@astrasyncai/verification-gateway 4.0.0 → 4.2.0

package/dist/bin/astrasync-codex-hook.js

@@ -3700,7 +3700,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.0.0";
+var SDK_VERSION = "4.1.0";
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -4201,6 +4201,18 @@ var FALLBACK_MAX_WAIT_MS = 5 * 60 * 1e3;
 // src/metadata-capture.ts
 var MAX_TOTAL_BYTES = 16 * 1024;
 
+// src/edge-config.ts
+var DEFAULT_EDGE_CONFIG = Object.freeze({
+  version: 1,
+  mode: "observe",
+  depth: "classify",
+  pathRules: [],
+  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
+  failurePosture: "open"
+});
+var DEFAULT_TTL_MS = 60 * 1e3;
+var DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
+
 // src/adapters/express.ts
 var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
 
@@ -4269,18 +4281,6 @@ var import_node_crypto4 = require("crypto");
 // src/transport/registry/visa.ts
 var import_jose = require("jose");
 
-// src/edge-config.ts
-var DEFAULT_EDGE_CONFIG = Object.freeze({
-  version: 1,
-  mode: "observe",
-  depth: "classify",
-  pathRules: [],
-  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
-  failurePosture: "open"
-});
-var DEFAULT_TTL_MS = 60 * 1e3;
-var DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
-
 // src/gateway/modes/online.ts
 function toGatewayConfig(config) {
   return {

package/dist/bin/astrasync-guard.js

@@ -4609,7 +4609,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.0.0";
+var SDK_VERSION = "4.1.0";
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -5110,6 +5110,18 @@ var FALLBACK_MAX_WAIT_MS = 5 * 60 * 1e3;
 // src/metadata-capture.ts
 var MAX_TOTAL_BYTES = 16 * 1024;
 
+// src/edge-config.ts
+var DEFAULT_EDGE_CONFIG = Object.freeze({
+  version: 1,
+  mode: "observe",
+  depth: "classify",
+  pathRules: [],
+  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
+  failurePosture: "open"
+});
+var DEFAULT_TTL_MS = 60 * 1e3;
+var DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
+
 // src/adapters/express.ts
 var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
 
@@ -5178,18 +5190,6 @@ var import_node_crypto4 = require("crypto");
 // src/transport/registry/visa.ts
 var import_jose = require("jose");
 
