@nexus-cortex/core 4.26.0

package/dist/middleware/permissions/DefaultPolicies.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Default Permission Policies for Nexus Cortex
+ *
+ * 3-Tier Permission System:
+ * - Whitelist (Green): Always approved, no prompt needed
+ * - Graylist (Yellow): Conditional approval based on "auto approve actions" setting
+ * - Blacklist (Red): ALWAYS requires explicit approval (except YOLO mode)
+ *
+ * @version 1.0.0
+ * @created 2025-11-13
+ */
+import type { PermissionPolicy } from '../contracts/MiddlewareContracts.js';
+/**
+ * Whitelist Policy: Safe research/read operations that never need approval
+ *
+ * Priority: 100 (medium)
+ * Tier: N/A (always allowed, no tier needed)
+ *
+ * Philosophy: Allow all non-destructive research operations without prompts
+ */
+export declare const whitelistPolicy: PermissionPolicy;
+/**
+ * Graylist Policy: Write/edit operations and non-whitelisted bash
+ *
+ * Priority: 50 (low)
+ * Tier: graylist
+ * Behavior:
+ * - Auto-approve ON: Executes without prompt
+ * - Auto-approve OFF: Requires explicit approval
+ *
+ * Note: Safe bash commands moved to whitelist - this catches everything else
+ */
+export declare const graylistPolicy: PermissionPolicy;
+/**
+ * Blacklist Policy: Dangerous operations that ALWAYS require approval
+ *
+ * Priority: 1000 (highest - evaluated first)
+ * Tier: blacklist
+ * Behavior:
+ * - ALWAYS requires explicit approval (even if auto-approve ON)
+ * - ONLY exception: YOLO=true bypasses all
+ */
+export declare const blacklistPolicy: PermissionPolicy;
+/**
+ * Default policy set for Nexus Cortex
+ *
+ * Order matters: Policies are evaluated in priority order (highest first)
+ * 1. Blacklist (priority 1000) - catches dangerous operations
+ * 2. Whitelist (priority 100) - allows safe read operations
+ * 3. Graylist (priority 50) - requires conditional approval for writes
+ */
+export declare const defaultPolicies: PermissionPolicy[];
+//# sourceMappingURL=DefaultPolicies.d.ts.map

package/dist/middleware/permissions/DefaultPolicies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DefaultPolicies.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/DefaultPolicies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAE5E;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,gBAoJ7B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,EAAE,gBAiC5B,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,EAAE,gBA+F7B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,gBAAgB,EAI7C,CAAC"}

package/dist/middleware/permissions/DefaultPolicies.js

@@ -0,0 +1,307 @@
+/**
+ * Default Permission Policies for Nexus Cortex
+ *
+ * 3-Tier Permission System:
+ * - Whitelist (Green): Always approved, no prompt needed
+ * - Graylist (Yellow): Conditional approval based on "auto approve actions" setting
+ * - Blacklist (Red): ALWAYS requires explicit approval (except YOLO mode)
+ *
+ * @version 1.0.0
+ * @created 2025-11-13
+ */
+/**
+ * Whitelist Policy: Safe research/read operations that never need approval
+ *
+ * Priority: 100 (medium)
+ * Tier: N/A (always allowed, no tier needed)
+ *
+ * Philosophy: Allow all non-destructive research operations without prompts
+ */
+export const whitelistPolicy = {
+    name: 'whitelist-safe-research-operations',
+    priority: 100,
+    enabled: true,
+    evaluate: async (context) => {
+        // Safe read-only tools - ALWAYS allowed without prompts
+        const whitelistTools = [
+            'Read',
+            'Grep',
+            'Glob',
+            'BashOutput',
+            'WebSearch',
+            'WebFetch',
+            'GetMcpConfig',
+            'ListAvailableMcpServers',
+            'SearchMcpServers',
+            'GetConversationSegment',
+            'ListCompactionBoundaries',
+            'ListSessions',
+            'LoadSession',
+            'RequestHistoricalContext',
+            'SearchConversationHistory',
+            'TodoList',
+            'SearchTools',
+        ];
+        if (whitelistTools.includes(context.toolName)) {
+            return {
+                allowed: true,
+                tier: 'whitelist', // Explicit approval - stop evaluating further policies
+            };
+        }
+        // Safe bash commands - ALWAYS allowed for research without prompts
+        if (context.toolName === 'Bash') {
+            const cmd = (context.toolInput?.command || '').trim();
+            // Read-only commands that are always safe
+            const safeReadCommands = [
+                'ls', 'dir', // List files
+                'pwd', // Print working directory
+                'whoami', 'id', // User info
+                'echo', // Print text
+                'cat', 'head', 'tail', 'less', 'more', // Read files
