@letterblack/lbe-exec 1.2.2 → 1.2.4

package/dist/index.js

@@ -252,7 +252,7 @@ function savePolicyState(statePath, stateObj) {
 }
 function validateAndUpdatePolicyVersionState({
   policyObj,
-  statePath = path2.resolve("data/policy.state.json"),
+  statePath = path2.resolve(".lbe/data/policy.state.json"),
   maxCreatedAtSkewSec = 31536e3,
   nowSec = Math.floor(Date.now() / 1e3),
   persist = true
@@ -1071,7 +1071,7 @@ import fs5 from "fs";
 import path6 from "path";
 import crypto2 from "crypto";
 function createBackup(filePath, backupDir) {
-  const dir = backupDir || path6.resolve("data/backups");
+  const dir = backupDir || path6.resolve(".lbe/data/backups");
   if (!fs5.existsSync(dir)) {
     fs5.mkdirSync(dir, { recursive: true });
   }
@@ -1491,7 +1491,7 @@ import fs8 from "fs";
 import path9 from "path";
 import crypto4 from "crypto";
 var POLICY_FILE = "lbe.policy.json";
-var AUDIT_FILE = "lbe.audit.jsonl";
+var AUDIT_FILE = ".lbe/audit.jsonl";
 function glob(pattern) {
   const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&");
   return new RegExp("^" + escaped.replace(/\*\*\//g, "(?:.*/)?").replace(/\*\*/g, ".*").replace(/\*/g, "[^/]*") + "$");
@@ -1605,6 +1605,26 @@ function underRoot(candidate, root) {
   const resolvedRoot = physicalPath2(root);
   return target === resolvedRoot || target.startsWith(resolvedRoot + path10.sep);
 }
+var FORBIDDEN_CONTENT = [
+  /\beval\s*\(/i,
+  /\bFunction\s*\(/i,
+  /\bexec\s*\(/i,
+  /\brequire\s*\(/,
+  /\bimport\s*\(/,
+  /\bchild_process\b/,
+  /\b__proto__\b/,
+  /\bconstructor\s*\[/,
+  /evalScript/i
+];
+function scanContent(value, fieldName) {
+  if (typeof value !== "string") return null;
+  for (const pattern of FORBIDDEN_CONTENT) {
+    if (pattern.test(value)) {
+      return error("PAYLOAD_CONTENT_REJECTED", `Forbidden pattern in ${fieldName}: ${pattern}`);
+    }
+  }
+  return null;
+}
 function normalize(rootDir, request, shell = {}) {
   if (!request || typeof request !== "object") return { error: error("REQUEST_INVALID", "request must be an object") };
   const detail = INTENTS[request.intent];
@@ -1618,6 +1638,8 @@ function normalize(rootDir, request, shell = {}) {
     if (["write_file", "patch_file"].includes(request.intent) && typeof request.content !== "string") {
       return { error: error("CONTENT_REQUIRED", "content is required for write and patch") };
     }
+    const contentScan = scanContent(request.content, "content");
+    if (contentScan) return { error: contentScan };
   }
   let command = null;
   if (detail.adapter === "shell") {
@@ -1702,7 +1724,7 @@ function createLocalExecutor(options = {}) {
       return prepared.error;
     }
     if (prepared.local.policy.mode === "observe") {
-      appendAudit(path10.join(rootDir, "lbe.audit.jsonl"), {
+      appendAudit(path10.join(rootDir, ".lbe/audit.jsonl"), {
         kind: "local_execution",
         commandId: prepared.proposal.commandId,
         requesterId: prepared.normalized.actor,
@@ -1722,7 +1744,7 @@ function createLocalExecutor(options = {}) {
     const requester = prepared.policy.requesters[prepared.normalized.actor];
     const adapterResult = await executeAdapter(prepared.normalized.detail.adapter, prepared.proposal, prepared.policy, requester);
     const ok = adapterResult.status === "completed";
-    const audit = appendAudit(path10.join(rootDir, "lbe.audit.jsonl"), {
+    const audit = appendAudit(path10.join(rootDir, ".lbe/audit.jsonl"), {
       kind: "local_execution",
       commandId: prepared.proposal.commandId,
       requesterId: prepared.normalized.actor,
@@ -1741,8 +1763,20 @@ function createLocalExecutor(options = {}) {
       ...ok ? {} : { error: { code: adapterResult.errorCode || "EXECUTION_FAILED", message: adapterResult.error || "Execution failed", recoverable: true } }
     };
   }
+  const writeFile = (target, content) => execute({ intent: "write_file", target, content });
+  const readFile = (target) => execute({ intent: "read_file", target });
+  const patchFile = (target, content) => execute({ intent: "patch_file", target, content });
+  const deleteFile = (target) => execute({ intent: "delete_file", target });
+  const runShell = (cmd, args = [], opts = {}) => execute({ intent: "run_shell", command: { cmd, args, ...opts } });
   return {
     rootDir,
+    // High-level API — use these
+    writeFile,
+    readFile,
+    patchFile,
+    deleteFile,
+    runShell,
+    // Low-level API — for advanced use
     validate: async (request) => {
       const preview = await dryRun(request);
       return { ...preview, dryRun: false, executed: false };
@@ -1754,7 +1788,7 @@ function createLocalExecutor(options = {}) {
       proposeRule: proposePolicyRule,
       addRule: (rule) => addLocalPolicyRule(rootDir, rule, options.mode || "enforce")
     },
-    audit: { verify: () => verifyAuditLogIntegrity(path10.join(rootDir, "lbe.audit.jsonl")) }
+    audit: { verify: () => verifyAuditLogIntegrity(path10.join(rootDir, ".lbe/audit.jsonl")) }
   };
 }
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@letterblack/lbe-exec",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "description": "Local host-signed execution layer for LetterBlack LBE.",
   "type": "module",
   "main": "dist/index.js",
@@ -11,8 +11,12 @@
       "default": "./dist/index.js"
     }
   },
+  "bin": {
+    "lbe-exec": "dist/cli.js"
+  },
   "files": [
     "dist/",
+    "assets/",
     "README.md",
     "types.d.ts",
     "LICENSE"

