@loxia-labs/loxia-autopilot-one 1.0.1 → 1.0.3

package/src/utilities/directoryAccessManager.js

@@ -1,535 +1 @@
-/**
- * DirectoryAccessManager - Manage directory access permissions for agents
- * 
- * Purpose:
- * - Control agent access to directories and files
- * - Distinguish between read-only and write-enabled directories
- * - Validate paths against access permissions
- * - Provide working directory management
- * - Support both absolute and relative path resolution
- */
-
-import path from 'path';
-import fs from 'fs/promises';
-import os from 'os';
-
-class DirectoryAccessManager {
-  constructor(config = {}, logger = null) {
-    this.logger = logger;
-    this.config = config;
-    
-    // Default system restrictions
-    this.systemRestrictedPaths = [
-      // System directories
-      '/etc',
-      '/var',
-      '/usr',
-      '/bin',
-      '/sbin',
-      '/boot',
-      '/dev',
-      '/proc',
-      '/sys',
-      // Windows system directories
-      'C:\\Windows',
-      'C:\\Program Files',
-      'C:\\Program Files (x86)',
-      // User sensitive directories
-      path.join(os.homedir(), '.ssh'),
-      path.join(os.homedir(), '.aws'),
-      path.join(os.homedir(), '.config'),
-      // Common package managers
-      'node_modules/.bin',
-      '.git/objects',
-      '.git/hooks'
-    ];
-  }
-
-  /**
-   * Create directory access configuration for an agent
-   * @param {Object} options - Access configuration options
-   * @returns {Object} Directory access configuration
-   */
-  createDirectoryAccess(options = {}) {
-    const {
-      workingDirectory = process.cwd(),
-      readOnlyDirectories = [],
-      writeEnabledDirectories = [],
-      restrictToProject = true,
-      allowSystemAccess = false,
-      customRestrictions = []
-    } = options;
-
-    // Normalize all paths to absolute
-    const workingDir = path.resolve(workingDirectory);
-    const readOnlyDirs = readOnlyDirectories.map(dir => this.normalizePath(dir, workingDir));
-    const writeEnabledDirs = writeEnabledDirectories.map(dir => this.normalizePath(dir, workingDir));
-
-    // If restrict to project, ensure working directory is included
-    const finalReadOnlyDirs = restrictToProject 
-      ? [...new Set([...readOnlyDirs, workingDir])]
-      : readOnlyDirs;
-
-    const finalWriteEnabledDirs = restrictToProject
-      ? writeEnabledDirs.filter(dir => this.isPathWithinDirectory(dir, workingDir))
-      : writeEnabledDirs;
-
-    return {
-      workingDirectory: workingDir,
-      readOnlyDirectories: finalReadOnlyDirs,
-      writeEnabledDirectories: finalWriteEnabledDirs,
-      restrictToProject,
-      allowSystemAccess,
-      customRestrictions: customRestrictions.map(restriction => path.resolve(restriction)),
-      createdAt: new Date().toISOString(),
-      version: '1.0'
-    };
-  }
-
-  /**
-   * Validate if a path can be accessed for reading
-   * @param {string} targetPath - Path to validate
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {Object} Validation result
-   */
-  validateReadAccess(targetPath, accessConfig) {
-    try {
-      const resolvedPath = this.resolvePath(targetPath, accessConfig.workingDirectory);
-      
-      // Check system restrictions first
-      if (!accessConfig.allowSystemAccess && this.isSystemRestrictedPath(resolvedPath)) {
-        return {
-          allowed: false,
-          reason: 'System path access denied',
-          path: resolvedPath,
-          category: 'system_restricted'
-        };
-      }
-
-      // Check custom restrictions
-      if (this.isCustomRestricted(resolvedPath, accessConfig.customRestrictions)) {
-        return {
-          allowed: false,
-          reason: 'Custom restriction applied',
-          path: resolvedPath,
-          category: 'custom_restricted'
-        };
-      }
-
