@n8n/fs-proxy 0.1.0-rc1

package/dist/logger.js

@@ -0,0 +1,350 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.logger = void 0;
+exports.configure = configure;
+exports.printBanner = printBanner;
+exports.printModuleStatus = printModuleStatus;
+exports.printToolList = printToolList;
+exports.printListening = printListening;
+exports.printWaiting = printWaiting;
+exports.printConnected = printConnected;
+exports.printDisconnected = printDisconnected;
+exports.printReconnecting = printReconnecting;
+exports.printAuthFailure = printAuthFailure;
+exports.printReinitializing = printReinitializing;
+exports.printReinitFailed = printReinitFailed;
+exports.printShuttingDown = printShuttingDown;
+exports.printToolCall = printToolCall;
+exports.printToolResult = printToolResult;
+const fs = __importStar(require("node:fs"));
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const picocolors_1 = __importDefault(require("picocolors"));
+const LEVEL_RANK = {
+    silent: 0,
+    error: 1,
+    warn: 2,
+    info: 3,
+    debug: 4,
+};
+const ANSI_RE = /\x1b\[[0-9;]*m/g;
+const stripAnsi = (s) => s.replace(ANSI_RE, '');
+let currentLevel = 'info';
+function configure(options) {
+    currentLevel = options.level ?? 'info';
+}
+function isEnabled(level) {
+    return LEVEL_RANK[level] <= LEVEL_RANK[currentLevel];
+}
+function devTimestamp() {
+    const now = new Date();
+    const pad = (num, digits = 2) => num.toString().padStart(digits, '0');
+    return `${pad(now.getHours())}:${pad(now.getMinutes())}:${pad(now.getSeconds())}.${pad(now.getMilliseconds(), 3)}`;
+}
+function toPrintable(metadata) {
+    if (Object.keys(metadata).length === 0)
+        return '';
+    return JSON.stringify(metadata)
+        .replace(/{"/g, '{ "')
+        .replace(/,"/g, ', "')
+        .replace(/":/g, '": ')
+        .replace(/}/g, ' }');
+}
+const LEVEL_COLORS = {
+    error: picocolors_1.default.red,
+    warn: picocolors_1.default.yellow,
+    info: picocolors_1.default.green,
+    debug: picocolors_1.default.blue,
+};
+function colorFor(level) {
+    return LEVEL_COLORS[level] ?? ((s) => s);
+}
+function devDebugLine(level, message, meta) {
+    const separator = '   ';
+    const ts = devTimestamp();
+    const color = colorFor(level);
+    const lvl = color(level).padEnd(15);
+    const metaStr = toPrintable(meta);
+    const suffix = metaStr ? ' ' + picocolors_1.default.dim(metaStr) : '';
+    return [ts, lvl, color(stripAnsi(message)) + suffix].join(separator);
+}
+const LOG_DIR = path.join(os.homedir(), '.n8n-local-gateway');
+const LOG_FILE = path.join(LOG_DIR, 'log');
+let fileWriterReady = false;
+function ensureLogFile() {
+    if (fileWriterReady)
+        return true;
+    try {
+        fs.mkdirSync(LOG_DIR, { recursive: true });
+        fileWriterReady = true;
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function writeToFile(level, message, meta) {
+    if (!ensureLogFile())
+        return;
+    try {
+        const ts = new Date().toISOString();
+        const lvl = level.toUpperCase().padEnd(5);
+        const cleanMsg = stripAnsi(message);
+        const metaPart = Object.keys(meta).length > 0 ? ' ' + JSON.stringify(meta) : '';
+        fs.appendFileSync(LOG_FILE, `[${ts}] [${lvl}] ${cleanMsg}${metaPart}\n`);
+    }
+    catch {
+    }
+}
+exports.logger = {
+    error(message, meta = {}) {
+        if (isEnabled('error')) {
+            console.error(currentLevel === 'debug' ? devDebugLine('error', message, meta) : message);
+            writeToFile('error', message, meta);
+        }
+    },
+    warn(message, meta = {}) {
+        if (isEnabled('warn')) {
+            console.warn(currentLevel === 'debug' ? devDebugLine('warn', message, meta) : message);
+            writeToFile('warn', message, meta);
+        }
+    },
+    info(message, meta = {}) {
+        if (isEnabled('info')) {
+            console.log(currentLevel === 'debug' ? devDebugLine('info', message, meta) : message);
+            writeToFile('info', message, meta);
+        }
+    },
+    debug(message, meta = {}) {
+        if (isEnabled('debug')) {
+            console.log(devDebugLine('debug', message, meta));
+            writeToFile('debug', message, meta);
+        }
+    },
+};
+const LOGO = [
+    '        ___        ',
+    ' _ __  ( _ ) _ __  ',
