antigravity-sdk 0.1.2 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5fc78b32cbc7cf1f01aa9dde4e53637d3de9ed140337ed461fde3639b8e73559
-  data.tar.gz: 78a973c5dff6151ccd0485b75556b6e984c980676e9702a044b7df42221824ef
+  metadata.gz: 449edf2b1bf5f2aaa389a0e79b74c6ed93bc5b7623a957068b2bd704b292347b
+  data.tar.gz: c876958eb74ccac96717634b5a0c1d7314e837f2a3695a557d1d19eee4b6d853
 SHA512:
-  metadata.gz: c853db9ef0827378e9c9e37482df51e815814fd257c03b5b0449f322056a3c07c281e3fa57d984cf61abfa773fa9e06b3624f8615ec85de9b6597f11c7c1a593
-  data.tar.gz: 3a5fb1474f5d45351f73321eae75ee1e239bf7e10cf85d5e192fa451b0298a1be38a3609b808420dd7294fb6fa771eb2fe33227b5833d66fbb5e9cb26189955a
+  metadata.gz: 6ccc779048181412d94425b9a9c4901339acfb957e4646b047ce4fe1b96e4d2b4f4b6096c560178920f68b22733a6d424b3d010769e17b592f90bc77d2004220
+  data.tar.gz: e170353f68f1fdbe47ab3c487136be397636a8855223204e72b4d216bd37c7d04592f935d22b207314d9ecd35c95b7ef3741397204005b89eaccdb7564578427

data/lib/antigravity/guards.rb

@@ -0,0 +1,83 @@
+# frozen_string_literal: true
+
+module Antigravity
+  module Guards
+    # Configurable opt-in file protection guard
+    class FileProtection
+      DEFAULT_FILES = [
+        /\.env(\..*)?$/i,
+        /Gemfile(\.lock)?$/i,
+        /config\/secrets\.yml$/i,
+        /config\/database\.yml$/i
+      ].freeze
+
+      attr_reader :protected_files
+
+      def initialize(files: nil, add: [], remove: [])
+        initial_patterns = files ? Array(files) : DEFAULT_FILES
+        patterns = initial_patterns.map { |f| f.is_a?(Regexp) ? f : /#{Regexp.escape(f.to_s)}$/i }
+        patterns += Array(add).map { |f| f.is_a?(Regexp) ? f : /#{Regexp.escape(f.to_s)}$/i }
+        patterns -= Array(remove).map { |f| f.is_a?(Regexp) ? f : /#{Regexp.escape(f.to_s)}$/i }
+        @protected_files = patterns.freeze
+      end
+
+      def call(_tool_name, params)
+        path = extract_path(params)
+        return :allow unless path
+
+        if protected_path?(path)
+          { status: :deny, reason: "FileProtection Guard: Modifications to '#{path}' are restricted." }
+        else
+          :allow
+        end
+      end
+
+      def to_proc
+        method(:call).to_proc
+      end
+
+      private
+
+      def extract_path(params)
+        return nil unless params.is_a?(Hash)
+        params[:path] || params["path"] || params[:file] || params["file"] || params[:target]
+      end
+
+      def protected_path?(path)
+        filename = File.basename(path)
+        @protected_files.any? { |pattern| path =~ pattern || filename =~ pattern }
+      end
+    end
+
+    # Configurable opt-in secret masking filter
+    class SecretMasker
+      DEFAULT_PATTERNS = [
+        /(AIzaSy[A-Za-z0-9_-]{25,45})/,           # Google API Keys
+        /(sk-[A-Za-z0-9]{25,50})/,                # OpenAI API Keys
+        /(ghp_[A-Za-z0-9]{25,45})/,               # GitHub Tokens
+        /(bearer\s+[A-Za-z0-9\._-]{20,})/i       # Bearer Tokens
+      ].freeze
+
+      attr_reader :patterns, :replacement
+
+      def initialize(patterns: nil, replacement: "[REDACTED_SECRET]")
+        @patterns = (patterns ? Array(patterns) : DEFAULT_PATTERNS).freeze
+        @replacement = replacement
+      end
+
+      def call(_tool_name, _params, result)
+        return result unless result.is_a?(String)
+
+        sanitized = result.dup
+        @patterns.each do |pattern|
+          sanitized.gsub!(pattern, @replacement)
+        end
+        sanitized
+      end
+
+      def to_proc
+        method(:call).to_proc
+      end
+    end
+  end
+end

data/lib/antigravity.rb

@@ -5,6 +5,7 @@ require_relative "antigravity/config"
 require_relative "antigravity/message"
 require_relative "antigravity/harness"
 require_relative "antigravity/hooks"
+require_relative "antigravity/guards"
 require_relative "antigravity/sidecar"
 require_relative "antigravity/tool"
 require_relative "antigravity/skill"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: antigravity-sdk
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.3
 platform: ruby
 authors:
 - Riccardo Carlesso
@@ -49,6 +49,7 @@ files:
 - lib/antigravity/agent.rb
 - lib/antigravity/client.rb
 - lib/antigravity/config.rb
+- lib/antigravity/guards.rb
 - lib/antigravity/harness.rb
 - lib/antigravity/hooks.rb
 - lib/antigravity/message.rb