox, Windows sandbox, AGENTS.md, SKILL.md, Claude Code, Cursor, Copilot coding agent, Gemini CLI, MCP, Model Context Protocol, prompt injection, agent evals, AI code review, open-source maintainers, trace redaction, SARIF, GitHub Actions.
|
|
71
72
|
|
|
72
73
|
## Non-Goals
|
|
73
74
|
|
package/docs/FAILURE_TAXONOMY.md
CHANGED
|
@@ -18,6 +18,12 @@ A test, build, typecheck, lint, or smoke command failed. The agent should contin
|
|
|
18
18
|
|
|
19
19
|
Codex context compaction failed, disconnected, looped, or hit `context_length_exceeded`. The fix is to capture the compact error, model/app version, thread state, and recovery state before continuing or reporting the session as healthy.
|
|
20
20
|
|
|
21
|
+
## Sandbox Permission
|
|
22
|
+
|
|
23
|
+
Codex sandbox setup, approval mode, ACL, or workspace ownership failed before tools could run reliably. Common signals include Windows sandbox setup refresh errors, `os error 740`, `CodexSandboxOffline` ownership drift, access denied, and Full Access sessions downgraded to workspace-write or on-request behavior.
|
|
24
|
+
|
|
25
|
+
The fix is to capture the OS, Codex version, `sandbox_mode`, `approval_policy`, exact stderr, workspace ownership/ACL evidence, and whether a clean directory can run a simple command plus `apply_patch`.
|
|
26
|
+
|
|
21
27
|
## Hallucinated File
|
|
22
28
|
|
|
23
29
|
The trace references a missing path, missing module, or nonexistent file. The fix is usually a repository navigation rule.
|
package/docs/SCORECARD.md
CHANGED
|
@@ -9,7 +9,7 @@ Status: **pass**
|
|
|
9
9
|
| Failed doctor checks | 0 |
|
|
10
10
|
| Critical findings | 0 |
|
|
11
11
|
| Built-in benchmark | pass |
|
|
12
|
-
| Benchmark cases |
|
|
12
|
+
| Benchmark cases | 8 |
|
|
13
13
|
|
|
14
14
|
## Doctor Summary
|
|
15
15
|
|
|
@@ -27,6 +27,7 @@ This benchmark runs the public fixture pack that ships with the repository and p
|
|
|
27
27
|
| Failed workflow with missing validation | `fixtures/failed-run.md` | 18 | 5 | 1 | `hallucinated_file`, `mcp_risk`, `premature_completion`, `test_failure`, `tests_not_run` | pass |
|
|
28
28
|
| Codex JSONL failed session | `fixtures/codex-session.jsonl` | 50 | 3 | 1 | `premature_completion`, `test_failure`, `weak_evidence` | pass |
|
|
29
29
|
| Codex context compaction failure | `fixtures/context-compaction.md` | 75 | 2 | 0 | `context_compaction`, `weak_evidence` | pass |
|
|
30
|
+
| Codex sandbox permission failure | `fixtures/sandbox-permission.md` | 75 | 2 | 0 | `sandbox_permission`, `weak_evidence` | pass |
|
|
30
31
|
| MCP config with secret exposure | `fixtures/mcp-risk.json` | 59 | 2 | 1 | `mcp_risk`, `secret_exposure` | pass |
|
|
31
32
|
| Untrusted PR comment prompt injection | `fixtures/prompt-injection.md` | 50 | 3 | 1 | `premature_completion`, `prompt_injection`, `weak_evidence` | pass |
|
|
32
33
|
| Conflicting agent instruction files | `fixtures/instruction-drift` | 84 | 1 | 0 | `ignored_instruction` | pass |
|
package/docs/USE_CASES.md
CHANGED
|
@@ -21,7 +21,7 @@ What it proves:
|
|
|
21
21
|
Recommended CI surface:
|
|
22
22
|
|
|
23
23
|
```yaml
|
|
24
|
-
- uses: grnbtqdbyx-create/trace-to-skill@v0.1.
|
|
24
|
+
- uses: grnbtqdbyx-create/trace-to-skill@v0.1.37
|
|
25
25
|
with:
|
|
26
26
|
mode: all
|
|
27
27
|
doctor-threshold: "85"
|
|
@@ -51,7 +51,17 @@ This checks:
|
|
|
51
51
|
|
|
52
52
|
The goal is not to ban powerful tools. The goal is to make trust boundaries visible before an agent acts.
|
|
53
53
|
|
|
54
|
-
## 3.
|
|
54
|
+
## 3. Sandbox And Permission Failure Triage
|
|
55
|
+
|
|
56
|
+
Use this when Codex cannot start tools, apply patches, or write to the workspace because sandbox setup or permissions fail.
|
|
57
|
+
|
|
58
|
+
```bash
|
|
59
|
+
npx trace-to-skill analyze ./runs --format json
|
|
60
|
+
```
|
|
61
|
+
|
|
62
|
+
This catches signals such as Windows sandbox setup refresh failures, `os error 740`, `CodexSandboxOffline` ownership drift, ACL denial, approval-policy mismatch, and Full Access sessions behaving like workspace-write or on-request mode.
|
|
63
|
+
|
|
64
|
+
## 4. GitHub Context Guard
|
|
55
65
|
|
|
56
66
|
Use this before an agent reads untrusted GitHub text.
