@anthropic-field/core 0.1.0

package/dist/src/utils/security.js

@@ -0,0 +1,88 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as fs from 'node:fs/promises';
+import { constants } from 'node:fs';
+import * as os from 'node:os';
+import { spawnAsync } from './shell-utils.js';
+/**
+ * Verifies if a directory is secure (owned by root and not writable by others).
+ *
+ * @param dirPath The path to the directory to check.
+ * @returns A promise that resolves to a SecurityCheckResult.
+ */
+export async function isDirectorySecure(dirPath) {
+    try {
+        const stats = await fs.stat(dirPath);
+        if (!stats.isDirectory()) {
+            return { secure: false, reason: 'Not a directory' };
+        }
+        if (os.platform() === 'win32') {
+            try {
+                // Check ACLs using PowerShell to ensure standard users don't have write access
+                const escapedPath = dirPath.replace(/'/g, "''");
+                const script = `
+          $path = '${escapedPath}';
+          $acl = Get-Acl -LiteralPath $path;
+          $rules = $acl.Access | Where-Object { 
+              $_.AccessControlType -eq 'Allow' -and 
+              (($_.FileSystemRights -match 'Write') -or ($_.FileSystemRights -match 'Modify') -or ($_.FileSystemRights -match 'FullControl')) 
+          };
+          $insecureIdentity = $rules | Where-Object { 
+              $_.IdentityReference.Value -match 'Users' -or $_.IdentityReference.Value -eq 'Everyone' 
+          } | Select-Object -ExpandProperty IdentityReference;
+          Write-Output ($insecureIdentity -join ', ');
+        `;
+                const { stdout } = await spawnAsync('powershell', [
+                    '-NoProfile',
+                    '-NonInteractive',
+                    '-Command',
+                    script,
+                ]);
+                const insecureGroups = stdout.trim();
+                if (insecureGroups) {
+                    return {
+                        secure: false,
+                        reason: `Directory '${dirPath}' is insecure. The following user groups have write permissions: ${insecureGroups}. To fix this, remove Write and Modify permissions for these groups from the directory's ACLs.`,
+                    };
+                }
+                return { secure: true };
+            }
+            catch (error) {
+                return {
+                    secure: false,
+                    reason: `A security check for the system policy directory '${dirPath}' failed and could not be completed. Please file a bug report. Original error: ${error.message}`,
+                };
+            }
+        }
+        // POSIX checks
+        // Check ownership: must be root (uid 0)
+        if (stats.uid !== 0) {
+            return {
+                secure: false,
+                reason: `Directory '${dirPath}' is not owned by root (uid 0). Current uid: ${stats.uid}. To fix this, run: sudo chown root:root "${dirPath}"`,
+            };
+        }
+        // Check permissions: not writable by group (S_IWGRP) or others (S_IWOTH)
+        const mode = stats.mode;
+        if ((mode & (constants.S_IWGRP | constants.S_IWOTH)) !== 0) {
+            return {
+                secure: false,
+                reason: `Directory '${dirPath}' is writable by group or others (mode: ${mode.toString(8)}). To fix this, run: sudo chmod g-w,o-w "${dirPath}"`,
+            };
+        }
+        return { secure: true };
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return { secure: true };
+        }
+        return {
+            secure: false,
+            reason: `Failed to access directory: ${error.message}`,
+        };
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/src/utils/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/utils/security.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAO9C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACtD,CAAC;QAED,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,+EAA+E;gBAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG;qBACF,WAAW;;;;;;;;;;SAUvB,CAAC;gBAEF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE;oBAChD,YAAY;oBACZ,iBAAiB;oBACjB,UAAU;oBACV,MAAM;iBACP,CAAC,CAAC;gBAEH,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBACrC,IAAI,cAAc,EAAE,CAAC;oBACnB,OAAO;wBACL,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,cAAc,OAAO,oEAAoE,cAAc,gGAAgG;qBAChN,CAAC;gBACJ,CAAC;gBAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,qDAAqD,OAAO,kFAAmF,KAAe,CAAC,OAAO,EAAE;iBACjL,CAAC;YACJ,CAAC;QACH,CAAC;QAED,eAAe;QACf,wCAAwC;QACxC,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,cAAc,OAAO,gDAAgD,KAAK,CAAC,GAAG,6CAA6C,OAAO,GAAG;aAC9I,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,cAAc,OAAO,2CAA2C,IAAI,CAAC,QAAQ,CACnF,CAAC,CACF,4CAA4C,OAAO,GAAG;aACxD,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,+BAAgC,KAAe,CAAC,OAAO,EAAE;SAClE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/src/utils/session.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export declare const sessionId: `${string}-${string}-${string}-${string}-${string}`;

