@mcp-guardian/server 1.0.0 → 1.2.0

package/dist/policy/policy-engine.d.ts

@@ -1,19 +1,29 @@
 import { PolicyConfig, PolicyDecision, CallContext, PolicyMode } from './policy-types.js';
+import { ShellTokenizer } from './shell-tokenizer.js';
 /**
  * Policy Engine — evaluates every intercepted tools/call against configured rules.
  * Supports three modes: audit (passive), warn (flag only), block (active enforcement).
+ *
+ * v1.2: Integrated payload normalization and semantic shell analysis layers
+ * to move beyond regex-only detection toward semantic execution security.
  */
 export declare class PolicyEngine {
     private rules;
     private mode;
     private callCounters;
+    private normalizer;
+    private shellTokenizer;
     constructor(config: PolicyConfig);
     /**
      * Evaluate a tools/call request and return a decision.
+     *
+     * Pipeline: Normalize payload → Semantic shell analysis → Rule evaluation
      */
     evaluate(context: CallContext): PolicyDecision;
     private evaluateRule;
     private resolveAction;
     getMode(): PolicyMode;
+    /** Expose the shell tokenizer for testing */
+    getShellTokenizer(): ShellTokenizer;
 }
 //# sourceMappingURL=policy-engine.d.ts.map

package/dist/policy/policy-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/policy/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAgB,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGxG;;;GAGG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAkC;IAC/C,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,YAAY,CAA8D;gBAEtE,MAAM,EAAE,YAAY;IAKhC;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,cAAc;IAU9C,OAAO,CAAC,YAAY;IA2EpB,OAAO,CAAC,aAAa;IAMrB,OAAO,IAAI,UAAU;CAGtB"}
+{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/policy/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAgB,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGxG,OAAO,EAAE,cAAc,EAAe,MAAM,sBAAsB,CAAC;AAEnE;;;;;;GAMG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAkC;IAC/C,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,YAAY,CAA8D;IAClF,OAAO,CAAC,UAAU,CAAmB;IACrC,OAAO,CAAC,cAAc,CAAwB;gBAElC,MAAM,EAAE,YAAY;IAKhC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,cAAc;IAiC9C,OAAO,CAAC,YAAY;IAoGpB,OAAO,CAAC,aAAa;IAMrB,OAAO,IAAI,UAAU;IAIrB,6CAA6C;IAC7C,iBAAiB,IAAI,cAAc;CAGpC"}

package/dist/policy/policy-engine.js

@@ -1,29 +1,58 @@
 import { Logger } from '../utils/logger.js';
+import { getNormalizer } from '../utils/payload-normalizer.js';
+import { ShellTokenizer } from './shell-tokenizer.js';
 /**
  * Policy Engine — evaluates every intercepted tools/call against configured rules.
  * Supports three modes: audit (passive), warn (flag only), block (active enforcement).
+ *
+ * v1.2: Integrated payload normalization and semantic shell analysis layers
+ * to move beyond regex-only detection toward semantic execution security.
  */
 export class PolicyEngine {
     rules;
     mode;
     callCounters = new Map();
+    normalizer = getNormalizer();
+    shellTokenizer = new ShellTokenizer();
     constructor(config) {
         this.rules = config.policy.rules;
         this.mode = config.policy.mode;
     }
     /**
      * Evaluate a tools/call request and return a decision.
