@loxia-labs/loxia-autopilot-one 1.0.1 → 1.0.4

package/src/utilities/directoryAccessManager.js

@@ -1,535 +1 @@
-/**
- * DirectoryAccessManager - Manage directory access permissions for agents
- * 
- * Purpose:
- * - Control agent access to directories and files
- * - Distinguish between read-only and write-enabled directories
- * - Validate paths against access permissions
- * - Provide working directory management
- * - Support both absolute and relative path resolution
- */
-
-import path from 'path';
-import fs from 'fs/promises';
-import os from 'os';
-
-class DirectoryAccessManager {
-  constructor(config = {}, logger = null) {
-    this.logger = logger;
-    this.config = config;
-    
-    // Default system restrictions
-    this.systemRestrictedPaths = [
-      // System directories
-      '/etc',
-      '/var',
-      '/usr',
-      '/bin',
-      '/sbin',
-      '/boot',
-      '/dev',
-      '/proc',
-      '/sys',
-      // Windows system directories
-      'C:\\Windows',
-      'C:\\Program Files',
-      'C:\\Program Files (x86)',
-      // User sensitive directories
-      path.join(os.homedir(), '.ssh'),
-      path.join(os.homedir(), '.aws'),
-      path.join(os.homedir(), '.config'),
-      // Common package managers
-      'node_modules/.bin',
-      '.git/objects',
-      '.git/hooks'
-    ];
-  }
-
-  /**
-   * Create directory access configuration for an agent
-   * @param {Object} options - Access configuration options
-   * @returns {Object} Directory access configuration
-   */
-  createDirectoryAccess(options = {}) {
-    const {
-      workingDirectory = process.cwd(),
-      readOnlyDirectories = [],
-      writeEnabledDirectories = [],
-      restrictToProject = true,
-      allowSystemAccess = false,
-      customRestrictions = []
-    } = options;
-
-    // Normalize all paths to absolute
-    const workingDir = path.resolve(workingDirectory);
-    const readOnlyDirs = readOnlyDirectories.map(dir => this.normalizePath(dir, workingDir));
-    const writeEnabledDirs = writeEnabledDirectories.map(dir => this.normalizePath(dir, workingDir));
-
-    // If restrict to project, ensure working directory is included
-    const finalReadOnlyDirs = restrictToProject 
-      ? [...new Set([...readOnlyDirs, workingDir])]
-      : readOnlyDirs;
-
-    const finalWriteEnabledDirs = restrictToProject
-      ? writeEnabledDirs.filter(dir => this.isPathWithinDirectory(dir, workingDir))
-      : writeEnabledDirs;
-
-    return {
-      workingDirectory: workingDir,
-      readOnlyDirectories: finalReadOnlyDirs,
-      writeEnabledDirectories: finalWriteEnabledDirs,
-      restrictToProject,
-      allowSystemAccess,
-      customRestrictions: customRestrictions.map(restriction => path.resolve(restriction)),
-      createdAt: new Date().toISOString(),
-      version: '1.0'
-    };
-  }
-
-  /**
-   * Validate if a path can be accessed for reading
-   * @param {string} targetPath - Path to validate
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {Object} Validation result
-   */
-  validateReadAccess(targetPath, accessConfig) {
-    try {
-      const resolvedPath = this.resolvePath(targetPath, accessConfig.workingDirectory);
-      
-      // Check system restrictions first
-      if (!accessConfig.allowSystemAccess && this.isSystemRestrictedPath(resolvedPath)) {
-        return {
-          allowed: false,
-          reason: 'System path access denied',
-          path: resolvedPath,
-          category: 'system_restricted'
-        };
-      }
-
-      // Check custom restrictions
-      if (this.isCustomRestricted(resolvedPath, accessConfig.customRestrictions)) {
-        return {
-          allowed: false,
-          reason: 'Custom restriction applied',
-          path: resolvedPath,
-          category: 'custom_restricted'
-        };
-      }