+                'grep', 'egrep', 'fgrep', 'rg', // Search
+                'find', 'locate', // Find files
+                'which', 'whereis', 'type', // Locate commands
+                'env', 'printenv', // Environment
+                'date', 'uptime', 'hostname', // System info
+                'uname', 'arch', // System info
+                'df', 'du', // Disk usage
+                'ps', 'top', 'htop', // Process info
+                'history', // Command history
+                'wc', 'sort', 'uniq', // Text processing
+                'diff', 'cmp', // File comparison
+                'stat', 'file', // File info
+                'tree', // Directory tree
+                // Git read-only operations (comprehensive list)
+                'git status', // Status (all variants: --porcelain, --short, etc.)
+                'git log', // Commit history (all variants)
+                'git diff', // Show changes (staged, unstaged, commits)
+                'git show', // Show commits, objects
+                'git branch', // List branches
+                'git remote', // List remotes
+                'git tag', // List tags
+                'git reflog', // Reference logs
+                'git blame', // Show who changed lines
+                'git describe', // Describe commits
+                'git ls-files', // List tracked files
+                'git ls-tree', // List tree objects
+                'git grep', // Search repository
+                'git config --list', // View config
+                'git config --get', // Get config value
+                'git rev-parse', // Parse revisions
+                'git symbolic-ref', // Read symbolic refs
+                'git for-each-ref', // Iterate refs
+                'git cat-file', // View objects
+                'git shortlog', // Summarize commits
+                'git count-objects', // Count objects
+                'git verify-commit', // Verify commits
+                'git verify-tag', // Verify tags
+                'git check-ignore', // Check gitignore
+                'git check-attr', // Check attributes
+                'git ls-remote', // List remote references
+                'git fetch --dry-run', // Dry-run fetch
+                'npm list', 'npm view', 'npm search', // NPM read ops
+                'npm run build', 'npm run test', 'npm test', // Build/test (typically safe)
+                'npm run lint', 'npm run typecheck', // Code quality checks
+                'node --version', 'npm --version', 'python --version', // Version info
+                'node -e', 'node --check', // Safe node execution (read-only eval/syntax check)
+                'tsc', 'tsc --noEmit', // TypeScript check (no output)
+                'eslint', 'prettier', // Linting/formatting (check mode)
+                'vitest', 'jest', 'mocha', // Test runners
+                'sqlite3', // Database queries (read-only if no write commands)
+                'jq', 'yq', // JSON/YAML processing
+                'awk', 'sed', // Text processing (when reading, not editing)
+                'curl -I', 'curl --head', // HEAD requests only
+                'ping', 'traceroute', 'dig', 'nslookup', // Network diagnostics (read-only)
+                'timeout', // Command wrapper
+                'time', // Command timing
+                'cd' // Change directory (safe)
+            ];
+            // Check if command matches any safe command (with or without args)
+            const isSafeCommand = safeReadCommands.some((safe) => {
+                // Exact match (e.g., "ls" === "ls")
+                if (cmd === safe)
+                    return true;
+                // Command with arguments (e.g., "ls -la" starts with "ls ")
+                // Works for both single-word ("ls") and multi-word ("git status") commands
+                if (cmd.startsWith(safe + ' '))
+                    return true;
+                return false;
+            });
+            // For compound commands (with &&, ||, |, ;), check if ALL parts are safe
+            // Safe operators: && (and), || (or), | (pipe), ; (sequence)
+            // Unsafe operators: >, >>, <, << (redirects)
+            const hasUnsafeOperators = cmd.match(/[<>]/);
+            if (hasUnsafeOperators) {
+                // Has redirects - not safe even if commands are safe
+                return { allowed: true }; // Pass-through to graylist
+            }
+            // Split by safe operators and check if all parts are safe commands
+            const commandParts = cmd.split(/\s*(?:&&|\|\||[|;])\s*/).filter(Boolean);
+            const allPartsAreSafe = commandParts.every((part) => {
+                const trimmed = part.trim();