-// src/edge-config.ts
-var DEFAULT_EDGE_CONFIG = Object.freeze({
-  version: 1,
-  mode: "observe",
-  depth: "classify",
-  pathRules: [],
-  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
-  failurePosture: "open"
-});
-var DEFAULT_TTL_MS = 60 * 1e3;
-var DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
-
 // src/gateway/modes/online.ts
 function toGatewayConfig(config) {
   return {
@@ -5912,6 +5912,72 @@ function uninstallClaudeHooks(settingsPath, marker2 = ASTRASYNC_HOOK_MARKER) {
   writeSettings(settingsPath, settings);
   return true;
 }
+var PERMISSION_DENY_PATHS = [
+  "**/.claude/settings.json",
+  "**/.claude/settings.local.json",
+  "~/.claude/settings.json",
+  "~/.claude/settings.local.json",
+  "**/.astrasync/**",
+  "~/.astrasync/**"
+];
+var GUARD_PERMISSION_DENY_RULES = PERMISSION_DENY_PATHS.map(
+  (p) => `Edit(${p})`
+);
+var LEGACY_GUARD_PERMISSION_DENY_RULES = [];
+function readDenyRules(settings, settingsPath) {
+  const permissions = settings.permissions;
+  if (permissions !== void 0 && (typeof permissions !== "object" || Array.isArray(permissions) || permissions === null)) {
+    throw new Error(`${settingsPath}: "permissions" is not an object \u2014 refusing to rewrite it.`);
+  }
+  const deny = permissions?.deny;
+  if (deny === void 0) return [];
+  if (!Array.isArray(deny) || deny.some((r) => typeof r !== "string")) {
+    throw new Error(
+      `${settingsPath}: "permissions.deny" is not an array of strings \u2014 refusing to rewrite it.`
+    );
+  }
+  return deny;
+}
+function installClaudePermissionRules(settingsPath, rules = GUARD_PERMISSION_DENY_RULES, staleRules = LEGACY_GUARD_PERMISSION_DENY_RULES) {
+  const settings = readSettings(settingsPath);
+  const deny = readDenyRules(settings, settingsPath);
+  const stale = new Set(staleRules);
+  const removedStaleRules = deny.filter((r) => stale.has(r));
+  const kept = deny.filter((r) => !stale.has(r));
+  const present = new Set(kept);
+  const addedRules = rules.filter((r) => !present.has(r));
+  const changed = addedRules.length > 0 || removedStaleRules.length > 0;
+  if (changed) {
+    settings.permissions = settings.permissions ?? {};
+    settings.permissions.deny = [...kept, ...addedRules];
+    writeSettings(settingsPath, settings);
+  }
+  return { addedRules, removedStaleRules, changed };
+}
+function uninstallClaudePermissionRules(settingsPath, rules = GUARD_PERMISSION_DENY_RULES, staleRules = LEGACY_GUARD_PERMISSION_DENY_RULES) {
+  if (!(0, import_fs5.existsSync)(settingsPath)) return [];
+  let settings;
+  let deny;
+  try {
+    settings = readSettings(settingsPath);
+    deny = readDenyRules(settings, settingsPath);
+  } catch {
+    return [];
+  }
+  if (deny.length === 0) return [];
+  const ours = /* @__PURE__ */ new Set([...rules, ...staleRules]);
+  const removed = deny.filter((r) => ours.has(r));
+  if (removed.length === 0) return [];
+  const remaining = deny.filter((r) => !ours.has(r));
+  if (remaining.length > 0) {
+    settings.permissions.deny = remaining;
+  } else {
+    delete settings.permissions.deny;
+    if (Object.keys(settings.permissions).length === 0) delete settings.permissions;
+  }
+  writeSettings(settingsPath, settings);
+  return removed;
+}
 var GUARD_SELF_PROTECTION_PATTERNS = [
   "**/.claude/settings.json",
   "**/.claude/settings.local.json",
@@ -6306,6 +6372,17 @@ async function cmdInstallClaudeCode() {
   } else {
     console.log(`  Hook:     already present in ${settingsPath}`);
   }
+  const permResult = installClaudePermissionRules(settingsPath);
+  if (permResult.addedRules.length > 0) {
+    console.log(
+      `  Deny:     ${permResult.addedRules.length} permissions.deny self-protection rules added in ${settingsPath}`
+    );
+  } else {
+    console.log("  Deny:     permissions.deny self-protection rules already present");
+  }
+  if (permResult.removedStaleRules.length > 0) {
+    console.log(`            removed ${permResult.removedStaleRules.length} stale guard rules`);
+  }
   console.log("\n  Next steps:");
   console.log("    1. Start a NEW Claude Code session (settings load at startup).");
   console.log(`    2. Watch decisions: tail -f ${path.join(astrasyncDir, "traces")}/*.jsonl`);
@@ -6323,6 +6400,16 @@ async function cmdUninstallClaudeCode() {
   } else {
     console.log(`[AstraSync] No AstraSync hook found in ${settingsPath}`);
   }
+  const removedRules = uninstallClaudePermissionRules(settingsPath);
+  if (removedRules.length > 0) {
+    console.log(
+      `[AstraSync] Removed ${removedRules.length} permissions.deny rules from ${settingsPath}.`
+    );
+    console.log("            If you had added any of these yourself, re-add them:");
+    for (const rule of removedRules) {
+      console.log(`              ${rule}`);
+    }
+  }
   console.log(
     `[AstraSync] Policy and traces left in place at ${astrasyncDir} \u2014 delete manually if unwanted.`
   );

package/dist/bin/astrasync.js

@@ -5000,7 +5000,7 @@ var SDK_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    SDK_VERSION = "4.0.0";
+    SDK_VERSION = "4.1.0";
   }
 });
 
