@nexus-cortex/core 4.26.0

package/dist/middleware/helpers/index.js

@@ -0,0 +1,13 @@
+/**
+ * Helper Model Middleware System
+ * Phase 1.5: Week 2 - Independent Helper Architecture
+ *
+ * Central exports for the independent helper middleware system.
+ */
+// Core interfaces and base classes
+export * from './HelperMiddlewareAdapter.interface.js';
+// Registry
+export * from './HelperModelMiddlewareRegistry.js';
+// Concrete adapters
+export * from './adapters/index.js';
+//# sourceMappingURL=index.js.map

package/dist/middleware/helpers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/middleware/helpers/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mCAAmC;AACnC,cAAc,wCAAwC,CAAC;AAEvD,WAAW;AACX,cAAc,oCAAoC,CAAC;AAEnD,oBAAoB;AACpB,cAAc,qBAAqB,CAAC"}

package/dist/middleware/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Middleware Components
+ * Modular middleware for the Cortex orchestrator
+ */
+export * from './HelperModelMiddleware.js';
+export * from './ErrorClassificationMiddleware.js';
+export * from './RetryMiddleware.js';
+export * from './PermissionsMiddleware.js';
+export * from './SystemMessageMiddleware.js';
+export * from './MentorshipMiddleware.js';
+export * from './permissions/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/middleware/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAG1C,cAAc,wBAAwB,CAAC"}

package/dist/middleware/index.js

@@ -0,0 +1,13 @@
+/**
+ * Middleware Components
+ * Modular middleware for the Cortex orchestrator
+ */
+export * from './HelperModelMiddleware.js';
+export * from './ErrorClassificationMiddleware.js';
+export * from './RetryMiddleware.js';
+export * from './PermissionsMiddleware.js';
+export * from './SystemMessageMiddleware.js';
+export * from './MentorshipMiddleware.js';
+// Export permissions system (policies, handlers, audit logger)
+export * from './permissions/index.js';
+//# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAE1C,+DAA+D;AAC/D,cAAc,wBAAwB,CAAC"}

package/dist/middleware/permissions/ApprovalHandler.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Approval Handler Interface
+ *
+ * Re-exports the approval handler types from middleware contracts.
+ * Provides a central import point for approval-related types.
+ *
+ * @module permissions/ApprovalHandler
+ */
+export type { ApprovalHandler, ApprovalRequest } from '../contracts/MiddlewareContracts.js';
+/**
+ * Approval timeout error
+ */
+export declare class ApprovalTimeoutError extends Error {
+    constructor(timeoutMs: number);
+}
+/**
+ * Approval rejected error
+ */
+export declare class ApprovalRejectedError extends Error {
+    constructor(reason?: string);
+}
+//# sourceMappingURL=ApprovalHandler.d.ts.map

package/dist/middleware/permissions/ApprovalHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApprovalHandler.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/ApprovalHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAE5F;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,SAAS,EAAE,MAAM;CAI9B;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,MAAM,CAAC,EAAE,MAAM;CAI5B"}

package/dist/middleware/permissions/ApprovalHandler.js

@@ -0,0 +1,27 @@
+/**
+ * Approval Handler Interface
+ *
+ * Re-exports the approval handler types from middleware contracts.
+ * Provides a central import point for approval-related types.
+ *
+ * @module permissions/ApprovalHandler
+ */
+/**
+ * Approval timeout error
+ */
+export class ApprovalTimeoutError extends Error {
+    constructor(timeoutMs) {
+        super(`Approval request timed out after ${timeoutMs}ms`);
+        this.name = 'ApprovalTimeoutError';
+    }
+}
+/**
+ * Approval rejected error
+ */
+export class ApprovalRejectedError extends Error {
+    constructor(reason) {
+        super(reason || 'Approval request was rejected');
+        this.name = 'ApprovalRejectedError';
+    }
+}
+//# sourceMappingURL=ApprovalHandler.js.map

package/dist/middleware/permissions/ApprovalHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApprovalHandler.js","sourceRoot":"","sources":["../../../src/middleware/permissions/ApprovalHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,SAAiB;QAC3B,KAAK,CAAC,oCAAoC,SAAS,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,MAAe;QACzB,KAAK,CAAC,MAAM,IAAI,+BAA+B,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF"}

