@keel_flow/agent-policy 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 jglasskatz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/commands.d.ts

@@ -0,0 +1,4 @@
+import { type EffectivePolicy } from "./policy.js";
+export declare function isAllowedCommand(commandLine: string, policy: EffectivePolicy): boolean;
+export declare function isProtectedWritePath(targetPath: string, cwd: string, policy: EffectivePolicy): boolean;
+//# sourceMappingURL=commands.d.ts.map

package/dist/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAiD,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAqDlG,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CA+CtF;AAQD,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,eAAe,GACtB,OAAO,CAuBT"}

package/dist/commands.js

@@ -0,0 +1,132 @@
+import { isAbsolute, relative, resolve } from "path";
+import { BASE_PROTECTED_WRITE_PATHS, ROOT_CONFIG_NAMES } from "./policy.js";
+const GIT_SAFE_SUBCOMMANDS = new Set([
+    "status",
+    "diff",
+    "log",
+    "rev-parse",
+    "show",
+    "branch",
+    "fetch",
+    "pull",
+]);
+const PNPM_SAFE_SCRIPTS = new Set(["test", "lint", "typecheck", "build"]);
+const PNPM_PRIVILEGED_SUBCOMMANDS = new Set(["exec", "dlx", "run"]);
+const PRIVILEGED_COMMANDS = new Set(["node"]);
+const DANGEROUS_FLAGS = new Set([
+    "-c",
+    "--config",
+    "--reporter",
+    "--parser",
+    "--parser-options",
+    "--rulesdir",
+    "--rules-dir",
+    "--resolve-plugins-relative-to",
+    "--require",
+    "--loader",
+    "--import",
+    "--eval",
+    "--exec",
+    "--upload-pack",
+    "--receive-pack",
+    "--output",
+    "--output-directory",
+]);
+function flagName(token) {
+    const eq = token.indexOf("=");
+    return eq === -1 ? token : token.slice(0, eq);
+}
+function tokenIsDangerousFlag(token) {
+    if (token.startsWith("@"))
+        return true;
+    if (!token.startsWith("-"))
+        return false;
+    if (DANGEROUS_FLAGS.has(flagName(token)))
+        return true;
+    if (token.startsWith("-C") || token === "-C")
+        return true;
+    if (/(^|\.)core\.fsmonitor|protocol\.ext|^alias\.|\.alias\.|^http\.|^uploadpack\./.test(token)) {
+        return true;
+    }
+    return false;
+}
+export function isAllowedCommand(commandLine, policy) {
+    const trimmed = commandLine.trim();
+    if (trimmed.length === 0)
+        return false;
+    if (/[;&|`$()<>]/.test(trimmed))
+        return false;
+    const tokens = trimmed.split(/\s+/);
+    const first = tokens[0] ?? "";
+    const rest = tokens.slice(1);
+    if (rest.some((t) => tokenIsDangerousFlag(t)))
+        return false;
+    if (!policy.allowlistEnabled)
+        return true;
+    if (first === "git") {
+        const sub = rest.find((t) => !t.startsWith("-"));
+        if (sub === undefined)
+            return false;
+        return GIT_SAFE_SUBCOMMANDS.has(sub);
+    }
+    if (first === "tsc")
+        return true;
+    if (!policy.allowTestAndLint)
+        return false;
+    if (first === "pnpm") {
+        const sub = rest.find((t) => !t.startsWith("-"));
+        if (sub === undefined)
+            return false;
+        if (PNPM_PRIVILEGED_SUBCOMMANDS.has(sub))
+            return false;
+        if (sub === "install" || sub === "i") {
+            if (!policy.allowInstall)
+                return false;
+            if (!policy.allowLifecycleScripts) {
+                const hasIgnoreScripts = rest.includes("--ignore-scripts");
+                if (!hasIgnoreScripts)
+                    return false;
+            }
+            return true;
+        }
+        return PNPM_SAFE_SCRIPTS.has(sub);
+    }
+    if (first === "vitest") {
+        const sub = rest.find((t) => !t.startsWith("-"));
+        return sub === undefined || sub === "run";
+    }
+    if (first === "eslint")
+        return true;
+    if (PRIVILEGED_COMMANDS.has(first))
+        return false;
+    return false;
+}