@@ -5567,6 +5567,82 @@ var init_metadata_capture = __esm({
   }
 });
 
+// src/edge-config.ts
+var DEFAULT_EDGE_CONFIG, DEFAULT_TTL_MS, DEFAULT_MAX_STALE_MS;
+var init_edge_config = __esm({
+  "src/edge-config.ts"() {
+    "use strict";
+    DEFAULT_EDGE_CONFIG = Object.freeze({
+      version: 1,
+      mode: "observe",
+      depth: "classify",
+      pathRules: [],
+      sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
+      failurePosture: "open"
+    });
+    DEFAULT_TTL_MS = 60 * 1e3;
+    DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
+  }
+});
+
+// src/platform-signatures.ts
+var init_platform_signatures = __esm({
+  "src/platform-signatures.ts"() {
+    "use strict";
+  }
+});
+
+// src/edge-core/request.ts
+var init_request = __esm({
+  "src/edge-core/request.ts"() {
+    "use strict";
+    init_metadata_capture();
+  }
+});
+
+// src/edge-core/detect.ts
+var init_detect = __esm({
+  "src/edge-core/detect.ts"() {
+    "use strict";
+    init_request();
+  }
+});
+
+// src/edge-core/classify.ts
+var init_classify = __esm({
+  "src/edge-core/classify.ts"() {
+    "use strict";
+    init_edge_config();
+    init_metadata_capture();
+    init_platform_signatures();
+    init_verify();
+    init_detect();
+    init_request();
+  }
+});
+
+// src/edge-core/events.ts
+var init_events = __esm({
+  "src/edge-core/events.ts"() {
+    "use strict";
+    init_verify();
+    init_request();
+  }
+});
+
+// src/adapters/anonymous-beacon.ts
+var init_anonymous_beacon = __esm({
+  "src/adapters/anonymous-beacon.ts"() {
+    "use strict";
+    init_classify();
+    init_events();
+    init_edge_config();
+    init_metadata_capture();
+    init_platform_signatures();
+    init_verify();
+  }
+});
+
 // src/adapters/express.ts
 var DEFAULT_ROUTES_REFRESH_MS;
 var init_express = __esm({
@@ -5580,6 +5656,7 @@ var init_express = __esm({
     init_pdlss_pre_check();
     init_well_known();
     init_metadata_capture();
+    init_anonymous_beacon();
     DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
   }
 });
@@ -5594,6 +5671,7 @@ var init_nextjs = __esm({
     init_http();
     init_pdlss_pre_check();
     init_metadata_capture();
+    init_anonymous_beacon();
     init_http_pdlss();
     init_approval_gate();
     DEFAULT_ROUTES_REFRESH_MS2 = 5 * 60 * 1e3;
@@ -5907,6 +5985,7 @@ var init_mcp2 = __esm({
   "src/adapters/mcp.ts"() {
     "use strict";
     init_verify();
+    init_metadata_capture();
     init_approval_gate();
     init_stepup_poll();
     init_well_known();
@@ -5983,31 +6062,6 @@ var init_agent = __esm({
   }
 });
 