package/dist/src/utils/session.js

@@ -0,0 +1,8 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { randomUUID } from 'node:crypto';
+export const sessionId = randomUUID();
+//# sourceMappingURL=session.js.map

package/dist/src/utils/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/utils/session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC"}

package/dist/src/utils/shell-utils.d.ts

@@ -0,0 +1,118 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type SpawnOptionsWithoutStdio } from 'node:child_process';
+export declare const SHELL_TOOL_NAMES: string[];
+/**
+ * An identifier for the shell type.
+ */
+export type ShellType = 'cmd' | 'powershell' | 'bash';
+/**
+ * Defines the configuration required to execute a command string within a specific shell.
+ */
+export interface ShellConfiguration {
+    /** The path or name of the shell executable (e.g., 'bash', 'powershell.exe'). */
+    executable: string;
+    /**
+     * The arguments required by the shell to execute a subsequent string argument.
+     */
+    argsPrefix: string[];
+    /** An identifier for the shell type. */
+    shell: ShellType;
+}
+export declare function resolveExecutable(exe: string): Promise<string | undefined>;
+export declare function initializeShellParsers(): Promise<void>;
+export interface ParsedCommandDetail {
+    name: string;
+    text: string;
+    startIndex: number;
+}
+interface CommandParseResult {
+    details: ParsedCommandDetail[];
+    hasError: boolean;
+    hasRedirection?: boolean;
+}
+export declare function parseCommandDetails(command: string): CommandParseResult | null;
+/**
+ * Determines the appropriate shell configuration for the current platform.
+ *
+ * This ensures we can execute command strings predictably and securely across platforms
+ * using the `spawn(executable, [...argsPrefix, commandString], { shell: false })` pattern.
+ *
+ * @returns The ShellConfiguration for the current environment.
+ */
+export declare function getShellConfiguration(): ShellConfiguration;
+/**
+ * Export the platform detection constant for use in process management (e.g., killing processes).
+ */
+export declare const isWindows: () => boolean;
+/**
+ * Escapes a string so that it can be safely used as a single argument
+ * in a shell command, preventing command injection.
+ *
+ * @param arg The argument string to escape.
+ * @param shell The type of shell the argument is for.
+ * @returns The shell-escaped string.
+ */
+export declare function escapeShellArg(arg: string, shell: ShellType): string;
+/**
+ * Splits a shell command into a list of individual commands, respecting quotes.
+ * This is used to separate chained commands (e.g., using &&, ||, ;).
+ * @param command The shell command string to parse
+ * @returns An array of individual command strings
+ */
+/**
+ * Checks if a command contains redirection operators.
+ * Uses shell-specific parsers where possible, falling back to a broad regex check.
+ */
+export declare function hasRedirection(command: string): boolean;
+export declare function splitCommands(command: string): string[];
+/**
+ * Extracts the root command from a given shell command string.
+ * This is used to identify the base command for permission checks.
+ * @param command The shell command string to parse
+ * @returns The root command name, or undefined if it cannot be determined
+ * @example getCommandRoot("ls -la /tmp") returns "ls"
+ * @example getCommandRoot("git status && npm test") returns "git"
+ */
+export declare function getCommandRoot(command: string): string | undefined;
+export declare function getCommandRoots(command: string): string[];
+export declare function stripShellWrapper(command: string): string;
+/**
+ * Detects command substitution patterns in a shell command, following bash quoting rules:
+ * - Single quotes ('): Everything literal, no substitution possible
+ * - Double quotes ("): Command substitution with $() and backticks unless escaped with \
+ * - No quotes: Command substitution with $(), <(), and backticks
+ * @param command The shell command string to check
+ * @returns true if command substitution would be executed by bash
+ */
+/**
+ * Determines whether a given shell command is allowed to execute based on
+ * the tool's configuration including allowlists and blocklists.
+ *
+ * This function operates in "default allow" mode. It is a wrapper around
+ * `checkCommandPermissions`.
+ *
+ * @param command The shell command string to validate.
+ * @param config The application configuration.
+ * @returns An object with 'allowed' boolean and optional 'reason' string if not allowed.
+ */
+export declare const spawnAsync: (command: string, args: string[], options?: SpawnOptionsWithoutStdio) => Promise<{
+    stdout: string;
+    stderr: string;
+}>;
+/**
+ * Executes a command and yields lines of output as they appear.
+ * Use for large outputs where buffering is not feasible.
+ *
+ * @param command The executable to run
+ * @param args Arguments for the executable
+ * @param options Spawn options (cwd, env, etc.)
+ */
+export declare function execStreaming(command: string, args: string[], options?: SpawnOptionsWithoutStdio & {
+    signal?: AbortSignal;
+    allowedExitCodes?: number[];
+}): AsyncGenerator<string, void, void>;
+export {};