@chrischow/pi-lockdown 0.2.0 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +40 -31
- package/dist/constants.d.ts +2 -1
- package/dist/constants.d.ts.map +1 -1
- package/dist/constants.js +2 -1
- package/dist/constants.js.map +1 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +36 -10
- package/dist/index.js.map +1 -1
- package/dist/schema.d.ts +78 -59
- package/dist/schema.d.ts.map +1 -1
- package/dist/schema.js +30 -27
- package/dist/schema.js.map +1 -1
- package/dist/utils.d.ts +1 -1
- package/dist/utils.d.ts.map +1 -1
- package/dist/utils.js +34 -7
- package/dist/utils.js.map +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# Lockdown
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
An opinionated [Pi](https://pi.dev/) extension that adds security constraints to agent tool usage. It intercepts every tool call and enforces fine-grained read/edit/write permissions based on whether files are inside or outside the project, and whether they match protected patterns (e.g., `.env`, `.git/`, `node_modules/`).
|
|
4
4
|
|
|
5
5
|
## Installation
|
|
6
6
|
|
|
@@ -9,7 +9,7 @@ pi install npm:@chrischow/pi-lockdown
|
|
|
9
9
|
```
|
|
10
10
|
|
|
11
11
|
## Usage
|
|
12
|
-
|
|
12
|
+
Configure Lockdown (see [Configuration](#configuration) below), then start Pi.
|
|
13
13
|
|
|
14
14
|
If you need to amend settings for the session:
|
|
15
15
|
|
|
@@ -21,58 +21,67 @@ If you need to amend settings for the session:
|
|
|
21
21
|
**Note:** `/lockdown:session-permissions` allows you to toggle any of the 16 permission slots on the fly. Changes apply immediately and last for the current session only.
|
|
22
22
|
|
|
23
23
|
## What It Does
|
|
24
|
-
When you start Pi, Lockdown automatically sets the tools
|
|
24
|
+
When you start Pi, Lockdown automatically sets the tools configured under the `tools` and `customTools` properties in your settings.
|
|
25
25
|
|
|
26
26
|
On every tool call, Lockdown evaluates (1) whether the target path is internal or external, (2) whether the path matches a proteted pattern, and (3) what is the tool call. Lockdown then applies the appropriate permission:
|
|
27
27
|
|
|
28
28
|
- `allow`: Execution continues
|
|
29
29
|
- `warn`: Execution is halted - you must confirm the action
|
|
30
|
-
- `block`: Execution is blocked
|
|
30
|
+
- `block`: Execution is blocked unconditionally
|
|
31
31
|
|
|
32
32
|
### Empty write protection
|
|
33
33
|
|
|
34
34
|
Lockdown also blocks empty writes (`write` with empty content) as a safeguard against file soft-deletion workarounds.
|
|
35
35
|
|
|
36
36
|
## Configuration
|
|
37
|
-
Add a `lockdown` property in your project or global `settings.json
|
|
37
|
+
Add a `lockdown` property in your project or global `settings.json`. The order of hierarchy that Lockdown respects is: (1) project, (2) global, then (3) defaults (see below). Lockdown **does not** merge project and global settings. For example, if a `lockdown` config exists in **both** the project and global `settings.json` files, only the properties in the **project** will be applied on top of the defaults, and none of the configs in the global `settings.json` will be applied.
|
|
38
|
+
|
|
39
|
+
Mandatory properties:
|
|
40
|
+
- `customTools`: You must add the permissions for all custom tools and tools from other extensions here. Otherwise, Lockdown will not load them into your session.
