@frostbridge/imdl 0.1.3 → 0.1.4

package/dist/index.js

@@ -1351,6 +1351,7 @@ async function initCommand(options) {
       installShellWrapper(agent.name, agent.dir);
     }
   }
+  installDaemon();
   let apiConnected = false;
   try {
     const healthRes = await fetch(`${config.apiUrl}/health`, { signal: AbortSignal.timeout(3e3) });
@@ -1471,6 +1472,60 @@ function installShellWrapper(agentName, agentDir) {
     console.log(pc2.dim(`  \u2022 Shell wrapper: couldn't configure for ${agentName} (configure manually)`));
   }
 }
+function installDaemon() {
+  if (process.platform !== "darwin") {
+    console.log(pc2.dim("  \u2022 Background daemon: only auto-installed on macOS (run `imdl daemon` manually)"));
+    return;
+  }
+  const plistName = "com.frostbridge.imdl-daemon.plist";
+  const plistDir = join6(homedir4(), "Library", "LaunchAgents");
+  const plistPath = join6(plistDir, plistName);
+  if (existsSync7(plistPath)) {
+    console.log(pc2.dim("  \u2022 Background daemon already installed"));
+    return;
+  }
+  const { execSync: execSync2 } = __require("child_process");
+  let imdlBin = "";
+  try {
+    imdlBin = execSync2("which imdl", { encoding: "utf-8" }).trim();
+  } catch {
+    imdlBin = "/usr/local/bin/imdl";
+  }
+  const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>com.frostbridge.imdl-daemon</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${imdlBin}</string>
+    <string>daemon</string>
+  </array>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${join6(homedir4(), ".imdl", "daemon.log")}</string>
+  <key>StandardErrorPath</key>
+  <string>${join6(homedir4(), ".imdl", "daemon.log")}</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>/usr/local/bin:/usr/bin:/bin:/opt/homebrew/bin</string>
+  </dict>
+</dict>
+</plist>`;
+  try {
+    if (!existsSync7(plistDir)) mkdirSync2(plistDir, { recursive: true });
+    writeFileSync4(plistPath, plist);
+    execSync2(`launchctl load ${plistPath}`, { stdio: "ignore" });
+    console.log(pc2.green("  \u2713 Background daemon installed (auto-starts on login)"));
+  } catch {
+    console.log(pc2.yellow("  \u26A0 Could not install daemon service (run `imdl daemon` manually)"));
+  }
+}
 function installMCPProxy(mcpConfigPath, agentName) {
   let existing = {};
   const dir = join6(mcpConfigPath, "..");
@@ -3577,6 +3632,8 @@ async function collectCommand() {
 
 // src/commands/daemon.ts
 import pc7 from "picocolors";
+import { existsSync as existsSync19, readFileSync as readFileSync13, writeFileSync as writeFileSync7 } from "fs";
+import { join as join18 } from "path";
 var INTERVAL_MS = 3e4;
 async function daemonCommand() {
   console.log(pc7.cyan("imdl daemon started \u2014 collecting every 30s"));
@@ -3584,9 +3641,12 @@ async function daemonCommand() {
   const tick = async () => {
     try {
       const count = await collectPrompts();
-      if (count > 0) {
-        console.log(pc7.green(`[${(/* @__PURE__ */ new Date()).toLocaleTimeString()}] Collected ${count} new event${count !== 1 ? "s" : ""}`));
+      const shellCount = await ingestShellEvents();
+      const total = count + shellCount;
+      if (total > 0) {
+        console.log(pc7.green(`[${(/* @__PURE__ */ new Date()).toLocaleTimeString()}] Collected ${total} event${total !== 1 ? "s" : ""} (prompts: ${count}, shell: ${shellCount})`));
       }
+      await tryFlush();
     } catch (err) {
       console.error(pc7.red(`[${(/* @__PURE__ */ new Date()).toLocaleTimeString()}] Error: ${err.message}`));
     }
@@ -3594,6 +3654,50 @@ async function daemonCommand() {
   await tick();
   setInterval(tick, INTERVAL_MS);
 }
+async function ingestShellEvents() {
+  const shellLog = join18(getBufferDir(), "shell-events.ndjson");
+  if (!existsSync19(shellLog)) return 0;
+  const content = readFileSync13(shellLog, "utf-8").trim();
+  if (!content) return 0;
+  const config = loadConfig();
+  const lines = content.split("\n");
