@seanmozeik/tripwire 0.7.0 → 0.7.2

package/src/rules/read-protect.ts

@@ -1,57 +0,0 @@
-import { type Decision, allow, deny } from '../lib/decision';
-import type { ReadInput } from '../lib/event';
-import { classifyProtectedPath, type ProtectedPathSpec } from './path-protect';
-
-const PROTECTIONS: readonly ProtectedPathSpec[] = [
-  {
-    rule: 'read-env',
-    pattern: /(?<prefix>^|\/)\.env(?<ext>\.[^/]+)?$/,
-    message:
-      '.env files hold secrets that should never enter the model context. Refuse to read. If the goal is documenting required env vars, look at .env.example or describe the schema from memory.',
-  },
-  {
-    rule: 'read-dev-vars',
-    pattern: /(?<prefix>^|\/)\.dev\.vars(?<ext>\.[^/]+)?$/,
-    message: 'Refuse to read .dev.vars (Cloudflare/Wrangler secrets).',
-  },
-  {
-    rule: 'read-ssh',
-    pattern: /(?<prefix>^|\/)\.ssh\//,
-    message: 'Refuse to read files inside ~/.ssh/.',
-  },
-  {
-    rule: 'read-ssh-key',
-    pattern: /(?<prefix>^|\/)(?<key>id_rsa|id_ed25519|id_ecdsa|id_dsa)$/,
-    message: 'Refuse to read SSH private key files.',
-  },
-  {
-    rule: 'read-private-key',
-    pattern: /\.(?<ext>pem|key|p12|pfx)$/i,
-    message: 'Refuse to read private-key-shaped files.',
-  },
-  {
-    rule: 'read-aws-credentials',
-    pattern: /(?<prefix>^|\/)\.aws\/credentials$/,
-    message: 'Refuse to read ~/.aws/credentials.',
-  },
-  {
-    rule: 'read-netrc',
-    pattern: /(?<prefix>^|\/)\.netrc$/,
-    message: 'Refuse to read ~/.netrc (host credentials).',
-  },
-  {
-    rule: 'read-secrets-file',
-    pattern: /(?<prefix>^|\/)secrets?\.(?<ext>json|ya?ml|toml|env)$/i,
-    message: 'Refuse to read a file named secrets.{json,yaml,toml,env}.',
-  },
-];
-
-const readProtect = (input: ReadInput): Decision => {
-  const protection = classifyProtectedPath(input.file_path, 'read', PROTECTIONS);
-  if (protection !== null) {
-    return deny(protection.rule, protection.message);
-  }
-  return allow('read-protect');
-};
-
-export { readProtect };

package/src/rules/tool-policy.ts

@@ -1,54 +0,0 @@
-import { type Segment, hasBypass } from '../lib/bash';
-import type { ToolPolicy } from '../lib/config';
-import { type Decision, allow, deny, warn } from '../lib/decision';
-
-const hasShortFlag = (flags: readonly string[], expected: string): boolean =>
-  flags.some(
-    (flag) => flag.startsWith('-') && !flag.startsWith('--') && flag.slice(1).includes(expected),
-  );
-
-const matches = (segment: Segment, policy: ToolPolicy): boolean => {
-  if (!policy.executables.includes(segment.head)) {
-    return false;
-  }
-
-  const commandArguments = segment.tokens.slice(1);
-  const commandArgumentSet = new Set(commandArguments);
-  if (
-    !(policy.match?.argumentsIncludeAll ?? []).every((argument) => commandArgumentSet.has(argument))
-  ) {
-    return false;
-  }
-  if (
-    !(policy.match?.argumentsStartWith ?? []).every(
-      (argument, index) => commandArguments[index] === argument,
-    )
-  ) {
-    return false;
-  }
-  return (policy.match?.shortFlagsIncludeAll ?? []).every((flag) =>
-    hasShortFlag(segment.flags, flag),
-  );
-};
-
-const toolPolicy = (
-  segments: readonly Segment[],
-  command: string,
-  policies: readonly ToolPolicy[],
-): Decision => {
-  if (hasBypass(command)) {
-    return allow('tool-policy');
-  }
-  for (const segment of segments) {
-    for (const policy of policies) {
-      if (matches(segment, policy)) {
-        return policy.action === 'deny'
-          ? deny(policy.rule, policy.message)
-          : warn(policy.rule, policy.message);
-      }
-    }
-  }
-  return allow('tool-policy');
-};
-
-export { toolPolicy };