@letterblack/lbe-exec 1.2.17 → 1.2.19

package/hooks/register.cjs

@@ -1,476 +1,5 @@
-'use strict';
-// LBE Agent Bridge — CJS preload hook
-// Load with: node --require @letterblack/lbe-exec/hooks/register.cjs agent.js
-// Or via:    npx lbe-exec run-node [--mode observe|enforce] agent.js
-
-const fs = require('fs');
-const path = require('path');
-const { EventEmitter } = require('events');
-const { Readable } = require('stream');
-
-const ROOT_DIR = process.env.LBE_ROOT || process.cwd();
-const MODE = process.env.LBE_MODE || 'observe';
-
-// ── Policy loader (inline CJS — ESM cannot be require()'d synchronously) ────
-
-function loadPolicy() {
-    // .lbe/policy.json is canonical. Fall back to legacy lbe.policy.json in root.
-    const policyPath = fs.existsSync(path.join(ROOT_DIR, '.lbe', 'policy.json'))
-        ? path.join(ROOT_DIR, '.lbe', 'policy.json')
-        : path.join(ROOT_DIR, 'lbe.policy.json');
-    try {
-        if (fs.existsSync(policyPath)) {
-            return JSON.parse(fs.readFileSync(policyPath, 'utf8'));
-        }
-    } catch (e) { /* fall through to default */ }
-    return { version: 1, mode: MODE, workspace: ROOT_DIR, rules: [] };
-}
-
-function globToRegex(pattern) {
-    const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, '\\$&');
-    return new RegExp('^' + escaped
-        .replace(/\*\*\//g, '(?:.*/)?')
-        .replace(/\*\*/g, '.*')
-        .replace(/\*/g, '[^/]*') + '$');
-}
-
-function evaluatePolicy(action) {
-    const policy = loadPolicy();
-    const mode = policy.mode || MODE;
-    const rules = Array.isArray(policy.rules) ? policy.rules : [];
-
-    if (action.path) {
-        try {
-            const abs = path.resolve(ROOT_DIR, action.path);
-            const sep = path.sep;
-            if (!abs.startsWith(ROOT_DIR + sep) && abs !== ROOT_DIR) {
-                return { decision: 'deny', deny: true, reason: 'PATH_OUTSIDE_ROOT', matchedRules: ['path:outside_root'], mode, enforced: mode === 'enforce' };
-            }
-            const rel = path.relative(ROOT_DIR, abs).split(sep).join('/');
-            const matched = rules.filter(r => r.type === 'path' && globToRegex(r.pattern).test(rel));
-            const denied = matched.filter(r => r.effect === 'deny');
-            const isDeny = denied.length > 0;
-            return {
-                decision: isDeny ? 'deny' : 'allow', deny: isDeny,
-                matchedRules: (isDeny ? denied : matched.filter(r => r.effect === 'allow')).map(r => r.id),
-                mode, enforced: mode === 'enforce',
-            };
-        } catch (e) {
-            if (mode === 'enforce') {
-                return { decision: 'deny', deny: true, reason: 'PATH_RESOLUTION_ERROR', matchedRules: [], mode, enforced: true };
-            }
-        }
-    }
-
-    if (action.cmd) {
-        const matched = rules.filter(r => r.type === 'command' && globToRegex(r.pattern).test(String(action.cmd)));
-        const denied = matched.filter(r => r.effect === 'deny');
-        const isDeny = denied.length > 0;
-        return {
-            decision: isDeny ? 'deny' : 'allow', deny: isDeny,
-            matchedRules: (isDeny ? denied : matched.filter(r => r.effect === 'allow')).map(r => r.id),
-            mode, enforced: mode === 'enforce',
-        };
-    }
-
-    return { decision: 'allow', deny: false, matchedRules: [], mode, enforced: mode === 'enforce' };
-}
-
-// ── Audit writer ──────────────────────────────────────────────────────────────
-// fs.appendFileSync → fs.writeFileSync (Node.js internal) → would recurse.
-// fs.openSync/writeSync/closeSync are low-level bindings — never call back into JS.
-// Re-entrant guard prevents recursion from any code path we missed.