package/dist/middleware/permissions/AutoApproveHandler.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Auto-Approve Handler
+ *
+ * Automatically approves all permission requests.
+ * Useful for testing, automation, and trusted environments.
+ *
+ * WARNING: This handler bypasses all security checks.
+ * Use only in controlled environments.
+ *
+ * @module permissions/AutoApproveHandler
+ */
+import type { ApprovalHandler, ApprovalRequest } from '../contracts/MiddlewareContracts.js';
+/**
+ * Options for auto-approve handler
+ */
+export interface AutoApproveHandlerOptions {
+    /**
+     * Whether to log approval requests
+     * @default true
+     */
+    enableLogging?: boolean;
+    /**
+     * Maximum number of auto-approvals per session
+     * @default Infinity
+     */
+    maxApprovals?: number;
+}
+/**
+ * Auto-approve handler that automatically allows all operations
+ *
+ * @example
+ * ```typescript
+ * const handler = new AutoApproveHandler({ enableLogging: true });
+ *
+ * const approved = await handler.requestApproval({
+ *   toolName: 'delete_file',
+ *   toolInput: { file_path: '/workspace/file.txt' },
+ *   reason: 'Delete operation requires approval',
+ *   timestamp: new Date()
+ * });
+ * // Returns: true (always)
+ * ```
+ */
+export declare class AutoApproveHandler implements ApprovalHandler {
+    private options;
+    private approvalCount;
+    constructor(options?: AutoApproveHandlerOptions);
+    /**
+     * Auto-approve the request (always returns true).
+     * Signal parameter accepted for API consistency but ignored — auto-approval is immediate.
+     */
+    requestApproval(request: ApprovalRequest, _signal?: AbortSignal): Promise<boolean>;
+    /**
+     * Get the number of approvals granted
+     */
+    getApprovalCount(): number;
+    /**
+     * Reset the approval counter
+     */
+    resetCounter(): void;
+}
+//# sourceMappingURL=AutoApproveHandler.d.ts.map

package/dist/middleware/permissions/AutoApproveHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AutoApproveHandler.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/AutoApproveHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAE5F;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,kBAAmB,YAAW,eAAe;IACxD,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,aAAa,CAAK;gBAEd,OAAO,GAAE,yBAA8B;IAOnD;;;OAGG;IACG,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAsBxF;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACH,YAAY,IAAI,IAAI;CAGrB"}

package/dist/middleware/permissions/AutoApproveHandler.js

@@ -0,0 +1,68 @@
+/**
+ * Auto-Approve Handler
+ *
+ * Automatically approves all permission requests.
+ * Useful for testing, automation, and trusted environments.
+ *
+ * WARNING: This handler bypasses all security checks.
+ * Use only in controlled environments.
+ *
+ * @module permissions/AutoApproveHandler
+ */
+/**
+ * Auto-approve handler that automatically allows all operations
+ *
+ * @example
+ * ```typescript
+ * const handler = new AutoApproveHandler({ enableLogging: true });
+ *
+ * const approved = await handler.requestApproval({
+ *   toolName: 'delete_file',
+ *   toolInput: { file_path: '/workspace/file.txt' },
+ *   reason: 'Delete operation requires approval',
+ *   timestamp: new Date()
+ * });
+ * // Returns: true (always)
+ * ```
+ */
+export class AutoApproveHandler {
+    options;
+    approvalCount = 0;
+    constructor(options = {}) {
+        this.options = {
+            enableLogging: options.enableLogging ?? true,
+            maxApprovals: options.maxApprovals ?? Infinity,
+        };
+    }
+    /**
+     * Auto-approve the request (always returns true).
+     * Signal parameter accepted for API consistency but ignored — auto-approval is immediate.
+     */
+    async requestApproval(request, _signal) {
+        this.approvalCount++;
+        if (this.options.enableLogging) {
+            console.log(`[AutoApprove] Automatically approving operation #${this.approvalCount}: ${request.toolName}`);
+        }
+        // Check if max approvals reached
+        if (this.approvalCount > this.options.maxApprovals) {
+            if (this.options.enableLogging) {
+                console.log(`[AutoApprove] Max approvals (${this.options.maxApprovals}) reached. Denying request.`);
+            }
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Get the number of approvals granted
+     */
+    getApprovalCount() {
+        return this.approvalCount;
+    }
+    /**
+     * Reset the approval counter
+     */
+    resetCounter() {
+        this.approvalCount = 0;
+    }
+}
+//# sourceMappingURL=AutoApproveHandler.js.map

