@oracle-agent/oracle 0.35.34 → 0.35.36

package/dist/cli/commands/extension-policy.mjs

@@ -1,3 +1,3 @@
-import E from"node:fs";import u from"node:path";import{homedir as g}from"node:os";var _=Object.freeze(["oracle_cli","memory_add","memory_remove","memory_search","skill_load","skill_create","skill_list","cron_add","cron_list","cron_remove","meta_analyze","web_fetch","web_search","file_read","file_write","mcp_list","mcp_call","todo_list","todo_set","session_search","research_delegate","rlm","deep_research","clarify","code_eval","learn_skill","workspace_artifact","research_artifact","portfolio_analyze","tax_lots","position_health","governance_prepare","safety_intelligence","portfolio_risk","trade_lifecycle","signal_score","vault_status","signer_status","signer_execute","signer_disarm","receipt_report","watch_create","watch_list","portfolio_snapshot","vision_analyze","browser_exec","xurl","knowledge_search"]),d="deny",O=256*1024,w=128,l=Object.freeze({version:1,source:"default",defaultDecision:d,allow:_,deny:Object.freeze([])});function s(e){let t=new Set;if(!Array.isArray(e))return t;for(let o of e){if(typeof o!="string")continue;let r=o.trim();r.length===0||r.length>w||t.add(r)}return t}function x(e){return{allow:!1,reason:e}}function p(e){return{allow:!0,reason:e}}var i="extension-prepare-only",f=Object.freeze(["oracle_cli","memory_search","skill_load","skill_list","web_fetch","web_search","todo_list","todo_set","session_search","research_delegate","rlm","deep_research","clarify","code_eval","research_artifact","portfolio_analyze","tax_lots","position_health","governance_prepare","safety_intelligence","portfolio_risk","trade_lifecycle","signal_score","vault_status","signer_status","receipt_report","watch_list","portfolio_snapshot","vision_analyze","knowledge_search"]),c=new Set(f);function y(e=process.env){return e?.ORACLE_EXECUTION_MODE===i}function m(e,t=process.env){if(!y(t))return p("allowed: normal Oracle execution mode");let o=typeof e?.name=="string"?e.name.trim():"";return!o||!c.has(o)?x(`denied: tool "${o||"unknown"}" is outside extension prepare-only mode`):p(`allowed: tool "${o}" is inside extension prepare-only mode`)}function a(e,t=process.env){if(!y(t))return e;let o=[...s(e?.allow)].filter(n=>c.has(n)),r=new Set([...s(e?.deny),..._.filter(n=>!c.has(n))]);return Object.freeze({version:1,source:`${String(e?.source||"default")}:extension-prepare-only`,defaultDecision:d,allow:Object.freeze(o),deny:Object.freeze([...r])})}function b(e=process.env){let t=e&&e.ORACLE_CONFIG_DIR||u.join(g(),".config","oracle");return u.join(t,"tool-policy.json")}function h(e=process.env){try{let t=b(e),o=E.readFileSync(t,"utf8");if(typeof o!="string"||o.length>O)return a(l,e);let r=JSON.parse(o);if(!r||typeof r!="object"||Array.isArray(r))return a(l,e);let n=Array.isArray(r.allow)?s(r.allow):s(_);return a(Object.freeze({version:1,source:t,defaultDecision:d,allow:Object.freeze([...n]),deny:Object.freeze([...s(r.deny)])}),e)}catch{return a(l,e)}}function A(e=process.env){let t={...e,ORACLE_EXECUTION_MODE:i},o=h(t);return{ok:m({name:"signer_execute",args:{}},t).allow===!1&&!o.allow.includes("signer_execute"),version:1,mode:i,signerExecute:!1,tools:f}}var T={name:"extension-policy",summary:"attest the extension prepare-only tool boundary",group:"system",usage:"oracle extension-policy --json",async run(e){if(e.argv.length!==1||e.argv[0]!=="--json")return process.stderr.write(`oracle extension-policy requires --json
-`),1;let t=A();return process.stdout.write(`${JSON.stringify(t)}
-`),t.ok?0:1}};export{T as default,A as extensionPolicyAttestation};
