@panguard-ai/panguard-guard 1.6.0 → 1.7.0

package/dist/dashboard/index.d.ts

@@ -15,6 +15,13 @@
  */
 import type { DashboardStatus, DashboardEvent, ThreatMapEntry, GuardConfig, ThreatVerdict } from '../types.js';
 import { DashboardRelayClient } from './relay-client.js';
+/**
+ * Remove the persisted dashboard launch token. Exported so `pga guard stop` /
+ * `pga guard uninstall` can guarantee the secret never outlives the daemon even
+ * when the process is killed without a graceful `stop()` (e.g. SIGTERM mid-run).
+ * Best-effort: a missing file or permission error is not fatal.
+ */
+export declare function removeDashboardToken(): void;
 /** Relay configuration for connecting to a remote Manager */
 export interface DashboardRelayOptions {
     readonly managerUrl: string;
@@ -33,6 +40,7 @@ export declare class DashboardServer {
     private readonly maxRecentEvents;
     private readonly port;
     private getConfig;
+    private configApplier;
     private getRulesProvider;
     private readonly authToken;
     private rateLimits;
@@ -40,6 +48,16 @@ export declare class DashboardServer {
     private readonly relayConfig;
     constructor(port: number, relayConfig?: DashboardRelayOptions);
     setConfigGetter(getter: () => GuardConfig): void;
+    /**
+     * Wire the engine's live-config applier. When a config-writing handler (e.g.
+     * the Threat Cloud / mode POST) persists a new config to disk, it ALSO calls
+     * this so the engine mutates its in-memory `this.config` + `this.mode` and
+     * re-arms enforcement for the new mode. Without it, the daemon kept serving
+     * the stale config it was constructed with: GET /api/config and /api/status
+     * returned the old value, enforcement kept the old mode, and the UI control
+     * snapped back — the change looked rejected even though disk was updated.
+     */
+    setConfigApplier(applier: (cfg: GuardConfig) => void): void;
     /**
      * Wire a callback that returns the live set of ATR rules currently loaded by
      * the engine. Used by SARIF / Evidence Pack export so the auditor sees the
@@ -59,9 +77,20 @@ export declare class DashboardServer {
     addVerdict(verdict: ThreatVerdict): void;
     addThreatMapEntry(entry: ThreatMapEntry): void;
     getAuthToken(): string;
+    /**
+     * Persist the launch token to ~/.panguard-guard/dashboard-token with 0o600 so
+     * a separate `pga up` invocation (rerun, already-running daemon, headless,
+     * copied URL) can construct the authenticated launch URL. The token is the
+     * launch secret that mints the auth cookie, so it is written owner-only and
+     * never logged — same handling as the cookie. Best-effort: a write failure
+     * just means the CLI falls back to printing guidance instead of a live URL.
+     */
+    private persistAuthToken;
     private handleRequest;
     private checkRateLimit;
     private serveIndex;
+    /** Parse the one-time launch token from a `GET /?token=...` request URL. */
+    private extractLaunchToken;
     /**
      * Compose the status envelope returned by /api/status.
      * Adds a `license` field so the SPA can gate Pilot-only UI without making
@@ -69,6 +98,26 @@ export declare class DashboardServer {
      * (cliTier overrides licenseKey) or defaults to community.
      */
     private buildStatusResponse;
+    /**
+     * Real per-layer health, derived from live engine state — NOT hard-coded.
+     * The dashboard's "Layer A/B Active" used to be static green in the HTML, so it
+     * stayed green even with zero rules loaded or the engine stopped. This computes
+     * the truth: Layer A (deterministic pattern) is active only when rules are
+     * actually loaded AND the engine is running; Layer B (deterministic heuristic +
+     * baseline) tracks the running state; Layer C (optional semantic) reflects
+     * whether the user has configured a BYO LLM (config.ai) — it is advisory and
+     * off-by-default, so "off" is a healthy state, not a fault.
+     */
+    private computeLayers;
+    /**
+     * Honest enforcement posture. The dashboard used to print PROTECTED whenever
+     * mode === 'protection', even with an all-off enforcement policy that takes no
+     * action — the exact "says PROTECTED, prevents nothing" overclaim the audit
+     * flagged. This reports what the daemon will ACTUALLY do: 'protected' only when
+     * protection mode is on AND at least one response action is armed; otherwise
+     * 'monitoring' (detect + notify, no automatic OS response).
