@nexus-cortex/core 4.26.0

package/dist/middleware/permissions/PermissionPolicy.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Permission Policy Base Types
+ *
+ * Re-exports the base permission policy types from the middleware contracts.
+ * This file serves as a central point for policy-related types and constants.
+ *
+ * @module permissions/PermissionPolicy
+ */
+export type { PermissionPolicy, PermissionDecision, PermissionContext, PermissionAuditEntry, } from '../contracts/MiddlewareContracts.js';
+/**
+ * Policy priority levels
+ * Higher numbers = higher priority (evaluated first)
+ */
+export declare const PolicyPriority: {
+    /** Critical security blocks (e.g., blacklist) */
+    readonly CRITICAL: 100;
+    /** High priority validation (e.g., file path, command validation) */
+    readonly HIGH: 80;
+    /** Medium priority (e.g., custom policies) */
+    readonly MEDIUM: 60;
+    /** Low priority (e.g., whitelist) */
+    readonly LOW: 40;
+    /** Default allow fallback */
+    readonly DEFAULT: 20;
+};
+/**
+ * Policy evaluation modes
+ */
+export declare enum PolicyEvaluationMode {
+    /** First deny wins, all must allow */
+    FIRST_DENY = "first_deny",
+    /** First allow wins (permissive) */
+    FIRST_ALLOW = "first_allow",
+    /** All policies must allow (strict) */
+    ALL_ALLOW = "all_allow"
+}
+/**
+ * Base abstract class for permission policies
+ * Provides common functionality for all policy implementations
+ */
+export declare abstract class BasePermissionPolicy {
+    readonly name: string;
+    readonly priority: number;
+    enabled: boolean;
+    constructor(name: string, priority: number, enabled?: boolean);
+    /**
+     * Abstract evaluate method - must be implemented by subclasses
+     */
+    abstract evaluate(context: import('../contracts/MiddlewareContracts.js').PermissionContext): Promise<import('../contracts/MiddlewareContracts.js').PermissionDecision>;
+    /**
+     * Helper method to create an allowed decision
+     */
+    protected allow(): import('../contracts/MiddlewareContracts.js').PermissionDecision;
+    /**
+     * Helper method to create a denied decision
+     */
+    protected deny(reason: string, canApprove?: boolean): import('../contracts/MiddlewareContracts.js').PermissionDecision;
+}
+//# sourceMappingURL=PermissionPolicy.d.ts.map

package/dist/middleware/permissions/PermissionPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionPolicy.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/PermissionPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qCAAqC,CAAC;AAE7C;;;GAGG;AACH,eAAO,MAAM,cAAc;IACzB,iDAAiD;;IAGjD,qEAAqE;;IAGrE,8CAA8C;;IAG9C,qCAAqC;;IAGrC,6BAA6B;;CAErB,CAAC;AAEX;;GAEG;AACH,oBAAY,oBAAoB;IAC9B,sCAAsC;IACtC,UAAU,eAAe;IAEzB,oCAAoC;IACpC,WAAW,gBAAgB;IAE3B,uCAAuC;IACvC,SAAS,cAAc;CACxB;AAED;;;GAGG;AACH,8BAAsB,oBAAoB;aAEtB,IAAI,EAAE,MAAM;aACZ,QAAQ,EAAE,MAAM;IACzB,OAAO,EAAE,OAAO;gBAFP,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EACzB,OAAO,GAAE,OAAc;IAGhC;;OAEG;IACH,QAAQ,CAAC,QAAQ,CACf,OAAO,EAAE,OAAO,qCAAqC,EAAE,iBAAiB,GACvE,OAAO,CAAC,OAAO,qCAAqC,EAAE,kBAAkB,CAAC;IAE5E;;OAEG;IACH,SAAS,CAAC,KAAK,IAAI,OAAO,qCAAqC,EAAE,kBAAkB;IAInF;;OAEG;IACH,SAAS,CAAC,IAAI,CACZ,MAAM,EAAE,MAAM,EACd,UAAU,GAAE,OAAe,GAC1B,OAAO,qCAAqC,EAAE,kBAAkB;CAOpE"}

