@maiaos/agent 0.1.0-canary.2

package/dist/extensions/prompt-section/prompt-section.d.ts

@@ -0,0 +1,26 @@
+/** One bounded, untrusted runtime projection for a Pi system prompt section. */
+export type PromptSection = {
+    readonly bytes: number;
+    readonly digest: string;
+    readonly text: string;
+};
+/** A source-owned label and guidance line around untrusted data. */
+export type PromptSectionInput = {
+    readonly guidance: string;
+    readonly label: string;
+    readonly maximumBytes: number;
+    readonly payload: unknown;
+};
+/**
+ * JSON with `&`, `<`, `>` and the line and paragraph separators written as
+ * Unicode escapes, so data can never close the section's XML tag or open
+ * another one.
+ */
+export declare const safeJson: (value: unknown) => string;
+/**
+ * Renders `[LABEL] v1 sha256:<digest>`, the guidance line and the escaped
+ * payload. The digest covers the guidance and the payload. Returns nothing
+ * when the result exceeds `maximumBytes`.
+ */
+export declare const renderPromptSection: (input: PromptSectionInput) => PromptSection | undefined;
+//# sourceMappingURL=prompt-section.d.ts.map

package/dist/extensions/prompt-section/prompt-section.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-section.d.ts","sourceRoot":"","sources":["../../../src/extensions/prompt-section/prompt-section.ts"],"names":[],"mappings":"AAUA,gFAAgF;AAChF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,oEAAoE;AACpE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,CAAC;AAKF;;;;GAIG;AACH,eAAO,MAAM,QAAQ,UAAW,OAAO,KAAG,MAC0B,CAAC;AAErE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,UACvB,kBAAkB,KACxB,aAAa,GAAG,SAMlB,CAAC"}

package/dist/extensions/prompt-section/prompt-section.js

@@ -0,0 +1,28 @@
+// Provenance: framing reviewed from vllnt/pi-config
+// extensions/pi-tasks/task-text.ts (safeJsonLine, framePromptContribution) and
+// extensions/pi-goal/prompt-frame.ts at commit
+// b90808fbd2e51301ab8351367c69c5166c44ead7, rebuilt on Pi 1.0 system prompt
+// sections (D-069).
+import { Buffer } from "node:buffer";
+import { createHash } from "node:crypto";
+const UNSAFE_CHARACTERS = /[&<>\u{2028}\u{2029}]/gu;
+const unicodeEscape = (character) => `\\u${(character.codePointAt(0) ?? 0).toString(16).padStart(4, "0")}`;
+/**
+ * JSON with `&`, `<`, `>` and the line and paragraph separators written as
+ * Unicode escapes, so data can never close the section's XML tag or open
+ * another one.
+ */
+export const safeJson = (value) => JSON.stringify(value).replaceAll(UNSAFE_CHARACTERS, unicodeEscape);
+/**
+ * Renders `[LABEL] v1 sha256:<digest>`, the guidance line and the escaped
+ * payload. The digest covers the guidance and the payload. Returns nothing
+ * when the result exceeds `maximumBytes`.
+ */
+export const renderPromptSection = (input) => {
+    const body = `${input.guidance}\n${safeJson(input.payload)}`;
+    const digest = `sha256:${createHash("sha256").update(body).digest("hex")}`;
+    const text = `[${input.label}] v1 ${digest}\n${body}`;
+    const bytes = Buffer.byteLength(text, "utf8");
+    return bytes > input.maximumBytes ? undefined : { bytes, digest, text };
+};
+//# sourceMappingURL=prompt-section.js.map

package/dist/extensions/prompt-section/prompt-section.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-section.js","sourceRoot":"","sources":["../../../src/extensions/prompt-section/prompt-section.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,+EAA+E;AAC/E,+CAA+C;AAC/C,4EAA4E;AAC5E,oBAAoB;AACpB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAiBpD,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAU,EAAE,CAClD,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAU,EAAE,CACjD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAyB,EACE,EAAE;IAC7B,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,KAAK,QAAQ,MAAM,KAAK,IAAI,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1E,CAAC,CAAC"}

