@stratusagent/permissions 0.11.8 → 0.11.9

package/dist/commands.d.ts

@@ -55,6 +55,28 @@ export interface CommandScope {
      * ordinary push.
      */
     denyRefspecForms?: boolean;
+    /**
+     * At most this many positional arguments, where `listOnly` allows none.
+     * `grep` reads its pattern from the first positional and a *file* from
+     * every one after it, so a `grep` that may only filter what is piped to
+     * it is a `grep` with one.
+     */
+    maxPositionals?: number;
+    /**
+     * Flags whose value is the next token (`-n 20`), so that token is read
+     * as the flag's value rather than counted as a positional. Matched as
+     * the token is spelled, whole: `-n` takes a value, a bundle like `-vn`
+     * does not, and its next token counts as a positional.
+     */
+    flagsWithValue?: string[];
+    /**
+     * Refuse any token the shell would expand: an unquoted glob, brace,
+     * `~`, `$`, or backslash. A filter limited to one positional is only
+     * limited to one if the shell agrees — unquoted `grep *` is `grep`
+     * handed every file in the directory, the first as its pattern and the
+     * rest to read.
+     */
+    literal?: boolean;
 }
 /**
  * The commands that run unattended out of the box.
@@ -73,13 +95,29 @@ export interface CommandScope {
  * error text, which the shell tool returns. A command that can be handed a
  * path is a file reader wearing another name.
  */
+/**
+ * An `allowedFlags` entry admitting a flag that is only a number, the way
+ * `head -20` spells `head -n 20`. Not a letter, so no bundle can spell it.
+ */
+export declare const NUMERIC_FLAG = "-<number>";
 export declare const SAFE_COMMAND_SCOPES: CommandScope[];
 export interface CommandAnalysis {
     /** The command as written, for messages and prompts. */
     command: string;
-    /** The base command, absent when the string could not be tokenized. */
+    /** The base command, absent when the string could not be tokenized or is a pipeline. */
     base?: string;
     tokens: string[];
+    /**
+     * Per token, whether the shell would expand it (an unquoted glob, brace,
+     * `~`, `$`, or backslash). Absent reads as "nothing expands", which only
+     * a scope marked `literal` consults.
+     */
+    expands?: boolean[];
+    /**
+     * The commands of a pipeline (`a | b`), each analyzed on its own. Present,
+     * the invocation is covered only when every one of them is.
+     */
+    pipeline?: CommandAnalysis[];
     /**
      * Why this invocation cannot be auto-approved at all — a control
      * operator, an unbalanced quote, an absolute path. Undefined means it is
@@ -91,6 +129,11 @@ export interface CommandAnalysis {
 export declare const analyzeCommand: (command: string) => CommandAnalysis;
 /** Whether an invocation falls inside one scope. */
 export declare const matchesScope: (analysis: CommandAnalysis, scope: CommandScope) => boolean;
+/**
+ * The scopes covering an invocation, one per command of a pipeline and one
+ * for a plain command, or undefined unless every command is covered.
+ */
+export declare const findCoveringScopes: (analysis: CommandAnalysis, scopes: readonly CommandScope[]) => CommandScope[] | undefined;
 /** The first scope covering this invocation, if any covers it. */
 export declare const findMatchingScope: (analysis: CommandAnalysis, scopes: readonly CommandScope[]) => CommandScope | undefined;
 /**
@@ -130,6 +173,23 @@ export declare const findMatchingScope: (analysis: CommandAnalysis, scopes: read
  * counts once.
  */
 export declare const normalizeCommandScope: (analysis: CommandAnalysis) => CommandScope | undefined;
+/**
+ * The scope an operator declares in config (`approvals.commands`): a
+ * command and, optionally, the subcommands it is limited to — `agentboard`,
+ * `pnpm test`, `gh pr`. Whatever follows the prefix may vary, the way a
+ * remembered scope's arguments do, and the same things stay refused: the
+ * destructive flags, whatever the built-in list refuses for that command,
+ * and git's refspec deletes.
+ *
+ * Only words. A flag, an operator, or a token the shell would expand has no
+ * meaning as a prefix, and guessing one would be a grant nobody wrote, so
+ * the entry is refused with the reason instead.
+ */
+export declare const commandScopeFromPrefix: (prefix: string) => {
+    scope: CommandScope;
+} | {
+    reason: string;
+};
 /** One line an operator can read in a log or a whitelist listing. */
 export declare const describeCommandScope: (scope: CommandScope) => string;
 /** Whether two scopes permit the same thing, so a whitelist does not grow duplicates. */

package/dist/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AA+CD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,EAAE,YAAY,EAoD7C,CAAC;AAqBF,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA4CD,6DAA6D;AAC7D,eAAO,MAAM,cAAc,GAAI,SAAS,MAAM,KAAG,eA0BhD,CAAC;AAwCF,oDAAoD;AACpD,eAAO,MAAM,YAAY,GAAI,UAAU,eAAe,EAAE,OAAO,YAAY,KAAG,OA2D7E,CAAC;AAEF,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,GAC5B,UAAU,eAAe,EACzB,QAAQ,SAAS,YAAY,EAAE,KAC9B,YAAY,GAAG,SAAkE,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,qBAAqB,GAAI,UAAU,eAAe,KAAG,YAAY,GAAG,SAoGhF,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,GAAI,OAAO,YAAY,KAAG,MACT,CAAC;AAEnD,yFAAyF;AACzF,eAAO,MAAM,SAAS,GAAI,MAAM,YAAY,EAAE,OAAO,YAAY,KAAG,OACsB,CAAC;AAY3F,4DAA4D;AAC5D,eAAO,MAAM,iBAAiB,GAAI,KAAK,OAAO,KAAG,YAAY,GAAG,SAwB/D,CAAC"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA+CD;;;;;;;;;;;;;;;;GAgBG;AACH;;;GAGG;AACH,eAAO,MAAM,YAAY,cAAc,CAAC;AAExC,eAAO,MAAM,mBAAmB,EAAE,YAAY,EAiH7C,CAAC;AAqBF,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAuFD,6DAA6D;AAC7D,eAAO,MAAM,cAAc,GAAI,SAAS,MAAM,KAAG,eAMhD,CAAC;AAwKF,oDAAoD;AACpD,eAAO,MAAM,YAAY,GAAI,UAAU,eAAe,EAAE,OAAO,YAAY,KAAG,OA6H7E,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAC7B,UAAU,eAAe,EACzB,QAAQ,SAAS,YAAY,EAAE,KAC9B,YAAY,EAAE,GAAG,SAWnB,CAAC;AAEF,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,GAC5B,UAAU,eAAe,EACzB,QAAQ,SAAS,YAAY,EAAE,KAC9B,YAAY,GAAG,SAAkE,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,qBAAqB,GAAI,UAAU,eAAe,KAAG,YAAY,GAAG,SA6HhF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,GAAI,QAAQ,MAAM,KAAG;IAAE,KAAK,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAsFjG,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,GAAI,OAAO,YAAY,KAAG,MACT,CAAC;AAEnD,yFAAyF;AACzF,eAAO,MAAM,SAAS,GAAI,MAAM,YAAY,EAAE,OAAO,YAAY,KAAG,OACsB,CAAC;AAe3F,4DAA4D;AAC5D,eAAO,MAAM,iBAAiB,GAAI,KAAK,OAAO,KAAG,YAAY,GAAG,SAgC/D,CAAC"}