-      // If restricting to project, ensure path is within allowed boundaries
-      if (accessConfig.restrictToProject) {
-        const isWithinProject = this.isPathWithinAnyDirectory(resolvedPath, [
-          ...accessConfig.readOnlyDirectories,
-          ...accessConfig.writeEnabledDirectories
-        ]);
-
-        if (!isWithinProject) {
-          return {
-            allowed: false,
-            reason: 'Path outside project scope',
-            path: resolvedPath,
-            category: 'project_restricted'
-          };
-        }
-      }
-
-      // Check if path is within any allowed directory
-      const isWithinAllowed = this.isPathWithinAnyDirectory(resolvedPath, [
-        ...accessConfig.readOnlyDirectories,
-        ...accessConfig.writeEnabledDirectories
-      ]);
-
-      if (!isWithinAllowed && accessConfig.readOnlyDirectories.length > 0) {
-        return {
-          allowed: false,
-          reason: 'Path not in allowed directories',
-          path: resolvedPath,
-          category: 'directory_restricted'
-        };
-      }
-
-      return {
-        allowed: true,
-        path: resolvedPath,
-        category: 'allowed'
-      };
-
-    } catch (error) {
-      return {
-        allowed: false,
-        reason: `Path validation error: ${error.message}`,
-        path: targetPath,
-        category: 'validation_error'
-      };
-    }
-  }
-
-  /**
-   * Validate if a path can be accessed for writing
-   * @param {string} targetPath - Path to validate
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {Object} Validation result
-   */
-  validateWriteAccess(targetPath, accessConfig) {
-    // First check read access
-    const readResult = this.validateReadAccess(targetPath, accessConfig);
-    if (!readResult.allowed) {
-      return {
-        ...readResult,
-        writeAllowed: false
-      };
-    }
-
-    const resolvedPath = readResult.path;
-
-    // Check if path is within write-enabled directories
-    const isWithinWriteEnabled = this.isPathWithinAnyDirectory(
-      resolvedPath, 
-      accessConfig.writeEnabledDirectories
-    );
-
-    if (!isWithinWriteEnabled) {
-      // Check if it's in read-only directories
-      const isWithinReadOnly = this.isPathWithinAnyDirectory(
-        resolvedPath,
-        accessConfig.readOnlyDirectories
-      );
-
-      if (isWithinReadOnly) {
-        return {
-          allowed: false,
-          writeAllowed: false,
-          reason: 'Path is in read-only directory',
-          path: resolvedPath,
-          category: 'read_only_restricted'
-        };
-      }
-
-      return {
-        allowed: false,
-        writeAllowed: false,
-        reason: 'Path not in write-enabled directories',
-        path: resolvedPath,
-        category: 'write_restricted'
-      };
-    }
-
-    return {
-      allowed: true,
-      writeAllowed: true,
-      path: resolvedPath,
-      category: 'write_allowed'
-    };
-  }
-
-  /**
-   * Get the effective working directory for an agent
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {string} Working directory path
-   */
-  getWorkingDirectory(accessConfig) {
-    return accessConfig.workingDirectory || process.cwd();
-  }
-
-  /**
-   * List accessible directories for an agent
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {Object} Directory listing with permissions
-   */
-  getAccessibleDirectories(accessConfig) {
-    return {
-      workingDirectory: accessConfig.workingDirectory,
-      readOnly: [...accessConfig.readOnlyDirectories],
-      writeEnabled: [...accessConfig.writeEnabledDirectories],
-      projectRestricted: accessConfig.restrictToProject,
-      systemAccessAllowed: accessConfig.allowSystemAccess,
-      totalDirectories: accessConfig.readOnlyDirectories.length + accessConfig.writeEnabledDirectories.length
-    };
-  }
-
-  /**
-   * Update directory access configuration
