@judaharagao/opencode-ssh 1.0.0

package/dist/security/blocklist.js

@@ -0,0 +1,351 @@
+/**
+ * Command Blocklist for SSH plugin.
+ *
+ * Commands are categorized into two levels:
+ * - DESTRUCTIVE: 100% blocked, no exceptions, no override possible
+ * - RISKY: Blocked by default, requires user approval via permission prompt every time
+ */
+// ─── DESTRUCTIVE COMMANDS ───────────────────────────────────────────
+// These are ALWAYS blocked. No permission prompt, no override.
+const DESTRUCTIVE_COMMANDS = [
+    {
+        id: "DESTR-001",
+        pattern: /\brm\s+(-[a-zA-Z]*f[a-zA-Z]*\s+)?\/\s*$/i,
+        reason: "Recursive deletion of root filesystem",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-002",
+        pattern: /\brm\s+(-[a-zA-Z]*r[a-zA-Z]*f|-[a-zA-Z]*f[a-zA-Z]*r)\s+\/\s*\*?\s*$/i,
+        reason: "Recursive force deletion from root",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-003",
+        pattern: /\brm\s+(-[a-zA-Z]*r[a-zA-Z]*f|-[a-zA-Z]*f[a-zA-Z]*r)\s+~\s*$/i,
+        reason: "Recursive force deletion of home directory",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-004",
+        pattern: /\brm\s+(-[a-zA-Z]*r[a-zA-Z]*f|-[a-zA-Z]*f[a-zA-Z]*r)\s+\.\*?\s*$/i,
+        reason: "Recursive force deletion of current directory contents",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-005",
+        pattern: /\bmkfs\b/,
+        reason: "Filesystem formatting command",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-006",
+        pattern: /\bdd\s+if=\/dev\/(zero|random|urandom)/i,
+        reason: "Direct disk write operation (zeroing/randomizing)",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-007",
+        pattern: /\bdd\s+.*of=\/dev\/[a-z]/i,
+        reason: "Direct write to block device",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-008",
+        pattern: /:\(\)\{.*\|.*\&\}\s*;?:/,
+        reason: "Fork bomb detected",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-009",
+        pattern: /\bchmod\s+(-[a-zA-Z]*R[a-zA-Z]*)?\s+777\s+\//i,
+        reason: "Recursive chmod 777 on root",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-010",
+        pattern: /\bchmod\s+(-[a-zA-Z]*R[a-zA-Z]*)?\s+000\s+\//i,
+        reason: "Recursive chmod 000 on root (removes all permissions)",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-011",
+        pattern: /\bchown\s+(-[a-zA-Z]*R[a-zA-Z]*)?\s+.*\s+\//i,
+        reason: "Recursive chown on root filesystem",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-012",
+        pattern: /\b(wget|curl)\s+.*\|\s*(sh|bash|zsh|dash|ksh)/i,
+        reason: "Piping remote content directly to shell (remote code execution)",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-013",
+        pattern: /\b>\s*\/dev\/sda/i,
+        reason: "Direct write to system disk device",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-014",
+        pattern: /\bmv\s+.*\s+\/\s*$/i,
+        reason: "Moving content to root filesystem",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-015",
+        pattern: /\bshutdown\b/i,
+        reason: "System shutdown command",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-016",
+        pattern: /\breboot\b/i,
+        reason: "System reboot command",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-017",
+        pattern: /\binit\s+[06]\b/i,
+        reason: "System halt/init 0 or init 6",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-018",
+        pattern: /\bkill\s+-9\s+1\b/i,
+        reason: "Killing PID 1 (init/systemd) - will crash the system",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-019",
+        pattern: /\bkillall\b/i,
+        reason: "Kill all processes command",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-020",
+        pattern: /\biptables\s+-F\b/i,
+        reason: "Flushing all firewall rules",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-021",
+        pattern: /\bufw\s+disable\b/i,
+        reason: "Disabling the firewall",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-022",
+        pattern: /\b(>|>>)\s*\/dev\/(sda|sdb|hda|vda|nvme)/i,
+        reason: "Writing directly to block device",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-023",
+        pattern: /\bformat\s+[a-zA-Z]:\\/i,
+        reason: "Windows format command",
+        level: "destructive",
+    },
+    {
+        id: "DESTR-024",
+        pattern: /\bdel\s+\/[sfq]\s+[\\\/]/i,
+        reason: "Windows recursive delete command",
+        level: "destructive",
+    },
+];
+// ─── RISKY COMMANDS ────────────────────────────────────────────────
+// These require user approval EVERY TIME via permission prompt.
+const RISKY_COMMANDS = [
+    {
+        id: "RISK-001",
+        pattern: /\bDROP\s+TABLE\b/i,
+        reason: "Destructive SQL: dropping a table",
+        level: "risky",
+    },
+    {
+        id: "RISK-002",