+  const events = lines.map((line) => {
+    try {
+      return JSON.parse(line);
+    } catch {
+      return null;
+    }
+  }).filter(Boolean);
+  if (events.length === 0) return 0;
+  const headers = { "Content-Type": "application/json" };
+  if (config.authToken) headers["X-IMDL-Key"] = config.authToken;
+  const sessionId = `shell_${config.developerId}_${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}`;
+  const apiEvents = events.map((e) => ({
+    type: "pre_tool_use",
+    toolName: "shell_command",
+    toolInput: { command: e.command, agent: e.agent, decision: e.decision, reason: e.reason },
+    timestamp: e.timestamp,
+    violation: e.decision === "block" ? { action: "block", reason: e.reason, policyName: e.policyName } : void 0
+  }));
+  let sent = 0;
+  for (let i = 0; i < apiEvents.length; i += 50) {
+    const batch = apiEvents.slice(i, i + 50);
+    try {
+      const res = await fetch(`${config.apiUrl}/api/sessions/${sessionId}/events`, {
+        method: "POST",
+        headers,
+        body: JSON.stringify({ events: batch, developerId: config.developerId }),
+        signal: AbortSignal.timeout(1e4)
+      });
+      if (res.ok) sent += batch.length;
+    } catch {
+    }
+  }
+  if (sent === apiEvents.length) {
+    writeFileSync7(shellLog, "", { mode: 384 });
+  }
+  return sent;
+}
 
 // src/commands/request.ts
 import pc8 from "picocolors";
@@ -3658,8 +3762,8 @@ async function requestCommand(options) {
 // src/commands/lock.ts
 import pc9 from "picocolors";
 import { createHash as createHash2 } from "crypto";
-import { readFileSync as readFileSync13, writeFileSync as writeFileSync7, existsSync as existsSync19 } from "fs";
-import { join as join18, resolve as resolve3 } from "path";
+import { readFileSync as readFileSync14, writeFileSync as writeFileSync8, existsSync as existsSync20 } from "fs";
+import { join as join19, resolve as resolve3 } from "path";
 var LOCKFILE_NAME = "mcp-lock.json";
 function computeIntegrity(server, identity) {
   const payload = JSON.stringify({
@@ -3674,7 +3778,7 @@ function computeIntegrity(server, identity) {
 }
 function getLockfilePath(customPath) {
   if (customPath) return resolve3(customPath);
-  return join18(process.cwd(), LOCKFILE_NAME);
+  return join19(process.cwd(), LOCKFILE_NAME);
 }
 async function lockCommand(options) {
   const detection = await detectMCPConfigs(options.path);
@@ -3721,7 +3825,7 @@ async function lockCommand(options) {
     servers: entries
   };
   const lockPath = getLockfilePath(options.output);
-  writeFileSync7(lockPath, JSON.stringify(lockfile, null, 2), { mode: 420 });
+  writeFileSync8(lockPath, JSON.stringify(lockfile, null, 2), { mode: 420 });
   if (options.json) {
     console.log(JSON.stringify(lockfile, null, 2));
   } else {
@@ -3744,7 +3848,7 @@ async function lockCommand(options) {
 }
 async function verifyCommand(options) {
   const lockPath = getLockfilePath(options.path);
-  if (!existsSync19(lockPath)) {
+  if (!existsSync20(lockPath)) {
     if (options.json) {
       console.log(JSON.stringify({ error: "No lockfile found. Run `imdl lock` first.", path: lockPath }));
     } else {
@@ -3756,7 +3860,7 @@ async function verifyCommand(options) {
   }
   let lockfile;
   try {
-    lockfile = JSON.parse(readFileSync13(lockPath, "utf-8"));
+    lockfile = JSON.parse(readFileSync14(lockPath, "utf-8"));
   } catch {
     console.log(pc9.red("Failed to parse lockfile."));
     process.exit(1);
@@ -4165,8 +4269,8 @@ async function checkCompliance(developerId) {
 }
 
 // src/permissions/fixer.ts
-import { existsSync as existsSync20, readFileSync as readFileSync14, writeFileSync as writeFileSync8 } from "fs";
-import { join as join19 } from "path";
+import { existsSync as existsSync21, readFileSync as readFileSync15, writeFileSync as writeFileSync9 } from "fs";
+import { join as join20 } from "path";
 import { homedir as homedir14 } from "os";
