mirror of
https://github.com/KeygraphHQ/shannon.git
synced 2026-08-11 14:00:24 +02:00
ezl-keygraphandGitHub
1ce250d6a5
* feat(worker): record token, cache, and turn usage per agent * feat: replace model tiers with a single SHANNON_AI_MODEL across five providers * feat(cli): rebuild the setup wizard for provider and model selection * docs: document single-model selection and supported providers * feat(worker): use chat completions for OpenAI behind a custom base URL * feat: add SHANNON_AI_OPENAI_FORMAT to pick the wire API for OpenAI gateways * refactor(cli): drop endpoint path hints from the gateway format picker * feat(worker): enable pi in-session provider retry with retry-after backoff * refactor(worker): hand provider error classification to pi and drop the Anthropic ladders * refactor: remove the subscription retry preset and pipeline config section * fix(worker): validate Bedrock credentials with the same live probe as other providers * feat(worker): render the report from structured findings instead of agent-written markdown * fix(worker): dispose the credential probe session on every path * fix(worker): refuse to replace the assembled report with an empty one * refactor(worker): catch post-processing throws across the whole finalization block * revert(worker): drop the report zero-findings guard * docs(worker): correct the retry split and Bedrock credential claims * docs: regenerate llms-full.txt from current sources * feat(cli): build and run the npx flow from a clone * refactor(cli): flatten the setup summary output * feat(cli): reject runs with more than one provider configured * fix(worker): say a rejected bash call never ran * chore(cli): drop grok-4.3 and gpt-5.6-luna from the setup suggestions * feat(worker): capture structured finding locations for SARIF output * fix(worker): enumerate queue confidence so the report inherits it verbatim * feat(worker): give the reporting phase a mode-specific output schema * feat(worker): emit a SARIF 2.1.0 log for exploitative runs * fix(worker): correct SARIF locations and defer fingerprinting to the upload action * fix(worker): drop the confidence suffix from the analysis-mode summary list * feat(worker): give exploit findings a dedicated code location field * feat(worker): carry structured code locations from the vuln queue to the report * fix(worker): join code locations from the vuln queue instead of re-asking agents * fix(worker): spell out the finding_id to category mapping in the tool schema * feat: drop Google/Gemini as a supported AI provider * fix(worker): stop asking the report agent for code locations * docs: correct the provider list and drop the removed rate-limit settings * docs: add provider cyber safeguards and suggested models per provider * docs: document the SARIF output and the report rating thresholds
41 lines
1.1 KiB
JSON
41 lines
1.1 KiB
JSON
{
|
|
"name": "@shannon/worker",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"exports": {
|
|
"./interfaces": "./dist/interfaces/index.js",
|
|
"./types": "./dist/types/index.js",
|
|
"./types/config": "./dist/types/config.js",
|
|
"./types/agents": "./dist/types/agents.js",
|
|
"./pipeline": "./dist/temporal/pipeline.js",
|
|
"./activities": "./dist/temporal/activities.js",
|
|
"./services": "./dist/services/index.js",
|
|
"./config": "./dist/config-parser.js"
|
|
},
|
|
"scripts": {
|
|
"build": "tsc",
|
|
"check": "tsc --noEmit",
|
|
"clean": "rm -rf dist"
|
|
},
|
|
"dependencies": {
|
|
"@earendil-works/pi-agent-core": "^0.82.1",
|
|
"@earendil-works/pi-ai": "^0.82.1",
|
|
"@earendil-works/pi-coding-agent": "^0.82.1",
|
|
"@gotgenes/pi-permission-system": "^10.9.0",
|
|
"@temporalio/activity": "^1.11.0",
|
|
"@temporalio/client": "^1.11.0",
|
|
"@temporalio/worker": "^1.11.0",
|
|
"@temporalio/workflow": "^1.11.0",
|
|
"ajv": "^8.12.0",
|
|
"ajv-formats": "^2.1.1",
|
|
"dotenv": "^16.4.5",
|
|
"js-yaml": "^4.1.0",
|
|
"typebox": "1.1.38",
|
|
"zx": "^8.0.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/js-yaml": "^4.0.9"
|
|
}
|
|
}
|