+    "| '_ \\ / _ \\| '_ \\ ",
+    '| | | | (_) | | | |',
+    '|_| |_|\\___/|_| |_|',
+];
+const SUBTITLE = [
+    '  _                 _               _                           ',
+    ' | | ___   ___ __ _| |   __ _  __ _| |_ _____      ____ _ _   _ ',
+    ' | |/ _ \\ / __/ _` | |  / _` |/ _` | __/ _ \\ \\ /\\ / / _` | | | |',
+    ' | | (_) | (_| (_| | | | (_| | (_| | ||  __/\\ V  V / (_| | |_| |',
+    ' |_|\\___/ \\___\\__,_|_|  \\__, |\\__,_|\\__\\___| \\_/\\_/ \\__,_|\\__, |',
+];
+const SUBTITLE_LAST = '                        |___/                             |___/ ';
+function printBanner() {
+    console.log();
+    for (let i = 0; i < LOGO.length; i++) {
+        console.log(picocolors_1.default.magenta(LOGO[i]) + picocolors_1.default.dim(SUBTITLE[i]));
+    }
+    console.log(' '.repeat(LOGO[0].length) + picocolors_1.default.dim(SUBTITLE_LAST));
+    console.log();
+}
+function permissionIcon(mode) {
+    if (mode === 'allow')
+        return picocolors_1.default.green('✓');
+    if (mode === 'ask')
+        return picocolors_1.default.yellow('?');
+    return picocolors_1.default.dim('✗');
+}
+function printModuleStatus(config) {
+    const { permissions } = config;
+    const fsRead = permissions.filesystemRead ?? 'deny';
+    const fsWrite = fsRead === 'deny' ? 'deny' : (permissions.filesystemWrite ?? 'deny');
+    const dir = picocolors_1.default.dim(formatPath(config.filesystem.dir));
+    exports.logger.info(`  ${permissionIcon(fsRead)} Filesystem read  ${fsRead !== 'deny' ? dir : picocolors_1.default.dim('(disabled)')}`, { module: 'FilesystemRead' });
+    exports.logger.info(`  ${permissionIcon(fsWrite)} Filesystem write ${fsWrite !== 'deny' ? dir : picocolors_1.default.dim('(disabled)')}`, { module: 'FilesystemWrite' });
+    const shellMode = permissions.shell ?? 'deny';
+    const shellDetail = shellMode === 'deny'
+        ? picocolors_1.default.dim('(disabled)')
+        : picocolors_1.default.dim(`timeout: ${config.computer.shell.timeout / 1000}s`);
+    exports.logger.info(`  ${permissionIcon(shellMode)} Shell         ${shellDetail}`, { module: 'Shell' });
+    const computerMode = permissions.computer ?? 'deny';
+    const computerDisabled = picocolors_1.default.dim('(disabled)');
+    exports.logger.info(`  ${permissionIcon(computerMode)} Screenshot    ${computerMode === 'deny' ? computerDisabled : ''}`, { module: 'Screenshot' });
+    exports.logger.info(`  ${permissionIcon(computerMode)} Mouse/keyboard ${computerMode === 'deny' ? computerDisabled : ''}`, { module: 'MouseKeyboard' });
+    const browserMode = permissions.browser ?? 'deny';
+    const browserDetail = browserMode === 'deny' ? picocolors_1.default.dim('(disabled)') : picocolors_1.default.dim(config.browser.defaultBrowser);
+    exports.logger.info(`  ${permissionIcon(browserMode)} Browser       ${browserDetail}`, {
+        module: 'Browser',
+    });
+    exports.logger.info('');
+}
+function printToolList(tools) {
+    if (tools.length === 0)
+        return;
+    const groups = groupTools(tools);
+    exports.logger.info(`  ${picocolors_1.default.bold('Tools')} ${picocolors_1.default.dim(`(${tools.length})`)}`, {
+        count: tools.length,
+        tools: tools.map((t) => t.name),
+    });
+    exports.logger.info('');
+    for (const [category, names] of groups) {
+        exports.logger.info(`  ${picocolors_1.default.magenta(category)} ${picocolors_1.default.dim(`(${names.length})`)}`);
+        exports.logger.info(`  ${picocolors_1.default.dim(names.join(', '))}`);
+        exports.logger.info('');
+    }
+}
+function printListening(port) {
+    exports.logger.info(`  ${picocolors_1.default.magenta('▸')} Listening on ${picocolors_1.default.bold(`http://localhost:${port}`)}`, {
+        port,
+    });
+    exports.logger.info('');
+}
+function printWaiting() {
+    exports.logger.info(picocolors_1.default.dim('  Waiting for connection...'));
+}
+function printConnected(url) {
+    exports.logger.info(`  ${picocolors_1.default.green('●')} Connected to ${picocolors_1.default.bold(url)}`, { url });
+}
+function printDisconnected() {
+    exports.logger.info(`  ${picocolors_1.default.yellow('●')} Disconnected`);
+}
+function printReconnecting(reason) {
+    const suffix = reason ? ` ${picocolors_1.default.dim(reason)}` : '';
