@agenshield/interceptor 0.1.0

package/installer.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Interceptor Installation
+ *
+ * Install and uninstall runtime interceptors.
+ */
+import type { InterceptorConfig } from './config.js';
+import { AsyncClient } from './client/http-client.js';
+/**
+ * Install all configured interceptors
+ */
+export declare function installInterceptors(configOverrides?: Partial<InterceptorConfig>): void;
+/**
+ * Uninstall all interceptors
+ */
+export declare function uninstallInterceptors(): void;
+/**
+ * Check if interceptors are installed
+ */
+export declare function isInstalled(): boolean;
+/**
+ * Get the broker client
+ */
+export declare function getClient(): AsyncClient | null;
+//# sourceMappingURL=installer.d.ts.map

package/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAOrD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAiBtD;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,eAAe,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAC3C,IAAI,CAwFN;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CA6B5C;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAErC;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,WAAW,GAAG,IAAI,CAE9C"}

package/interceptors/base.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Base Interceptor
+ *
+ * Base class for all interceptors.
+ */
+import type { AsyncClient } from '../client/http-client.js';
+import type { PolicyEvaluator } from '../policy/evaluator.js';
+import type { EventReporter } from '../events/reporter.js';
+export interface BaseInterceptorOptions {
+    client: AsyncClient;
+    policyEvaluator: PolicyEvaluator;
+    eventReporter: EventReporter;
+    failOpen: boolean;
+}
+export declare abstract class BaseInterceptor {
+    protected client: AsyncClient;
+    protected policyEvaluator: PolicyEvaluator;
+    protected eventReporter: EventReporter;
+    protected failOpen: boolean;
+    protected installed: boolean;
+    constructor(options: BaseInterceptorOptions);
+    /**
+     * Install the interceptor
+     */
+    abstract install(): void;
+    /**
+     * Uninstall the interceptor
+     */
+    abstract uninstall(): void;
+    /**
+     * Check if the interceptor is installed
+     */
+    isInstalled(): boolean;
+    /**
+     * Check policy and handle the result
+     */
+    protected checkPolicy(operation: string, target: string): Promise<void>;
+    /**
+     * Log a debug message
+     */
+    protected debug(message: string): void;
+}
+//# sourceMappingURL=base.d.ts.map

package/interceptors/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/interceptors/base.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,WAAW,CAAC;IACpB,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,8BAAsB,eAAe;IACnC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC;IAC9B,SAAS,CAAC,eAAe,EAAE,eAAe,CAAC;IAC3C,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC;IACvC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,SAAS,EAAE,OAAO,CAAS;gBAEzB,OAAO,EAAE,sBAAsB;IAO3C;;OAEG;IACH,QAAQ,CAAC,OAAO,IAAI,IAAI;IAExB;;OAEG;IACH,QAAQ,CAAC,SAAS,IAAI,IAAI;IAE1B;;OAEG;IACH,WAAW,IAAI,OAAO;IAItB;;OAEG;cACa,WAAW,CACzB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IA0ChB;;OAEG;IACH,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAGvC"}

package/interceptors/child-process.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Child Process Interceptor
+ *
+ * Intercepts child_process module calls.
+ */
+import { BaseInterceptor, type BaseInterceptorOptions } from './base.js';
+export declare class ChildProcessInterceptor extends BaseInterceptor {
+    private syncClient;
+    private originalExec;
+    private originalExecSync;
+    private originalSpawn;
+    private originalSpawnSync;
+    private originalExecFile;
+    private originalFork;
+    constructor(options: BaseInterceptorOptions);
+    install(): void;
+    uninstall(): void;
+    private createInterceptedExec;
+    private createInterceptedExecSync;
+    private createInterceptedSpawn;
+    private createInterceptedSpawnSync;
+    private createInterceptedExecFile;
+    private createInterceptedFork;
+}
+//# sourceMappingURL=child-process.d.ts.map