|
|
41
|
+
|
|
42
|
+
**All other properties are optional.** Any omitted fields will fall back to the built-in defaults listed below.
|
|
38
43
|
|
|
39
44
|
```json
|
|
40
45
|
{
|
|
41
46
|
"lockdown": {
|
|
47
|
+
"customTools": {
|
|
48
|
+
"custom-tool-name": "<allow|warn|block>"
|
|
49
|
+
},
|
|
42
50
|
// No Bash
|
|
43
51
|
"tools": ["read", "edit", "write", "grep", "find", "ls"],
|
|
44
|
-
"customTools": [],
|
|
45
52
|
"protectedPatterns": [
|
|
46
53
|
"**/.env*",
|
|
47
54
|
"**/.git/**",
|
|
48
55
|
"**/node_modules/**"
|
|
49
56
|
],
|
|
50
|
-
"
|
|
51
|
-
"
|
|
52
|
-
"
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
"
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
"internal": {
|
|
65
|
-
"protected": {
|
|
66
|
-
"read": "warn",
|
|
67
|
-
"write": "warn",
|
|
68
|
-
"edit": "warn",
|
|
69
|
-
"other": "warn"
|
|
57
|
+
"fileAccess": {
|
|
58
|
+
"external": {
|
|
59
|
+
"protected": {
|
|
60
|
+
"read": "block",
|
|
61
|
+
"write": "block",
|
|
62
|
+
"edit": "block",
|
|
63
|
+
"other": "block"
|
|
64
|
+
},
|
|
65
|
+
"unprotected": {
|
|
66
|
+
"read": "warn",
|
|
67
|
+
"write": "block",
|
|
68
|
+
"edit": "block",
|
|
69
|
+
"other": "block"
|
|
70
|
+
}
|
|
70
71
|
},
|
|
71
|
-
"
|
|
72
|
-
"
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
72
|
+
"internal": {
|
|
73
|
+
"protected": {
|
|
74
|
+
"read": "warn",
|
|
75
|
+
"write": "warn",
|
|
76
|
+
"edit": "warn",
|
|
77
|
+
"other": "warn"
|
|
78
|
+
},
|
|
79
|
+
"unprotected": {
|
|
80
|
+
"read": "allow",
|
|
81
|
+
"write": "warn",
|
|
82
|
+
"edit": "warn",
|
|
83
|
+
"other": "warn"
|
|
84
|
+
}
|
|
76
85
|
}
|
|
77
86
|
}
|
|
78
87
|
}
|
package/dist/constants.d.ts
CHANGED
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
export declare const LOCATION: readonly ["internal", "external"];
|
|
2
2
|
export declare const PROTECTION: readonly ["unprotected", "protected"];
|
|
3
|
-
export declare const PERM_ACTION: readonly ["read", "edit", "write"
|
|
3
|
+
export declare const PERM_ACTION: readonly ["read", "edit", "write"];
|
|
4
|
+
export declare const SETTING_ID_SEPARATOR = "__";
|
|
4
5
|
//# sourceMappingURL=constants.d.ts.map
|
package/dist/constants.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ,mCAAoC,CAAA;AACzD,eAAO,MAAM,UAAU,uCAAwC,CAAA;AAC/D,eAAO,MAAM,WAAW,
|
|
1
|
+
{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ,mCAAoC,CAAA;AACzD,eAAO,MAAM,UAAU,uCAAwC,CAAA;AAC/D,eAAO,MAAM,WAAW,oCAAqC,CAAA;AAC7D,eAAO,MAAM,oBAAoB,OAAO,CAAA"}
|
package/dist/constants.js
CHANGED
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
export const LOCATION = ['internal', 'external'];
|
|
2
2
|
export const PROTECTION = ['unprotected', 'protected'];
|
|
3
|
-
export const PERM_ACTION = ['read', 'edit', 'write'
|
|
3
|
+
export const PERM_ACTION = ['read', 'edit', 'write'];
|
|
4
|
+
export const SETTING_ID_SEPARATOR = '__';
|
|
4
5
|
//# sourceMappingURL=constants.js.map
|
package/dist/constants.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,UAAU,CAAU,CAAA;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,WAAW,CAAU,CAAA;AAC/D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,
|
|
1
|
+
{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,UAAU,CAAU,CAAA;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,WAAW,CAAU,CAAA;AAC/D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAU,CAAA;AAC7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAA"}
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,YAAY,EAA6C,MAAM,iCAAiC,CAAA;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,YAAY,EAA6C,MAAM,iCAAiC,CAAA;AAc9G;;GAEG;AACH,MAAM,CAAC,OAAO,WAAW,EAAE,EAAE,YAAY,QAqKxC"}
|
package/dist/index.js
CHANGED
|
@@ -5,8 +5,10 @@ import { LockdownLevelSchema, LockdownSettingsSchema } from './schema';
|
|
|
5
5
|
import { constructSettingsList, isInside, loadSettings } from './utils';
|
|
6
6
|
// Settings
|
|
7
7
|
let lockdownSettings = LockdownSettingsSchema.parse({
|
|
8
|
-
|
|
9
|
-
|
|
8
|
+
fileAccess: {
|
|
9
|
+
external: { protected: {}, unprotected: {} },
|
|
10
|
+
internal: { protected: {}, unprotected: {} },
|
|
11
|
+
},
|
|
10
12
|
});
|
|
11
13
|
/**
|
|
12
14
|
* Lockdown: A Pi extension to add security constraints to agents' tool usage.
|
|
@@ -15,9 +17,15 @@ export default function (pi) {
|
|
|
15
17
|
// Set allowed tools
|
|
16
18
|
pi.on('session_start', (_, ctx) => {
|
|
17
19
|
// Load settings
|
|
18
|
-
|
|
20
|
+
const loadedSettings = loadSettings(ctx);
|
|
21
|
+
if (!loadedSettings) {
|
|
22
|
+
ctx.ui.notify('Could not load settings.', 'error');
|
|
23
|
+
ctx.shutdown();
|
|
24
|
+
return;
|
|
25
|
+
}
|
|
26
|
+
lockdownSettings = loadedSettings;
|
|
19
27
|
// Set tools
|
|
20
|
-
const tools = lockdownSettings.