+    exports.logger.warn(`  ${picocolors_1.default.yellow('●')} Reconnecting${suffix}`);
+}
+function printAuthFailure() {
+    exports.logger.error(`  ${picocolors_1.default.red('✗')} Authentication failed — waiting for new pairing token`);
+}
+function printReinitializing() {
+    exports.logger.info(`  ${picocolors_1.default.magenta('▸')} Re-initializing gateway connection`);
+}
+function printReinitFailed(error) {
+    const msg = error.length > 80 ? error.slice(0, 77) + '...' : error;
+    exports.logger.error(`  ${picocolors_1.default.red('✗')} Re-initialization failed ${picocolors_1.default.dim(msg)}`);
+}
+function printShuttingDown() {
+    exports.logger.info(`  ${picocolors_1.default.yellow('●')} Shutting down`);
+}
+function printToolCall(name, args) {
+    const summary = summarizeArgs(args);
+    const suffix = summary ? ` ${picocolors_1.default.dim(summary)}` : '';
+    exports.logger.info(`  ${picocolors_1.default.magenta('▸')} ${name}${suffix}`, { tool: name, args });
+}
+function printToolResult(name, durationMs, error) {
+    const time = picocolors_1.default.dim(`(${durationMs}ms)`);
+    if (error) {
+        const msg = error.length > 80 ? error.slice(0, 77) + '...' : error;
+        exports.logger.error(`  ${picocolors_1.default.red('✗')} ${name} ${time} ${picocolors_1.default.red(msg)}`, {
+            tool: name,
+            durationMs,
+            error,
+        });
+    }
+    else {
+        exports.logger.info(`  ${picocolors_1.default.green('✓')} ${name} ${time}`, { tool: name, durationMs });
+    }
+}
+function formatPath(dir) {
+    const home = os.homedir();
+    const absolute = path.resolve(dir);
+    if (absolute === home)
+        return '~';
+    if (absolute.startsWith(home + path.sep))
+        return '~' + absolute.slice(home.length);
+    return absolute;
+}
+function summarizeArgs(args) {
+    const parts = [];
+    let len = 0;
+    for (const [key, value] of Object.entries(args)) {
+        let v = typeof value === 'string' ? value : JSON.stringify(value);
+        if (v.length > 40)
+            v = v.slice(0, 37) + '...';
+        const part = `${key}=${v}`;
+        if (len + part.length > 80)
+            break;
+        parts.push(part);
+        len += part.length + 1;
+    }
+    return parts.join(' ');
+}
+function groupTools(tools) {
+    const categories = {};
+    for (const tool of tools) {
+        const category = categorize(tool.name);
+        if (!categories[category])
+            categories[category] = [];
+        categories[category].push(tool.name);
+    }
+    const order = ['Filesystem', 'Shell', 'Screenshot', 'Mouse/keyboard', 'Browser'];
+    const sorted = [];
+    for (const cat of order) {
+        if (categories[cat]) {
+            sorted.push([cat, categories[cat]]);
+            delete categories[cat];
+        }
+    }
+    for (const [cat, names] of Object.entries(categories)) {
+        sorted.push([cat, names]);
+    }
+    return sorted;
+}
+const FILESYSTEM_TOOLS = new Set([
+    'read_file',
+    'list_files',
+    'get_file_tree',
+    'search_files',
+    'write_file',
+    'edit_file',
+    'create_directory',
+    'delete',
+    'move',
+    'copy_file',
+]);
+function categorize(toolName) {
+    if (FILESYSTEM_TOOLS.has(toolName))
+        return 'Filesystem';
+    if (toolName === 'shell_execute')
+        return 'Shell';
+    if (toolName.startsWith('screen_'))
+        return 'Screenshot';
+    if (toolName.startsWith('mouse_') || toolName.startsWith('keyboard_'))
+        return 'Mouse/keyboard';
+    if (toolName.startsWith('browser_'))
+        return 'Browser';
+    return 'Other';
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,8BAEC;AA2HD,kCAOC;AAUD,8CA8CC;AAED,sCAgBC;AAED,wCAKC;AAED,oCAEC;AAED,wCAEC;AAED,8CAEC;AAED,8CAGC;AAED,4CAEC;AAED,kDAEC;AAED,8CAGC;AAED,8CAEC;AAED,sCAIC;AAED,0CAYC;AArSD,4CAA8B;AAC9B,4CAA8B;AAC9B,gDAAkC;AAClC,4DAA4B;AAS5B,MAAM,UAAU,GAA6B;IAC5C,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACR,CAAC;AAGF,MAAM,OAAO,GAAG,iBAAiB,CAAC;AAClC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAExD,IAAI,YAAY,GAAa,MAAM,CAAC;AAEpC,SAAgB,SAAS,CAAC,OAA6B;IACtD,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;AACxC,CAAC;AAED,SAAS,SAAS,CAAC,KAAe;IACjC,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;AACtD,CAAC;AAID,SAAS,YAAY;IACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9E,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;AACpH,CAAC;AAED,SAAS,WAAW,CAAC,QAAiC;IACrD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;SAC7B,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,YAAY,GAA0C;IAC3D,KAAK,EAAE,oBAAE,CAAC,GAAG;IACb,IAAI,EAAE,oBAAE,CAAC,MAAM;IACf,IAAI,EAAE,oBAAE,CAAC,KAAK;IACd,KAAK,EAAE,oBAAE,CAAC,IAAI;CACd,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAa;IAC9B,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,OAAe,EAAE,IAA6B;IAClF,MAAM,SAAS,GAAG,KAAK,CAAC;IACxB,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,oBAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACtE,CAAC;AAID,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;AAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAE3C,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B,SAAS,aAAa;IACrB,IAAI,eAAe;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC;QACJ,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,eAAe,GAAG,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,KAAe,EAAE,OAAe,EAAE,IAA6B;IACnF,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO;IAC7B,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,QAAQ,GAAG,QAAQ,IAAI,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;AACF,CAAC;AAEY,QAAA,MAAM,GAAG;IACrB,KAAK,CAAC,OAAe,EAAE,OAAgC,EAAE;QACxD,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzF,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,OAAgC,EAAE;QACvD,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACvF,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACF,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,OAAgC,EAAE;QACvD,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACtF,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACF,CAAC;IACD,KAAK,CAAC,OAAe,EAAE,OAAgC,EAAE;QACxD,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAClD,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;CACD,CAAC;AAIF,MAAM,IAAI,GAAG;IACZ,qBAAqB;IACrB,qBAAqB;IACrB,wBAAwB;IACxB,qBAAqB;IACrB,sBAAsB;CACtB,CAAC;AAEF,MAAM,QAAQ,GAAG;IAChB,kEAAkE;IAClE,kEAAkE;IAClE,sEAAsE;IACtE,mEAAmE;IACnE,6EAA6E;CAC7E,CAAC;AAEF,MAAM,aAAa,GAAG,kEAAkE,CAAC;AAGzF,SAAgB,WAAW;IAC1B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,oBAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,oBAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,oBAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,EAAE,CAAC;AACf,CAAC;AAID,SAAS,cAAc,CAAC,IAAoB;IAC3C,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,oBAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,oBAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,oBAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAqB;IACtD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAG/B,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,IAAI,MAAM,CAAC;IACpD,MAAM,OAAO,GACZ,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,IAAI,MAAM,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,oBAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,cAAM,CAAC,IAAI,CACV,KAAK,cAAc,CAAC,MAAM,CAAC,qBAAqB,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAE,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAChG,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAC5B,CAAC;IACF,cAAM,CAAC,IAAI,CACV,KAAK,cAAc,CAAC,OAAO,CAAC,qBAAqB,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAE,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAClG,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAC7B,CAAC;IAGF,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,IAAI,MAAM,CAAC;IAC9C,MAAM,WAAW,GAChB,SAAS,KAAK,MAAM;QACnB,CAAC,CAAC,oBAAE,CAAC,GAAG,CAAC,YAAY,CAAC;QACtB,CAAC,CAAC,oBAAE,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;IAChE,cAAM,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,SAAS,CAAC,kBAAkB,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAGhG,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,IAAI,MAAM,CAAC;IACpD,MAAM,gBAAgB,GAAG,oBAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC9C,cAAM,CAAC,IAAI,CACV,KAAK,cAAc,CAAC,YAAY,CAAC,kBAAkB,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,EACpG,EAAE,MAAM,EAAE,YAAY,EAAE,CACxB,CAAC;IACF,cAAM,CAAC,IAAI,CACV,KAAK,cAAc,CAAC,YAAY,CAAC,mBAAmB,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