package/dist/middleware/permissions/PermissionPolicy.js

@@ -0,0 +1,67 @@
+/**
+ * Permission Policy Base Types
+ *
+ * Re-exports the base permission policy types from the middleware contracts.
+ * This file serves as a central point for policy-related types and constants.
+ *
+ * @module permissions/PermissionPolicy
+ */
+/**
+ * Policy priority levels
+ * Higher numbers = higher priority (evaluated first)
+ */
+export const PolicyPriority = {
+    /** Critical security blocks (e.g., blacklist) */
+    CRITICAL: 100,
+    /** High priority validation (e.g., file path, command validation) */
+    HIGH: 80,
+    /** Medium priority (e.g., custom policies) */
+    MEDIUM: 60,
+    /** Low priority (e.g., whitelist) */
+    LOW: 40,
+    /** Default allow fallback */
+    DEFAULT: 20,
+};
+/**
+ * Policy evaluation modes
+ */
+export var PolicyEvaluationMode;
+(function (PolicyEvaluationMode) {
+    /** First deny wins, all must allow */
+    PolicyEvaluationMode["FIRST_DENY"] = "first_deny";
+    /** First allow wins (permissive) */
+    PolicyEvaluationMode["FIRST_ALLOW"] = "first_allow";
+    /** All policies must allow (strict) */
+    PolicyEvaluationMode["ALL_ALLOW"] = "all_allow";
+})(PolicyEvaluationMode || (PolicyEvaluationMode = {}));
+/**
+ * Base abstract class for permission policies
+ * Provides common functionality for all policy implementations
+ */
+export class BasePermissionPolicy {
+    name;
+    priority;
+    enabled;
+    constructor(name, priority, enabled = true) {
+        this.name = name;
+        this.priority = priority;
+        this.enabled = enabled;
+    }
+    /**
+     * Helper method to create an allowed decision
+     */
+    allow() {
+        return { allowed: true };
+    }
+    /**
+     * Helper method to create a denied decision
+     */
+    deny(reason, canApprove = false) {
+        return {
+            allowed: false,
+            reason,
+            canApprove,
+        };
+    }
+}
+//# sourceMappingURL=PermissionPolicy.js.map

package/dist/middleware/permissions/PermissionPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionPolicy.js","sourceRoot":"","sources":["../../../src/middleware/permissions/PermissionPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,iDAAiD;IACjD,QAAQ,EAAE,GAAG;IAEb,qEAAqE;IACrE,IAAI,EAAE,EAAE;IAER,8CAA8C;IAC9C,MAAM,EAAE,EAAE;IAEV,qCAAqC;IACrC,GAAG,EAAE,EAAE;IAEP,6BAA6B;IAC7B,OAAO,EAAE,EAAE;CACH,CAAC;AAEX;;GAEG;AACH,MAAM,CAAN,IAAY,oBASX;AATD,WAAY,oBAAoB;IAC9B,sCAAsC;IACtC,iDAAyB,CAAA;IAEzB,oCAAoC;IACpC,mDAA2B,CAAA;IAE3B,uCAAuC;IACvC,+CAAuB,CAAA;AACzB,CAAC,EATW,oBAAoB,KAApB,oBAAoB,QAS/B;AAED;;;GAGG;AACH,MAAM,OAAgB,oBAAoB;IAEtB;IACA;IACT;IAHT,YACkB,IAAY,EACZ,QAAgB,EACzB,UAAmB,IAAI;QAFd,SAAI,GAAJ,IAAI,CAAQ;QACZ,aAAQ,GAAR,QAAQ,CAAQ;QACzB,YAAO,GAAP,OAAO,CAAgB;IAC7B,CAAC;IASJ;;OAEG;IACO,KAAK;QACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACO,IAAI,CACZ,MAAc,EACd,aAAsB,KAAK;QAE3B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM;YACN,UAAU;SACX,CAAC;IACJ,CAAC;CACF"}