|
|
28
|
+
const tools = lockdownSettings.defaultTools.concat(Object.keys(lockdownSettings.customTools));
|
|
21
29
|
pi.setActiveTools(Array.from(new Set(tools)));
|
|
22
30
|
});
|
|
23
31
|
pi.on('tool_call', async (event, ctx) => {
|
|
@@ -47,10 +55,13 @@ export default function (pi) {
|
|
|
47
55
|
else if (isGrep || isFind || isLs) {
|
|
48
56
|
inputPath = event.input.path ?? '.';
|
|
49
57
|
}
|
|
58
|
+
else {
|
|
59
|
+
inputPath = event.input ? JSON.stringify(event.input) : '.';
|
|
60
|
+
}
|
|
50
61
|
const location = isInside(ctx.cwd, inputPath) ? 'internal' : 'external';
|
|
51
62
|
const isProtected = lockdownSettings.protectedPatterns.some((pattern) => path.matchesGlob(inputPath, pattern));
|
|
52
63
|
const protection = isProtected ? 'protected' : 'unprotected';
|
|
53
|
-
let permAction;
|
|
64
|
+
let permAction = undefined;
|
|
54
65
|
if (isRead) {
|
|
55
66
|
permAction = 'read';
|
|
56
67
|
}
|
|
@@ -66,10 +77,14 @@ export default function (pi) {
|
|
|
66
77
|
else if (isWrite) {
|
|
67
78
|
permAction = 'write';
|
|
68
79
|
}
|
|
80
|
+
let permission;
|
|
81
|
+
if (permAction && ['read', 'edit', 'write'].includes(permAction)) {
|
|
82
|
+
permission = lockdownSettings.fileAccess[location][protection][permAction];
|
|
83
|
+
}
|
|
69
84
|
else {
|
|
70
|
-
|
|
85
|
+
// Custom tools: Default to warn
|
|
86
|
+
permission = lockdownSettings.customTools[event.toolName] ?? 'warn';
|
|
71
87
|
}
|
|
72
|
-
const permission = lockdownSettings[location][protection][permAction];
|
|
73
88
|
switch (permission) {
|
|
74
89
|
case 'block':
|
|
75
90
|
return {
|
|
@@ -94,7 +109,13 @@ export default function (pi) {
|
|
|
94
109
|
pi.registerCommand('lockdown:reset', {
|
|
95
110
|
description: 'Reset permissions to those specified in settings.json and/or defaults.',
|
|
96
111
|
handler: async (_, ctx) => {
|
|
97
|
-
|
|
112
|
+
const loadedSettings = loadSettings(ctx);
|
|
113
|
+
if (!loadedSettings) {
|
|
114
|
+
ctx.ui.notify('Could not update permissions.', 'error');
|
|
115
|
+
ctx.shutdown();
|
|
116
|
+
return;
|
|
117
|
+
}
|
|
118
|
+
lockdownSettings = loadedSettings;
|
|
98
119
|
ctx.ui.notify('Permissions have been reset.', 'info');
|
|
99
120
|
},
|
|
100
121
|
});
|
|
@@ -111,8 +132,13 @@ export default function (pi) {
|
|
|
111
132
|
container.addChild(titleBox);
|
|
112
133
|
const settingsList = new SettingsList(items, Math.min(items.length + 2, 15), getSettingsListTheme(), (id, newValue) => {
|
|
113
134
|
// Handle value change
|
|
114
|
-
const [
|
|
115
|
-
|
|
135
|
+
const [permType, locationOrCustomTool, protection, perm] = id.split('__');
|
|
136
|
+
if (permType === 'fileAccess') {
|
|
137
|
+
lockdownSettings.fileAccess[locationOrCustomTool][protection][perm] = LockdownLevelSchema.parse(newValue);
|
|
138
|
+
}
|
|
139
|
+
else {
|
|
140
|
+
lockdownSettings.customTools[locationOrCustomTool] = LockdownLevelSchema.parse(newValue);
|
|
141
|
+
}
|
|
116
142
|
}, () => done(undefined), // On close
|
|
117
143
|
{ enableSearch: true });
|
|
118
144
|
container.addChild(settingsList);
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAqB,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AAC9G,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAA;AAE3E,OAAO,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAqB,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AAC9G,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAA;AAE3E,OAAO,EAAsB,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAC1F,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAEvE,WAAW;AACX,IAAI,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC;IAClD,UAAU,EAAE;QACV,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QAC5C,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;KAC7C;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,CAAC,OAAO,WAAW,EAAgB;IACvC,oBAAoB;IACpB,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QAChC,gBAAgB;QAChB,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAA;YAClD,GAAG,CAAC,QAAQ,EAAE,CAAA;YACd,OAAM;QACR,CAAC;QAED,gBAAgB,GAAG,cAAc,CAAA;QAEjC,YAAY;QACZ,MAAM,KAAK,GAAI,gBAAgB,CAAC,YAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAA;QAC3G,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,aAAa;QACb,IAAI,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAA;QAClE,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACjD,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAE7C,4CAA4C;QAC5C,IAAI,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,8EAA8E;aACvF,CAAA;QACH,CAAC;QAED,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,MAAM,IAAI,OAAO,CAAA;QAC3C,IAAI,SAAS,GAAG,GAAG,CAAA;QACnB,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAA;QAC9B,CAAC;aAAM,IAAI,MAAM,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACpC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAA;QACrC,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;QAC7D,CAAC;QAED,MAAM,QAAQ,GAA4B,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAA;QAChG,MAAM,WAAW,GAAG,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9G,MAAM,UAAU,GAAgC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAA;QAEzF,IAAI,UAAU,GAA0C,SAAS,CAAA;QAEjE,IAAI,MAAM,EAAE,CAAC;YACX,UAAU,GAAG,MAAM,CAAA;QACrB,CAAC;aAAM,IAAI,MAAM,EAAE,CAAC;YAClB,UAAU,GAAG,MAAM,CAAA;QACrB,CAAC;aAAM,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YAC1B,UAAU,GAAG,MAAM,CAAA;QACrB,CAAC;aAAM,IAAI,MAAM,EAAE,CAAC;YAClB,UAAU,GAAG,MAAM,CAAA;QACrB,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,UAAU,GAAG,OAAO,CAAA;QACtB,CAAC;QAED,IAAI,UAAyB,CAAA;QAC7B,IAAI,UAAU,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,CAAA;QAC5E,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAA;QACrE,CAAC;QAED,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,OAAO;gBACV,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,gDAAgD,KAAK,CAAC,QAAQ,KAAK,SAAS,GAAG;iBACxF,CAAA;YACH,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAChC,oDAAoD,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,EAClF,CAAC,KAAK,EAAE,IAAI,CAAC,CACd,CAAA;gBAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBACrB,OAAO;wBACL,KAAK,EAAE,IAAI;wBACX,MAAM,EAAE,oCAAoC;qBAC7C,CAAA;gBACH,CAAC;gBACD,OAAM;YACR,CAAC;YACD,KAAK,OAAO;gBACV,OAAM;QACV,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,oBAAoB;IACpB,EAAE,CAAC,eAAe,CAAC,gBAAgB,EAAE;QACnC,WAAW,EAAE,wEAAwE;QACrF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;YACxC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,+BAA+B,EAAE,OAAO,CAAC,CAAA;gBACvD,GAAG,CAAC,QAAQ,EAAE,CAAA;gBACd,OAAM;YACR,CAAC;YACD,gBAAgB,GAAG,cAAc,CAAA;YACjC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAA;QACvD,CAAC;KACF,CAAC,CAAA;IAEF,iCAAiC;IACjC,EAAE,CAAC,eAAe,CAAC,8BAA8B,EAAE;QACjD,WAAW,EAAE,gDAAgD;QAC7D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAA;YAErD,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAC7C,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAA;gBAEjC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBAC9B,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBACxF,QAAQ,CAAC,QAAQ,CACf,IAAI,IAAI,CACN,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,kFAAkF,CAAC,EACnG,CAAC,EACD,CAAC,CACF,CACF,CAAA;gBAED,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;gBAE5B,MAAM,YAAY,GAAG,IAAI,YAAY,CACnC,KAAK,EACL,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,EAC9B,oBAAoB,EAAE,EACtB,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE;oBACf,sBAAsB;oBACtB,MAAM,CAAC,QAAQ,EAAE,oBAAoB,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;oBACzE,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;wBAC9B,gBAAgB,CAAC,UAAU,CAAC,oBAA+C,CAAC,CAC1E,UAAyC,CAC1C,CAAC,IAAiC,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;oBAC5E,CAAC;yBAAM,CAAC;wBACN,gBAAgB,CAAC,WAAW,CAAC,oBAA8B,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;oBACpG,CAAC;gBACH,CAAC,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW;gBAClC,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CAAA;gBACD,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;gBAEhC,OAAO;oBACL,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;oBAClC,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE;oBACxC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC;iBACxD,CAAA;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}
|
package/dist/schema.d.ts