+import E from"node:fs";import u from"node:path";import{homedir as g}from"node:os";var _=Object.freeze(["oracle_cli","memory_add","memory_remove","memory_search","skill_load","skill_create","skill_list","cron_add","cron_list","cron_remove","meta_analyze","web_fetch","web_search","file_read","file_write","mcp_list","mcp_call","todo_list","todo_set","session_search","research_delegate","rlm","deep_research","clarify","code_eval","learn_skill","approval_preview","workspace_artifact","research_artifact","portfolio_analyze","tax_lots","position_health","governance_prepare","safety_intelligence","portfolio_risk","trade_lifecycle","signal_score","vault_status","signer_status","signer_execute","signer_disarm","receipt_report","watch_create","watch_list","portfolio_snapshot","vision_analyze","browser_exec","xurl","knowledge_search"]),d="deny",w=256*1024,O=128,l=Object.freeze({version:1,source:"default",defaultDecision:d,allow:_,deny:Object.freeze([])});function s(e){let o=new Set;if(!Array.isArray(e))return o;for(let t of e){if(typeof t!="string")continue;let r=t.trim();r.length===0||r.length>O||o.add(r)}return o}function x(e){return{allow:!1,reason:e}}function p(e){return{allow:!0,reason:e}}var i="extension-prepare-only",f=Object.freeze(["oracle_cli","memory_search","skill_load","skill_list","web_fetch","web_search","todo_list","todo_set","session_search","research_delegate","rlm","deep_research","clarify","code_eval","approval_preview","research_artifact","portfolio_analyze","tax_lots","position_health","governance_prepare","safety_intelligence","portfolio_risk","trade_lifecycle","signal_score","vault_status","signer_status","receipt_report","watch_list","portfolio_snapshot","vision_analyze","knowledge_search"]),c=new Set(f);function y(e=process.env){return e?.ORACLE_EXECUTION_MODE===i}function m(e,o=process.env){if(!y(o))return p("allowed: normal Oracle execution mode");let t=typeof e?.name=="string"?e.name.trim():"";return!t||!c.has(t)?x(`denied: tool "${t||"unknown"}" is outside extension prepare-only mode`):p(`allowed: tool "${t}" is inside extension prepare-only mode`)}function a(e,o=process.env){if(!y(o))return e;let t=[...s(e?.allow)].filter(n=>c.has(n)),r=new Set([...s(e?.deny),..._.filter(n=>!c.has(n))]);return Object.freeze({version:1,source:`${String(e?.source||"default")}:extension-prepare-only`,defaultDecision:d,allow:Object.freeze(t),deny:Object.freeze([...r])})}function b(e=process.env){let o=e&&e.ORACLE_CONFIG_DIR||u.join(g(),".config","oracle");return u.join(o,"tool-policy.json")}function h(e=process.env){try{let o=b(e),t=E.readFileSync(o,"utf8");if(typeof t!="string"||t.length>w)return a(l,e);let r=JSON.parse(t);if(!r||typeof r!="object"||Array.isArray(r))return a(l,e);let n=Array.isArray(r.allow)?s(r.allow):s(_);return a(Object.freeze({version:1,source:o,defaultDecision:d,allow:Object.freeze([...n]),deny:Object.freeze([...s(r.deny)])}),e)}catch{return a(l,e)}}function v(e=process.env){let o={...e,ORACLE_EXECUTION_MODE:i},t=h(o);return{ok:m({name:"signer_execute",args:{}},o).allow===!1&&!t.allow.includes("signer_execute"),version:1,mode:i,signerExecute:!1,tools:f}}var T={name:"extension-policy",summary:"attest the extension prepare-only tool boundary",group:"system",usage:"oracle extension-policy --json",async run(e){if(e.argv.length!==1||e.argv[0]!=="--json")return process.stderr.write(`oracle extension-policy requires --json
+`),1;let o=v();return process.stdout.write(`${JSON.stringify(o)}
+`),o.ok?0:1}};export{T as default,v as extensionPolicyAttestation};