package/dist/middleware/permissions/PermissionProfileStore.d.ts

@@ -0,0 +1,77 @@
+import { type PermissionProfileName } from './profilePath.js';
+/** Priority for a grant (whitelist) — matches the prior in-memory registration. */
+export declare const GRANT_PRIORITY = 40;
+/** Priority for a revoke (blacklist) — matches the prior in-memory registration. */
+export declare const REVOKE_PRIORITY = 100;
+export interface ProfilePolicyEntry {
+    type: 'whitelist' | 'blacklist' | 'file-operation' | 'bash-command' | 'custom';
+    config: Record<string, unknown>;
+    priority?: number;
+    enabled?: boolean;
+}
+export interface PermissionProfile {
+    $comment?: string;
+    enabled: boolean;
+    defaultPolicy: 'allow' | 'deny';
+    policies: ProfilePolicyEntry[];
+    approvalHandler?: string;
+    auditLog?: {
+        enabled: boolean;
+        path: string;
+    };
+}
+/** A flattened policy summary for display (matches the CLI's render shape). */
+export interface ProfilePolicySummary {
+    name: string;
+    priority: number | null;
+    enabled: boolean;
+    tools: string[];
+}
+/**
+ * Path the store reads/writes: the PROJECT-level profile file only. We
+ * deliberately do NOT consult the global `~/.cortex` fallback that
+ * resolvePermissionProfilePath() uses for startup READS — a `cortex permissions
+ * grant` in one project must never silently mutate the user's global profile.
+ * Prefers an existing project file (dotted or subdir form); defaults to the
+ * dotted form when none exists yet.
+ */
+export declare function resolveWriteTarget(projectRoot: string, profile: PermissionProfileName): string;
+/** Read the project-level profile, returning a skeleton if no file exists yet. */
+export declare function readProfile(projectRoot: string, profile: PermissionProfileName): PermissionProfile;
+/**
+ * Grant a tool: add it to the profile's whitelist (creating the policy if
+ * absent) and remove it from any blacklist so the grant takes effect.
+ * Returns the path written and whether the file actually changed.
+ */
+export declare function grantToolInProfile(projectRoot: string, profile: PermissionProfileName, toolName: string): {
+    path: string;
+    profile: PermissionProfileName;
+    changed: boolean;
+};
+/**
+ * Revoke a tool: add it to the profile's blacklist (creating the policy if
+ * absent) and remove it from any whitelist.
+ */
+export declare function revokeToolInProfile(projectRoot: string, profile: PermissionProfileName, toolName: string): {
+    path: string;
+    profile: PermissionProfileName;
+    changed: boolean;
+};
+/**
+ * Read the profile's approval handler ('cli' | 'auto-approve' | 'deny-all').
+ * Defaults to 'auto-approve' when no profile/handler is set.
+ */
+export declare function getApprovalHandlerFromProfile(projectRoot: string, profile: PermissionProfileName): string;
+/**
+ * Persist the profile's approval handler. Returns the path written, the
+ * resulting handler, and whether the file actually changed.
+ */
+export declare function setApprovalHandlerInProfile(projectRoot: string, profile: PermissionProfileName, handler: 'cli' | 'auto-approve' | 'deny-all'): {
+    path: string;
+    profile: PermissionProfileName;
+    handler: string;
+    changed: boolean;
+};
+/** Summarize the profile's policies for display (used by list/tools commands). */
+export declare function listProfilePolicies(projectRoot: string, profile: PermissionProfileName): ProfilePolicySummary[];
+//# sourceMappingURL=PermissionProfileStore.d.ts.map

package/dist/middleware/permissions/PermissionProfileStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionProfileStore.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/PermissionProfileStore.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE9D,mFAAmF;AACnF,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,oFAAoF;AACpF,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,gBAAgB,GAAG,cAAc,GAAG,QAAQ,CAAC;IAC/E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,OAAO,GAAG,MAAM,CAAC;IAChC,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAED,+EAA+E;AAC/E,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAWD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,GAC7B,MAAM,CAMR;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,GAC7B,iBAAiB,CAcnB;AA2BD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,EAC9B,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAmBpE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,EAC9B,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAkBpE;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,GAC7B,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,KAAK,GAAG,cAAc,GAAG,UAAU,GAC3C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CASrF;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,GAC7B,oBAAoB,EAAE,CAcxB"}