package/dist/extensions/safety/command-wrappers.d.ts

@@ -0,0 +1,31 @@
+/** The home directory and user the inspected command runs as. */
+export type CommandUser = {
+    readonly homeDirectory: string;
+    readonly uid?: number;
+};
+/** A position in a segment and the working directory in effect there. */
+type Cursor = {
+    readonly cwd: string;
+    readonly index: number;
+};
+/** The executable a segment runs, after its wrappers. */
+export type LocatedCommand = Cursor & {
+    readonly kind: "command";
+    readonly name: string;
+};
+/** A command string that `env -S` hands to a new parse. */
+export type SplitCommand = {
+    readonly command: string;
+    readonly cwd: string;
+    readonly kind: "split";
+};
+/** Resolves a `cd`, `-C` or `-D` target against the current directory. */
+export declare const changedDirectory: (cwd: string, target: string, homeDirectory: string) => string;
+/**
+ * Finds the executable one segment runs after leading assignments and the
+ * `sudo`, `env`, `command` and `exec` wrappers, with the working directory
+ * their `--chdir` and login options select.
+ */
+export declare const locateCommand: (tokens: readonly string[], cwd: string, user: CommandUser) => LocatedCommand | SplitCommand | undefined;
+export {};
+//# sourceMappingURL=command-wrappers.d.ts.map

package/dist/extensions/safety/command-wrappers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-wrappers.d.ts","sourceRoot":"","sources":["../../../src/extensions/safety/command-wrappers.ts"],"names":[],"mappings":"AA+CA,iEAAiE;AACjE,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,yEAAyE;AACzE,KAAK,MAAM,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,yDAAyD;AACzD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IACpC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB,CAAC;AAaF,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,QACtB,MAAM,UACH,MAAM,iBACC,MAAM,KACpB,MAAyD,CAAC;AAoP7D;;;;GAIG;AACH,eAAO,MAAM,aAAa,WAChB,SAAS,MAAM,EAAE,OACpB,MAAM,QACL,WAAW,KAChB,cAAc,GAAG,YAAY,GAAG,SACc,CAAC"}