-// src/edge-config.ts
-var DEFAULT_EDGE_CONFIG, DEFAULT_TTL_MS, DEFAULT_MAX_STALE_MS;
-var init_edge_config = __esm({
-  "src/edge-config.ts"() {
-    "use strict";
-    DEFAULT_EDGE_CONFIG = Object.freeze({
-      version: 1,
-      mode: "observe",
-      depth: "classify",
-      pathRules: [],
-      sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
-      failurePosture: "open"
-    });
-    DEFAULT_TTL_MS = 60 * 1e3;
-    DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
-  }
-});
-
-// src/platform-signatures.ts
-var init_platform_signatures = __esm({
-  "src/platform-signatures.ts"() {
-    "use strict";
-  }
-});
-
 // src/index.ts
 var init_src = __esm({
   "src/index.ts"() {
@@ -6797,6 +6851,60 @@ function uninstallClaudeHooks(settingsPath, marker2 = ASTRASYNC_HOOK_MARKER) {
   writeSettings(settingsPath, settings);
   return true;
 }
+function readDenyRules(settings, settingsPath) {
+  const permissions = settings.permissions;
+  if (permissions !== void 0 && (typeof permissions !== "object" || Array.isArray(permissions) || permissions === null)) {
+    throw new Error(`${settingsPath}: "permissions" is not an object \u2014 refusing to rewrite it.`);
+  }
+  const deny = permissions?.deny;
+  if (deny === void 0) return [];
+  if (!Array.isArray(deny) || deny.some((r) => typeof r !== "string")) {
+    throw new Error(
+      `${settingsPath}: "permissions.deny" is not an array of strings \u2014 refusing to rewrite it.`
+    );
+  }
+  return deny;
+}
+function installClaudePermissionRules(settingsPath, rules = GUARD_PERMISSION_DENY_RULES, staleRules = LEGACY_GUARD_PERMISSION_DENY_RULES) {
+  const settings = readSettings(settingsPath);
+  const deny = readDenyRules(settings, settingsPath);
+  const stale = new Set(staleRules);
+  const removedStaleRules = deny.filter((r) => stale.has(r));
+  const kept = deny.filter((r) => !stale.has(r));
+  const present = new Set(kept);
+  const addedRules = rules.filter((r) => !present.has(r));
+  const changed = addedRules.length > 0 || removedStaleRules.length > 0;
+  if (changed) {
+    settings.permissions = settings.permissions ?? {};
+    settings.permissions.deny = [...kept, ...addedRules];
+    writeSettings(settingsPath, settings);
+  }
+  return { addedRules, removedStaleRules, changed };
+}
+function uninstallClaudePermissionRules(settingsPath, rules = GUARD_PERMISSION_DENY_RULES, staleRules = LEGACY_GUARD_PERMISSION_DENY_RULES) {
+  if (!(0, import_fs5.existsSync)(settingsPath)) return [];
+  let settings;
+  let deny;
+  try {
+    settings = readSettings(settingsPath);
+    deny = readDenyRules(settings, settingsPath);
+  } catch {
+    return [];
+  }
+  if (deny.length === 0) return [];
+  const ours = /* @__PURE__ */ new Set([...rules, ...staleRules]);
+  const removed = deny.filter((r) => ours.has(r));
+  if (removed.length === 0) return [];
+  const remaining = deny.filter((r) => !ours.has(r));
+  if (remaining.length > 0) {
+    settings.permissions.deny = remaining;
+  } else {
+    delete settings.permissions.deny;
+    if (Object.keys(settings.permissions).length === 0) delete settings.permissions;
+  }
+  writeSettings(settingsPath, settings);
+  return removed;
+}
 function ensureGuardSelfProtection(policyPath) {
   const parsed = parseFile(policyPath);
   if (!parsed.validation.valid || !parsed.policy) return false;
@@ -6841,7 +6949,7 @@ function buildDefaultClaudeCodePolicy(name = "claude-code-local-guard") {
     riskThresholds: permissive.thresholds
   };
 }
-var import_fs5, import_path4, ASTRASYNC_HOOK_MARKER, HOOK_MATCHER, HOOK_TIMEOUT_SECONDS, GUARD_SELF_PROTECTION_PATTERNS;
+var import_fs5, import_path4, ASTRASYNC_HOOK_MARKER, HOOK_MATCHER, HOOK_TIMEOUT_SECONDS, PERMISSION_DENY_PATHS, GUARD_PERMISSION_DENY_RULES, LEGACY_GUARD_PERMISSION_DENY_RULES, GUARD_SELF_PROTECTION_PATTERNS;
 var init_settings_installer = __esm({
   "src/claude-code/settings-installer.ts"() {
     "use strict";
@@ -6852,6 +6960,18 @@ var init_settings_installer = __esm({
     ASTRASYNC_HOOK_MARKER = "astrasync-claude-hook";
     HOOK_MATCHER = "Bash|PowerShell|Write|Edit|MultiEdit|NotebookEdit|Read|Glob|Grep|WebFetch|WebSearch|Task|Agent|mcp__.*";
     HOOK_TIMEOUT_SECONDS = 10;
+    PERMISSION_DENY_PATHS = [
+      "**/.claude/settings.json",
+      "**/.claude/settings.local.json",
+      "~/.claude/settings.json",
+      "~/.claude/settings.local.json",
+      "**/.astrasync/**",
+      "~/.astrasync/**"
+    ];
+    GUARD_PERMISSION_DENY_RULES = PERMISSION_DENY_PATHS.map(
+      (p) => `Edit(${p})`
+    );
+    LEGACY_GUARD_PERMISSION_DENY_RULES = [];
     GUARD_SELF_PROTECTION_PATTERNS = [
       "**/.claude/settings.json",
       "**/.claude/settings.local.json",
@@ -7210,6 +7330,17 @@ async function cmdInstallClaudeCode() {
   } else {
     console.log(`  Hook:     already present in ${settingsPath}`);
   }
+  const permResult = installClaudePermissionRules(settingsPath);
+  if (permResult.addedRules.length > 0) {
+    console.log(
+      `  Deny:     ${permResult.addedRules.length} permissions.deny self-protection rules added in ${settingsPath}`
+    );
+  } else {
+    console.log("  Deny:     permissions.deny self-protection rules already present");
+  }
+  if (permResult.removedStaleRules.length > 0) {
+    console.log(`            removed ${permResult.removedStaleRules.length} stale guard rules`);
+  }
   console.log("\n  Next steps:");
   console.log("    1. Start a NEW Claude Code session (settings load at startup).");
   console.log(`    2. Watch decisions: tail -f ${path.join(astrasyncDir, "traces")}/*.jsonl`);
@@ -7227,6 +7358,16 @@ async function cmdUninstallClaudeCode() {
   } else {
     console.log(`[AstraSync] No AstraSync hook found in ${settingsPath}`);
   }
+  const removedRules = uninstallClaudePermissionRules(settingsPath);
+  if (removedRules.length > 0) {
+    console.log(
+      `[AstraSync] Removed ${removedRules.length} permissions.deny rules from ${settingsPath}.`
+    );
+    console.log("            If you had added any of these yourself, re-add them:");
+    for (const rule of removedRules) {
+      console.log(`              ${rule}`);
+    }
+  }
   console.log(
     `[AstraSync] Policy and traces left in place at ${astrasyncDir} \u2014 delete manually if unwanted.`
   );

