@goodandready/dsh-approval-gate 0.1.26 → 0.1.27

package/lib/timeline-service.js

@@ -1,5 +1,5 @@
 // lib/timeline-service.js
-// Session Audit Timeline and WebServer REST Service for DSH Approval Gate (#82, #60, #74, #86).
+// Session Audit Timeline, Learned Rules & WebServer REST Service for DSH Approval Gate (#82, #60, #74, #86, #84, #49, #116).
 
 import { generateDiffLines, groupHunks, formatUnifiedDiff } from "./diff-viewer.js";
 
@@ -26,14 +26,18 @@ import { generateDiffLines, groupHunks, formatUnifiedDiff } from "./diff-viewer.
  */
 export class TimelineService {
   /**
-   * @param {{ maxEventsPerSession?: number, turnCardTracker?: any }} [options]
+   * @param {{ maxEventsPerSession?: number, turnCardTracker?: any, learner?: any, engine?: any }} [options]
    */
   constructor(options = {}) {
     this.maxEventsPerSession = options.maxEventsPerSession || 500;
     this.turnCardTracker = options.turnCardTracker || null;
+    this.learner = options.learner || null;
+    this.engine = options.engine || null;
     /** @type {Map<string, TimelineEvent[]>} */
     this._sessions = new Map();
     this._nextId = 1;
+    this.customRules = [];
+    this.whitelistPaths = [];
   }
 
   /**
@@ -128,7 +132,6 @@ export class TimelineService {
     }
 
     const total = filtered.length;
-    // Return newest first
     const reversed = filtered.slice().reverse();
     const paginated = reversed.slice(offset, offset + limit);
 
@@ -146,7 +149,7 @@ export class TimelineService {
   }
 
   /**
-   * Registers REST HTTP routes on ctx.webServer for browser UI interaction (#82, #74, #86).
+   * Registers REST HTTP routes on ctx.webServer for browser UI interaction (#82, #74, #86, #84, #49, #116).
    *
    * @param {any} ctx Cordis context
    * @param {Object} [options]
@@ -166,7 +169,17 @@ export class TimelineService {
       res.end(JSON.stringify(data));
     };
 
-    // Route 1: GET /dsh-approval-gate/timeline
+    const parseBody = (req) =>
+      new Promise((resolve) => {
+        let body = "";
+        req.on("data", (c) => { body += c; });
+        req.on("end", () => {
+          try { resolve(JSON.parse(body || "{}")); }
+          catch { resolve({}); }
+        });
+      });
+
+    // 1. GET /timeline
     const timelineRoute = () =>
       ctx.webServer.register({
         path: `${prefix}/timeline`,
@@ -185,7 +198,7 @@ export class TimelineService {
         },
       });
 
-    // Route 2: GET /dsh-approval-gate/turn-card
+    // 2. GET /turn-card
     const turnCardRoute = () =>
       ctx.webServer.register({
         path: `${prefix}/turn-card`,
@@ -207,46 +220,114 @@ export class TimelineService {
         },
       });
 