+     */
+    private computeEnforcement;
     private normalizeLicenseTier;
     /**
      * SARIF 2.1.0 stub export. Production wiring to the migrator's evidence
@@ -107,13 +156,68 @@ export declare class DashboardServer {
     private jsonResponse;
     private handleSkillsApi;
     private handleAiConfigGet;
+    /**
+     * True when `host` is a private/internal/loopback/link-local IPv4 address (or
+     * `localhost`). Self-contained so the SSRF check stays in this file.
+     */
+    private static isPrivateHost;
     private static isValidEndpointUrl;
+    /**
+     * If `host` is an IPv6-mapped IPv4 address, return the embedded dotted-quad
+     * IPv4; otherwise null. Accepts the URL bracket form ([...]), the
+     * dotted-quad tail (::ffff:1.2.3.4) and the hex tail (::ffff:0102:0304).
+     */
+    private static extractMappedIpv4;
     private handleRulesApi;
     private handleThreatCloudGet;
     private handleThreatCloudPost;
     private handleLoadedRulesApi;
     private handleProxyVerdictsApi;
     private handleInstalledSkillsApi;
+    /**
+     * Read a JSON request body (≤10KB) for the action POST endpoints. Resolves to
+     * the parsed object, or null after having already written the error response
+     * (payload too large / invalid JSON / stream error) — callers just return on null.
+     */
+    private readJsonBody;
+    /**
+     * POST /api/skills/quarantine — move a flagged file-based skill into quarantine.
+     * Resolves the skill name under ~/.claude/skills/, contains it against path
+     * traversal, confirms it exists, then uses the existing FileQuarantine (atomic
+     * move + 0o700 perms + restorable manifest). MCP-server config entries are not
+     * file-based and cannot be quarantined this way.
+     */
+    private handleQuarantinePost;
+    /**
+     * POST /api/skills/whitelist — mark a skill safe (false positive) by adding it
+     * to the local skill-whitelist.json the installed-skills view reads. Atomic
+     * write (tmp + rename), owner-only perms.
+     */
+    private handleWhitelistPost;
+    /**
+     * POST /api/skills/unwhitelist — remove a skill from the local whitelist, so a
+     * mistaken "Mark safe" is reversible from the dashboard (the whitelist used to
+     * be append-only with no in-product undo). Atomic write, owner-only perms.
+     */
+    private handleUnwhitelistPost;
+    /**
+     * GET /api/skills/quarantined — the list of currently quarantined files, so the
+     * user can SEE what's quarantined and restore it. The quarantine confirm dialog
+     * promises restorability; this + /api/skills/restore make that promise real.
+     */
+    private handleQuarantinedListApi;
+    /**
+     * POST /api/skills/restore — restore a quarantined file to its original path,
+     * honoring the reversibility the UI promises. Body: { id }.
+     */
+    private handleRestorePost;
+    /**
+     * GET /api/rule-update — surface the daily notify-only rule-update check that
+     * rule-sync writes to <dataDir>/rule-update.json. The backend computed this
+     * signal ("newer detection rules published") but nothing read it, so the most
+     * actionable security update was invisible. Notify-only: never auto-applies.