+        pattern: /\bDROP\s+DATABASE\b/i,
+        reason: "Destructive SQL: dropping an entire database",
+        level: "risky",
+    },
+    {
+        id: "RISK-003",
+        pattern: /\bDELETE\s+FROM\b/i,
+        reason: "Destructive SQL: deleting rows from a table",
+        level: "risky",
+    },
+    {
+        id: "RISK-004",
+        pattern: /\bTRUNCATE\b/i,
+        reason: "Destructive SQL: truncating a table",
+        level: "risky",
+    },
+    {
+        id: "RISK-005",
+        pattern: /\bALTER\s+TABLE\s+\S+\s+DROP\b/i,
+        reason: "Schema change: dropping a column",
+        level: "risky",
+    },
+    {
+        id: "RISK-006",
+        pattern: /\bsudo\s+su\b/i,
+        reason: "Switching to root user",
+        level: "risky",
+    },
+    {
+        id: "RISK-007",
+        pattern: /\bsudo\s+-i\b/i,
+        reason: "Interactive root shell",
+        level: "risky",
+    },
+    {
+        id: "RISK-008",
+        pattern: /\bsystemctl\s+stop\b/i,
+        reason: "Stopping a system service",
+        level: "risky",
+    },
+    {
+        id: "RISK-009",
+        pattern: /\bsystemctl\s+disable\b/i,
+        reason: "Disabling a system service",
+        level: "risky",
+    },
+    {
+        id: "RISK-010",
+        pattern: /\bkill\s+-9\b/i,
+        reason: "Force killing a process (SIGKILL)",
+        level: "risky",
+    },
+    {
+        id: "RISK-011",
+        pattern: /\bkill\s+-15\b/i,
+        reason: "Sending SIGTERM to a process",
+        level: "risky",
+    },
+    {
+        id: "RISK-012",
+        pattern: /\bservice\s+\S+\s+stop\b/i,
+        reason: "Stopping a service via service command",
+        level: "risky",
+    },
+    {
+        id: "RISK-013",
+        pattern: /\bnpm\s+uninstall\s+-g\b/i,
+        reason: "Global npm package uninstallation",
+        level: "risky",
+    },
+    {
+        id: "RISK-014",
+        pattern: /\byarn\s+global\s+remove\b/i,
+        reason: "Global yarn package removal",
+        level: "risky",
+    },
+    {
+        id: "RISK-015",
+        pattern: /\bapt\s+(remove|purge)\b/i,
+        reason: "Package removal via apt",
+        level: "risky",
+    },
+    {
+        id: "RISK-016",
+        pattern: /\byum\s+remove\b/i,
+        reason: "Package removal via yum",
+        level: "risky",
+    },
+    {
+        id: "RISK-017",
+        pattern: /\bdnf\s+remove\b/i,
+        reason: "Package removal via dnf",
+        level: "risky",
+    },
+    {
+        id: "RISK-018",
+        pattern: /\bsnap\s+remove\b/i,
+        reason: "Snap package removal",
+        level: "risky",
+    },
+    {
+        id: "RISK-019",
+        pattern: /\bcron(tab)?\s+(-r|-l)\b/i,
+        reason: "Cron job manipulation (remove or list for editing)",
+        level: "risky",
+    },
+    {
+        id: "RISK-020",
+        pattern: /\buserdel\b/i,
+        reason: "User account deletion",
+        level: "risky",
+    },
+    {
+        id: "RISK-021",
+        pattern: /\bgroupdel\b/i,
+        reason: "Group deletion",
+        level: "risky",
+    },
+    {
+        id: "RISK-022",
+        pattern: /\bpasswd\s+\w+/i,
+        reason: "Changing another user's password",
+        level: "risky",
+    },
+    {
+        id: "RISK-023",
+        pattern: /\biptables\s+-[AD]\b/i,
+        reason: "Modifying firewall rules",
+        level: "risky",
+    },
+    {
+        id: "RISK-024",
+        pattern: /\bnc\s+.*-l\b/i,
+        reason: "Listening on a network port (netcat)",
+        level: "risky",
+    },
+    {
+        id: "RISK-025",
+        pattern: /\bss\s+-lntp\b/i,
+        reason: "Listing all listening network ports",
+        level: "risky",
+    },
+    {
+        id: "RISK-026",
+        pattern: /\bchmod\s+(-[a-zA-Z]*R[a-zA-Z]*)?\s+777\b/i,
+        reason: "Granting full permissions (777) recursively",
+        level: "risky",
+    },
+    {
+        id: "RISK-027",
+        pattern: /\bchmod\s+(-[a-zA-Z]*R[a-zA-Z]*)?\s+000\b/i,
+        reason: "Removing all permissions recursively",
+        level: "risky",
+    },
+];
+/**
+ * Get all built-in blocklist entries.
+ */
+export function getBuiltinBlocklist() {
+    return [...DESTRUCTIVE_COMMANDS, ...RISKY_COMMANDS];
+}
+/**
+ * Get only destructive commands.
+ */
+export function getDestructiveCommands() {
+    return [...DESTRUCTIVE_COMMANDS];
+}
+/**
+ * Get only risky commands.
+ */
+export function getRiskyCommands() {
+    return [...RISKY_COMMANDS];
+}
+/**
+ * Create custom blocklist entries from user-provided regex patterns.
+ */
+export function createCustomEntries(patterns, level = "risky") {
+    return patterns.map((p, i) => ({
+        id: `CUSTOM-${level.toUpperCase()}-${String(i + 1).padStart(3, "0")}`,
+        pattern: new RegExp(p, "i"),
+        reason: `Custom ${level} pattern`,
+        level,
+    }));
+}
+//# sourceMappingURL=blocklist.js.map