package/dist/middleware/permissions/PermissionProfileStore.js

@@ -0,0 +1,167 @@
+/**
+ * PermissionProfileStore
+ *
+ * File-backed read/modify/write for permission profile JSON
+ * (`.cortex/permissions.<profile>.json`). This is the only mechanism that
+ * persists permission changes for the headless CLI — the orchestrator loads
+ * these files at startup via PermissionConfigLoader, so editing them durably
+ * grants/revokes tools across invocations.
+ *
+ * Serialization matches exactly what PermissionConfigLoader.createPolicy()
+ * expects:
+ *   - whitelist: { type:'whitelist', config:{ allowedTools: string[] }, priority }
+ *   - blacklist: { type:'blacklist', config:{ blockedTools: string[] }, priority }
+ *
+ * Priorities mirror the in-memory policies OrchestratorClient previously
+ * registered (WhitelistPolicy priority 40, BlacklistPolicy priority 100) so
+ * file-backed and runtime behavior agree.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+/** Priority for a grant (whitelist) — matches the prior in-memory registration. */
+export const GRANT_PRIORITY = 40;
+/** Priority for a revoke (blacklist) — matches the prior in-memory registration. */
+export const REVOKE_PRIORITY = 100;
+function skeleton() {
+    return {
+        enabled: true,
+        defaultPolicy: 'allow',
+        policies: [],
+        approvalHandler: 'auto-approve',
+    };
+}
+/**
+ * Path the store reads/writes: the PROJECT-level profile file only. We
+ * deliberately do NOT consult the global `~/.cortex` fallback that
+ * resolvePermissionProfilePath() uses for startup READS — a `cortex permissions
+ * grant` in one project must never silently mutate the user's global profile.
+ * Prefers an existing project file (dotted or subdir form); defaults to the
+ * dotted form when none exists yet.
+ */
+export function resolveWriteTarget(projectRoot, profile) {
+    const dotted = path.join(projectRoot, '.cortex', `permissions.${profile}.json`);
+    if (fs.existsSync(dotted))
+        return dotted;
+    const sub = path.join(projectRoot, '.cortex', 'permissions', `${profile}.json`);
+    if (fs.existsSync(sub))
+        return sub;
+    return dotted;
+}
+/** Read the project-level profile, returning a skeleton if no file exists yet. */
+export function readProfile(projectRoot, profile) {
+    const target = resolveWriteTarget(projectRoot, profile);
+    if (!fs.existsSync(target))
+        return skeleton();
+    try {
+        const parsed = JSON.parse(fs.readFileSync(target, 'utf-8'));
+        return {
+            ...skeleton(),
+            ...parsed,
+            policies: Array.isArray(parsed.policies) ? parsed.policies : [],
+        };
+    }
+    catch {
+        // Corrupt/unreadable profile — fall back to a skeleton rather than throw.
+        return skeleton();
+    }
+}
+function writeProfile(targetPath, profile) {
+    fs.mkdirSync(path.dirname(targetPath), { recursive: true });
+    fs.writeFileSync(targetPath, JSON.stringify(profile, null, 2) + '\n', 'utf-8');
+}
+function ensureArray(entry, key) {
+    const cur = entry.config[key];
+    const arr = Array.isArray(cur) ? cur : [];
+    entry.config[key] = arr;
+    return arr;
+}
+function removeTool(profile, type, key, toolName) {
+    for (const entry of profile.policies) {
+        if (entry.type === type && Array.isArray(entry.config[key])) {
+            entry.config[key] = entry.config[key].filter((t) => t !== toolName);
+        }
+    }
+}
+/**
+ * Grant a tool: add it to the profile's whitelist (creating the policy if
+ * absent) and remove it from any blacklist so the grant takes effect.
+ * Returns the path written and whether the file actually changed.
+ */
+export function grantToolInProfile(projectRoot, profile, toolName) {
+    const target = resolveWriteTarget(projectRoot, profile);
+    const data = readProfile(projectRoot, profile);
+    const before = JSON.stringify(data);
+    // Remove from blacklist first — a grant overrides a prior revoke.
+    removeTool(data, 'blacklist', 'blockedTools', toolName);
+    let wl = data.policies.find((p) => p.type === 'whitelist');
+    if (!wl) {
+        wl = { type: 'whitelist', config: { allowedTools: [] }, priority: GRANT_PRIORITY };
+        data.policies.push(wl);
+    }
+    const allowed = ensureArray(wl, 'allowedTools');
+    if (!allowed.includes(toolName))
+        allowed.push(toolName);
+    const changed = JSON.stringify(data) !== before;
+    if (changed)
+        writeProfile(target, data);
+    return { path: target, profile, changed };
+}
+/**
+ * Revoke a tool: add it to the profile's blacklist (creating the policy if
+ * absent) and remove it from any whitelist.
+ */
+export function revokeToolInProfile(projectRoot, profile, toolName) {
+    const target = resolveWriteTarget(projectRoot, profile);
+    const data = readProfile(projectRoot, profile);
+    const before = JSON.stringify(data);
+    removeTool(data, 'whitelist', 'allowedTools', toolName);
+    let bl = data.policies.find((p) => p.type === 'blacklist');
+    if (!bl) {
+        bl = { type: 'blacklist', config: { blockedTools: [] }, priority: REVOKE_PRIORITY };
+        data.policies.push(bl);
+    }
+    const blocked = ensureArray(bl, 'blockedTools');
+    if (!blocked.includes(toolName))
+        blocked.push(toolName);
+    const changed = JSON.stringify(data) !== before;
+    if (changed)
+        writeProfile(target, data);
+    return { path: target, profile, changed };
+}
+/**
+ * Read the profile's approval handler ('cli' | 'auto-approve' | 'deny-all').
+ * Defaults to 'auto-approve' when no profile/handler is set.
+ */
+export function getApprovalHandlerFromProfile(projectRoot, profile) {
+    return readProfile(projectRoot, profile).approvalHandler ?? 'auto-approve';
+}
+/**
+ * Persist the profile's approval handler. Returns the path written, the
+ * resulting handler, and whether the file actually changed.
+ */
+export function setApprovalHandlerInProfile(projectRoot, profile, handler) {
+    const target = resolveWriteTarget(projectRoot, profile);
+    const data = readProfile(projectRoot, profile);
+    const changed = data.approvalHandler !== handler;
+    if (changed) {
+        data.approvalHandler = handler;
+        writeProfile(target, data);
+    }
+    return { path: target, profile, handler, changed };
+}
+/** Summarize the profile's policies for display (used by list/tools commands). */
+export function listProfilePolicies(projectRoot, profile) {
+    const data = readProfile(projectRoot, profile);
+    return data.policies.map((entry) => {
+        const tools = entry.config.allowedTools ??
+            entry.config.blockedTools ??
+            [];
+        return {
+            name: entry.type,
+            priority: entry.priority ?? null,
+            enabled: entry.enabled ?? true,
+            tools: Array.isArray(tools) ? tools : [],
+        };
+    });
+}
+//# sourceMappingURL=PermissionProfileStore.js.map

