npm - @shaifulshabuj-waymarks/server - Versions diffs - 0.1.0 - Mend

@shaifulshabuj-waymarks/server 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/dist/api/server.js +218 -0
package/dist/approvals/handler.js +77 -0
package/dist/db/database.js +209 -0
package/dist/mcp/server.js +331 -0
package/dist/notifications/slack.js +77 -0
package/dist/policies/engine.js +161 -0
package/package.json +58 -0
package/src/ui/index.html +418 -0

package/src/ui/index.html ADDED Viewed

@@ -0,0 +1,418 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <title>waymark — agent action viewer</title>
+  <style>
+    * { box-sizing: border-box; margin: 0; padding: 0; }
+    body { font-family: monospace; font-size: 13px; background: #0f0f0f; color: #d0d0d0; padding: 16px; }
+    h1 { font-size: 18px; margin-bottom: 4px; color: #fff; }
+    .subtitle { color: #555; margin-bottom: 16px; font-size: 12px; }
+    .meta { display: flex; gap: 16px; margin-bottom: 12px; color: #666; font-size: 11px; }
+    table { width: 100%; border-collapse: collapse; }
+    th { text-align: left; padding: 6px 8px; background: #1a1a1a; color: #888; font-weight: normal; border-bottom: 1px solid #333; }
+    td { padding: 6px 8px; border-bottom: 1px solid #1e1e1e; vertical-align: top; }
+    tr:hover td { background: #161616; }
+    .badge { display: inline-block; padding: 2px 6px; border-radius: 3px; font-size: 11px; font-weight: bold; }
+    .badge-write_file { background: #7c3a00; color: #ffb347; }
+    .badge-read_file  { background: #002f5c; color: #5ab4ff; }
+    .badge-bash       { background: #222; color: #aaa; border: 1px solid #444; }
+    .decision-block    { background: #5c0000; color: #ff6b6b; }
+    .decision-pending  { background: #4a3800; color: #ffd166; }
+    .decision-rejected { background: #3a0000; color: #ff9999; }
+    .status-success { color: #4caf50; }
+    .status-error   { color: #f44336; }
+    .status-pending { color: #ffb347; }
+    .status-blocked { color: #ff6b6b; }
+    .path { color: #888; max-width: 280px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; display: block; }
+    button.rollback {
+      background: #3a1f00; border: 1px solid #7c3a00; color: #ffb347;
+      padding: 2px 8px; cursor: pointer; font-size: 11px; font-family: monospace;
+      border-radius: 3px;
+    }
+    button.rollback:hover { background: #5c3000; }
+    button.rollback:disabled { opacity: 0.4; cursor: default; }
+    .msg-ok  { color: #4caf50; margin-left: 6px; }
+    .msg-err { color: #f44336; margin-left: 6px; }
+    .rolled-back { color: #555; font-size: 11px; }
+    #status-bar { position: fixed; bottom: 8px; right: 16px; color: #333; font-size: 11px; }
+    .empty { padding: 32px; text-align: center; color: #444; }
+    /* Config viewer */
+    #config-section { margin-top: 24px; }
+    #config-toggle {
+      background: none; border: 1px solid #333; color: #888; padding: 4px 10px;
+      cursor: pointer; font-family: monospace; font-size: 12px; border-radius: 3px;
+    }
+    #config-toggle:hover { border-color: #555; color: #aaa; }
+    #config-content { display: none; margin-top: 12px; padding: 12px; background: #141414; border: 1px solid #222; border-radius: 4px; }
+    #config-content h3 { color: #666; font-size: 11px; font-weight: normal; margin-bottom: 10px; }
+    .policy-group { margin-bottom: 12px; }
+    .policy-group h4 { font-size: 11px; color: #555; margin-bottom: 4px; font-weight: normal; text-transform: uppercase; letter-spacing: 0.05em; }
+    .policy-group ul { list-style: none; padding: 0; }
+    .policy-group li { padding: 2px 0; font-size: 12px; }
+    .policy-allow { color: #4caf50; }
