@h-rig/guard-plugin 0.0.6-alpha.157 → 0.0.6-alpha.158

package/dist/src/scope.d.ts

@@ -0,0 +1,3 @@
+export declare function normalizePathToScope(projectRoot: string, monorepoRoot: string, inputPath: string): string;
+export declare function scopeGlobToRegex(glob: string): RegExp;
+export declare function scopeMatches(path: string, scopes: string[]): boolean;

package/dist/src/scope.js

@@ -0,0 +1,58 @@
+// @bun
+// packages/guard-plugin/src/scope.ts
+import { getScopeRules } from "@rig/core/scope-rules";
+var scopeRegexCache = new Map;
+function unique(values) {
+  return [...new Set(values)];
+}
+function normalizeRelativeScopePath(inputPath) {
+  let normalized = inputPath.replace(/^\.\//, "");
+  const rules = getScopeRules();
+  if (rules?.stripPrefixes) {
+    for (const prefix of rules.stripPrefixes) {
+      if (normalized.startsWith(prefix)) {
+        normalized = normalized.slice(prefix.length);
+      }
+    }
+  }
+  return normalized;
+}
+function normalizePathToScope(projectRoot, monorepoRoot, inputPath) {
+  let normalized = inputPath.replace(/^\.\//, "");
+  if (normalized.startsWith(projectRoot + "/")) {
+    normalized = normalized.slice(projectRoot.length + 1);
+  }
+  if (normalized.startsWith(monorepoRoot + "/")) {
+    normalized = normalized.slice(monorepoRoot.length + 1);
+  }
+  return normalizeRelativeScopePath(normalized);
+}
+function scopeGlobToRegex(glob) {
+  const cached = scopeRegexCache.get(glob);
+  if (cached) {
+    return cached;
+  }
+  const escaped = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "__GLOBSTAR__").replace(/\*/g, "[^/]*").replace(/__GLOBSTAR__/g, ".*");
+  const compiled = new RegExp(`^${escaped}$`);
+  scopeRegexCache.set(glob, compiled);
+  return compiled;
+}
+function scopeMatches(path, scopes) {
+  const pathVariants = unique([path, normalizeRelativeScopePath(path)]);
+  for (const scope of scopes) {
+    const scopeVariants = unique([scope, normalizeRelativeScopePath(scope)]);
+    for (const candidatePath of pathVariants) {
+      for (const candidateScope of scopeVariants) {
+        if (candidatePath === candidateScope || scopeGlobToRegex(candidateScope).test(candidatePath)) {
+          return true;
+        }
+      }
+    }
+  }
+  return false;
+}
+export {
+  scopeMatches,
+  scopeGlobToRegex,
+  normalizePathToScope
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@h-rig/guard-plugin",
-  "version": "0.0.6-alpha.157",
+  "version": "0.0.6-alpha.158",
   "type": "module",
   "description": "First-party runtime policy-guard hooks contributed as a single-channel Rig plugin.",
   "license": "UNLICENSED",
@@ -17,6 +17,22 @@
       "types": "./dist/src/plugin.d.ts",
       "import": "./dist/src/plugin.js"
     },
+    "./guard": {
+      "types": "./dist/src/guard.d.ts",
+      "import": "./dist/src/guard.js"
+    },
+    "./controlled-bash": {
+      "types": "./dist/src/controlled-bash.d.ts",
+      "import": "./dist/src/controlled-bash.js"
+    },
+    "./agent-shell": {
+      "types": "./dist/src/agent-shell.d.ts",
+      "import": "./dist/src/agent-shell.js"
+    },
+    "./agent-binary-build": {
+      "types": "./dist/src/agent-binary-build.d.ts",
+      "import": "./dist/src/agent-binary-build.js"
+    },
     "./hooks/safety-guard": {
       "types": "./dist/src/hooks/safety-guard.d.ts",
       "import": "./dist/src/hooks/safety-guard.js"
@@ -49,9 +65,8 @@
   "module": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
   "dependencies": {
-    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.157",
-    "@rig/core": "npm:@h-rig/core@0.0.6-alpha.157",
-    "@rig/hook-kit": "npm:@h-rig/hook-kit@0.0.6-alpha.157",
-    "@rig/runtime": "npm:@h-rig/runtime@0.0.6-alpha.157"
+    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.158",
+    "@rig/core": "npm:@h-rig/core@0.0.6-alpha.158",
+    "@rig/hook-kit": "npm:@h-rig/hook-kit@0.0.6-alpha.158"
   }
 }