package/types.d.ts

@@ -1,19 +1,50 @@
-export type LBEExecutionIntent = 'read_file' | 'write_file' | 'patch_file' | 'delete_file' | 'run_shell';
-export interface LBERequest {
-  id?: string; actor?: string; intent: LBEExecutionIntent; target?: string; content?: string; patch?: unknown;
-  command?: { cmd: string; args: string[]; cwd?: string; timeoutMs?: number; maxOutputBytes?: number }; reason?: string;
-}
 export interface LBEResult {
-  ok: boolean; decision: 'allow' | 'deny' | 'observe'; executed: boolean; dryRun: boolean;
-  error?: { code: string; message: string; recoverable: boolean }; matchedRules?: string[]; auditId?: string;
+  ok: boolean;
+  decision: 'allow' | 'deny' | 'observe';
+  executed: boolean;
+  dryRun: boolean;
+  error?: { code: string; message: string; recoverable: boolean };
+  matchedRules?: string[];
+  auditId?: string;
   rollback?: { available: boolean; performed: boolean; backupId?: string };
 }
+
+export interface LBEPolicyRule {
+  effect: 'allow' | 'deny';
+  type: 'path' | 'command';
+  pattern: string;
+  from: string;
+}
+
 export interface LocalExecutor {
   rootDir: string;
-  validate(request: LBERequest): Promise<LBEResult>;
-  dryRun(request: LBERequest): Promise<LBEResult>;
-  execute(request: LBERequest): Promise<LBEResult>;
-  policy: { read(): unknown; proposeRule(rule: { effect: 'allow' | 'deny'; type: 'path' | 'command'; pattern: string; from: string }): unknown; addRule(rule: { effect: 'allow' | 'deny'; type: 'path' | 'command'; pattern: string; from: string }): unknown };
+
+  // High-level API — use these in agent code
+  writeFile(target: string, content: string): Promise<LBEResult>;
+  readFile(target: string): Promise<LBEResult>;
+  patchFile(target: string, content: string): Promise<LBEResult>;
+  deleteFile(target: string): Promise<LBEResult>;
+  runShell(cmd: string, args?: string[], opts?: { cwd?: string; timeoutMs?: number; maxOutputBytes?: number }): Promise<LBEResult>;
+
+  // Policy management
+  policy: {
+    read(): unknown;
+    proposeRule(rule: LBEPolicyRule): unknown;
+    addRule(rule: LBEPolicyRule): unknown;
+  };
+
+  // Audit
   audit: { verify(): unknown };
+
+  // Low-level — for advanced / non-standard use only
+  validate(request: unknown): Promise<LBEResult>;
+  dryRun(request: unknown): Promise<LBEResult>;
+  execute(request: unknown): Promise<LBEResult>;
 }
-export function createLocalExecutor(options?: { rootDir?: string; keyId?: string; mode?: 'observe' | 'enforce'; shell?: { allowCommands?: string[]; denyCommands?: string[]; maxRequests?: number } }): LocalExecutor;
+
+export function createLocalExecutor(options?: {
+  rootDir?: string;
+  keyId?: string;
+  mode?: 'observe' | 'enforce';
+  shell?: { allowCommands?: string[]; denyCommands?: string[]; maxRequests?: number };
+}): LocalExecutor;