package/dist/extensions/safety/command-wrappers.js

@@ -0,0 +1,247 @@
+// Provenance: a reviewed port of vllnt/pi-config
+// extensions/pi-safety/destructive-guard.ts (sudo, env, command and exec
+// unwrapping) at commit b90808fbd2e51301ab8351367c69c5166c44ead7, rewritten
+// without loops for the Maia lint rules (D-069).
+import { basename, resolve } from "node:path";
+import { codePoints, expandHome } from "./shell-tokens.js";
+const ASSIGNMENT = /^[A-Za-z_]\w*=/u;
+const SUDO_VALUE_OPTIONS = new Set([
+    "--chdir",
+    "--chroot",
+    "--close-from",
+    "--command-timeout",
+    "--group",
+    "--host",
+    "--prompt",
+    "--role",
+    "--type",
+    "--user",
+    "-C",
+    "-D",
+    "-R",
+    "-T",
+    "-g",
+    "-h",
+    "-p",
+    "-r",
+    "-t",
+    "-u",
+]);
+const SUDO_SHORT_VALUE_OPTIONS = new Set("CDRTghprtu");
+const ENV_VALUE_OPTIONS = new Set([
+    "--argv0",
+    "--chdir",
+    "--file",
+    "--ignore-signal",
+    "--split-string",
+    "--unset",
+    "-C",
+    "-S",
+    "-a",
+    "-f",
+    "-u",
+]);
+const ENV_SHORT_VALUE_OPTIONS = new Set("CSafu");
+/** Resolves a `cd`, `-C` or `-D` target against the current directory. */
+export const changedDirectory = (cwd, target, homeDirectory) => resolve(cwd, expandHome(target, homeDirectory));
+const shortCluster = (token, valueOptions) => {
+    const characters = codePoints(token);
+    const valueAt = characters.findIndex((character, index) => index > 0 && valueOptions.has(character));
+    const end = valueAt < 0 ? characters.length : valueAt;
+    return {
+        attached: characters
+            .slice(end + 1)
+            .join("")
+            .replace(/^=/u, ""),
+        flags: characters.slice(1, end).join(""),
+        option: valueAt < 0 ? undefined : characters[valueAt],
+    };
+};
+const sudoChdir = (state, target, segment) => ({
+    ...state,
+    cwd: changedDirectory(state.cwd, target, segment.user.homeDirectory),
+    explicitChdir: true,
+});
+const sudoCluster = (state, token, segment) => {
+    const cluster = shortCluster(token, SUDO_SHORT_VALUE_OPTIONS);
+    const login = state.login || cluster.flags.includes("i");
+    if (cluster.option === undefined) {
+        return { ...state, index: state.index + 1, login };
+    }
+    const value = cluster.attached || segment.tokens[state.index + 1];
+    const index = state.index + (cluster.attached.length > 0 ? 1 : 2);
+    const next = { ...state, index, login };
+    if (cluster.option === "D" && value !== undefined) {
+        return sudoChdir(next, value, segment);
+    }
+    return cluster.option === "u" ? { ...next, user: value } : next;
+};
+const sudoValue = (state, token, segment) => {
+    const target = segment.tokens[state.index + 1];
+    if (token === "-D" || token === "--chdir") {
+        const next = { ...state, index: state.index + 2 };
+        return target === undefined ? next : sudoChdir(next, target, segment);
+    }
+    if (token.startsWith("--chdir=")) {
+        const next = { ...state, index: state.index + 1 };
+        return sudoChdir(next, token.slice("--chdir=".length), segment);
+    }
+    if (token.startsWith("-D") && token.length > 2) {
+        const next = { ...state, index: state.index + 1 };
+        return sudoChdir(next, token.slice(2).replace(/^=/u, ""), segment);
+    }
+    if (token === "-u" || token === "--user") {
+        return { ...state, index: state.index + 2, user: target };
+    }
+    return token.startsWith("--user=")
+        ? { ...state, index: state.index + 1, user: token.slice(7) }
+        : undefined;
+};
+const sudoOption = (state, token, segment) => {
+    if (token === "-i" || token === "--login") {
+        return { ...state, index: state.index + 1, login: true };
+    }
+    const valued = sudoValue(state, token, segment);
+    if (valued !== undefined)
+        return valued;
+    if (token.startsWith("-") && !token.startsWith("--")) {
+        return sudoCluster(state, token, segment);
+    }
+    const skip = SUDO_VALUE_OPTIONS.has(token) ? 2 : 1;
+    return { ...state, index: state.index + skip };
+};
+const sudoOptions = (state, segment) => {
+    const token = segment.tokens[state.index];
+    if (token === "--")
+        return { ...state, index: state.index + 1 };
+    if (token?.startsWith("-") !== true || token === "-")
+        return state;
+    return sudoOptions(sudoOption(state, token, segment), segment);
+};
+const loginDirectory = (state, user) => {
+    if (!state.login || state.explicitChdir)
+        return state.cwd;
+    if (state.user === undefined || state.user === "root" || state.user === "#0")
+        return "/root";
+    const ownName = state.user === basename(user.homeDirectory);
+    const ownUid = user.uid !== undefined && state.user === `#${String(user.uid)}`;
+    return ownName || ownUid ? user.homeDirectory : state.cwd;
+};
+const unwrapSudo = (cursor, segment) => {