+     *
+     * Pipeline: Normalize payload → Semantic shell analysis → Rule evaluation
      */
     evaluate(context) {
+        // ── v1.2: Payload normalization (before regex evaluation) ──
+        const normalizedArgs = context.arguments
+            ? this.normalizer.normalizeJsonValue(context.arguments)
+            : {};
+        const normalizedContext = {
+            ...context,
+            arguments: normalizedArgs,
+        };
+        // ── v1.2: Semantic shell analysis on argument strings ──
+        const argsStr = JSON.stringify(normalizedArgs);
+        const shellRisk = argsStr.length > 0
+            ? this.shellTokenizer.analyzeRisk(this.shellTokenizer.tokenize(argsStr).commands)
+            : { hasCommandSubstitution: false, hasPipes: false, hasRedirects: false, hasLogicalChains: false, dangerousCommands: [], shellMetacharacters: [] };
+        // Check for high-risk semantic patterns regardless of rule match
+        if (shellRisk.hasCommandSubstitution) {
+            Logger.info(`[policy] Semantic: command substitution detected in '${context.toolName}' arguments`);
+        }
+        if (shellRisk.dangerousCommands.length > 0) {
+            Logger.info(`[policy] Semantic: dangerous commands [${shellRisk.dangerousCommands.join(', ')}] in '${context.toolName}' arguments`);
+        }
         for (const rule of this.rules) {
-            const decision = this.evaluateRule(rule, context);
+            const decision = this.evaluateRule(rule, normalizedContext, { argsStr, shellRisk });
             if (decision)
                 return decision;
         }
         // Default: pass
         return { action: 'pass', rule: 'default', reason: 'No policy rules matched' };
     }
-    evaluateRule(rule, ctx) {
+    evaluateRule(rule, ctx, analysis) {
         // Tool allowlist/denylist
         if (rule.tools) {
             if (rule.tools.allow && rule.tools.allow.length > 0) {
@@ -37,13 +66,12 @@ export class PolicyEngine {
                 }
             }
         }
-        // Malicious pattern detection
+        // v1.2: Malicious pattern detection — runs against NORMALIZED payload
         if (rule.patterns) {
-            const argsStr = ctx.arguments ? JSON.stringify(ctx.arguments) : '';
             for (const pattern of rule.patterns) {
                 try {
-                    if (new RegExp(pattern).test(argsStr)) {
-                        return { action: this.resolveAction(rule.action), rule: rule.name, reason: `Argument pattern '${pattern}' matched in tool call` };
+                    if (new RegExp(pattern).test(analysis.argsStr)) {
+                        return { action: this.resolveAction(rule.action), rule: rule.name, reason: `Argument pattern '${pattern}' matched in tool call (normalized)` };
                     }
                 }
                 catch {
@@ -51,6 +79,25 @@ export class PolicyEngine {
                 }
             }
         }
+        // v1.2: Semantic shell detection rule — automatic high-risk pattern block
+        if (rule.name === 'block-shell-injection' || rule.name.includes('shell')) {
+            // Command substitution is always high-risk
+            if (analysis.shellRisk.hasCommandSubstitution) {
+                return { action: this.resolveAction('block'), rule: rule.name, reason: 'Semantic: shell command substitution detected in arguments' };
+            }
+            // Dangerous commands in any context
+            if (analysis.shellRisk.dangerousCommands.length > 0) {
+                return {
+                    action: this.resolveAction('block'),
+                    rule: rule.name,
+                    reason: `Semantic: dangerous shell commands detected: [${analysis.shellRisk.dangerousCommands.join(', ')}]`,
+                };
+            }
+            // Pipe chains with dangerous patterns
+            if (analysis.shellRisk.hasPipes && analysis.shellRisk.hasCommandSubstitution) {
+                return { action: this.resolveAction('block'), rule: rule.name, reason: 'Semantic: pipe chain with command substitution' };
+            }
+        }
         // Max tokens per call
         if (rule.maxTokens && ctx.requestTokens > rule.maxTokens) {
             return { action: this.resolveAction(rule.action), rule: rule.name, reason: `Token count ${ctx.requestTokens} exceeds max ${rule.maxTokens}` };
@@ -104,5 +151,9 @@ export class PolicyEngine {
     getMode() {
         return this.mode;
     }
+    /** Expose the shell tokenizer for testing */
+    getShellTokenizer() {
+        return this.shellTokenizer;
+    }
 }
 //# sourceMappingURL=policy-engine.js.map

package/dist/policy/policy-engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/policy/policy-engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;;GAGG;AACH,MAAM,OAAO,YAAY;IACf,KAAK,CAAkC;IACvC,IAAI,CAAa;IACjB,YAAY,GAAoD,IAAI,GAAG,EAAE,CAAC;IAElF,YAAY,MAAoB;QAC9B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,OAAoB;QAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;QAED,gBAAgB;QAChB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAChF,CAAC;IAEO,YAAY,CAAC,IAA6C,EAAE,GAAgB;QAClF,0BAA0B;QAC1B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,QAAQ,wBAAwB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3J,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,QAAQ,wBAAwB,EAAE,CAAC;gBAC7H,CAAC;YACH,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;wBACtC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,qBAAqB,OAAO,wBAAwB,EAAE,CAAC;oBACpI,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC,0CAA0C,IAAI,CAAC,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,IAAI,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACzD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,aAAa,gBAAgB,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAChJ,CAAC;QAED,iDAAiD;QACjD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC;YACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,IAAI,CAAC,IAAI,6CAA6C,EAAE,CAAC;YACpJ,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,QAAQ,CAAC,GAAG,2CAA2C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,EAAE,CAAC;gBAC5N,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,QAAQ,qCAAqC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5K,CAAC;YACH,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;gBACtC,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,EAAE,CAAC;gBAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,IAAI,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,wBAAwB,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,iBAAiB,mBAAmB,EAAE,CAAC;gBAClK,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,aAAa,CAAC,UAAwB;QAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC;QACzC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC;QAClE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF"}