CHANGED
|
@@ -4,68 +4,87 @@ export declare const LockdownLevelSchema: z.ZodEnum<{
|
|
|
4
4
|
[x: string]: string;
|
|
5
5
|
}>;
|
|
6
6
|
export type LockdownLevel = z.infer<typeof LockdownLevelSchema>;
|
|
7
|
+
export declare const DefaultToolsSchema: z.ZodArray<z.ZodEnum<{
|
|
8
|
+
read: "read";
|
|
9
|
+
edit: "edit";
|
|
10
|
+
write: "write";
|
|
11
|
+
grep: "grep";
|
|
12
|
+
find: "find";
|
|
13
|
+
ls: "ls";
|
|
14
|
+
}>>;
|
|
7
15
|
export declare const LockdownSettingsSchema: z.ZodObject<{
|
|
8
|
-
|
|
9
|
-
|
|
16
|
+
defaultTools: z.ZodDefault<z.ZodArray<z.ZodEnum<{
|
|
17
|
+
read: "read";
|
|
18
|
+
edit: "edit";
|
|
19
|
+
write: "write";
|
|
20
|
+
grep: "grep";
|
|
21
|
+
find: "find";
|
|
22
|
+
ls: "ls";
|
|
23
|
+
}>>>;
|
|
10
24
|
protectedPatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
+
customTools: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
|
|
26
|
+
[x: string]: string;
|
|
27
|
+
}>>>;
|
|
28
|
+
fileAccess: z.ZodObject<{
|
|
29
|
+
external: z.ZodObject<{
|
|
30
|
+
protected: z.ZodObject<{
|
|
31
|
+
read: z.ZodDefault<z.ZodEnum<{
|
|
32
|
+
[x: string]: string;
|
|
33
|
+
}>>;
|
|
34
|
+
write: z.ZodDefault<z.ZodEnum<{
|
|
35
|
+
[x: string]: string;
|
|
36
|
+
}>>;
|
|
37
|
+
edit: z.ZodDefault<z.ZodEnum<{
|
|
38
|
+
[x: string]: string;
|
|
39
|
+
}>>;
|
|
40
|
+
other: z.ZodDefault<z.ZodEnum<{
|
|
41
|
+
[x: string]: string;
|
|
42
|
+
}>>;
|
|
43
|
+
}, z.core.$strip>;
|
|
44
|
+
unprotected: z.ZodObject<{
|
|
45
|
+
read: z.ZodDefault<z.ZodEnum<{
|
|
46
|
+
[x: string]: string;
|
|
47
|
+
}>>;
|
|
48
|
+
write: z.ZodDefault<z.ZodEnum<{
|
|
49
|
+
[x: string]: string;
|
|
50
|
+
}>>;
|
|
51
|
+
edit: z.ZodDefault<z.ZodEnum<{
|
|
52
|
+
[x: string]: string;
|
|
53
|
+
}>>;
|
|
54
|
+
other: z.ZodDefault<z.ZodEnum<{
|
|
55
|
+
[x: string]: string;
|
|
56
|
+
}>>;
|
|
57
|
+
}, z.core.$strip>;
|
|
25
58
|
}, z.core.$strip>;
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
}
|
|
55
|
-
}, z.core.$strip>;
|
|
56
|
-
unprotected: z.ZodObject<{
|
|
57
|
-
read: z.ZodDefault<z.ZodEnum<{
|
|
58
|
-
[x: string]: string;
|
|
59
|
-
}>>;
|
|
60
|
-
write: z.ZodDefault<z.ZodEnum<{
|
|
61
|
-
[x: string]: string;
|
|
62
|
-
}>>;
|
|
63
|
-
edit: z.ZodDefault<z.ZodEnum<{
|
|
64
|
-
[x: string]: string;
|
|
65
|
-
}>>;
|
|
66
|
-
other: z.ZodDefault<z.ZodEnum<{
|
|
67
|
-
[x: string]: string;
|
|
68
|
-
}>>;
|
|
59
|
+
internal: z.ZodObject<{
|
|
60
|
+
protected: z.ZodObject<{
|
|
61
|
+
read: z.ZodDefault<z.ZodEnum<{
|
|
62
|
+
[x: string]: string;
|
|
63
|
+
}>>;
|
|
64
|
+
write: z.ZodDefault<z.ZodEnum<{
|
|
65
|
+
[x: string]: string;
|
|
66
|
+
}>>;
|
|
67
|
+
edit: z.ZodDefault<z.ZodEnum<{
|
|
68
|
+
[x: string]: string;
|
|
69
|
+
}>>;
|
|
70
|
+
other: z.ZodDefault<z.ZodEnum<{
|
|
71
|
+
[x: string]: string;
|
|
72
|
+
}>>;
|
|
73
|
+
}, z.core.$strip>;
|
|
74
|
+
unprotected: z.ZodObject<{
|
|
75
|
+
read: z.ZodDefault<z.ZodEnum<{
|
|
76
|
+
[x: string]: string;
|
|
77
|
+
}>>;
|
|
78
|
+
write: z.ZodDefault<z.ZodEnum<{
|
|
79
|
+
[x: string]: string;
|
|
80
|
+
}>>;
|
|
81
|
+
edit: z.ZodDefault<z.ZodEnum<{
|
|
82
|
+
[x: string]: string;
|
|
83
|
+
}>>;
|
|
84
|
+
other: z.ZodDefault<z.ZodEnum<{
|
|
85
|
+
[x: string]: string;
|
|
86
|
+
}>>;
|
|
87
|
+
}, z.core.$strip>;
|
|
69
88
|
}, z.core.$strip>;
|
|
70
89
|
}, z.core.$strip>;
|
|
71
90
|
}, z.core.$strip>;
|
package/dist/schema.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAA;AAEnB,eAAO,MAAM,oBAAoB,UAA6B,CAAA;AAC9D,eAAO,MAAM,mBAAmB;;EAA+B,CAAA;AAC/D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;
|
|
1
|
+
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAA;AAEnB,eAAO,MAAM,oBAAoB,UAA6B,CAAA;AAC9D,eAAO,MAAM,mBAAmB;;EAA+B,CAAA;AAC/D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAG/D,eAAO,MAAM,kBAAkB;;;;;;;GAAgC,CAAA;AAE/D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkCjC,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAA"}
|
package/dist/schema.js
CHANGED
|
@@ -2,36 +2,39 @@ import z from 'zod';
|
|
|
2
2
|
export const lockdownLevelOptions = ['allow', 'warn', 'block'];
|
|
3
3
|
export const LockdownLevelSchema = z.enum(lockdownLevelOptions);