-
-var _auditInFlight = false;
-
-function auditEvent(entry) {
-    if (_auditInFlight) return;
-    _auditInFlight = true;
-    try {
-        var eventsPath = path.join(ROOT_DIR, '.lbe', 'events.jsonl');
-        var dir = path.dirname(eventsPath);
-        if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-        var line = JSON.stringify({ ts: Math.floor(Date.now() / 1000), ...entry }) + '\n';
-        // Use open/write/close directly — bypasses all JS wrappers including writeFileSync
-        var fd = fs.openSync(eventsPath, 'a');
-        try { fs.writeSync(fd, line); } finally { fs.closeSync(fd); }
-    } catch (e) {
-        console.warn('[lbe] audit write failed:', e.message);
-    } finally {
-        _auditInFlight = false;
-    }
-}
-
-class LBEPermissionError extends Error {
-    constructor(decision, action) {
-        const target = action.path || action.cmd || 'unknown';
-        super('[LBE:' + decision.mode + '] DENIED ' + action.action + ' on ' + target);
-        this.name = 'LBEPermissionError';
-        this.code = 'LBE_PERMISSION_DENIED';
-        this.lbeDecision = decision;
-    }
-}
-
-// ── Originals — captured BEFORE any patch is applied ────────────────────────
-
-const origFs = {
-    writeFile:     fs.writeFile.bind(fs),
-    writeFileSync: fs.writeFileSync.bind(fs),
-    rm:            fs.rm     ? fs.rm.bind(fs)     : null,
-    rmSync:        fs.rmSync ? fs.rmSync.bind(fs) : null,
-    unlink:        fs.unlink.bind(fs),
-    unlinkSync:    fs.unlinkSync.bind(fs),
-    rename:        fs.rename.bind(fs),
-    renameSync:    fs.renameSync.bind(fs),
-};
-
-const origPromises = {
-    writeFile: fs.promises.writeFile.bind(fs.promises),
-    rm:        fs.promises.rm     ? fs.promises.rm.bind(fs.promises)     : null,
-    unlink:    fs.promises.unlink.bind(fs.promises),
-    rename:    fs.promises.rename.bind(fs.promises),
-};
-
-const cp = require('child_process');
-const origCp = {
-    spawn:     cp.spawn.bind(cp),
-    spawnSync: cp.spawnSync.bind(cp),
-    exec:      cp.exec.bind(cp),
-    execSync:  cp.execSync.bind(cp),
-};
-
-// ── Denied spawn stub — EventEmitter-compatible ───────────────────────────────
-
-function makeFailedChildProcess(err) {
-    const emitter = new EventEmitter();
-    emitter.pid        = null;
-    emitter.killed     = false;
-    emitter.exitCode   = 1;
-    emitter.signalCode = null;
-    emitter.stdout     = new Readable({ read() {} });
-    emitter.stderr     = new Readable({ read() {} });
-    emitter.stdin      = { write() { return false; }, end() {}, destroy() {} };
-    emitter.kill       = () => false;
-    emitter.ref        = () => emitter;
-    emitter.unref      = () => emitter;
-    process.nextTick(function () {
-        emitter.stdout.push(null);
-        emitter.stderr.push(null);
-        emitter.emit('error', err);
-        emitter.emit('close', 1, null);
-        emitter.emit('exit', 1, null);
-    });
-    return emitter;
-}
-
-// ── Decision + pre-block audit ────────────────────────────────────────────────
-
-function decide(action) {
-    var decision;
-    try {
-        decision = evaluatePolicy(action);
-    } catch (e) {
-        if (MODE === 'enforce') {
-            var failErr = new LBEPermissionError({ mode: 'enforce', enforced: true }, action);
-            try { auditEvent({ action: action.action, path: action.path, cmd: action.cmd, actor: 'agent:lbe-hooks', decision: 'deny', mode: 'enforce', enforced: true, executed: false, matched_rules: [], error: e.message }); } catch (_) {}
-            return { blocked: true, error: failErr };
-        }
-        console.warn('[lbe] policy evaluation failed (observe mode, allowing):', e.message);
