wunderland 0.86.1 → 0.88.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (35) hide show
  1. package/dist/autonomy/social/ToolAccessProfiles.d.ts +6 -7
  2. package/dist/autonomy/social/ToolAccessProfiles.d.ts.map +1 -1
  3. package/dist/autonomy/social/ToolAccessProfiles.js +19 -11
  4. package/dist/autonomy/social/ToolAccessProfiles.js.map +1 -1
  5. package/dist/cli/export/report-export.d.ts +25 -4
  6. package/dist/cli/export/report-export.d.ts.map +1 -1
  7. package/dist/cli/export/report-export.js +62 -12
  8. package/dist/cli/export/report-export.js.map +1 -1
  9. package/dist/index.d.ts +4 -3
  10. package/dist/index.d.ts.map +1 -1
  11. package/dist/index.js +4 -3
  12. package/dist/index.js.map +1 -1
  13. package/dist/public/tools.d.ts +4 -0
  14. package/dist/public/tools.d.ts.map +1 -1
  15. package/dist/public/tools.js +2 -0
  16. package/dist/public/tools.js.map +1 -1
  17. package/dist/runtime/tools/FeedSearchTool.d.ts +21 -0
  18. package/dist/runtime/tools/FeedSearchTool.d.ts.map +1 -1
  19. package/dist/runtime/tools/FeedSearchTool.js +6 -0
  20. package/dist/runtime/tools/FeedSearchTool.js.map +1 -1
  21. package/dist/security/SafeGuardrails.d.ts +4 -3
  22. package/dist/security/SafeGuardrails.d.ts.map +1 -1
  23. package/dist/security/SafeGuardrails.js +1 -1
  24. package/dist/security/SafeGuardrails.js.map +1 -1
  25. package/dist/security/SecurityTiers.d.ts +1 -1
  26. package/dist/security/SecurityTiers.js +1 -1
  27. package/dist/security/SignedOutputVerifier.d.ts +7 -2
  28. package/dist/security/SignedOutputVerifier.d.ts.map +1 -1
  29. package/dist/security/SignedOutputVerifier.js +47 -7
  30. package/dist/security/SignedOutputVerifier.js.map +1 -1
  31. package/dist/security/index.d.ts +2 -0
  32. package/dist/security/index.d.ts.map +1 -1
  33. package/dist/security/index.js +2 -0
  34. package/dist/security/index.js.map +1 -1
  35. package/package.json +9 -1
@@ -13,12 +13,11 @@
13
13
  * Usage:
14
14
  * ```typescript
15
15
  * import {
16
- * TOOL_ACCESS_PROFILES,
16
+ * describePermissions,
17
17
  * getToolAccessProfile,
18
18
  * isToolAllowedByProfile,
19
19
  * resolveAllowedTools,
20
- * describePermissions,
21
- * } from 'wunderland/advanced/social';
20
+ * } from 'wunderland/tools';
22
21
  *
23
22
  * // Get a named profile
24
23
  * const profile = getToolAccessProfile('social-citizen');
@@ -53,9 +52,9 @@ export interface ToolAccessProfile {
53
52
  /** One-sentence description */
54
53
  description: string;
55
54
  /** Tool categories allowed in this profile */
56
- allowedCategories: ToolCategory[];
55
+ allowedCategories: readonly ToolCategory[];
57
56
  /** Categories explicitly blocked (overrides allowed) */
58
- blockedCategories: ToolCategory[];
57
+ blockedCategories: readonly ToolCategory[];
59
58
  /** Whether filesystem access is allowed */
60
59
  allowFileSystem: boolean;
61
60
  /** Whether CLI/shell execution is allowed */
@@ -81,8 +80,8 @@ export declare const TOOL_CATEGORY_MAP: Readonly<Record<string, ToolCategory>>;
81
80
  /**
82
81
  * Registry of all named tool access profiles.
83
82
  *
84
- * Each profile is a frozen object so consumers cannot accidentally mutate the
85
- * shared definitions at runtime.
83
+ * Each profile and its category arrays are frozen so consumers cannot mutate
84
+ * the shared definitions at runtime.
86
85
  */
87
86
  export declare const TOOL_ACCESS_PROFILES: Readonly<Record<ToolAccessProfileName, ToolAccessProfile>>;
88
87
  /**
@@ -1 +1 @@
1
- {"version":3,"file":"ToolAccessProfiles.d.ts","sourceRoot":"","sources":["../../../src/autonomy/social/ToolAccessProfiles.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAMzD;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,YAAY,GACZ,QAAQ,GACR,cAAc,GACd,YAAY,GACZ,eAAe,CAAC;AAEpB;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,WAAW,GACX,WAAW,GACX,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,yBAAyB;IACzB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,iBAAiB,EAAE,YAAY,EAAE,CAAC;IAClC,wDAAwD;IACxD,iBAAiB,EAAE,YAAY,EAAE,CAAC;IAClC,2CAA2C;IAC3C,eAAe,EAAE,OAAO,CAAC;IACzB,6CAA6C;IAC7C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,sEAAsE;IACtE,uBAAuB,EAAE,OAAO,CAAC;IACjC,qDAAqD;IACrD,WAAW,EAAE,YAAY,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAMD;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CA2HnE,CAAC;AAMH;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CA0F1F,CAAC;AASH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,qBAAqB,CAEpF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,qBAAqB,GAAG,iBAAiB,CAMnF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAExE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,mBAAmB,GAC9B,OAAO,CAiBT;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAAE,EACpB,SAAS,CAAC,EAAE,mBAAmB,GAC9B,MAAM,EAAE,CAEV;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,GAAG;IAC/D,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAkCA"}
1
+ {"version":3,"file":"ToolAccessProfiles.d.ts","sourceRoot":"","sources":["../../../src/autonomy/social/ToolAccessProfiles.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAMzD;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,YAAY,GACZ,QAAQ,GACR,cAAc,GACd,YAAY,GACZ,eAAe,CAAC;AAEpB;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,WAAW,GACX,WAAW,GACX,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,yBAAyB;IACzB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,iBAAiB,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,wDAAwD;IACxD,iBAAiB,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,2CAA2C;IAC3C,eAAe,EAAE,OAAO,CAAC;IACzB,6CAA6C;IAC7C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,sEAAsE;IACtE,uBAAuB,EAAE,OAAO,CAAC;IACjC,qDAAqD;IACrD,WAAW,EAAE,YAAY,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAMD;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CA2HnE,CAAC;AAgBH;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CA0F1F,CAAC;AASH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,qBAAqB,CAEpF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,qBAAqB,GAAG,iBAAiB,CAMnF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAExE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,mBAAmB,GAC9B,OAAO,CAiBT;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAAE,EACpB,SAAS,CAAC,EAAE,mBAAmB,GAC9B,MAAM,EAAE,CAEV;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,GAAG;IAC/D,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAkCA"}
@@ -14,12 +14,11 @@
14
14
  * Usage:
15
15
  * ```typescript
16
16
  * import {
17
- * TOOL_ACCESS_PROFILES,
17
+ * describePermissions,
18
18
  * getToolAccessProfile,
19
19
  * isToolAllowedByProfile,
20
20
  * resolveAllowedTools,
21
- * describePermissions,
22
- * } from 'wunderland/advanced/social';
21
+ * } from 'wunderland/tools';
23
22
  *
24
23
  * // Get a named profile
25
24
  * const profile = getToolAccessProfile('social-citizen');
@@ -156,17 +155,26 @@ export const TOOL_CATEGORY_MAP = Object.freeze({
156
155
  // ============================================================================
157
156
  // Profile Definitions
158
157
  // ============================================================================
158
+ /**
159
+ * Freezes a profile and its category arrays: {@link getToolAccessProfile} hands
160
+ * the same object to every caller, so a change to one would reach every agent.
161
+ */
162
+ function defineProfile(profile) {
163
+ Object.freeze(profile.allowedCategories);
164
+ Object.freeze(profile.blockedCategories);
165
+ return Object.freeze(profile);
166
+ }
159
167
  /**
160
168
  * Registry of all named tool access profiles.
161
169
  *
162
- * Each profile is a frozen object so consumers cannot accidentally mutate the
163
- * shared definitions at runtime.
170
+ * Each profile and its category arrays are frozen so consumers cannot mutate
171
+ * the shared definitions at runtime.
164
172
  */
165
173
  export const TOOL_ACCESS_PROFILES = Object.freeze({
166
174
  // --------------------------------------------------------------------------
167
175
  // Social Citizen — standard social participation
168
176
  // --------------------------------------------------------------------------
169
- 'social-citizen': Object.freeze({
177
+ 'social-citizen': defineProfile({
170
178
  name: 'social-citizen',
171
179
  displayName: 'Social Citizen',
172
180
  description: 'Full social participation: post, comment, vote, browse, search, use media, and consult memory for continuity. No file system, CLI, or system access.',
@@ -180,7 +188,7 @@ export const TOOL_ACCESS_PROFILES = Object.freeze({
180
188
  // --------------------------------------------------------------------------
181
189
  // Social Observer — read-only
182
190
  // --------------------------------------------------------------------------
183
- 'social-observer': Object.freeze({
191
+ 'social-observer': defineProfile({
184
192
  name: 'social-observer',
185
193
  displayName: 'Social Observer',
186
194
  description: 'Read-only access: browse feeds and search the web. Cannot post, comment, or vote.',
@@ -194,7 +202,7 @@ export const TOOL_ACCESS_PROFILES = Object.freeze({
194
202
  // --------------------------------------------------------------------------
195
203
  // Social Creative — enhanced social with creative tools
196
204
  // --------------------------------------------------------------------------
197
- 'social-creative': Object.freeze({
205
+ 'social-creative': defineProfile({
198
206
  name: 'social-creative',
199
207
  displayName: 'Social Creative',
200
208
  description: 'Enhanced social participation with creative tools: all citizen abilities plus voice synthesis and image generation.',
@@ -208,7 +216,7 @@ export const TOOL_ACCESS_PROFILES = Object.freeze({
208
216
  // --------------------------------------------------------------------------
209
217
  // Assistant — private assistant mode
210
218
  // --------------------------------------------------------------------------
211
- 'assistant': Object.freeze({
219
+ 'assistant': defineProfile({
212
220
  name: 'assistant',
213
221
  displayName: 'Assistant',
214
222
  description: 'Private assistant mode: search, media, memory, productivity, communication, and read-only file access. No CLI or system modification.',
@@ -222,7 +230,7 @@ export const TOOL_ACCESS_PROFILES = Object.freeze({
222
230
  // --------------------------------------------------------------------------
223
231
  // Developer — local CLI assistant with CLI execution + HITL approval
224
232
  // --------------------------------------------------------------------------
225
- 'developer': Object.freeze({
233
+ 'developer': defineProfile({
226
234
  name: 'developer',
227
235
  displayName: 'Developer',
228
236