package/dist/security/blocklist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocklist.js","sourceRoot":"","sources":["../../src/security/blocklist.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,uEAAuE;AACvE,+DAA+D;AAE/D,MAAM,oBAAoB,GAAqB;IAC7C;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,0CAA0C;QACnD,MAAM,EAAE,uCAAuC;QAC/C,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,sEAAsE;QAC/E,MAAM,EAAE,oCAAoC;QAC5C,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,+DAA+D;QACxE,MAAM,EAAE,4CAA4C;QACpD,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,mEAAmE;QAC5E,MAAM,EAAE,wDAAwD;QAChE,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE,+BAA+B;QACvC,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,yCAAyC;QAClD,MAAM,EAAE,mDAAmD;QAC3D,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,8BAA8B;QACtC,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,yBAAyB;QAClC,MAAM,EAAE,oBAAoB;QAC5B,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,6BAA6B;QACrC,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,uDAAuD;QAC/D,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,8CAA8C;QACvD,MAAM,EAAE,oCAAoC;QAC5C,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,gDAAgD;QACzD,MAAM,EAAE,iEAAiE;QACzE,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,oCAAoC;QAC5C,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,qBAAqB;QAC9B,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,eAAe;QACxB,MAAM,EAAE,yBAAyB;QACjC,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,uBAAuB;QAC/B,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,8BAA8B;QACtC,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,oBAAoB;QAC7B,MAAM,EAAE,sDAAsD;QAC9D,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,cAAc;QACvB,MAAM,EAAE,4BAA4B;QACpC,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,oBAAoB;QAC7B,MAAM,EAAE,6BAA6B;QACrC,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,oBAAoB;QAC7B,MAAM,EAAE,wBAAwB;QAChC,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE,kCAAkC;QAC1C,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,yBAAyB;QAClC,MAAM,EAAE,wBAAwB;QAChC,KAAK,EAAE,aAAa;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,kCAAkC;QAC1C,KAAK,EAAE,aAAa;KACrB;CACF,CAAA;AAED,sEAAsE;AACtE,gEAAgE;AAEhE,MAAM,cAAc,GAAqB;IACvC;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,sBAAsB;QAC/B,MAAM,EAAE,8CAA8C;QACtD,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,oBAAoB;QAC7B,MAAM,EAAE,6CAA6C;QACrD,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,eAAe;QACxB,MAAM,EAAE,qCAAqC;QAC7C,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,iCAAiC;QAC1C,MAAM,EAAE,kCAAkC;QAC1C,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,gBAAgB;QACzB,MAAM,EAAE,wBAAwB;QAChC,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,gBAAgB;QACzB,MAAM,EAAE,wBAAwB;QAChC,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,uBAAuB;QAChC,MAAM,EAAE,2BAA2B;QACnC,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,0BAA0B;QACnC,MAAM,EAAE,4BAA4B;QACpC,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,gBAAgB;QACzB,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,8BAA8B;QACtC,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,wCAAwC;QAChD,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,6BAA6B;QACtC,MAAM,EAAE,6BAA6B;QACrC,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,yBAAyB;QACjC,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,yBAAyB;QACjC,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,yBAAyB;QACjC,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,oBAAoB;QAC7B,MAAM,EAAE,sBAAsB;QAC9B,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,oDAAoD;QAC5D,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,cAAc;QACvB,MAAM,EAAE,uBAAuB;QAC/B,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,eAAe;QACxB,MAAM,EAAE,gBAAgB;QACxB,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,kCAAkC;QAC1C,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,uBAAuB;QAChC,MAAM,EAAE,0BAA0B;QAClC,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,gBAAgB;QACzB,MAAM,EAAE,sCAAsC;QAC9C,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,qCAAqC;QAC7C,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE,6CAA6C;QACrD,KAAK,EAAE,OAAO;KACf;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE,sCAAsC;QAC9C,KAAK,EAAE,OAAO;KACf;CACF,CAAA;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,oBAAoB,EAAE,GAAG,cAAc,CAAC,CAAA;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,CAAC,GAAG,oBAAoB,CAAC,CAAA;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,GAAG,cAAc,CAAC,CAAA;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAkB,EAClB,QAAsB,OAAO;IAE7B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7B,EAAE,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;QACrE,OAAO,EAAE,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC;QAC3B,MAAM,EAAE,UAAU,KAAK,UAAU;QACjC,KAAK;KACN,CAAC,CAAC,CAAA;AACL,CAAC"}