package/dist/middleware/permissions/PermissionProfileStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionProfileStore.js","sourceRoot":"","sources":["../../../src/middleware/permissions/PermissionProfileStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,mFAAmF;AACnF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AACjC,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AA0BnC,SAAS,QAAQ;IACf,OAAO;QACL,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE;QACZ,eAAe,EAAE,cAAc;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,OAA8B;IAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,eAAe,OAAO,OAAO,CAAC,CAAC;IAChF,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;IAChF,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CACzB,WAAmB,EACnB,OAA8B;IAE9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAA+B,CAAC;QAC1F,OAAO;YACL,GAAG,QAAQ,EAAE;YACb,GAAG,MAAM;YACT,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;SAChE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB,EAAE,OAA0B;IAClE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,GAAW;IACzD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACxB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CACjB,OAA0B,EAC1B,IAA+B,EAC/B,GAAW,EACX,QAAgB;IAEhB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,OAA8B,EAC9B,QAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAEpC,kEAAkE;IAClE,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAExD,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAC3D,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;QACnF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAExD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC;IAChD,IAAI,OAAO;QAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAmB,EACnB,OAA8B,EAC9B,QAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAEpC,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAExD,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAC3D,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAExD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC;IAChD,IAAI,OAAO;QAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,WAAmB,EACnB,OAA8B;IAE9B,OAAO,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,eAAe,IAAI,cAAc,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,WAAmB,EACnB,OAA8B,EAC9B,OAA4C;IAE5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,KAAK,OAAO,CAAC;IACjD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QAC/B,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CACjC,WAAmB,EACnB,OAA8B;IAE9B,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,KAAK,GACR,KAAK,CAAC,MAAM,CAAC,YAAqC;YAClD,KAAK,CAAC,MAAM,CAAC,YAAqC;YACnD,EAAE,CAAC;QACL,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;SACzC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/middleware/permissions/WhitelistPolicy.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Whitelist Permission Policy
+ *
+ * Only allows specific tools to be executed. Any tool not in the whitelist
+ * is denied without the option for approval.
+ *
+ * Priority: LOW (40) - Evaluated after more specific policies
+ *
+ * @module permissions/WhitelistPolicy
+ */
+import type { PermissionPolicy, PermissionDecision, PermissionContext } from '../contracts/MiddlewareContracts.js';
+import { BasePermissionPolicy } from './PermissionPolicy.js';
+/**
+ * Whitelist permission policy
+ *
+ * @example
+ * ```typescript
+ * const policy = new WhitelistPolicy(['read_file', 'write_file', 'execute_bash']);
+ *
+ * await policy.evaluate({
+ *   toolName: 'read_file',
+ *   toolInput: {},
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: true }
+ *
+ * await policy.evaluate({
+ *   toolName: 'delete_file',
+ *   toolInput: {},
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: false, reason: '...', canApprove: false }
+ * ```
+ */
+export declare class WhitelistPolicy extends BasePermissionPolicy implements PermissionPolicy {
+    private allowedTools;
+    /**
+     * Create a new whitelist policy
+     *
+     * @param allowedTools Array of tool names that are allowed
+     * @param priority Policy priority (default: PolicyPriority.LOW)
+     * @param enabled Whether the policy is enabled (default: true)
+     */
+    constructor(allowedTools: string[], priority?: number, enabled?: boolean);
+    /**
+     * Evaluate if a tool is in the whitelist
+     */
+    evaluate(context: PermissionContext): Promise<PermissionDecision>;
+    /**
+     * Add a tool to the whitelist
+     */
+    addTool(toolName: string): void;
+    /**
+     * Remove a tool from the whitelist
+     */
+    removeTool(toolName: string): boolean;
+    /**
+     * Check if a tool is in the whitelist
+     */
+    hasTool(toolName: string): boolean;
+    /**
+     * Get all whitelisted tools
+     */
+    getAllowedTools(): string[];
+}
+//# sourceMappingURL=WhitelistPolicy.d.ts.map