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/policy/policy-engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAe,MAAM,sBAAsB,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IACf,KAAK,CAAkC;IACvC,IAAI,CAAa;IACjB,YAAY,GAAoD,IAAI,GAAG,EAAE,CAAC;IAC1E,UAAU,GAAG,aAAa,EAAE,CAAC;IAC7B,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAE9C,YAAY,MAAoB;QAC9B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,OAAoB;QAC3B,8DAA8D;QAC9D,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS;YACtC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAA4B;YAClF,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,iBAAiB,GAAgB;YACrC,GAAG,OAAO;YACV,SAAS,EAAE,cAAc;SAC1B,CAAC;QAEF,0DAA0D;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAgB,OAAO,CAAC,MAAM,GAAG,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;YACjF,CAAC,CAAC,EAAE,sBAAsB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;QAErJ,iEAAiE;QACjE,IAAI,SAAS,CAAC,sBAAsB,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,wDAAwD,OAAO,CAAC,QAAQ,aAAa,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,SAAS,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,0CAA0C,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,QAAQ,aAAa,CAAC,CAAC;QACtI,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACpF,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;QAED,gBAAgB;QAChB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAChF,CAAC;IAEO,YAAY,CAClB,IAA6C,EAC7C,GAAgB,EAChB,QAAqD;QAErD,0BAA0B;QAC1B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,QAAQ,wBAAwB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3J,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,QAAQ,wBAAwB,EAAE,CAAC;gBAC7H,CAAC;YACH,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,qBAAqB,OAAO,qCAAqC,EAAE,CAAC;oBACjJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC,0CAA0C,IAAI,CAAC,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,2CAA2C;YAC3C,IAAI,QAAQ,CAAC,SAAS,CAAC,sBAAsB,EAAE,CAAC;gBAC9C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,4DAA4D,EAAE,CAAC;YACxI,CAAC;YAED,oCAAoC;YACpC,IAAI,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;oBACnC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,iDAAiD,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;iBAC5G,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,IAAI,QAAQ,CAAC,SAAS,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,sBAAsB,EAAE,CAAC;gBAC7E,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;YAC5H,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,IAAI,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACzD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,aAAa,gBAAgB,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAChJ,CAAC;QAED,iDAAiD;QACjD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC;YACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,IAAI,CAAC,IAAI,6CAA6C,EAAE,CAAC;YACpJ,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,QAAQ,CAAC,GAAG,2CAA2C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,EAAE,CAAC;gBAC5N,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,QAAQ,qCAAqC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5K,CAAC;YACH,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;gBACtC,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,EAAE,CAAC;gBAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,IAAI,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,wBAAwB,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,iBAAiB,mBAAmB,EAAE,CAAC;gBAClK,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,aAAa,CAAC,UAAwB;QAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC;QACzC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC;QAClE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,6CAA6C;IAC7C,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF"}

package/dist/policy/shell-tokenizer.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Shell Command Tokenizer & Semantic Analyzer
+ *
+ * Parses tool argument strings into tokenized AST nodes for semantic
+ * security analysis. Goes beyond regex pattern matching by understanding
+ * shell grammar: pipelines, redirects, command substitutions, logical chains.
+ *
+ * This is the semantic detection layer that addresses the architectural
+ * limitation of regex-only detection. Instead of pattern-matching "$(rm -rf /)"
+ * we parse it as a CommandSubstitution AST node and then analyze the inner
+ * command semantically.
+ */
+export declare enum TokenType {
+    WORD = "WORD",
+    STRING = "STRING",
+    VARIABLE = "VARIABLE",
+    COMMAND_SUBSTITUTION = "COMMAND_SUBSTITUTION",
+    BACKTICK_SUBSTITUTION = "BACKTICK_SUBSTITUTION",
+    PIPE = "PIPE",
+    REDIRECT = "REDIRECT",
+    SEMICOLON = "SEMICOLON",
+    AND_IF = "AND_IF",// &&
+    OR_IF = "OR_IF",// ||
+    BACKGROUND = "BACKGROUND",
+    SUBSHELL = "SUBSHELL"
+}
+export interface Token {
+    type: TokenType;
+    value: string;
+    /** Start position in original string */
+    start: number;
+    /** End position in original string */
+    end: number;
+    /** For compound tokens (substitution, subshell), nested tokens */
+    children?: Token[];
+}
+export interface ShellAST {
+    /** Top-level commands (separated by ;, &&, ||, &) */
+    commands: Token[];
+    /** Whether the input contained potentially dangerous constructs */
+    warnings: string[];
+}
+/**
+ * Dangerous command categories for semantic analysis.