,EACrG,EAAE,MAAM,EAAE,eAAe,EAAE,CAC3B,CAAC;IAGF,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,IAAI,MAAM,CAAC;IAClD,MAAM,aAAa,GAClB,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,oBAAE,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvF,cAAM,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,WAAW,CAAC,kBAAkB,aAAa,EAAE,EAAE;QAC9E,MAAM,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,cAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjB,CAAC;AAED,SAAgB,aAAa,CAAC,KAAuB;IACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE/B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAEjC,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,oBAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE;QACnE,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KAC/B,CAAC,CAAC;IACH,cAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACxC,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,oBAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,cAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;AACF,CAAC;AAED,SAAgB,cAAc,CAAC,IAAY;IAC1C,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,oBAAE,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAAE,EAAE;QACvF,IAAI;KACJ,CAAC,CAAC;IACH,cAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjB,CAAC;AAED,SAAgB,YAAY;IAC3B,cAAM,CAAC,IAAI,CAAC,oBAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,cAAc,CAAC,GAAW;IACzC,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,oBAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAgB,iBAAiB;IAChC,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAe;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,oBAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAgB,gBAAgB;IAC/B,cAAM,CAAC,KAAK,CAAC,KAAK,oBAAE,CAAC,GAAG,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;AACxF,CAAC;AAED,SAAgB,mBAAmB;IAClC,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACnE,cAAM,CAAC,KAAK,CAAC,KAAK,oBAAE,CAAC,GAAG,CAAC,GAAG,CAAC,6BAA6B,oBAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAgB,iBAAiB;IAChC,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAClD,CAAC;AAED,SAAgB,aAAa,CAAC,IAAY,EAAE,IAA6B;IACxE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,oBAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY,EAAE,UAAkB,EAAE,KAAc;IAC/E,MAAM,IAAI,GAAG,oBAAE,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,cAAM,CAAC,KAAK,CAAC,KAAK,oBAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,oBAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE;YAC/D,IAAI,EAAE,IAAI;YACV,UAAU;YACV,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;SAAM,CAAC;QACP,cAAM,CAAC,IAAI,CAAC,KAAK,oBAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAC/E,CAAC;AACF,CAAC;AAID,SAAS,UAAU,CAAC,GAAW;IAC9B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAClC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnF,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,IAA6B;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;QAC9C,MAAM,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM;QAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,KAAuB;IAC1C,MAAM,UAAU,GAA6B,EAAE,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACrD,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACjF,MAAM,MAAM,GAA8B,EAAE,CAAC;IAE7C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACpC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAChC,WAAW;IACX,YAAY;IACZ,eAAe;IACf,cAAc;IACd,YAAY;IACZ,WAAW;IACX,kBAAkB;IAClB,QAAQ;IACR,MAAM;IACN,WAAW;CACX,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,QAAgB;IACnC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAC;IACxD,IAAI,QAAQ,KAAK,eAAe;QAAE,OAAO,OAAO,CAAC;IACjD,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,YAAY,CAAC;IACxD,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC/F,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/settings-store.d.ts

@@ -0,0 +1,29 @@
+import type { GatewayConfig, PermissionMode, ToolGroup } from './config';
+export declare const MAX_SETTINGS_STALE_MS = 3000;
+export declare class SettingsStore {
+    private persistent;
+    private readonly filePath;
+    private effectivePermissions;
+    private sessionAllows;
+    private writeTimer;
+    private inFlightPromise;
+    private writePending;
+    private maxStaleTimer;
+    private constructor();