+    .policy-block  { color: #ff6b6b; }
+    .policy-pending { color: #ffd166; }
+    /* v3: approval flow */
+    .status-rejected { color: #e57373; }
+    .status-approved { color: #4caf50; }
+    .btn-approve {
+      background: #003a1a; border: 1px solid #2e7d32; color: #81c784;
+      padding: 2px 8px; cursor: pointer; font-size: 11px; font-family: monospace;
+      border-radius: 3px; margin-right: 4px;
+    }
+    .btn-approve:hover { background: #1b5e20; }
+    .btn-approve:disabled { opacity: 0.4; cursor: default; }
+    .btn-reject {
+      background: #3a0000; border: 1px solid #7f0000; color: #ef9a9a;
+      padding: 2px 8px; cursor: pointer; font-size: 11px; font-family: monospace;
+      border-radius: 3px;
+    }
+    .btn-reject:hover { background: #5c0000; }
+    .btn-reject:disabled { opacity: 0.4; cursor: default; }
+    .reject-input {
+      background: #1a1a1a; border: 1px solid #444; color: #ccc;
+      padding: 2px 6px; font-family: monospace; font-size: 11px;
+      border-radius: 3px; width: 120px; margin-right: 4px;
+    }
+    #pending-badge {
+      background: #7f0000; color: #ef9a9a; border-radius: 3px;
+      padding: 1px 6px; font-size: 13px; margin-left: 8px;
+    }
+  </style>
+</head>
+<body>
+  <h1>waymark <span id="pending-badge" style="display:none"></span></h1>
+  <p class="subtitle">uglybugly agent action viewer — intercepts and logs MCP tool calls</p>
+  <div class="meta">
+    <span id="count-display">loading...</span>
+    <span id="refresh-display"></span>
+  </div>
+  <table>
+    <thead>
+      <tr>
+        <th>Time</th>
+        <th>Tool</th>
+        <th>Decision</th>
+        <th>Target / Command</th>
+        <th>Status</th>
+        <th>Stdout</th>
+        <th>Action</th>
+      </tr>
+    </thead>
+    <tbody id="action-tbody">
+      <tr><td colspan="7" class="empty">loading...</td></tr>
+    </tbody>
+  </table>
+  <div id="config-section">
+    <button id="config-toggle">▶ Current Policy</button>
+    <div id="config-content">
+      <h3>waymark.config.json</h3>
+      <div id="config-body">loading...</div>
+    </div>
+  </div>
+  <div id="status-bar">auto-refresh every 3s</div>
+  <script>
+    function timeAgo(dateStr) {
+      const now = new Date();
+      const then = new Date(dateStr + (dateStr.includes('Z') ? '' : 'Z'));
+      const diff = Math.floor((now - then) / 1000);
+      if (diff < 5)  return 'just now';
+      if (diff < 60) return diff + 's ago';
+      if (diff < 3600) return Math.floor(diff / 60) + 'm ago';
+      if (diff < 86400) return Math.floor(diff / 3600) + 'h ago';
+      return Math.floor(diff / 86400) + 'd ago';
+    }
+    function toolBadge(name) {
+      return `<span class="badge badge-${name}">${name}</span>`;
+    }
+    function statusLabel(status) {
+      return `<span class="status-${status}">${status}</span>`;
+    }
+    function decisionBadge(row) {
+      const d = row.decision || 'allow';
+      if (d === 'block') {
+        const tip = row.policy_reason ? row.policy_reason.replace(/"/g, '&quot;') : '';
+        return `<span class="badge decision-block" title="${tip}">blocked</span>`;
+      }
+      if (d === 'pending') {
+        const tip = row.policy_reason ? row.policy_reason.replace(/"/g, '&quot;') : '';
+        return `<span class="badge decision-pending" title="${tip}">pending</span>`;
+      }
+      if (d === 'rejected') {
+        const tip = row.rejected_reason ? row.rejected_reason.replace(/"/g, '&quot;') : '';
+        return `<span class="badge decision-rejected" title="${tip}">rejected</span>`;
+      }
+      return `<span style="color:#333">—</span>`;
+    }