package/dist/middleware/permissions/AutoApproveHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AutoApproveHandler.js","sourceRoot":"","sources":["../../../src/middleware/permissions/AutoApproveHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAqBH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,kBAAkB;IACrB,OAAO,CAAsC;IAC7C,aAAa,GAAG,CAAC,CAAC;IAE1B,YAAY,UAAqC,EAAE;QACjD,IAAI,CAAC,OAAO,GAAG;YACb,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,QAAQ;SAC/C,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,OAAwB,EAAE,OAAqB;QACnE,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CACT,oDAAoD,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC,QAAQ,EAAE,CAC9F,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CACT,gCAAgC,IAAI,CAAC,OAAO,CAAC,YAAY,6BAA6B,CACvF,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;IACzB,CAAC;CACF"}

package/dist/middleware/permissions/BashCommandPolicy.d.ts

@@ -0,0 +1,134 @@
+/**
+ * Bash Command Permission Policy
+ *
+ * Validates bash commands to prevent dangerous operations.
+ * Supports:
+ * - Dangerous pattern detection (rm -rf, sudo, etc.)
+ * - Command prefix whitelisting
+ * - Command prefix blacklisting
+ * - Approval requirements for dangerous operations
+ *
+ * Priority: HIGH (80) - Security-critical validation
+ *
+ * @module permissions/BashCommandPolicy
+ */
+import type { PermissionPolicy, PermissionDecision, PermissionContext } from '../contracts/MiddlewareContracts.js';
+import { BasePermissionPolicy } from './PermissionPolicy.js';
+/**
+ * Configuration options for bash command policy
+ */
+export interface BashCommandPolicyConfig {
+    /**
+     * Allowed command prefixes (whitelist mode)
+     * Empty array = all commands allowed (unless blocked or dangerous)
+     */
+    allowedCommands: string[];
+    /**
+     * Blocked command prefixes (blacklist mode)
+     * Commands starting with these are always denied
+     */
+    blockedCommands: string[];
+    /**
+     * Whether dangerous commands require approval
+     * @default true
+     */
+    requireApprovalForDangerous?: boolean;
+    /**
+     * Custom dangerous patterns to detect
+     * Added to the default dangerous patterns
+     */
+    customDangerousPatterns?: string[];
+}
+/**
+ * Bash command permission policy
+ *
+ * @example
+ * ```typescript
+ * const policy = new BashCommandPolicy({
+ *   allowedCommands: [],
+ *   blockedCommands: ['sudo', 'rm -rf /'],
+ *   requireApprovalForDangerous: true
+ * });
+ *
+ * await policy.evaluate({
+ *   toolName: 'execute_bash',
+ *   toolInput: { command: 'ls -la' },
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: true }
+ *
+ * await policy.evaluate({
+ *   toolName: 'execute_bash',
+ *   toolInput: { command: 'rm -rf /' },
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: false, reason: '...', canApprove: true/false }
+ * ```
+ */
+export declare class BashCommandPolicy extends BasePermissionPolicy implements PermissionPolicy {
+    private config;
+    private dangerousPatterns;
+    /**
+     * Round 9 (parallel-bench output): pre-lowercased copy of
+     * `dangerousPatterns` so `findDangerousPattern` doesn't lowercase the
+     * full pattern list on every Bash check. The original-cased array is
+     * preserved for the deny-reason text and for `getDangerousPatterns()`;
+     * this is parallel-indexed so we can map a lowercase hit back to the
+     * original casing.
+     *
+     * Bash policy fires on every Bash tool call — often 10-20× per multi-iter
+     * turn. With ~32 default patterns + customs, that's 320-640 string
+     * allocations per turn saved.
+     */
+    private dangerousPatternsLowercase;
+    /**
+     * Create a new bash command policy
+     *
+     * @param config Policy configuration
+     * @param priority Policy priority (default: PolicyPriority.HIGH)
+     * @param enabled Whether the policy is enabled (default: true)
+     */
+    constructor(config: BashCommandPolicyConfig, priority?: number, enabled?: boolean);
+    /**
+     * Evaluate bash command permission
+     */
+    evaluate(context: PermissionContext): Promise<PermissionDecision>;
+    /**
+     * Extract command from various tool input formats
+     */
+    private extractCommand;
+    /**
+     * Check if command starts with a blocked prefix
+     */
+    private isCommandBlocked;
+    /**
+     * Check if command starts with an allowed prefix
+     */
+    private isCommandAllowed;
+    /**
+     * Find dangerous pattern in command
+     * Returns the pattern if found, null otherwise
+     */
+    private findDangerousPattern;
+    /**
+     * Add a dangerous pattern
+     */
+    addDangerousPattern(pattern: string): void;
+    /**
+     * Add an allowed command prefix
+     */
+    addAllowedCommand(commandPrefix: string): void;
+    /**
+     * Add a blocked command prefix
+     */
+    addBlockedCommand(commandPrefix: string): void;
+    /**
+     * Get all dangerous patterns (default + custom)
+     */
+    getDangerousPatterns(): string[];
+    /**
+     * Get configuration
+     */
+    getConfig(): Readonly<Required<BashCommandPolicyConfig>>;
+}
+//# sourceMappingURL=BashCommandPolicy.d.ts.map