  description: 'Local developer assistant: full tool access including CLI execution with human-in-the-loop approval for dangerous operations.',
@@ -236,7 +244,7 @@ export const TOOL_ACCESS_PROFILES = Object.freeze({
236
244
  // --------------------------------------------------------------------------
237
245
  // Unrestricted — full access (admin only)
238
246
  // --------------------------------------------------------------------------
239
- 'unrestricted': Object.freeze({
247
+ 'unrestricted': defineProfile({
240
248
  name: 'unrestricted',
241
249
  displayName: 'Unrestricted',
242
250
  description: 'Full access to all tools including CLI and system modification. Admin only — use with extreme caution.',
@@ -1 +1 @@
1
- {"version":3,"file":"ToolAccessProfiles.js","sourceRoot":"","sources":["../../../src/autonomy/social/ToolAccessProfiles.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAiEzD,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA2C,MAAM,CAAC,MAAM,CAAC;IACrF,SAAS;IACT,aAAa,EAAE,QAAQ;IACvB,WAAW,EAAE,QAAQ;IAErB,SAAS;IACT,YAAY,EAAE,QAAQ;IACtB,oBAAoB,EAAE,QAAQ;IAC9B,YAAY,EAAE,QAAQ;IACtB,aAAa,EAAE,QAAQ;IACvB,kBAAkB,EAAE,QAAQ;IAC5B,eAAe,EAAE,QAAQ;IACzB,iBAAiB,EAAE,QAAQ;IAC3B,gBAAgB,EAAE,QAAQ;IAC1B,oBAAoB,EAAE,QAAQ;IAC9B,kBAAkB,EAAE,QAAQ;IAC5B,cAAc,EAAE,QAAQ;IACxB,cAAc,EAAE,QAAQ;IACxB,gBAAgB,EAAE,QAAQ;IAC1B,cAAc,EAAE,QAAQ;IACxB,kBAAkB,EAAE,QAAQ;IAC5B,iBAAiB,EAAE,QAAQ;IAC3B,uEAAuE;IACvE,0EAA0E;IAC1E,wEAAwE;IACxE,mBAAmB;IACnB,uBAAuB,EAAE,QAAQ;IACjC,sBAAsB,EAAE,QAAQ;IAChC,qBAAqB,EAAE,QAAQ;IAC/B,qBAAqB,EAAE,QAAQ;IAC/B,wBAAwB,EAAE,QAAQ;IAClC,wBAAwB,EAAE,QAAQ;IAClC,aAAa,EAAE,QAAQ;IAEvB,qBAAqB;IACrB,aAAa,EAAE,QAAQ;IACvB,iBAAiB,EAAE,QAAQ;IAC3B,mBAAmB,EAAE,QAAQ;IAC7B,aAAa,EAAE,QAAQ;IACvB,oBAAoB,EAAE,QAAQ;IAC9B,qBAAqB,EAAE,QAAQ;IAC/B,qBAAqB,EAAE,QAAQ;IAC/B,yBAAyB,EAAE,QAAQ;IACnC,2BAA2B,EAAE,QAAQ;IAErC,QAAQ;IACR,cAAc,EAAE,OAAO;IACvB,cAAc,EAAE,OAAO;IACvB,gBAAgB,EAAE,OAAO;IAEzB,SAAS;IACT,aAAa,EAAE,QAAQ;IACvB,cAAc,EAAE,QAAQ;IACxB,sBAAsB,EAAE,QAAQ;IAEhC,aAAa;IACb,aAAa,EAAE,YAAY;IAC3B,YAAY,EAAE,YAAY;IAC1B,WAAW,EAAE,YAAY;IACzB,aAAa,EAAE,YAAY;IAC3B,WAAW,EAAE,YAAY;IACzB,WAAW,EAAE,YAAY;IACzB,YAAY,EAAE,YAAY;IAC1B,gBAAgB,EAAE,YAAY;IAE9B,SAAS;IACT,eAAe,EAAE,QAAQ;IACzB,cAAc,EAAE,QAAQ;IACxB,gBAAgB,EAAE,QAAQ;IAC1B,aAAa,EAAE,QAAQ;IACvB,YAAY,EAAE,QAAQ;IAEtB,eAAe;IACf,UAAU,EAAE,cAAc;IAC1B,eAAe,EAAE,cAAc;IAC/B,gBAAgB,EAAE,cAAc;IAEhC,SAAS;IACT,eAAe,EAAE,QAAQ;IACzB,mBAAmB,EAAE,QAAQ;IAC7B,qBAAqB,EAAE,QAAQ;IAC/B,gBAAgB,EAAE,QAAQ;IAC1B,kBAAkB,EAAE,QAAQ;IAC5B,kBAAkB,EAAE,QAAQ;IAC5B,oBAAoB,EAAE,QAAQ;IAE9B,iCAAiC;IACjC,aAAa,EAAE,QAAQ;IACvB,aAAa,EAAE,QAAQ;IACvB,eAAe,EAAE,QAAQ;IACzB,eAAe,EAAE,QAAQ;IACzB,gBAAgB,EAAE,QAAQ;IAE1B,sDAAsD;IACtD,iBAAiB,EAAE,QAAQ;IAC3B,mBAAmB,EAAE,QAAQ;IAC7B,mBAAmB,EAAE,QAAQ;IAE7B,mBAAmB;IACnB,gBAAgB,EAAE,QAAQ;IAC1B,gBAAgB,EAAE,QAAQ;IAC1B,iBAAiB,EAAE,QAAQ;IAC3B,mBAAmB,EAAE,QAAQ;IAC7B,mBAAmB,EAAE,QAAQ;IAC7B,mBAAmB,EAAE,QAAQ;IAE7B,gBAAgB;IAChB,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,eAAe;IAC7B,cAAc,EAAE,eAAe;IAC/B,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,eAAe;IAC/B,qBAAqB,EAAE,eAAe;IACtC,oBAAoB,EAAE,eAAe;IACrC,oBAAoB,EAAE,eAAe;IACrC,qBAAqB,EAAE,eAAe;IACtC,uBAAuB,EAAE,eAAe;IACxC,mBAAmB,EAAE,eAAe;IACpC,YAAY,EAAE,eAAe;IAC7B,eAAe,EAAE,eAAe;IAChC,cAAc,EAAE,eAAe;IAC/B,eAAe,EAAE,eAAe;IAChC,UAAU,EAAE,eAAe;CAC5B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+D,MAAM,CAAC,MAAM,CAAC;IAC5G,6EAA6E;IAC7E,iDAAiD;IACjD,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAoB;QACjD,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,sJAAsJ;QACnK,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC1D,iBAAiB,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC;QAC5D,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,WAAW,EAAE,YAAY,CAAC,iBAAiB;KAC5C,CAAC;IAEF,6EAA6E;IAC7E,8BAA8B;IAC9B,6EAA6E;IAC7E,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAoB;QAClD,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,mFAAmF;QAChG,iBAAiB,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACtC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC;QACtE,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,WAAW,EAAE,YAAY,CAAC,iBAAiB;KAC5C,CAAC;IAEF,6EAA6E;IAC7E,wDAAwD;IACxD,6EAA6E;IAC7E,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAoB;QAClD,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,qHAAqH;QAClI,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC1D,iBAAiB,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC;QAC5D,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,WAAW,EAAE,YAAY,CAAC,iBAAiB;KAC5C,CAAC;IAEF,6EAA6E;IAC7E,qCAAqC;IACrC,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC,MAAM,CAAoB;QAC5C,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,uIAAuI;QACpJ,iBAAiB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC;QAC7G,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACvC,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,WAAW,EAAE,YAAY,CAAC,mBAAmB;KAC9C,CAAC;IAEF,6EAA6E;IAC7E,qEAAqE;IACrE,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC,MAAM,CAAoB;QAC5C,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,+HAA+H;QAC5I,iBAAiB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC;QACvH,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,IAAI;QACvB,uBAAuB,EAAE,KAAK;QAC9B,WAAW,EAAE,YAAY,CAAC,gBAAgB;KAC3C,CAAC;IAEF,6EAA6E;IAC7E,0CAA0C;IAC1C,6EAA6E;IAC7E,cAAc,EAAE,MAAM,CAAC,MAAM,CAAoB;QAC/C,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,wGAAwG;QACrH,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC;QACjI,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,IAAI;QACvB,uBAAuB,EAAE,IAAI;QAC7B,WAAW,EAAE,YAAY,CAAC,gBAAgB;KAC3C,CAAC;CACH,CAAC,CAAC;AAEH,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,gEAAgE;AAChE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,OAAO,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA2B;IAC9D,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,sBAAsB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA0B,EAC1B,MAAc,EACd,SAA+B;IAE/B,iCAAiC;IACjC,IAAI,SAAS,EAAE,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,SAAS,EAAE,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAEzC,sDAAsD;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC;IACzC,CAAC;IAED,qDAAqD;IACrD,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/D,2BAA2B;IAC3B,OAAO,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA0B,EAC1B,UAAoB,EACpB,SAA+B;IAE/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA0B;IAI5D,MAAM,eAAe,GAA0D;QAC7E,MAAM,EAAE,EAAE,GAAG,EAAE,qCAAqC,EAAE,MAAM,EAAE,wBAAwB,EAAE;QACxF,MAAM,EAAE,EAAE,GAAG,EAAE,iCAAiC,EAAE,MAAM,EAAE,gBAAgB,EAAE;QAC5E,KAAK,EAAE,EAAE,GAAG,EAAE,uCAAuC,EAAE,MAAM,EAAE,iBAAiB,EAAE;QAClF,MAAM,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,qBAAqB,EAAE;QAC7E,UAAU,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,MAAM,EAAE,wBAAwB,EAAE;QAC/E,MAAM,EAAE,EAAE,GAAG,EAAE,kCAAkC,EAAE,MAAM,EAAE,iCAAiC,EAAE;QAC9F,YAAY,EAAE,EAAE,GAAG,EAAE,mCAAmC,EAAE,MAAM,EAAE,wBAAwB,EAAE;QAC5F,aAAa,EAAE,EAAE,GAAG,EAAE,qCAAqC,EAAE,MAAM,EAAE,wBAAwB,EAAE;KAChG,CAAC;IAEF,MAAM,cAAc,GAAmB;QACrC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe;KAC/F,CAAC;IAEF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,CAAC,OAAO,CAAC,eAAe;QAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,uBAAuB;QAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAEhF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC"}
1
+ {"version":3,"file":"ToolAccessProfiles.js","sourceRoot":"","sources":["../../../src/autonomy/social/ToolAccessProfiles.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAiEzD,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA2C,MAAM,CAAC,MAAM,CAAC;IACrF,SAAS;IACT,aAAa,EAAE,QAAQ;IACvB,WAAW,EAAE,QAAQ;IAErB,SAAS;IACT,YAAY,EAAE,QAAQ;IACtB,oBAAoB,EAAE,QAAQ;IAC9B,YAAY,EAAE,QAAQ;IACtB,aAAa,EAAE,QAAQ;IACvB,kBAAkB,EAAE,QAAQ;IAC5B,eAAe,EAAE,QAAQ;IACzB,iBAAiB,EAAE,QAAQ;IAC3B,gBAAgB,EAAE,QAAQ;IAC1B,oBAAoB,EAAE,QAAQ;IAC9B,kBAAkB,EAAE,QAAQ;IAC5B,cAAc,EAAE,QAAQ;IACxB,cAAc,EAAE,QAAQ;IACxB,gBAAgB,EAAE,QAAQ;IAC1B,cAAc,EAAE,QAAQ;IACxB,kBAAkB,EAAE,QAAQ;IAC5B,iBAAiB,EAAE,QAAQ;IAC3B,uEAAuE;IACvE,0EAA0E;IAC1E,wEAAwE;IACxE,mBAAmB;IACnB,uBAAuB,EAAE,QAAQ;IACjC,sBAAsB,EAAE,QAAQ;IAChC,qBAAqB,EAAE,QAAQ;IAC/B,qBAAqB,EAAE,QAAQ;IAC/B,wBAAwB,EAAE,QAAQ;IAClC,wBAAwB,EAAE,QAAQ;IAClC,aAAa,EAAE,QAAQ;IAEvB,qBAAqB;IACrB,aAAa,EAAE,QAAQ;IACvB,iBAAiB,EAAE,QAAQ;IAC3B,mBAAmB,EAAE,QAAQ;IAC7B,aAAa,EAAE,QAAQ;IACvB,oBAAoB,EAAE,QAAQ;IAC9B,qBAAqB,EAAE,QAAQ;IAC/B,qBAAqB,EAAE,QAAQ;IAC/B,yBAAyB,EAAE,QAAQ;IACnC,2BAA2B,EAAE,QAAQ;IAErC,QAAQ;IACR,cAAc,EAAE,OAAO;IACvB,cAAc,EAAE,OAAO;IACvB,gBAAgB,EAAE,OAAO;IAEzB,SAAS;IACT,aAAa,EAAE,QAAQ;IACvB,cAAc,EAAE,QAAQ;IACxB,sBAAsB,EAAE,QAAQ;IAEhC,aAAa;IACb,aAAa,EAAE,YAAY;IAC3B,YAAY,EAAE,YAAY;IAC1B,WAAW,EAAE,YAAY;IACzB,aAAa,EAAE,YAAY;IAC3B,WAAW,EAAE,YAAY;IACzB,WAAW,EAAE,YAAY;IACzB,YAAY,EAAE,YAAY;IAC1B,gBAAgB,EAAE,YAAY;IAE9B,SAAS;IACT,eAAe,EAAE,QAAQ;IACzB,cAAc,EAAE,QAAQ;IACxB,gBAAgB,EAAE,QAAQ;IAC1B,aAAa,EAAE,QAAQ;IACvB,YAAY,EAAE,QAAQ;IAEtB,eAAe;IACf,UAAU,EAAE,cAAc;IAC1B,eAAe,EAAE,cAAc;IAC/B,gBAAgB,EAAE,cAAc;IAEhC,SAAS;IACT,eAAe,EAAE,QAAQ;IACzB,mBAAmB,EAAE,QAAQ;IAC7B,qBAAqB,EAAE,QAAQ;IAC/B,gBAAgB,EAAE,QAAQ;IAC1B,kBAAkB,EAAE,QAAQ;IAC5B,kBAAkB,EAAE,QAAQ;IAC5B,oBAAoB,EAAE,QAAQ;IAE9B,iCAAiC;IACjC,aAAa,EAAE,QAAQ;IACvB,aAAa,EAAE,QAAQ;IACvB,eAAe,EAAE,QAAQ;IACzB,eAAe,EAAE,QAAQ;IACzB,gBAAgB,EAAE,QAAQ;IAE1B,sDAAsD;IACtD,iBAAiB,EAAE,QAAQ;IAC3B,mBAAmB,EAAE,QAAQ;IAC7B,mBAAmB,EAAE,QAAQ;IAE7B,mBAAmB;IACnB,gBAAgB,EAAE,QAAQ;IAC1B,gBAAgB,EAAE,QAAQ;IAC1B,iBAAiB,EAAE,QAAQ;IAC3B,mBAAmB,EAAE,QAAQ;IAC7B,mBAAmB,EAAE,QAAQ;IAC7B,mBAAmB,EAAE,QAAQ;IAE7B,gBAAgB;IAChB,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,eAAe;IAC7B,cAAc,EAAE,eAAe;IAC/B,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,eAAe;IAC/B,qBAAqB,EAAE,eAAe;IACtC,oBAAoB,EAAE,eAAe;IACrC,oBAAoB,EAAE,eAAe;IACrC,qBAAqB,EAAE,eAAe;IACtC,uBAAuB,EAAE,eAAe;IACxC,mBAAmB,EAAE,eAAe;IACpC,YAAY,EAAE,eAAe;IAC7B,eAAe,EAAE,eAAe;IAChC,cAAc,EAAE,eAAe;IAC/B,eAAe,EAAE,eAAe;IAChC,UAAU,EAAE,eAAe;CAC5B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,aAAa,CAAC,OAA0B;IAC/C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+D,MAAM,CAAC,MAAM,CAAC;IAC5G,6EAA6E;IAC7E,iDAAiD;IACjD,6EAA6E;IAC7E,gBAAgB,EAAE,aAAa,CAAC;QAC9B,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,sJAAsJ;QACnK,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC1D,iBAAiB,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC;QAC5D,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,WAAW,EAAE,YAAY,CAAC,iBAAiB;KAC5C,CAAC;IAEF,6EAA6E;IAC7E,8BAA8B;IAC9B,6EAA6E;IAC7E,iBAAiB,EAAE,aAAa,CAAC;QAC/B,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,mFAAmF;QAChG,iBAAiB,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACtC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC;QACtE,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,WAAW,EAAE,YAAY,CAAC,iBAAiB;KAC5C,CAAC;IAEF,6