|
|
4
4
|
const defaultTools = ['read', 'edit', 'write', 'grep', 'find', 'ls'];
|
|
5
|
+
export const DefaultToolsSchema = z.array(z.enum(defaultTools));
|
|
5
6
|
export const LockdownSettingsSchema = z.object({
|
|
6
|
-
|
|
7
|
-
customTools: z.array(z.string()).default([]),
|
|
7
|
+
defaultTools: DefaultToolsSchema.default([...defaultTools]),
|
|
8
8
|
protectedPatterns: z.array(z.string()).default(['**/.env*', '**/.git/**', '**/node_modules/**']),
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
9
|
+
customTools: z.record(z.string(), LockdownLevelSchema).default({}),
|
|
10
|
+
fileAccess: z.object({
|
|
11
|
+
external: z.object({
|
|
12
|
+
protected: z.object({
|
|
13
|
+
read: LockdownLevelSchema.default('block'),
|
|
14
|
+
write: LockdownLevelSchema.default('block'),
|
|
15
|
+
edit: LockdownLevelSchema.default('block'),
|
|
16
|
+
other: LockdownLevelSchema.default('block'),
|
|
17
|
+
}),
|
|
18
|
+
unprotected: z.object({
|
|
19
|
+
read: LockdownLevelSchema.default('allow'),
|
|
20
|
+
write: LockdownLevelSchema.default('block'),
|
|
21
|
+
edit: LockdownLevelSchema.default('block'),
|
|
22
|
+
other: LockdownLevelSchema.default('block'),
|
|
23
|
+
}),
|
|
15
24
|
}),
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
}),
|
|
30
|
-
unprotected: z.object({
|
|
31
|
-
read: LockdownLevelSchema.default('allow'),
|
|
32
|
-
write: LockdownLevelSchema.default('warn'),
|
|
33
|
-
edit: LockdownLevelSchema.default('warn'),
|
|
34
|
-
other: LockdownLevelSchema.default('warn'),
|
|
25
|
+
internal: z.object({
|
|
26
|
+
protected: z.object({
|
|
27
|
+
read: LockdownLevelSchema.default('warn'),
|
|
28
|
+
write: LockdownLevelSchema.default('warn'),
|
|
29
|
+
edit: LockdownLevelSchema.default('warn'),
|
|
30
|
+
other: LockdownLevelSchema.default('warn'),
|
|
31
|
+
}),
|
|
32
|
+
unprotected: z.object({
|
|
33
|
+
read: LockdownLevelSchema.default('allow'),
|
|
34
|
+
write: LockdownLevelSchema.default('warn'),
|
|
35
|
+
edit: LockdownLevelSchema.default('warn'),
|
|
36
|
+
other: LockdownLevelSchema.default('warn'),
|
|
37
|
+
}),
|
|
35
38
|
}),
|
|
36
39
|
}),
|
|
37
40
|
});
|
package/dist/schema.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAA;AAEnB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;AAG/D,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,
|
|
1
|
+
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAA;AAEnB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;AAG/D,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAU,CAAA;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;AAE/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC;IAC3D,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAChG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;gBAClB,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC1C,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC3C,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC1C,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;aAC5C,CAAC;YACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC1C,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC3C,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC1C,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;aAC5C,CAAC;SACH,CAAC;QACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;gBAClB,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;gBACzC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1C,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;gBACzC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;aAC3C,CAAC;YACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC1C,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1C,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;gBACzC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;aAC3C,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC,CAAA"}
|
package/dist/utils.d.ts
CHANGED
|
@@ -2,6 +2,6 @@ import { type ExtensionContext } from '@earendil-works/pi-coding-agent';
|
|
|
2
2
|
import type { SettingItem } from '@earendil-works/pi-tui';
|
|
3
3
|
import { type LockdownSettings } from './schema';
|
|
4
4
|