package/dist/middleware/permissions/BashCommandPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BashCommandPolicy.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/BashCommandPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAkB,MAAM,uBAAuB,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B;;;OAGG;IACH,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B;;;OAGG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAEtC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AA6CD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,iBACX,SAAQ,oBACR,YAAW,gBAAgB;IAE3B,OAAO,CAAC,MAAM,CAAoC;IAClD,OAAO,CAAC,iBAAiB,CAAW;IACpC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,0BAA0B,CAAW;IAE7C;;;;;;OAMG;gBAED,MAAM,EAAE,uBAAuB,EAC/B,QAAQ,GAAE,MAA4B,EACtC,OAAO,GAAE,OAAc;IAsBzB;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAqDvE;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAMxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAMxB;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;OAEG;IACH,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAQ1C;;OAEG;IACH,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI;IAM9C;;OAEG;IACH,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI;IAM9C;;OAEG;IACH,oBAAoB,IAAI,MAAM,EAAE;IAIhC;;OAEG;IACH,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;CAGzD"}

package/dist/middleware/permissions/BashCommandPolicy.js

@@ -0,0 +1,239 @@
+/**
+ * Bash Command Permission Policy
+ *
+ * Validates bash commands to prevent dangerous operations.
+ * Supports:
+ * - Dangerous pattern detection (rm -rf, sudo, etc.)
+ * - Command prefix whitelisting
+ * - Command prefix blacklisting
+ * - Approval requirements for dangerous operations
+ *
+ * Priority: HIGH (80) - Security-critical validation
+ *
+ * @module permissions/BashCommandPolicy
+ */
+import { BasePermissionPolicy, PolicyPriority } from './PermissionPolicy.js';
+/**
+ * Bash tools that this policy applies to
+ * (uses canonical PascalCase name as defined in toolDefinitions.ts)
+ */
+const BASH_TOOLS = new Set(['Bash']);
+/**
+ * Default dangerous command patterns
+ */
+const DEFAULT_DANGEROUS_PATTERNS = [
+    'rm -rf',
+    'rm -fr',
+    'sudo',
+    'chmod 777',
+    'chmod -R 777',
+    'mkfs',
+    '> /dev/',
+    'dd if=',
+    'dd of=',
+    'format',
+    'fdisk',
+    'parted',
+    ':(){:|:&};:', // Fork bomb
+    'curl | sh',
+    'wget | sh',
+    'curl | bash',
+    'wget | bash',
+    '> /etc/',
+    '> /sys/',
+    'shutdown',
+    'reboot',
+    'halt',
+    'poweroff',
+    'init 0',
+    'init 6',
+    'systemctl stop',
+    'systemctl disable',
+    'service stop',
+    'kill -9 1',
+    'killall -9',
+    'pkill -9',
+];
+/**
+ * Bash command permission policy
+ *
+ * @example
+ * ```typescript
+ * const policy = new BashCommandPolicy({
+ *   allowedCommands: [],
+ *   blockedCommands: ['sudo', 'rm -rf /'],
+ *   requireApprovalForDangerous: true
+ * });
+ *
+ * await policy.evaluate({
+ *   toolName: 'execute_bash',
+ *   toolInput: { command: 'ls -la' },
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: true }
+ *
+ * await policy.evaluate({
+ *   toolName: 'execute_bash',
+ *   toolInput: { command: 'rm -rf /' },
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: false, reason: '...', canApprove: true/false }
+ * ```
+ */
+export class BashCommandPolicy extends BasePermissionPolicy {
+    config;
+    dangerousPatterns;
+    /**
+     * Round 9 (parallel-bench output): pre-lowercased copy of
+     * `dangerousPatterns` so `findDangerousPattern` doesn't lowercase the
+     * full pattern list on every Bash check. The original-cased array is
+     * preserved for the deny-reason text and for `getDangerousPatterns()`;
+     * this is parallel-indexed so we can map a lowercase hit back to the
+     * original casing.
+     *
+     * Bash policy fires on every Bash tool call — often 10-20× per multi-iter
+     * turn. With ~32 default patterns + customs, that's 320-640 string
+     * allocations per turn saved.
+     */
+    dangerousPatternsLowercase;
+    /**
+     * Create a new bash command policy
+     *
+     * @param config Policy configuration
+     * @param priority Policy priority (default: PolicyPriority.HIGH)
+     * @param enabled Whether the policy is enabled (default: true)
+     */
+    constructor(config, priority = PolicyPriority.HIGH, enabled = true) {
+        super('bash-command', priority, enabled);
+        this.config = {
+            allowedCommands: config.allowedCommands,
+            blockedCommands: config.blockedCommands,
+            requireApprovalForDangerous: config.requireApprovalForDangerous ?? true,
