@terminai/core 0.21.0

package/dist/src/safety/approval-ladder/buildShellActionProfile.js

@@ -0,0 +1,285 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { stripShellWrapper, parseCommandDetails, getCommandRoots, } from '../../utils/shell-utils.js';
+/**
+ * Explicit mapping of command roots to operation classifications.
+ *
+ * This mapping is deterministic and based on commonly understood
+ * command semantics. Add entries as needed but keep focused on
+ * high-impact safety-relevant commands.
+ */
+const COMMAND_OPERATION_MAP = {
+    // Read operations
+    ls: ['read'],
+    cat: ['read'],
+    less: ['read'],
+    more: ['read'],
+    head: ['read'],
+    tail: ['read'],
+    grep: ['read'],
+    find: ['read'],
+    du: ['read'],
+    df: ['read'],
+    free: ['read'],
+    ps: ['read'],
+    top: ['read'],
+    htop: ['read'],
+    who: ['read'],
+    w: ['read'],
+    uptime: ['read'],
+    echo: ['read'],
+    // Write operations
+    tee: ['write'],
+    touch: ['write'],
+    mv: ['write'],
+    cp: ['write'],
+    rsync: ['write'],
+    tar: ['write'],
+    zip: ['write'],
+    unzip: ['write'],
+    gzip: ['write'],
+    gunzip: ['write'],
+    // Delete operations
+    rm: ['delete'],
+    rmdir: ['delete'],
+    unlink: ['delete'],
+    // Privileged operations
+    sudo: ['privileged'],
+    doas: ['privileged'],
+    su: ['privileged'],
+    // Network operations
+    curl: ['network'],
+    wget: ['network'],
+    scp: ['network'],
+    sftp: ['network'],
+    ssh: ['network'],
+    nc: ['network'],
+    netcat: ['network'],
+    telnet: ['network'],
+    ftp: ['network'],
+    ping: ['network', 'read'],
+    // Process operations
+    kill: ['process'],
+    pkill: ['process'],
+    killall: ['process'],
+    systemctl: ['process'],
+    service: ['process'],
+    launchctl: ['process'],
+    // Device operations
+    dd: ['device'],
+    mkfs: ['device'],
+    fdisk: ['device'],
+    parted: ['device'],
+    mount: ['device'],
+    umount: ['device'],
+    // Package managers (write + network)
+    npm: ['write', 'network'],
+    yarn: ['write', 'network'],
+    pnpm: ['write', 'network'],
+    pip: ['write', 'network'],
+    apt: ['write', 'network'],
+    'apt-get': ['write', 'network'],
+    dnf: ['write', 'network'],
+    yum: ['write', 'network'],
+    brew: ['write', 'network'],
+    // Git (mostly write, some network)
+    git: ['read'], // Subcommand-aware classification is applied below.
+};
+/**
+ * Builds an ActionProfile for a shell command by analyzing its structure and content.
+ *
+ * @param args Command, cwd, workspaces, and optional provenance
+ * @returns Deterministic ActionProfile
+ */
+export function buildShellActionProfile(args) {
+    const { command, workspaces, provenance = ['unknown'] } = args;
+    // Step 1: Normalize command
+    const normalized = stripShellWrapper(command);
+    // Step 2: Parse shell structure
+    const parseResult = parseCommandDetails(normalized);
+    const parseConfidence = !parseResult || parseResult.hasError ? 'low' : 'high';
+    // Step 3: Extract roots
+    const roots = parseConfidence !== 'low' ? getCommandRoots(normalized) : [];
+    // Step 4: Classify operations
+    const operationsSet = new Set();
+    if (roots.length === 0) {
+        operationsSet.add('unknown');
+    }
+    else {
+        // Classify based on command roots
+        roots.forEach((root) => {
+            const ops = COMMAND_OPERATION_MAP[root];
+            if (ops) {
+                ops.forEach((op) => operationsSet.add(op));
+            }
+        });
+        // Secondary check: scan normalized command text for operation keywords
+        // This catches operations within sudo/other wrappers
+        Object.entries(COMMAND_OPERATION_MAP).forEach(([cmd, ops]) => {
+            // Use word boundaries to avoid false positives
+            const regex = new RegExp(`\\b${cmd}\\b`);
+            if (regex.test(normalized)) {
+                ops.forEach((op) => operationsSet.add(op));
+            }
+        });
+        // Check for redirections and other write indicators
+        if (normalized.includes('>') || normalized.includes('>>')) {
+            operationsSet.add('write');
+        }
+        // Check for device paths
+        if (normalized.includes('/dev/')) {
+            operationsSet.add('device');
+        }