-
-      // If restricting to project, ensure path is within allowed boundaries
-      if (accessConfig.restrictToProject) {
-        const isWithinProject = this.isPathWithinAnyDirectory(resolvedPath, [
-          ...accessConfig.readOnlyDirectories,
-          ...accessConfig.writeEnabledDirectories
-        ]);
-
-        if (!isWithinProject) {
-          return {
-            allowed: false,
-            reason: 'Path outside project scope',
-            path: resolvedPath,
-            category: 'project_restricted'
-          };
-        }
-      }
-
-      // Check if path is within any allowed directory
-      const isWithinAllowed = this.isPathWithinAnyDirectory(resolvedPath, [
-        ...accessConfig.readOnlyDirectories,
-        ...accessConfig.writeEnabledDirectories
-      ]);
-
-      if (!isWithinAllowed && accessConfig.readOnlyDirectories.length > 0) {
-        return {
-          allowed: false,
-          reason: 'Path not in allowed directories',
-          path: resolvedPath,
-          category: 'directory_restricted'
-        };
-      }
-
-      return {
-        allowed: true,
-        path: resolvedPath,
-        category: 'allowed'
-      };
-
-    } catch (error) {
-      return {
-        allowed: false,
-        reason: `Path validation error: ${error.message}`,
-        path: targetPath,
-        category: 'validation_error'
-      };
-    }
-  }
-
-  /**
-   * Validate if a path can be accessed for writing
-   * @param {string} targetPath - Path to validate
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {Object} Validation result
-   */
-  validateWriteAccess(targetPath, accessConfig) {
-    // First check read access
-    const readResult = this.validateReadAccess(targetPath, accessConfig);
-    if (!readResult.allowed) {
-      return {
-        ...readResult,
-        writeAllowed: false
-      };
-    }
-
-    const resolvedPath = readResult.path;
-
-    // Check if path is within write-enabled directories
-    const isWithinWriteEnabled = this.isPathWithinAnyDirectory(
-      resolvedPath, 
-      accessConfig.writeEnabledDirectories
-    );
-
-    if (!isWithinWriteEnabled) {
-      // Check if it's in read-only directories
-      const isWithinReadOnly = this.isPathWithinAnyDirectory(
-        resolvedPath,
-        accessConfig.readOnlyDirectories
-      );
-
-      if (isWithinReadOnly) {
-        return {
-          allowed: false,
-          writeAllowed: false,
-          reason: 'Path is in read-only directory',
-          path: resolvedPath,
-          category: 'read_only_restricted'
-        };
-      }
-
-      return {
-        allowed: false,
-        writeAllowed: false,
-        reason: 'Path not in write-enabled directories',
-        path: resolvedPath,
-        category: 'write_restricted'
-      };
-    }
-
-    return {
-      allowed: true,
-      writeAllowed: true,
-      path: resolvedPath,
-      category: 'write_allowed'
-    };
-  }
-
-  /**
-   * Get the effective working directory for an agent
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {string} Working directory path
-   */
-  getWorkingDirectory(accessConfig) {
-    return accessConfig.workingDirectory || process.cwd();
-  }
-
-  /**
-   * List accessible directories for an agent
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {Object} Directory listing with permissions
-   */
-  getAccessibleDirectories(accessConfig) {
-    return {
-      workingDirectory: accessConfig.workingDirectory,
-      readOnly: [...accessConfig.readOnlyDirectories],
-      writeEnabled: [...accessConfig.writeEnabledDirectories],
-      projectRestricted: accessConfig.restrictToProject,
-      systemAccessAllowed: accessConfig.allowSystemAccess,
-      totalDirectories: accessConfig.readOnlyDirectories.length + accessConfig.writeEnabledDirectories.length