-   * @param {Object} currentConfig - Current access configuration
-   * @param {Object} updates - Updates to apply
-   * @returns {Object} Updated configuration
-   */
-  updateDirectoryAccess(currentConfig, updates) {
-    const updatedConfig = { ...currentConfig };
-
-    if (updates.workingDirectory) {
-      updatedConfig.workingDirectory = path.resolve(updates.workingDirectory);
-    }
-
-    if (updates.readOnlyDirectories !== undefined) {
-      updatedConfig.readOnlyDirectories = updates.readOnlyDirectories.map(dir => 
-        this.normalizePath(dir, updatedConfig.workingDirectory)
-      );
-    }
-
-    if (updates.writeEnabledDirectories !== undefined) {
-      updatedConfig.writeEnabledDirectories = updates.writeEnabledDirectories.map(dir =>
-        this.normalizePath(dir, updatedConfig.workingDirectory)
-      );
-    }
-
-    if (updates.restrictToProject !== undefined) {
-      updatedConfig.restrictToProject = updates.restrictToProject;
-    }
-
-    if (updates.allowSystemAccess !== undefined) {
-      updatedConfig.allowSystemAccess = updates.allowSystemAccess;
-    }
-
-    if (updates.customRestrictions !== undefined) {
-      updatedConfig.customRestrictions = updates.customRestrictions.map(restriction =>
-        path.resolve(restriction)
-      );
-    }
-
-    updatedConfig.version = currentConfig.version || '1.0';
-    updatedConfig.updatedAt = new Date().toISOString();
-
-    return updatedConfig;
-  }
-
-  /**
-   * Validate directory access configuration
-   * @param {Object} accessConfig - Configuration to validate
-   * @returns {Object} Validation result
-   */
-  validateAccessConfiguration(accessConfig) {
-    const errors = [];
-    const warnings = [];
-
-    // Validate working directory exists
-    if (!accessConfig.workingDirectory) {
-      errors.push('Working directory is required');
-    } else {
-      // Convert relative paths to absolute paths relative to process.cwd()
-      if (!path.isAbsolute(accessConfig.workingDirectory)) {
-        accessConfig.workingDirectory = path.resolve(process.cwd(), accessConfig.workingDirectory);
-      }
-    }
-
-    // Validate directory arrays
-    if (!Array.isArray(accessConfig.readOnlyDirectories)) {
-      errors.push('readOnlyDirectories must be an array');
-    } else {
-      // Convert relative paths to absolute paths
-      accessConfig.readOnlyDirectories = accessConfig.readOnlyDirectories.map(dir => 
-        path.isAbsolute(dir) ? dir : path.resolve(process.cwd(), dir)
-      );
-    }
-
-    if (!Array.isArray(accessConfig.writeEnabledDirectories)) {
-      errors.push('writeEnabledDirectories must be an array');
-    } else {
-      // Convert relative paths to absolute paths
-      accessConfig.writeEnabledDirectories = accessConfig.writeEnabledDirectories.map(dir => 
-        path.isAbsolute(dir) ? dir : path.resolve(process.cwd(), dir)
-      );
-    }
-
-    // Check for overlapping directories
-    if (accessConfig.readOnlyDirectories && accessConfig.writeEnabledDirectories) {
-      const overlapping = this.findOverlappingPaths(
-        accessConfig.readOnlyDirectories,
-        accessConfig.writeEnabledDirectories
-      );
-      
-      if (overlapping.length > 0) {
-        warnings.push(`Overlapping directories found: ${overlapping.join(', ')}`);
-      }
-    }
-
-    // Check for system path access
-    if (accessConfig.allowSystemAccess) {
-      warnings.push('System path access is enabled - use with caution');
-    }
-
-    // Validate paths exist (async check would be needed in real implementation)
-    const allPaths = [
-      ...accessConfig.readOnlyDirectories,
-      ...accessConfig.writeEnabledDirectories
-    ];
-
-    for (const dirPath of allPaths) {
-      if (!path.isAbsolute(dirPath)) {
-        errors.push(`Directory path must be absolute: ${dirPath}`);