 function buildFixesFromChanges(changes) {
   const fixes = [];
@@ -4180,10 +4284,10 @@ function buildFixesFromChanges(changes) {
 function buildFixForAgent(change, home) {
   const { agentType, category, action, targetGrant } = change;
   if (agentType === "claude-code") {
-    const configPath = join19(home, ".claude", "settings.json");
-    if (!existsSync20(configPath)) return null;
+    const configPath = join20(home, ".claude", "settings.json");
+    if (!existsSync21(configPath)) return null;
     try {
-      const settings = JSON.parse(readFileSync14(configPath, "utf-8"));
+      const settings = JSON.parse(readFileSync15(configPath, "utf-8"));
       const tools = settings.allowedTools || [];
       if (category === "shell") {
         if (!tools.includes("Bash") && !tools.some((t) => t.startsWith("Bash("))) return null;
@@ -4211,10 +4315,10 @@ function buildFixForAgent(change, home) {
     }
   }
   if (agentType === "cursor") {
-    const configPath = join19(home, ".cursor", "settings.json");
-    if (!existsSync20(configPath)) return null;
+    const configPath = join20(home, ".cursor", "settings.json");
+    if (!existsSync21(configPath)) return null;
     try {
-      const settings = JSON.parse(readFileSync14(configPath, "utf-8"));
+      const settings = JSON.parse(readFileSync15(configPath, "utf-8"));
       if ((category === "agentic_mode" || category === "shell") && settings["cursor.composer.yoloMode"] === true) {
         return { agentType, category: "agentic_mode", currentGrant: "unrestricted", newGrant: "confirmation", configPath, description: "Disable YOLO mode" };
       }
@@ -4223,10 +4327,10 @@ function buildFixForAgent(change, home) {
     }
   }
   if (agentType === "codex") {
-    const configPath = join19(home, ".codex", "config.json");
-    if (!existsSync20(configPath)) return null;
+    const configPath = join20(home, ".codex", "config.json");
+    if (!existsSync21(configPath)) return null;
     try {
-      const config = JSON.parse(readFileSync14(configPath, "utf-8"));
+      const config = JSON.parse(readFileSync15(configPath, "utf-8"));
       if ((category === "agentic_mode" || category === "shell") && config.sandbox_mode === "full_auto") {
         return { agentType, category: "agentic_mode", currentGrant: "unrestricted", newGrant: "confirmation", configPath, description: "Switch to supervised mode" };
       }
@@ -4235,10 +4339,10 @@ function buildFixForAgent(change, home) {
     }
   }
   if (agentType === "copilot") {
-    const configPath = join19(home, "Library", "Application Support", "Code", "User", "settings.json");
-    if (!existsSync20(configPath)) return null;
+    const configPath = join20(home, "Library", "Application Support", "Code", "User", "settings.json");
+    if (!existsSync21(configPath)) return null;
     try {
-      const settings = JSON.parse(readFileSync14(configPath, "utf-8"));
+      const settings = JSON.parse(readFileSync15(configPath, "utf-8"));
       if ((category === "agentic_mode" || category === "shell") && (settings["github.copilot.chat.agent.autoApprove"] || settings["chat.agent.autoApprove"])) {
         return { agentType, category: "agentic_mode", currentGrant: "unrestricted", newGrant: "confirmation", configPath, description: "Disable autoApprove" };
       }
@@ -4248,10 +4352,10 @@ function buildFixForAgent(change, home) {
   }
   if (agentType === "windsurf") {
     if (category === "mcp_tools") {
-      const configPath = join19(home, ".windsurf", "mcp.json");
-      if (!existsSync20(configPath)) return null;
+      const configPath = join20(home, ".windsurf", "mcp.json");
+      if (!existsSync21(configPath)) return null;
       try {
-        const config = JSON.parse(readFileSync14(configPath, "utf-8"));
+        const config = JSON.parse(readFileSync15(configPath, "utf-8"));
         const servers = Object.keys(config.mcpServers || {});