-        return { blocked: false, decision: { decision: 'allow', deny: false, matchedRules: [], mode: 'observe', enforced: false } };
-    }
-
-    if (decision.deny && decision.enforced) {
-        var err = new LBEPermissionError(decision, action);
-        try { auditEvent({ action: action.action, path: action.path, cmd: action.cmd, actor: 'agent:lbe-hooks', decision: 'deny', mode: decision.mode, enforced: true, executed: false, matched_rules: decision.matchedRules }); } catch (_) {}
-        return { blocked: true, error: err };
-    }
-
-    return { blocked: false, decision: decision };
-}
-
-function postAudit(action, decision, executed, extra) {
-    try {
-        auditEvent(Object.assign({ action: action.action, path: action.path, cmd: action.cmd, actor: 'agent:lbe-hooks', decision: decision.decision, mode: decision.mode, enforced: decision.enforced, executed: executed, matched_rules: decision.matchedRules }, extra || {}));
-    } catch (e) {
-        console.warn('[lbe] post-action audit failed (result unaffected):', e.message);
-    }
-}
-
-// ── Patch fs callbacks ────────────────────────────────────────────────────────
-
-fs.writeFile = function lbeWriteFile(filePath, data, options, callback) {
-    if (typeof options === 'function') { callback = options; options = undefined; }
-    var action = { action: 'file_write', path: String(filePath) };
-    var check = decide(action);
-    if (check.blocked) { process.nextTick(function () { callback(check.error); }); return; }
-    function done(err) {
-        postAudit(action, check.decision, !err, err ? { error: err.message } : null);
-        callback(err);
-    }
-    if (options !== undefined) { origFs.writeFile(filePath, data, options, done); }
-    else { origFs.writeFile(filePath, data, done); }
-};
-
-fs.writeFileSync = function lbeWriteFileSync(filePath, data, options) {
-    var action = { action: 'file_write', path: String(filePath) };
-    var check = decide(action);
-    if (check.blocked) { throw check.error; }
-    try {
-        var result = options !== undefined ? origFs.writeFileSync(filePath, data, options) : origFs.writeFileSync(filePath, data);
-        postAudit(action, check.decision, true);
-        return result;
-    } catch (e) {
-        postAudit(action, check.decision, false, { error: e.message });
-        throw e;
-    }
-};
-
-if (origFs.rm) {
-    fs.rm = function lbeRm(filePath, options, callback) {
-        if (typeof options === 'function') { callback = options; options = undefined; }
-        var action = { action: 'file_delete', path: String(filePath) };
-        var check = decide(action);
-        if (check.blocked) { process.nextTick(function () { callback(check.error); }); return; }
-        function done(err) {
-            postAudit(action, check.decision, !err, err ? { error: err.message } : null);
-            callback(err);
-        }
-        if (options !== undefined) { origFs.rm(filePath, options, done); }
-        else { origFs.rm(filePath, done); }
-    };
-}
-
-if (origFs.rmSync) {
-    fs.rmSync = function lbeRmSync(filePath, options) {
-        var action = { action: 'file_delete', path: String(filePath) };
-        var check = decide(action);
-        if (check.blocked) { throw check.error; }
-        try {
-            var result = options !== undefined ? origFs.rmSync(filePath, options) : origFs.rmSync(filePath);
-            postAudit(action, check.decision, true);
-            return result;
-        } catch (e) {
-            postAudit(action, check.decision, false, { error: e.message });
-            throw e;
-        }
-    };
-}
-
-fs.unlink = function lbeUnlink(filePath, options, callback) {
-    if (typeof options === 'function') { callback = options; options = undefined; }
-    var action = { action: 'file_delete', path: String(filePath) };