+    const state = sudoOptions({ ...cursor, explicitChdir: false, login: false }, segment);
+    return { cwd: loginDirectory(state, segment.user), index: state.index };
+};
+const environmentSplit = (cwd, command) => ({
+    command,
+    cwd,
+    kind: "split",
+});
+const environmentCluster = (cursor, token, segment) => {
+    const cluster = shortCluster(token, ENV_SHORT_VALUE_OPTIONS);
+    if (cluster.option === undefined)
+        return { ...cursor, index: cursor.index + 1 };
+    const value = cluster.attached || segment.tokens[cursor.index + 1];
+    const index = cursor.index + (cluster.attached.length > 0 ? 1 : 2);
+    if (cluster.option === "S" && value !== undefined) {
+        return environmentSplit(cursor.cwd, value);
+    }
+    if (cluster.option !== "C" || value === undefined)
+        return { ...cursor, index };
+    const home = segment.user.homeDirectory;
+    return { cwd: changedDirectory(cursor.cwd, value, home), index };
+};
+const environmentLongOption = (cursor, token, segment) => {
+    const home = segment.user.homeDirectory;
+    if (token === "--chdir") {
+        const target = segment.tokens[cursor.index + 1];
+        const cwd = target === undefined
+            ? cursor.cwd
+            : changedDirectory(cursor.cwd, target, home);
+        return { cwd, index: cursor.index + 2 };
+    }
+    if (token.startsWith("--chdir=")) {
+        const cwd = changedDirectory(cursor.cwd, token.slice(8), home);
+        return { cwd, index: cursor.index + 1 };
+    }
+    if (token === "--split-string") {
+        const command = segment.tokens[cursor.index + 1];
+        if (command === undefined)
+            return { ...cursor, index: segment.tokens.length };
+        return environmentSplit(cursor.cwd, command);
+    }
+    return token.startsWith("--split-string=")
+        ? environmentSplit(cursor.cwd, token.slice("--split-string=".length))
+        : undefined;
+};
+const environmentOption = (cursor, token, segment) => {
+    if (ASSIGNMENT.test(token))
+        return { ...cursor, index: cursor.index + 1 };
+    const long = environmentLongOption(cursor, token, segment);
+    if (long !== undefined)
+        return long;
+    if (token === "-S" && segment.tokens[cursor.index + 1] === undefined) {
+        return { ...cursor, index: segment.tokens.length };
+    }
+    if (!token.startsWith("--"))
+        return environmentCluster(cursor, token, segment);
+    const skip = ENV_VALUE_OPTIONS.has(token) ? 2 : 1;
+    return { ...cursor, index: cursor.index + skip };
+};
+const unwrapEnvironment = (cursor, segment) => {
+    const token = segment.tokens[cursor.index];
+    if (token === undefined)
+        return cursor;
+    if (token === "--")
+        return { ...cursor, index: cursor.index + 1 };
+    // A lone `-` means `-i` to env; skip it like any other option.
+    if (!token.startsWith("-") && !ASSIGNMENT.test(token))
+        return cursor;
+    const next = environmentOption(cursor, token, segment);
+    return "kind" in next ? next : unwrapEnvironment(next, segment);
+};
+const skipOptions = (tokens, index, valueOptions) => {
+    const token = tokens[index];
+    if (token === "--")
+        return index + 1;
+    if (token?.startsWith("-") !== true || token === "-")
+        return index;
+    const skip = valueOptions.has(token) ? 2 : 1;
+    return skipOptions(tokens, index + skip, valueOptions);
+};
+const skipAssignments = (tokens, index) => ASSIGNMENT.test(tokens[index] ?? "")
+    ? skipAssignments(tokens, index + 1)
+    : index;
+const unwrap = (name, cursor, segment) => {
+    if (name === "sudo")
+        return unwrapSudo(cursor, segment);
+    if (name === "env")
+        return unwrapEnvironment(cursor, segment);
+    if (name === "command") {
+        return {
+            ...cursor,
+            index: skipOptions(segment.tokens, cursor.index, new Set()),
+        };
+    }
+    if (name !== "exec")
+        return undefined;
+    const index = skipOptions(segment.tokens, cursor.index, new Set(["-a"]));
+    return { ...cursor, index };
+};
+const locateFrom = (cursor, segment) => {
+    const index = skipAssignments(segment.tokens, cursor.index);
+    const token = segment.tokens[index];
+    if (token === undefined)
+        return undefined;
+    const name = basename(token);
+    const next = unwrap(name, { cwd: cursor.cwd, index: index + 1 }, segment);
+    if (next === undefined)
+        return { cwd: cursor.cwd, index, kind: "command", name };
+    return "kind" in next ? next : locateFrom(next, segment);
+};
+/**
+ * Finds the executable one segment runs after leading assignments and the
+ * `sudo`, `env`, `command` and `exec` wrappers, with the working directory
+ * their `--chdir` and login options select.
+ */
+export const locateCommand = (tokens, cwd, user) => locateFrom({ cwd, index: 0 }, { tokens, user });
+//# sourceMappingURL=command-wrappers.js.map