package/interceptors/child-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-process.d.ts","sourceRoot":"","sources":["../../src/interceptors/child-process.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAQzE,qBAAa,uBAAwB,SAAQ,eAAe;IAC1D,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,YAAY,CAAyC;IAC7D,OAAO,CAAC,gBAAgB,CAA6C;IACrE,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,iBAAiB,CAA8C;IACvE,OAAO,CAAC,gBAAgB,CAA6C;IACrE,OAAO,CAAC,YAAY,CAAyC;gBAEjD,OAAO,EAAE,sBAAsB;IAU3C,OAAO,IAAI,IAAI;IAsBf,SAAS,IAAI,IAAI;IAmBjB,OAAO,CAAC,qBAAqB;IAgC7B,OAAO,CAAC,yBAAyB;IAuCjC,OAAO,CAAC,sBAAsB;IAyB9B,OAAO,CAAC,0BAA0B;IAiDlC,OAAO,CAAC,yBAAyB;IAmBjC,OAAO,CAAC,qBAAqB;CAsB9B"}

package/interceptors/fetch.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Fetch Interceptor
+ *
+ * Intercepts global fetch() calls.
+ */
+import { BaseInterceptor, type BaseInterceptorOptions } from './base.js';
+export declare class FetchInterceptor extends BaseInterceptor {
+    private originalFetch;
+    constructor(options: BaseInterceptorOptions);
+    install(): void;
+    uninstall(): void;
+    private interceptedFetch;
+    private isBrokerUrl;
+}
+//# sourceMappingURL=fetch.d.ts.map

package/interceptors/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/interceptors/fetch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAEzE,qBAAa,gBAAiB,SAAQ,eAAe;IACnD,OAAO,CAAC,aAAa,CAA6B;gBAEtC,OAAO,EAAE,sBAAsB;IAI3C,OAAO,IAAI,IAAI;IAYf,SAAS,IAAI,IAAI;YAQH,gBAAgB;IA0F9B,OAAO,CAAC,WAAW;CAWpB"}

package/interceptors/fs.d.ts

@@ -0,0 +1,17 @@
+/**
+ * File System Interceptor
+ *
+ * Intercepts fs module calls.
+ */
+import { BaseInterceptor, type BaseInterceptorOptions } from './base.js';
+export declare class FsInterceptor extends BaseInterceptor {
+    private syncClient;
+    private originals;
+    constructor(options: BaseInterceptorOptions);
+    install(): void;
+    uninstall(): void;
+    private interceptMethod;
+    private interceptSyncMethod;
+    private interceptPromiseMethod;
+}
+//# sourceMappingURL=fs.d.ts.map

package/interceptors/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/interceptors/fs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,WAAW,CAAC;AA2BzE,qBAAa,aAAc,SAAQ,eAAe;IAChD,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,SAAS,CAAoC;gBAEzC,OAAO,EAAE,sBAAsB;IAU3C,OAAO,IAAI,IAAI;IAoCf,SAAS,IAAI,IAAI;IAcjB,OAAO,CAAC,eAAe;IAuCvB,OAAO,CAAC,mBAAmB;IAgD3B,OAAO,CAAC,sBAAsB;CA2B/B"}

package/interceptors/http.d.ts

@@ -0,0 +1,19 @@
+/**
+ * HTTP/HTTPS Interceptor
+ *
+ * Intercepts Node.js http and https module calls.
+ */
+import { BaseInterceptor, type BaseInterceptorOptions } from './base.js';
+export declare class HttpInterceptor extends BaseInterceptor {
+    private originalHttpRequest;
+    private originalHttpGet;
+    private originalHttpsRequest;
+    private originalHttpsGet;
+    constructor(options: BaseInterceptorOptions);
+    install(): void;
+    uninstall(): void;
+    private createInterceptedRequest;
+    private createInterceptedGet;
+    private isBrokerUrl;
+}
+//# sourceMappingURL=http.d.ts.map

package/interceptors/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/interceptors/http.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAQzE,qBAAa,eAAgB,SAAQ,eAAe;IAClD,OAAO,CAAC,mBAAmB,CAAoC;IAC/D,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,oBAAoB,CAAoC;IAChE,OAAO,CAAC,gBAAgB,CAAgC;gBAE5C,OAAO,EAAE,sBAAsB;IAI3C,OAAO,IAAI,IAAI;IAkBf,SAAS,IAAI,IAAI;IAuBjB,OAAO,CAAC,wBAAwB;IA0DhC,OAAO,CAAC,oBAAoB;IAoB5B,OAAO,CAAC,WAAW;CAWpB"}