+    static create(config: GatewayConfig): Promise<SettingsStore>;
+    getGroupMode(toolGroup: ToolGroup): PermissionMode;
+    check(toolGroup: ToolGroup, resource: string): PermissionMode;
+    allowForSession(toolGroup: ToolGroup, resource: string): void;
+    alwaysAllow(toolGroup: ToolGroup, resource: string): void;
+    alwaysDeny(toolGroup: ToolGroup, resource: string): void;
+    clearSessionRules(): void;
+    flush(): Promise<void>;
+    private validateHasActiveGroup;
+    private hasSessionAllow;
+    private getOrInitResourcePermissions;
+    private scheduleWrite;
+    private executeWrite;
+    private cancelDebounce;
+    private cancelMaxStale;
+    private persist;
+}

package/dist/settings-store.js

@@ -0,0 +1,224 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SettingsStore = exports.MAX_SETTINGS_STALE_MS = void 0;
+const fs = __importStar(require("node:fs/promises"));
+const path = __importStar(require("node:path"));
+const zod_1 = __importDefault(require("zod"));
+const config_1 = require("./config");
+const logger_1 = require("./logger");
+const DEBOUNCE_DELAY_MS = 500;
+exports.MAX_SETTINGS_STALE_MS = 3_000;
+const persistentSettingsSchema = zod_1.default.object({
+    logLevel: config_1.logLevelSchema.optional(),
+    port: config_1.portSchema.optional(),
+    permissions: zod_1.default
+        .object(Object.fromEntries(Object.keys(config_1.TOOL_GROUP_DEFINITIONS).map((key) => [key, config_1.permissionModeSchema])))
+        .partial(),
+    filesystemDir: zod_1.default.string().optional(),
+    resourcePermissions: zod_1.default
+        .object(Object.fromEntries(Object.keys(config_1.TOOL_GROUP_DEFINITIONS).map((key) => [
+        key,
+        zod_1.default.object({
+            allow: zod_1.default.array(zod_1.default.string()),
+            deny: zod_1.default.array(zod_1.default.string()),
+        }),
+    ])))
+        .partial(),
+});
+function isValidPersistentSettings(raw) {
+    return persistentSettingsSchema.safeParse(raw).success;
+}
+function emptySettings() {
+    return { permissions: {}, resourcePermissions: {} };
+}
+class SettingsStore {
+    constructor(persistent, startupOverrides, filePath) {
+        this.persistent = persistent;
+        this.filePath = filePath;
+        this.sessionAllows = new Map();
+        this.writeTimer = null;
+        this.inFlightPromise = null;
+        this.writePending = false;
+        this.maxStaleTimer = null;
+        this.effectivePermissions = { ...persistent.permissions, ...startupOverrides };
+    }
+    static async create(config) {
+        const filePath = (0, config_1.getSettingsFilePath)();
+        const persistent = await loadFromFile(filePath);
+        const store = new SettingsStore(persistent, config.permissions, filePath);
+        store.validateHasActiveGroup();
+        return store;
+    }
+    getGroupMode(toolGroup) {
+        if (toolGroup === 'filesystemWrite' &&
+            (this.effectivePermissions['filesystemRead'] ?? 'ask') === 'deny') {
+            return 'deny';
+        }
+        return this.effectivePermissions[toolGroup] ?? 'ask';
+    }
+    check(toolGroup, resource) {
+        const rp = this.persistent.resourcePermissions[toolGroup];
+        if (rp?.deny.includes(resource))
+            return 'deny';
+        if (rp?.allow.includes(resource))
+            return 'allow';
+        if (this.hasSessionAllow(toolGroup, resource))
+            return 'allow';
+        return this.getGroupMode(toolGroup);
+    }
+    allowForSession(toolGroup, resource) {
+        let set = this.sessionAllows.get(toolGroup);
+        if (!set) {
+            set = new Set();
+            this.sessionAllows.set(toolGroup, set);
+        }
+        set.add(resource);
+    }
+    alwaysAllow(toolGroup, resource) {
+        const rp = this.getOrInitResourcePermissions(toolGroup);
+        if (!rp.allow.includes(resource)) {
+            rp.allow.push(resource);
+            this.scheduleWrite();
+        }
+    }
+    alwaysDeny(toolGroup, resource) {
+        const rp = this.getOrInitResourcePermissions(toolGroup);
+        if (!rp.deny.includes(resource)) {
+            rp.deny.push(resource);
+            this.scheduleWrite();
+        }
+    }
+    clearSessionRules() {
+        this.sessionAllows.clear();
+    }