+    function truncatePath(p) {
+      if (!p) return '<span style="color:#444">—</span>';
+      const parts = p.replace(/\\/g, '/').split('/');
+      const display = parts.length > 3 ? '…/' + parts.slice(-3).join('/') : p;
+      return `<span class="path" title="${p}">${display}</span>`;
+    }
+    function getTargetDisplay(row) {
+      if (row.tool_name === 'bash') {
+        const cmd = JSON.parse(row.input_payload).command || '';
+        const short = cmd.length > 60 ? cmd.slice(0, 57) + '...' : cmd;
+        return `<span class="path" title="${cmd.replace(/"/g, '&quot;')}">${short}</span>`;
+      }
+      return truncatePath(row.target_path);
+    }
+    async function doRollback(actionId, btn, msgSpan, isNewFile) {
+      btn.disabled = true;
+      btn.textContent = isNewFile ? 'deleting...' : 'rolling back...';
+      try {
+        const res = await fetch(`/api/actions/${actionId}/rollback`, { method: 'POST' });
+        const data = await res.json();
+        if (res.ok) {
+          msgSpan.className = 'msg-ok';
+          msgSpan.textContent = data.action === 'deleted' ? '✓ deleted' : '✓ restored';
+          btn.textContent = data.action === 'deleted' ? 'deleted' : 'rolled back';
+        } else {
+          msgSpan.className = 'msg-err';
+          msgSpan.textContent = '✗ ' + (data.error || 'failed');
+          btn.disabled = false;
+          btn.textContent = isNewFile ? 'delete (new file)' : 'rollback';
+        }
+      } catch (e) {
+        msgSpan.className = 'msg-err';
+        msgSpan.textContent = '✗ network error';
+        btn.disabled = false;
+        btn.textContent = isNewFile ? 'delete (new file)' : 'rollback';
+      }
+    }
+    async function doApprove(actionId, btn, msgSpan) {
+      btn.disabled = true;
+      btn.textContent = 'approving...';
+      try {
+        const res = await fetch(`/api/actions/${actionId}/approve`, { method: 'POST' });
+        const data = await res.json();
+        if (res.ok) {
+          msgSpan.className = 'msg-ok';
+          msgSpan.textContent = '✓ approved';
+          // Full refresh to get updated row
+          setTimeout(refresh, 300);
+        } else {
+          msgSpan.className = 'msg-err';
+          msgSpan.textContent = '✗ ' + (data.error || 'failed');
+          btn.disabled = false;
+          btn.textContent = '✅ Approve';
+        }
+      } catch (e) {
+        msgSpan.className = 'msg-err';
+        msgSpan.textContent = '✗ network error';
+        btn.disabled = false;
+        btn.textContent = '✅ Approve';
+      }
+    }
+    async function doReject(actionId, btn, rejectBtn, msgSpan) {
+      // Show inline input for reason
+      rejectBtn.disabled = true;
+      const inputEl = document.createElement('input');
+      inputEl.className = 'reject-input';
+      inputEl.type = 'text';
+      inputEl.value = 'Not approved';
+      inputEl.placeholder = 'reason...';
+      const confirmBtn = document.createElement('button');
+      confirmBtn.className = 'btn-reject';
+      confirmBtn.textContent = 'Confirm';
+      rejectBtn.replaceWith(inputEl);
+      msgSpan.parentNode.insertBefore(confirmBtn, msgSpan);
+      confirmBtn.addEventListener('click', async () => {
+        confirmBtn.disabled = true;
+        inputEl.disabled = true;
+        confirmBtn.textContent = 'rejecting...';
+        try {
+          const res = await fetch(`/api/actions/${actionId}/reject`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ reason: inputEl.value || 'Not approved' }),
+          });
+          const data = await res.json();
+          if (res.ok) {
+            msgSpan.className = 'msg-ok';