-    var check = decide(action);
-    if (check.blocked) { process.nextTick(function () { callback(check.error); }); return; }
-    origFs.unlink(filePath, function done(err) {
-        postAudit(action, check.decision, !err, err ? { error: err.message } : null);
-        callback(err);
-    });
-};
-
-fs.unlinkSync = function lbeUnlinkSync(filePath) {
-    var action = { action: 'file_delete', path: String(filePath) };
-    var check = decide(action);
-    if (check.blocked) { throw check.error; }
-    try {
-        var result = origFs.unlinkSync(filePath);
-        postAudit(action, check.decision, true);
-        return result;
-    } catch (e) {
-        postAudit(action, check.decision, false, { error: e.message });
-        throw e;
-    }
-};
-
-fs.rename = function lbeRename(oldPath, newPath, options, callback) {
-    if (typeof options === 'function') { callback = options; options = undefined; }
-    var action = { action: 'file_rename', path: String(oldPath), dest: String(newPath) };
-    var check = decide(action);
-    if (check.blocked) { process.nextTick(function () { callback(check.error); }); return; }
-    origFs.rename(oldPath, newPath, function done(err) {
-        postAudit(action, check.decision, !err, err ? { error: err.message } : null);
-        callback(err);
-    });
-};
-
-fs.renameSync = function lbeRenameSync(oldPath, newPath) {
-    var action = { action: 'file_rename', path: String(oldPath), dest: String(newPath) };
-    var check = decide(action);
-    if (check.blocked) { throw check.error; }
-    try {
-        var result = origFs.renameSync(oldPath, newPath);
-        postAudit(action, check.decision, true);
-        return result;
-    } catch (e) {
-        postAudit(action, check.decision, false, { error: e.message });
-        throw e;
-    }
-};
-
-// ── Patch fs.promises ─────────────────────────────────────────────────────────
-
-fs.promises.writeFile = async function lbePromisesWriteFile(filePath, data, options) {
-    var action = { action: 'file_write', path: String(filePath) };
-    var check = decide(action);
-    if (check.blocked) { throw check.error; }
-    try {
-        var result = options !== undefined
-            ? await origPromises.writeFile(filePath, data, options)
-            : await origPromises.writeFile(filePath, data);
-        postAudit(action, check.decision, true);
-        return result;
-    } catch (e) {
-        postAudit(action, check.decision, false, { error: e.message });
-        throw e;
-    }
-};
-
-if (origPromises.rm) {
-    fs.promises.rm = async function lbePromisesRm(filePath, options) {
-        var action = { action: 'file_delete', path: String(filePath) };
-        var check = decide(action);
-        if (check.blocked) { throw check.error; }
-        try {
-            var result = options !== undefined
-                ? await origPromises.rm(filePath, options)
-                : await origPromises.rm(filePath);
-            postAudit(action, check.decision, true);
-            return result;
-        } catch (e) {
-            postAudit(action, check.decision, false, { error: e.message });
-            throw e;
-        }
-    };
-}
-
-fs.promises.unlink = async function lbePromisesUnlink(filePath) {
-    var action = { action: 'file_delete', path: String(filePath) };
-    var check = decide(action);
-    if (check.blocked) { throw check.error; }
-    try {
-        var result = await origPromises.unlink(filePath);
-        postAudit(action, check.decision, true);
-        return result;
-    } catch (e) {
-        postAudit(action, check.decision, false, { error: e.message });
-        throw e;
-    }
-};
-
-fs.promises.rename = async function lbePromisesRename(oldPath, newPath) {
