@astrasyncai/verification-gateway 3.10.1 → 3.11.1

package/dist/bin/astrasync-claude-hook.js

@@ -25,9 +25,7 @@ __export(hook_exports, {
   resolveGuardConfig: () => resolveGuardConfig
 });
 module.exports = __toCommonJS(hook_exports);
-var import_fs4 = require("fs");
-var import_os = require("os");
-var import_path3 = require("path");
+var import_path4 = require("path");
 
 // src/gateway/types.ts
 var HIGH_RISK_COMMANDS = [
@@ -152,8 +150,9 @@ function extractBacktickSubstitutions(text, collect) {
   return kept.join(" ");
 }
 function basename(token) {
-  const slash = token.lastIndexOf("/");
-  return slash === -1 ? token : token.slice(slash + 1);
+  const slash = Math.max(token.lastIndexOf("/"), token.lastIndexOf("\\"));
+  const name = slash === -1 ? token : token.slice(slash + 1);
+  return name.replace(/\.(exe|cmd|bat|ps1)$/i, "");
 }
 function matchSegment(segment, list) {
   const tokens = segment.split(/\s+/).filter((t) => /[a-z0-9]/.test(t));
@@ -286,7 +285,9 @@ var LocalEvaluator = class {
     }
     return {
       recommendation: "ALLOW",
-      reason: "All PDLSS checks passed",
+      // "evaluated": dimensions absent from the policy are skipped, not
+      // failed — evaluatedDimensions below records which ones ran.
+      reason: "All evaluated PDLSS checks passed",
       evaluatedDimensions: {
         purpose: true,
         scope: !!this.policy.scope,
@@ -385,7 +386,7 @@ var LocalEvaluator = class {
       }
     }
     if ((context.purpose === "file.read" || context.purpose === "file.write" || context.purpose === "file.delete") && context.target) {
-      const targetLower = context.target.toLowerCase();
+      const targetLower = context.target.toLowerCase().replace(/\\/g, "/");
       for (const sensitivePath of SENSITIVE_PATHS) {
         if (targetLower.includes(sensitivePath.toLowerCase())) {
           score = Math.max(score, 50);
@@ -414,12 +415,20 @@ var LocalEvaluator = class {
   matchesAnyPattern(value, patterns) {
     return patterns.some((pattern) => this.matchGlob(value, pattern));
   }
-  /**
-   * Simple glob pattern matching.
-   * Supports * (matches any characters including / and spaces) and ? (single char).
-   * Uses the same approach as the backend's matchGlobPattern.
-   */
+  homePrefix() {
+    if (this.cachedHomePrefix !== void 0) return this.cachedHomePrefix;
+    const env = typeof process !== "undefined" ? process.env : void 0;
+    const home = env?.HOME || env?.USERPROFILE;
+    this.cachedHomePrefix = home ? home.replace(/\\/g, "/") : null;
+    return this.cachedHomePrefix;
+  }
   matchGlob(value, pattern) {
+    value = value.replace(/\\/g, "/");
+    pattern = pattern.replace(/\\/g, "/");
+    if (pattern === "~" || pattern.startsWith("~/")) {
+      const home = this.homePrefix();
+      if (home) pattern = home + pattern.slice(1);
+    }
     if (pattern === value) return true;
     const starCount = (pattern.match(/\*/g) ?? []).length;
     if (starCount > 8) {
@@ -3692,7 +3701,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "3.10.1";
+var SDK_VERSION = "3.11.1";
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -4207,10 +4216,12 @@ function toGatewayConfig(config) {
   };
 }
 function toVerificationRequest(context, astraId) {
+  const dotIndex = context.purpose.indexOf(".");
+  const dotted = dotIndex > 0;
   return {
     credentials: { astraId },
-    purpose: context.purpose,
-    action: context.action,
+    purpose: dotted ? context.purpose.slice(0, dotIndex) : context.purpose,
+    action: dotted ? context.purpose : context.action,
     resourceType: context.resourceType,
     resource: context.target,
     transactionValue: context.transactionValue,
@@ -4453,13 +4464,43 @@ var TraceLogger = class {
    * Log an evaluation event.
    */
   logEvaluation(context, decision) {
+    if (!this.enabled) return;
+    let event;
+    try {
+      event = {
+        id: this.generateId(),
+        timestamp: /* @__PURE__ */ new Date(),
+        type: "evaluation",
+        context: redactDeep(context),
+        decision: redactDeep(decision)
+      };
+    } catch (err) {
+      event = {
+        id: this.generateId(),
+        timestamp: /* @__PURE__ */ new Date(),
+        type: "error",
+        metadata: {
+          error: `trace redaction failed: ${err instanceof Error ? err.message : String(err)}`,
+          recommendation: decision.recommendation,
+          purpose: context.purpose,
+          action: context.action
+        }
+      };
+    }
+    this.write(event);
+  }
+  /**
+   * Log a tool call the guard saw but did not govern. One line per skip
+   * keeps coverage holes (unmapped platform tools) visible in the traces
+   * instead of silently indistinguishable from ALLOW.
+   */
+  logSkipped(toolName, reason) {
     if (!this.enabled) return;
     this.write({
       id: this.generateId(),
       timestamp: /* @__PURE__ */ new Date(),
-      type: "evaluation",
-      context: redactDeep(context),
-      decision: redactDeep(decision)
+      type: "skipped",
+      metadata: { toolName, reason }
     });
   }
   /**
@@ -4488,17 +4529,34 @@ var TraceLogger = class {
     });
   }
   write(event) {
+    let line;
+    try {
+      line = JSON.stringify(event) + "\n";
+    } catch {
+      return;
+    }
     try {
       const filePath = this.getCurrentFilePath();
-      const line = JSON.stringify(event) + "\n";
       if ((0, import_fs3.existsSync)(filePath)) {
         const stats = (0, import_fs3.statSync)(filePath);
         if (stats.size > MAX_FILE_SIZE) {
           this.rotate();
         }
       }
-      (0, import_fs3.appendFileSync)(filePath, line);
+      for (let attempt = 0; attempt < 3; attempt++) {
+        try {
+          (0, import_fs3.appendFileSync)(filePath, line);
+          return;
+        } catch {
+        }
+      }
+      const fallbackPath = filePath.replace(/\.jsonl$/, `-r${process.pid}.jsonl`);
+      (0, import_fs3.appendFileSync)(fallbackPath, line);
     } catch {
+      try {
+        console.error(`[AstraSync TraceLogger] failed to persist trace line: ${line.trim()}`);
+      } catch {
+      }
     }
   }
   getCurrentFilePath() {
@@ -4659,6 +4717,13 @@ var AstraSyncGateway = class {
   getSyncStatus() {
     return this.syncQueue?.getStatus() || null;
   }
+  /**
+   * Record a tool call the calling adapter saw but did not govern
+   * (unmapped tool, skipTools, MCP with governMcp off). Trace-only.
+   */
+  logSkippedTool(toolName, reason) {
+    this.traceLogger?.logSkipped(toolName, reason);
+  }
 };
 
