@astrasyncai/verification-gateway 4.1.0 → 4.2.1

package/dist/bin/astrasync-guard.js

@@ -5164,14 +5164,14 @@ var InMemoryNonceStore = class {
 var defaultNonceStore = new InMemoryNonceStore();
 
 // src/transport/vi.ts
-var import_decode = require("@sd-jwt/decode");
+var import_core = require("@sd-jwt/core");
 var import_node_crypto = require("crypto");
 
 // src/transport/stripe-webhook.ts
 var import_node_crypto2 = require("crypto");
 
 // src/transport/ap2.ts
-var import_decode2 = require("@sd-jwt/decode");
+var import_core2 = require("@sd-jwt/core");
 var import_node_crypto3 = require("crypto");
 
 // src/transport/mpp.ts
@@ -5912,6 +5912,72 @@ function uninstallClaudeHooks(settingsPath, marker2 = ASTRASYNC_HOOK_MARKER) {
   writeSettings(settingsPath, settings);
   return true;
 }
+var PERMISSION_DENY_PATHS = [
+  "**/.claude/settings.json",
+  "**/.claude/settings.local.json",
+  "~/.claude/settings.json",
+  "~/.claude/settings.local.json",
+  "**/.astrasync/**",
+  "~/.astrasync/**"
+];
+var GUARD_PERMISSION_DENY_RULES = PERMISSION_DENY_PATHS.map(
+  (p) => `Edit(${p})`
+);
+var LEGACY_GUARD_PERMISSION_DENY_RULES = [];
+function readDenyRules(settings, settingsPath) {
+  const permissions = settings.permissions;
+  if (permissions !== void 0 && (typeof permissions !== "object" || Array.isArray(permissions) || permissions === null)) {
+    throw new Error(`${settingsPath}: "permissions" is not an object \u2014 refusing to rewrite it.`);
+  }
+  const deny = permissions?.deny;
+  if (deny === void 0) return [];
+  if (!Array.isArray(deny) || deny.some((r) => typeof r !== "string")) {
+    throw new Error(
+      `${settingsPath}: "permissions.deny" is not an array of strings \u2014 refusing to rewrite it.`
+    );
+  }
+  return deny;
+}
+function installClaudePermissionRules(settingsPath, rules = GUARD_PERMISSION_DENY_RULES, staleRules = LEGACY_GUARD_PERMISSION_DENY_RULES) {
+  const settings = readSettings(settingsPath);
+  const deny = readDenyRules(settings, settingsPath);
+  const stale = new Set(staleRules);
+  const removedStaleRules = deny.filter((r) => stale.has(r));
+  const kept = deny.filter((r) => !stale.has(r));
+  const present = new Set(kept);
+  const addedRules = rules.filter((r) => !present.has(r));
+  const changed = addedRules.length > 0 || removedStaleRules.length > 0;
+  if (changed) {
+    settings.permissions = settings.permissions ?? {};
+    settings.permissions.deny = [...kept, ...addedRules];
+    writeSettings(settingsPath, settings);
+  }
+  return { addedRules, removedStaleRules, changed };
+}
+function uninstallClaudePermissionRules(settingsPath, rules = GUARD_PERMISSION_DENY_RULES, staleRules = LEGACY_GUARD_PERMISSION_DENY_RULES) {
+  if (!(0, import_fs5.existsSync)(settingsPath)) return [];
+  let settings;
+  let deny;
+  try {
+    settings = readSettings(settingsPath);
+    deny = readDenyRules(settings, settingsPath);
+  } catch {
+    return [];
+  }
+  if (deny.length === 0) return [];
+  const ours = /* @__PURE__ */ new Set([...rules, ...staleRules]);
+  const removed = deny.filter((r) => ours.has(r));
+  if (removed.length === 0) return [];
+  const remaining = deny.filter((r) => !ours.has(r));
+  if (remaining.length > 0) {
+    settings.permissions.deny = remaining;
+  } else {
+    delete settings.permissions.deny;
+    if (Object.keys(settings.permissions).length === 0) delete settings.permissions;
+  }
+  writeSettings(settingsPath, settings);
+  return removed;
+}
 var GUARD_SELF_PROTECTION_PATTERNS = [
   "**/.claude/settings.json",
   "**/.claude/settings.local.json",
@@ -6306,6 +6372,17 @@ async function cmdInstallClaudeCode() {
   } else {
     console.log(`  Hook:     already present in ${settingsPath}`);
   }
+  const permResult = installClaudePermissionRules(settingsPath);
+  if (permResult.addedRules.length > 0) {
+    console.log(
+      `  Deny:     ${permResult.addedRules.length} permissions.deny self-protection rules added in ${settingsPath}`
+    );
+  } else {
+    console.log("  Deny:     permissions.deny self-protection rules already present");
+  }
+  if (permResult.removedStaleRules.length > 0) {
+    console.log(`            removed ${permResult.removedStaleRules.length} stale guard rules`);
+  }
   console.log("\n  Next steps:");
   console.log("    1. Start a NEW Claude Code session (settings load at startup).");
   console.log(`    2. Watch decisions: tail -f ${path.join(astrasyncDir, "traces")}/*.jsonl`);
@@ -6323,6 +6400,16 @@ async function cmdUninstallClaudeCode() {
   } else {
     console.log(`[AstraSync] No AstraSync hook found in ${settingsPath}`);
   }
+  const removedRules = uninstallClaudePermissionRules(settingsPath);
+  if (removedRules.length > 0) {
+    console.log(
+      `[AstraSync] Removed ${removedRules.length} permissions.deny rules from ${settingsPath}.`
+    );
+    console.log("            If you had added any of these yourself, re-add them:");
+    for (const rule of removedRules) {
+      console.log(`              ${rule}`);
+    }
+  }
   console.log(
     `[AstraSync] Policy and traces left in place at ${astrasyncDir} \u2014 delete manually if unwanted.`
   );