         if (servers.length === 0) return null;
         return { agentType, category, currentGrant: "unrestricted", newGrant: "denied", configPath, description: `Remove MCP servers (${servers.join(", ")})` };
@@ -4264,7 +4368,7 @@ function buildFixForAgent(change, home) {
 }
 function applyFix(fix) {
   try {
-    const content = readFileSync14(fix.configPath, "utf-8");
+    const content = readFileSync15(fix.configPath, "utf-8");
     const config = JSON.parse(content);
     let modified = false;
     if (fix.agentType === "claude-code") {
@@ -4318,7 +4422,7 @@ function applyFix(fix) {
       }
     }
     if (modified) {
-      writeFileSync8(fix.configPath, JSON.stringify(config, null, 2) + "\n");
+      writeFileSync9(fix.configPath, JSON.stringify(config, null, 2) + "\n");
       return { fix, applied: true };
     }
     return { fix, applied: false, error: "No changes needed" };
@@ -4555,13 +4659,13 @@ function grantLevel(grant) {
 
 // src/commands/gateway.ts
 import pc12 from "picocolors";
-import { existsSync as existsSync21, readFileSync as readFileSync15, writeFileSync as writeFileSync9, mkdirSync as mkdirSync3 } from "fs";
-import { join as join20 } from "path";
+import { existsSync as existsSync22, readFileSync as readFileSync16, writeFileSync as writeFileSync10, mkdirSync as mkdirSync3 } from "fs";
+import { join as join21 } from "path";
 import { homedir as homedir15 } from "os";
 import { execSync, spawn } from "child_process";
-var IMDL_DIR3 = join20(homedir15(), ".imdl");
-var GATEWAY_CONFIG = join20(IMDL_DIR3, "gateway.toml");
-var GATEWAY_PID_FILE = join20(IMDL_DIR3, "gateway.pid");
+var IMDL_DIR3 = join21(homedir15(), ".imdl");
+var GATEWAY_CONFIG = join21(IMDL_DIR3, "gateway.toml");
+var GATEWAY_PID_FILE = join21(IMDL_DIR3, "gateway.pid");
 var DEFAULT_PORT = 9443;
 async function gatewayCommand(opts) {
   const status = await getGatewayStatus();
@@ -4636,8 +4740,8 @@ async function gatewayStartCommand(opts) {
     });
     child.unref();
     if (child.pid) {
-      if (!existsSync21(IMDL_DIR3)) mkdirSync3(IMDL_DIR3, { recursive: true });
-      writeFileSync9(GATEWAY_PID_FILE, String(child.pid));
+      if (!existsSync22(IMDL_DIR3)) mkdirSync3(IMDL_DIR3, { recursive: true });
+      writeFileSync10(GATEWAY_PID_FILE, String(child.pid));
       console.log(pc12.green(`Gateway started (PID ${child.pid}, port ${port})`));
       console.log(pc12.dim(`  Config: ${GATEWAY_CONFIG}`));
       console.log(pc12.dim(`  Set ANTHROPIC_BASE_URL=http://127.0.0.1:${port} to intercept traffic`));
@@ -4696,12 +4800,12 @@ async function gatewayDisableCommand(opts) {
   console.log(pc12.dim("Restart gateway for changes to take effect."));
 }
 async function gatewayAlertsCommand(opts) {
-  const logPath = join20(IMDL_DIR3, "gateway-alerts.jsonl");
-  if (!existsSync21(logPath)) {
+  const logPath = join21(IMDL_DIR3, "gateway-alerts.jsonl");
+  if (!existsSync22(logPath)) {
     console.log(pc12.dim("No alerts logged yet."));
     return;
   }
-  const lines = readFileSync15(logPath, "utf-8").split("\n").filter(Boolean);
+  const lines = readFileSync16(logPath, "utf-8").split("\n").filter(Boolean);
   const limit = opts.limit ? parseInt(opts.limit, 10) : 20;
   const recent = lines.slice(-limit);
   if (opts.json) {
@@ -4803,9 +4907,9 @@ async function getGatewayStatus() {
   return { running: true, pid, port, stats, config };
 }
 function getRunningPid() {
-  if (!existsSync21(GATEWAY_PID_FILE)) return null;
+  if (!existsSync22(GATEWAY_PID_FILE)) return null;
   try {
-    const pid = parseInt(readFileSync15(GATEWAY_PID_FILE, "utf-8").trim(), 10);
+    const pid = parseInt(readFileSync16(GATEWAY_PID_FILE, "utf-8").trim(), 10);
     return isNaN(pid) ? null : pid;
   } catch {
     return null;
@@ -4820,9 +4924,9 @@ function isProcessAlive(pid) {
   }
 }
 function getConfiguredPort() {
-  if (!existsSync21(GATEWAY_CONFIG)) return DEFAULT_PORT;