-      }
-    }
-
-    return {
-      valid: errors.length === 0,
-      errors,
-      warnings,
-      summary: {
-        readOnlyCount: accessConfig.readOnlyDirectories?.length || 0,
-        writeEnabledCount: accessConfig.writeEnabledDirectories?.length || 0,
-        restrictToProject: accessConfig.restrictToProject,
-        allowSystemAccess: accessConfig.allowSystemAccess
-      }
-    };
-  }
-
-  /**
-   * Create relative path from absolute path within accessible directories
-   * @param {string} absolutePath - Absolute path to convert
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {string} Relative path or original if not within accessible directories
-   */
-  createRelativePath(absolutePath, accessConfig) {
-    const allDirectories = [
-      ...accessConfig.readOnlyDirectories,
-      ...accessConfig.writeEnabledDirectories,
-      accessConfig.workingDirectory
-    ];
-
-    for (const dir of allDirectories) {
-      if (this.isPathWithinDirectory(absolutePath, dir)) {
-        return path.relative(dir, absolutePath);
-      }
-    }
-
-    return absolutePath;
-  }
-
-  /**
-   * Resolve path relative to working directory or as absolute
-   * @private
-   */
-  resolvePath(targetPath, workingDirectory) {
-    if (path.isAbsolute(targetPath)) {
-      return path.normalize(targetPath);
-    }
-    return path.resolve(workingDirectory, targetPath);
-  }
-
-  /**
-   * Normalize path to absolute, resolving relative to working directory
-   * @private
-   */
-  normalizePath(targetPath, workingDirectory) {
-    if (path.isAbsolute(targetPath)) {
-      return path.normalize(targetPath);
-    }
-    return path.resolve(workingDirectory, targetPath);
-  }
-
-  /**
-   * Check if path is within a directory
-   * @private
-   */
-  isPathWithinDirectory(targetPath, parentDirectory) {
-    const relative = path.relative(parentDirectory, targetPath);
-    return !relative.startsWith('..') && !path.isAbsolute(relative);
-  }
-
-  /**
-   * Check if path is within any of the provided directories
-   * @private
-   */
-  isPathWithinAnyDirectory(targetPath, directories) {
-    return directories.some(dir => this.isPathWithinDirectory(targetPath, dir));
-  }
-
-  /**
-   * Check if path is system restricted
-   * @private
-   */
-  isSystemRestrictedPath(targetPath) {
-    return this.systemRestrictedPaths.some(restrictedPath => {
-      return targetPath.startsWith(restrictedPath) || targetPath === restrictedPath;
-    });
-  }
-
-  /**
-   * Check if path is custom restricted
-   * @private
-   */
-  isCustomRestricted(targetPath, customRestrictions) {
-    if (!customRestrictions || customRestrictions.length === 0) {
-      return false;
-    }
-
-    return customRestrictions.some(restriction => {
-      return targetPath.startsWith(restriction) || targetPath === restriction;
-    });
-  }
-
-  /**
-   * Find overlapping paths between two arrays
-   * @private
-   */
-  findOverlappingPaths(paths1, paths2) {
-    const overlapping = [];
-
-    for (const path1 of paths1) {
-      for (const path2 of paths2) {
-        if (this.isPathWithinDirectory(path1, path2) || this.isPathWithinDirectory(path2, path1)) {
-          overlapping.push(`${path1} <-> ${path2}`);
-        }
-      }
-    }
-
-    return overlapping;
-  }
-
-  /**
-   * Get directory access summary for logging/debugging
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {Object} Summary object
-   */
-  getAccessSummary(accessConfig) {
-    return {
-      workingDirectory: accessConfig.workingDirectory,
-      readOnlyCount: accessConfig.readOnlyDirectories.length,
-      writeEnabledCount: accessConfig.writeEnabledDirectories.length,
-      projectRestricted: accessConfig.restrictToProject,
-      systemAccessAllowed: accessConfig.allowSystemAccess,
-      customRestrictionsCount: accessConfig.customRestrictions?.length || 0,