+    async flush() {
+        this.cancelDebounce();
+        if (this.inFlightPromise)
+            await this.inFlightPromise;
+        await this.persist();
+    }
+    validateHasActiveGroup() {
+        const allDeny = Object.keys(config_1.TOOL_GROUP_DEFINITIONS).every((g) => this.getGroupMode(g) === 'deny');
+        if (allDeny) {
+            throw new Error('All tool groups are set to Deny — at least one must be Ask or Allow to start the gateway');
+        }
+    }
+    hasSessionAllow(toolGroup, resource) {
+        return this.sessionAllows.get(toolGroup)?.has(resource) ?? false;
+    }
+    getOrInitResourcePermissions(toolGroup) {
+        let rp = this.persistent.resourcePermissions[toolGroup];
+        if (!rp) {
+            rp = { allow: [], deny: [] };
+            this.persistent.resourcePermissions[toolGroup] = rp;
+        }
+        return rp;
+    }
+    scheduleWrite() {
+        if (this.writeTimer !== null)
+            return;
+        if (this.inFlightPromise !== null) {
+            this.writePending = true;
+            return;
+        }
+        this.maxStaleTimer ??= setTimeout(() => {
+            this.maxStaleTimer = null;
+            this.cancelDebounce();
+            this.executeWrite();
+        }, exports.MAX_SETTINGS_STALE_MS);
+        this.writeTimer = setTimeout(() => {
+            this.writeTimer = null;
+            this.executeWrite();
+        }, DEBOUNCE_DELAY_MS);
+    }
+    executeWrite() {
+        this.cancelMaxStale();
+        this.inFlightPromise = this.persist()
+            .catch((error) => {
+            logger_1.logger.error('Failed to write settings file', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        })
+            .finally(() => {
+            this.inFlightPromise = null;
+            if (this.writePending) {
+                this.writePending = false;
+                this.scheduleWrite();
+            }
+        });
+    }
+    cancelDebounce() {
+        if (this.writeTimer !== null) {
+            clearTimeout(this.writeTimer);
+            this.writeTimer = null;
+        }
+        this.cancelMaxStale();
+    }
+    cancelMaxStale() {
+        if (this.maxStaleTimer !== null) {
+            clearTimeout(this.maxStaleTimer);
+            this.maxStaleTimer = null;
+        }
+    }
+    async persist() {
+        const dir = path.dirname(this.filePath);
+        await fs.mkdir(dir, { recursive: true, mode: 0o700 });
+        await fs.writeFile(this.filePath, JSON.stringify(this.persistent, null, 2), {
+            encoding: 'utf-8',
+            mode: 0o600,
+        });
+    }
+}
+exports.SettingsStore = SettingsStore;
+async function loadFromFile(filePath) {
+    try {
+        const raw = await fs.readFile(filePath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!isValidPersistentSettings(parsed))
+            return emptySettings();
+        return {
+            ...emptySettings(),
+            ...parsed,
+        };
+    }
+    catch {
+        return emptySettings();
+    }
+}
+//# sourceMappingURL=settings-store.js.map

package/dist/settings-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-store.js","sourceRoot":"","sources":["../src/settings-store.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,qDAAuC;AACvC,gDAAkC;AAClC,8CAAoB;AAGpB,qCAMkB;AAClB,qCAAkC;AAMlC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACjB,QAAA,qBAAqB,GAAG,KAAK,CAAC;AAW3C,MAAM,wBAAwB,GAAG,aAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,uBAAc,CAAC,QAAQ,EAAE;IACnC,IAAI,EAAE,mBAAU,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,aAAC;SACZ,MAAM,CACN,MAAM,CAAC,WAAW,CACjB,MAAM,CAAC,IAAI,CAAC,+BAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,6BAAoB,CAAC,CAAC,CAC7E,CACD;SACA,OAAO,EAAE;IACX,aAAa,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,aAAC;SACpB,MAAM,CACN,MAAM,CAAC,WAAW,CACjB,MAAM,CAAC,IAAI,CAAC,+BAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QAChD,GAAG;QACH,aAAC,CAAC,MAAM,CAAC;YACR,KAAK,EAAE,aAAC,CAAC,KAAK,CAAC,aAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,IAAI,EAAE,aAAC,CAAC,KAAK,CAAC,aAAC,CAAC,MAAM,EAAE,CAAC;SACzB,CAAC;KACF,CAAC,CACF,CACD;SACA,OAAO,EAAE;CACX,CAAC,CAAC;AAIH,SAAS,yBAAyB,CAAC,GAAY;IAC9C,OAAO,wBAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;AACxD,CAAC;AAED,SAAS,aAAa;IACrB,