package/dist/extensions/safety/command-wrappers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-wrappers.js","sourceRoot":"","sources":["../../../src/extensions/safety/command-wrappers.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,yEAAyE;AACzE,4EAA4E;AAC5E,iDAAiD;AACjD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,SAAS;IACT,UAAU;IACV,cAAc;IACd,mBAAmB;IACnB,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;CACL,CAAC,CAAC;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;AACvD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,SAAS;IACT,SAAS;IACT,QAAQ;IACR,iBAAiB;IACjB,gBAAgB;IAChB,SAAS;IACT,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;CACL,CAAC,CAAC;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;AAmCjD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,GAAW,EACX,MAAc,EACd,aAAqB,EACb,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;AAE7D,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,YAAiC,EAAE,EAAE;IACxE,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAClC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAC/D,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACtD,OAAO;QACL,QAAQ,EAAE,UAAU;aACjB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;aACd,IAAI,CAAC,EAAE,CAAC;aACR,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;KACtD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAgB,EAAE,MAAc,EAAE,OAAgB,EAAE,EAAE,CAAC,CAAC;IACzE,GAAG,KAAK;IACR,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;IACpE,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAClB,KAAgB,EAChB,KAAa,EACb,OAAgB,EACL,EAAE;IACb,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAChB,KAAgB,EAChB,KAAa,EACb,OAAgB,EACO,EAAE;IACzB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAC5D,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CACjB,KAAgB,EAChB,KAAa,EACb,OAAgB,EACL,EAAE;IACb,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,KAAgB,EAAE,OAAgB,EAAa,EAAE;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;IAChE,IAAI,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAgB,EAAE,IAAiB,EAAU,EAAE;IACrE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC;IAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAC1E,OAAO,OAAO,CAAC;IACjB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,MAAM,GACV,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClE,OAAO,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;AAC5D,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,OAAgB,EAAU,EAAE;IAC9D,MAAM,KAAK,GAAG,WAAW,CACvB,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EACjD,OAAO,CACR,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AAC1E,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE,CAAC,CAAC;IACxE,OAAO;IACP,GAAG;IACH,IAAI,EAAE,OAAO;CACd,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,MAAc,EACd,KAAa,EACb,OAAgB,EACO,EAAE;IACzB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAC9B,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,SAAS;QAC/C,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;IACxC,OAAO,EAAE,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,MAAc,EACd,KAAa,EACb,OAAgB,EACmB,EAAE;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,GAAG,GACP,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,MAAM,CAAC,GAAG;YACZ,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,KAAK,gBAAgB,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,OAAO,KAAK,SAAS;YACvB,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACrD,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC;QACxC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACrE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,MAAc,EACd,KAAa,EACb,OAAgB,EACO,EAAE;IACzB,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACrE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,OAAO,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,MAAc,EACd,OAAgB,EACO,EAAE;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;IAClE,+DAA+D;IAC/D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACrE,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,OAAO,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAClB,MAAyB,EACzB,KAAa,EACb,YAAiC,EACzB,EAAE;IACV,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,EAAE,YAAY,CAAC,CAAC;AACzD,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,MAAyB,EAAE,KAAa,EAAU,EAAE,CAC3E,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,KAAK,CAAC;AAEZ,MAAM,MAAM,GAAG,CACb,IAAY,EACZ,MAAc,EACd,OAAgB,EACmB,EAAE;IACrC,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,GAAG,MAAM;YACT,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CACjB,MAAc,EACd,OAAgB,EAC2B,EAAE;IAC7C,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,IAAI,KAAK,SAAS;QACpB,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAAyB,EACzB,GAAW,EACX,IAAiB,EAC0B,EAAE,CAC7C,UAAU,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC"}