package/dist/security/policy.d.ts

@@ -0,0 +1,40 @@
+import type { SecurityMode } from "../config/schema.js";
+export interface SecurityPolicy {
+    mode: SecurityMode;
+    extraBlocklist: string[];
+    customAllowlist: string[];
+    updatedAt: string;
+}
+/**
+ * Load the security policy from disk.
+ */
+export declare function loadPolicy(projectDir: string): SecurityPolicy | null;
+/**
+ * Save the security policy to disk.
+ */
+export declare function savePolicy(projectDir: string, policy: SecurityPolicy): void;
+/**
+ * Get or create a default policy.
+ */
+export declare function getPolicy(projectDir: string, mode?: SecurityMode): SecurityPolicy;
+/**
+ * Add a pattern to the blocklist.
+ */
+export declare function addBlocklistPattern(projectDir: string, pattern: string): SecurityPolicy;
+/**
+ * Remove a pattern from the blocklist.
+ */
+export declare function removeBlocklistPattern(projectDir: string, pattern: string): SecurityPolicy;
+/**
+ * Add a pattern to the allowlist.
+ */
+export declare function addAllowlistPattern(projectDir: string, pattern: string): SecurityPolicy;
+/**
+ * Remove a pattern from the allowlist.
+ */
+export declare function removeAllowlistPattern(projectDir: string, pattern: string): SecurityPolicy;
+/**
+ * Format the current policy for display.
+ */
+export declare function formatPolicy(policy: SecurityPolicy): string;
+//# sourceMappingURL=policy.d.ts.map