-    };
-  }
-
-  /**
-   * Update directory access configuration
-   * @param {Object} currentConfig - Current access configuration
-   * @param {Object} updates - Updates to apply
-   * @returns {Object} Updated configuration
-   */
-  updateDirectoryAccess(currentConfig, updates) {
-    const updatedConfig = { ...currentConfig };
-
-    if (updates.workingDirectory) {
-      updatedConfig.workingDirectory = path.resolve(updates.workingDirectory);
-    }
-
-    if (updates.readOnlyDirectories !== undefined) {
-      updatedConfig.readOnlyDirectories = updates.readOnlyDirectories.map(dir => 
-        this.normalizePath(dir, updatedConfig.workingDirectory)
-      );
-    }
-
-    if (updates.writeEnabledDirectories !== undefined) {
-      updatedConfig.writeEnabledDirectories = updates.writeEnabledDirectories.map(dir =>
-        this.normalizePath(dir, updatedConfig.workingDirectory)
-      );
-    }
-
-    if (updates.restrictToProject !== undefined) {
-      updatedConfig.restrictToProject = updates.restrictToProject;
-    }
-
-    if (updates.allowSystemAccess !== undefined) {
-      updatedConfig.allowSystemAccess = updates.allowSystemAccess;
-    }
-
-    if (updates.customRestrictions !== undefined) {
-      updatedConfig.customRestrictions = updates.customRestrictions.map(restriction =>
-        path.resolve(restriction)
-      );
-    }
-
-    updatedConfig.version = currentConfig.version || '1.0';
-    updatedConfig.updatedAt = new Date().toISOString();
-
-    return updatedConfig;
-  }
-
-  /**
-   * Validate directory access configuration
-   * @param {Object} accessConfig - Configuration to validate
-   * @returns {Object} Validation result
-   */
-  validateAccessConfiguration(accessConfig) {
-    const errors = [];
-    const warnings = [];
-
-    // Validate working directory exists
-    if (!accessConfig.workingDirectory) {
-      errors.push('Working directory is required');
-    } else {
-      // Convert relative paths to absolute paths relative to process.cwd()
-      if (!path.isAbsolute(accessConfig.workingDirectory)) {
-        accessConfig.workingDirectory = path.resolve(process.cwd(), accessConfig.workingDirectory);
-      }
-    }
-
-    // Validate directory arrays
-    if (!Array.isArray(accessConfig.readOnlyDirectories)) {
-      errors.push('readOnlyDirectories must be an array');
-    } else {
-      // Convert relative paths to absolute paths
-      accessConfig.readOnlyDirectories = accessConfig.readOnlyDirectories.map(dir => 
-        path.isAbsolute(dir) ? dir : path.resolve(process.cwd(), dir)
-      );
-    }
-
-    if (!Array.isArray(accessConfig.writeEnabledDirectories)) {
-      errors.push('writeEnabledDirectories must be an array');
-    } else {
-      // Convert relative paths to absolute paths
-      accessConfig.writeEnabledDirectories = accessConfig.writeEnabledDirectories.map(dir => 
-        path.isAbsolute(dir) ? dir : path.resolve(process.cwd(), dir)
-      );
-    }
-
-    // Check for overlapping directories
-    if (accessConfig.readOnlyDirectories && accessConfig.writeEnabledDirectories) {
-      const overlapping = this.findOverlappingPaths(
-        accessConfig.readOnlyDirectories,
-        accessConfig.writeEnabledDirectories
-      );
-      
-      if (overlapping.length > 0) {
-        warnings.push(`Overlapping directories found: ${overlapping.join(', ')}`);
-      }
-    }
-
-    // Check for system path access
-    if (accessConfig.allowSystemAccess) {
-      warnings.push('System path access is enabled - use with caution');
-    }
-
-    // Validate paths exist (async check would be needed in real implementation)
-    const allPaths = [
-      ...accessConfig.readOnlyDirectories,
-      ...accessConfig.writeEnabledDirectories
-    ];
-
-    for (const dirPath of allPaths) {
-      if (!path.isAbsolute(dirPath)) {