+            msgSpan.textContent = '✓ rejected';
+            setTimeout(refresh, 300);
+          } else {
+            msgSpan.className = 'msg-err';
+            msgSpan.textContent = '✗ ' + (data.error || 'failed');
+            confirmBtn.disabled = false;
+            confirmBtn.textContent = 'Confirm';
+          }
+        } catch (e) {
+          msgSpan.className = 'msg-err';
+          msgSpan.textContent = '✗ network error';
+          confirmBtn.disabled = false;
+          confirmBtn.textContent = 'Confirm';
+        }
+      });
+    }
+    function renderActions(actions) {
+      const tbody = document.getElementById('action-tbody');
+      if (!actions.length) {
+        tbody.innerHTML = '<tr><td colspan="7" class="empty">No actions yet. Connect Claude Code to the waymark MCP server and run some tools.</td></tr>';
+        return;
+      }
+      const rows = actions.map(row => {
+        const isWriteFile = row.tool_name === 'write_file';
+        const isNewFile = isWriteFile && !row.before_snapshot;
+        const isPending = row.decision === 'pending' && row.status === 'pending';
+        const isApproved = row.status === 'success' && row.approved_by;
+        const isRejected = row.status === 'rejected';
+        const isBlocked = row.decision === 'block';
+        const canRollback = isWriteFile && !row.rolled_back && !isBlocked && !isPending && !isApproved && row.status === 'success' && !row.approved_by;
+        let actionCell;
+        if (isPending) {
+          actionCell = `<button class="btn-approve" data-id="${row.action_id}">✅ Approve</button><button class="btn-reject" data-id="${row.action_id}">❌ Reject</button><span class="action-msg"></span>`;
+        } else if (isApproved) {
+          const tip = `by ${row.approved_by}${row.approved_at ? ' at ' + row.approved_at : ''}`.replace(/"/g, '&quot;');
+          actionCell = `<span class="status-approved" title="${tip}">✅ Approved</span>`;
+        } else if (isRejected) {
+          const tip = (row.rejected_reason || '').replace(/"/g, '&quot;');
+          actionCell = `<span class="status-rejected" title="${tip}">❌ Rejected</span>`;
+        } else if (row.rolled_back) {
+          actionCell = `<span class="rolled-back">↩ ${isNewFile ? 'deleted' : 'rolled back'}</span>`;
+        } else if (canRollback) {
+          const btnLabel = isNewFile ? 'delete (new file)' : 'rollback';
+          actionCell = `<button class="rollback" data-id="${row.action_id}" data-newfile="${isNewFile}">${btnLabel}</button><span class="rollback-msg"></span>`;
+        } else {
+          actionCell = `<span style="color:#333">—</span>`;
+        }
+        const stdoutPreview = row.tool_name === 'bash' && row.stdout
+          ? `<span style="color:#666;font-size:11px">${row.stdout.slice(0, 100).replace(/\n/g, '↵')}</span>`
+          : `<span style="color:#333">—</span>`;
+        return `<tr>
+          <td style="white-space:nowrap;color:#555">${timeAgo(row.created_at)}</td>
+          <td>${toolBadge(row.tool_name)}</td>
+          <td>${decisionBadge(row)}</td>
+          <td>${getTargetDisplay(row)}</td>
+          <td>${statusLabel(row.status)}${row.error_message ? `<br><span style="color:#666;font-size:11px">${row.error_message.slice(0,80)}</span>` : ''}</td>
+          <td>${stdoutPreview}</td>
+          <td style="white-space:nowrap">${actionCell}</td>
+        </tr>`;
+      });
+      tbody.innerHTML = rows.join('');
+      tbody.querySelectorAll('button.rollback').forEach(btn => {
+        btn.addEventListener('click', () => {
+          const msgSpan = btn.nextElementSibling;