-    var action = { action: 'file_rename', path: String(oldPath), dest: String(newPath) };
-    var check = decide(action);
-    if (check.blocked) { throw check.error; }
-    try {
-        var result = await origPromises.rename(oldPath, newPath);
-        postAudit(action, check.decision, true);
-        return result;
-    } catch (e) {
-        postAudit(action, check.decision, false, { error: e.message });
-        throw e;
-    }
-};
-
-// ── Patch child_process ───────────────────────────────────────────────────────
-
-cp.spawn = function lbeSpawn(cmd, args, options) {
-    if (args && !Array.isArray(args)) { options = args; args = []; }
-    var cwd = options && options.cwd ? String(options.cwd) : ROOT_DIR;
-    var shell = !!(options && options.shell);
-    var action = { action: 'run_shell', cmd: String(cmd), args: args || [], cwd: cwd, shell: shell };
-    var check = decide(action);
-    if (check.blocked) { return makeFailedChildProcess(check.error); }
-    var child = origCp.spawn(cmd, args || [], options || {});
-    child.on('close', function (code) { postAudit(action, check.decision, code === 0, { exit_code: code }); });
-    return child;
-};
-
-cp.spawnSync = function lbeSpawnSync(cmd, args, options) {
-    if (args && !Array.isArray(args)) { options = args; args = []; }
-    var cwd = options && options.cwd ? String(options.cwd) : ROOT_DIR;
-    var shell = !!(options && options.shell);
-    var action = { action: 'run_shell', cmd: String(cmd), args: args || [], cwd: cwd, shell: shell };
-    var check = decide(action);
-    if (check.blocked) {
-        return { pid: 0, output: [null, Buffer.alloc(0), Buffer.alloc(0)], stdout: Buffer.alloc(0), stderr: Buffer.alloc(0), status: 1, signal: null, error: check.error };
-    }
-    var result = origCp.spawnSync(cmd, args || [], options || {});
-    postAudit(action, check.decision, result.status === 0, { exit_code: result.status });
-    return result;
-};
-
-cp.exec = function lbeExec(command, options, callback) {
-    if (typeof options === 'function') { callback = options; options = undefined; }
-    var cwd = options && options.cwd ? String(options.cwd) : ROOT_DIR;
-    var action = { action: 'run_shell', cmd: String(command), args: [], cwd: cwd, shell: true };
-    var check = decide(action);
-    if (check.blocked) {
-        process.nextTick(function () { if (callback) callback(check.error, '', ''); });
-        return makeFailedChildProcess(check.error);
-    }
-    var cb = function done(err, stdout, stderr) {
-        postAudit(action, check.decision, !err, err ? { error: err.message } : null);
-        if (callback) callback(err, stdout, stderr);
-    };
-    return options !== undefined ? origCp.exec(command, options, cb) : origCp.exec(command, cb);
-};
-
-cp.execSync = function lbeExecSync(command, options) {
-    var cwd = options && options.cwd ? String(options.cwd) : ROOT_DIR;
-    var action = { action: 'run_shell', cmd: String(command), args: [], cwd: cwd, shell: true };
-    var check = decide(action);
-    if (check.blocked) { throw check.error; }
-    try {
-        var result = options !== undefined ? origCp.execSync(command, options) : origCp.execSync(command);
-        postAudit(action, check.decision, true);
-        return result;
-    } catch (e) {
-        postAudit(action, check.decision, false, { error: e.message });
-        throw e;
-    }
-};
-
-// ── Write hook-status.json (uses origFs — captured before patching) ───────────
-
-process.env.LBE_HOOK_ACTIVE = '1';
-
-try {
-    var statusDir = path.join(ROOT_DIR, '.lbe', 'runtime');
-    if (!fs.existsSync(statusDir)) fs.mkdirSync(statusDir, { recursive: true });
-    var status = {
-        active: true,
-        pid: process.pid,