-        errors.push(`Directory path must be absolute: ${dirPath}`);
-      }
-    }
-
-    return {
-      valid: errors.length === 0,
-      errors,
-      warnings,
-      summary: {
-        readOnlyCount: accessConfig.readOnlyDirectories?.length || 0,
-        writeEnabledCount: accessConfig.writeEnabledDirectories?.length || 0,
-        restrictToProject: accessConfig.restrictToProject,
-        allowSystemAccess: accessConfig.allowSystemAccess
-      }
-    };
-  }
-
-  /**
-   * Create relative path from absolute path within accessible directories
-   * @param {string} absolutePath - Absolute path to convert
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {string} Relative path or original if not within accessible directories
-   */
-  createRelativePath(absolutePath, accessConfig) {
-    const allDirectories = [
-      ...accessConfig.readOnlyDirectories,
-      ...accessConfig.writeEnabledDirectories,
-      accessConfig.workingDirectory
-    ];
-
-    for (const dir of allDirectories) {
-      if (this.isPathWithinDirectory(absolutePath, dir)) {
-        return path.relative(dir, absolutePath);
-      }
-    }
-
-    return absolutePath;
-  }
-
-  /**
-   * Resolve path relative to working directory or as absolute
-   * @private
-   */
-  resolvePath(targetPath, workingDirectory) {
-    if (path.isAbsolute(targetPath)) {
-      return path.normalize(targetPath);
-    }
-    return path.resolve(workingDirectory, targetPath);
-  }
-
-  /**
-   * Normalize path to absolute, resolving relative to working directory
-   * @private
-   */
-  normalizePath(targetPath, workingDirectory) {
-    if (path.isAbsolute(targetPath)) {
-      return path.normalize(targetPath);
-    }
-    return path.resolve(workingDirectory, targetPath);
-  }
-
-  /**
-   * Check if path is within a directory
-   * @private
-   */
-  isPathWithinDirectory(targetPath, parentDirectory) {
-    const relative = path.relative(parentDirectory, targetPath);
-    return !relative.startsWith('..') && !path.isAbsolute(relative);
-  }
-
-  /**
-   * Check if path is within any of the provided directories
-   * @private
-   */
-  isPathWithinAnyDirectory(targetPath, directories) {
-    return directories.some(dir => this.isPathWithinDirectory(targetPath, dir));
-  }
-
-  /**
-   * Check if path is system restricted
-   * @private
-   */
-  isSystemRestrictedPath(targetPath) {
-    return this.systemRestrictedPaths.some(restrictedPath => {
-      return targetPath.startsWith(restrictedPath) || targetPath === restrictedPath;
-    });
-  }
-
-  /**
-   * Check if path is custom restricted
-   * @private
-   */
-  isCustomRestricted(targetPath, customRestrictions) {
-    if (!customRestrictions || customRestrictions.length === 0) {
-      return false;
-    }
-
-    return customRestrictions.some(restriction => {
-      return targetPath.startsWith(restriction) || targetPath === restriction;
-    });
-  }
-
-  /**
-   * Find overlapping paths between two arrays
-   * @private
-   */
-  findOverlappingPaths(paths1, paths2) {
-    const overlapping = [];
-
-    for (const path1 of paths1) {
-      for (const path2 of paths2) {
-        if (this.isPathWithinDirectory(path1, path2) || this.isPathWithinDirectory(path2, path1)) {
-          overlapping.push(`${path1} <-> ${path2}`);
-        }
-      }
-    }
-
-    return overlapping;
-  }
-
-  /**
-   * Get directory access summary for logging/debugging
-   * @param {Object} accessConfig - Directory access configuration
-   * @returns {Object} Summary object
-   */
-  getAccessSummary(accessConfig) {
-    return {
-      workingDirectory: accessConfig.workingDirectory,
-      readOnlyCount: accessConfig.readOnlyDirectories.length,
-      writeEnabledCount: accessConfig.writeEnabledDirectories.length,
-      projectRestricted: accessConfig.restrictToProject,