package/interceptors/websocket.d.ts

@@ -0,0 +1,14 @@
+/**
+ * WebSocket Interceptor
+ *
+ * Intercepts WebSocket connections.
+ */
+import { BaseInterceptor, type BaseInterceptorOptions } from './base.js';
+export declare class WebSocketInterceptor extends BaseInterceptor {
+    private originalWebSocket;
+    constructor(options: BaseInterceptorOptions);
+    install(): void;
+    uninstall(): void;
+    private isBrokerUrl;
+}
+//# sourceMappingURL=websocket.d.ts.map

package/interceptors/websocket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.d.ts","sourceRoot":"","sources":["../../src/interceptors/websocket.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAGzE,qBAAa,oBAAqB,SAAQ,eAAe;IACvD,OAAO,CAAC,iBAAiB,CAAiC;gBAE9C,OAAO,EAAE,sBAAsB;IAI3C,OAAO,IAAI,IAAI;IAiDf,SAAS,IAAI,IAAI;IAQjB,OAAO,CAAC,WAAW;CAWpB"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@agenshield/interceptor",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Node.js runtime interception via ESM loader and CJS preload",
+  "main": "./index.js",
+  "types": "./index.d.ts",
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "types": "./index.d.ts",
+      "import": "./index.js",
+      "default": "./index.js"
+    },
+    "./register": {
+      "types": "./register.d.ts",
+      "import": "./register.js",
+      "default": "./register.js"
+    },
+    "./require": {
+      "types": "./require.d.ts",
+      "require": "./require.cjs",
+      "default": "./require.cjs"
+    }
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@agenshield/ipc": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  }
+}

package/policy/cache.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Policy Cache
+ *
+ * TTL-based cache for policy check results.
+ */
+export interface PolicyCacheOptions {
+    ttl: number;
+    maxSize?: number;
+}
+export declare class PolicyCache {
+    private cache;
+    private ttl;
+    private maxSize;
+    private hits;
+    private misses;
+    constructor(options: PolicyCacheOptions);
+    /**
+     * Get a value from the cache
+     */
+    get<T>(key: string): T | undefined;
+    /**
+     * Set a value in the cache
+     */
+    set<T>(key: string, value: T, ttl?: number): void;
+    /**
+     * Delete a value from the cache
+     */
+    delete(key: string): boolean;
+    /**
+     * Check if a key exists and is not expired
+     */
+    has(key: string): boolean;
+    /**
+     * Clear all entries
+     */
+    clear(): void;
+    /**
+     * Remove expired entries
+     */
+    prune(): number;
+    /**
+     * Get cache statistics
+     */
+    getStats(): {
+        size: number;
+        hits: number;
+        misses: number;
+    };
+}
+//# sourceMappingURL=cache.d.ts.map

package/policy/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/policy/cache.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAOD,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,MAAM,CAAa;gBAEf,OAAO,EAAE,kBAAkB;IAKvC;;OAEG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IAmBlC;;OAEG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;IAejD;;OAEG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI5B;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAUzB;;OAEG;IACH,KAAK,IAAI,IAAI;IAMb;;OAEG;IACH,KAAK,IAAI,MAAM;IAcf;;OAEG;IACH,QAAQ,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAO3D"}

package/policy/evaluator.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Policy Evaluator
+ *
+ * Evaluates operations against daemon policies via RPC.
+ * No caching - always checks daemon for up-to-date policy decisions.
+ */
+import type { AsyncClient } from '../client/http-client.js';
+export interface PolicyEvaluatorOptions {
+    client: AsyncClient;
+}
+export interface PolicyCheckResult {
+    allowed: boolean;
+    policyId?: string;
+    reason?: string;
+}
+export declare class PolicyEvaluator {
+    private client;
+    constructor(options: PolicyEvaluatorOptions);
+    /**
+     * Check if an operation is allowed
+     * Always queries the daemon for fresh policy decisions
+     */
+    check(operation: string, target: string): Promise<PolicyCheckResult>;
+}
+//# sourceMappingURL=evaluator.d.ts.map

package/policy/evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../src/policy/evaluator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAc;gBAEhB,OAAO,EAAE,sBAAsB;IAI3C;;;OAGG;IACG,KAAK,CACT,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC;CAgB9B"}

package/register.d.ts

@@ -0,0 +1,9 @@
+/**
+ * ESM Loader Registration
+ *
+ * Auto-installs interceptors when loaded via --import flag.
+ *
+ * Usage: node --import @agenshield/interceptor/register app.js
+ */
+export {};
+//# sourceMappingURL=register.d.ts.map

package/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}