+                return safeReadCommands.some((safe) => {
+                    // Check if this part matches a safe command
+                    return trimmed === safe || trimmed.startsWith(safe + ' ');
+                });
+            });
+            if (isSafeCommand || allPartsAreSafe) {
+                return {
+                    allowed: true,
+                    tier: 'whitelist', // Explicit approval - stop evaluating further policies
+                };
+            }
+        }
+        // Not a whitelist tool - pass to next policy
+        return { allowed: true }; // Pass-through (not handled by this policy)
+    },
+};
+/**
+ * Graylist Policy: Write/edit operations and non-whitelisted bash
+ *
+ * Priority: 50 (low)
+ * Tier: graylist
+ * Behavior:
+ * - Auto-approve ON: Executes without prompt
+ * - Auto-approve OFF: Requires explicit approval
+ *
+ * Note: Safe bash commands moved to whitelist - this catches everything else
+ */
+export const graylistPolicy = {
+    name: 'graylist-write-operations',
+    priority: 50,
+    enabled: true,
+    evaluate: async (context) => {
+        const graylistTools = ['Write', 'Edit', 'NotebookEdit'];
+        // File write/edit operations
+        if (graylistTools.includes(context.toolName)) {
+            return {
+                allowed: false,
+                reason: `${context.toolName} operation requires approval`,
+                canApprove: true,
+                tier: 'graylist', // Can be auto-approved
+            };
+        }
+        // Bash commands that weren't whitelisted (anything not read-only)
+        // Note: Safe commands are now in whitelist, so this catches:
+        // - npm install, git add/commit/push, etc.
+        if (context.toolName === 'Bash') {
+            return {
+                allowed: false,
+                reason: 'Bash command requires approval (not in safe whitelist)',
+                canApprove: true,
+                tier: 'graylist',
+            };
+        }
+        // Not a graylist tool - pass to next policy
+        return { allowed: true }; // Pass-through
+    },
+};
+/**
+ * Blacklist Policy: Dangerous operations that ALWAYS require approval
+ *
+ * Priority: 1000 (highest - evaluated first)
+ * Tier: blacklist
+ * Behavior:
+ * - ALWAYS requires explicit approval (even if auto-approve ON)
+ * - ONLY exception: YOLO=true bypasses all
+ */
+export const blacklistPolicy = {
+    name: 'blacklist-dangerous-operations',
+    priority: 1000, // Highest priority - checked first
+    enabled: true,
+    evaluate: async (context) => {
+        // Dangerous bash commands
+        if (context.toolName === 'Bash') {
+            const cmd = context.toolInput?.command || '';
+            const dangerousPatterns = [
+                'rm -rf',
+                'rm -fr',
+                'dd if=',
+                'mkfs',
+                ':(){:|:&};:', // Fork bomb
+                '> /dev/sd',
+                'chmod -R 777',
+                'chown -R',
+                'wget',
+                'curl',
+                'nc -l',
+                'python -m http.server',
+                'npm install -g',
+                'apt install',
+                'yum install',
+                'dnf install',
+                'pacman -S',
+                'systemctl',
+                'service ',
+                'reboot',
+                'shutdown',
+                'init ',
+                'kill -9',
+                'pkill -9',
+                'killall',
+            ];
+            const isDangerous = dangerousPatterns.some((pattern) => cmd.includes(pattern));
+            if (isDangerous) {
+                const previewCmd = cmd.substring(0, 50) + (cmd.length > 50 ? '...' : '');
+                return {
+                    allowed: false,
+                    reason: `DANGEROUS: ${previewCmd} - always requires approval`,
+                    canApprove: true,
+                    tier: 'blacklist', // ALWAYS requires approval
+                };
+            }
+        }
+        // System file access
+        if (['Write', 'Edit'].includes(context.toolName)) {
+            const filePath = context.toolInput?.file_path || '';
+            const systemPaths = ['/etc/', '/sys/', '/proc/', '/dev/', '/bin/', '/sbin/', '/usr/bin/', '/usr/sbin/'];
+            const isSystemFile = systemPaths.some((path) => filePath.startsWith(path));
+            if (isSystemFile) {
+                return {
+                    allowed: false,
+                    reason: `System file access forbidden: ${filePath}`,
+                    canApprove: true,
+                    tier: 'blacklist',
+                };
+            }
+        }
+        // Bash commands that modify system files.