|
|
57
67
|
|
|
@@ -68,7 +78,7 @@ Use it when:
|
|
|
68
78
|
- a bot asks Codex to triage untrusted user reports
|
|
69
79
|
- logs or comments might contain instructions like "ignore previous instructions" or "print secrets"
|
|
70
80
|
|
|
71
|
-
##
|
|
81
|
+
## 5. Failed Agent Run To Reviewable Rule
|
|
72
82
|
|
|
73
83
|
Use this when a coding agent made a repeated workflow mistake.
|
|
74
84
|
|
|
@@ -86,7 +96,7 @@ Recommended maintainer loop:
|
|
|
86
96
|
4. Copy only evidence-backed rules into the real policy file.
|
|
87
97
|
5. Run `eval` or `scorecard` in CI so the same failure does not silently return.
|
|
88
98
|
|
|
89
|
-
##
|
|
99
|
+
## 6. Privacy-Preserving Adoption
|
|
90
100
|
|
|
91
101
|
Use this when you want public evidence without leaking private traces.
|
|
92
102
|
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
# Codex sandbox permission failure fixture
|
|
2
|
+
|
|
3
|
+
## Failed shell command
|
|
4
|
+
|
|
5
|
+
The session could not start a simple command:
|
|
6
|
+
|
|
7
|
+
```text
|
|
8
|
+
execution error: Io(Custom { kind: Other, error: "windows sandbox: setup refresh failed with status exit code: 1" })
|
|
9
|
+
```
|
|
10
|
+
|
|
11
|
+
Another run failed earlier in the tool startup path:
|
|
12
|
+
|
|
13
|
+
```text
|
|
14
|
+
node_repl kernel exited unexpectedly
|
|
15
|
+
kernel_stderr_tail: "windows sandbox failed: spawn setup refresh"
|
|
16
|
+
os error 740
|
|
17
|
+
```
|
|
18
|
+
|
|
19
|
+
## Workspace ownership drift
|
|
20
|
+
|
|
21
|
+
After switching from Full Access to workspace-write, the project directory owner changed to `CodexSandboxOffline`.
|
|
22
|
+
Subsequent patch attempts failed with access denied and ACL errors, even after returning approval_policy to never.
|
|
23
|
+
|
|
24
|
+
Maintainer note:
|
|
25
|
+
|
|
26
|
+
```text
|
|
27
|
+
sandbox_mode = "workspace-write"
|
|
28
|
+
approval_policy = "on-request"
|
|
29
|
+
Full Access thread downgraded to workspace-write and write failures persisted.
|
|
30
|
+
CreateProcessWithLogonW failed while setup refresh tried to launch the helper.
|
|
31
|
+
```
|
package/llms.txt
CHANGED
|
@@ -15,6 +15,7 @@ Runtime: Node.js 20+
|
|
|
15
15
|
- agents claiming completion without test/build proof
|
|
16
16
|
- failed tests hidden behind optimistic summaries
|
|
17
17
|
- Codex context compaction failures such as remote compact stream disconnects, `context_length_exceeded`, stuck automatic compaction, and `unknown variant auto`
|
|
18
|
+
- Codex sandbox and permission failures such as setup refresh errors, `os error 740`, `CodexSandboxOffline` ownership drift, ACL denial, and approval-mode downgrades
|
|
18
19
|
- hallucinated files and broad over-editing
|
|
19
20
|
- conflicting `AGENTS.md`, `CLAUDE.md`, Cursor, Copilot, or Gemini instructions
|
|
20
21
|
- stale path references, missing `@file.md` includes, nested `AGENTS.md` visibility gaps, invalid UTF-8, and oversized instruction files that can make Codex follow wrong or truncated guidance
|
|
@@ -59,7 +60,7 @@ npx trace-to-skill init --comment --sarif
|
|
|
59
60
|
## GitHub Action
|
|
60
61
|
|
|
61
62
|
```yaml
|
|
62
|
-
- uses: grnbtqdbyx-create/trace-to-skill@v0.1.
|
|
63
|
+
- uses: grnbtqdbyx-create/trace-to-skill@v0.1.37
|
|
63
64
|
with:
|
|
64
65
|
mode: all
|
|
65
66
|
doctor-threshold: "85"
|
|
@@ -87,3 +88,5 @@ npx trace-to-skill init --comment --sarif
|
|
|
87
88
|
- privacy-preserving redaction for AI agent traces
|
|
88
89
|
- GitHub Action for AI coding-agent eval gates
|
|
89
90
|
- Codex OSS maintainer automation evidence
|
|
91
|
+
- Codex sandbox setup refresh failed
|
|
92
|
+
- Windows sandbox permission failure for Codex CLI
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "trace-to-skill",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.37",
|
|
4
4
|
"description": "Turn failed AI coding-agent runs into reusable AGENTS.md rules, SKILL.md files, and eval evidence.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/src/index.js",
|
|
@@ -60,6 +60,9 @@
|
|
|
60
60
|
"prompt-injection",
|
|
61
61
|
"context-compaction",
|
|
62
62
|
"codex-compaction",
|
|
63
|
+
"sandbox-permission",
|
|
64
|
+
"codex-sandbox",
|
|
65
|
+
"windows-sandbox",
|
|
63
66
|
"evals",
|
|
64
67
|
"open-source-maintainers",
|
|
65
68
|
"self-improvement",
|