+  if (!existsSync22(GATEWAY_CONFIG)) return DEFAULT_PORT;
   try {
-    const content = readFileSync15(GATEWAY_CONFIG, "utf-8");
+    const content = readFileSync16(GATEWAY_CONFIG, "utf-8");
     const match = content.match(/listen_port\s*=\s*(\d+)/);
     return match ? parseInt(match[1], 10) : DEFAULT_PORT;
   } catch {
@@ -4831,12 +4935,12 @@ function getConfiguredPort() {
 }
 function findGatewayBinary() {
   const candidates = [
-    join20(process.cwd(), "target", "release", "imdl-gateway"),
-    join20(process.cwd(), "..", "ai-gateway", "target", "release", "imdl-gateway"),
-    join20(homedir15(), ".imdl", "bin", "imdl-gateway")
+    join21(process.cwd(), "target", "release", "imdl-gateway"),
+    join21(process.cwd(), "..", "ai-gateway", "target", "release", "imdl-gateway"),
+    join21(homedir15(), ".imdl", "bin", "imdl-gateway")
   ];
   for (const path of candidates) {
-    if (existsSync21(path)) return path;
+    if (existsSync22(path)) return path;
   }
   try {
     const result = execSync("which imdl-gateway", { encoding: "utf-8" }).trim();
@@ -4846,8 +4950,8 @@ function findGatewayBinary() {
   return null;
 }
 function ensureConfig(port) {
-  if (existsSync21(GATEWAY_CONFIG)) return;
-  if (!existsSync21(IMDL_DIR3)) mkdirSync3(IMDL_DIR3, { recursive: true });
+  if (existsSync22(GATEWAY_CONFIG)) return;
+  if (!existsSync22(IMDL_DIR3)) mkdirSync3(IMDL_DIR3, { recursive: true });
   const defaultToml = `# IMDL AI Gateway configuration
 listen_host = "127.0.0.1"
 listen_port = ${port}
@@ -4874,7 +4978,7 @@ openai_url = "https://api.openai.com"
 [audit]
 enabled = true
 `;
-  writeFileSync9(GATEWAY_CONFIG, defaultToml, { mode: 384 });
+  writeFileSync10(GATEWAY_CONFIG, defaultToml, { mode: 384 });
 }
 function normalizeModule(input) {
   const map = {
@@ -4891,13 +4995,13 @@ function normalizeModule(input) {
   return map[input.toLowerCase()] ?? null;
 }
 function loadGatewayToml() {
-  if (!existsSync21(GATEWAY_CONFIG)) {
+  if (!existsSync22(GATEWAY_CONFIG)) {
     ensureConfig(DEFAULT_PORT);
   }
-  return readFileSync15(GATEWAY_CONFIG, "utf-8");
+  return readFileSync16(GATEWAY_CONFIG, "utf-8");
 }
 function saveGatewayToml(content) {
-  writeFileSync9(GATEWAY_CONFIG, content, { mode: 384 });
+  writeFileSync10(GATEWAY_CONFIG, content, { mode: 384 });
 }
 function setModuleEnabled(content, module, enabled) {
   const sectionRegex = new RegExp(`(\\[${module}\\][^\\[]*?)enabled\\s*=\\s*(true|false)`, "s");
@@ -5227,18 +5331,18 @@ function ruleTypeToCategory(type) {
 }
 
 // src/transport/sync.ts
-import { readFileSync as readFileSync16, writeFileSync as writeFileSync10, existsSync as existsSync22 } from "fs";
-import { join as join21 } from "path";
+import { readFileSync as readFileSync17, writeFileSync as writeFileSync11, existsSync as existsSync23 } from "fs";
+import { join as join22 } from "path";
 var SYNC_INTERVAL = 6e4;
 var SYNC_TIMEOUT = 3e3;
 function getSyncStateFile() {
-  return join21(getImdlDir(), "last_sync.json");
+  return join22(getImdlDir(), "last_sync.json");
 }
 function getLastSyncTime() {
   try {
     const file = getSyncStateFile();
-    if (existsSync22(file)) {
-      const data = JSON.parse(readFileSync16(file, "utf-8"));
+    if (existsSync23(file)) {
+      const data = JSON.parse(readFileSync17(file, "utf-8"));
       return data.lastSync || 0;
     }
   } catch {
@@ -5247,7 +5351,7 @@ function getLastSyncTime() {
 }
 function setLastSyncTime() {
   try {
-    writeFileSync10(getSyncStateFile(), JSON.stringify({ lastSync: Date.now() }), { mode: 384 });
+    writeFileSync11(getSyncStateFile(), JSON.stringify({ lastSync: Date.now() }), { mode: 384 });
   } catch {
   }
 }

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "restricted"
   },
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "IMDL — Intelligent Mediation & Detection Layer. AI agent security CLI.",
   "files": [
     "dist"