+        // Only flag WRITE redirects (> or >>) to sensitive system paths.
+        // NOT flagged:
+        //   - Reads (cat /etc/os-release) — substring matching previously caused false positives
+        //   - Suppressing output to /dev/null (2>/dev/null, >/dev/null, &>/dev/null) — a
+        //     standard null sink, not a real file modification
+        if (context.toolName === 'Bash') {
+            const cmd = context.toolInput?.command || '';
+            // Match any redirect (`>` or `>>`, with or without a preceding `2`/`&` and optional space)
+            // that targets a sensitive system path. Explicitly exclude /dev/null.
+            // Examples matched:   `> /etc/passwd`, `>>/dev/sda`, `2>>/sys/...`, `&>/proc/x`
+            // Examples NOT matched: `cat /etc/os-release`, `2>/dev/null`, `>/dev/null`, `&>/dev/null`
+            const sensitiveWriteRegex = /(?:^|\s)[0-9&]?\s*>>?\s*(\/etc\/|\/sys\/|\/proc\/|\/bin\/|\/sbin\/|\/usr\/bin\/|\/usr\/sbin\/|\/dev\/(?!null\b))/;
+            if (sensitiveWriteRegex.test(cmd)) {
+                return {
+                    allowed: false,
+                    reason: 'System modification via Bash requires approval',
+                    canApprove: true,
+                    tier: 'blacklist',
+                };
+            }
+        }
+        // Not a blacklist operation - pass to next policy
+        return { allowed: true }; // Pass-through
+    },
+};
+/**
+ * Default policy set for Nexus Cortex
+ *
+ * Order matters: Policies are evaluated in priority order (highest first)
+ * 1. Blacklist (priority 1000) - catches dangerous operations
+ * 2. Whitelist (priority 100) - allows safe read operations
+ * 3. Graylist (priority 50) - requires conditional approval for writes
+ */
+export const defaultPolicies = [
+    blacklistPolicy, // Priority 1000 (checked first)
+    whitelistPolicy, // Priority 100
+    graylistPolicy, // Priority 50 (checked last)
+];
+//# sourceMappingURL=DefaultPolicies.js.map

package/dist/middleware/permissions/DefaultPolicies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DefaultPolicies.js","sourceRoot":"","sources":["../../../src/middleware/permissions/DefaultPolicies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAqB;IAC/C,IAAI,EAAE,oCAAoC;IAC1C,QAAQ,EAAE,GAAG;IACb,OAAO,EAAE,IAAI;IAEb,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1B,wDAAwD;QACxD,MAAM,cAAc,GAAG;YACrB,MAAM;YACN,MAAM;YACN,MAAM;YACN,YAAY;YACZ,WAAW;YACX,UAAU;YACV,cAAc;YACd,yBAAyB;YACzB,kBAAkB;YAClB,wBAAwB;YACxB,0BAA0B;YAC1B,cAAc;YACd,aAAa;YACb,0BAA0B;YAC1B,2BAA2B;YAC3B,UAAU;YACV,aAAa;SACd,CAAC;QAEF,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,WAAW,EAAE,uDAAuD;aAC3E,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEtD,0CAA0C;YAC1C,MAAM,gBAAgB,GAAG;gBACvB,IAAI,EAAE,KAAK,EAAY,aAAa;gBACpC,KAAK,EAAkB,0BAA0B;gBACjD,QAAQ,EAAE,IAAI,EAAS,YAAY;gBACnC,MAAM,EAAiB,aAAa;gBACpC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAG,aAAa;gBACrD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAU,SAAS;gBACjD,MAAM,EAAE,QAAQ,EAAO,aAAa;gBACpC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAG,kBAAkB;gBAC/C,KAAK,EAAE,UAAU,EAAM,cAAc;gBACrC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAG,cAAc;gBAC7C,OAAO,EAAE,MAAM,EAAQ,cAAc;gBACrC,IAAI,EAAE,IAAI,EAAa,aAAa;gBACpC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAI,eAAe;gBACtC,SAAS,EAAc,kBAAkB;gBACzC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAG,kBAAkB;gBACzC,MAAM,EAAE,KAAK,EAAU,kBAAkB;gBACzC,MAAM,EAAE,MAAM,EAAS,YAAY;gBACnC,MAAM,EAAiB,iBAAiB;gBAExC,gDAAgD;gBAChD,YAAY,EAAW,oDAAoD;gBAC3E,SAAS,EAAc,gCAAgC;gBACvD,UAAU,EAAa,2CAA2C;gBAClE,UAAU,EAAa,wBAAwB;gBAC/C,YAAY,EAAW,gBAAgB;gBACvC,YAAY,EAAW,eAAe;gBACtC,SAAS,EAAc,YAAY;gBACnC,YAAY,EAAW,iBAAiB;gBACxC,WAAW,EAAY,yBAAyB;gBAChD,cAAc,EAAS,mBAAmB;gBAC1C,cAAc,EAAS,qBAAqB;gBAC5C,aAAa,EAAU,oBAAoB;gBAC3C,UAAU,EAAa,oBAAoB;gBAC3C,mBAAmB,EAAI,cAAc;gBACrC,kBAAkB,EAAK,mBAAmB;gBAC1C,eAAe,EAAQ,kBAAkB;gBACzC,kBAAkB,EAAK,qBAAqB;gBAC5C,kBAAkB,EAAK,eAAe;gBACtC,cAAc,EAAS,eAAe;gBACtC,cAAc,EAAS,oBAAoB;gBAC3C,mBAAmB,EAAI,gBAAgB;gBACvC,mBAAmB,EAAI,iBAAiB;gBACxC,gBAAgB,EAAO,cAAc;gBACrC,kBAAkB,EAAK,kBAAkB;gBACzC,gBAAgB,EAAO,mBAAmB;gBAC1C,eAAe,EAAQ,yBAAyB;gBAChD,qBAAqB,EAAE,gBAAgB;gBACvC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAc,eAAe;gBACjE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAO,8BAA8B;gBAChF,cAAc,EAAE,mBAAmB,EAAe,sBAAsB;gBACxE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAG,eAAe;gBACvE,SAAS,EAAE,cAAc,EAAG,oDAAoD;gBAChF,KAAK,EAAE,cAAc,EAAO,+BAA+B;gBAC3D,QAAQ,EAAE,UAAU,EAAQ,kCAAkC;gBAC9D,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAG,eAAe;gBAC3C,SAAS,EAAc,oDAAoD;gBAC3E,IAAI,EAAE,IAAI,EAAa,uBAAuB;gBAC9C,KAAK,EAAE,KAAK,EAAW,8CAA8C;gBACrE,SAAS,EAAE,aAAa,EAAG,qBAAqB;gBAChD,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAG,kCAAkC;gBAC5E,SAAS,EAAc,kBAAkB;gBACzC,MAAM,EAAiB,iBAAiB;gBACxC,IAAI,CAAC,0BAA0B;aAChC,CAAC;YAEF,mEAAmE;YACnE,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;gBACnD,oCAAoC;gBACpC,IAAI,GAAG,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;gBAE9B,4DAA4D;gBAC5D,2EAA2E;gBAC3E,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAE5C,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,yEAAyE;YACzE,4DAA4D;YAC5D,6CAA6C;YAC7C,MAAM,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAE7C,IAAI,kBAAkB,EAAE,CAAC;gBACvB,qDAAqD;gBACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,2BAA2B;YACvD,CAAC;YAED,mEAAmE;YACnE,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzE,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAY,EAAE,EAAE;gBAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;oBACpC,4CAA4C;oBAC5C,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;gBAC5D,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,aAAa,IAAI,eAAe,EAAE,CAAC;gBACrC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,WAAW,EAAE,uDAAuD;iBAC3E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,4CAA4C;IACxE,CAAC;CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAqB;IAC9C,IAAI,EAAE,2BAA2B;IACjC,QAAQ,EAAE,EAAE;IACZ,OAAO,EAAE,IAAI;IAEb,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1B,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QAExD,6BAA6B;QAC7B,IAAI,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,8BAA8B;gBACzD,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,UAAU,EAAE,uBAAuB;aAC1C,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