@tankpkg/cli 0.5.0 → 0.6.0

package/dist/lib/permission-checker.js

@@ -0,0 +1,78 @@
+/**
+ * Check if a skill's permissions fit within the project's permission budget.
+ * Throws if any permission exceeds the budget.
+ */
+export function checkPermissionBudget(budget, skillPerms, skillName) {
+    if (!skillPerms)
+        return;
+    // Check subprocess
+    if (skillPerms.subprocess === true && budget.subprocess !== true) {
+        throw new Error(`Permission denied: ${skillName} requires subprocess access, but project budget does not allow it`);
+    }
+    // Check network outbound
+    if (skillPerms.network?.outbound && skillPerms.network.outbound.length > 0) {
+        const budgetDomains = budget.network?.outbound ?? [];
+        for (const domain of skillPerms.network.outbound) {
+            if (!isDomainAllowed(domain, budgetDomains)) {
+                throw new Error(`Permission denied: ${skillName} requests network access to "${domain}", which is not in the project's permission budget`);
+            }
+        }
+    }
+    // Check filesystem read
+    if (skillPerms.filesystem?.read && skillPerms.filesystem.read.length > 0) {
+        const budgetPaths = budget.filesystem?.read ?? [];
+        for (const p of skillPerms.filesystem.read) {
+            if (!isPathAllowed(p, budgetPaths)) {
+                throw new Error(`Permission denied: ${skillName} requests filesystem read access to "${p}", which is not in the project's permission budget`);
+            }
+        }
+    }
+    // Check filesystem write
+    if (skillPerms.filesystem?.write && skillPerms.filesystem.write.length > 0) {
+        const budgetPaths = budget.filesystem?.write ?? [];
+        for (const p of skillPerms.filesystem.write) {
+            if (!isPathAllowed(p, budgetPaths)) {
+                throw new Error(`Permission denied: ${skillName} requests filesystem write access to "${p}", which is not in the project's permission budget`);
+            }
+        }
+    }
+}
+/**
+ * Check if a domain is allowed by the budget's domain list.
+ * Supports wildcard matching: *.example.com matches sub.example.com
+ */
+export function isDomainAllowed(domain, allowedDomains) {
+    for (const allowed of allowedDomains) {
+        if (allowed === domain)
+            return true;
+        // Wildcard matching: *.example.com
+        if (allowed.startsWith('*.')) {
+            const suffix = allowed.slice(1); // .example.com
+            if (domain.endsWith(suffix) || domain === allowed.slice(2)) {
+                return true;
+            }
+            // Also match if the skill requests the same wildcard pattern
+            if (domain === allowed)
+                return true;
+        }
+    }
+    return false;
+}
+/**
+ * Check if a path is allowed by the budget's path list.
+ * Simple subset check: skill path must match one of the budget paths.
+ */
+export function isPathAllowed(requestedPath, allowedPaths) {
+    for (const allowed of allowedPaths) {
+        if (allowed === requestedPath)
+            return true;
+        // If budget allows ./src/** and skill requests ./src/foo, it's allowed
+        if (allowed.endsWith('/**')) {
+            const prefix = allowed.slice(0, -3); // ./src
+            if (requestedPath.startsWith(prefix))
+                return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=permission-checker.js.map

package/dist/lib/permission-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-checker.js","sourceRoot":"","sources":["../../src/lib/permission-checker.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAmB,EACnB,UAAmC,EACnC,SAAiB;IAEjB,IAAI,CAAC,UAAU;QAAE,OAAO;IAExB,mBAAmB;IACnB,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,sBAAsB,SAAS,mEAAmE,CACnG,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,IAAI,UAAU,CAAC,OAAO,EAAE,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;QACrD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjD,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CACb,sBAAsB,SAAS,gCAAgC,MAAM,oDAAoD,CAC1H,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,IAAI,UAAU,CAAC,UAAU,EAAE,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzE,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CACb,sBAAsB,SAAS,wCAAwC,CAAC,oDAAoD,CAC7H,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,UAAU,CAAC,UAAU,EAAE,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC5C,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CACb,sBAAsB,SAAS,yCAAyC,CAAC,oDAAoD,CAC9H,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,cAAwB;IACtE,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACpC,mCAAmC;QACnC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe;YAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,6DAA6D;YAC7D,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,aAAqB,EAAE,YAAsB;IACzE,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,OAAO,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QAC3C,uEAAuE;QACvE,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ;YAC7C,IAAI,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tankpkg/cli",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Security-first package manager for AI agent skills",
   "type": "module",
   "bin": {