package/dist/extensions/safety/destructive-guard.d.ts

@@ -0,0 +1,24 @@
+export type DestructiveCommandInput = {
+    readonly command: string;
+    readonly cwd: string;
+    readonly homeDir: string;
+    readonly uid?: number;
+};
+export type DestructiveOperation = "find" | "rm";
+export type GuardReasonCode = "PARSER_DEPTH_EXCEEDED" | "PROTECTED_ROOT_ERASURE";
+export type GuardDecision = {
+    readonly decision: "allow";
+} | {
+    readonly decision: "block";
+    readonly operation: DestructiveOperation;
+    readonly reasonCode: GuardReasonCode;
+};
+/**
+ * Blocks recursive `rm` and `find -delete` against `/`, `/root`, the home
+ * directory or one of its ancestors. It follows straight-line `cd`, the
+ * `sudo`, `env`, `command` and `exec` wrappers and nested `sh -c` or
+ * `bash -c` commands up to four levels, and blocks deeper nesting. This
+ * tripwire guards against accidental loss; it gives no sandbox.
+ */
+export declare const inspectDestructiveCommand: (input: DestructiveCommandInput) => GuardDecision;
+//# sourceMappingURL=destructive-guard.d.ts.map

package/dist/extensions/safety/destructive-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destructive-guard.d.ts","sourceRoot":"","sources":["../../../src/extensions/safety/destructive-guard.ts"],"names":[],"mappings":"AAuBA,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,IAAI,CAAC;AACjD,MAAM,MAAM,eAAe,GACzB,uBAAuB,GAAG,wBAAwB,CAAC;AAErD,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAC9B;IACE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;CACtC,CAAC;AAkNN;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,UAC7B,uBAAuB,KAC7B,aAIU,CAAC"}

package/dist/extensions/safety/destructive-guard.js

@@ -0,0 +1,178 @@
+// Provenance: a reviewed port of vllnt/pi-config
+// extensions/pi-safety/destructive-guard.ts at commit
+// b90808fbd2e51301ab8351367c69c5166c44ead7, rewritten without loops for the
+// Maia lint rules (D-069).
+import { dirname, resolve } from "node:path";
+import { changedDirectory, locateCommand, } from "./command-wrappers.js";
+import { expandHome, restoreLiterals, tokenizeSegments, } from "./shell-tokens.js";
+const COMMAND_CANDIDATE = /\b(?:bash|find|rm|sh)\b/u;
+const DELETION_CANDIDATE = /(?:--r\S*|-\S*[rR]\S*|-delete)\b/u;
+const WHOLE_CONTENT_SUFFIX = /\/(?:\*|\.\*|\{\*,\.\*\})\/?$/u;
+const SHELLS = new Set(["bash", "sh"]);
+const MAXIMUM_SHELL_DEPTH = 4;
+const allow = () => ({ decision: "allow" });
+const block = (operation) => ({
+    decision: "block",
+    operation,
+    reasonCode: "PROTECTED_ROOT_ERASURE",
+});
+const blockAtParserLimit = (command) => ({
+    decision: "block",
+    operation: /\bfind\b/u.test(command) ? "find" : "rm",
+    reasonCode: "PARSER_DEPTH_EXCEEDED",
+});
+const protectedAncestors = (roots, current) => {
+    const next = new Set([...roots, current]);
+    return current === "/" ? next : protectedAncestors(next, dirname(current));
+};
+const targetsProtectedRoot = (target, invocation) => {
+    const expanded = expandHome(target, invocation.homeDirectory).replace(WHOLE_CONTENT_SUFFIX, "");
+    if (/[*?[]/u.test(expanded))
+        return false;
+    const roots = protectedAncestors(new Set(["/", "/root"]), resolve(invocation.homeDirectory));
+    return roots.has(resolve(invocation.cwd, expanded || "/"));
+};
+const readRmArgument = (state, token) => {
+    if (state.optionsEnded || token === "-") {
+        state.targets.push(token);
+    }
+    else if (token === "--") {
+        state.optionsEnded = true;
+    }
+    else if (token.startsWith("--")) {
+        state.recursive ||= token.length >= 3 && "--recursive".startsWith(token);
+    }
+    else if (token.startsWith("-")) {
+        state.recursive ||= /^-[^-]*[rR]/u.test(token);
+    }
+    else {
+        state.targets.push(token);
+    }
+    return state;
+};
+const inspectRm = (invocation) => {
+    const parsed = invocation.tokens
+        .slice(invocation.index + 1)
+        .reduce(readRmArgument, {
+        optionsEnded: false,
+        recursive: false,
+        targets: [],
+    });
+    if (!parsed.recursive)
+        return allow();
+    return parsed.targets.some((target) => targetsProtectedRoot(target, invocation))
+        ? block("rm")
+        : allow();
+};
+const findStartPoints = (tokens, index, points) => {
+    const token = tokens[index];
+    if (token === undefined)
+        return points;
+    if (token === "--")
+        return findStartPoints(tokens, index + 1, points);