-    // Route 3: POST /dsh-approval-gate/diff
+    // 3. POST /diff
     const diffRoute = () =>
       ctx.webServer.register({
         path: `${prefix}/diff`,
         method: "POST",
         handler: async (req, res) => {
           try {
-            let bodyStr = "";
-            req.on("data", (chunk) => { bodyStr += chunk; });
-            req.on("end", () => {
-              try {
-                const parsed = JSON.parse(bodyStr || "{}");
-                const oldText = parsed.oldText || "";
-                const newText = parsed.newText || "";
-                const contextLines = typeof parsed.contextLines === "number" ? parsed.contextLines : 3;
-                const diffLines = generateDiffLines(oldText, newText);
-                const hunks = groupHunks(diffLines, { contextLines });
-                const diffText = formatUnifiedDiff(hunks, {
-                  oldFile: parsed.filename ? `a/${parsed.filename}` : "a/original",
-                  newFile: parsed.filename ? `b/${parsed.filename}` : "b/modified",
-                });
-                jsonResponse(res, 200, { ok: true, hunks, diffText, linesCount: diffLines.length });
-              } catch (parseErr) {
-                jsonResponse(res, 400, { ok: false, error: "invalid-json" });
-              }
+            const parsed = await parseBody(req);
+            const oldText = parsed.oldText || "";
+            const newText = parsed.newText || "";
+            const contextLines = typeof parsed.contextLines === "number" ? parsed.contextLines : 3;
+            const diffLines = generateDiffLines(oldText, newText);
+            const hunks = groupHunks(diffLines, { contextLines });
+            const diffText = formatUnifiedDiff(hunks, {
+              oldFile: parsed.filename ? `a/${parsed.filename}` : "a/original",
+              newFile: parsed.filename ? `b/${parsed.filename}` : "b/modified",
             });
+            jsonResponse(res, 200, { ok: true, hunks, diffText, linesCount: diffLines.length });
+          } catch (err) {
+            jsonResponse(res, 500, { ok: false, error: String(err && err.message || err) });
+          }
+        },
+      });
+
+    // 4. GET /learned-rules (#84)
+    const learnedRulesRoute = () =>
+      ctx.webServer.register({
+        path: `${prefix}/learned-rules`,
+        method: "GET",
+        handler: async (req, res) => {
+          try {
+            const url = new URL(req.url, "http://127.0.0.1");
+            const sid = url.searchParams.get("sessionId") || "default";
+            const rules = (this.learner && typeof this.learner.getLearnedRules === "function")
+              ? this.learner.getLearnedRules(sid)
+              : [];
+            jsonResponse(res, 200, { ok: true, sessionId: sid, rules });
+          } catch (err) {
+            jsonResponse(res, 500, { ok: false, error: String(err && err.message || err) });
+          }
+        },
+      });
+
+    // 5. POST /learned-rules/revoke (#84)
+    const revokeLearnedRoute = () =>
+      ctx.webServer.register({
+        path: `${prefix}/learned-rules/revoke`,
+        method: "POST",
+        handler: async (req, res) => {
+          try {
+            const body = await parseBody(req);
+            const sid = body.sessionId || "default";
+            const key = body.key || "";
+            let revoked = false;
+            if (this.learner && typeof this.learner.revoke === "function" && key) {
+              revoked = this.learner.revoke(sid, key);
+            }
+            jsonResponse(res, 200, { ok: true, revoked, key });
+          } catch (err) {
+            jsonResponse(res, 500, { ok: false, error: String(err && err.message || err) });
+          }
+        },
+      });
+
+    // 6. GET /mode (#116)
+    const modeRoute = () =>
+      ctx.webServer.register({
+        path: `${prefix}/mode`,
+        method: "GET",
+        handler: async (req, res) => {
+          try {
+            const mode = this.engine?.mode || "hybrid";
+            jsonResponse(res, 200, { ok: true, mode });
+          } catch (err) {
+            jsonResponse(res, 500, { ok: false, error: String(err && err.message || err) });
+          }
+        },
+      });
+
+    // 7. GET & POST /rules (#49)
+    const rulesRoute = () =>
+      ctx.webServer.register({
+        path: `${prefix}/rules`,
+        method: "GET",
+        handler: async (req, res) => {
+          jsonResponse(res, 200, { ok: true, rules: this.customRules, whitelistPaths: this.whitelistPaths });
+        },
+      });
+    const updateRulesRoute = () =>
+      ctx.webServer.register({
+        path: `${prefix}/rules`,
+        method: "POST",
+        handler: async (req, res) => {
+          try {
+            const body = await parseBody(req);
+            if (Array.isArray(body.rules)) this.customRules = body.rules;
+            if (Array.isArray(body.whitelistPaths)) this.whitelistPaths = body.whitelistPaths;
+            jsonResponse(res, 200, { ok: true, rules: this.customRules, whitelistPaths: this.whitelistPaths });
           } catch (err) {
             jsonResponse(res, 500, { ok: false, error: String(err && err.message || err) });
           }
         },
       });
 
-    if (typeof ctx.effect === "function") {
-      ctx.effect(timelineRoute, "dsh-approval-gate: timeline route");
-      ctx.effect(turnCardRoute, "dsh-approval-gate: turn-card route");
-      ctx.effect(diffRoute, "dsh-approval-gate: diff route");
-    } else {
-      timelineRoute();
-      turnCardRoute();
-      diffRoute();
+    const routes = [timelineRoute, turnCardRoute, diffRoute, learnedRulesRoute, revokeLearnedRoute, modeRoute, rulesRoute, updateRulesRoute];
+    for (const r of routes) {
+      if (typeof ctx.effect === "function") ctx.effect(r, `dsh-approval-gate: ${r.name}`);
+      else r();
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-approval-gate",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "description": "Host-only command safety gate for DeepSeek Harness: blocks recognized dangerous operations and requests DSH approval when a command cannot be inspected.",
   "type": "module",
   "main": "lib/index.js",