,6DAA6D;QAC7D,2CAA2C;QAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,wDAAwD;gBAChE,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,UAAU;aACjB,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,eAAe;IAC3C,CAAC;CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAqB;IAC/C,IAAI,EAAE,gCAAgC;IACtC,QAAQ,EAAE,IAAI,EAAE,mCAAmC;IACnD,OAAO,EAAE,IAAI;IAEb,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1B,0BAA0B;QAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC;YAC7C,MAAM,iBAAiB,GAAG;gBACxB,QAAQ;gBACR,QAAQ;gBACR,QAAQ;gBACR,MAAM;gBACN,aAAa,EAAE,YAAY;gBAC3B,WAAW;gBACX,cAAc;gBACd,UAAU;gBACV,MAAM;gBACN,MAAM;gBACN,OAAO;gBACP,uBAAuB;gBACvB,gBAAgB;gBAChB,aAAa;gBACb,aAAa;gBACb,aAAa;gBACb,WAAW;gBACX,WAAW;gBACX,UAAU;gBACV,QAAQ;gBACR,UAAU;gBACV,OAAO;gBACP,SAAS;gBACT,UAAU;gBACV,SAAS;aACV,CAAC;YAEF,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAE/E,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,cAAc,UAAU,6BAA6B;oBAC7D,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,WAAW,EAAE,2BAA2B;iBAC/C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;YAExG,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAE3E,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,iCAAiC,QAAQ,EAAE;oBACnD,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,WAAW;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,iEAAiE;QACjE,eAAe;QACf,yFAAyF;QACzF,iFAAiF;QACjF,uDAAuD;QACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC;YAE7C,2FAA2F;YAC3F,sEAAsE;YACtE,gFAAgF;YAChF,0FAA0F;YAC1F,MAAM,mBAAmB,GAAG,kHAAkH,CAAC;YAE/I,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,gDAAgD;oBACxD,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,WAAW;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,eAAe;IAC3C,CAAC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuB;IACjD,eAAe,EAAE,gCAAgC;IACjD,eAAe,EAAE,eAAe;IAChC,cAAc,EAAE,6BAA6B;CAC9C,CAAC"}

package/dist/middleware/permissions/DenyAllHandler.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Deny-All Handler
+ *
+ * Automatically denies all permission requests.
+ * Useful for strict security environments and testing.
+ *
+ * @module permissions/DenyAllHandler
+ */
+import type { ApprovalHandler, ApprovalRequest } from '../contracts/MiddlewareContracts.js';
+/**
+ * Options for deny-all handler
+ */
+export interface DenyAllHandlerOptions {
+    /**
+     * Whether to log denial requests
+     * @default true
+     */
+    enableLogging?: boolean;
+    /**
+     * Custom denial message
+     */
+    customMessage?: string;
+}
+/**
+ * Deny-all handler that automatically rejects all operations
+ *
+ * @example
+ * ```typescript
+ * const handler = new DenyAllHandler({ enableLogging: true });
+ *
+ * const approved = await handler.requestApproval({
+ *   toolName: 'delete_file',
+ *   toolInput: { file_path: '/workspace/file.txt' },
+ *   reason: 'Delete operation requires approval',
+ *   timestamp: new Date()
+ * });
+ * // Returns: false (always)
+ * ```
+ */
+export declare class DenyAllHandler implements ApprovalHandler {
+    private options;
+    private denialCount;
+    constructor(options?: DenyAllHandlerOptions);
+    /**
+     * Deny the request (always returns false).