EAA6E;IAC7E,wDAAwD;IACxD,6EAA6E;IAC7E,iBAAiB,EAAE,aAAa,CAAC;QAC/B,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,qHAAqH;QAClI,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC1D,iBAAiB,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC;QAC5D,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,WAAW,EAAE,YAAY,CAAC,iBAAiB;KAC5C,CAAC;IAEF,6EAA6E;IAC7E,qCAAqC;IACrC,6EAA6E;IAC7E,WAAW,EAAE,aAAa,CAAC;QACzB,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,uIAAuI;QACpJ,iBAAiB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC;QAC7G,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACvC,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,WAAW,EAAE,YAAY,CAAC,mBAAmB;KAC9C,CAAC;IAEF,6EAA6E;IAC7E,qEAAqE;IACrE,6EAA6E;IAC7E,WAAW,EAAE,aAAa,CAAC;QACzB,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,+HAA+H;QAC5I,iBAAiB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC;QACvH,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,IAAI;QACvB,uBAAuB,EAAE,KAAK;QAC9B,WAAW,EAAE,YAAY,CAAC,gBAAgB;KAC3C,CAAC;IAEF,6EAA6E;IAC7E,0CAA0C;IAC1C,6EAA6E;IAC7E,cAAc,EAAE,aAAa,CAAC;QAC5B,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,wGAAwG;QACrH,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC;QACjI,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,IAAI;QACvB,uBAAuB,EAAE,IAAI;QAC7B,WAAW,EAAE,YAAY,CAAC,gBAAgB;KAC3C,CAAC;CACH,CAAC,CAAC;AAEH,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,gEAAgE;AAChE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,OAAO,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA2B;IAC9D,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,sBAAsB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA0B,EAC1B,MAAc,EACd,SAA+B;IAE/B,iCAAiC;IACjC,IAAI,SAAS,EAAE,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,SAAS,EAAE,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAEzC,sDAAsD;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC;IACzC,CAAC;IAED,qDAAqD;IACrD,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/D,2BAA2B;IAC3B,OAAO,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA0B,EAC1B,UAAoB,EACpB,SAA+B;IAE/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA0B;IAI5D,MAAM,eAAe,GAA0D;QAC7E,MAAM,EAAE,EAAE,GAAG,EAAE,qCAAqC,EAAE,MAAM,EAAE,wBAAwB,EAAE;QACxF,MAAM,EAAE,EAAE,GAAG,EAAE,iCAAiC,EAAE,MAAM,EAAE,gBAAgB,EAAE;QAC5E,KAAK,EAAE,EAAE,GAAG,EAAE,uCAAuC,EAAE,MAAM,EAAE,iBAAiB,EAAE;QAClF,MAAM,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,qBAAqB,EAAE;QAC7E,UAAU,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,MAAM,EAAE,wBAAwB,EAAE;QAC/E,MAAM,EAAE,EAAE,GAAG,EAAE,kCAAkC,EAAE,MAAM,EAAE,iCAAiC,EAAE;QAC9F,YAAY,EAAE,EAAE,GAAG,EAAE,mCAAmC,EAAE,MAAM,EAAE,wBAAwB,EAAE;QAC5F,aAAa,EAAE,EAAE,GAAG,EAAE,qCAAqC,EAAE,MAAM,EAAE,wBAAwB,EAAE;KAChG,CAAC;IAEF,MAAM,cAAc,GAAmB;QACrC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe;KAC/F,CAAC;IAEF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,CAAC,OAAO,CAAC,eAAe;QAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,uBAAuB;QAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAEhF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC"}
@@ -6,7 +6,11 @@ export interface ReportDataset {
6
6
  /** Optional lead paragraph rendered above the table in HTML/PDF. */
7
7
  summary?: string;
8
8
  }
9
- /** Escape one CSV field per RFC 4180 (quote when it holds `," \n \r`). */
9
+ /**
10
+ * Escape one CSV field per RFC 4180 (quote when it holds `," \n \r`). A text
11
+ * cell a spreadsheet would read as a formula (`=HYPERLINK(...)`, `@SUM(...)`)
12
+ * gets a leading `'`, so it opens as text; numbers are left as they are.
13
+ */
10
14
  export declare function csvField(value: string | number): string;
11
15
  /** Render a dataset to CSV text (header row + one row per record). */
12
16
  export declare function toCsv(ds: ReportDataset): string;
@@ -42,6 +46,9 @@ export interface InteractiveOptions {
42
46
  * column sort, a live search box, per-column filters, stat cards, optional
43
47
  * value heat-shading, and a light/dark toggle. No external resources — all CSS
44
48
  * and JS are inlined, so it opens offline and is safe to share as one file.
49
+ * Row values and column keys and labels reach the page as text nodes, never as
50
+ * markup, and its CSV download neutralizes formula cells the way
51
+ * {@link csvField} does.
45
52
  */
46
53
  export declare function toInteractiveHtml(ds: ReportDataset, opts?: InteractiveOptions): string;
47
54
  /** Options controlling PDF rendering. */
@@ -51,20 +58,34 @@ export interface PdfOptions {
51
58
  /** Per-render timeout ms (default 90s). */
52
59
  timeoutMs?: number;
53
60
  }
61
+ /**
62
+ * Content security policy put ahead of the HTML a PDF is printed from: inline
63
+ * styles and data: images and fonts only, so the page fetches nothing (no
64
+ * network URL, no other file:// path, no frame).
65
+ */
66
+ export declare const PDF_CSP = "default-src 'none'; style-src 'unsafe-inline'; img-src data:; font-src data:";
67
+ /**
68
+ * Prepare HTML for PDF printing: one doctype, then a charset and the
69
+ * {@link PDF_CSP} policy, then the caller's document. Pure + exported for tests.
70
+ */
71
+ export declare function preparePdfHtml(html: string): string;
54
72
  /**
55
73
  * Build the headless-Chrome argv for PDF rendering. Pure + exported for tests.
56
74
  * The `--user-data-dir` MUST be an isolated throwaway directory, never the
57
- * user's live profile.
75
+ * user's live profile. Scripts are off, and every request goes to a proxy on
76
+ * a closed local port (loopback included), so the page reaches no host.
58
77
  */
59
78
  export declare function buildPdfArgs(htmlPath: string, pdfPath: string, userDataDir: string): string[];
60
79
  /**
61
80
  * Render `html` to a PDF at `pdfPath` via an isolated headless Chrome. Throws
62
- * if the binary is missing or the render times out.
81
+ * if the binary is missing or the render times out. The page prints with
82
+ * scripts off, behind {@link PDF_CSP} and with no network route.
63
83
  */
64
84
  export declare function renderPdf(html: string, pdfPath: string, opts?: PdfOptions): Promise<string>;
65
85
  /**
66
86
  * Write CSV + HTML for a dataset (always) and a PDF (best-effort, when a Chrome
67
- * binary is available). Returns the paths that were written.
87
+ * binary is available). Returns the paths that were written. Throws a
88
+ * TypeError before writing anything when `basename` is not a plain file name.
68
89
  */
69
90
  export declare function exportReport(ds: ReportDataset, outDir: string, opts?: {
70
91
  basename?: string;
@@ -1 +1 @@
1
- {"version":3,"file":"report-export.d.ts","sourceRoot":"","sources":["../../../src/cli/export/report-export.ts"],"names":[],"mappings":"AAsBA,gEAAgE;AAChE,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAC7C,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,0EAA0E;AAC1E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAGvD;AAED,sEAAsE;AACtE,wBAAgB,KAAK,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,CAI/C;AAED,qEAAqE;AACrE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAKzD;AAED,sEAAsE;AACtE,wBAAgB,MAAM,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,CAuBhD;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,IAAI,CAAC,EAAE,eAAe,GAAG,cAAc,CAAC;CACzC;AAED,6CAA6C;AAC7C,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,uDAAuD;IACvD,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,4CAA4C;IAC5C,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,GAAE,kBAAuB,GAAG,MAAM,CAiF1F;AAED,yCAAyC;AACzC,MAAM,WAAW,UAAU;IACzB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAW7F;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CASrG;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAAA;CAAE,GAAG,UAAe,GACvG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB5E"}
1
+ {"version":3,"file":"report-export.d.ts","sourceRoot":"","sources":["../../../src/cli/export/report-export.ts"],"names":[],"mappings":"AAsBA,gEAAgE;AAChE,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAC7C,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAOD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAIvD;AAED,sEAAsE;AACtE,wBAAgB,KAAK,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,CAI/C;AAED,qEAAqE;AACrE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAKzD;AAED,sEAAsE;AACtE,wBAAgB,MAAM,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,CAuBhD;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,IAAI,CAAC,EAAE,eAAe,GAAG,cAAc,CAAC;CACzC;AAED,6CAA6C;AAC7C,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,uDAAuD;IACvD,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,4CAA4C;IAC5C,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,GAAE,kBAAuB,GAAG,MAAM,CAwF1F;AAED,yCAAyC;AACzC,MAAM,WAAW,UAAU;IACzB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID;;;;GAIG;AACH,eAAO,MAAM,OAAO,iFAAiF,CAAC;AAEtG;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAc7F;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CASrG;AAaD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAAA;CAAE,GAAG,UAAe,GACvG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB5E"}
@@ -18,9 +18,19 @@ import { tmpdir } from 'node:os';
18
18
  import { join } from 'node:path';
19
19
  import { promisify } from 'node:util';
20
20
  const pExecFile = promisify(execFile);
21
- /** Escape one CSV field per RFC 4180 (quote when it holds `," \n \r`). */
21
+ /** A cell a spreadsheet would evaluate: it starts with `=`, `+`, `-`, `@`, tab or CR. */
22
+ const FORMULA_LEAD = /^[=+\-@\t\r]/;
23
+ /** A signed number such as `-5.25`, `+44` or `1e-3`, which stays as written. */
24
+ const PLAIN_NUMBER = /^[+-]?(\d+\.?\d*|\.\d+)(e[+-]?\d+)?$/i;
25
+ /**
26
+ * Escape one CSV field per RFC 4180 (quote when it holds `," \n \r`). A text
27
+ * cell a spreadsheet would read as a formula (`=HYPERLINK(...)`, `@SUM(...)`)
28
+ * gets a leading `'`, so it opens as text; numbers are left as they are.
29
+ */
22
30
  export function csvField(value) {
23
- const s = String(value ?? '');
31
+ let s = String(value ?? '');
32
+ if (typeof value !== 'number' && FORMULA_LEAD.test(s) && !PLAIN_NUMBER.test(s))
33
+ s = `'${s}`;
24
34
  return /[",\n\r]/.test(s) ? `"${s.replace(/"/g, '""')}"` : s;
25
35
  }
26
36
  /** Render a dataset to CSV text (header row + one row per record). */
@@ -66,6 +76,9 @@ ${rows}
66
76
  * column sort, a live search box, per-column filters, stat cards, optional
67
77
  * value heat-shading, and a light/dark toggle. No external resources — all CSS
68
78
  * and JS are inlined, so it opens offline and is safe to share as one file.
79
+ * Row values and column keys and labels reach the page as text nodes, never as
80
+ * markup, and its CSV download neutralizes formula cells the way
81
+ * {@link csvField} does.
