@inhuman.tools/harness 0.0.0-stage → 0.1.0

package/dist/policy-processor/path-policy.js

@@ -0,0 +1,118 @@
+/**
+ * File-access cluster: policy.yaml `read_file` / `write_file` enable lists
+ * and `read_block` / `write_block` hard-block lists.
+ * Enable `!` is deny (remainder carve-out). Block lists are unliftable.
+ * Suffix wildcard is implied — PAT matches itself and descendants.
+ * Miss is deny (closed). Unresolvable path is ask.
+ * Read enable is approve (silent in-tree). Write enable is ask: the list is
+ * what the agent may attempt, not a grant. Yolo rewrites that ask and deny.
+ * Realpath / cwd / ~ live on the host; this matcher sees the prepared string.
+ */
+import { PolicyCompileError } from "./compile.js";
+import { lattice } from "./lift.js";
+export function compilePathRule(text, index, enable = "approve") {
+    PolicyCompileError.invariant(!text.startsWith("-"), "path pattern: - is not a prefix; ! is deny on the enable list");
+    const deny = text.startsWith("!");
+    const stem = normalizePath(deny ? text.slice(1) : text);
+    PolicyCompileError.invariant(stem !== undefined, "path pattern: empty or unresolvable");
+    const unanchored = stem !== "." && !stem.startsWith("/") && !stem.includes("/");
+    return {
+        id: `${deny ? "!" : ""}${stem}#${index}`,
+        polarity: deny ? "deny" : enable,
+        stem,
+        unanchored,
+    };
+}
+export function compileBlockRule(text, index) {
+    PolicyCompileError.invariant(!text.startsWith("!") && !text.startsWith("-"), "block list: stem without a polarity prefix");
+    const stem = normalizePath(text);
+    PolicyCompileError.invariant(stem !== undefined, "path pattern: empty or unresolvable");
+    const unanchored = stem !== "." && !stem.startsWith("/") && !stem.includes("/");
+    return {
+        id: `block:${stem}#${index}`,
+        polarity: "block",
+        stem,
+        unanchored,
+    };
+}
+export function mergePathTerms(enable, block) {
+    if (enable === undefined && block === undefined)
+        return undefined;
+    return { rules: [...(enable?.rules ?? []), ...(block?.rules ?? [])] };
+}
+export function checkPath(term, path) {
+    const resolved = normalizePath(path);
+    if (resolved === undefined)
+        return "ask";
+    const hits = term.rules.filter((rule) => matchesRule(rule, resolved)).map((rule) => rule.polarity);
+    return hits.length === 0 ? "deny" : lattice(hits);
+}
+/**
+ * Write-deny remainder intern. Null when the floor is not deny.
+ * protected: enable `!` inside an enable root. outside: miss, left the
+ * enable set. risky: enable `!` and left the enable set. `write_block`
+ * never reaches this.
+ */
+export function writeRemainderKind(term, path) {
+    const resolved = normalizePath(path);
+    if (resolved === undefined)
+        return null;
+    if (checkPath(term, path) !== "deny")
+        return null;
+    const inEnable = term.rules.some((rule) => (rule.polarity === "ask" || rule.polarity === "approve") && matchesRule(rule, resolved));
+    const namedDeny = term.rules.some((rule) => rule.polarity === "deny" && matchesRule(rule, resolved));
+    if (inEnable && namedDeny)
+        return "protected";
+    if (!inEnable && namedDeny)
+        return "risky";
+    return "outside";
+}
+function matchesRule(rule, resolved) {
+    const hit = rule.stem === "."
+        ? isRelative(resolved)
+        : rule.unanchored
+            ? hasSegment(resolved, rule.stem)
+            : isPrefix(resolved, rule.stem);
+    if (!hit)
+        return false;
+    if (rule.polarity === "block" && rule.stem === ".claude" && isClaudeWorktree(resolved))
+        return false;
+    return true;
+}
+/** `.claude` write_block does not cover `.claude/worktrees` (any depth). */
+function isClaudeWorktree(path) {
+    return (path === ".claude/worktrees" ||
+        path.startsWith(".claude/worktrees/") ||
+        path.includes("/.claude/worktrees/") ||
+        path.endsWith("/.claude/worktrees"));
+}
+function isPrefix(path, stem) {
+    if (path === stem)
+        return true;
+    if (stem === "/")
+        return path.startsWith("/");
+    return path.startsWith(`${stem}/`);
+}
+function hasSegment(path, stem) {
+    if (path === stem || path.startsWith(`${stem}/`))
+        return true;
+    return path.includes(`/${stem}/`) || path.endsWith(`/${stem}`);
+}
+function isRelative(path) {
+    return path !== "/" && !path.startsWith("/");
+}
+/** Undefined = unresolvable (ask). No `..`, `~`, `$`, glob, NUL. */
+function normalizePath(raw) {
+    if (raw === "" || raw.includes("\0"))
+        return undefined;
+    const slash = raw.replaceAll("\\", "/");
+    if (/[~$?*`\0]/.test(slash))
+        return undefined;
+    const parts = slash.split("/").filter((seg) => seg !== "" && seg !== ".");
+    if (parts.includes(".."))
+        return undefined;
+    if (slash.startsWith("/"))
+        return parts.length === 0 ? "/" : `/${parts.join("/")}`;
+    return parts.length === 0 ? "." : parts.join("/");
+}
+//# sourceMappingURL=path-policy.js.map

