@farazirfan/costar-server-executor 1.0.0

package/dist/infra/exec-approvals.d.ts

@@ -0,0 +1,154 @@
+export type ExecHost = "sandbox" | "gateway" | "node";
+export type ExecSecurity = "deny" | "allowlist" | "full";
+export type ExecAsk = "off" | "on-miss" | "always";
+export type ExecApprovalsDefaults = {
+    security?: ExecSecurity;
+    ask?: ExecAsk;
+    askFallback?: ExecSecurity;
+    autoAllowSkills?: boolean;
+};
+export type ExecAllowlistEntry = {
+    id?: string;
+    pattern: string;
+    lastUsedAt?: number;
+    lastUsedCommand?: string;
+    lastResolvedPath?: string;
+};
+export type ExecApprovalsAgent = ExecApprovalsDefaults & {
+    allowlist?: ExecAllowlistEntry[];
+};
+export type ExecApprovalsFile = {
+    version: 1;
+    socket?: {
+        path?: string;
+        token?: string;
+    };
+    defaults?: ExecApprovalsDefaults;
+    agents?: Record<string, ExecApprovalsAgent>;
+};
+export type ExecApprovalsSnapshot = {
+    path: string;
+    exists: boolean;
+    raw: string | null;
+    file: ExecApprovalsFile;
+    hash: string;
+};
+export type ExecApprovalsResolved = {
+    path: string;
+    socketPath: string;
+    token: string;
+    defaults: Required<ExecApprovalsDefaults>;
+    agent: Required<ExecApprovalsDefaults>;
+    allowlist: ExecAllowlistEntry[];
+    file: ExecApprovalsFile;
+};
+export declare const DEFAULT_SAFE_BINS: string[];
+export declare function resolveExecApprovalsPath(): string;
+export declare function resolveExecApprovalsSocketPath(): string;
+export declare function normalizeExecApprovals(file: ExecApprovalsFile): ExecApprovalsFile;
+export declare function readExecApprovalsSnapshot(): ExecApprovalsSnapshot;
+export declare function loadExecApprovals(): ExecApprovalsFile;
+export declare function saveExecApprovals(file: ExecApprovalsFile): void;
+export declare function ensureExecApprovals(): ExecApprovalsFile;
+export type ExecApprovalsDefaultOverrides = {
+    security?: ExecSecurity;
+    ask?: ExecAsk;
+    askFallback?: ExecSecurity;
+    autoAllowSkills?: boolean;
+};
+export declare function resolveExecApprovals(agentId?: string, overrides?: ExecApprovalsDefaultOverrides): ExecApprovalsResolved;
+export declare function resolveExecApprovalsFromFile(params: {
+    file: ExecApprovalsFile;
+    agentId?: string;
+    overrides?: ExecApprovalsDefaultOverrides;
+    path?: string;
+    socketPath?: string;
+    token?: string;
+}): ExecApprovalsResolved;
+type CommandResolution = {
+    rawExecutable: string;
+    resolvedPath?: string;
+    executableName: string;
+};
+export declare function resolveCommandResolution(command: string, cwd?: string, env?: NodeJS.ProcessEnv): CommandResolution | null;
+export declare function resolveCommandResolutionFromArgv(argv: string[], cwd?: string, env?: NodeJS.ProcessEnv): CommandResolution | null;
+export declare function matchAllowlist(entries: ExecAllowlistEntry[], resolution: CommandResolution | null): ExecAllowlistEntry | null;
+export type ExecCommandSegment = {
+    raw: string;
+    argv: string[];
+    resolution: CommandResolution | null;
+};
+export type ExecCommandAnalysis = {
+    ok: boolean;
+    reason?: string;
+    segments: ExecCommandSegment[];
+    chains?: ExecCommandSegment[][];
+};
+export declare function analyzeShellCommand(params: {
+    command: string;
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+}): ExecCommandAnalysis;
+export declare function analyzeArgvCommand(params: {
+    argv: string[];
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+}): ExecCommandAnalysis;
+export declare function normalizeSafeBins(entries?: string[]): Set<string>;
+export declare function resolveSafeBins(entries?: string[] | null): Set<string>;
+export declare function isSafeBinUsage(params: {
+    argv: string[];
+    resolution: CommandResolution | null;
+    safeBins: Set<string>;
+    cwd?: string;
+    fileExists?: (filePath: string) => boolean;
+}): boolean;
+export type ExecAllowlistEvaluation = {
+    allowlistSatisfied: boolean;
+    allowlistMatches: ExecAllowlistEntry[];
+};
+export declare function evaluateExecAllowlist(params: {
+    analysis: ExecCommandAnalysis;
+    allowlist: ExecAllowlistEntry[];
+    safeBins: Set<string>;
+    cwd?: string;
+    skillBins?: Set<string>;
+    autoAllowSkills?: boolean;
+}): ExecAllowlistEvaluation;
+export type ExecAllowlistAnalysis = {
+    analysisOk: boolean;
+    allowlistSatisfied: boolean;
+    allowlistMatches: ExecAllowlistEntry[];
+    segments: ExecCommandSegment[];
+};
+/**
+ * Evaluates allowlist for shell commands (including &&, ||, ;) and returns analysis metadata.
+ */
+export declare function evaluateShellAllowlist(params: {
+    command: string;
+    allowlist: ExecAllowlistEntry[];
+    safeBins: Set<string>;
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    skillBins?: Set<string>;
+    autoAllowSkills?: boolean;
+}): ExecAllowlistAnalysis;
+export declare function requiresExecApproval(params: {
+    ask: ExecAsk;
+    security: ExecSecurity;
+    analysisOk: boolean;
+    allowlistSatisfied: boolean;
+}): boolean;
+export declare function recordAllowlistUse(approvals: ExecApprovalsFile, agentId: string | undefined, entry: ExecAllowlistEntry, command: string, resolvedPath?: string): void;
+export declare function addAllowlistEntry(approvals: ExecApprovalsFile, agentId: string | undefined, pattern: string): void;
+export declare function minSecurity(a: ExecSecurity, b: ExecSecurity): ExecSecurity;
+export declare function maxAsk(a: ExecAsk, b: ExecAsk): ExecAsk;
+export type ExecApprovalDecision = "allow-once" | "allow-always" | "deny";
+export declare function requestExecApprovalViaSocket(params: {
+    socketPath: string;
+    token: string;
+    request: Record<string, unknown>;
+    timeoutMs?: number;
+}): Promise<ExecApprovalDecision | null>;
+export {};
+//# sourceMappingURL=exec-approvals.d.ts.map