+    if (token === "-D")
+        return findStartPoints(tokens, index + 2, points);
+    if (/^-(?:[HLP]|O\d*)$/u.test(token)) {
+        return findStartPoints(tokens, index + 1, points);
+    }
+    if (token.startsWith("-") || token === "!" || token === "(")
+        return points;
+    return findStartPoints(tokens, index + 1, [...points, token]);
+};
+const inspectFind = (invocation) => {
+    const arguments_ = invocation.tokens.slice(invocation.index + 1);
+    if (!arguments_.includes("-delete"))
+        return allow();
+    const points = findStartPoints(invocation.tokens, invocation.index + 1, []);
+    const targets = points.length === 0 ? ["."] : points;
+    return targets.some((target) => targetsProtectedRoot(target, invocation))
+        ? block("find")
+        : allow();
+};
+const isCommandStringOption = (option) => option.startsWith("-") &&
+    !option.startsWith("--") &&
+    option.slice(1).includes("c");
+const nestedShellCommand = (invocation) => {
+    const { index, tokens } = invocation;
+    const at = tokens.findIndex((option, position) => position > index &&
+        position < tokens.length - 1 &&
+        isCommandStringOption(option));
+    const command = at < 0 ? undefined : tokens[at + 1];
+    return command === undefined ? undefined : restoreLiterals(command);
+};
+// The target of `cd`, the home directory without one, or undefined for an
+// unknown option, which leaves the directory unchanged.
+const cdTarget = (tokens, index, home) => {
+    const token = tokens[index];
+    if (token === "--")
+        return tokens[index + 1] ?? home;
+    if (token === undefined)
+        return home;
+    if (/^-[LPe@]+$/u.test(token))
+        return cdTarget(tokens, index + 1, home);
+    return token.startsWith("-") && token !== "-" ? undefined : token;
+};
+const cdDirectory = (invocation) => {
+    const home = invocation.homeDirectory;
+    const target = cdTarget(invocation.tokens, invocation.index + 1, home);
+    return target === undefined
+        ? invocation.cwd
+        : changedDirectory(invocation.cwd, target, home);
+};
+const inspectCommand = (invocation, name, context) => {
+    if (name === "rm")
+        return inspectRm(invocation);
+    if (name === "find")
+        return inspectFind(invocation);
+    if (!SHELLS.has(name))
+        return allow();
+    const nested = nestedShellCommand(invocation);
+    if (nested === undefined)
+        return allow();
+    const input = { ...context.input, command: nested, cwd: invocation.cwd };
+    return inspectSegments(input, context.depth + 1);
+};
+const scanSegment = (scan, tokens, context) => {
+    if (scan.decision.decision === "block")
+        return scan;
+    const user = {
+        homeDirectory: context.input.homeDir,
+        ...(context.input.uid === undefined ? {} : { uid: context.input.uid }),
+    };
+    const located = locateCommand(tokens, scan.cwd, user);
+    if (located === undefined)
+        return scan;
+    if (located.kind === "split") {
+        const input = {
+            ...context.input,
+            command: located.command,
+            cwd: located.cwd,
+        };
+        return { ...scan, decision: inspectSegments(input, context.depth + 1) };
+    }
+    const invocation = { ...located, homeDirectory: user.homeDirectory, tokens };
+    if (located.name === "cd")
+        return { ...scan, cwd: cdDirectory(invocation) };
+    return {
+        ...scan,
+        decision: inspectCommand(invocation, located.name, context),
+    };
+};
+const inspectSegments = (input, depth) => {
+    if (depth > MAXIMUM_SHELL_DEPTH)
+        return blockAtParserLimit(input.command);
+    const context = { depth, input };
+    return tokenizeSegments(input.command).reduce((scan, tokens) => scanSegment(scan, tokens, context), { cwd: input.cwd, decision: allow() }).decision;
+};
+/**
+ * Blocks recursive `rm` and `find -delete` against `/`, `/root`, the home
+ * directory or one of its ancestors. It follows straight-line `cd`, the
+ * `sudo`, `env`, `command` and `exec` wrappers and nested `sh -c` or
+ * `bash -c` commands up to four levels, and blocks deeper nesting. This
+ * tripwire guards against accidental loss; it gives no sandbox.
+ */
+export const inspectDestructiveCommand = (input) => COMMAND_CANDIDATE.test(input.command) &&
+    DELETION_CANDIDATE.test(input.command)
+    ? inspectSegments(input, 0)
+    : allow();
+//# sourceMappingURL=destructive-guard.js.map