package/dist/browser/background.js

@@ -3938,7 +3938,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.0.0";
+var SDK_VERSION = "4.1.0";
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -4439,6 +4439,18 @@ var FALLBACK_MAX_WAIT_MS = 5 * 60 * 1e3;
 // src/metadata-capture.ts
 var MAX_TOTAL_BYTES = 16 * 1024;
 
+// src/edge-config.ts
+var DEFAULT_EDGE_CONFIG = Object.freeze({
+  version: 1,
+  mode: "observe",
+  depth: "classify",
+  pathRules: [],
+  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
+  failurePosture: "open"
+});
+var DEFAULT_TTL_MS = 60 * 1e3;
+var DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
+
 // src/adapters/express.ts
 var DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1e3;
 
@@ -4507,18 +4519,6 @@ var import_node_crypto4 = require("crypto");
 // src/transport/registry/visa.ts
 var import_jose = require("jose");
 
-// src/edge-config.ts
-var DEFAULT_EDGE_CONFIG = Object.freeze({
-  version: 1,
-  mode: "observe",
-  depth: "classify",
-  pathRules: [],
-  sampling: Object.freeze({ anonymousBeaconRate: 0.1 }),
-  failurePosture: "open"
-});
-var DEFAULT_TTL_MS = 60 * 1e3;
-var DEFAULT_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
-
 // src/gateway/modes/online.ts
 function toGatewayConfig(config) {
   return {