+ */
+export interface CommandRisk {
+    /** High risk: command substitution present */
+    hasCommandSubstitution: boolean;
+    /** High risk: pipe chains present */
+    hasPipes: boolean;
+    /** Medium risk: redirect operators present */
+    hasRedirects: boolean;
+    /** Medium risk: logical chain operators */
+    hasLogicalChains: boolean;
+    /** Dangerous commands detected in tokenized words */
+    dangerousCommands: string[];
+    /** Shell metacharacters found */
+    shellMetacharacters: string[];
+}
+/**
+ * ShellTokenizer parses shell-like input into an AST without executing anything.
+ * It's a security analyzer, not a full POSIX shell parser — focus is on detecting
+ * execution patterns that signal malicious intent.
+ */
+export declare class ShellTokenizer {
+    private readonly DANGEROUS_COMMANDS;
+    /**
+     * Tokenize a string that may contain shell syntax.
+     */
+    tokenize(input: string): ShellAST;
+    /**
+     * Parse the next token starting at position pos.
+     */
+    private nextToken;
+    /**
+     * Parse a delimited token like $(...), ${...}, `...`, (...).
+     * Recursively tokenizes inner content.
+     */
+    private parseDelimited;
+    /**
+     * Analyze a token for risk.
+     */
+    analyzeRisk(tokens: Token[]): CommandRisk;
+    /**
+     * Full semantic analysis: tokenize + assess risk.
+     */
+    analyze(input: string): {
+        ast: ShellAST;
+        risk: CommandRisk;
+    };
+}
+//# sourceMappingURL=shell-tokenizer.d.ts.map

package/dist/policy/shell-tokenizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-tokenizer.d.ts","sourceRoot":"","sources":["../../src/policy/shell-tokenizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,oBAAY,SAAS;IACnB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,oBAAoB,yBAAyB;IAC7C,qBAAqB,0BAA0B;IAC/C,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,MAAM,WAAW,CAAM,KAAK;IAC5B,KAAK,UAAU,CAAQ,KAAK;IAC5B,UAAU,eAAe;IACzB,QAAQ,aAAa;CACtB;AAED,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,QAAQ;IACvB,qDAAqD;IACrD,QAAQ,EAAE,KAAK,EAAE,CAAC;IAClB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,sBAAsB,EAAE,OAAO,CAAC;IAChC,qCAAqC;IACrC,QAAQ,EAAE,OAAO,CAAC;IAClB,8CAA8C;IAC9C,YAAY,EAAE,OAAO,CAAC;IACtB,2CAA2C;IAC3C,gBAAgB,EAAE,OAAO,CAAC;IAC1B,qDAAqD;IACrD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,iCAAiC;IACjC,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAShC;IAEH;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ;IA6BjC;;OAEG;IACH,OAAO,CAAC,SAAS;IA2IjB;;;OAGG;IACH,OAAO,CAAC,cAAc;IA0CtB;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,WAAW;IAoDzC;;OAEG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,QAAQ,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE;CAK7D"}

package/dist/policy/shell-tokenizer.js

@@ -0,0 +1,300 @@
+/**
+ * Shell Command Tokenizer & Semantic Analyzer
+ *
+ * Parses tool argument strings into tokenized AST nodes for semantic
+ * security analysis. Goes beyond regex pattern matching by understanding
+ * shell grammar: pipelines, redirects, command substitutions, logical chains.
+ *
+ * This is the semantic detection layer that addresses the architectural
+ * limitation of regex-only detection. Instead of pattern-matching "$(rm -rf /)"
+ * we parse it as a CommandSubstitution AST node and then analyze the inner
+ * command semantically.
+ */
+export var TokenType;
+(function (TokenType) {
+    TokenType["WORD"] = "WORD";
+    TokenType["STRING"] = "STRING";
+    TokenType["VARIABLE"] = "VARIABLE";
+    TokenType["COMMAND_SUBSTITUTION"] = "COMMAND_SUBSTITUTION";
+    TokenType["BACKTICK_SUBSTITUTION"] = "BACKTICK_SUBSTITUTION";
+    TokenType["PIPE"] = "PIPE";
+    TokenType["REDIRECT"] = "REDIRECT";
+    TokenType["SEMICOLON"] = "SEMICOLON";
+    TokenType["AND_IF"] = "AND_IF";
+    TokenType["OR_IF"] = "OR_IF";
+    TokenType["BACKGROUND"] = "BACKGROUND";
+    TokenType["SUBSHELL"] = "SUBSHELL";
+})(TokenType || (TokenType = {}));
+/**
+ * ShellTokenizer parses shell-like input into an AST without executing anything.