package/dist/middleware/permissions/WhitelistPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WhitelistPolicy.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/WhitelistPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAkB,MAAM,uBAAuB,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,eAAgB,SAAQ,oBAAqB,YAAW,gBAAgB;IACnF,OAAO,CAAC,YAAY,CAAc;IAElC;;;;;;OAMG;gBAED,YAAY,EAAE,MAAM,EAAE,EACtB,QAAQ,GAAE,MAA2B,EACrC,OAAO,GAAE,OAAc;IAMzB;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAWvE;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI/B;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIrC;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIlC;;OAEG;IACH,eAAe,IAAI,MAAM,EAAE;CAG5B"}

package/dist/middleware/permissions/WhitelistPolicy.js

@@ -0,0 +1,82 @@
+/**
+ * Whitelist Permission Policy
+ *
+ * Only allows specific tools to be executed. Any tool not in the whitelist
+ * is denied without the option for approval.
+ *
+ * Priority: LOW (40) - Evaluated after more specific policies
+ *
+ * @module permissions/WhitelistPolicy
+ */
+import { BasePermissionPolicy, PolicyPriority } from './PermissionPolicy.js';
+/**
+ * Whitelist permission policy
+ *
+ * @example
+ * ```typescript
+ * const policy = new WhitelistPolicy(['read_file', 'write_file', 'execute_bash']);
+ *
+ * await policy.evaluate({
+ *   toolName: 'read_file',
+ *   toolInput: {},
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: true }
+ *
+ * await policy.evaluate({
+ *   toolName: 'delete_file',
+ *   toolInput: {},
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: false, reason: '...', canApprove: false }
+ * ```
+ */
+export class WhitelistPolicy extends BasePermissionPolicy {
+    allowedTools;
+    /**
+     * Create a new whitelist policy
+     *
+     * @param allowedTools Array of tool names that are allowed
+     * @param priority Policy priority (default: PolicyPriority.LOW)
+     * @param enabled Whether the policy is enabled (default: true)
+     */
+    constructor(allowedTools, priority = PolicyPriority.LOW, enabled = true) {
+        super('whitelist', priority, enabled);
+        this.allowedTools = new Set(allowedTools);
+    }
+    /**
+     * Evaluate if a tool is in the whitelist
+     */
+    async evaluate(context) {
+        if (this.allowedTools.has(context.toolName)) {
+            return this.allow();
+        }
+        return this.deny(`Tool "${context.toolName}" is not in the whitelist`, false // Cannot approve - hard block
+        );
+    }
+    /**
+     * Add a tool to the whitelist
+     */
+    addTool(toolName) {
+        this.allowedTools.add(toolName);
+    }
+    /**
+     * Remove a tool from the whitelist
+     */
+    removeTool(toolName) {
+        return this.allowedTools.delete(toolName);
+    }
+    /**
+     * Check if a tool is in the whitelist
+     */
+    hasTool(toolName) {
+        return this.allowedTools.has(toolName);
+    }
+    /**
+     * Get all whitelisted tools
+     */
+    getAllowedTools() {
+        return Array.from(this.allowedTools);
+    }
+}
+//# sourceMappingURL=WhitelistPolicy.js.map