+     * Signal parameter accepted for API consistency but ignored — denial is immediate.
+     */
+    requestApproval(request: ApprovalRequest, _signal?: AbortSignal): Promise<boolean>;
+    /**
+     * Get the number of denials
+     */
+    getDenialCount(): number;
+    /**
+     * Reset the denial counter
+     */
+    resetCounter(): void;
+}
+//# sourceMappingURL=DenyAllHandler.d.ts.map

package/dist/middleware/permissions/DenyAllHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DenyAllHandler.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/DenyAllHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAE5F;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,cAAe,YAAW,eAAe;IACpD,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,WAAW,CAAK;gBAEZ,OAAO,GAAE,qBAA0B;IAQ/C;;;OAGG;IACG,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAaxF;;OAEG;IACH,cAAc,IAAI,MAAM;IAIxB;;OAEG;IACH,YAAY,IAAI,IAAI;CAGrB"}

package/dist/middleware/permissions/DenyAllHandler.js

@@ -0,0 +1,59 @@
+/**
+ * Deny-All Handler
+ *
+ * Automatically denies all permission requests.
+ * Useful for strict security environments and testing.
+ *
+ * @module permissions/DenyAllHandler
+ */
+/**
+ * Deny-all handler that automatically rejects all operations
+ *
+ * @example
+ * ```typescript
+ * const handler = new DenyAllHandler({ enableLogging: true });
+ *
+ * const approved = await handler.requestApproval({
+ *   toolName: 'delete_file',
+ *   toolInput: { file_path: '/workspace/file.txt' },
+ *   reason: 'Delete operation requires approval',
+ *   timestamp: new Date()
+ * });
+ * // Returns: false (always)
+ * ```
+ */
+export class DenyAllHandler {
+    options;
+    denialCount = 0;
+    constructor(options = {}) {
+        this.options = {
+            enableLogging: options.enableLogging ?? true,
+            customMessage: options.customMessage ?? 'All approval requests are denied by policy',
+        };
+    }
+    /**
+     * Deny the request (always returns false).
+     * Signal parameter accepted for API consistency but ignored — denial is immediate.
+     */
+    async requestApproval(request, _signal) {
+        this.denialCount++;
+        if (this.options.enableLogging) {
+            console.log(`[DenyAll] Denying operation #${this.denialCount}: ${request.toolName}`);
+            console.log(`[DenyAll] Reason: ${this.options.customMessage}`);
+        }
+        return false;
+    }
+    /**
+     * Get the number of denials
+     */
+    getDenialCount() {
+        return this.denialCount;
+    }
+    /**
+     * Reset the denial counter
+     */
+    resetCounter() {
+        this.denialCount = 0;
+    }
+}
+//# sourceMappingURL=DenyAllHandler.js.map

package/dist/middleware/permissions/DenyAllHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DenyAllHandler.js","sourceRoot":"","sources":["../../../src/middleware/permissions/DenyAllHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAoBH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,cAAc;IACjB,OAAO,CAAkC;IACzC,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,UAAiC,EAAE;QAC7C,IAAI,CAAC,OAAO,GAAG;YACb,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,aAAa,EACX,OAAO,CAAC,aAAa,IAAI,4CAA4C;SACxE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,OAAwB,EAAE,OAAqB;QACnE,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CACT,gCAAgC,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,QAAQ,EAAE,CACxE,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;IACvB,CAAC;CACF"}

package/dist/middleware/permissions/FileOperationPolicy.d.ts

@@ -0,0 +1,117 @@
+/**
+ * File Operation Permission Policy
+ *
+ * Validates file paths and operations to prevent unauthorized access.