+ * It's a security analyzer, not a full POSIX shell parser — focus is on detecting
+ * execution patterns that signal malicious intent.
+ */
+export class ShellTokenizer {
+    DANGEROUS_COMMANDS = new Set([
+        'rm', 'dd', 'mkfs', 'fdisk', 'shred',
+        'chmod', 'chown', 'passwd', 'mount', 'umount',
+        'iptables', 'nc', 'curl', 'wget', 'telnet',
+        'eval', 'exec', 'source', 'bash', 'sh', 'zsh',
+        'python', 'perl', 'ruby', 'node', 'php',
+        'ssh', 'scp', 'rsync',
+        'kill', 'pkill', 'reboot', 'shutdown', 'halt',
+        'tcpdump', 'nmap', 'traceroute',
+    ]);
+    /**
+     * Tokenize a string that may contain shell syntax.
+     */
+    tokenize(input) {
+        const warnings = [];
+        const tokens = [];
+        let pos = 0;
+        while (pos < input.length) {
+            // Skip whitespace
+            if (/\s/.test(input[pos])) {
+                pos++;
+                continue;
+            }
+            const result = this.nextToken(input, pos);
+            if (!result)
+                break;
+            tokens.push(result.token);
+            pos = result.nextPos;
+            if (result.token.type === TokenType.WORD) {
+                const word = result.token.value.toLowerCase();
+                if (this.DANGEROUS_COMMANDS.has(word)) {
+                    warnings.push(`Dangerous command detected: '${result.token.value}'`);
+                }
+            }
+        }
+        return { commands: tokens, warnings };
+    }
+    /**
+     * Parse the next token starting at position pos.
+     */
+    nextToken(input, pos) {
+        const ch = input[pos];
+        if (ch === undefined)
+            return null;
+        // ── Pipe ──────────────────────────────────────────
+        if (ch === '|' && input[pos + 1] !== '|') {
+            return {
+                token: { type: TokenType.PIPE, value: '|', start: pos, end: pos + 1 },
+                nextPos: pos + 1,
+            };
+        }
+        // ── Logical operators && || ────────────────────────
+        if (ch === '&' && input[pos + 1] === '&') {
+            return {
+                token: { type: TokenType.AND_IF, value: '&&', start: pos, end: pos + 2 },
+                nextPos: pos + 2,
+            };
+        }
+        if (ch === '|' && input[pos + 1] === '|') {
+            return {
+                token: { type: TokenType.OR_IF, value: '||', start: pos, end: pos + 2 },
+                nextPos: pos + 2,
+            };
+        }
+        // ── Semicolon ─────────────────────────────────────
+        if (ch === ';') {
+            return {
+                token: { type: TokenType.SEMICOLON, value: ';', start: pos, end: pos + 1 },
+                nextPos: pos + 1,
+            };
+        }
+        // ── Background & ──────────────────────────────────
+        if (ch === '&') {
+            return {
+                token: { type: TokenType.BACKGROUND, value: '&', start: pos, end: pos + 1 },
+                nextPos: pos + 1,
+            };
+        }
+        // ── Redirect > >> < << <<< >& ─────────────────────
+        if (ch === '>' || ch === '<') {
+            let end = pos + 1;
+            if (input[end] === '>' || input[end] === ch)
+                end++;
+            if (input[end] === '&' && ch === '>')
+                end++;
+            return {
+                token: { type: TokenType.REDIRECT, value: input.slice(pos, end), start: pos, end },
+                nextPos: end,
+            };
+        }
+        // ── Command substitution $(...) ────────────────────
+        if (ch === '$' && input[pos + 1] === '(') {
+            return this.parseDelimited(input, pos, '$(', ')', TokenType.COMMAND_SUBSTITUTION);
+        }
+        // ── Backtick substitution `...` ────────────────────
+        if (ch === '`') {
+            return this.parseDelimited(input, pos, '`', '`', TokenType.BACKTICK_SUBSTITUTION);
+        }
+        // ── Variable ${...} or $NAME ─────────────────────
+        if (ch === '$') {
+            if (input[pos + 1] === '{') {
+                return this.parseDelimited(input, pos, '${', '}', TokenType.VARIABLE);
+            }
+            // Simple variable: $NAME, $1, $@, $?