export declare function isInside(root: string, value: string): boolean;
|
|
5
|
-
export declare function loadSettings(ctx: ExtensionContext): LockdownSettings;
|
|
5
|
+
export declare function loadSettings(ctx: ExtensionContext): LockdownSettings | null;
|
|
6
6
|
export declare function constructSettingsList(lockdownSettings: LockdownSettings): SettingItem[];
|
|
7
7
|
//# sourceMappingURL=utils.d.ts.map
|
package/dist/utils.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAmB,MAAM,iCAAiC,CAAA;AACxF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAGzD,OAAO,EAAwB,KAAK,gBAAgB,EAA0B,MAAM,UAAU,CAAA;AAE9F,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAY7D;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,
|
|
1
|
+
{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAmB,MAAM,iCAAiC,CAAA;AACxF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAGzD,OAAO,EAAwB,KAAK,gBAAgB,EAA0B,MAAM,UAAU,CAAA;AAE9F,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAY7D;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,IAAI,CAkD3E;AAED,wBAAgB,qBAAqB,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,WAAW,EAAE,CAsCvF"}
|
package/dist/utils.js
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import path from 'node:path';
|
|
2
2
|
import { SettingsManager } from '@earendil-works/pi-coding-agent';
|
|
3
|
-
import { LOCATION, PERM_ACTION, PROTECTION } from './constants';
|
|
3
|
+
import { LOCATION, PERM_ACTION, PROTECTION, SETTING_ID_SEPARATOR } from './constants';
|
|
4
4
|
import { lockdownLevelOptions, LockdownSettingsSchema } from './schema';
|
|
5
5
|
export function isInside(root, value) {
|
|
6
6
|
// Resolve `value` relative to `root`, NOT the process CWD.
|
|
@@ -18,12 +18,26 @@ export function loadSettings(ctx) {
|
|
|
18
18
|
const projectSettings = sm.getProjectSettings();
|
|
19
19
|
const globalSettings = sm.getGlobalSettings();
|
|
20
20
|
// Read project settings first
|
|
21
|
-
const { success, data: projectLockdownSettings } = LockdownSettingsSchema.safeParse(projectSettings.lockdown);
|
|
22
|
-
if (
|
|
21
|
+
const { success: projectSuccess, data: projectLockdownSettings, error: projectError, } = LockdownSettingsSchema.safeParse(projectSettings.lockdown);
|
|
22
|
+
if (!projectSuccess && projectError.issues.length > 0) {
|
|
23
|
+
for (const issue of projectError.issues) {
|
|
24
|
+
ctx.ui.notify(`[LOCKDOWN] ${issue.path[0]} - ${issue.message}`, 'error');
|
|
25
|
+
}
|
|
26
|
+
ctx.shutdown();
|
|
27
|
+
return null;
|
|
28
|
+
}
|
|
29
|
+
if (projectSuccess && projectLockdownSettings) {
|
|
23
30
|
return projectLockdownSettings;
|
|
24
31
|
}
|
|
25
32
|
// Global settings fallback
|
|
26
|
-
const { success: globalSuccess, data: globalLockdownSettings } = LockdownSettingsSchema.safeParse(globalSettings.lockdown);
|
|
33
|
+
const { success: globalSuccess, data: globalLockdownSettings, error: globalError, } = LockdownSettingsSchema.safeParse(globalSettings.lockdown);
|
|
34
|
+
if (!globalSuccess && globalError.issues.length > 0) {
|
|
35
|
+
for (const issue of globalError.issues) {
|
|
36
|
+
ctx.ui.notify(`[LOCKDOWN] ${issue.path[0]} - ${issue.message}`, 'error');
|
|
37
|
+
}
|
|
38
|
+
ctx.shutdown();
|
|
39
|
+
return null;
|
|
40
|
+
}
|
|
27
41
|
if (globalSuccess && globalLockdownSettings) {
|
|
28
42
|
return globalLockdownSettings;
|
|
29
43
|
}
|
|
@@ -35,14 +49,15 @@ export function loadSettings(ctx) {
|
|
|
35
49
|
}
|
|
36
50
|
export function constructSettingsList(lockdownSettings) {
|
|
37
51
|
const items = [];
|
|
52
|
+
// File access
|
|
38
53
|
for (const location of LOCATION) {
|
|
39
54
|
for (const protection of PROTECTION) {
|
|
40
55
|
for (const permAction of PERM_ACTION) {
|
|
41
|
-
const id =
|
|
42
|
-
const fullLabel = permAction
|
|
56
|
+
const id = ['fileAccess', location, protection, permAction].join(SETTING_ID_SEPARATOR);
|
|
57
|
+
const fullLabel = permAction;
|
|
43
58
|
const titleCaseLabel = fullLabel[0]?.toUpperCase() + fullLabel.slice(1);
|
|
44
59
|
const label = `${titleCaseLabel.padEnd(12, ' ')}> ${location} ${protection.padEnd(11, ' ')}`;
|
|
45
|
-
const currentValue = lockdownSettings[location][protection][permAction];