 // src/adapter-interface/interface.ts
@@ -4750,6 +4815,11 @@ function extractNetworkDomains(target) {
 // src/claude-code/tool-mapping.ts
 var CLAUDE_CODE_TOOL_MAP = {
   Bash: "shell.exec",
+  // Native Windows ships shell execution as a distinct PowerShell tool
+  // (hooks docs: "Tool Names in PreToolUse"). Found live on 10 Jul 2026 —
+  // the desktop-app runtime verification showed shell commands bypassing
+  // the guard entirely on Windows because only Bash was mapped/matched.
+  PowerShell: "shell.exec",
   Write: "file.write",
   Edit: "file.write",
   MultiEdit: "file.write",
@@ -4894,7 +4964,10 @@ var ClaudeCodeAdapter = class {
       timestamp: /* @__PURE__ */ new Date()
     };
     const interception = await this.interceptAction(action);
-    if (!interception.intercepted || !interception.context) return null;
+    if (!interception.intercepted || !interception.context) {
+      this.gateway.logSkippedTool(payload.tool_name, interception.skipReason ?? "not intercepted");
+      return null;
+    }
     const decision = await this.gateway.evaluate(interception.context);
     return this.decisionToHookOutput(decision);
   }
@@ -4906,11 +4979,10 @@ var ClaudeCodeAdapter = class {
   }
 };
 
-// src/claude-code/hook.ts
-var MAX_STDIN_BYTES = 1024 * 1024;
-var STDIN_TIMEOUT_MS = 5e3;
-var HYBRID_FLUSH_LIMIT = 3;
-var HYBRID_FLUSH_TIMEOUT_MS = 1500;
+// src/claude-code/guard-config.ts
+var import_fs4 = require("fs");
+var import_os = require("os");
+var import_path3 = require("path");
 function resolveGuardConfig(env, payloadCwd, home = (0, import_os.homedir)()) {
   const candidateRoots = [env.CLAUDE_PROJECT_DIR, payloadCwd, home].filter(
     (root) => typeof root === "string" && root.length > 0
@@ -4932,6 +5004,12 @@ function resolveGuardConfig(env, payloadCwd, home = (0, import_os.homedir)()) {
   }
   return null;
 }
+
+// src/claude-code/hook.ts
+var MAX_STDIN_BYTES = 1024 * 1024;
+var STDIN_TIMEOUT_MS = 5e3;
+var HYBRID_FLUSH_LIMIT = 3;
+var HYBRID_FLUSH_TIMEOUT_MS = 1500;
 function denyOutput(reason) {
   return {
     hookSpecificOutput: {
@@ -4975,7 +5053,7 @@ async function processHookPayload(payloadJson, options = {}) {
       policyFile: resolved.policyFile,
       posture: resolved.settings.posture ?? "active",
       traceEnabled: true,
-      tracePath: (0, import_path3.join)(resolved.guardDir, "traces"),
+      tracePath: (0, import_path4.join)(resolved.guardDir, "traces"),
       debug: false,
       ...mode === "hybrid" && {
         apiBaseUrl: resolved.settings.apiBaseUrl,