-      configVersion: accessConfig.version || 'unknown',
-      lastUpdated: accessConfig.updatedAt || accessConfig.createdAt
-    };
-  }
-
-  /**
-   * Create default directory access for project-based agents
-   * @param {string} projectDir - Project directory path
-   * @returns {Object} Default directory access configuration
-   */
-  static createProjectDefaults(projectDir) {
-    const resolvedProject = path.resolve(projectDir);
-    
-    return {
-      workingDirectory: resolvedProject,
-      readOnlyDirectories: [resolvedProject],
-      writeEnabledDirectories: [resolvedProject],
-      restrictToProject: true,
-      allowSystemAccess: false,
-      customRestrictions: [],
-      createdAt: new Date().toISOString(),
-      version: '1.0'
-    };
-  }
-
-  /**
-   * Create permissive directory access (use with caution)
-   * @param {string} workingDir - Working directory
-   * @returns {Object} Permissive directory access configuration
-   */
-  static createPermissiveDefaults(workingDir = process.cwd()) {
-    return {
-      workingDirectory: path.resolve(workingDir),
-      readOnlyDirectories: [os.homedir()],
-      writeEnabledDirectories: [path.resolve(workingDir)],
-      restrictToProject: false,
-      allowSystemAccess: false,
-      customRestrictions: [],
-      createdAt: new Date().toISOString(),
-      version: '1.0'
-    };
-  }
-}
-
-export default DirectoryAccessManager;
+const a0_0x4f09bd=a0_0x3c6e;(function(_0x999ff7,_0x10494a){const _0x28d36f=a0_0x3c6e,_0xedd135=_0x999ff7();while(!![]){try{const _0x14fc30=-parseInt(_0x28d36f(0x209))/0x1*(-parseInt(_0x28d36f(0x1eb))/0x2)+parseInt(_0x28d36f(0x20e))/0x3+-parseInt(_0x28d36f(0x1de))/0x4*(parseInt(_0x28d36f(0x1e4))/0x5)+-parseInt(_0x28d36f(0x1f0))/0x6*(-parseInt(_0x28d36f(0x1e8))/0x7)+parseInt(_0x28d36f(0x206))/0x8+-parseInt(_0x28d36f(0x1ef))/0x9+-parseInt(_0x28d36f(0x208))/0xa;if(_0x14fc30===_0x10494a)break;else _0xedd135['push'](_0xedd135['shift']());}catch(_0x1c40a1){_0xedd135['push'](_0xedd135['shift']());}}}(a0_0x5be9,0xac568));import a0_0xa1342b from'path';function a0_0x5be9(){const _0x5bec40=['Dg9ju09tDhjPBMC','AxnqyxrOv2L0AgLUrgLYzwn0B3j5','D3jPDgvFCMvZDhjPy3rLza','y29UzMLN','y3jLyxrLuMvSyxrPDMvqyxrO','l3bYB2m','BgvUz3rO','D3jPDgvfBMfIBgvKrgLYzwn0B3jPzxm','CMvZB2X2zq','DxbKyxrLrgLYzwn0B3j5qwnJzxnZ','l2jVB3q','Ag9TzwrPCG','z2v0v29YA2LUz0rPCMvJDg9YEq','l2jPBG','ywXSB3DtExn0zw1by2nLC3m','odiWntG1nM5VugvNCG','AxnbCNjHEq','mtiWntC0nZb4Ewf1qNG','nhjgufP6rq','z2v0qwnJzxnZAwjSzurPCMvJDg9YAwvZ','y3vZDg9TuMvZDhjPy3rPB25Z','ugf0AcbUB3qGAw4GD3jPDguTzw5HyMXLzcbKAxjLy3rVCMLLCW','BwfW','otCZmtG4EerPuuT6','CMvHze9UBhLeAxjLy3rVCMLLCW','y3jLyxrLrgLYzwn0B3j5qwnJzxnZ','BM9YBwfSAxPL','AxnbyNnVBhv0zq','DMfSAwrHDgvxCML0zufJy2vZCW','CMvZB2X2zvbHDgG','CMvZDhjPy3ruB1bYB2PLy3q','ChjVAMvJDf9Yzxn0CMLJDgvK','AxndDxn0B21szxn0CMLJDgvK','ms4W','AxntExn0zw1szxn0CMLJDgvKugf0Aa','C3rHCNrZv2L0Aa','lMDPDc9OB29RCW','AxnqyxrOv2L0AgLUqw55rgLYzwn0B3j5','ChvZAa','nJqXntCYu0Xqt0jk','C29Tzq','AM9PBG','rgLYzwn0B3j5ihbHDgGGBxvZDcbIzsbHyNnVBhv0ztOG','ywXSB3DLza','D29YA2LUz0rPCMvJDg9YEq','mtbovwfeyNu','Bg9Nz2vY','BM9YBwfSAxPLugf0Aa','zgLYzwn0B3j5x3jLC3rYAwn0zwq','mJaWotqZngLAsNHhuq','zMLUze92zxjSyxbWAw5Nugf0Ahm','DxbKyxrLzef0','nti0mdaYvLL1ALzN','qZPCv2LUzg93CW','qZPCuhjVz3jHBsbgAwXLCYaOEdG2kq','y3jLyxrLzef0','nJy1odq0m1nwDw5VBG','mtjLALLwzgO','y3DK','CMvSyxrPDMu','C3LZDgvTuMvZDhjPy3rLzfbHDgHZ','l3nIAw4','u3LZDgvTihbHDgGGywnJzxnZigrLBMLLza','lMDPDc9VyMPLy3rZ'];a0_0x5be9=function(){return _0x5bec40;};return a0_0x5be9();}import a0_0x4dbe15 from'fs/promises';import a0_0x5bc35f from'os';class DirectoryAccessManager{constructor(_0x1dc5c9={},_0x4e9121=null){const _0x77f3e9=a0_0x3c6e;this[_0x77f3e9(0x1e5)]=_0x4e9121,this[_0x77f3e9(0x1fa)]=_0x1dc5c9,this['systemRestrictedPaths']=['/etc','/var','/usr',_0x77f3e9(0x204),_0x77f3e9(0x1f4),_0x77f3e9(0x201),'/dev',_0x77f3e9(0x1fc),'/sys',_0x77f3e9(0x1ec),'C:\x5cProgram\x20Files',_0x77f3e9(0x1ed),a0_0xa1342b['join'](a0_0x5bc35f[_0x77f3e9(0x202)](),'.ssh'),a0_0xa1342b['join'](a0_0x5bc35f[_0x77f3e9(0x202)](),'.aws'),a0_0xa1342b[_0x77f3e9(0x1e0)](a0_0x5bc35f[_0x77f3e9(0x202)](),'.config'),'node_modules/.bin',_0x77f3e9(0x1f6),_0x77f3e9(0x1db)];}[a0_0x4f09bd(0x210)](_0x39106c={}){const _0x2a84bd=a0_0x4f09bd,{workingDirectory:workingDirectory=process['cwd'](),readOnlyDirectories:readOnlyDirectories=[],writeEnabledDirectories:writeEnabledDirectories=[],restrictToProject:restrictToProject=!![],allowSystemAccess:allowSystemAccess=![],customRestrictions:customRestrictions=[]}=_0x39106c,_0x8eab82=a0_0xa1342b[_0x2a84bd(0x1ff)](workingDirectory),_0x34ceca=readOnlyDirectories['map'](_0x81e3dc=>this['normalizePath'](_0x81e3dc,_0x8eab82)),_0x159de7=writeEnabledDirectories[_0x2a84bd(0x20d)](_0x3100e5=>this[_0x2a84bd(0x1e6)](_0x3100e5,_0x8eab82)),_0x164930=restrictToProject?[...new Set([..._0x34ceca,_0x8eab82])]:_0x34ceca,_0x3b8970=restrictToProject?_0x159de7['filter'](_0x4f340d=>this['isPathWithinDirectory'](_0x4f340d,_0x8eab82)):_0x159de7;return{'workingDirectory':_0x8eab82,'readOnlyDirectories':_0x164930,'writeEnabledDirectories':_0x3b8970,'restrictToProject':restrictToProject,'allowSystemAccess':allowSystemAccess,'customRestrictions':customRestrictions['map'](_0x11e31d=>a0_0xa1342b['resolve'](_0x11e31d)),'createdAt':new Date()[_0x2a84bd(0x1f7)](),'version':'1.0'};}['validateReadAccess'](_0x32852e,_0x113c00){const _0xc2c51b=a0_0x4f09bd;try{const _0x5cded1=this[_0xc2c51b(0x214)](_0x32852e,_0x113c00['workingDirectory']);if(!_0x113c00['allowSystemAccess']&&this[_0xc2c51b(0x219)](_0x5cded1))return{'allowed':![],'reason':_0xc2c51b(0x1f5),'path':_0x5cded1,'category':'system_restricted'};if(this[_0xc2c51b(0x217)](_0x5cded1,_0x113c00[_0xc2c51b(0x20b)]))return{'allowed':![],'reason':'Custom\x20restriction\x20applied','path':_0x5cded1,'category':'custom_restricted'};if(_0x113c00['restrictToProject']){const _0x36ccdf=this[_0xc2c51b(0x1dc)](_0x5cded1,[..._0x113c00[_0xc2c51b(0x20f)],..._0x113c00['writeEnabledDirectories']]);if(!_0x36ccdf)return{'allowed':![],'reason':'Path\x20outside\x20project\x20scope','path':_0x5cded1,'category':_0xc2c51b(0x216)};}const _0x3ce2f0=this[_0xc2c51b(0x1dc)](_0x5cded1,[..._0x113c00[_0xc2c51b(0x20f)],..._0x113c00[_0xc2c51b(0x1fe)]]);if(!_0x3ce2f0&&_0x113c00[_0xc2c51b(0x20f)][_0xc2c51b(0x1fd)]>0x0)return{'allowed':![],'reason':'Path\x20not\x20in\x20allowed\x20directories','path':_0x5cded1,'category':_0xc2c51b(0x1e7)};return{'allowed':!![],'path':_0x5cded1,'category':_0xc2c51b(0x1e2)};}catch(_0x54e52e){return{'allowed':![],'reason':'Path\x20validation\x20error:\x20'+_0x54e52e['message'],'path':_0x32852e,'category':'validation_error'};}}[a0_0x4f09bd(0x213)](_0x219016,_0x585930){const _0x3f02fd=a0_0x4f09bd,_0x6326d7=this['validateReadAccess'](_0x219016,_0x585930);if(!_0x6326d7[_0x3f02fd(0x1e2)])return{..._0x6326d7,'writeAllowed':![]};const _0x2164b8=_0x6326d7['path'],_0x338799=this['isPathWithinAnyDirectory'](_0x2164b8,_0x585930['writeEnabledDirectories']);if(!_0x338799){const _0x3420cb=this[_0x3f02fd(0x1dc)](_0x2164b8,_0x585930['readOnlyDirectories']);if(_0x3420cb)return{'allowed':![],'writeAllowed':![],'reason':'Path\x20is\x20in\x20read-only\x20directory','path':_0x2164b8,'category':'read_only_restricted'};return{'allowed':![],'writeAllowed':![],'reason':_0x3f02fd(0x20c),'path':_0x2164b8,'category':_0x3f02fd(0x1f9)};}return{'allowed':!![],'writeAllowed':!![],'path':_0x2164b8,'category':'write_allowed'};}[a0_0x4f09bd(0x203)](_0x4b637d){const _0x5ea9f9=a0_0x4f09bd;return _0x4b637d[_0x5ea9f9(0x1e3)]||process[_0x5ea9f9(0x1f1)]();}[a0_0x4f09bd(0x20a)](_0x10866d){const _0x2a60a2=a0_0x4f09bd;return{'workingDirectory':_0x10866d['workingDirectory'],'readOnly':[..._0x10866d[_0x2a60a2(0x20f)]],'writeEnabled':[..._0x10866d['writeEnabledDirectories']],'projectRestricted':_0x10866d['restrictToProject'],'systemAccessAllowed':_0x10866d[_0x2a60a2(0x205)],'totalDirectories':_0x10866d[_0x2a60a2(0x20f)]['length']+_0x10866d[_0x2a60a2(0x1fe)][_0x2a60a2(0x1fd)]};}[a0_0x4f09bd(0x200)](_0x4e4f82,_0x537442){const _0x578159=a0_0x4f09bd,_0x1f0d7e={..._0x4e4f82};return _0x537442['workingDirectory']&&(_0x1f0d7e[_0x578159(0x1e3)]=a0_0xa1342b['resolve'](_0x537442[_0x578159(0x1e3)])),_0x537442['readOnlyDirectories']!