|
|
60
|
+
const currentValue = lockdownSettings.fileAccess[location][protection][permAction];
|
|
46
61
|
items.push({
|
|
47
62
|
id,
|
|
48
63
|
label,
|
|
@@ -52,6 +67,18 @@ export function constructSettingsList(lockdownSettings) {
|
|
|
52
67
|
}
|
|
53
68
|
}
|
|
54
69
|
}
|
|
70
|
+
// Custom tools
|
|
71
|
+
Object.keys(lockdownSettings.customTools).forEach((customTool) => {
|
|
72
|
+
const id = ['customTool', customTool].join(SETTING_ID_SEPARATOR);
|
|
73
|
+
const label = customTool.padEnd(36, ' ');
|
|
74
|
+
const currentValue = lockdownSettings.customTools[customTool] ?? 'warn';
|
|
75
|
+
items.push({
|
|
76
|
+
id,
|
|
77
|
+
label,
|
|
78
|
+
currentValue,
|
|
79
|
+
values: lockdownLevelOptions,
|
|
80
|
+
});
|
|
81
|
+
});
|
|
55
82
|
return items;
|
|
56
83
|
}
|
|
57
84
|
//# sourceMappingURL=utils.js.map
|
package/dist/utils.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAyB,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAGxF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;
|
|
1
|
+
{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAyB,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAGxF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACrF,OAAO,EAAE,oBAAoB,EAAyB,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAE9F,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAa;IAClD,2DAA2D;IAC3D,oEAAoE;IACpE,gDAAgD;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAE/C,+EAA+E;IAC/E,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAA;IAC7D,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAE5D,6DAA6D;IAC7D,OAAO,eAAe,KAAK,IAAI,IAAI,eAAe,CAAC,UAAU,CAAC,cAAc,CAAC,CAAA;AAC/E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAqB;IAChD,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC1C,MAAM,eAAe,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAA;IAC/C,MAAM,cAAc,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAA;IAE7C,8BAA8B;IAC9B,MAAM,EACJ,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,uBAAuB,EAC7B,KAAK,EAAE,YAAY,GACpB,GAAG,sBAAsB,CAAC,SAAS,CAAE,eAA2C,CAAC,QAAQ,CAAC,CAAA;IAE3F,IAAI,CAAC,cAAc,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YACxC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,CAAC,CAAW,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;QACpF,CAAC;QAED,GAAG,CAAC,QAAQ,EAAE,CAAA;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,cAAc,IAAI,uBAAuB,EAAE,CAAC;QAC9C,OAAO,uBAAuB,CAAA;IAChC,CAAC;IAED,2BAA2B;IAC3B,MAAM,EACJ,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,sBAAsB,EAC5B,KAAK,EAAE,WAAW,GACnB,GAAG,sBAAsB,CAAC,SAAS,CAAE,cAA0C,CAAC,QAAQ,CAAC,CAAA;IAE1F,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,CAAC,CAAW,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;QACpF,CAAC;QAED,GAAG,CAAC,QAAQ,EAAE,CAAA;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,aAAa,IAAI,sBAAsB,EAAE,CAAC;QAC5C,OAAO,sBAAsB,CAAA;IAC/B,CAAC;IAED,eAAe;IACf,OAAO,sBAAsB,CAAC,KAAK,CAAC;QAClC,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QAC5C,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;KAC7C,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,gBAAkC;IACtE,MAAM,KAAK,GAAkB,EAAE,CAAA;IAE/B,cAAc;IACd,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;YACpC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;gBACtF,MAAM,SAAS,GAAG,UAAU,CAAA;gBAC5B,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBACvE,MAAM,KAAK,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,QAAQ,KAAK,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAA;gBAC9F,MAAM,YAAY,GAAG,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,CAAA;gBAElF,KAAK,CAAC,IAAI,CAAC;oBACT,EAAE;oBACF,KAAK;oBACL,YAAY;oBACZ,MAAM,EAAE,oBAAoB;iBAC7B,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe;IACf,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QAC/D,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAChE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QACxC,MAAM,YAAY,GAAG,gBAAgB,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,MAAM,CAAA;QAEvE,KAAK,CAAC,IAAI,CAAC;YACT,EAAE;YACF,KAAK;YACL,YAAY;YACZ,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,KAAK,CAAA;AACd,CAAC"}
|