package/dist/security/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/security/policy.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEvD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,CAAA;IAClB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;CAClB;AAID;;GAEG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAYpE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,IAAI,CAQ3E;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,YAAqB,GAAG,cAAc,CAazF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc,CAUvF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc,CAM1F;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc,CAUvF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc,CAM1F;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAuC3D"}

package/dist/security/policy.js

@@ -0,0 +1,133 @@
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { join } from "path";
+import { getSshDataDir } from "../config/defaults.js";
+const POLICY_FILE = "policy.json";
+/**
+ * Load the security policy from disk.
+ */
+export function loadPolicy(projectDir) {
+    const dataDir = getSshDataDir(projectDir);
+    const filePath = join(dataDir, POLICY_FILE);
+    if (!existsSync(filePath))
+        return null;
+    try {
+        const content = readFileSync(filePath, "utf-8");
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Save the security policy to disk.
+ */
+export function savePolicy(projectDir, policy) {
+    const dataDir = getSshDataDir(projectDir);
+    if (!existsSync(dataDir)) {
+        mkdirSync(dataDir, { recursive: true });
+    }
+    const filePath = join(dataDir, POLICY_FILE);
+    writeFileSync(filePath, JSON.stringify(policy, null, 2), "utf-8");
+}
+/**
+ * Get or create a default policy.
+ */
+export function getPolicy(projectDir, mode = "full") {
+    const existing = loadPolicy(projectDir);
+    if (existing)
+        return existing;
+    const defaultPolicy = {
+        mode,
+        extraBlocklist: [],
+        customAllowlist: [],
+        updatedAt: new Date().toISOString(),
+    };
+    savePolicy(projectDir, defaultPolicy);
+    return defaultPolicy;
+}
+/**
+ * Add a pattern to the blocklist.
+ */
+export function addBlocklistPattern(projectDir, pattern) {
+    const policy = getPolicy(projectDir);
+    if (policy.extraBlocklist.includes(pattern)) {
+        return policy;
+    }
+    policy.extraBlocklist.push(pattern);
+    policy.updatedAt = new Date().toISOString();
+    savePolicy(projectDir, policy);
+    return policy;
+}
+/**
+ * Remove a pattern from the blocklist.
+ */
+export function removeBlocklistPattern(projectDir, pattern) {
+    const policy = getPolicy(projectDir);
+    policy.extraBlocklist = policy.extraBlocklist.filter((p) => p !== pattern);
+    policy.updatedAt = new Date().toISOString();
+    savePolicy(projectDir, policy);
+    return policy;
+}
+/**
+ * Add a pattern to the allowlist.
+ */
+export function addAllowlistPattern(projectDir, pattern) {
+    const policy = getPolicy(projectDir);
+    if (policy.customAllowlist.includes(pattern)) {
+        return policy;
+    }
+    policy.customAllowlist.push(pattern);
+    policy.updatedAt = new Date().toISOString();
+    savePolicy(projectDir, policy);
+    return policy;
+}
+/**
+ * Remove a pattern from the allowlist.
+ */
+export function removeAllowlistPattern(projectDir, pattern) {
+    const policy = getPolicy(projectDir);
+    policy.customAllowlist = policy.customAllowlist.filter((p) => p !== pattern);
+    policy.updatedAt = new Date().toISOString();
+    savePolicy(projectDir, policy);
+    return policy;
+}
+/**
+ * Format the current policy for display.
+ */
+export function formatPolicy(policy) {
+    const lines = [
+        "## SSH Security Policy",
+        "",
+        `**Mode:** ${policy.mode}`,
+        `**Last updated:** ${policy.updatedAt}`,
+        "",
+    ];
+    if (policy.extraBlocklist.length > 0) {
+        lines.push("### Extra Blocklist Patterns");
+        for (const p of policy.extraBlocklist) {
+            lines.push(`- \`${p}\``);
+        }
+        lines.push("");
+    }
+    if (policy.customAllowlist.length > 0) {
+        lines.push("### Custom Allowlist Patterns");
+        for (const p of policy.customAllowlist) {
+            lines.push(`- \`${p}\``);
+        }
+        lines.push("");
+    }
+    lines.push("### Mode Description");
+    switch (policy.mode) {
+        case "full":
+            lines.push("All commands allowed except those in the blocklist.");
+            break;
+        case "restricted":
+            lines.push("Only commands in the allowlist + read-only commands are allowed.");
+            break;
+        case "read_only":
+            lines.push("Only read-only commands are allowed (ls, cat, grep, etc.).");
+            break;
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=policy.js.map