69
82
  */
70
83
  export function toInteractiveHtml(ds, opts = {}) {
71
84
  const specs = opts.columns ?? ds.columns.map((k) => ({ key: k }));
@@ -135,24 +148,46 @@ function shade(c, v){ const h=heats[c.key]; if(!h)return ''; const n=num(v); if(
135
148
  function rows(){ let rs=DATA.rows; if(state.q){ const q=state.q.toLowerCase(); rs=rs.filter(r=>DATA.cols.some(c=>String(r[c.key]??'').toLowerCase().includes(q))); }
136
149
  if(state.sortKey){ const c=DATA.cols.find(x=>x.key===state.sortKey); rs=rs.slice().sort((a,b)=>{ let av=a[state.sortKey], bv=b[state.sortKey]; if(c&&c.numeric){ av=num(av)??-Infinity; bv=num(bv)??-Infinity; return (av-bv)*state.dir;} return String(av??'').localeCompare(String(bv??''))*state.dir; }); }
137
150
  return rs; }
151
+ function el(tag, cls, text){ const e=document.createElement(tag); if(cls)e.className=cls; if(text!=null)e.textContent=text; return e; }
138
152
  function render(){ const th=document.getElementById('thead'), tb=document.getElementById('tbody');
139
- th.innerHTML='<tr>'+DATA.cols.map(c=>'<th class="'+(c.numeric?'num ':'')+(state.sortKey===c.key?'sorted':'')+'" data-k="'+c.key+'">'+c.label+'<span class="ar">'+(state.sortKey===c.key?(state.dir>0?'▲':'▼'):'⇅')+'</span></th>').join('')+'</tr>';
140
- const rs=rows(); tb.innerHTML = rs.length? rs.map(r=>'<tr>'+DATA.cols.map(c=>{const v=r[c.key]??''; return '<td class="'+(c.numeric?'num':'wrapcell')+'" style="'+shade(c,v)+'">'+String(v).replace(/&/g,'&amp;').replace(/</g,'&lt;')+'</td>';}).join('')+'</tr>').join('') : '<tr><td class="empty" colspan="'+DATA.cols.length+'">No matching rows</td></tr>';
141
- document.getElementById('count').textContent=rs.length+' / '+DATA.rows.length+' rows';
142
- th.querySelectorAll('th').forEach(h=>h.onclick=()=>{ const k=h.dataset.k; if(state.sortKey===k)state.dir*=-1; else {state.sortKey=k;state.dir=1;} render(); }); }
153
+ const hr=document.createElement('tr');
154
+ for(const c of DATA.cols){ const h=el('th', ((c.numeric?'num ':'')+(state.sortKey===c.key?'sorted':'')).trim(), String(c.label));
155
+ h.appendChild(el('span','ar', state.sortKey===c.key?(state.dir>0?'▲':'▼'):'⇅'));
156
+ h.onclick=()=>{ if(state.sortKey===c.key)state.dir*=-1; else {state.sortKey=c.key;state.dir=1;} render(); };
157
+ hr.appendChild(h); }
158
+ th.replaceChildren(hr);
159
+ const rs=rows(); tb.replaceChildren();
160
+ for(const r of rs){ const tr=document.createElement('tr'); for(const c of DATA.cols){ const v=r[c.key]??''; const td=el('td', c.numeric?'num':'wrapcell', String(v)); td.style.cssText=shade(c,v); tr.appendChild(td); } tb.appendChild(tr); }
161
+ if(!rs.length){ const tr=document.createElement('tr'); const td=el('td','empty','No matching rows'); td.colSpan=DATA.cols.length; tr.appendChild(td); tb.appendChild(tr); }
162
+ document.getElementById('count').textContent=rs.length+' / '+DATA.rows.length+' rows'; }
143
163
  document.getElementById('q').addEventListener('input', e=>{ state.q=e.target.value; render(); });
144
164
  document.getElementById('themeBtn').onclick=()=>{ const r=document.documentElement; const cur=r.getAttribute('data-theme')|| (matchMedia('(prefers-color-scheme:dark)').matches?'dark':'light'); r.setAttribute('data-theme', cur==='dark'?'light':'dark'); };
145
- document.getElementById('csvBtn').onclick=()=>{ const esc=v=>{const s=String(v??'');return /[",\\n]/.test(s)?'"'+s.replace(/"/g,'""')+'"':s;}; const cols=DATA.cols.map(c=>c.key); const csv=[cols.map(esc).join(',')].concat(rows().map(r=>cols.map(c=>esc(r[c])).join(','))).join('\\n'); const a=document.createElement('a'); a.href=URL.createObjectURL(new Blob([csv],{type:'text/csv'})); a.download='report.csv'; a.click(); };
165
+ document.getElementById('csvBtn').onclick=()=>{ const esc=v=>{let s=String(v??''); if(typeof v!=='number'&&/^[=+\\-@\\t\\r]/.test(s)&&!/^[+-]?(\\d+\\.?\\d*|\\.\\d+)(e[+-]?\\d+)?$/i.test(s))s="'"+s; return /[",\\n\\r]/.test(s)?'"'+s.replace(/"/g,'""')+'"':s;}; const cols=DATA.cols.map(c=>c.key); const csv=[cols.map(esc).join(',')].concat(rows().map(r=>cols.map(c=>esc(r[c])).join(','))).join('\\n'); const a=document.createElement('a'); a.href=URL.createObjectURL(new Blob([csv],{type:'text/csv'})); a.download='report.csv'; a.click(); };
146
166
  ${theme !== 'auto' ? `document.documentElement.setAttribute('data-theme', ${JSON.stringify(theme)});` : ''}
147
167
  render();
148
168
  </script>
149
169
  </body></html>`;
150
170
  }
151
171
  const DEFAULT_CHROME = '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome';
172
+ /**
173
+ * Content security policy put ahead of the HTML a PDF is printed from: inline
174
+ * styles and data: images and fonts only, so the page fetches nothing (no
175
+ * network URL, no other file:// path, no frame).
176
+ */
177
+ export const PDF_CSP = "default-src 'none'; style-src 'unsafe-inline'; img-src data:; font-src data:";
178
+ /**
179
+ * Prepare HTML for PDF printing: one doctype, then a charset and the
180
+ * {@link PDF_CSP} policy, then the caller's document. Pure + exported for tests.
181
+ */
182
+ export function preparePdfHtml(html) {
183
+ const rest = html.replace(/^\uFEFF?\s*<!DOCTYPE[^>]*>/i, '');
184
+ return `<!DOCTYPE html><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="${PDF_CSP}">${rest}`;
185
+ }
152
186
  /**
153
187
  * Build the headless-Chrome argv for PDF rendering. Pure + exported for tests.
154
188
  * The `--user-data-dir` MUST be an isolated throwaway directory, never the
155
- * user's live profile.
189
+ * user's live profile. Scripts are off, and every request goes to a proxy on
190
+ * a closed local port (loopback included), so the page reaches no host.
156
191
  */
157
192
  export function buildPdfArgs(htmlPath, pdfPath, userDataDir) {
158
193
  return [
@@ -161,6 +196,9 @@ export function buildPdfArgs(htmlPath, pdfPath, userDataDir) {
161
196
  `--user-data-dir=${userDataDir}`,
162
197
  '--no-first-run',
163
198
  '--no-default-browser-check',
199
+ '--blink-settings=scriptEnabled=false',
200
+ '--proxy-server=127.0.0.1:9',
201
+ '--proxy-bypass-list=<-loopback>',
164
202
  `--print-to-pdf=${pdfPath}`,
165
203
  '--no-pdf-header-footer',
166
204
  `file://${htmlPath}`,
@@ -168,26 +206,38 @@ export function buildPdfArgs(htmlPath, pdfPath, userDataDir) {
168
206
  }
169
207
  /**
170
208
  * Render `html` to a PDF at `pdfPath` via an isolated headless Chrome. Throws
171
- * if the binary is missing or the render times out.
209
+ * if the binary is missing or the render times out. The page prints with
210
+ * scripts off, behind {@link PDF_CSP} and with no network route.
172
211
  */
173
212
  export async function renderPdf(html, pdfPath, opts = {}) {
174
213
  const { writeFileSync } = await import('node:fs');
175
214
  const work = mkdtempSync(join(tmpdir(), 'wl-report-'));
176
215
  const htmlPath = join(work, 'report.html');
177
216
  const profileDir = join(work, 'chrome-profile'); // throwaway — NEVER the live profile
178
- writeFileSync(htmlPath, html);
217
+ writeFileSync(htmlPath, preparePdfHtml(html));
179
218
  const args = buildPdfArgs(htmlPath, pdfPath, profileDir);
180
219
  await pExecFile(opts.chromeBinary ?? DEFAULT_CHROME, args, { timeout: opts.timeoutMs ?? 90_000 });
181
220
  return pdfPath;
182
221
  }
222
+ /**
223
+ * Refuse a basename that is not a plain file name, so every output path stays
224
+ * inside `outDir` (`../x`, `a/b`, `a\b`, `.`, `..` and `''` throw).
225
+ */
226
+ function plainBasename(base) {
227
+ if (!base || base === '.' || base === '..' || /[\\/\0]/.test(base)) {
228
+ throw new TypeError(`exportReport: basename must be a plain file name, got ${JSON.stringify(base)}`);
229
+ }
230
+ return base;
231
+ }
183
232
  /**
184
233
  * Write CSV + HTML for a dataset (always) and a PDF (best-effort, when a Chrome
185
- * binary is available). Returns the paths that were written.
234
+ * binary is available). Returns the paths that were written. Throws a
235
+ * TypeError before writing anything when `basename` is not a plain file name.
186
236
  */
187
237
  export async function exportReport(ds, outDir, opts = {}) {
238
+ const base = plainBasename(opts.basename ?? 'report');
188
239
  const { mkdirSync, writeFileSync } = await import('node:fs');
189
240
  mkdirSync(outDir, { recursive: true });
190
- const base = opts.basename ?? 'report';
191
241
  const csv = join(outDir, `${base}.csv`);
192
242
  const html = join(outDir, `${base}.html`);
193
243
  writeFileSync(csv, toCsv(ds));
@@ -1 +1 @@
1
- {"version":3,"file":"report-export.js","sourceRoot":"","sources":["../../../src/cli/export/report-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAWtC,0EAA0E;AAC1E,MAAM,UAAU,QAAQ,CAAC,KAAsB;IAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,KAAK,CAAC,EAAiB;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;AACnD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,MAAM,CAAC,EAAiB;IACtC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;SAC9F,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,qEAAqE,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC;;;;;;;;;;;;MAY5F,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC;EACxB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;oBAClD,IAAI;EACtB,IAAI;;eAES,CAAC;AAChB,CAAC;AAwBD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAiB,EAAE,OAA2B,EAAE;IAChF,MAAM,KAAK,GAAiB,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG;QACvB,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;KACrB,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,KAAK;SACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;SACtG,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;IAEnC,OAAO;;SAEA,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aA8BhB,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;;qBAGxF,SAAS;;;;;;;;eAQf,QAAQ;;;;;;;;;;;;;;;;;EAiBrB,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;;;eAG3F,CAAC;AAChB,CAAC;AAUD,MAAM,cAAc,GAAG,8DAA8D,CAAC;AAEtF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAe,EAAE,WAAmB;IACjF,OAAO;QACL,gBAAgB;QAChB,eAAe;QACf,mBAAmB,WAAW,EAAE;QAChC,gBAAgB;QAChB,4BAA4B;QAC5B,kBAAkB,OAAO,EAAE;QAC3B,wBAAwB;QACxB,UAAU,QAAQ,EAAE;KACrB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,OAAe,EAAE,OAAmB,EAAE;IAClF,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,qCAAqC;IACtF,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,SAAS,CAAC,IAAI,CAAC,YAAY,IAAI,cAAc,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;IAClG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAiB,EACjB,MAAc,EACd,OAAsG,EAAE;IAExG,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7D,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC1C,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,+DAA+D;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAsE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAChG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,CAAC;QACpD,aAAa,CAAC,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvG,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
1
+ {"version":3,"file":"report-export.js","sourceRoot":"","sources":["../../../src/cli/export/report-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAWtC,yFAAyF;AACzF,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,gFAAgF;AAChF,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAE7D;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAsB;IAC7C,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IAC5F,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,KAAK,CAAC,EAAiB;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;AACnD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,MAAM,CAAC,EAAiB;IACtC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;SAC9F,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,qEAAqE,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC;;;;;;;;;;;;MAY5F,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC;EACxB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;oBAClD,IAAI;EACtB,IAAI;;eAES,CAAC;AAChB,CAAC;AAwBD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAiB,EAAE,OAA2B,EAAE;IAChF,MAAM,KAAK,GAAiB,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG;QACvB,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;KACrB,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,KAAK;SACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;SACtG,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;IAEnC,OAAO;;SAEA,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aA8BhB,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;;qBAGxF,SAAS;;;;;;;;eAQf,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;EAwBrB,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;;;eAG3F,CAAC;AAChB,CAAC;AAUD,MAAM,cAAc,GAAG,8DAA8D,CAAC;AAEtF;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,8EAA8E,CAAC;AAEtG;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;IAC7D,OAAO,4FAA4F,OAAO,KAAK,IAAI,EAAE,CAAC;AACxH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAe,EAAE,WAAmB;IACjF,OAAO;QACL,gBAAgB;QAChB,eAAe;QACf,mBAAmB,WAAW,EAAE;QAChC,gBAAgB;QAChB,4BAA4B;QAC5B,sCAAsC;QACtC,4BAA4B;QAC5B,iCAAiC;QACjC,kBAAkB,OAAO,EAAE;QAC3B,wBAAwB;QACxB,UAAU,QAAQ,EAAE;KACrB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,OAAe,EAAE,OAAmB,EAAE;IAClF,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,qCAAqC;IACtF,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,SAAS,CAAC,IAAI,CAAC,YAAY,IAAI,cAAc,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;IAClG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,SAAS,CAAC,yDAAyD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAiB,EACjB,MAAc,EACd,OAAsG,EAAE;IAExG,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC;IACtD,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7D,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC1C,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,+DAA+D;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAsE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAChG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,CAAC;QACpD,aAAa,CAAC,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvG,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
package/dist/index.d.ts CHANGED
@@ -2,9 +2,10 @@
2
2
  * Wunderland (library-first entrypoint).