package/dist/infra/exec-approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-approvals.d.ts","sourceRoot":"","sources":["../../src/infra/exec-approvals.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;AACtD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;AACzD,MAAM,MAAM,OAAO,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEnD,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,GAAG;IACvD,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAC1C,KAAK,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACvC,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,IAAI,EAAE,iBAAiB,CAAC;CACzB,CAAC;AAQF,eAAO,MAAM,iBAAiB,UAAoE,CAAC;AAgBnG,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAiDD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CA+BjF;AAMD,wBAAgB,yBAAyB,IAAI,qBAAqB,CA8BjE;AAED,wBAAgB,iBAAiB,IAAI,iBAAiB,CAerD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,QASxD;AAED,wBAAgB,mBAAmB,IAAI,iBAAiB,CAcvD;AAYD,MAAM,MAAM,6BAA6B,GAAG;IAC1C,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,wBAAgB,oBAAoB,CAClC,OAAO,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,6BAA6B,GACxC,qBAAqB,CAUvB;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,6BAA6B,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,qBAAqB,CAgDxB;AAED,KAAK,iBAAiB,GAAG;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAgEF,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GACtB,iBAAiB,GAAG,IAAI,CAM1B;AAED,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GACtB,iBAAiB,GAAG,IAAI,CAM1B;AA8ED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,kBAAkB,EAAE,EAC7B,UAAU,EAAE,iBAAiB,GAAG,IAAI,GACnC,kBAAkB,GAAG,IAAI,CAW3B;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC;CACjC,CAAC;AAoNF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,mBAAmB,CAiCtB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,mBAAmB,CAetB;AAmBD,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAMjE;AAED,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAGtE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE;IACrC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACrC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;CAC5C,GAAG,OAAO,CA+BV;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;CACxC,CAAC;AAuCF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,uBAAuB,CAiC1B;AAsFD,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IACvC,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC,CAAC;AAEF;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,qBAAqB,CA4ExB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,GAAG,EAAE,OAAO,CAAC;IACb,QAAQ,EAAE,YAAY,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;CAC7B,GAAG,OAAO,CAOV;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,QAoBtB;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,MAAM,QAahB;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,YAAY,CAG1E;AAED,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAGtD;AAED,MAAM,MAAM,oBAAoB,GAAG,YAAY,GAAG,cAAc,GAAG,MAAM,CAAC;AAE1E,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAoDvC"}