+            let end = pos + 1;
+            if (/[A-Za-z0-9_?!@#*]/.test(input[end] || '')) {
+                end++;
+                while (end < input.length && /[A-Za-z0-9_]/.test(input[end]))
+                    end++;
+            }
+            return {
+                token: { type: TokenType.VARIABLE, value: input.slice(pos, end), start: pos, end },
+                nextPos: end,
+            };
+        }
+        // ── Subshell (...) ────────────────────────────────
+        if (ch === '(') {
+            return this.parseDelimited(input, pos, '(', ')', TokenType.SUBSHELL);
+        }
+        // ── Single-quoted string ──────────────────────────
+        if (ch === "'") {
+            const end = input.indexOf("'", pos + 1);
+            if (end === -1) {
+                // Unterminated — consume rest
+                return {
+                    token: { type: TokenType.STRING, value: input.slice(pos), start: pos, end: input.length },
+                    nextPos: input.length,
+                };
+            }
+            return {
+                token: { type: TokenType.STRING, value: input.slice(pos, end + 1), start: pos, end: end + 1 },
+                nextPos: end + 1,
+            };
+        }
+        // ── Double-quoted string ──────────────────────────
+        if (ch === '"') {
+            const end = input.indexOf('"', pos + 1);
+            if (end === -1) {
+                return {
+                    token: { type: TokenType.STRING, value: input.slice(pos), start: pos, end: input.length },
+                    nextPos: input.length,
+                };
+            }
+            return {
+                token: { type: TokenType.STRING, value: input.slice(pos, end + 1), start: pos, end: end + 1 },
+                nextPos: end + 1,
+            };
+        }
+        // ── Word (unquoted command/argument) ──────────────
+        let end = pos;
+        while (end < input.length &&
+            !/\s/.test(input[end]) &&
+            !'|&;<>$`\'"()'.includes(input[end])) {
+            end++;
+        }
+        if (end > pos) {
+            return {
+                token: { type: TokenType.WORD, value: input.slice(pos, end), start: pos, end },
+                nextPos: end,
+            };
+        }
+        // Consume unknown char
+        return {
+            token: { type: TokenType.WORD, value: ch, start: pos, end: pos + 1 },
+            nextPos: pos + 1,
+        };
+    }
+    /**
+     * Parse a delimited token like $(...), ${...}, `...`, (...).
+     * Recursively tokenizes inner content.
+     */
+    parseDelimited(input, pos, open, close, type) {
+        let depth = 1;
+        let index = pos + open.length;
+        const start = pos;
+        while (index < input.length && depth > 0) {
+            if (input.slice(index, index + open.length) === open && type === TokenType.SUBSHELL) {
+                depth++;
+                index += open.length;
+                continue;
+            }
+            if (input.slice(index, index + close.length) === close) {
+                depth--;
+                if (depth === 0) {
+                    index += close.length;
+                    break;
+                }
+            }
+            index++;
+        }
+        const inner = input.slice(start + open.length, index - close.length);
+        const innerAst = this.tokenize(inner);
+        return {
+            token: {
+                type,
+                value: input.slice(start, index),
+                start,
+                end: index,
+                children: innerAst.commands.length > 0 ? innerAst.commands : undefined,
+            },
+            nextPos: index,
+        };
+    }
+    /**
+     * Analyze a token for risk.
+     */
+    analyzeRisk(tokens) {
+        const risk = {
+            hasCommandSubstitution: false,
+            hasPipes: false,
+            hasRedirects: false,
+            hasLogicalChains: false,
+            dangerousCommands: [],
+            shellMetacharacters: [],
+        };
+        const walkTokens = (list) => {
+            for (const token of list) {
+                switch (token.type) {
+                    case TokenType.COMMAND_SUBSTITUTION:
+                    case TokenType.BACKTICK_SUBSTITUTION:
+                        risk.hasCommandSubstitution = true;
+                        if (token.children)
+                            walkTokens(token.children);
+                        break;
+                    case TokenType.PIPE:
+                        risk.hasPipes = true;
+                        break;
+                    case TokenType.REDIRECT:
+                        risk.hasRedirects = true;
+                        break;
+                    case TokenType.AND_IF:
+                    case TokenType.OR_IF:
+                        risk.hasLogicalChains = true;
+                        break;
+                    case TokenType.WORD:
+                        if (this.DANGEROUS_COMMANDS.has(token.value.toLowerCase())) {
+                            if (!risk.dangerousCommands.includes(token.value)) {
+                                risk.dangerousCommands.push(token.value);
+                            }
+                        }
+                        break;
+                    case TokenType.SUBSHELL:
+                        risk.shellMetacharacters.push('(...)');
+                        if (token.children)
+                            walkTokens(token.children);
+                        break;
+                    case TokenType.VARIABLE:
+                        risk.shellMetacharacters.push(token.value);
+                        break;
+                    default:
+                        break;
+                }
+            }
+        };
+        walkTokens(tokens);
+        return risk;
+    }
+    /**
+     * Full semantic analysis: tokenize + assess risk.