3
3
  *
4
4
  * This package intentionally exposes a small, ergonomic API from the root
5
- * import (`wunderland`). Advanced modules remain available under
6
- * `wunderland/advanced/*`, and the HTTP/server helpers live under
7
- * `wunderland/api`.
5
+ * import (`wunderland`). Lower-level modules are published as subpaths:
6
+ * `wunderland/security`, `wunderland/tools`, `wunderland/core`,
7
+ * `wunderland/seed`, `wunderland/rag`, `wunderland/jobs` and
8
+ * `wunderland/discovery`. The HTTP/server helpers live under `wunderland/api`.
8
9
  *
9
10
  * @module wunderland
10
11
  */
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA;;;;;;;;;GASG;AAEH,cAAc,mBAAmB,CAAC;AAOlC,eAAO,MAAM,OAAO,QAAc,CAAC;AACnC,eAAO,MAAM,YAAY,QAAW,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA;;;;;;;;;;GAUG;AAEH,cAAc,mBAAmB,CAAC;AAOlC,eAAO,MAAM,OAAO,QAAc,CAAC;AACnC,eAAO,MAAM,YAAY,QAAW,CAAC"}
package/dist/index.js CHANGED
@@ -3,9 +3,10 @@
3
3
  * Wunderland (library-first entrypoint).
4
4
  *
5
5
  * This package intentionally exposes a small, ergonomic API from the root
6
- * import (`wunderland`). Advanced modules remain available under
7
- * `wunderland/advanced/*`, and the HTTP/server helpers live under
8
- * `wunderland/api`.
6
+ * import (`wunderland`). Lower-level modules are published as subpaths:
7
+ * `wunderland/security`, `wunderland/tools`, `wunderland/core`,
8
+ * `wunderland/seed`, `wunderland/rag`, `wunderland/jobs` and
9
+ * `wunderland/discovery`. The HTTP/server helpers live under `wunderland/api`.
9
10
  *
10
11
  * @module wunderland
11
12
  */
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;GASG;AAEH,cAAc,mBAAmB,CAAC;AAElC,mDAAmD;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAsC,CAAC;AAC5E,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;GAUG;AAEH,cAAc,mBAAmB,CAAC;AAElC,mDAAmD;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAsC,CAAC;AAC5E,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC"}
@@ -8,4 +8,8 @@ export { createWunderlandTools, getToolAvailability, WUNDERLAND_TOOL_IDS, } from
8
8
  export type { ToolRegistryConfig } from '../runtime/tools/ToolRegistry.js';
9
9
  export { createMemoryReadTool } from '../runtime/tools/MemoryReadTool.js';
10
10
  export type { MemoryReadFn, MemoryReadItem, MemoryReadNotFound, MemoryReadResult, } from '../runtime/tools/MemoryReadTool.js';
11
+ export { createFeedSearchTool } from '../runtime/tools/FeedSearchTool.js';
12
+ export type { FeedSearchFn, FeedSearchItem, FeedSearchResult, } from '../runtime/tools/FeedSearchTool.js';
13
+ export { describePermissions, getToolAccessProfile, isToolAllowedByProfile, isValidToolAccessProfile, resolveAllowedTools, TOOL_CATEGORY_MAP, } from '../autonomy/social/ToolAccessProfiles.js';
14
+ export type { ToolAccessOverrides, ToolAccessProfile, ToolAccessProfileName, ToolCategory, } from '../autonomy/social/ToolAccessProfiles.js';
11
15
  //# sourceMappingURL=tools.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/public/tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,YAAY,EACV,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oCAAoC,CAAC"}
1
+ {"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/public/tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,YAAY,EACV,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,YAAY,EACV,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,YAAY,GACb,MAAM,0CAA0C,CAAC"}
@@ -6,4 +6,6 @@
6
6
  */
7
7
  export { createWunderlandTools, getToolAvailability, WUNDERLAND_TOOL_IDS, } from '../runtime/tools/ToolRegistry.js';
8
8
  export { createMemoryReadTool } from '../runtime/tools/MemoryReadTool.js';
9
+ export { createFeedSearchTool } from '../runtime/tools/FeedSearchTool.js';
10
+ export { describePermissions, getToolAccessProfile, isToolAllowedByProfile, isValidToolAccessProfile, resolveAllowedTools, TOOL_CATEGORY_MAP, } from '../autonomy/social/ToolAccessProfiles.js';
9
11
  //# sourceMappingURL=tools.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/public/tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC"}
1
+ {"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/public/tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAO1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAM1E,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,0CAA0C,CAAC"}
@@ -12,18 +12,32 @@
12
12
  * @module wunderland/tools/FeedSearchTool
13
13
  */
14
14
  import type { ITool, ToolExecutionContext } from '@framers/agentos';
15
+ /** One public post returned by a {@link FeedSearchFn}. */
15
16
  export type FeedSearchItem = {
17
+ /** The post's text. */
16
18
  text: string;
19
+ /** Relevance score from the host's index; higher ranks first. */
17
20
  score?: number;
21
+ /** Where the post came from, for example a post id or URL. */
18
22
  source?: string;
23
+ /** Anything else the host wants to return with the post. */
19
24
  metadata?: Record<string, unknown>;
20
25
  };
26
+ /** What a {@link FeedSearchFn} returns. */
21
27
  export type FeedSearchResult = {
28
+ /** The matching posts. */
22
29
  items: FeedSearchItem[];
30
+ /** The matches as prompt text. */
23
31
  context: string;
24
32
  };
33
+ /**
34
+ * Feed search supplied by the host, backed by SQL `LIKE`, vector retrieval or
35
+ * any other index.
36
+ */
25
37
  export type FeedSearchFn = (input: {
38
+ /** The agent's search text. */
26
39
  query: string;
40
+ /** Maximum number of items to return. */
27
41
  topK: number;
28
42
  /** Optional: constrain results to a specific thread (root post id or Sol PDA). */
29
43
  threadPostId?: string;
@@ -31,7 +45,14 @@ export type FeedSearchFn = (input: {
31
45
  enclave?: string;
32
46
  /** Optional: only include posts within the last N hours. */
33
47
  sinceHours?: number;
48
+ /** The context of the tool call. */
34
49
  context: ToolExecutionContext;
35
50
  }) => Promise<FeedSearchResult>;
51
+ /**
52
+ * Creates the read-only `feed_search` tool over a host's search.
53
+ *
54
+ * @param search - The host's feed search.
55
+ * @returns The tool, to add to an agent's tool list.
56
+ */
36
57
  export declare function createFeedSearchTool(search: FeedSearchFn): ITool;
37
58
  //# sourceMappingURL=FeedSearchTool.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"FeedSearchTool.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/FeedSearchTool.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,KAAK,EACL,oBAAoB,EAGrB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,oBAAoB,CAAC;CAC/B,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEhC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,KAAK,CAgFhE"}
1
+ {"version":3,"file":"FeedSearchTool.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/FeedSearchTool.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,KAAK,EACL,oBAAoB,EAGrB,MAAM,kBAAkB,CAAC;AAE1B,0DAA0D;AAC1D,MAAM,MAAM,cAAc,GAAG;IAC3B,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,2CAA2C;AAC3C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,0BAA0B;IAC1B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE;IACjC,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,OAAO,EAAE,oBAAoB,CAAC;CAC/B,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEhC;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,KAAK,CAgFhE"}
@@ -12,6 +12,12 @@
12
12
  *
13
13
  * @module wunderland/tools/FeedSearchTool
14
14
  */
15
+ /**
16
+ * Creates the read-only `feed_search` tool over a host's search.
17
+ *
18
+ * @param search - The host's feed search.
19
+ * @returns The tool, to add to an agent's tool list.
20
+ */
15
21
  export function createFeedSearchTool(search) {
16
22
  const inputSchema = {
17
23
  type: 'object',
@@ -1 +1 @@
1
- {"version":3,"file":"FeedSearchTool.js","sourceRoot":"","sources":["../../../src/runtime/tools/FeedSearchTool.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;;;GAYG;AAiCH,MAAM,UAAU,oBAAoB,CAAC,MAAoB;IACvD,MAAM,WAAW,GAAqB;QACpC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,0EAA0E;aACxF;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,uGAAuG;aAC1G;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,2EAA2E;aACzF;YACD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,uDAAuD;aACrE;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,CAAC;gBACV,WAAW,EAAE,yCAAyC;aACvD;SACF;QACD,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,wEAAwE;QACrF,QAAQ,EAAE,QAAQ;QAClB,cAAc,EAAE,KAAK;QACrB,WAAW;QAEX,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,GAAyB;YACpE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC;YAC3G,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3F,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3F,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAE5E,MAAM,aAAa,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtG,MAAM,UAAU,GACd,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC;oBACjD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;oBAC5C,CAAC,CAAC,SAAS,CAAC;gBAEhB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;oBAC1B,KAAK;oBACL,IAAI;oBACJ,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnD,OAAO,EAAE,GAAG;iBACb,CAAC,CAAC;gBACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qBAAqB;oBACrE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE;iBAClF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"FeedSearchTool.js","sourceRoot":"","sources":["../../../src/runtime/tools/FeedSearchTool.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;;;GAYG;AAgDH;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAoB;IACvD,MAAM,WAAW,GAAqB;QACpC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,0EAA0E;aACxF;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,uGAAuG;aAC1G;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,2EAA2E;aACzF;YACD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,uDAAuD;aACrE;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,CAAC;gBACV,WAAW,EAAE,yCAAyC;aACvD;SACF;QACD,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,wEAAwE;QACrF,QAAQ,EAAE,QAAQ;QAClB,cAAc,EAAE,KAAK;QACrB,WAAW;QAEX,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,GAAyB;YACpE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC;YAC3G,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3F,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3F,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAE5E,MAAM,aAAa,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtG,MAAM,UAAU,GACd,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC;oBACjD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;oBAC5C,CAAC,CAAC,SAAS,CAAC;gBAEhB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;oBAC1B,KAAK;oBACL,IAAI;oBACJ,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnD,OAAO,EAAE,GAAG;iBACb,CAAC,CAAC;gBACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qBAAqB;oBACrE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE;iBAClF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
@@ -78,10 +78,11 @@ export interface SafeGuardrailsConfig {
78
78
  /** Enable notifications (default: true for high/critical) */
79
79
  enableNotifications?: boolean;
80
80
  /**
81
- * When true, filesystem-affecting tools are denied unless folder permissions
82
- * have been explicitly configured for the agent via {@link setFolderPermissions}.
81
+ * Filesystem-affecting tools are denied unless folder permissions have been
82
+ * configured for the agent via {@link setFolderPermissions}. Set this to
83
+ * `false` to allow them for an agent with no folder permissions.
83
84
  *
84
- * Default: false (legacy behavior = allow when unconfigured).
85
+ * Default: true.