-      systemAccessAllowed: accessConfig.allowSystemAccess,
-      customRestrictionsCount: accessConfig.customRestrictions?.length || 0,
-      configVersion: accessConfig.version || 'unknown',
-      lastUpdated: accessConfig.updatedAt || accessConfig.createdAt
-    };
-  }
-
-  /**
-   * Create default directory access for project-based agents
-   * @param {string} projectDir - Project directory path
-   * @returns {Object} Default directory access configuration
-   */
-  static createProjectDefaults(projectDir) {
-    const resolvedProject = path.resolve(projectDir);
-    
-    return {
-      workingDirectory: resolvedProject,
-      readOnlyDirectories: [resolvedProject],
-      writeEnabledDirectories: [resolvedProject],
-      restrictToProject: true,
-      allowSystemAccess: false,
-      customRestrictions: [],
-      createdAt: new Date().toISOString(),
-      version: '1.0'
-    };
-  }
-
-  /**
-   * Create permissive directory access (use with caution)
-   * @param {string} workingDir - Working directory
-   * @returns {Object} Permissive directory access configuration
-   */
-  static createPermissiveDefaults(workingDir = process.cwd()) {
-    return {
-      workingDirectory: path.resolve(workingDir),
-      readOnlyDirectories: [os.homedir()],
-      writeEnabledDirectories: [path.resolve(workingDir)],
-      restrictToProject: false,
-      allowSystemAccess: false,
-      customRestrictions: [],
-      createdAt: new Date().toISOString(),
-      version: '1.0'
-    };
-  }
-}
-
-export default DirectoryAccessManager;
+const a0_0x16d667=a0_0x293c;(function(_0x3195d8,_0x4fc865){const _0x14f9b9=a0_0x293c,_0x1d8b8a=_0x3195d8();while(!![]){try{const _0x22b0c4=-parseInt(_0x14f9b9(0xf8))/0x1+parseInt(_0x14f9b9(0x104))/0x2*(parseInt(_0x14f9b9(0xf4))/0x3)+-parseInt(_0x14f9b9(0x107))/0x4+parseInt(_0x14f9b9(0x11f))/0x5+-parseInt(_0x14f9b9(0x10c))/0x6*(-parseInt(_0x14f9b9(0x101))/0x7)+parseInt(_0x14f9b9(0x10a))/0x8+-parseInt(_0x14f9b9(0x11b))/0x9;if(_0x22b0c4===_0x4fc865)break;else _0x1d8b8a['push'](_0x1d8b8a['shift']());}catch(_0x58f307){_0x1d8b8a['push'](_0x1d8b8a['shift']());}}}(a0_0x492c,0x9cd95));import a0_0x1c643b from'path';import a0_0x4ead27 from'fs/promises';function a0_0x293c(_0x14dc0c,_0x2d9828){_0x14dc0c=_0x14dc0c-0xe8;const _0x492c66=a0_0x492c();let _0x293c9c=_0x492c66[_0x14dc0c];if(a0_0x293c['BUOnsl']===undefined){var _0x40edd3=function(_0x407dd0){const _0x502be7='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x1c643b='',_0x4ead27='';for(let _0x2e9205=0x0,_0x287e6a,_0x4bf27e,_0x6e1969=0x0;_0x4bf27e=_0x407dd0['charAt'](_0x6e1969++);~_0x4bf27e&&(_0x287e6a=_0x2e9205%0x4?_0x287e6a*0x40+_0x4bf27e:_0x4bf27e,_0x2e9205++%0x4)?_0x1c643b+=String['fromCharCode'](0xff&_0x287e6a>>(-0x2*_0x2e9205&0x6)):0x0){_0x4bf27e=_0x502be7['indexOf'](_0x4bf27e);}for(let _0x1ed55a=0x0,_0x497f5b=_0x1c643b['length'];_0x1ed55a<_0x497f5b;_0x1ed55a++){_0x4ead27+='%'+('00'+_0x1c643b['charCodeAt'](_0x1ed55a)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x4ead27);};a0_0x293c['qBcISI']=_0x40edd3,a0_0x293c['UgLhXk']={},a0_0x293c['BUOnsl']=!![];}const _0x4ea33a=_0x492c66[0x0],_0x1b2701=_0x14dc0c+_0x4ea33a,_0x3ca843=a0_0x293c['UgLhXk'][_0x1b2701];return!_0x3ca843?(_0x293c9c=a0_0x293c['qBcISI'](_0x293c9c),a0_0x293c['UgLhXk'][_0x1b2701]=_0x293c9c):_0x293c9c=_0x3ca843,_0x293c9c;}import a0_0x2e9205 from'os';class DirectoryAccessManager{constructor(_0x287e6a={},_0x4bf27e=null){const _0x191489=a0_0x293c;this['logger']=_0x4bf27e,this[_0x191489(0xf0)]=_0x287e6a,this['systemRestrictedPaths']=[_0x191489(0xeb),'/var','/usr','/bin',_0x191489(0x106),'/boot','/dev','/proc','/sys',_0x191489(0xf6),'C:\x5cProgram\x20Files','C:\x5cProgram\x20Files\x20(x86)',a0_0x1c643b[_0x191489(0xfa)](a0_0x2e9205['homedir'](),_0x191489(0x115)),a0_0x1c643b['join'](a0_0x2e9205['homedir'](),'.aws'),a0_0x1c643b[_0x191489(0xfa)](a0_0x2e9205['homedir'](),'.config'),_0x191489(0xf3),'.git/objects','.git/hooks'];}['createDirectoryAccess'](_0x6e1969={}){const _0xa70863=a0_0x293c,{workingDirectory:workingDirectory=process[_0xa70863(0xec)](),readOnlyDirectories:readOnlyDirectories=[],writeEnabledDirectories:writeEnabledDirectories=[],restrictToProject:restrictToProject=!![],allowSystemAccess:allowSystemAccess=![],customRestrictions:customRestrictions=[]}=_0x6e1969,_0x1ed55a=a0_0x1c643b['resolve'](workingDirectory),_0x497f5b=readOnlyDirectories[_0xa70863(0x109)](_0x46373f=>this['normalizePath'](_0x46373f,_0x1ed55a)),_0x13b29f=writeEnabledDirectories[_0xa70863(0x109)](_0x21329d=>this['normalizePath'](_0x21329d,_0x1ed55a)),_0x4d0237=restrictToProject?[...new Set([..._0x497f5b,_0x1ed55a])]:_0x497f5b,_0x2aa120=restrictToProject?_0x13b29f[_0xa70863(0x100)](_0x33cf7b=>this[_0xa70863(0xff)](_0x33cf7b,_0x1ed55a)):_0x13b29f;return{'workingDirectory':_0x1ed55a,'readOnlyDirectories':_0x4d0237,'writeEnabledDirectories':_0x2aa120,'restrictToProject':restrictToProject,'allowSystemAccess':allowSystemAccess,'customRestrictions':customRestrictions['map'](_0x4abe68=>a0_0x1c643b[_0xa70863(0xf2)](_0x4abe68)),'createdAt':new Date()['toISOString'](),'version':'1.0'};}['validateReadAccess'](_0x4f1f03,_0x7f2bb){const _0x322a27=a0_0x293c;try{const _0x27a6a7=this['resolvePath'](_0x4f1f03,_0x7f2bb[_0x322a27(0x103)]);if(!_0x7f2bb['allowSystemAccess']&&this['isSystemRestrictedPath'](_0x27a6a7))return{'allowed':![],'reason':'System\x20path\x20access\x20denied','path':_0x27a6a7,'category':'system_restricted'};if(this['isCustomRestricted'](_0x27a6a7,_0x7f2bb['customRestrictions']))return{'allowed':![],'reason':'Custom\x20restriction\x20applied','path':_0x27a6a7,'category':'custom_restricted'};if(_0x7f2bb[_0x322a27(0x118)]){const _0x215ab4=this[_0x322a27(0xef)](_0x27a6a7,[..._0x7f2bb[_0x322a27(0x114)],..._0x7f2bb[_0x322a27(0x116)]]);if(!_0x215ab4)return{'allowed':![],'reason':_0x322a27(0xfc),'path':_0x27a6a7,'category':'project_restricted'};}const _0x40b2a6=this['isPathWithinAnyDirectory'](_0x27a6a7,[..._0x7f2bb[_0x322a27(0x114)],..._0x7f2bb['writeEnabledDirectories']]);if(!_0x40b2a6&&_0x7f2bb[_0x322a27(0x114)][_0x322a27(0x112)]>0x0)return{'allowed':![],'reason':'Path\x20not\x20in\x20allowed\x20directories','path':_0x27a6a7,'category':'directory_restricted'};return{'allowed':!![],'path':_0x27a6a7,'category':_0x322a27(0x117)};}catch(_0x4c00fd){return{'allowed':![],'reason':'Path\x20validation\x20error:\x20'+_0x4c00fd[_0x322a27(0x102)],'path':_0x4f1f03,'category':'validation_error'};}}[a0_0x16d667(0xf9)](_0x1a9f0f,_0x10e2ad){const _0x4b9c1b=a0_0x16d667,_0x1ae053=this['validateReadAccess'](_0x1a9f0f,_0x10e2ad);if(!_0x1ae053['allowed'])return{..._0x1ae053,'writeAllowed':![]};const _0x58e3a1=_0x1ae053['path'],_0x2ea911=this[_0x4b9c1b(0xef)](_0x58e3a1,_0x10e2ad['writeEnabledDirectories']);if(!_0x2ea911){const _0x45e196=this['isPathWithinAnyDirectory'](_0x58e3a1,_0x10e2ad[_0x4b9c1b(0x114)]);if(_0x45e196)return{'allowed':![],'writeAllowed':![],'reason':_0x4b9c1b(0xe9),'path':_0x58e3a1,'category':'read_only_restricted'};return{'allowed':![],'writeAllowed':![],'reason':'Path\x20not\x20in\x20write-enabled\x20directories','path':_0x58e3a1,'category':'write_restricted'};}return{'allowed':!![],'writeAllowed':!![],'path':_0x58e3a1,'category':'write_allowed'};}['getWorkingDirectory'](_0x5ff38b){const _0x2dcbca=a0_0x16d667;return _0x5ff38b[_0x2dcbca(0x103)]||process['cwd']();}[a0_0x16d667(0x10d)](_0x348920){const _0x42e7fe=a0_0x16d667;return{'workingDirectory':_0x348920[_0x42e7fe(0x103)],'readOnly':[..._0x348920[_0x42e7fe(0x114)]],'writeEnabled':[..._0x348920['writeEnabledDirectories']],'projectRestricted':_0x348920['restrictToProject'],'systemAccessAllowed':_0x348920[_0x42e7fe(0x110)],'totalDirectories':_0x348920['readOnlyDirectories'][_0x42e7fe(0x112)]+_0x348920['writeEnabledDirectories']['length']};}['updateDirectoryAccess'](_0x287e1c,_0x387ce4){const _0x8ea9c2=a0_0x16d667,_0x4e950b={..._0x287e1c};return _0x387ce4['workingDirectory']&&(_0x4e950b['workingDirectory']=a0_0x1c643b['resolve'](_0x387ce4['workingDirectory'])),_0x387ce4['readOnlyDirectories']!