+     */
+    analyze(input) {
+        const ast = this.tokenize(input);
+        const risk = this.analyzeRisk(ast.commands);
+        return { ast, risk };
+    }
+}
+//# sourceMappingURL=shell-tokenizer.js.map

package/dist/policy/shell-tokenizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-tokenizer.js","sourceRoot":"","sources":["../../src/policy/shell-tokenizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAN,IAAY,SAaX;AAbD,WAAY,SAAS;IACnB,0BAAa,CAAA;IACb,8BAAiB,CAAA;IACjB,kCAAqB,CAAA;IACrB,0DAA6C,CAAA;IAC7C,4DAA+C,CAAA;IAC/C,0BAAa,CAAA;IACb,kCAAqB,CAAA;IACrB,oCAAuB,CAAA;IACvB,8BAAiB,CAAA;IACjB,4BAAe,CAAA;IACf,sCAAyB,CAAA;IACzB,kCAAqB,CAAA;AACvB,CAAC,EAbW,SAAS,KAAT,SAAS,QAapB;AAsCD;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACR,kBAAkB,GAAG,IAAI,GAAG,CAAC;QAC5C,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;QACpC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ;QAC7C,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ;QAC1C,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK;QAC7C,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;QACvC,KAAK,EAAE,KAAK,EAAE,OAAO;QACrB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM;QAC7C,SAAS,EAAE,MAAM,EAAE,YAAY;KAChC,CAAC,CAAC;IAEH;;OAEG;IACH,QAAQ,CAAC,KAAa;QACpB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAY,EAAE,CAAC;QAC3B,IAAI,GAAG,GAAG,CAAC,CAAC;QAEZ,OAAO,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1B,kBAAkB;YAClB,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC;gBAC3B,GAAG,EAAE,CAAC;gBACN,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,MAAM;YAEnB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;YAErB,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC9C,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,QAAQ,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,KAAa,EAAE,GAAW;QAC1C,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAElC,qDAAqD;QACrD,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE;gBACrE,OAAO,EAAE,GAAG,GAAG,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,sDAAsD;QACtD,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE;gBACxE,OAAO,EAAE,GAAG,GAAG,CAAC;aACjB,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE;gBACvE,OAAO,EAAE,GAAG,GAAG,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE;gBAC1E,OAAO,EAAE,GAAG,GAAG,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE;gBAC3E,OAAO,EAAE,GAAG,GAAG,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;YAClB,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE;gBAAE,GAAG,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;gBAAE,GAAG,EAAE,CAAC;YAC5C,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE;gBAClF,OAAO,EAAE,GAAG;aACb,CAAC;QACJ,CAAC;QAED,sDAAsD;QACtD,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACpF,CAAC;QAED,sDAAsD;QACtD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACpF,CAAC;QAED,oDAAoD;QACpD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxE,CAAC;YACD,qCAAqC;YACrC,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;YAClB,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC/C,GAAG,EAAE,CAAC;gBACN,OAAO,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAE,CAAC;oBAAE,GAAG,EAAE,CAAC;YACvE,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE;gBAClF,OAAO,EAAE,GAAG;aACb,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvE,CAAC;QAED,qDAAqD;QACrD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;YACxC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,8BAA8B;gBAC9B,OAAO;oBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE;oBACzF,OAAO,EAAE,KAAK,CAAC,MAAM;iBACtB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE;gBAC7F,OAAO,EAAE,GAAG,GAAG,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;YACxC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,OAAO;oBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE;oBACzF,OAAO,EAAE,KAAK,CAAC,MAAM;iBACtB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE;gBAC7F,OAAO,EAAE,GAAG,GAAG,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,IAAI,GAAG,GAAG,GAAG,CAAC;QACd,OACE,GAAG,GAAG,KAAK,CAAC,MAAM;YAClB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAE,CAAC;YACvB,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAE,CAAC,EACrC,CAAC;YACD,GAAG,EAAE,CAAC;QACR,CAAC;QACD,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;YACd,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE;gBAC9E,OAAO,EAAE,GAAG;aACb,