+const PROTECTED_WRITE_BASENAMES = new Set(BASE_PROTECTED_WRITE_PATHS.filter((p) => !p.endsWith("/")));
+const PROTECTED_ROOT_CONFIG = new Set(ROOT_CONFIG_NAMES);
+export function isProtectedWritePath(targetPath, cwd, policy) {
+    const abs = isAbsolute(targetPath) ? targetPath : resolve(cwd, targetPath);
+    const rel = relative(cwd, abs).split("\\").join("/");
+    const segments = rel.split("/").filter((s) => s.length > 0 && s !== ".");
+    if (segments.includes(".git"))
+        return true;
+    const base = segments[segments.length - 1] ?? "";
+    for (const p of policy.protectedWritePaths) {
+        if (p.endsWith("/")) {
+            const dirName = p.slice(0, -1);
+            if (segments.includes(dirName))
+                return true;
+        }
+        else {
+            if (base === p)
+                return true;
+        }
+    }
+    if (policy.trustLevel === "open")
+        return false;
+    if (PROTECTED_WRITE_BASENAMES.has(base))
+        return true;
+    if (segments.length === 1 && PROTECTED_ROOT_CONFIG.has(base))
+        return true;
+    return false;
+}
+//# sourceMappingURL=commands.js.map

package/dist/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,EAAE,0BAA0B,EAAE,iBAAiB,EAAwB,MAAM,aAAa,CAAC;AAElG,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,QAAQ;IACR,MAAM;IACN,KAAK;IACL,WAAW;IACX,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1E,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACpE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE9C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,IAAI;IACJ,UAAU;IACV,YAAY;IACZ,UAAU;IACV,kBAAkB;IAClB,YAAY;IACZ,aAAa;IACb,+BAA+B;IAC/B,WAAW;IACX,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,gBAAgB;IAChB,UAAU;IACV,oBAAoB;CACrB,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,8EAA8E,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,MAAuB;IAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE7B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5D,IAAI,CAAC,MAAM,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAE1C,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACpC,OAAO,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAEjC,IAAI,CAAC,MAAM,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAE3C,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,YAAY;gBAAE,OAAO,KAAK,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;gBAClC,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;gBAC3D,IAAI,CAAC,gBAAgB;oBAAE,OAAO,KAAK,CAAC;YACtC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,KAAK,CAAC;IAC5C,CAAC;IAED,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,yBAAyB,GAAG,IAAI,GAAG,CACvC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAC3D,CAAC;AAEF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAEzD,MAAM,UAAU,oBAAoB,CAClC,UAAkB,EAClB,GAAW,EACX,MAAuB;IAEvB,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAEzE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAEjD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAE/C,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { AgentTrustLevelSchema, AgentPolicyOverridesSchema, resolvePolicy, TRUST_LEVEL_DESCRIPTIONS, BASE_PROTECTED_WRITE_PATHS, ROOT_CONFIG_NAMES, } from "./policy.js";
+export type { AgentTrustLevel, AgentPolicyOverrides, EffectivePolicy } from "./policy.js";
+export { isAllowedCommand, isProtectedWritePath } from "./commands.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,wBAAwB,EACxB,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { AgentTrustLevelSchema, AgentPolicyOverridesSchema, resolvePolicy, TRUST_LEVEL_DESCRIPTIONS, BASE_PROTECTED_WRITE_PATHS, ROOT_CONFIG_NAMES, } from "./policy.js";
+export { isAllowedCommand, isProtectedWritePath } from "./commands.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,wBAAwB,EACxB,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,31 @@
+import { z } from "zod";