package/dist/security/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/security/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAWrD,MAAM,WAAW,GAAG,aAAa,CAAA;AAEjC;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAE3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IAEtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,UAAkB,EAAE,MAAsB;IACnE,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAC3C,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,UAAkB,EAAE,OAAqB,MAAM;IACvE,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IACvC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAE7B,MAAM,aAAa,GAAmB;QACpC,IAAI;QACJ,cAAc,EAAE,EAAE;QAClB,eAAe,EAAE,EAAE;QACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAA;IAED,UAAU,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;IACrC,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,OAAe;IACrE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACpC,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,OAAe;IACxE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACpC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAA;IAC1E,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,OAAe;IACrE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACpC,IAAI,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,OAAe;IACxE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACpC,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAA;IAC5E,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,MAAM,KAAK,GAAG;QACZ,wBAAwB;QACxB,EAAE;QACF,aAAa,MAAM,CAAC,IAAI,EAAE;QAC1B,qBAAqB,MAAM,CAAC,SAAS,EAAE;QACvC,EAAE;KACH,CAAA;IAED,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAC1C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC1B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;QAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC1B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IAClC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,MAAM;YACT,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAA;YACjE,MAAK;QACP,KAAK,YAAY;YACf,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAA;YAC9E,MAAK;QACP,KAAK,WAAW;YACd,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;YACxE,MAAK;IACT,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/dist/security/validator.d.ts

@@ -0,0 +1,32 @@
+import { type CommandLevel } from "./blocklist.js";
+import type { SecurityMode } from "../config/schema.js";
+export type ValidationResult = {
+    /** Whether the command is safe to execute */
+    safe: boolean;
+    /** Danger level of the command */
+    level: CommandLevel | "not_in_allowlist";
+    /** Human-readable reason */
+    reason?: string;
+    /** The matched rule ID from blocklist */
+    matched_rule?: string;
+    /** Suggestions for safer alternatives */
+    suggestions?: string[];
+};
+/**
+ * Validate a command against the security policy.
+ *
+ * Validation order:
+ * 1. Check against destructive blocklist → ALWAYS BLOCKED (no exceptions)
+ * 2. Check against risky blocklist → requires permission prompt
+ * 3. In restricted/read_only mode, check against allowlist
+ */
+export declare function validateCommand(command: string, mode: SecurityMode, extraBlocklist?: string[]): ValidationResult;
+/**
+ * Check if a command is purely read-only (no side effects).
+ */
+export declare function isReadOnlyCommand(command: string): boolean;
+/**
+ * Format validation result for display.
+ */
+export declare function formatValidationResult(result: ValidationResult): string;
+//# sourceMappingURL=validator.d.ts.map

package/dist/security/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/security/validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,YAAY,EAAuB,MAAM,gBAAgB,CAAA;AAEjH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEvD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,6CAA6C;IAC7C,IAAI,EAAE,OAAO,CAAA;IACb,kCAAkC;IAClC,KAAK,EAAE,YAAY,GAAG,kBAAkB,CAAA;IACxC,4BAA4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,EAClB,cAAc,GAAE,MAAM,EAAO,GAC5B,gBAAgB,CA0DlB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAuD1D;AAeD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAmBvE"}