+            customDangerousPatterns: config.customDangerousPatterns ?? [],
+        };
+        // Combine default and custom dangerous patterns
+        this.dangerousPatterns = [
+            ...DEFAULT_DANGEROUS_PATTERNS,
+            ...this.config.customDangerousPatterns,
+        ];
+        // Round 9: pre-lowercase once (see field-level doc above)
+        this.dangerousPatternsLowercase = this.dangerousPatterns.map((p) => p.toLowerCase());
+    }
+    /**
+     * Evaluate bash command permission
+     */
+    async evaluate(context) {
+        // Only apply to bash commands
+        if (!BASH_TOOLS.has(context.toolName)) {
+            return this.allow();
+        }
+        // Extract command from tool input
+        const command = this.extractCommand(context.toolInput);
+        if (!command) {
+            return this.deny('No command provided in tool input', false);
+        }
+        // Normalize command (trim and lowercase for pattern matching)
+        const normalizedCommand = command.trim();
+        const lowercaseCommand = normalizedCommand.toLowerCase();
+        // Check if command is empty
+        if (normalizedCommand.length === 0) {
+            return this.deny('Empty command provided', false);
+        }
+        // Check blocked commands first (highest priority)
+        if (this.isCommandBlocked(normalizedCommand)) {
+            return this.deny(`Command "${normalizedCommand}" is blocked by policy`, false // Hard block - no approval
+            );
+        }
+        // Check for dangerous patterns
+        const dangerousPattern = this.findDangerousPattern(lowercaseCommand);
+        if (dangerousPattern) {
+            return this.deny(`Command contains dangerous pattern: "${dangerousPattern}"`, this.config.requireApprovalForDangerous // Can approve if configured
+            );
+        }
+        // Check whitelist (if configured)
+        if (this.config.allowedCommands.length > 0 &&
+            !this.isCommandAllowed(normalizedCommand)) {
+            return this.deny(`Command "${normalizedCommand}" is not in the allowed commands list`, true // Can approve
+            );
+        }
+        return this.allow();
+    }
+    /**
+     * Extract command from various tool input formats
+     */
+    extractCommand(toolInput) {
+        if (typeof toolInput === 'string') {
+            return toolInput;
+        }
+        if (typeof toolInput === 'object' && toolInput !== null) {
+            // Try common field names
+            return toolInput.command || toolInput.cmd || toolInput.script || null;
+        }
+        return null;
+    }
+    /**
+     * Check if command starts with a blocked prefix
+     */
+    isCommandBlocked(command) {
+        return this.config.blockedCommands.some((blocked) => command.startsWith(blocked));
+    }
+    /**
+     * Check if command starts with an allowed prefix
+     */
+    isCommandAllowed(command) {
+        return this.config.allowedCommands.some((allowed) => command.startsWith(allowed));
+    }
+    /**
+     * Find dangerous pattern in command
+     * Returns the pattern if found, null otherwise
+     */
+    findDangerousPattern(command) {
+        // Round 9: iterate the pre-lowercased parallel array; return the
+        // original-cased pattern for the deny reason text.
+        for (let i = 0; i < this.dangerousPatternsLowercase.length; i++) {
+            if (command.includes(this.dangerousPatternsLowercase[i])) {
+                return this.dangerousPatterns[i];
+            }
+        }
+        return null;
+    }
+    /**
+     * Add a dangerous pattern
+     */
+    addDangerousPattern(pattern) {
+        if (!this.dangerousPatterns.includes(pattern)) {
+            this.dangerousPatterns.push(pattern);
+            // Round 9: keep the parallel pre-lowercased array in sync.
+            this.dangerousPatternsLowercase.push(pattern.toLowerCase());
+        }
+    }
+    /**
+     * Add an allowed command prefix
+     */
+    addAllowedCommand(commandPrefix) {
+        if (!this.config.allowedCommands.includes(commandPrefix)) {
+            this.config.allowedCommands.push(commandPrefix);
+        }
+    }
+    /**
+     * Add a blocked command prefix
+     */
+    addBlockedCommand(commandPrefix) {
+        if (!this.config.blockedCommands.includes(commandPrefix)) {
+            this.config.blockedCommands.push(commandPrefix);
+        }
+    }
+    /**
+     * Get all dangerous patterns (default + custom)
+     */
+    getDangerousPatterns() {
+        return [...this.dangerousPatterns];
+    }
+    /**
+     * Get configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+//# sourceMappingURL=BashCommandPolicy.js.map