==undefined&&(_0x4e950b[_0x8ea9c2(0x114)]=_0x387ce4[_0x8ea9c2(0x114)]['map'](_0xc652ba=>this[_0x8ea9c2(0x111)](_0xc652ba,_0x4e950b[_0x8ea9c2(0x103)]))),_0x387ce4['writeEnabledDirectories']!==undefined&&(_0x4e950b['writeEnabledDirectories']=_0x387ce4['writeEnabledDirectories']['map'](_0x4c625a=>this[_0x8ea9c2(0x111)](_0x4c625a,_0x4e950b[_0x8ea9c2(0x103)]))),_0x387ce4[_0x8ea9c2(0x118)]!==undefined&&(_0x4e950b['restrictToProject']=_0x387ce4[_0x8ea9c2(0x118)]),_0x387ce4['allowSystemAccess']!==undefined&&(_0x4e950b['allowSystemAccess']=_0x387ce4['allowSystemAccess']),_0x387ce4['customRestrictions']!==undefined&&(_0x4e950b['customRestrictions']=_0x387ce4[_0x8ea9c2(0x10e)]['map'](_0x5ef7eb=>a0_0x1c643b[_0x8ea9c2(0xf2)](_0x5ef7eb))),_0x4e950b[_0x8ea9c2(0xf7)]=_0x287e1c['version']||'1.0',_0x4e950b[_0x8ea9c2(0xfe)]=new Date()[_0x8ea9c2(0x11d)](),_0x4e950b;}[a0_0x16d667(0x11c)](_0x18fe53){const _0x3c3203=a0_0x16d667,_0x2280bf=[],_0x296458=[];!_0x18fe53['workingDirectory']?_0x2280bf[_0x3c3203(0xee)](_0x3c3203(0x108)):!a0_0x1c643b['isAbsolute'](_0x18fe53[_0x3c3203(0x103)])&&(_0x18fe53['workingDirectory']=a0_0x1c643b[_0x3c3203(0xf2)](process[_0x3c3203(0xec)](),_0x18fe53[_0x3c3203(0x103)]));!Array[_0x3c3203(0x11e)](_0x18fe53['readOnlyDirectories'])?_0x2280bf['push'](_0x3c3203(0xfd)):_0x18fe53['readOnlyDirectories']=_0x18fe53['readOnlyDirectories'][_0x3c3203(0x109)](_0x343d07=>a0_0x1c643b['isAbsolute'](_0x343d07)?_0x343d07:a0_0x1c643b[_0x3c3203(0xf2)](process[_0x3c3203(0xec)](),_0x343d07));!Array[_0x3c3203(0x11e)](_0x18fe53[_0x3c3203(0x116)])?_0x2280bf['push'](_0x3c3203(0x113)):_0x18fe53[_0x3c3203(0x116)]=_0x18fe53['writeEnabledDirectories']['map'](_0x328da5=>a0_0x1c643b[_0x3c3203(0x10f)](_0x328da5)?_0x328da5:a0_0x1c643b['resolve'](process['cwd'](),_0x328da5));if(_0x18fe53[_0x3c3203(0x114)]&&_0x18fe53[_0x3c3203(0x116)]){const _0x590371=this['findOverlappingPaths'](_0x18fe53[_0x3c3203(0x114)],_0x18fe53[_0x3c3203(0x116)]);_0x590371['length']>0x0&&_0x296458['push'](_0x3c3203(0xf5)+_0x590371[_0x3c3203(0xfa)](',\x20'));}_0x18fe53['allowSystemAccess']&&_0x296458['push'](_0x3c3203(0xea));const _0x2651a6=[..._0x18fe53[_0x3c3203(0x114)],..._0x18fe53['writeEnabledDirectories']];for(const _0x56f396 of _0x2651a6){!a0_0x1c643b['isAbsolute'](_0x56f396)&&_0x2280bf[_0x3c3203(0xee)]('Directory\x20path\x20must\x20be\x20absolute:\x20'+_0x56f396);}return{'valid':_0x2280bf['length']===0x0,'errors':_0x2280bf,'warnings':_0x296458,'summary':{'readOnlyCount':_0x18fe53[_0x3c3203(0x114)]?.[_0x3c3203(0x112)]||0x0,'writeEnabledCount':_0x18fe53['writeEnabledDirectories']?.['length']||0x0,'restrictToProject':_0x18fe53[_0x3c3203(0x118)],'allowSystemAccess':_0x18fe53[_0x3c3203(0x110)]}};}[a0_0x16d667(0x11a)](_0x52d2ee,_0x7edefb){const _0x235fb0=a0_0x16d667,_0x48f579=[..._0x7edefb['readOnlyDirectories'],..._0x7edefb['writeEnabledDirectories'],_0x7edefb['workingDirectory']];for(const _0x17ac0f of _0x48f579){if(this['isPathWithinDirectory'](_0x52d2ee,_0x17ac0f))return a0_0x1c643b[_0x235fb0(0x105)](_0x17ac0f,_0x52d2ee);}return _0x52d2ee;}[a0_0x16d667(0xed)](_0x2c7876,_0x4ab34a){const _0x448cdd=a0_0x16d667;if(a0_0x1c643b['isAbsolute'](_0x2c7876))return a0_0x1c643b['normalize'](_0x2c7876);return a0_0x1c643b[_0x448cdd(0xf2)](_0x4ab34a,_0x2c7876);}['normalizePath'](_0x20b0fd,_0x4ef7e8){const _0xdcebc9=a0_0x16d667;if(a0_0x1c643b['isAbsolute'](_0x20b0fd))return a0_0x1c643b[_0xdcebc9(0xe8)](_0x20b0fd);return a0_0x1c643b['resolve'](_0x4ef7e8,_0x20b0fd);}[a0_0x16d667(0xff)](_0x2527f3,_0x27aba8){const _0x4d4618=a0_0x16d667,_0x10fa32=a0_0x1c643b[_0x4d4618(0x105)](_0x27aba8,_0x2527f3);return!