+export declare const AgentTrustLevelSchema: z.ZodEnum<["locked", "guarded", "open"]>;
+export type AgentTrustLevel = z.infer<typeof AgentTrustLevelSchema>;
+export declare const AgentPolicyOverridesSchema: z.ZodObject<{
+    allowInstall: z.ZodOptional<z.ZodBoolean>;
+    allowLifecycleScripts: z.ZodOptional<z.ZodBoolean>;
+    protectedWritePaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    allowInstall?: boolean | undefined;
+    allowLifecycleScripts?: boolean | undefined;
+    protectedWritePaths?: string[] | undefined;
+}, {
+    allowInstall?: boolean | undefined;
+    allowLifecycleScripts?: boolean | undefined;
+    protectedWritePaths?: string[] | undefined;
+}>;
+export type AgentPolicyOverrides = z.infer<typeof AgentPolicyOverridesSchema>;
+export interface EffectivePolicy {
+    trustLevel: AgentTrustLevel;
+    allowlistEnabled: boolean;
+    allowInstall: boolean;
+    allowLifecycleScripts: boolean;
+    allowTestAndLint: boolean;
+    protectedWritePaths: string[];
+}
+declare const BASE_PROTECTED_WRITE_PATHS: string[];
+declare const ROOT_CONFIG_NAMES: string[];
+export declare function resolvePolicy(trustLevel: AgentTrustLevel, overrides?: AgentPolicyOverrides): EffectivePolicy;
+export declare const TRUST_LEVEL_DESCRIPTIONS: Record<AgentTrustLevel, string>;
+export { BASE_PROTECTED_WRITE_PATHS, ROOT_CONFIG_NAMES };
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,qBAAqB,0CAAwC,CAAC;AAC3E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;EAIrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,eAAe,CAAC;IAC5B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,QAAA,MAAM,0BAA0B,UAO/B,CAAC;AAEF,QAAA,MAAM,iBAAiB,UAuBtB,CAAC;AAEF,wBAAgB,aAAa,CAC3B,UAAU,EAAE,eAAe,EAC3B,SAAS,CAAC,EAAE,oBAAoB,GAC/B,eAAe,CAoBjB;AAkCD,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAMpE,CAAC;AAEF,OAAO,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/policy.js

@@ -0,0 +1,94 @@
+import { z } from "zod";
+export const AgentTrustLevelSchema = z.enum(["locked", "guarded", "open"]);
+export const AgentPolicyOverridesSchema = z.object({
+    allowInstall: z.boolean().optional(),
+    allowLifecycleScripts: z.boolean().optional(),
+    protectedWritePaths: z.array(z.string()).optional(),
+});
+const BASE_PROTECTED_WRITE_PATHS = [
+    ".git/",
+    "package.json",
+    "pnpm-lock.yaml",
+    "package-lock.json",
+    "npm-shrinkwrap.json",
+    "yarn.lock",
+];
+const ROOT_CONFIG_NAMES = [
+    "tsconfig.json",
+    "tsconfig.base.json",
+    "vitest.config.ts",
+    "vitest.config.js",
+    "vitest.config.mts",
+    "vitest.config.cts",
+    "vitest.config.mjs",
+    "vitest.config.cjs",
+    "vite.config.ts",
+    "vite.config.js",
+    "vite.config.mts",
+    "vite.config.mjs",
+    "eslint.config.js",
+    "eslint.config.cjs",
+    "eslint.config.mjs",
+    "eslint.config.ts",
+    ".eslintrc",
+    ".eslintrc.js",
+    ".eslintrc.cjs",
+    ".eslintrc.json",
+    ".eslintrc.yml",
+    ".eslintrc.yaml",
+];
+export function resolvePolicy(trustLevel, overrides) {
+    const base = basePolicyForTier(trustLevel);
+    const allowInstall = overrides?.allowInstall !== undefined ? overrides.allowInstall : base.allowInstall;
+    const allowLifecycleScripts = overrides?.allowLifecycleScripts !== undefined
+        ? overrides.allowLifecycleScripts && allowInstall
+        : base.allowLifecycleScripts;
+    const extraPaths = overrides?.protectedWritePaths ?? [];
+    const protectedWritePaths = Array.from(new Set([...base.protectedWritePaths, ...extraPaths]));
+    return {
+        trustLevel,
+        allowlistEnabled: base.allowlistEnabled,
+        allowInstall,
+        allowLifecycleScripts,
+        allowTestAndLint: base.allowTestAndLint,
+        protectedWritePaths,
+    };
+}
+function basePolicyForTier(level) {
+    switch (level) {
+        case "locked":
+            return {
+                trustLevel: "locked",
+                allowlistEnabled: true,