package/dist/extensions/safety/destructive-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destructive-guard.js","sourceRoot":"","sources":["../../../src/extensions/safety/destructive-guard.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,sDAAsD;AACtD,4EAA4E;AAC5E,2BAA2B;AAC3B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EACL,gBAAgB,EAEhB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,UAAU,EACV,eAAe,EACf,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AACrD,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AACvC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AA4B9B,MAAM,KAAK,GAAG,GAAkB,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;AAE3D,MAAM,KAAK,GAAG,CAAC,SAA+B,EAAiB,EAAE,CAAC,CAAC;IACjE,QAAQ,EAAE,OAAO;IACjB,SAAS;IACT,UAAU,EAAE,wBAAwB;CACrC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAiB,EAAE,CAAC,CAAC;IAC9D,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;IACpD,UAAU,EAAE,uBAAuB;CACpC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,KAA0B,EAC1B,OAAe,EACM,EAAE;IACvB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,OAAO,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAE,UAAsB,EAAE,EAAE;IACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,OAAO,CACnE,oBAAoB,EACpB,EAAE,CACH,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,kBAAkB,CAC9B,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EACvB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAClC,CAAC;IACF,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC;AAQF,MAAM,cAAc,GAAG,CAAC,KAAkB,EAAE,KAAa,EAAe,EAAE;IACxE,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QACxC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1B,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAC5B,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,SAAS,KAAK,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,UAAsB,EAAiB,EAAE;IAC1D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM;SAC7B,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC;SAC3B,MAAM,CAAC,cAAc,EAAE;QACtB,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE;KACZ,CAAC,CAAC;IACL,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAO,KAAK,EAAE,CAAC;IACtC,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACpC,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CACzC;QACC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACb,CAAC,CAAC,KAAK,EAAE,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,MAAyB,EACzB,KAAa,EACb,MAAyB,EACN,EAAE;IACrB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IAC3E,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,UAAsB,EAAiB,EAAE;IAC5D,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACf,CAAC,CAAC,KAAK,EAAE,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,MAAc,EAAW,EAAE,CACxD,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;IACxB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAEhC,MAAM,kBAAkB,GAAG,CAAC,UAAsB,EAAsB,EAAE;IACxE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IACrC,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CACzB,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CACnB,QAAQ,GAAG,KAAK;QAChB,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC;QAC5B,qBAAqB,CAAC,MAAM,CAAC,CAChC,CAAC;IACF,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpD,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,0EAA0E;AAC1E,wDAAwD;AACxD,MAAM,QAAQ,GAAG,CACf,MAAyB,EACzB,KAAa,EACb,IAAY,EACQ,EAAE;IACtB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IACrD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,UAAsB,EAAU,EAAE;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACvE,OAAO,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,UAAU,CAAC,GAAG;QAChB,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC,CAAC;AAYF,MAAM,cAAc,GAAG,CACrB,UAAsB,EACtB,IAAY,EACZ,OAAoB,EACL,EAAE;IACjB,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;IACzE,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAClB,IAAiB,EACjB,MAAyB,EACzB,OAAoB,EACP,EAAE;IACf,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,IAAI,GAAgB;QACxB,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;KACvE,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG;YACZ,GAAG,OAAO,CAAC,KAAK;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;QACF,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC;IAC7E,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;IAC5E,OAAO;QACL,GAAG,IAAI;QACP,QAAQ,EAAE,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;KAC5D,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,KAA8B,EAC9B,KAAa,EACE,EAAE;IACjB,IAAI,KAAK,GAAG,mBAAmB;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACjC,OAAO,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAC3C,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EACpD,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CACtC,CAAC,QAAQ,CAAC;AACb,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,KAA8B,EACf,EAAE,CACjB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;IACrC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;IACpC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,KAAK,EAAE,CAAC"}

package/dist/extensions/safety/index.d.ts

@@ -0,0 +1,3 @@
+export { type DestructiveCommandInput, type DestructiveOperation, type GuardDecision, inspectDestructiveCommand, } from "./destructive-guard.js";
+export { registerSafetyGuard as safetyExtension } from "./lifecycle.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/extensions/safety/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/extensions/safety/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/extensions/safety/index.js

@@ -0,0 +1,3 @@
+export { inspectDestructiveCommand, } from "./destructive-guard.js";
+export { registerSafetyGuard as safetyExtension } from "./lifecycle.js";
+//# sourceMappingURL=index.js.map

package/dist/extensions/safety/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/extensions/safety/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/extensions/safety/lifecycle.d.ts

@@ -0,0 +1,3 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+export declare const registerSafetyGuard: (pi: ExtensionAPI) => void;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/extensions/safety/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/extensions/safety/lifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,YAAY,EAIb,MAAM,iCAAiC,CAAC;AAsHzC,eAAO,MAAM,mBAAmB,OAAQ,YAAY,KAAG,IAGtD,CAAC"}