package/dist/middleware/permissions/WhitelistPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WhitelistPolicy.js","sourceRoot":"","sources":["../../../src/middleware/permissions/WhitelistPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,eAAgB,SAAQ,oBAAoB;IAC/C,YAAY,CAAc;IAElC;;;;;;OAMG;IACH,YACE,YAAsB,EACtB,WAAmB,cAAc,CAAC,GAAG,EACrC,UAAmB,IAAI;QAEvB,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA0B;QACvC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CACd,SAAS,OAAO,CAAC,QAAQ,2BAA2B,EACpD,KAAK,CAAC,8BAA8B;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAAgB;QACtB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAAgB;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/middleware/permissions/index.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Permissions System
+ *
+ * Comprehensive authorization layer for tool execution.
+ *
+ * @module permissions
+ */
+export { PermissionsMiddleware } from '../PermissionsMiddleware.js';
+export type { PermissionsMiddlewareOptions } from '../PermissionsMiddleware.js';
+export type { PermissionPolicy, PermissionDecision, PermissionContext, PermissionAuditEntry, } from '../contracts/MiddlewareContracts.js';
+export { BasePermissionPolicy, PolicyPriority, PolicyEvaluationMode } from './PermissionPolicy.js';
+export { PermissionEvaluator } from './PermissionEvaluator.js';
+export type { PermissionEvaluatorOptions, EvaluationResult, } from './PermissionEvaluator.js';
+export { WhitelistPolicy } from './WhitelistPolicy.js';
+export { BlacklistPolicy } from './BlacklistPolicy.js';
+export { FileOperationPolicy } from './FileOperationPolicy.js';
+export type { FileOperationPolicyConfig } from './FileOperationPolicy.js';
+export { BashCommandPolicy } from './BashCommandPolicy.js';
+export type { BashCommandPolicyConfig } from './BashCommandPolicy.js';
+export type { ApprovalHandler, ApprovalRequest } from '../contracts/MiddlewareContracts.js';
+export { ApprovalTimeoutError, ApprovalRejectedError } from './ApprovalHandler.js';
+export { CLIApprovalHandler } from './CLIApprovalHandler.js';
+export type { CLIApprovalHandlerOptions } from './CLIApprovalHandler.js';
+export { AutoApproveHandler } from './AutoApproveHandler.js';
+export type { AutoApproveHandlerOptions } from './AutoApproveHandler.js';
+export { DenyAllHandler } from './DenyAllHandler.js';
+export type { DenyAllHandlerOptions } from './DenyAllHandler.js';
+export { IPCApprovalHandler } from './IPCApprovalHandler.js';
+export type { IPCApprovalHandlerOptions } from './IPCApprovalHandler.js';
+export { PermissionAuditLogger } from './PermissionAuditLogger.js';
+export type { PermissionAuditLoggerOptions, AuditQueryOptions, } from './PermissionAuditLogger.js';
+export type { PermissionConfig, PolicyConfig, FileOperationPolicyConfig as ConfigFileOperationPolicy, BashCommandPolicyConfig as ConfigBashCommandPolicy, WhitelistPolicyConfig, BlacklistPolicyConfig, AuditLogConfig, } from './PermissionConfig.js';
+export { PermissionPresets } from './PermissionConfig.js';
+export { PermissionConfigLoader } from './PermissionConfigLoader.js';
+export type { ConfigLoaderOptions } from './PermissionConfigLoader.js';
+export { resolvePermissionProfilePath } from './profilePath.js';
+export type { PermissionProfileName } from './profilePath.js';
+export { grantToolInProfile, revokeToolInProfile, listProfilePolicies, getApprovalHandlerFromProfile, setApprovalHandlerInProfile, readProfile as readPermissionProfile, resolveWriteTarget as resolvePermissionWriteTarget, GRANT_PRIORITY, REVOKE_PRIORITY, } from './PermissionProfileStore.js';
+export type { PermissionProfile, ProfilePolicyEntry, ProfilePolicySummary, } from './PermissionProfileStore.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/middleware/permissions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,YAAY,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAGhF,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAGnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,YAAY,EACV,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,YAAY,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,YAAY,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAGtE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,YAAY,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EACV,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AAGpC,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,yBAAyB,IAAI,yBAAyB,EACtD,uBAAuB,IAAI,uBAAuB,EAClD,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,YAAY,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAGvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,EAC7B,2BAA2B,EAC3B,WAAW,IAAI,qBAAqB,EACpC,kBAAkB,IAAI,4BAA4B,EAClD,cAAc,EACd,eAAe,GAChB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC"}