package/dist/policy-processor/path-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-policy.js","sourceRoot":"","sources":["../../src/policy-processor/path-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa,EAAE,SAA4B,SAAS;IAChG,kBAAkB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,+DAA+D,CAAC,CAAC;IACrH,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxD,kBAAkB,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,qCAAqC,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChF,OAAO;QACL,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE;QACxC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAChC,IAAI;QACJ,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,kBAAkB,CAAC,SAAS,CAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAC9C,4CAA4C,CAC7C,CAAC;IACF,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,kBAAkB,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,qCAAqC,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChF,OAAO;QACL,EAAE,EAAE,SAAS,IAAI,IAAI,KAAK,EAAE;QAC5B,QAAQ,EAAE,OAAO;QACjB,IAAI;QACJ,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA4B,EAAE,KAA2B;IACtF,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAc,EAAE,IAAY;IACpD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnG,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAc,EAAE,IAAY;IAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAClG,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrG,IAAI,QAAQ,IAAI,SAAS;QAAE,OAAO,WAAW,CAAC;IAC9C,IAAI,CAAC,QAAQ,IAAI,SAAS;QAAE,OAAO,OAAO,CAAC;IAC3C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,IAAc,EAAE,QAAgB;IACnD,MAAM,GAAG,GACP,IAAI,CAAC,IAAI,KAAK,GAAG;QACf,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,UAAU;YACf,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;YACjC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACrG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,CACL,IAAI,KAAK,mBAAmB;QAC5B,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CACpC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,oEAAoE;AACpE,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACnF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpD,CAAC"}

package/dist/policy-processor/peel-cwd.d.ts

@@ -0,0 +1,2 @@
+export { peelShellCwd } from "@inhuman.tools/turn/peel-cwd";
+//# sourceMappingURL=peel-cwd.d.ts.map

package/dist/policy-processor/peel-cwd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peel-cwd.d.ts","sourceRoot":"","sources":["../../src/policy-processor/peel-cwd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/policy-processor/peel-cwd.js

@@ -0,0 +1,2 @@
+export { peelShellCwd } from "@inhuman.tools/turn/peel-cwd";
+//# sourceMappingURL=peel-cwd.js.map

package/dist/policy-processor/peel-cwd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peel-cwd.js","sourceRoot":"","sources":["../../src/policy-processor/peel-cwd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/policy-processor/prep.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Question prep: unbash AST → prepared questions + unparsed acts.
+ * Hermetic — no PATH, no process.env, no execution. Word.parts is a lazy
+ * getter; this file always reads it. Nested parse errors live on the nested
+ * script, not the root.
+ *
+ * Partition builds I: a known value-flag attaches; an unknown flag followed
+ * by a non-dash, non-`--` token forks attached and boolean readings.
+ * `valueFlagsFor(argv0, suffix)` sees the leading positional spine — not
+ * every descendant under argv0. `=value` and glued shorts stay one reading.
+ * `--` never attaches as a value. Cap 16 is open ruling 5; overflow is ⊤I.
+ * A nameless command still emits its redirects. `xargs -a FILE` is a read
+ * of FILE as well as the inner command.
+ */
+import { type ParseError } from "unbash";
+import { type Which } from "./identity.js";
+import type { Question, Reading } from "./types.js";
+export type UnparsedVia = "parse-error" | "control-flow" | "function" | "source" | "test" | "arithmetic" | "coproc" | "find-expression" | "non-literal-argv0" | "script-string";
+export type UnparsedAct = {
+    readonly via: UnparsedVia;
+    readonly source: string;
+};
+export type RedirectEmit = {
+    readonly operator: string;
+    readonly target: string;
+};
+export type PreparedQuestion = Question & {
+    readonly wrapChain: readonly string[];
+    readonly elevated: boolean;
+    readonly envDelta: Readonly<Record<string, string>>;
+    readonly redirects: readonly RedirectEmit[];
+    readonly background: boolean;
+    readonly stdinIsPipe: boolean;
+};
+export type PrepResult = {
+    readonly questions: readonly PreparedQuestion[];
+    readonly unparsed: readonly UnparsedAct[];
+    readonly errors: readonly ParseError[];
+    /** File effects from commands that have no argv0 (`> .env`). */
+    readonly redirects: readonly RedirectEmit[];
+};
+export type PrepOpts = {
+    readonly valueFlags?: ReadonlySet<string>;
+    readonly valueFlagsFor?: (argv0: string, suffix: readonly string[]) => ReadonlySet<string> | undefined;
+    /** Path-form peelers are transparent only when this agrees. */
+    readonly which?: Which;
+};
+export declare function prep(source: string, opts?: PrepOpts): PrepResult;
+/**
+ * Tokenize argv into positionals + flag bag.
+ * `closed`: only those names are flags; other dash tokens are positionals.
+ * Used when a `"--"` field reopens the suffix — undeclared `-file` stays a path.
+ */
+export declare function partition(words: readonly string[], valueFlags: ReadonlySet<string> | undefined, closed?: ReadonlySet<string>): {
+    readings: Reading[];
+    overflow: boolean;
+};
+//# sourceMappingURL=prep.d.ts.map

package/dist/policy-processor/prep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prep.d.ts","sourceRoot":"","sources":["../../src/policy-processor/prep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAML,KAAK,UAAU,EAOhB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAAgB,KAAK,KAAK,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,MAAM,WAAW,GACnB,aAAa,GACb,cAAc,GACd,UAAU,GACV,QAAQ,GACR,MAAM,GACN,YAAY,GACZ,QAAQ,GACR,iBAAiB,GACjB,mBAAmB,GACnB,eAAe,CAAC;AAEpB,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,SAAS,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,CAAC;CAC7C,CAAC;AAoBF,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,KAAK,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACvG,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CACxB,CAAC;AAEF,wBAAgB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,UAAU,CAqBhE;AAsUD;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,EAC3C,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAC3B;IAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CA+C5C"}