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC;AAMD,MAAa,aAAa;IAazB,YACS,UAA8B,EACtC,gBAA4D,EAC3C,QAAgB;QAFzB,eAAU,GAAV,UAAU,CAAoB;QAErB,aAAQ,GAAR,QAAQ,CAAQ;QAX1B,kBAAa,GAAgC,IAAI,GAAG,EAAE,CAAC;QAGvD,eAAU,GAAyC,IAAI,CAAC;QACxD,oBAAe,GAAyB,IAAI,CAAC;QAC7C,iBAAY,GAAG,KAAK,CAAC;QACrB,kBAAa,GAAyC,IAAI,CAAC;QAQlE,IAAI,CAAC,oBAAoB,GAAG,EAAE,GAAG,UAAU,CAAC,WAAW,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAChF,CAAC;IAMD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAqB;QACxC,MAAM,QAAQ,GAAG,IAAA,4BAAmB,GAAE,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1E,KAAK,CAAC,sBAAsB,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACd,CAAC;IAUD,YAAY,CAAC,SAAoB;QAChC,IACC,SAAS,KAAK,iBAAiB;YAC/B,CAAC,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,KAAK,MAAM,EAChE,CAAC;YACF,OAAO,MAAM,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;IACtD,CAAC;IAUD,KAAK,CAAC,SAAoB,EAAE,QAAgB;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC;QAC/C,IAAI,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;QACjD,IAAI,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;QAC9D,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAMD,eAAe,CAAC,SAAoB,EAAE,QAAgB;QACrD,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnB,CAAC;IAED,WAAW,CAAC,SAAoB,EAAE,QAAgB;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,IAAI,CAAC,aAAa,EAAE,CAAC;QACtB,CAAC;IACF,CAAC;IAED,UAAU,CAAC,SAAoB,EAAE,QAAgB;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,CAAC,aAAa,EAAE,CAAC;QACtB,CAAC;IACF,CAAC;IAED,iBAAiB;QAChB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAGD,KAAK,CAAC,KAAK;QACV,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,CAAC,eAAe,CAAC;QACrD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;IAOO,sBAAsB;QAC7B,MAAM,OAAO,GAAI,MAAM,CAAC,IAAI,CAAC,+BAAsB,CAAiB,CAAC,KAAK,CACzE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,MAAM,CACtC,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACd,0FAA0F,CAC1F,CAAC;QACH,CAAC;IACF,CAAC;IAEO,eAAe,CAAC,SAAoB,EAAE,QAAgB;QAC7D,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;IAClE,CAAC;IAEO,4BAA4B,CAAC,SAAoB;QACxD,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,EAAE,CAAC;YACT,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,CAAC;IACX,CAAC;IAEO,aAAa;QAEpB,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO;QAErC,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,OAAO;QACR,CAAC;QAGD,IAAI,CAAC,aAAa,KAAK,UAAU,CAAC,GAAG,EAAE;YACtC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,EAAE,CAAC;QACrB,CAAC,EAAE,6BAAqB,CAAC,CAAC;QAE1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,YAAY,EAAE,CAAC;QACrB,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACvB,CAAC;IAEO,YAAY;QACnB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE;aACnC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzB,eAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBAC7C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;QACJ,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACb,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC1B,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,CAAC;QACF,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,cAAc;QACrB,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;IACvB,CAAC;IAEO,cAAc;QACrB,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YACjC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACjC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC3B,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,OAAO;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC3E,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,KAAK;SACX,CAAC,CAAC;IACJ,CAAC;CACD;AAvMD,sCAuMC;AAMD,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC;YAAE,OAAO,aAAa,EAAE,CAAC;QAC/D,OAAO;YACN,GAAG,aAAa,EAAE;YAClB,GAAG,MAAM;SACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QAER,OAAO,aAAa,EAAE,CAAC;IACxB,CAAC;AACF,CAAC"}

package/dist/startup-config-cli.d.ts

@@ -0,0 +1,5 @@
+import type { GatewayConfig } from './config';
+import type { TemplateName } from './config-templates';
+export declare function runStartupConfigCli(config: GatewayConfig): Promise<GatewayConfig>;
+export declare function resolveTemplateName(raw: string | undefined): TemplateName;
+export declare function applyTemplate(config: GatewayConfig, templateName: TemplateName): GatewayConfig;