+                allowInstall: false,
+                allowLifecycleScripts: false,
+                allowTestAndLint: false,
+                protectedWritePaths: [],
+            };
+        case "guarded":
+            return {
+                trustLevel: "guarded",
+                allowlistEnabled: true,
+                allowInstall: true,
+                allowLifecycleScripts: true,
+                allowTestAndLint: true,
+                protectedWritePaths: [],
+            };
+        case "open":
+            return {
+                trustLevel: "open",
+                allowlistEnabled: false,
+                allowInstall: true,
+                allowLifecycleScripts: true,
+                allowTestAndLint: true,
+                protectedWritePaths: [],
+            };
+    }
+}
+export const TRUST_LEVEL_DESCRIPTIONS = {
+    locked: "Read-only inspection only: git read subcommands and tsc. No installs. Blocks writes to .git/, package.json, lockfiles, and root configs.",
+    guarded: "Trust-by-default: git read subcommands + fetch/pull, pnpm install (lifecycle scripts allowed), test/lint runners. Still blocks shell metachars, code-injection flags, and writes to .git/, lockfiles, and root configs. (Default)",
+    open: "Allowlist off — all commands permitted. Use only in trusted, sandboxed environments.",
+};
+export { BASE_PROTECTED_WRITE_PATHS, ROOT_CONFIG_NAMES };
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAG3E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7C,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAYH,MAAM,0BAA0B,GAAG;IACjC,OAAO;IACP,cAAc;IACd,gBAAgB;IAChB,mBAAmB;IACnB,qBAAqB;IACrB,WAAW;CACZ,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACxB,eAAe;IACf,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;IAClB,WAAW;IACX,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,gBAAgB;CACjB,CAAC;AAEF,MAAM,UAAU,aAAa,CAC3B,UAA2B,EAC3B,SAAgC;IAEhC,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,YAAY,GAChB,SAAS,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IACrF,MAAM,qBAAqB,GACzB,SAAS,EAAE,qBAAqB,KAAK,SAAS;QAC5C,CAAC,CAAC,SAAS,CAAC,qBAAqB,IAAI,YAAY;QACjD,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;IACjC,MAAM,UAAU,GAAG,SAAS,EAAE,mBAAmB,IAAI,EAAE,CAAC;IACxD,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CACpC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,mBAAmB,EAAE,GAAG,UAAU,CAAC,CAAC,CACtD,CAAC;IACF,OAAO;QACL,UAAU;QACV,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,YAAY;QACZ,qBAAqB;QACrB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAsB;IAC/C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,QAAQ;YACX,OAAO;gBACL,UAAU,EAAE,QAAQ;gBACpB,gBAAgB,EAAE,IAAI;gBACtB,YAAY,EAAE,KAAK;gBACnB,qBAAqB,EAAE,KAAK;gBAC5B,gBAAgB,EAAE,KAAK;gBACvB,mBAAmB,EAAE,EAAE;aACxB,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO;gBACL,UAAU,EAAE,SAAS;gBACrB,gBAAgB,EAAE,IAAI;gBACtB,YAAY,EAAE,IAAI;gBAClB,qBAAqB,EAAE,IAAI;gBAC3B,gBAAgB,EAAE,IAAI;gBACtB,mBAAmB,EAAE,EAAE;aACxB,CAAC;QACJ,KAAK,MAAM;YACT,OAAO;gBACL,UAAU,EAAE,MAAM;gBAClB,gBAAgB,EAAE,KAAK;gBACvB,YAAY,EAAE,IAAI;gBAClB,qBAAqB,EAAE,IAAI;gBAC3B,gBAAgB,EAAE,IAAI;gBACtB,mBAAmB,EAAE,EAAE;aACxB,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAoC;IACvE,MAAM,EACJ,0IAA0I;IAC5I,OAAO,EACL,mOAAmO;IACrO,IAAI,EAAE,sFAAsF;CAC7F,CAAC;AAEF,OAAO,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,CAAC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@keel_flow/agent-policy",
+  "version": "0.2.0",
+  "private": false,
+  "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "require": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "dependencies": {
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.1",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
+    "@typescript-eslint/parser": "^8.0.0",
+    "eslint": "^9.0.0",
+    "typescript": "^5.5.0",
+    "vitest": "^2.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "lint": "eslint src"
+  }
+}