+     */
+    private handleRuleUpdateApi;
     private handleAgentsApi;
     private sendToClient;
     private broadcast;

package/dist/dashboard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dashboard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAUH,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACd,WAAW,EACX,aAAa,EACd,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,oBAAoB,EAA0B,MAAM,mBAAmB,CAAC;AAsCjF,6DAA6D;AAC7D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAgD;IAC9D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,YAAY,CAAwB;IAC5C,OAAO,CAAC,SAAS,CAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAO;IACvC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,SAAS,CAAoC;IACrD,OAAO,CAAC,gBAAgB,CAQR;IAChB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,UAAU,CAA0C;IAC5D,OAAO,CAAC,WAAW,CAAqC;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoC;gBAEpD,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,qBAAqB;IAkB7D,eAAe,CAAC,MAAM,EAAE,MAAM,WAAW,GAAG,IAAI;IAIhD;;;;OAIG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,KAAK,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,GACD,IAAI;IAID,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4HtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B3B,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI;IASpD,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAQtC,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAYxC,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAgB9C,YAAY,IAAI,MAAM;IAItB,OAAO,CAAC,aAAa;IAmLrB,OAAO,CAAC,cAAc;IAmBtB,OAAO,CAAC,UAAU;IAWlB;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,oBAAoB;IAc5B;;;;;;OAMG;IACH;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAyE7B;;;;;;;;;OASG;IACH,OAAO,CAAC,iBAAiB;IAqGzB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IA2D5B,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,eAAe;IAgCvB,OAAO,CAAC,iBAAiB;IAsBzB,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAmCjC,OAAO,CAAC,cAAc;IA0BtB,OAAO,CAAC,oBAAoB;IAoD5B,OAAO,CAAC,qBAAqB;IAuD7B,OAAO,CAAC,oBAAoB;IAa5B,OAAO,CAAC,sBAAsB;YA4BhB,wBAAwB;YAuFxB,eAAe;IA8C7B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,SAAS;IAcjB,OAAO,CAAC,gBAAgB;IA4BxB,cAAc,IAAI,oBAAoB,GAAG,IAAI;CAG9C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dashboard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoBH,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACd,WAAW,EACX,aAAa,EACd,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,oBAAoB,EAA0B,MAAM,mBAAmB,CAAC;AAkDjF;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAQ3C;AAiCD,6DAA6D;AAC7D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AA0BD;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAgD;IAC9D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,YAAY,CAAwB;IAC5C,OAAO,CAAC,SAAS,CAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAO;IACvC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,SAAS,CAAoC;IACrD,OAAO,CAAC,aAAa,CAA6C;IAClE,OAAO,CAAC,gBAAgB,CAQR;IAChB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,UAAU,CAA0C;IAC5D,OAAO,CAAC,WAAW,CAAqC;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoC;gBAEpD,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,qBAAqB;IAkB7D,eAAe,CAAC,MAAM,EAAE,MAAM,WAAW,GAAG,IAAI;IAIhD;;;;;;;;OAQG;IACH,gBAAgB,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI;IAI3D;;;;OAIG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,KAAK,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,GACD,IAAI;IAID,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B3B,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI;IAapD,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAQtC,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAYxC,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAgB9C,YAAY,IAAI,MAAM;IAItB;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAyBxB,OAAO,CAAC,aAAa;IA4PrB,OAAO,CAAC,cAAc;IAmBtB,OAAO,CAAC,UAAU;IA6BlB,4EAA4E;IAC5E,OAAO,CAAC,kBAAkB;IAU1B;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAiB3B;;;;;;;;;OASG;IACH,OAAO,CAAC,aAAa;IAkCrB;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAkB1B,OAAO,CAAC,oBAAoB;IAc5B;;;;;;OAMG;IACH;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAyE7B;;;;;;;;;OASG;IACH,OAAO,CAAC,iBAAiB;IAqGzB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IA2D5B,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,eAAe;IAgCvB,OAAO,CAAC,iBAAiB;IAiCzB;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,aAAa;IAiB5B,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAyBjC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAuBhC,OAAO,CAAC,cAAc;IA6BtB,OAAO,CAAC,oBAAoB;IAgE5B,OAAO,CAAC,qBAAqB;IAgH7B,OAAO,CAAC,oBAAoB;IAa5B,OAAO,CAAC,sBAAsB;YA4BhB,wBAAwB;IAuFtC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IA8BpB;;;;;;OAMG;YACW,oBAAoB;IAyClC;;;;OAIG;YACW,mBAAmB;IAwCjC;;;;OAIG;YACW,qBAAqB;IA0CnC;;;;OAIG;YACW,wBAAwB;IAiBtC;;;OAGG;YACW,iBAAiB;IA2B/B;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;YA2Bb,eAAe;IA8C7B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,SAAS;IAcjB,OAAO,CAAC,gBAAgB;IA4BxB,cAAc,IAAI,oBAAoB,GAAG,IAAI;CAG9C"}