==undefined&&(_0x1f0d7e[_0x578159(0x20f)]=_0x537442[_0x578159(0x20f)]['map'](_0x21d35d=>this[_0x578159(0x1e6)](_0x21d35d,_0x1f0d7e['workingDirectory']))),_0x537442['writeEnabledDirectories']!==undefined&&(_0x1f0d7e['writeEnabledDirectories']=_0x537442['writeEnabledDirectories']['map'](_0x35ebb7=>this['normalizePath'](_0x35ebb7,_0x1f0d7e[_0x578159(0x1e3)]))),_0x537442[_0x578159(0x215)]!==undefined&&(_0x1f0d7e[_0x578159(0x215)]=_0x537442['restrictToProject']),_0x537442['allowSystemAccess']!==undefined&&(_0x1f0d7e[_0x578159(0x205)]=_0x537442['allowSystemAccess']),_0x537442['customRestrictions']!==undefined&&(_0x1f0d7e[_0x578159(0x20b)]=_0x537442['customRestrictions']['map'](_0x2e62ad=>a0_0xa1342b['resolve'](_0x2e62ad))),_0x1f0d7e['version']=_0x4e4f82['version']||'1.0',_0x1f0d7e[_0x578159(0x1ea)]=new Date()[_0x578159(0x1f7)](),_0x1f0d7e;}['validateAccessConfiguration'](_0x567f91){const _0x4af7cc=a0_0x4f09bd,_0x14e852=[],_0x4fa9c4=[];!_0x567f91[_0x4af7cc(0x1e3)]?_0x14e852[_0x4af7cc(0x1dd)]('Working\x20directory\x20is\x20required'):!a0_0xa1342b['isAbsolute'](_0x567f91[_0x4af7cc(0x1e3)])&&(_0x567f91[_0x4af7cc(0x1e3)]=a0_0xa1342b[_0x4af7cc(0x1ff)](process[_0x4af7cc(0x1f1)](),_0x567f91['workingDirectory']));!Array[_0x4af7cc(0x207)](_0x567f91[_0x4af7cc(0x20f)])?_0x14e852[_0x4af7cc(0x1dd)]('readOnlyDirectories\x20must\x20be\x20an\x20array'):_0x567f91[_0x4af7cc(0x20f)]=_0x567f91['readOnlyDirectories'][_0x4af7cc(0x20d)](_0x704aff=>a0_0xa1342b['isAbsolute'](_0x704aff)?_0x704aff:a0_0xa1342b['resolve'](process[_0x4af7cc(0x1f1)](),_0x704aff));!Array[_0x4af7cc(0x207)](_0x567f91['writeEnabledDirectories'])?_0x14e852['push']('writeEnabledDirectories\x20must\x20be\x20an\x20array'):_0x567f91[_0x4af7cc(0x1fe)]=_0x567f91['writeEnabledDirectories'][_0x4af7cc(0x20d)](_0x57011e=>a0_0xa1342b[_0x4af7cc(0x212)](_0x57011e)?_0x57011e:a0_0xa1342b['resolve'](process['cwd'](),_0x57011e));if(_0x567f91[_0x4af7cc(0x20f)]&&_0x567f91['writeEnabledDirectories']){const _0x180eba=this[_0x4af7cc(0x1e9)](_0x567f91[_0x4af7cc(0x20f)],_0x567f91[_0x4af7cc(0x1fe)]);_0x180eba['length']>0x0&&_0x4fa9c4['push']('Overlapping\x20directories\x20found:\x20'+_0x180eba['join'](',\x20'));}_0x567f91[_0x4af7cc(0x205)]&&_0x4fa9c4['push']('System\x20path\x20access\x20is\x20enabled\x20-\x20use\x20with\x20caution');const _0x2ba5fd=[..._0x567f91['readOnlyDirectories'],..._0x567f91[_0x4af7cc(0x1fe)]];for(const _0x835294 of _0x2ba5fd){!a0_0xa1342b[_0x4af7cc(0x212)](_0x835294)&&_0x14e852['push'](_0x4af7cc(0x1e1)+_0x835294);}return{'valid':_0x14e852[_0x4af7cc(0x1fd)]===0x0,'errors':_0x14e852,'warnings':_0x4fa9c4,'summary':{'readOnlyCount':_0x567f91[_0x4af7cc(0x20f)]?.['length']||0x0,'writeEnabledCount':_0x567f91[_0x4af7cc(0x1fe)]?.[_0x4af7cc(0x1fd)]||0x0,'restrictToProject':_0x567f91[_0x4af7cc(0x215)],'allowSystemAccess':_0x567f91[_0x4af7cc(0x205)]}};}[a0_0x4f09bd(0x1fb)](_0xf4549e,_0xf83534){const _0x532af2=a0_0x4f09bd,_0x3b067f=[..._0xf83534[_0x532af2(0x20f)],..._0xf83534[_0x532af2(0x1fe)],_0xf83534[_0x532af2(0x1e3)]];for(const _0x254849 of _0x3b067f){if(this['isPathWithinDirectory'](_0xf4549e,_0x254849))return a0_0xa1342b[_0x532af2(0x1f2)](_0x254849,_0xf4549e);}return _0xf4549e;}['resolvePath'](_0x1c4adc,_0x1f15e1){const _0x4b14c4=a0_0x4f09bd;if(a0_0xa1342b['isAbsolute'](_0x1c4adc))return a0_0xa1342b[_0x4b14c4(0x211)](_0x1c4adc);return a0_0xa1342b[_0x4b14c4(0x1ff)](_0x1f15e1,_0x1c4adc);}['normalizePath'](_0x22e44a,_0x52441d){const _0x5348dc=a0_0x4f09bd;if(a0_0xa1342b['isAbsolute'](_0x22e44a))return a0_0xa1342b['normalize'](_0x22e44a);return a0_0xa1342b[_0x5348dc(0x1ff)](_0x52441d,_0x22e44a);}['isPathWithinDirectory'](_0x65e284,_0x3fe2e3){const _0x4320a2=a0_0x4f09bd,_0x35efba=a0_0xa1342b['relative'](_0x3fe2e3,_0x65e284);return!