+        // Subcommand-aware classification for git
+        if (roots.includes('git')) {
+            const match = normalized.match(/\bgit\s+([^\s]+)/);
+            const sub = match?.[1]?.toLowerCase();
+            const readOnly = new Set([
+                'status',
+                'log',
+                'diff',
+                'show',
+                'grep',
+                'blame',
+                'rev-parse',
+                'ls-files',
+                'remote',
+                'config',
+            ]);
+            if (!sub || !readOnly.has(sub)) {
+                operationsSet.add('write');
+            }
+            const networkSubs = new Set([
+                'push',
+                'pull',
+                'fetch',
+                'clone',
+                'submodule',
+            ]);
+            if (sub && networkSubs.has(sub)) {
+                operationsSet.add('network');
+            }
+            const deleteSubs = new Set(['clean', 'reset', 'rm']);
+            if (sub && deleteSubs.has(sub)) {
+                operationsSet.add('delete');
+            }
+        }
+        // If no operations classified, default to unknown
+        if (operationsSet.size === 0) {
+            operationsSet.add('unknown');
+        }
+    }
+    const operations = Array.from(operationsSet);
+    // Step 5: Determine outsideWorkspace
+    let outsideWorkspace = false;
+    // Simple heuristic: check for obvious outside-workspace paths
+    const dangerousPaths = [
+        '/',
+        '/etc',
+        '/var',
+        '/usr',
+        '/bin',
+        '/sbin',
+        '/home',
+    ];
+    for (const path of dangerousPaths) {
+        // Check for exact match or path followed by space/slash
+        if (normalized.includes(` ${path} `) ||
+            normalized.includes(` ${path}/`) ||
+            normalized.endsWith(` ${path}`) ||
+            normalized === path ||
+            normalized.startsWith(`${path}/`)) {
+            // Verify it's not within a workspace
+            const isInWorkspace = workspaces.some((ws) => path.startsWith(ws));
+            if (!isInWorkspace) {
+                outsideWorkspace = true;
+                break;
+            }
+        }
+    }
+    // Check for home directory (~)
+    if (normalized.includes('~')) {
+        const isHomeInWorkspace = workspaces.some((ws) => ws.startsWith(process.env['HOME'] || ''));
+        if (!isHomeInWorkspace) {
+            outsideWorkspace = true;
+        }
+    }
+    // Step 6: Determine hasUnboundedScopeSignals
+    let hasUnboundedScopeSignals = false;
+    if (operations.includes('delete')) {
+        // Check for dangerous patterns
+        const unboundedPatterns = [
+            ' / ',
+            'rm -rf /',
+            'rm -rf ~',
+            'rm -r /',
+            'rm -r ~',
+        ];
+        for (const pattern of unboundedPatterns) {
+            if (normalized.includes(pattern)) {
+                hasUnboundedScopeSignals = true;
+                break;
+            }
+        }
+        // Check for wildcard deletes (but not relative paths like ./)
+        if (normalized.includes('rm -rf *') || normalized.includes('rm -r *')) {
+            hasUnboundedScopeSignals = true;
+        }
+        // Check if ending with / or ~ (targeting root/home)
+        if (normalized.endsWith(' /') || normalized.endsWith(' ~')) {
+            hasUnboundedScopeSignals = true;
+        }
+    }
+    // Determine usesPrivilege
+    const usesPrivilege = operations.includes('privileged');
+    // Step 7: Extract network targets
+    const networkTargets = [];
+    if (operations.includes('network')) {
+        // Simple extraction for common tools
+        const parts = normalized.split(/\s+/);
+        if (roots.includes('curl') || roots.includes('wget')) {
+            const url = parts.find((p) => p.includes('://') || p.match(/^[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/));
+            if (url)
+                networkTargets.push(url);
+        }
+        else if (roots.includes('ssh')) {
+            // ssh user@host
+            const target = parts.find((p) => p.includes('@') || (p !== 'ssh' && !p.startsWith('-')));
+            if (target)
+                networkTargets.push(target);
+        }
+        else if (roots.includes('git')) {
+            // git clone <url>
+            // git push <remote> ...