-        started_at: new Date().toISOString(),
-        mode: MODE,
-        root: ROOT_DIR,
-        patched: {
-            'fs.writeFile': true,
-            'fs.writeFileSync': true,
-            'fs.rm': !!origFs.rm,
-            'fs.rmSync': !!origFs.rmSync,
-            'fs.unlink': true,
-            'fs.unlinkSync': true,
-            'fs.rename': true,
-            'fs.renameSync': true,
-            'fs.promises.writeFile': true,
-            'fs.promises.rm': !!origPromises.rm,
-            'fs.promises.unlink': true,
-            'fs.promises.rename': true,
-            'child_process.spawn': true,
-            'child_process.spawnSync': true,
-            'child_process.exec': true,
-            'child_process.execSync': true,
-        }
-    };
-    // Use original writeFileSync (pre-patch) to avoid triggering our own hook
-    origFs.writeFileSync(path.join(statusDir, 'hook-status.json'), JSON.stringify(status, null, 2) + '\n', 'utf8');
-} catch (e) {
-    console.warn('[lbe] could not write hook-status.json:', e.message);
-}
-
-// ── Banner ────────────────────────────────────────────────────────────────────
-
-if (MODE === 'observe') {
-    process.stderr.write('[lbe] OBSERVE mode — no actions blocked, all writes logged to .lbe/events.jsonl\n');
-} else if (MODE === 'enforce') {
-    process.stderr.write('[lbe] ENFORCE mode — policy denials will block execution\n');
-}
+"use strict";var t=require("fs"),S=require("path"),{EventEmitter:T}=require("events"),{Readable:R}=require("stream"),m=process.env.LBE_ROOT||process.cwd(),p=process.env.LBE_MODE||"observe";function A(){let o=t.existsSync(S.join(m,".lbe","policy.json"))?S.join(m,".lbe","policy.json"):S.join(m,"lbe.policy.json");try{if(t.existsSync(o))return JSON.parse(t.readFileSync(o,"utf8"))}catch{}return{version:1,mode:p,workspace:m,rules:[]}}function E(o){let e=o.replace(/[.+^${}()|[\]\\]/g,"\\$&");return new RegExp("^"+e.replace(/\*\*\//g,"(?:.*/)?").replace(/\*\*/g,".*").replace(/\*/g,"[^/]*")+"$")}function B(o){let e=A(),r=e.mode||p,n=Array.isArray(e.rules)?e.rules:[];if(o.path)try{let c=S.resolve(m,o.path),i=S.sep;if(!c.startsWith(m+i)&&c!==m)return{decision:"deny",deny:!0,reason:"PATH_OUTSIDE_ROOT",matchedRules:["path:outside_root"],mode:r,enforced:r==="enforce"};let s=S.relative(m,c).split(i).join("/"),l=n.filter(w=>w.type==="path"&&E(w.pattern).test(s)),d=l.filter(w=>w.effect==="deny"),h=d.length>0;return{decision:h?"deny":"allow",deny:h,matchedRules:(h?d:l.filter(w=>w.effect==="allow")).map(w=>w.id),mode:r,enforced:r==="enforce"}}catch{if(r==="enforce")return{decision:"deny",deny:!0,reason:"PATH_RESOLUTION_ERROR",matchedRules:[],mode:r,enforced:!0}}if(o.cmd){let c=n.filter(l=>l.type==="command"&&E(l.pattern).test(String(o.cmd))),i=c.filter(l=>l.effect==="deny"),s=i.length>0;return{decision:s?"deny":"allow",deny:s,matchedRules:(s?i:c.filter(l=>l.effect==="allow")).map(l=>l.id),mode:r,enforced:r==="enforce"}}return{decision:"allow",deny:!1,matchedRules:[],mode:r,enforced:r==="enforce"}}var _=!1;function x(o){if(!_){_=!0;try{var e=S.join(m,".lbe","events.jsonl"),r=S.dirname(e);t.existsSync(r)||t.mkdirSync(r,{recursive:!0});var n=JSON.stringify({ts:Math.floor(Date.now()/1e3),...o})+`