_0x35efba[_0x4320a2(0x21a)]('..')&&!a0_0xa1342b[_0x4320a2(0x212)](_0x35efba);}[a0_0x4f09bd(0x1dc)](_0x5bb362,_0x229ef4){const _0x550559=a0_0x4f09bd;return _0x229ef4['some'](_0x129868=>this[_0x550559(0x1f8)](_0x5bb362,_0x129868));}['isSystemRestrictedPath'](_0x459efa){const _0x34529c=a0_0x4f09bd;return this[_0x34529c(0x1f3)][_0x34529c(0x1df)](_0x24c367=>{const _0x5c8f96=_0x34529c;return _0x459efa[_0x5c8f96(0x21a)](_0x24c367)||_0x459efa===_0x24c367;});}['isCustomRestricted'](_0x396c59,_0x1fc520){const _0x3daa00=a0_0x4f09bd;if(!_0x1fc520||_0x1fc520[_0x3daa00(0x1fd)]===0x0)return![];return _0x1fc520['some'](_0x1f7380=>{return _0x396c59['startsWith'](_0x1f7380)||_0x396c59===_0x1f7380;});}[a0_0x4f09bd(0x1e9)](_0x31aa26,_0x13f229){const _0x9e24f5=[];for(const _0x3d240a of _0x31aa26){for(const _0x4714c3 of _0x13f229){(this['isPathWithinDirectory'](_0x3d240a,_0x4714c3)||this['isPathWithinDirectory'](_0x4714c3,_0x3d240a))&&_0x9e24f5['push'](_0x3d240a+'\x20<->\x20'+_0x4714c3);}}return _0x9e24f5;}['getAccessSummary'](_0x20d484){const _0x136b31=a0_0x4f09bd;return{'workingDirectory':_0x20d484['workingDirectory'],'readOnlyCount':_0x20d484[_0x136b31(0x20f)]['length'],'writeEnabledCount':_0x20d484[_0x136b31(0x1fe)]['length'],'projectRestricted':_0x20d484['restrictToProject'],'systemAccessAllowed':_0x20d484[_0x136b31(0x205)],'customRestrictionsCount':_0x20d484['customRestrictions']?.[_0x136b31(0x1fd)]||0x0,'configVersion':_0x20d484['version']||'unknown','lastUpdated':_0x20d484['updatedAt']||_0x20d484[_0x136b31(0x1ee)]};}static['createProjectDefaults'](_0xbb2df9){const _0x43e6ea=a0_0x4f09bd,_0x5006a3=a0_0xa1342b[_0x43e6ea(0x1ff)](_0xbb2df9);return{'workingDirectory':_0x5006a3,'readOnlyDirectories':[_0x5006a3],'writeEnabledDirectories':[_0x5006a3],'restrictToProject':!![],'allowSystemAccess':![],'customRestrictions':[],'createdAt':new Date()[_0x43e6ea(0x1f7)](),'version':'1.0'};}static['createPermissiveDefaults'](_0x30eaf4=process[a0_0x4f09bd(0x1f1)]()){const _0x422672=a0_0x4f09bd;return{'workingDirectory':a0_0xa1342b[_0x422672(0x1ff)](_0x30eaf4),'readOnlyDirectories':[a0_0x5bc35f[_0x422672(0x202)]()],'writeEnabledDirectories':[a0_0xa1342b['resolve'](_0x30eaf4)],'restrictToProject':![],'allowSystemAccess':![],'customRestrictions':[],'createdAt':new Date()[_0x422672(0x1f7)](),'version':_0x422672(0x218)};}}function a0_0x3c6e(_0x17bbc2,_0x2841b2){_0x17bbc2=_0x17bbc2-0x1db;const _0x5be9c0=a0_0x5be9();let _0x3c6e52=_0x5be9c0[_0x17bbc2];if(a0_0x3c6e['YjuQPy']===undefined){var _0x335cd2=function(_0x309e32){const _0xcf8979='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0xa1342b='',_0x4dbe15='';for(let _0x5bc35f=0x0,_0x1dc5c9,_0x4e9121,_0x39106c=0x0;_0x4e9121=_0x309e32['charAt'](_0x39106c++);~_0x4e9121&&(_0x1dc5c9=_0x5bc35f%0x4?_0x1dc5c9*0x40+_0x4e9121:_0x4e9121,_0x5bc35f++%0x4)?_0xa1342b+=String['fromCharCode'](0xff&_0x1dc5c9>>(-0x2*_0x5bc35f&0x6)):0x0){_0x4e9121=_0xcf8979['indexOf'](_0x4e9121);}for(let _0x8eab82=0x0,_0x34ceca=_0xa1342b['length'];_0x8eab82<_0x34ceca;_0x8eab82++){_0x4dbe15+='%'+('00'+_0xa1342b['charCodeAt'](_0x8eab82)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x4dbe15);};a0_0x3c6e['vGVUjq']=_0x335cd2,a0_0x3c6e['ZYqpJN']={},a0_0x3c6e['YjuQPy']=!![];}const _0x35f4eb=_0x5be9c0[0x0],_0x38ea32=_0x17bbc2+_0x35f4eb,_0x2d8d79=a0_0x3c6e['ZYqpJN'][_0x38ea32];return!_0x2d8d79?(_0x3c6e52=a0_0x3c6e['vGVUjq'](_0x3c6e52),a0_0x3c6e['ZYqpJN'][_0x38ea32]=_0x3c6e52):_0x3c6e52=_0x2d8d79,_0x3c6e52;}export default DirectoryAccessManager;