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,OAAO;YACL,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE;YACpE,OAAO,EAAE,GAAG,GAAG,CAAC;SACjB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,cAAc,CACpB,KAAa,EACb,GAAW,EACX,IAAY,EACZ,KAAa,EACb,IAAe;QAEf,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC;QAElB,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACpF,KAAK,EAAE,CAAC;gBACR,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;gBACvD,KAAK,EAAE,CAAC;gBACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;oBACtB,MAAM;gBACR,CAAC;YACH,CAAC;YACD,KAAK,EAAE,CAAC;QACV,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEtC,OAAO;YACL,KAAK,EAAE;gBACL,IAAI;gBACJ,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;gBAChC,KAAK;gBACL,GAAG,EAAE,KAAK;gBACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACvE;YACD,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,MAAe;QACzB,MAAM,IAAI,GAAgB;YACxB,sBAAsB,EAAE,KAAK;YAC7B,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,KAAK;YACnB,gBAAgB,EAAE,KAAK;YACvB,iBAAiB,EAAE,EAAE;YACrB,mBAAmB,EAAE,EAAE;SACxB,CAAC;QAEF,MAAM,UAAU,GAAG,CAAC,IAAa,EAAQ,EAAE;YACzC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;oBACnB,KAAK,SAAS,CAAC,oBAAoB,CAAC;oBACpC,KAAK,SAAS,CAAC,qBAAqB;wBAClC,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;wBACnC,IAAI,KAAK,CAAC,QAAQ;4BAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBAC/C,MAAM;oBACR,KAAK,SAAS,CAAC,IAAI;wBACjB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;wBACrB,MAAM;oBACR,KAAK,SAAS,CAAC,QAAQ;wBACrB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;wBACzB,MAAM;oBACR,KAAK,SAAS,CAAC,MAAM,CAAC;oBACtB,KAAK,SAAS,CAAC,KAAK;wBAClB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;wBAC7B,MAAM;oBACR,KAAK,SAAS,CAAC,IAAI;wBACjB,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;4BAC3D,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gCAClD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;4BAC3C,CAAC;wBACH,CAAC;wBACD,MAAM;oBACR,KAAK,SAAS,CAAC,QAAQ;wBACrB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACvC,IAAI,KAAK,CAAC,QAAQ;4BAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBAC/C,MAAM;oBACR,KAAK,SAAS,CAAC,QAAQ;wBACrB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBAC3C,MAAM;oBACR;wBACE,MAAM;gBACV,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,KAAa;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/utils/dashboard-server.d.ts

@@ -1,10 +1,19 @@
+import { createServer } from 'http';
 import { PolicyWatcher } from '../policy/policy-watcher.js';
+import { DashboardAuth } from '../auth/dashboard-auth.js';
 /**
  * Lightweight dashboard server that serves:
- * - / — the dashboard HTML
- * - /api/policy — current policy (JSON)
- * - /api/policy/reload — trigger policy reload
- * - /metrics — Prometheus metrics
+ * - / — the dashboard HTML (requires auth if enabled)
+ * - /login — login page (when JWT auth is enabled)
+ * - /api/login — POST login endpoint
+ * - /api/policy — current policy (JSON, requires auth)
+ * - /api/policy/reload — trigger policy reload (requires auth)
+ * - /metrics — Prometheus metrics (can be auth-gated or public via DASHBOARD_METRICS_PUBLIC=true)
+ *
+ * v1.2: Integrated DashboardAuth for JWT/API key authentication, CSRF protection.
  */
-export declare function startDashboardServer(port?: number, policyWatcher?: PolicyWatcher): Promise<void>;
+export declare function startDashboardServer(port?: number, policyWatcher?: PolicyWatcher, dashboardAuth?: DashboardAuth): Promise<{
+    auth: DashboardAuth;
+    server: ReturnType<typeof createServer>;
+}>;
 //# sourceMappingURL=dashboard-server.d.ts.map

package/dist/utils/dashboard-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-server.d.ts","sourceRoot":"","sources":["../../src/utils/dashboard-server.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAM5D;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,GAAE,MAAa,EACnB,aAAa,CAAC,EAAE,aAAa,GAC5B,OAAO,CAAC,IAAI,CAAC,CA2Ef"}
+{"version":3,"file":"dashboard-server.d.ts","sourceRoot":"","sources":["../../src/utils/dashboard-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAmC,MAAM,MAAM,CAAC;AAKrE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAM1D;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,GAAE,MAAa,EACnB,aAAa,CAAC,EAAE,aAAa,EAC7B,aAAa,CAAC,EAAE,aAAa,GAC5B,OAAO,CAAC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAA;CAAE,CAAC,CA2P3E"}