+`,c=t.openSync(e,"a");try{t.writeSync(c,n)}finally{t.closeSync(c)}}catch(i){console.warn("[lbe] audit write failed:",i.message)}finally{_=!1}}}var k=class extends Error{constructor(e,r){let n=r.path||r.cmd||"unknown";super("[LBE:"+e.mode+"] DENIED "+r.action+" on "+n),this.name="LBEPermissionError",this.code="LBE_PERMISSION_DENIED",this.lbeDecision=e}},u={writeFile:t.writeFile.bind(t),writeFileSync:t.writeFileSync.bind(t),rm:t.rm?t.rm.bind(t):null,rmSync:t.rmSync?t.rmSync.bind(t):null,unlink:t.unlink.bind(t),unlinkSync:t.unlinkSync.bind(t),rename:t.rename.bind(t),renameSync:t.renameSync.bind(t)},v={writeFile:t.promises.writeFile.bind(t.promises),rm:t.promises.rm?t.promises.rm.bind(t.promises):null,unlink:t.promises.unlink.bind(t.promises),rename:t.promises.rename.bind(t.promises)},y=require("child_process"),b={spawn:y.spawn.bind(y),spawnSync:y.spawnSync.bind(y),exec:y.exec.bind(y),execSync:y.execSync.bind(y)};function O(o){let e=new T;return e.pid=null,e.killed=!1,e.exitCode=1,e.signalCode=null,e.stdout=new R({read(){}}),e.stderr=new R({read(){}}),e.stdin={write(){return!1},end(){},destroy(){}},e.kill=()=>!1,e.ref=()=>e,e.unref=()=>e,process.nextTick(function(){e.stdout.push(null),e.stderr.push(null),e.emit("error",o),e.emit("close",1,null),e.emit("exit",1,null)}),e}function f(o){var e;try{e=B(o)}catch(c){if(p==="enforce"){var r=new k({mode:"enforce",enforced:!0},o);try{x({action:o.action,path:o.path,cmd:o.cmd,actor:"agent:lbe-hooks",decision:"deny",mode:"enforce",enforced:!0,executed:!1,matched_rules:[],error:c.message})}catch{}return{blocked:!0,error:r}}return console.warn("[lbe] policy evaluation failed (observe mode, allowing):",c.message),{blocked:!1,decision:{decision:"allow",deny:!1,matchedRules:[],mode:"observe",enforced:!1}}}if(e.deny&&e.enforced){var n=new k(e,o);try{x({action:o.action,path:o.path,cmd:o.cmd,actor:"agent:lbe-hooks",decision:"deny",mode:e.mode,enforced:!0,executed:!1,matched_rules:e.matchedRules})}catch{}return{blocked:!0,error:n}}return{blocked:!1,decision:e}}function a(o,e,r,n){try{x(Object.assign({action:o.action,path:o.path,cmd:o.cmd,actor:"agent:lbe-hooks",decision:e.decision,mode:e.mode,enforced:e.enforced,executed:r,matched_rules:e.matchedRules},n||{}))}catch(c){console.warn("[lbe] post-action audit failed (result unaffected):",c.message)}}t.writeFile=function(e,r,n,c){typeof n=="function"&&(c=n,n=void 0);var i={action:"file_write",path:String(e)},s=f(i);if(s.blocked){process.nextTick(function(){c(s.error)});return}function l(d){a(i,s.decision,!d,d?{error:d.message}:null),c(d)}n!==void 0?u.writeFile(e,r,n,l):u.writeFile(e,r,l)};t.writeFileSync=function(e,r,n){var c={action:"file_write",path:String(e)},i=f(c);if(i.blocked)throw i.error;try{var s=n!==void 0?u.writeFileSync(e,r,n):u.writeFileSync(e,r);return a(c,i.decision,!0),s}catch(l){throw a(c,i.decision,!1,{error:l.message}),l}};u.rm&&(t.rm=function(e,r,n){typeof r=="function"&&(n=r,r=void 0);var c={action:"file_delete",path:String(e)},i=f(c);if(i.blocked){process.nextTick(function(){n(i.error)});return}function s(l){a(c,i.decision,!l,l?{error:l.message}:null),n(l)}r!==void 0?u.rm(e,r,s):u.rm(e,s)});u.rmSync&&(t.rmSync=function(e,r){var n={action:"file_delete",path:String(e)},c=f(n);if(c.blocked)throw c.error;try{var i=r!==void 0?u.rmSync(e,r):u.rmSync(e);return a(n,c.decision,!0),i}catch(s){throw a(n,c.decision,!1,{error:s.message}),s}});t.unlink=function(e,r,n){typeof r=="function"&&(n=r,r=void 0);var c={action:"file_delete",path:String(e)},i=f(c);if(i.blocked){process.nextTick(function(){n(i.error)});return}u.unlink(e,function(l){a(c,i.decision,!l,l?{error:l.message}:null),n(l)})};t.unlinkSync=function(e){var r={action:"file_delete",path:String(e)},n=f(r);if(n.blocked)throw n.error;try{var c=u.unlinkSync(e);return a(r,n.decision,!0),c}catch(i){throw a(r,n.decision,!1,{error:i.message}),i}};t.rename=function(e,r,n,c){typeof n=="function"&&(c=n,n=void 0);var i={action:"file_rename",path:String(e),dest:String(r)},s=f(i);if(s.blocked){process.nextTick(function(){c(s.error)});return}u.rename(e,r,function(d){a(i,s.decision,!d,d?{error:d.message}:null),c(d)})};t.renameSync=function(e,r){var n={action:"file_rename",path:String(e),dest:String(r)},c=f(n);if(c.blocked)throw c.error;try{var i=u.renameSync(e,r);return a(n,c.decision,!0),i}catch(s){throw a(n,c.decision,!1,{error:s.message}),s}};t.promises.writeFile=async function(e,r,n){var c={action:"file_write",path:String(e)},i=f(c);if(i.blocked)throw i.error;try{var s=n!