_0x10fa32[_0x4d4618(0x119)]('..')&&!a0_0x1c643b['isAbsolute'](_0x10fa32);}[a0_0x16d667(0xef)](_0x5dc270,_0x506f49){return _0x506f49['some'](_0x5061f8=>this['isPathWithinDirectory'](_0x5dc270,_0x5061f8));}['isSystemRestrictedPath'](_0x3a3f7d){const _0x5bfb9d=a0_0x16d667;return this[_0x5bfb9d(0x121)][_0x5bfb9d(0xfb)](_0x27679d=>{return _0x3a3f7d['startsWith'](_0x27679d)||_0x3a3f7d===_0x27679d;});}['isCustomRestricted'](_0x274060,_0x24c7d7){if(!_0x24c7d7||_0x24c7d7['length']===0x0)return![];return _0x24c7d7['some'](_0x3d187f=>{const _0x4de5e6=a0_0x293c;return _0x274060[_0x4de5e6(0x119)](_0x3d187f)||_0x274060===_0x3d187f;});}[a0_0x16d667(0xf1)](_0x2d3cdb,_0x2d8e79){const _0x2e09bc=a0_0x16d667,_0x452ee8=[];for(const _0x8dfbde of _0x2d3cdb){for(const _0x2000fb of _0x2d8e79){(this[_0x2e09bc(0xff)](_0x8dfbde,_0x2000fb)||this[_0x2e09bc(0xff)](_0x2000fb,_0x8dfbde))&&_0x452ee8[_0x2e09bc(0xee)](_0x8dfbde+_0x2e09bc(0x10b)+_0x2000fb);}}return _0x452ee8;}[a0_0x16d667(0x120)](_0x53748c){const _0x1018ba=a0_0x16d667;return{'workingDirectory':_0x53748c['workingDirectory'],'readOnlyCount':_0x53748c['readOnlyDirectories'][_0x1018ba(0x112)],'writeEnabledCount':_0x53748c['writeEnabledDirectories'][_0x1018ba(0x112)],'projectRestricted':_0x53748c[_0x1018ba(0x118)],'systemAccessAllowed':_0x53748c[_0x1018ba(0x110)],'customRestrictionsCount':_0x53748c['customRestrictions']?.['length']||0x0,'configVersion':_0x53748c[_0x1018ba(0xf7)]||'unknown','lastUpdated':_0x53748c[_0x1018ba(0xfe)]||_0x53748c['createdAt']};}static['createProjectDefaults'](_0x34eabc){const _0x5d992a=a0_0x16d667,_0x2947f9=a0_0x1c643b['resolve'](_0x34eabc);return{'workingDirectory':_0x2947f9,'readOnlyDirectories':[_0x2947f9],'writeEnabledDirectories':[_0x2947f9],'restrictToProject':!![],'allowSystemAccess':![],'customRestrictions':[],'createdAt':new Date()[_0x5d992a(0x11d)](),'version':'1.0'};}static['createPermissiveDefaults'](_0x100b0c=process[a0_0x16d667(0xec)]()){const _0x2801a4=a0_0x16d667;return{'workingDirectory':a0_0x1c643b[_0x2801a4(0xf2)](_0x100b0c),'readOnlyDirectories':[a0_0x2e9205['homedir']()],'writeEnabledDirectories':[a0_0x1c643b[_0x2801a4(0xf2)](_0x100b0c)],'restrictToProject':![],'allowSystemAccess':![],'customRestrictions':[],'createdAt':new Date()['toISOString'](),'version':'1.0'};}}export default DirectoryAccessManager;function a0_0x492c(){const _0x46d500=['mti2ody5mgf5C2juAq','DMfSAwrHDgvxCML0zufJy2vZCW','AM9PBG','C29Tzq','ugf0AcbVDxrZAwrLihbYB2PLy3qGC2nVCgu','CMvHze9UBhLeAxjLy3rVCMLLCYbTDxn0igjLigfUigfYCMf5','DxbKyxrLzef0','AxnqyxrOv2L0AgLUrgLYzwn0B3j5','zMLSDgvY','mtGZmZuZmufzzxjwwq','BwvZC2fNzq','D29YA2LUz0rPCMvJDg9YEq','nteZmtG2Du9fuuPl','CMvSyxrPDMu','l3nIAw4','mty1mdy0ngHSzMDhtq','v29YA2LUzYbKAxjLy3rVCNKGAxmGCMvXDwLYzwq','BwfW','otC4nda5nM1qwKroCq','idWTpIa','nLv4wvLjvq','z2v0qwnJzxnZAwjSzurPCMvJDg9YAwvZ','y3vZDg9TuMvZDhjPy3rPB25Z','AxnbyNnVBhv0zq','ywXSB3DtExn0zw1by2nLC3m','BM9YBwfSAxPLugf0Aa','BgvUz3rO','D3jPDgvfBMfIBgvKrgLYzwn0B3jPzxmGBxvZDcbIzsbHBIbHCNjHEq','CMvHze9UBhLeAxjLy3rVCMLLCW','lNnZAa','D3jPDgvfBMfIBgvKrgLYzwn0B3jPzxm','ywXSB3DLza','CMvZDhjPy3ruB1bYB2PLy3q','C3rHCNrZv2L0Aa','y3jLyxrLuMvSyxrPDMvqyxrO','nJG4ntKWtwnQtND6','DMfSAwrHDgvby2nLC3ndB25MAwD1CMf0Aw9U','Dg9ju09tDhjPBMC','AxnbCNjHEq','nZi3otuWvwvhuKHd','z2v0qwnJzxnZu3vTBwfYEq','C3LZDgvTuMvZDhjPy3rLzfbHDgHZ','BM9YBwfSAxPL','ugf0AcbPCYbPBIbYzwfKlw9UBhKGzgLYzwn0B3j5','u3LZDgvTihbHDgGGywnJzxnZigLZigvUywjSzwqGlsb1C2uGD2L0AcbJyxv0Aw9U','l2v0yW','y3DK','CMvZB2X2zvbHDgG','ChvZAa','AxnqyxrOv2L0AgLUqw55rgLYzwn0B3j5','y29UzMLN','zMLUze92zxjSyxbWAw5Nugf0Ahm','CMvZB2X2zq','BM9Kzv9TB2r1BgvZlY5IAw4','ovbtvgzgwa','t3zLCMXHChbPBMCGzgLYzwn0B3jPzxmGzM91BMq6ia','qZPCv2LUzg93CW','DMvYC2LVBG'];a0_0x492c=function(){return _0x46d500;};return a0_0x492c();}