package/dist/bin/astrasync.js

@@ -5786,11 +5786,11 @@ var init_acp = __esm({
 });
 
 // src/transport/vi.ts
-var import_decode, import_node_crypto;
+var import_core, import_node_crypto;
 var init_vi = __esm({
   "src/transport/vi.ts"() {
     "use strict";
-    import_decode = require("@sd-jwt/decode");
+    import_core = require("@sd-jwt/core");
     import_node_crypto = require("crypto");
   }
 });
@@ -5819,11 +5819,11 @@ var init_identity_binding = __esm({
 });
 
 // src/transport/ap2.ts
-var import_decode2, import_node_crypto3;
+var import_core2, import_node_crypto3;
 var init_ap2 = __esm({
   "src/transport/ap2.ts"() {
     "use strict";
-    import_decode2 = require("@sd-jwt/decode");
+    import_core2 = require("@sd-jwt/core");
     import_node_crypto3 = require("crypto");
   }
 });
@@ -6851,6 +6851,60 @@ function uninstallClaudeHooks(settingsPath, marker2 = ASTRASYNC_HOOK_MARKER) {
   writeSettings(settingsPath, settings);
   return true;
 }
+function readDenyRules(settings, settingsPath) {
+  const permissions = settings.permissions;
+  if (permissions !== void 0 && (typeof permissions !== "object" || Array.isArray(permissions) || permissions === null)) {
+    throw new Error(`${settingsPath}: "permissions" is not an object \u2014 refusing to rewrite it.`);
+  }
+  const deny = permissions?.deny;
+  if (deny === void 0) return [];
+  if (!Array.isArray(deny) || deny.some((r) => typeof r !== "string")) {
+    throw new Error(
+      `${settingsPath}: "permissions.deny" is not an array of strings \u2014 refusing to rewrite it.`
+    );
+  }
+  return deny;
+}
+function installClaudePermissionRules(settingsPath, rules = GUARD_PERMISSION_DENY_RULES, staleRules = LEGACY_GUARD_PERMISSION_DENY_RULES) {
+  const settings = readSettings(settingsPath);
+  const deny = readDenyRules(settings, settingsPath);
+  const stale = new Set(staleRules);
+  const removedStaleRules = deny.filter((r) => stale.has(r));
+  const kept = deny.filter((r) => !stale.has(r));
+  const present = new Set(kept);
+  const addedRules = rules.filter((r) => !present.has(r));
+  const changed = addedRules.length > 0 || removedStaleRules.length > 0;
+  if (changed) {
+    settings.permissions = settings.permissions ?? {};
+    settings.permissions.deny = [...kept, ...addedRules];
+    writeSettings(settingsPath, settings);
+  }
+  return { addedRules, removedStaleRules, changed };
+}
+function uninstallClaudePermissionRules(settingsPath, rules = GUARD_PERMISSION_DENY_RULES, staleRules = LEGACY_GUARD_PERMISSION_DENY_RULES) {
+  if (!(0, import_fs5.existsSync)(settingsPath)) return [];
+  let settings;
+  let deny;
+  try {
+    settings = readSettings(settingsPath);
+    deny = readDenyRules(settings, settingsPath);
+  } catch {
+    return [];
+  }
+  if (deny.length === 0) return [];
+  const ours = /* @__PURE__ */ new Set([...rules, ...staleRules]);
+  const removed = deny.filter((r) => ours.has(r));
+  if (removed.length === 0) return [];
+  const remaining = deny.filter((r) => !ours.has(r));
+  if (remaining.length > 0) {
+    settings.permissions.deny = remaining;
+  } else {
+    delete settings.permissions.deny;
+    if (Object.keys(settings.permissions).length === 0) delete settings.permissions;
+  }
+  writeSettings(settingsPath, settings);
+  return removed;
+}
 function ensureGuardSelfProtection(policyPath) {
   const parsed = parseFile(policyPath);
   if (!parsed.validation.valid || !parsed.policy) return false;