package/dist/middleware/permissions/index.js

@@ -0,0 +1,30 @@
+/**
+ * Permissions System
+ *
+ * Comprehensive authorization layer for tool execution.
+ *
+ * @module permissions
+ */
+// Core middleware
+export { PermissionsMiddleware } from '../PermissionsMiddleware.js';
+export { BasePermissionPolicy, PolicyPriority, PolicyEvaluationMode } from './PermissionPolicy.js';
+// Policy evaluator
+export { PermissionEvaluator } from './PermissionEvaluator.js';
+// Policy implementations
+export { WhitelistPolicy } from './WhitelistPolicy.js';
+export { BlacklistPolicy } from './BlacklistPolicy.js';
+export { FileOperationPolicy } from './FileOperationPolicy.js';
+export { BashCommandPolicy } from './BashCommandPolicy.js';
+export { ApprovalTimeoutError, ApprovalRejectedError } from './ApprovalHandler.js';
+export { CLIApprovalHandler } from './CLIApprovalHandler.js';
+export { AutoApproveHandler } from './AutoApproveHandler.js';
+export { DenyAllHandler } from './DenyAllHandler.js';
+export { IPCApprovalHandler } from './IPCApprovalHandler.js';
+// Audit logging
+export { PermissionAuditLogger } from './PermissionAuditLogger.js';
+export { PermissionPresets } from './PermissionConfig.js';
+export { PermissionConfigLoader } from './PermissionConfigLoader.js';
+// Profile path resolution + file-backed profile editing (headless CLI persistence)
+export { resolvePermissionProfilePath } from './profilePath.js';
+export { grantToolInProfile, revokeToolInProfile, listProfilePolicies, getApprovalHandlerFromProfile, setApprovalHandlerInProfile, readProfile as readPermissionProfile, resolveWriteTarget as resolvePermissionWriteTarget, GRANT_PRIORITY, REVOKE_PRIORITY, } from './PermissionProfileStore.js';
+//# sourceMappingURL=index.js.map

package/dist/middleware/permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/middleware/permissions/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,kBAAkB;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAWpE,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAEnG,mBAAmB;AACnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,yBAAyB;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAK3D,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,gBAAgB;AAChB,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAgBnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAGrE,mFAAmF;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,EAC7B,2BAA2B,EAC3B,WAAW,IAAI,qBAAqB,EACpC,kBAAkB,IAAI,4BAA4B,EAClD,cAAc,EACd,eAAe,GAChB,MAAM,6BAA6B,CAAC"}

package/dist/middleware/permissions/profilePath.d.ts

@@ -0,0 +1,15 @@
+export type PermissionProfileName = 'dev' | 'test' | 'prod';
+/**
+ * Resolve the on-disk path for a named permission profile.
+ *
+ * Resolution order (project override wins):
+ *   1. <projectRoot>/.cortex/permissions.<profile>.json
+ *   2. <projectRoot>/.cortex/permissions/<profile>.json
+ *   3. ~/.cortex/permissions.<profile>.json        (global default)
+ *   4. ~/.cortex/permissions/<profile>.json         (global default, subdir form)
+ *
+ * Returns the absolute path of the first file that exists, or `null` when
+ * none is present.
+ */
+export declare function resolvePermissionProfilePath(profile: PermissionProfileName, projectRoot: string): string | null;
+//# sourceMappingURL=profilePath.d.ts.map