+ * Supports:
+ * - Allowed path prefixes
+ * - Blocked path patterns
+ * - Path traversal detection
+ * - Delete operation approval requirements
+ * - Glob pattern matching
+ *
+ * Priority: HIGH (80) - Security-critical validation
+ *
+ * @module permissions/FileOperationPolicy
+ */
+import type { PermissionPolicy, PermissionDecision, PermissionContext } from '../contracts/MiddlewareContracts.js';
+import { BasePermissionPolicy } from './PermissionPolicy.js';
+/**
+ * Configuration options for file operation policy
+ */
+export interface FileOperationPolicyConfig {
+    /**
+     * Allowed path prefixes (operations outside these are denied)
+     * Empty array = all paths allowed (unless blocked)
+     */
+    allowedPaths: string[];
+    /**
+     * Blocked path patterns (absolute deny)
+     * These paths are blocked even if in allowedPaths
+     */
+    blockedPaths: string[];
+    /**
+     * Whether delete operations require approval
+     * @default true
+     */
+    requireApprovalForDelete?: boolean;
+    /**
+     * Whether write operations require approval
+     * @default false
+     */
+    requireApprovalForWrite?: boolean;
+    /**
+     * Maximum file path length allowed
+     * @default 4096
+     */
+    maxPathLength?: number;
+}
+/**
+ * File operation permission policy
+ *
+ * @example
+ * ```typescript
+ * const policy = new FileOperationPolicy({
+ *   allowedPaths: ['/home/user/workspace'],
+ *   blockedPaths: ['/etc', '/root'],
+ *   requireApprovalForDelete: true
+ * });
+ *
+ * await policy.evaluate({
+ *   toolName: 'read_file',
+ *   toolInput: { file_path: '/home/user/workspace/file.txt' },
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: true }
+ *
+ * await policy.evaluate({
+ *   toolName: 'read_file',
+ *   toolInput: { file_path: '/etc/passwd' },
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: false, reason: '...', canApprove: false }
+ * ```
+ */
+export declare class FileOperationPolicy extends BasePermissionPolicy implements PermissionPolicy {
+    private config;
+    /**
+     * Create a new file operation policy
+     *
+     * @param config Policy configuration
+     * @param priority Policy priority (default: PolicyPriority.HIGH)
+     * @param enabled Whether the policy is enabled (default: true)
+     */
+    constructor(config: FileOperationPolicyConfig, priority?: number, enabled?: boolean);
+    /**
+     * Evaluate file operation permission
+     */
+    evaluate(context: PermissionContext): Promise<PermissionDecision>;
+    /**
+     * Extract file path from various tool input formats
+     */
+    private extractFilePath;
+    /**
+     * Check if path contains traversal patterns
+     */
+    private hasPathTraversal;
+    /**
+     * Check if path is blocked
+     */
+    private isPathBlocked;
+    /**
+     * Check if path is in allowed paths
+     */
+    private isPathAllowed;
+    /**
+     * Add an allowed path
+     */
+    addAllowedPath(pathPrefix: string): void;
+    /**
+     * Add a blocked path
+     */
+    addBlockedPath(pathPrefix: string): void;
+    /**
+     * Get configuration
+     */
+    getConfig(): Readonly<Required<FileOperationPolicyConfig>>;
+}
+//# sourceMappingURL=FileOperationPolicy.d.ts.map

package/dist/middleware/permissions/FileOperationPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileOperationPolicy.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/FileOperationPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAkB,MAAM,uBAAuB,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB;;;OAGG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB;;;OAGG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAEnC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAElC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA8BD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,mBACX,SAAQ,oBACR,YAAW,gBAAgB;IAE3B,OAAO,CAAC,MAAM,CAAsC;IAEpD;;;;;;OAMG;gBAED,MAAM,EAAE,yBAAyB,EACjC,QAAQ,GAAE,MAA4B,EACtC,OAAO,GAAE,OAAc;IAmBzB;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAmEvE;;OAEG;IACH,OAAO,CAAC,eAAe;IAmBvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAKxB;;OAEG;IACH,OAAO,CAAC,aAAa;IAuBrB;;OAEG;IACH,OAAO,CAAC,aAAa;IAYrB;;OAEG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAOxC;;OAEG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAOxC;;OAEG;IACH,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;CAG3D"}