85
86
  */
86
87
  requireFolderPermissionsForFilesystemTools?: boolean;
87
88
  }
@@ -1 +1 @@
1
- {"version":3,"file":"SafeGuardrails.d.ts","sourceRoot":"","sources":["../../src/security/SafeGuardrails.ts"],"names":[],"mappings":"AACA;;;;;;;;;;GAUG;AAGH,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAK9D,UAAU,KAAK;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,KAAK,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,qCAAqC;IACrC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhC,4CAA4C;IAC5C,WAAW,CAAC,EAAE;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IAEF,2CAA2C;IAC3C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B;;;;;OAKG;IACH,0CAA0C,CAAC,EAAE,OAAO,CAAC;CACtD;AA0DD;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,iBAAiB,CAAsC;IAC/D,OAAO,CAAC,eAAe,CAAiD;IACxE,OAAO,CAAC,WAAW,CAAC,CAAc;IAClC,OAAO,CAAC,mBAAmB,CAAC,CAAsB;IAClD,OAAO,CAAC,MAAM,CAAuB;gBAEzB,MAAM,GAAE,oBAAyB;IAyB7C;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,IAAI;IAI3E;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAI9C;;OAEG;IACH,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,CAAC,YAAY,CAAC,GAAG,IAAI;IAIzF;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAIzE;;;;OAIG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQxC;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI;IAc5D;;;OAGG;IACG,uBAAuB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA+FpF;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAsCxB;;;;;;;;;OASG;IACH,OAAO,CAAC,4BAA4B;IAqCpC;;OAEG;IACH,OAAO,CAAC,YAAY;IA0CpB;;OAEG;IACH,OAAO,CAAC,cAAc;IA+CtB;;OAEG;YACW,YAAY;IAU1B;;OAEG;YACW,eAAe;IAU7B;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC;QACxF,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAChC,CAAC;CAyBH"}
1
+ {"version":3,"file":"SafeGuardrails.d.ts","sourceRoot":"","sources":["../../src/security/SafeGuardrails.ts"],"names":[],"mappings":"AACA;;;;;;;;;;GAUG;AAGH,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAK9D,UAAU,KAAK;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,KAAK,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,qCAAqC;IACrC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhC,4CAA4C;IAC5C,WAAW,CAAC,EAAE;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IAEF,2CAA2C;IAC3C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B;;;;;;OAMG;IACH,0CAA0C,CAAC,EAAE,OAAO,CAAC;CACtD;AA0DD;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,iBAAiB,CAAsC;IAC/D,OAAO,CAAC,eAAe,CAAiD;IACxE,OAAO,CAAC,WAAW,CAAC,CAAc;IAClC,OAAO,CAAC,mBAAmB,CAAC,CAAsB;IAClD,OAAO,CAAC,MAAM,CAAuB;gBAEzB,MAAM,GAAE,oBAAyB;IA0B7C;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,IAAI;IAI3E;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAI9C;;OAEG;IACH,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,CAAC,YAAY,CAAC,GAAG,IAAI;IAIzF;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAIzE;;;;OAIG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQxC;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI;IAc5D;;;OAGG;IACG,uBAAuB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA8FpF;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAsCxB;;;;;;;;;OASG;IACH,OAAO,CAAC,4BAA4B;IAqCpC;;OAEG;IACH,OAAO,CAAC,YAAY;IA0CpB;;OAEG;IACH,OAAO,CAAC,cAAc;IA+CtB;;OAEG;YACW,YAAY;IAU1B;;OAEG;YACW,eAAe;IAU7B;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC;QACxF,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAChC,CAAC;CAyBH"}
@@ -82,6 +82,7 @@ export class SafeGuardrails {
82
82
  enableAuditLogging: true,
83
83
  enableNotifications: true,
84
84
  ...config,
85
+ requireFolderPermissionsForFilesystemTools: config.requireFolderPermissionsForFilesystemTools ?? true,
85
86
  };
86
87
  // Initialize audit logger
87
88
  if (this.config.enableAuditLogging) {
@@ -165,7 +166,6 @@ export class SafeGuardrails {
165
166
  // 2. Get agent's folder permissions
166
167
  const folderConfig = this.folderPermissions.get(request.agentId);
167
168
  if (!folderConfig) {
168
- // Legacy behavior: allow by default when unconfigured.
169
169
  if (this.config.requireFolderPermissionsForFilesystemTools) {
170
170
  return {
171
171
  allowed: false,
@@ -1 +1 @@
1
- {"version":3,"file":"SafeGuardrails.js","sourceRoot":"","sources":["../../src/security/SafeGuardrails.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,WAAW,GAGZ,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAuF/D;;;GAGG;AACH,MAAM,mBAAmB,GAA6B;IACpD,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;IAC5C,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC;IAC5D,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC;IAC5C,uEAAuE;IACvE,aAAa,EAAE,CAAC,KAAK,CAAC;IAEtB,kBAAkB;IAClB,SAAS,EAAE,CAAC,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,CAAC;IACjE,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;IAChD,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;IACjD,gBAAgB,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;IAC/C,kBAAkB,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;IACjD,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;IAC9C,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;CAC/C,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,WAAW;IACX,YAAY;IACZ,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,eAAe;IACf,WAAW;IACX,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,wBAAwB,GAAa;IACzC,WAAW;IACX,aAAa;IACb,WAAW;IACX,qBAAqB;IACrB,YAAY;IACZ,aAAa;IACb,aAAa;IACb,cAAc;IACd,UAAU;IACV,UAAU;CACX,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,cAAc;IACjB,iBAAiB,CAAsC;IACvD,eAAe,CAAiD;IAChE,WAAW,CAAe;IAC1B,mBAAmB,CAAuB;IAC1C,MAAM,CAAuB;IAErC,YAAY,SAA+B,EAAE;QAC3C,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG;YACZ,kBAAkB,EAAE,IAAI;YACxB,mBAAmB,EAAE,IAAI;YACzB,GAAG,MAAM;SACV,CAAC;QAEF,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACnC,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC;gBACjC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;aACtC,CAAC,CAAC;QACL,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,IAAI,CAAC,mBAAmB,GAAG,IAAI,mBAAmB,CAAC;gBACjD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE;gBAChD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAe,EAAE,MAA8B;QAClE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,OAAe,EAAE,WAA8C;QAChF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,QAAgB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;YAC/C,IAAI,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,OAAe,EAAE,IAAsB;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,EAAE,CAAC;YACb,sEAAsE;YACtE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE;gBAClC,aAAa,EAAE,MAAM;gBACrB,eAAe,EAAE,IAAI;gBACrB,KAAK,EAAE,CAAC,IAAI,CAAC;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,uBAAuB,CAAC,OAA0B;QACtD,8CAA8C;QAC9C,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,yCAAyC;YACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,oCAAoC;QACpC,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,uDAAuD;YACvD,IAAI,IAAI,CAAC,MAAM,CAAC,0CAA0C,EAAE,CAAC;gBAC3D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,oEAAoE,OAAO,CAAC,OAAO,GAAG;oBAC9F,UAAU,EAAE;wBACV;4BACE,SAAS,EAAE,IAAI,IAAI,EAAE;4BACrB,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,SAAS,EAAE,OAAO,CAAC,QAAQ;4BAC3B,aAAa,EAAE,SAAS;4BACxB,MAAM,EAAE,2CAA2C;4BACnD,QAAQ,EAAE,MAAM;yBACjB;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,uCAAuC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,iDAAiD;YACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,8CAA8C;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAElE,uCAAuC;QACvC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAElE,wBAAwB;QACxB,MAAM,UAAU,GAA0B,EAAE,CAAC;QAE7C,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;YAErF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,qBAAqB;gBACrB,MAAM,SAAS,GAAwB;oBACrC,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS,EAAE,OAAO,CAAC,QAAQ;oBAC3B,aAAa,EAAE,QAAQ;oBACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,eAAe;oBACxC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC;iBACnE,CAAC;gBAEF,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAE3B,gBAAgB;gBAChB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBACrC,CAAC;gBAED,mCAAmC;gBACnC,IACE,IAAI,CAAC,mBAAmB;oBACxB,CAAC,SAAS,CAAC,QAAQ,KAAK,MAAM,IAAI,SAAS,CAAC,QAAQ,KAAK,UAAU,CAAC,EACpE,CAAC;oBACD,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,yBAAyB,cAAc,CAAC,MAAM,EAAE;gBACxD,UAAU;aACX,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,MAAc;QACrC,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,MAAc,EACd,IAA6B,EAC7B,gBAAyB;QAEzB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,IAAI,MAAM,KAAK,eAAe,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,cAAc,GAAG,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,EAAE;YAC7E,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAElB,MAAM,UAAU,GAAG,KAAK;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACnD,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEL,cAAc;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;OASG;IACK,4BAA4B,CAAC,OAAe;QAClD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,4BAA4B;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEpC,0BAA0B;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAEhG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAExB,4CAA4C;YAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,iCAAiC;gBACjC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBACxD,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBAEhC,aAAa;oBACb,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAE5C,gCAAgC;oBAChC,IACE,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC;wBAC7B,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC;wBAC9B,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC;wBAC9B,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,EAC/B,CAAC;wBACD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,MAAc,EAAE,IAA6B;QAChE,kBAAkB;QAClB,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YACxF,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,mBAAmB;QACnB,IACE,MAAM,KAAK,YAAY;YACvB,MAAM,KAAK,aAAa;YACxB,MAAM,KAAK,aAAa;YACxB,MAAM,KAAK,gBAAgB;YAC3B,MAAM,KAAK,kBAAkB,EAC7B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,sDAAsD;QACtD,IAAI,MAAM,KAAK,eAAe,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAE9C,mBAAmB;YACnB,IACE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBACrB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBACrB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBACrB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACxB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACxB,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;gBACvB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,cAAc;cAChC,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,qCAAqC;YACrC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,yCAAyC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,QAAgB,EAChB,SAA2B,EAC3B,MAAc;QAEd,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAEzC,kCAAkC;QAClC,IACE,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;YAC5B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,SAAS,KAAK,GAAG;YACjB,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC5B,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC5B,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,uCAAuC;QACvC,IACE,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;YAC5B,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;YAC5B,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;YAC5B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1B,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1B,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC;YACjC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC7B,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,4DAA4D;QAC5D,IAAI,SAAS,KAAK,OAAO,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,2BAA2B;QAC3B,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,uBAAuB;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,SAA8B;QACvD,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAE9B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAAC,SAA8B;QAC1D,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAAE,OAAO;QAEtC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,SAAsC;QAK7E,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAClD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;YACxD,OAAO;YACP,SAAS,EAAE,SAAS,EAAE,KAAK;YAC3B,OAAO,EAAE,SAAS,EAAE,GAAG;SACxB,CAAC,CAAC;QAEH,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,UAAU;YACV,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}
1
+ {"version":3,"file":"SafeGuardrails.js","sourceRoot":"","sources":["../../src/security/SafeGuardrails.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,WAAW,GAGZ,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAwF/D;;;GAGG;AACH,MAAM,mBAAmB,GAA6B;IACpD,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;IAC5C,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC;IAC5D,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC;IAC5C,uEAAuE;IACvE,aAAa,EAAE,CAAC,KAAK,CAAC;IAEtB,kBAAkB;IAClB,SAAS,EAAE,CAAC,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,CAAC;IACjE,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;IAChD,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;IACjD,gBAAgB,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;IAC/C,kBAAkB,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;IACjD,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;IAC9C,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;CAC/C,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,WAAW;IACX,YAAY;IACZ,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,eAAe;IACf,WAAW;IACX,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,wBAAwB,GAAa;IACzC,WAAW;IACX,aAAa;IACb,WAAW;IACX,qBAAqB;IACrB,YAAY;IACZ,aAAa;IACb,aAAa;IACb,cAAc;IACd,UAAU;IACV,UAAU;CACX,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,cAAc;IACjB,iBAAiB,CAAsC;IACvD,eAAe,CAAiD;IAChE,WAAW,CAAe;IAC1B,mBAAmB,CAAuB;IAC1C,MAAM,CAAuB;IAErC,YAAY,SAA+B,EAAE;QAC3C,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG;YACZ,kBAAkB,EAAE,IAAI;YACxB,mBAAmB,EAAE,IAAI;YACzB,GAAG,MAAM;YACT,0CAA0C,EAAE,MAAM,CAAC,0CAA0C,IAAI,IAAI;SACtG,CAAC;QAEF,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACnC,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC;gBACjC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;aACtC,CAAC,CAAC;QACL,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,IAAI,CAAC,mBAAmB,GAAG,IAAI,mBAAmB,CAAC;gBACjD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE;gBAChD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAe,EAAE,MAA8B;QAClE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,OAAe,EAAE,WAA8C;QAChF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,QAAgB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;YAC/C,IAAI,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,OAAe,EAAE,IAAsB;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,EAAE,CAAC;YACb,sEAAsE;YACtE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE;gBAClC,aAAa,EAAE,MAAM;gBACrB,eAAe,EAAE,IAAI;gBACrB,KAAK,EAAE,CAAC,IAAI,CAAC;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,uBAAuB,CAAC,OAA0B;QACtD,8CAA8C;QAC9C,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,yCAAyC;YACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,oCAAoC;QACpC,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,MAAM,CAAC,0CAA0C,EAAE,CAAC;gBAC3D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,oEAAoE,OAAO,CAAC,OAAO,GAAG;oBAC9F,UAAU,EAAE;wBACV;4BACE,SAAS,EAAE,IAAI,IAAI,EAAE;4BACrB,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,SAAS,EAAE,OAAO,CAAC,QAAQ;4BAC3B,aAAa,EAAE,SAAS;4BACxB,MAAM,EAAE,2CAA2C;4BACnD,QAAQ,EAAE,MAAM;yBACjB;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,uCAAuC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,iDAAiD;YACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,8CAA8C;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAElE,uCAAuC;QACvC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAElE,wBAAwB;QACxB,MAAM,UAAU,GAA0B,EAAE,CAAC;QAE7C,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;YAErF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,qBAAqB;gBACrB,MAAM,SAAS,GAAwB;oBACrC,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS,EAAE,OAAO,CAAC,QAAQ;oBAC3B,aAAa,EAAE,QAAQ;oBACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,eAAe;oBACxC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC;iBACnE,CAAC;gBAEF,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAE3B,gBAAgB;gBAChB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBACrC,CAAC;gBAED,mCAAmC;gBACnC,IACE,IAAI,CAAC,mBAAmB;oBACxB,CAAC,SAAS,CAAC,QAAQ,KAAK,MAAM,IAAI,SAAS,CAAC,QAAQ,KAAK,UAAU,CAAC,EACpE,CAAC;oBACD,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,yBAAyB,cAAc,CAAC,MAAM,EAAE;gBACxD,UAAU;aACX,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,MAAc;QACrC,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,MAAc,EACd,IAA6B,EAC7B,gBAAyB;QAEzB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,IAAI,MAAM,KAAK,eAAe,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,cAAc,GAAG,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,EAAE;YAC7E,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAElB,MAAM,UAAU,GAAG,KAAK;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACnD,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEL,cAAc;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;OASG;IACK,4BAA4B,CAAC,OAAe;QAClD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,4BAA4B;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEpC,0BAA0B;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAEhG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAExB,4CAA4C;YAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,iCAAiC;gBACjC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBACxD,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBAEhC,aAAa;oBACb,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAE5C,gCAAgC;oBAChC,IACE,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC;wBAC7B,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC;wBAC9B,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC;wBAC9B,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,EAC/B,CAAC;wBACD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,MAAc,EAAE,IAA6B;QAChE,kBAAkB;QAClB,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YACxF,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,mBAAmB;QACnB,IACE,MAAM,KAAK,YAAY;YACvB,MAAM,KAAK,aAAa;YACxB,MAAM,KAAK,aAAa;YACxB,MAAM,KAAK,gBAAgB;YAC3B,MAAM,KAAK,kBAAkB,EAC7B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,sDAAsD;QACtD,IAAI,MAAM,KAAK,eAAe,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAE9C,mBAAmB;YACnB,IACE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBACrB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBACrB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBACrB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACxB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACxB,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;gBACvB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,cAAc;cAChC,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,qCAAqC;YACrC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,yCAAyC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,QAAgB,EAChB,SAA2B,EAC3B,MAAc;QAEd,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAEzC,kCAAkC;QAClC,IACE,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;YAC5B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,SAAS,KAAK,GAAG;YACjB,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC5B,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC5B,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,uCAAuC;QACvC,IACE,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;YAC5B,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;YAC5B,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;YAC5B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1B,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1B,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC;YACjC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC7B,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,4DAA4D;QAC5D,IAAI,SAAS,KAAK,OAAO,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,2BAA2B;QAC3B,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,uBAAuB;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,SAA8B;QACvD,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAE9B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAAC,SAA8B;QAC1D,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAAE,OAAO;QAEtC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,SAAsC;QAK7E,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAClD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;YACxD,OAAO;YACP,SAAS,EAAE,SAAS,EAAE,KAAK;YAC3B,OAAO,EAAE,SAAS,EAAE,GAAG;SACxB,CAAC,CAAC;QAEH,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,UAAU;YACV,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}
@@ -7,7 +7,7 @@
7
7
  *
8
8
  * Usage:
9
9
  * ```typescript
10
- * import { createPipelineFromTier, SECURITY_TIERS } from 'wunderland/advanced/security';
10
+ * import { createPipelineFromTier, SECURITY_TIERS } from 'wunderland/security';
11
11
  *
12
12
  * // Quick pipeline creation
13
13
  * const pipeline = createPipelineFromTier('balanced', myAuditorInvoker);
@@ -8,7 +8,7 @@
8
8
  *
9
9
  * Usage:
10
10
  * ```typescript
11
- * import { createPipelineFromTier, SECURITY_TIERS } from 'wunderland/advanced/security';
11
+ * import { createPipelineFromTier, SECURITY_TIERS } from 'wunderland/security';
12
12
  *
13
13
  * // Quick pipeline creation
14
14
  * const pipeline = createPipelineFromTier('balanced', myAuditorInvoker);
@@ -9,6 +9,9 @@ import { type IntentChainEntry, type SignedAgentOutput } from '../types/core-typ
9
9
  import { type OutputSigningConfig, type SigningContext } from './types.js';
10
10
  /**
11
11
  * Intent chain tracker for maintaining audit trail.