package/dist/middleware/permissions/BashCommandPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BashCommandPolicy.js","sourceRoot":"","sources":["../../../src/middleware/permissions/BashCommandPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AA+B7E;;;GAGG;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAErC;;GAEG;AACH,MAAM,0BAA0B,GAAG;IACjC,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,WAAW;IACX,cAAc;IACd,MAAM;IACN,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,aAAa,EAAE,YAAY;IAC3B,WAAW;IACX,WAAW;IACX,aAAa;IACb,aAAa;IACb,SAAS;IACT,SAAS;IACT,UAAU;IACV,QAAQ;IACR,MAAM;IACN,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,gBAAgB;IAChB,mBAAmB;IACnB,cAAc;IACd,WAAW;IACX,YAAY;IACZ,UAAU;CACX,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,iBACX,SAAQ,oBAAoB;IAGpB,MAAM,CAAoC;IAC1C,iBAAiB,CAAW;IACpC;;;;;;;;;;;OAWG;IACK,0BAA0B,CAAW;IAE7C;;;;;;OAMG;IACH,YACE,MAA+B,EAC/B,WAAmB,cAAc,CAAC,IAAI,EACtC,UAAmB,IAAI;QAEvB,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,GAAG;YACZ,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,2BAA2B,EAAE,MAAM,CAAC,2BAA2B,IAAI,IAAI;YACvE,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,EAAE;SAC9D,CAAC;QAEF,gDAAgD;QAChD,IAAI,CAAC,iBAAiB,GAAG;YACvB,GAAG,0BAA0B;YAC7B,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB;SACvC,CAAC;QACF,0DAA0D;QAC1D,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACjE,CAAC,CAAC,WAAW,EAAE,CAChB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA0B;QACvC,8BAA8B;QAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,kCAAkC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;QAED,8DAA8D;QAC9D,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;QAEzD,4BAA4B;QAC5B,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAED,kDAAkD;QAClD,IAAI,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,IAAI,CACd,YAAY,iBAAiB,wBAAwB,EACrD,KAAK,CAAC,2BAA2B;aAClC,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QACrE,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,IAAI,CACd,wCAAwC,gBAAgB,GAAG,EAC3D,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,4BAA4B;aACrE,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,IACE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EACzC,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,CACd,YAAY,iBAAiB,uCAAuC,EACpE,IAAI,CAAC,cAAc;aACpB,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,SAAc;QACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxD,yBAAyB;YACzB,OAAO,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,GAAG,IAAI,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC;QACxE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAClD,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAClD,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAC5B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,oBAAoB,CAAC,OAAe;QAC1C,iEAAiE;QACjE,mDAAmD;QACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChE,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBAC1D,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAE,CAAC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,OAAe;QACjC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrC,2DAA2D;YAC3D,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,aAAqB;QACrC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,aAAqB;QACrC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB;QAClB,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF"}