@@ -6895,7 +6949,7 @@ function buildDefaultClaudeCodePolicy(name = "claude-code-local-guard") {
     riskThresholds: permissive.thresholds
   };
 }
-var import_fs5, import_path4, ASTRASYNC_HOOK_MARKER, HOOK_MATCHER, HOOK_TIMEOUT_SECONDS, GUARD_SELF_PROTECTION_PATTERNS;
+var import_fs5, import_path4, ASTRASYNC_HOOK_MARKER, HOOK_MATCHER, HOOK_TIMEOUT_SECONDS, PERMISSION_DENY_PATHS, GUARD_PERMISSION_DENY_RULES, LEGACY_GUARD_PERMISSION_DENY_RULES, GUARD_SELF_PROTECTION_PATTERNS;
 var init_settings_installer = __esm({
   "src/claude-code/settings-installer.ts"() {
     "use strict";
@@ -6906,6 +6960,18 @@ var init_settings_installer = __esm({
     ASTRASYNC_HOOK_MARKER = "astrasync-claude-hook";
     HOOK_MATCHER = "Bash|PowerShell|Write|Edit|MultiEdit|NotebookEdit|Read|Glob|Grep|WebFetch|WebSearch|Task|Agent|mcp__.*";
     HOOK_TIMEOUT_SECONDS = 10;
+    PERMISSION_DENY_PATHS = [
+      "**/.claude/settings.json",
+      "**/.claude/settings.local.json",
+      "~/.claude/settings.json",
+      "~/.claude/settings.local.json",
+      "**/.astrasync/**",
+      "~/.astrasync/**"
+    ];
+    GUARD_PERMISSION_DENY_RULES = PERMISSION_DENY_PATHS.map(
+      (p) => `Edit(${p})`
+    );
+    LEGACY_GUARD_PERMISSION_DENY_RULES = [];
     GUARD_SELF_PROTECTION_PATTERNS = [
       "**/.claude/settings.json",
       "**/.claude/settings.local.json",
@@ -7264,6 +7330,17 @@ async function cmdInstallClaudeCode() {
   } else {
     console.log(`  Hook:     already present in ${settingsPath}`);
   }
+  const permResult = installClaudePermissionRules(settingsPath);
+  if (permResult.addedRules.length > 0) {
+    console.log(
+      `  Deny:     ${permResult.addedRules.length} permissions.deny self-protection rules added in ${settingsPath}`
+    );
+  } else {
+    console.log("  Deny:     permissions.deny self-protection rules already present");
+  }
+  if (permResult.removedStaleRules.length > 0) {
+    console.log(`            removed ${permResult.removedStaleRules.length} stale guard rules`);
+  }
   console.log("\n  Next steps:");
   console.log("    1. Start a NEW Claude Code session (settings load at startup).");
   console.log(`    2. Watch decisions: tail -f ${path.join(astrasyncDir, "traces")}/*.jsonl`);
@@ -7281,6 +7358,16 @@ async function cmdUninstallClaudeCode() {
   } else {
     console.log(`[AstraSync] No AstraSync hook found in ${settingsPath}`);
   }
+  const removedRules = uninstallClaudePermissionRules(settingsPath);
+  if (removedRules.length > 0) {
+    console.log(
+      `[AstraSync] Removed ${removedRules.length} permissions.deny rules from ${settingsPath}.`
+    );
+    console.log("            If you had added any of these yourself, re-add them:");
+    for (const rule of removedRules) {
+      console.log(`              ${rule}`);
+    }
+  }
   console.log(
     `[AstraSync] Policy and traces left in place at ${astrasyncDir} \u2014 delete manually if unwanted.`
   );

package/dist/browser/background.js

@@ -4493,14 +4493,14 @@ var InMemoryNonceStore = class {
 var defaultNonceStore = new InMemoryNonceStore();
 
 // src/transport/vi.ts
-var import_decode = require("@sd-jwt/decode");
+var import_core = require("@sd-jwt/core");
 var import_node_crypto = require("crypto");
 
 // src/transport/stripe-webhook.ts
 var import_node_crypto2 = require("crypto");
 
 // src/transport/ap2.ts
-var import_decode2 = require("@sd-jwt/decode");
+var import_core2 = require("@sd-jwt/core");
 var import_node_crypto3 = require("crypto");
 
 // src/transport/mpp.ts