12
+ *
13
+ * The chain is private: entries are copied on the way in and on the way out,
14
+ * so nothing a caller holds can rewrite a recorded step.
12
15
  */
13
16
  export declare class IntentChainTracker {
14
17
  private entries;
@@ -16,10 +19,12 @@ export declare class IntentChainTracker {
16
19
  constructor(maxEntries?: number);
17
20
  /**
18
21
  * Adds an entry to the intent chain.
22
+ *
23
+ * @returns A copy of the recorded entry.
19
24
  */
20
25
  addEntry(entry: Omit<IntentChainEntry, 'stepId' | 'timestamp'>): IntentChainEntry;
21
26
  /**
22
- * Gets all entries in the chain.
27
+ * Gets a copy of all entries in the chain.
23
28
  */
24
29
  getEntries(): readonly IntentChainEntry[];
25
30
  /**
@@ -27,7 +32,7 @@ export declare class IntentChainTracker {
27
32
  */
28
33
  clear(): void;
29
34
  /**
30
- * Gets the last N entries.
35
+ * Gets a copy of the last N entries.
31
36
  */
32
37
  getLastEntries(n: number): IntentChainEntry[];
33
38
  /**
@@ -1 +1 @@
1
- {"version":3,"file":"SignedOutputVerifier.d.ts","sourceRoot":"","sources":["../../src/security/SignedOutputVerifier.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAIH,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AAuEpB;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,UAAU,SAAM;IAI5B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,gBAAgB;IAiBjF;;OAEG;IACH,UAAU,IAAI,SAAS,gBAAgB,EAAE;IAIzC;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,gBAAgB,EAAE;IAI7C;;OAEG;IACH,gBAAgB,IAAI,OAAO;IAI3B;;OAEG;IACH,mBAAmB,IAAI,MAAM,EAAE;CAShC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,SAAS,CAAuB;gBAE5B,MAAM,GAAE,OAAO,CAAC,mBAAmB,CAAM;IAOrD;;;OAGG;IACH,OAAO,CAAC,YAAY;IAmBpB;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;IAKnC;;;;;;OAMG;IACH,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM;IAOrC;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAmB3D;;OAEG;IACH,IAAI,CACF,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,SAAS,gBAAgB,EAAE,EACxC,OAAO,EAAE,cAAc,GACtB,iBAAiB;IAwCpB;;;;OAIG;IACH,MAAM,CAAC,YAAY,EAAE,iBAAiB,GAAG,OAAO;IA+ChD;;;OAGG;IACH,0BAA0B,CAAC,YAAY,EAAE,iBAAiB,GAAG,gBAAgB,EAAE,GAAG,IAAI;IAOtF;;OAEG;IACH,oBAAoB,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG;QACxD,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB;IA6BD;;;OAGG;IACH,wBAAwB,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG;QAC5D,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB;IAuCD;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI;IAQzD;;OAEG;IACH,SAAS,IAAI,IAAI,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,GAAG;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE;CAMxF"}
1
+ {"version":3,"file":"SignedOutputVerifier.d.ts","sourceRoot":"","sources":["../../src/security/SignedOutputVerifier.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAIH,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AAyGpB;;;;;GAKG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,UAAU,SAAM;IAI5B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,gBAAgB;IAiBjF;;OAEG;IACH,UAAU,IAAI,SAAS,gBAAgB,EAAE;IAIzC;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,gBAAgB,EAAE;IAI7C;;OAEG;IACH,gBAAgB,IAAI,OAAO;IAI3B;;OAEG;IACH,mBAAmB,IAAI,MAAM,EAAE;CAShC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,SAAS,CAAuB;gBAE5B,MAAM,GAAE,OAAO,CAAC,mBAAmB,CAAM;IAOrD;;;OAGG;IACH,OAAO,CAAC,YAAY;IAmBpB;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;IAKnC;;;;;;OAMG;IACH,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM;IAOrC;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAmB3D;;OAEG;IACH,IAAI,CACF,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,SAAS,gBAAgB,EAAE,EACxC,OAAO,EAAE,cAAc,GACtB,iBAAiB;IAwCpB;;;;OAIG;IACH,MAAM,CAAC,YAAY,EAAE,iBAAiB,GAAG,OAAO;IA+ChD;;;OAGG;IACH,0BAA0B,CAAC,YAAY,EAAE,iBAAiB,GAAG,gBAAgB,EAAE,GAAG,IAAI;IAOtF;;OAEG;IACH,oBAAoB,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG;QACxD,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB;IA6BD;;;OAGG;IACH,wBAAwB,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG;QAC5D,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB;IAuCD;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI;IAQzD;;OAEG;IACH,SAAS,IAAI,IAAI,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,GAAG;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE;CAMxF"}
@@ -76,8 +76,46 @@ const DEFAULT_SIGNING_CONFIG = {
76
76
  includeIntentChain: true,
77
77
  maxIntentChainEntries: 100,
78
78
  };
79
+ /**
80
+ * Deep copy of an intent-chain value: Dates, arrays and plain objects are
81
+ * copied, and anything else (a function, a class instance) is kept by reference.
82
+ * Keys are defined rather than assigned so a `__proto__` key stays data, and
83
+ * `seen` keeps a circular value from recursing forever.
84
+ */
85
+ function copyChainValue(value, seen = new WeakMap()) {
86
+ if (value === null || typeof value !== 'object')
87
+ return value;
88
+ if (value instanceof Date)
89
+ return new Date(value.getTime());
90
+ if (seen.has(value))
91
+ return seen.get(value);
92
+ if (Array.isArray(value)) {
93
+ const copy = [];
94
+ seen.set(value, copy);
95
+ for (const item of value)
96
+ copy.push(copyChainValue(item, seen));
97
+ return copy;
98
+ }
99
+ const prototype = Object.getPrototypeOf(value);
100
+ if (prototype !== Object.prototype && prototype !== null)
101
+ return value;
102
+ const copy = Object.create(prototype);
103
+ seen.set(value, copy);
104
+ for (const key of Object.keys(value)) {
105
+ Object.defineProperty(copy, key, {
106
+ value: copyChainValue(value[key], seen),
107
+ enumerable: true,
108
+ writable: true,
109
+ configurable: true,
110
+ });
111
+ }
112
+ return copy;
113
+ }
79
114
  /**
80
115
  * Intent chain tracker for maintaining audit trail.
116
+ *
117
+ * The chain is private: entries are copied on the way in and on the way out,
118
+ * so nothing a caller holds can rewrite a recorded step.
81
119
  */
82
120
  export class IntentChainTracker {
83
121
  entries = [];
@@ -87,25 +125,27 @@ export class IntentChainTracker {
87
125
  }
88
126
  /**
89
127
  * Adds an entry to the intent chain.
128
+ *
129
+ * @returns A copy of the recorded entry.
90
130
  */
91
131
  addEntry(entry) {
92
- const fullEntry = {
132
+ const fullEntry = copyChainValue({
93
133
  stepId: uuidv4(),
94
134
  timestamp: new Date(),
95
135
  ...entry,
96
- };
136
+ });
97
137
  this.entries.push(fullEntry);
98
138
  // Trim if exceeding max
99
139
  if (this.entries.length > this.maxEntries) {
100
140
  this.entries = this.entries.slice(-this.maxEntries);
101
141
  }
102
- return fullEntry;
142
+ return copyChainValue(fullEntry);
103
143
  }
104
144
  /**
105
- * Gets all entries in the chain.
145
+ * Gets a copy of all entries in the chain.
106
146
  */
107
147
  getEntries() {
108
- return this.entries;
148
+ return copyChainValue(this.entries);
109
149
  }
110
150
  /**
111
151
  * Clears the chain.
@@ -114,10 +154,10 @@ export class IntentChainTracker {
114
154
  this.entries = [];
115
155
  }
116
156
  /**
117
- * Gets the last N entries.
157
+ * Gets a copy of the last N entries.
118
158
  */
119
159
  getLastEntries(n) {
120
- return this.entries.slice(-n);
160
+ return copyChainValue(this.entries.slice(-n));
121
161
  }
122
162
  /**
123
163
  * Checks if the chain has any security flags.