==void 0?await v.writeFile(e,r,n):await v.writeFile(e,r);return a(c,i.decision,!0),s}catch(l){throw a(c,i.decision,!1,{error:l.message}),l}};v.rm&&(t.promises.rm=async function(e,r){var n={action:"file_delete",path:String(e)},c=f(n);if(c.blocked)throw c.error;try{var i=r!==void 0?await v.rm(e,r):await v.rm(e);return a(n,c.decision,!0),i}catch(s){throw a(n,c.decision,!1,{error:s.message}),s}});t.promises.unlink=async function(e){var r={action:"file_delete",path:String(e)},n=f(r);if(n.blocked)throw n.error;try{var c=await v.unlink(e);return a(r,n.decision,!0),c}catch(i){throw a(r,n.decision,!1,{error:i.message}),i}};t.promises.rename=async function(e,r){var n={action:"file_rename",path:String(e),dest:String(r)},c=f(n);if(c.blocked)throw c.error;try{var i=await v.rename(e,r);return a(n,c.decision,!0),i}catch(s){throw a(n,c.decision,!1,{error:s.message}),s}};y.spawn=function(e,r,n){r&&!Array.isArray(r)&&(n=r,r=[]);var c=n&&n.cwd?String(n.cwd):m,i=!!(n&&n.shell),s={action:"run_shell",cmd:String(e),args:r||[],cwd:c,shell:i},l=f(s);if(l.blocked)return O(l.error);var d=b.spawn(e,r||[],n||{});return d.on("close",function(h){a(s,l.decision,h===0,{exit_code:h})}),d};y.spawnSync=function(e,r,n){r&&!Array.isArray(r)&&(n=r,r=[]);var c=n&&n.cwd?String(n.cwd):m,i=!!(n&&n.shell),s={action:"run_shell",cmd:String(e),args:r||[],cwd:c,shell:i},l=f(s);if(l.blocked)return{pid:0,output:[null,Buffer.alloc(0),Buffer.alloc(0)],stdout:Buffer.alloc(0),stderr:Buffer.alloc(0),status:1,signal:null,error:l.error};var d=b.spawnSync(e,r||[],n||{});return a(s,l.decision,d.status===0,{exit_code:d.status}),d};y.exec=function(e,r,n){typeof r=="function"&&(n=r,r=void 0);var c=r&&r.cwd?String(r.cwd):m,i={action:"run_shell",cmd:String(e),args:[],cwd:c,shell:!0},s=f(i);if(s.blocked)return process.nextTick(function(){n&&n(s.error,"","")}),O(s.error);var l=function(h,w,j){a(i,s.decision,!h,h?{error:h.message}:null),n&&n(h,w,j)};return r!==void 0?b.exec(e,r,l):b.exec(e,l)};y.execSync=function(e,r){var n=r&&r.cwd?String(r.cwd):m,c={action:"run_shell",cmd:String(e),args:[],cwd:n,shell:!0},i=f(c);if(i.blocked)throw i.error;try{var s=r!==void 0?b.execSync(e,r):b.execSync(e);return a(c,i.decision,!0),s}catch(l){throw a(c,i.decision,!1,{error:l.message}),l}};process.env.LBE_HOOK_ACTIVE="1";try{g=S.join(m,".lbe","runtime"),t.existsSync(g)||t.mkdirSync(g,{recursive:!0}),F={active:!0,pid:process.pid,started_at:new Date().toISOString(),mode:p,root:m,patched:{"fs.writeFile":!0,"fs.writeFileSync":!0,"fs.rm":!!u.rm,"fs.rmSync":!!u.rmSync,"fs.unlink":!0,"fs.unlinkSync":!0,"fs.rename":!0,"fs.renameSync":!0,"fs.promises.writeFile":!0,"fs.promises.rm":!!v.rm,"fs.promises.unlink":!0,"fs.promises.rename":!0,"child_process.spawn":!0,"child_process.spawnSync":!0,"child_process.exec":!0,"child_process.execSync":!0}},u.writeFileSync(S.join(g,"hook-status.json"),JSON.stringify(F,null,2)+`
+`,"utf8")}catch(o){console.warn("[lbe] could not write hook-status.json:",o.message)}var g,F;p==="observe"?process.stderr.write(`[lbe] OBSERVE mode \u2014 no actions blocked, all writes logged to .lbe/events.jsonl
+`):p==="enforce"&&process.stderr.write(`[lbe] ENFORCE mode \u2014 policy denials will block execution
+`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@letterblack/lbe-exec",
-  "version": "1.2.17",
+  "version": "1.2.19",
   "description": "Local host-signed execution layer for LetterBlack LBE.",
   "type": "module",
   "main": "dist/index.js",
@@ -20,6 +20,7 @@
     "hooks/",
     "assets/",
     "README.md",
+    "TRUST.md",
     "types.d.ts",
     "LICENSE"
   ],