+          doRollback(btn.dataset.id, btn, msgSpan, btn.dataset.newfile === 'true');
+        });
+      });
+      tbody.querySelectorAll('button.btn-approve').forEach(btn => {
+        btn.addEventListener('click', () => {
+          const msgSpan = btn.parentElement.querySelector('.action-msg');
+          doApprove(btn.dataset.id, btn, msgSpan);
+        });
+      });
+      tbody.querySelectorAll('button.btn-reject').forEach(btn => {
+        btn.addEventListener('click', () => {
+          const approveBtn = btn.previousElementSibling;
+          const msgSpan = btn.nextElementSibling;
+          approveBtn.disabled = true;
+          doReject(btn.dataset.id, approveBtn, btn, msgSpan);
+        });
+      });
+    }
+    async function refresh() {
+      try {
+        const [actionsRes, countRes] = await Promise.all([
+          fetch('/api/actions'),
+          fetch('/api/actions?count=true'),
+        ]);
+        const actions = await actionsRes.json();
+        const { count } = await countRes.json();
+        renderActions(Array.isArray(actions) ? actions : []);
+        document.getElementById('count-display').textContent = `${actions.length} action(s)`;
+        document.getElementById('refresh-display').textContent = 'last refresh: ' + new Date().toLocaleTimeString();
+        const badge = document.getElementById('pending-badge');
+        badge.style.display = count > 0 ? 'inline' : 'none';
+        badge.textContent = `[${count} pending]`;
+      } catch (e) {
+        document.getElementById('count-display').textContent = 'error fetching actions';
+      }
+    }
+    // Config viewer toggle
+    const configToggle = document.getElementById('config-toggle');
+    const configContent = document.getElementById('config-content');
+    let configOpen = false;
+    configToggle.addEventListener('click', async () => {
+      configOpen = !configOpen;
+      configContent.style.display = configOpen ? 'block' : 'none';
+      configToggle.textContent = (configOpen ? '▼' : '▶') + ' Current Policy';
+      if (configOpen) await loadConfigView();
+    });
+    async function loadConfigView() {
+      const body = document.getElementById('config-body');
+      try {
+        const res = await fetch('/api/config');
+        const cfg = await res.json();
+        const p = cfg.policies || {};
+        function renderList(items, cls) {
+          if (!items || !items.length) return '<li style="color:#444">none</li>';
+          return items.map(i => {
+            if (i.startsWith('regex:')) {
+              const pat = i.slice(6);
+              return `<li class="${cls}">${pat} <em style="color:#555;font-style:italic">[pattern]</em></li>`;
+            }
+            return `<li class="${cls}">${i}</li>`;
+          }).join('');
+        }
+        body.innerHTML = `
+          <div class="policy-group">
+            <h4>Allowed Paths</h4>
+            <ul>${renderList(p.allowedPaths, 'policy-allow')}</ul>
+          </div>
+          <div class="policy-group">
+            <h4>Blocked Paths</h4>
+            <ul>${renderList(p.blockedPaths, 'policy-block')}</ul>
+          </div>
+          <div class="policy-group">
+            <h4>Blocked Commands</h4>
+            <ul>${renderList(p.blockedCommands, 'policy-block')}</ul>
+          </div>
+          <div class="policy-group">
+            <h4>Require Approval</h4>
+            <ul>${renderList(p.requireApproval, 'policy-pending')}</ul>
+          </div>
+        `;
+      } catch (e) {
+        body.textContent = 'Error loading config';
+      }
+    }
+    // Initial load + interval
+    refresh();
+    setInterval(refresh, 3000);
+  </script>
+</body>
+</html>