@@ -1 +1 @@
1
- {"version":3,"file":"SignedOutputVerifier.js","sourceRoot":"","sources":["../../src/security/SignedOutputVerifier.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACjE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAGN,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGN,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,KAAc,EAAE,OAAO,IAAI,OAAO,EAAU;IACnE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAElC,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACxD,gFAAgF;QAChF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,sEAAsE;QACtE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACzD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACnB,IAAI,CAAC,KAAK,SAAS;oBAAE,SAAS,CAAC,gCAAgC;gBAC/D,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,sBAAsB,GAAwB;IAClD,SAAS,EAAE,QAAQ;IACnB,eAAe,EAAE,2BAA2B;IAC5C,kBAAkB,EAAE,IAAI;IACxB,qBAAqB,EAAE,GAAG;CAC3B,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACrB,OAAO,GAAuB,EAAE,CAAC;IACxB,UAAU,CAAS;IAEpC,YAAY,UAAU,GAAG,GAAG;QAC1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAqD;QAC5D,MAAM,SAAS,GAAqB;YAClC,MAAM,EAAE,MAAM,EAAE;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,GAAG,KAAK;SACT,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE7B,wBAAwB;QACxB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,CAAS;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACvC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACpB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,CAAsB;IACrC,SAAS,GAAkB,IAAI,CAAC;IAExC,YAAY,SAAuC,EAAE;QACnD,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,sBAAsB;YACzB,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,YAAY;QAClB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,wCAAwC;YACxC,OAAO,CAAC,IAAI,CACV,mCAAmC,IAAI,CAAC,MAAM,CAAC,eAAe,2DAA2D,CAC1H,CAAC;YACF,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,IAAqB;QACxB,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,OAAgB;QAC1B,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;aAC1D,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,OAAgB,EAAE,SAAiB;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YACvB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAE3C,wEAAwE;YACxE,+DAA+D;YAC/D,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1D,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;YAEpE,OAAO,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,CACF,OAAgB,EAChB,WAAwC,EACxC,OAAuB;QAEvB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE7B,8CAA8C;QAC9C,IAAI,KAAK,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC1F,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC1D,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAG;YACd,QAAQ;YACR,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAA0B,CAAC;YACzF,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAwB,CAAC;SAC1F,CAAC;QAEF,wBAAwB;QACxB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;aACrE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;aAC/B,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,gDAAgD;QAChD,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;aACvD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;aACjD,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,OAAO;YACL,QAAQ;YACR,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS;YACT,OAAO;YACP,WAAW,EAAE,KAAK;YAClB,SAAS;YACT,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,YAA+B;QACpC,IAAI,CAAC;YACH,mCAAmC;YACnC,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,SAAS,EAAE,YAAY,CAAC,SAAS,YAAY,IAAI;oBAC/C,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE;oBACtC,CAAC,CAAC,YAAY,CAAC,SAAS;gBAC1B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;oBACrC,CAAC,CAAC,YAAY,CAAC,OAAO;oBACtB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAA0B,CAAC;gBACtD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;oBACzC,CAAC,CAAC,YAAY,CAAC,WAAW;oBAC1B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAA8B,CAAC;aAC3D,CAAC;YAEF,iCAAiC;YACjC,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;iBAC7E,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;iBAC/B,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,oFAAoF;YACpF,+DAA+D;YAC/D,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;YACnF,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,EAAE,CAAC;YAEhF,MAAM,cAAc,GAAG,eAAe,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;YAEvE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,+BAA+B;YAC/B,MAAM,wBAAwB,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;iBAC/D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;iBACzE,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,CAAC;YACxF,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,MAAM,EAAE,CAAC;YAErF,OAAO,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,0BAA0B,CAAC,YAA+B;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAkC;QAOrD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAEhC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACvC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/C,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAClE,CAAC;QAED,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,aAAa,EAAE,CAAC,GAAG,OAAO,CAAC;YAC3B,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC;YACvB,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC;YACzB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,wBAAwB,CAAC,KAAkC;QAIzD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,2BAA2B;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YACpD,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,4FAA4F;YAC5F,0EAA0E;YAC1E,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBAC1D,4CAA4C;gBAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACnE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBACvE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,OAAqC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,sCAAsC;QACtC,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO;YACL,GAAG,IAAI,CAAC,MAAM;YACd,eAAe,EAAE,QAAQ,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,EAAE,+BAA+B;SACzF,CAAC;IACJ,CAAC;CACF"}
1
+ {"version":3,"file":"SignedOutputVerifier.js","sourceRoot":"","sources":["../../src/security/SignedOutputVerifier.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACjE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAGN,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGN,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,KAAc,EAAE,OAAO,IAAI,OAAO,EAAU;IACnE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAElC,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACxD,gFAAgF;QAChF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,sEAAsE;QACtE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACzD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACnB,IAAI,CAAC,KAAK,SAAS;oBAAE,SAAS,CAAC,gCAAgC;gBAC/D,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,sBAAsB,GAAwB;IAClD,SAAS,EAAE,QAAQ;IACnB,eAAe,EAAE,2BAA2B;IAC5C,kBAAkB,EAAE,IAAI;IACxB,qBAAqB,EAAE,GAAG;CAC3B,CAAC;AAEF;;;;;GAKG;AACH,SAAS,cAAc,CAAI,KAAQ,EAAE,OAAO,IAAI,OAAO,EAAmB;IACxE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAM,CAAC;IACjE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAM,CAAC;IAEjD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,OAAO,IAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEvE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE;YAC/B,KAAK,EAAE,cAAc,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;YACpE,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IACrB,OAAO,GAAuB,EAAE,CAAC;IACxB,UAAU,CAAS;IAEpC,YAAY,UAAU,GAAG,GAAG;QAC1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,KAAqD;QAC5D,MAAM,SAAS,GAAqB,cAAc,CAAC;YACjD,MAAM,EAAE,MAAM,EAAE;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,GAAG,KAAK;SACT,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE7B,wBAAwB;QACxB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,CAAS;QACtB,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACvC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACpB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,CAAsB;IACrC,SAAS,GAAkB,IAAI,CAAC;IAExC,YAAY,SAAuC,EAAE;QACnD,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,sBAAsB;YACzB,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,YAAY;QAClB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,wCAAwC;YACxC,OAAO,CAAC,IAAI,CACV,mCAAmC,IAAI,CAAC,MAAM,CAAC,eAAe,2DAA2D,CAC1H,CAAC;YACF,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,IAAqB;QACxB,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,OAAgB;QAC1B,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;aAC1D,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,OAAgB,EAAE,SAAiB;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YACvB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAE3C,wEAAwE;YACxE,+DAA+D;YAC/D,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1D,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;YAEpE,OAAO,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,CACF,OAAgB,EAChB,WAAwC,EACxC,OAAuB;QAEvB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE7B,8CAA8C;QAC9C,IAAI,KAAK,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC1F,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC1D,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAG;YACd,QAAQ;YACR,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAA0B,CAAC;YACzF,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAwB,CAAC;SAC1F,CAAC;QAEF,wBAAwB;QACxB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;aACrE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;aAC/B,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,gDAAgD;QAChD,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;aACvD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;aACjD,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,OAAO;YACL,QAAQ;YACR,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS;YACT,OAAO;YACP,WAAW,EAAE,KAAK;YAClB,SAAS;YACT,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,YAA+B;QACpC,IAAI,CAAC;YACH,mCAAmC;YACnC,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,SAAS,EAAE,YAAY,CAAC,SAAS,YAAY,IAAI;oBAC/C,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE;oBACtC,CAAC,CAAC,YAAY,CAAC,SAAS;gBAC1B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;oBACrC,CAAC,CAAC,YAAY,CAAC,OAAO;oBACtB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAA0B,CAAC;gBACtD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;oBACzC,CAAC,CAAC,YAAY,CAAC,WAAW;oBAC1B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAA8B,CAAC;aAC3D,CAAC;YAEF,iCAAiC;YACjC,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;iBAC7E,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;iBAC/B,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,oFAAoF;YACpF,+DAA+D;YAC/D,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;YACnF,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,EAAE,CAAC;YAEhF,MAAM,cAAc,GAAG,eAAe,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;YAEvE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,+BAA+B;YAC/B,MAAM,wBAAwB,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;iBAC/D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;iBACzE,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,CAAC;YACxF,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,MAAM,EAAE,CAAC;YAErF,OAAO,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,0BAA0B,CAAC,YAA+B;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAkC;QAOrD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAEhC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACvC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/C,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAClE,CAAC;QAED,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,aAAa,EAAE,CAAC,GAAG,OAAO,CAAC;YAC3B,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC;YACvB,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC;YACzB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,wBAAwB,CAAC,KAAkC;QAIzD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,2BAA2B;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YACpD,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,4FAA4F;YAC5F,0EAA0E;YAC1E,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBAC1D,4CAA4C;gBAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACnE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBACvE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,OAAqC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,sCAAsC;QACtC,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO;YACL,GAAG,IAAI,CAAC,MAAM;YACd,eAAe,EAAE,QAAQ,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,EAAE,+BAA+B;SACzF,CAAC;IACJ,CAAC;CACF"}
@@ -13,6 +13,8 @@ export { AuditLogger, type AuditLoggerConfig, type ViolationFilter, type Violati
13
13
  export { type FolderAccessRule, type FolderPermissionConfig, type FolderPermissionResult, type ValidationResult, checkFolderAccess, createDefaultFolderConfig, validateFolderConfig, isContainedPath, validatePluginPath, } from './FolderPermissions.js';
14
14
  export { ToolLoopDetector, type ToolLoopDetectorConfig, type LoopDetectionResult, } from './ToolLoopDetector.js';
15
15
  export { CitizenModeGuardrail, type CitizenGuardrailAction, type CitizenGuardrailResult, } from './CitizenModeGuardrail.js';
16
+ export { ContextFirewall } from '../autonomy/social/ContextFirewall.js';
17
+ export type { AgentMode, ContextFirewallConfig } from '../autonomy/social/types.js';
16
18
  export * from './authorization-types.js';
17
19
  export { StepUpAuthorizationManager } from './StepUpAuthorizationManager.js';
18
20
  //# sourceMappingURL=index.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AACA;;;GAGG;AAGH,cAAc,YAAY,CAAC;AAG3B,OAAO,EACL,gBAAgB,EAChB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAGhF,OAAO,EACL,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,cAAc,GACpB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,GACzB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC;AAGnC,cAAc,0BAA0B,CAAC;AAGzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AACA;;;GAGG;AAGH,cAAc,YAAY,CAAC;AAG3B,OAAO,EACL,gBAAgB,EAChB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAGhF,OAAO,EACL,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,cAAc,GACpB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,GACzB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,YAAY,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpF,cAAc,0BAA0B,CAAC;AAGzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC"}
@@ -25,6 +25,8 @@ export { checkFolderAccess, createDefaultFolderConfig, validateFolderConfig, isC
25
25
  export { ToolLoopDetector, } from './ToolLoopDetector.js';
26
26
  // Citizen Mode Guardrail (merged from guardrails/)
27
27
  export { CitizenModeGuardrail, } from './CitizenModeGuardrail.js';
28
+ // The firewall CitizenModeGuardrail's constructor takes
29
+ export { ContextFirewall } from '../autonomy/social/ContextFirewall.js';
28
30
  // Authorization types (merged from authorization/)
29
31
  export * from './authorization-types.js';
30
32
  // Step-Up Authorization Manager (merged from authorization/)
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;GAGG;AAEH,qEAAqE;AACrE,cAAc,YAAY,CAAC;AAE3B,+BAA+B;AAC/B,OAAO,EACL,gBAAgB,GAEjB,MAAM,uBAAuB,CAAC;AAE/B,6BAA6B;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,mCAAmC;AACnC,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAEnC,mBAAmB;AACnB,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,iCAAiC,CAAC;AAEzC,iCAAiC;AACjC,OAAO,EAIL,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,kBAAkB;AAClB,OAAO,EAAE,cAAc,EAA6B,MAAM,qBAAqB,CAAC;AAEhF,gBAAgB;AAChB,OAAO,EACL,WAAW,GAIZ,MAAM,kBAAkB,CAAC;AAE1B,qBAAqB;AACrB,OAAO,EAKL,iBAAiB,EACjB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAEhC,qBAAqB;AACrB,OAAO,EACL,gBAAgB,GAGjB,MAAM,uBAAuB,CAAC;AAE/B,mDAAmD;AACnD,OAAO,EACL,oBAAoB,GAGrB,MAAM,2BAA2B,CAAC;AAEnC,mDAAmD;AACnD,cAAc,0BAA0B,CAAC;AAEzC,6DAA6D;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;GAGG;AAEH,qEAAqE;AACrE,cAAc,YAAY,CAAC;AAE3B,+BAA+B;AAC/B,OAAO,EACL,gBAAgB,GAEjB,MAAM,uBAAuB,CAAC;AAE/B,6BAA6B;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,mCAAmC;AACnC,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAEnC,mBAAmB;AACnB,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,iCAAiC,CAAC;AAEzC,iCAAiC;AACjC,OAAO,EAIL,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,kBAAkB;AAClB,OAAO,EAAE,cAAc,EAA6B,MAAM,qBAAqB,CAAC;AAEhF,gBAAgB;AAChB,OAAO,EACL,WAAW,GAIZ,MAAM,kBAAkB,CAAC;AAE1B,qBAAqB;AACrB,OAAO,EAKL,iBAAiB,EACjB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAEhC,qBAAqB;AACrB,OAAO,EACL,gBAAgB,GAGjB,MAAM,uBAAuB,CAAC;AAE/B,mDAAmD;AACnD,OAAO,EACL,oBAAoB,GAGrB,MAAM,2BAA2B,CAAC;AAEnC,wDAAwD;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAGxE,mDAAmD;AACnD,cAAc,0BAA0B,CAAC;AAEzC,6DAA6D;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "wunderland",
3
- "version": "0.86.1",
3
+ "version": "0.88.0",
4
4
  "description": "Autonomous AI agents you deploy in 30 seconds across any channel. Interactive setup wizard, 37 channel adapters, HEXACO personality and cognitive memory powered by AgentOS, five-tier prompt-injection defense.",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
@@ -37,6 +37,14 @@
37
37
  "./jobs": {
38
38
  "import": "./dist/autonomy/jobs/index.js",
39
39
  "types": "./dist/autonomy/jobs/index.d.ts"
40
+ },
41
+ "./security": {
42
+ "import": "./dist/security/index.js",
43
+ "types": "./dist/security/index.d.ts"
44
+ },
45
+ "./report": {
46
+ "import": "./dist/cli/export/report-export.js",
47
+ "types": "./dist/cli/export/report-export.d.ts"
40
48
  }
41
49
  },
42
50
  "files": [