+            const url = parts.find((p) => p.includes('://') || p.includes('git@'));
+            if (url)
+                networkTargets.push(url);
+        }
+        else if (roots.includes('npm') ||
+            roots.includes('yarn') ||
+            roots.includes('pnpm')) {
+            networkTargets.push('npmjs.org');
+        }
+        else if (roots.includes('pip')) {
+            networkTargets.push('pypi.org');
+        }
+    }
+    return {
+        toolName: 'ShellTool',
+        operations,
+        roots,
+        touchedPaths: [], // TODO: Extract from parsed command if needed
+        outsideWorkspace,
+        usesPrivilege,
+        hasUnboundedScopeSignals,
+        networkTargets,
+        parseConfidence,
+        provenance,
+        rawSummary: command,
+    };
+}
+//# sourceMappingURL=buildShellActionProfile.js.map

package/dist/src/safety/approval-ladder/buildShellActionProfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildShellActionProfile.js","sourceRoot":"","sources":["../../../../src/safety/approval-ladder/buildShellActionProfile.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,GAChB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAqC;IAC9D,kBAAkB;IAClB,EAAE,EAAE,CAAC,MAAM,CAAC;IACZ,GAAG,EAAE,CAAC,MAAM,CAAC;IACb,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,EAAE,EAAE,CAAC,MAAM,CAAC;IACZ,EAAE,EAAE,CAAC,MAAM,CAAC;IACZ,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,EAAE,EAAE,CAAC,MAAM,CAAC;IACZ,GAAG,EAAE,CAAC,MAAM,CAAC;IACb,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,GAAG,EAAE,CAAC,MAAM,CAAC;IACb,CAAC,EAAE,CAAC,MAAM,CAAC;IACX,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,IAAI,EAAE,CAAC,MAAM,CAAC;IAEd,mBAAmB;IACnB,GAAG,EAAE,CAAC,OAAO,CAAC;IACd,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,EAAE,EAAE,CAAC,OAAO,CAAC;IACb,EAAE,EAAE,CAAC,OAAO,CAAC;IACb,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,GAAG,EAAE,CAAC,OAAO,CAAC;IACd,GAAG,EAAE,CAAC,OAAO,CAAC;IACd,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,MAAM,EAAE,CAAC,OAAO,CAAC;IAEjB,oBAAoB;IACpB,EAAE,EAAE,CAAC,QAAQ,CAAC;IACd,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,MAAM,EAAE,CAAC,QAAQ,CAAC;IAElB,wBAAwB;IACxB,IAAI,EAAE,CAAC,YAAY,CAAC;IACpB,IAAI,EAAE,CAAC,YAAY,CAAC;IACpB,EAAE,EAAE,CAAC,YAAY,CAAC;IAElB,qBAAqB;IACrB,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,GAAG,EAAE,CAAC,SAAS,CAAC;IAChB,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,GAAG,EAAE,CAAC,SAAS,CAAC;IAChB,EAAE,EAAE,CAAC,SAAS,CAAC;IACf,MAAM,EAAE,CAAC,SAAS,CAAC;IACnB,MAAM,EAAE,CAAC,SAAS,CAAC;IACnB,GAAG,EAAE,CAAC,SAAS,CAAC;IAChB,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;IAEzB,qBAAqB;IACrB,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,KAAK,EAAE,CAAC,SAAS,CAAC;IAClB,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,SAAS,EAAE,CAAC,SAAS,CAAC;IACtB,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,SAAS,EAAE,CAAC,SAAS,CAAC;IAEtB,oBAAoB;IACpB,EAAE,EAAE,CAAC,QAAQ,CAAC;IACd,IAAI,EAAE,CAAC,QAAQ,CAAC;IAChB,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,MAAM,EAAE,CAAC,QAAQ,CAAC;IAElB,qCAAqC;IACrC,GAAG,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IACzB,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IAC1B,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IAC1B,GAAG,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IACzB,GAAG,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IACzB,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IAC/B,GAAG,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IACzB,GAAG,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IACzB,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IAE1B,mCAAmC;IACnC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,oDAAoD;CACpE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC;IAE/D,4BAA4B;IAC5B,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE9C,gCAAgC;IAChC,MAAM,WAAW,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,eAAe,GACnB,CAAC,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAExD,wBAAwB;IACxB,MAAM,KAAK,GAAG,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3E,8BAA8B;IAC9B,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEhD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,kCAAkC;QAClC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,uEAAuE;QACvE,qDAAqD;QACrD,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE;YAC3D,+CAA+C;YAC/C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,oDAAoD;QACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAED,yBAAyB;QACzB,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAED,0CAA0C;QAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;gBACvB,QAAQ;gBACR,KAAK;gBACL,MAAM;gBACN,MAAM;gBACN,MAAM;gBACN,OAAO;gBACP,WAAW;gBACX,UAAU;gBACV,QAAQ;gBACR,QAAQ;aACT,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;gBAC1B,MAAM;gBACN,MAAM;gBACN,OAAO;gBACP,OAAO;gBACP,WAAW;aACZ,CAAC,CAAC;YACH,IAAI,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YACrD,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC7B,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAE7C,qCAAqC;IACrC,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAE7B,8DAA8D;IAC9D,MAAM,cAAc,GAAG;QACrB,GAAG;QACH,MAAM;QACN,MAAM;QACN,MAAM;QACN,MAAM;QACN,OAAO;QACP,OAAO;KACR,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,wDAAwD;QACxD,IACE,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC;YAChC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC;YAChC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YAC/B,UAAU,KAAK,IAAI;YACnB,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,EACjC,CAAC;YACD,qCAAqC;YACrC,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/C,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CACzC,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,wBAAwB,GAAG,KAAK,CAAC;IAErC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,+BAA+B;QAC/B,MAAM,iBAAiB,GAAG;YACxB,KAAK;YACL,UAAU;YACV,UAAU;YACV,SAAS;YACT,SAAS;SACV,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,wBAAwB,GAAG,IAAI,CAAC;gBAChC,MAAM;YACR,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACtE,wBAAwB,GAAG,IAAI,CAAC;QAClC,CAAC;QAED,oDAAoD;QACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,wBAAwB,GAAG,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAExD,kCAAkC;IAClC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,qCAAqC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CACpB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CACrE,CAAC;YACF,IAAI,GAAG;gBAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,gBAAgB;YAChB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAC9D,CAAC;YACF,IAAI,MAAM;gBAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,kBAAkB;YAClB,wBAAwB;YACxB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,GAAG;gBAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;aAAM,IACL,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YACrB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACtB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EACtB,CAAC;YACD,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,UAAU;QACV,KAAK;QACL,YAAY,EAAE,EAAE,EAAE,8CAA8C;QAChE,gBAAgB;QAChB,aAAa;QACb,wBAAwB;QACxB,cAAc;QACd,eAAe;QACf,UAAU;QACV,UAAU,EAAE,OAAO;KACpB,CAAC;AACJ,CAAC"}

package/dist/src/safety/approval-ladder/buildToolActionProfile.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { ActionProfile, Provenance } from './types.js';
+import type { Config } from '../../config/config.js';
+type BuildToolActionProfileArgs = {
+    toolName: string;
+    args: Record<string, unknown>;
+    config: Config;
+    provenance?: Provenance[];
+};
+export declare function buildToolActionProfile({ toolName, args, config, provenance, }: BuildToolActionProfileArgs): ActionProfile;
+export {};

package/dist/src/safety/approval-ladder/buildToolActionProfile.js

@@ -0,0 +1,255 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import os from 'node:os';
+import path from 'node:path';
+import process from 'node:process';
+import { EDIT_TOOL_NAME, SMART_EDIT_TOOL_NAME, WRITE_FILE_TOOL_NAME, FILE_OPS_TOOL_NAME, PROCESS_MANAGER_TOOL_NAME, WEB_FETCH_TOOL_NAME, WEB_SEARCH_TOOL_NAME, REPL_TOOL_NAME, UI_ASSERT_TOOL_NAME, UI_CAPABILITIES_TOOL_NAME, UI_CLICK_TOOL_NAME, UI_CLICK_XY_TOOL_NAME, UI_DESCRIBE_TOOL_NAME, UI_FOCUS_TOOL_NAME, UI_HEALTH_TOOL_NAME, UI_KEY_TOOL_NAME, UI_QUERY_TOOL_NAME, UI_SCROLL_TOOL_NAME, UI_SNAPSHOT_TOOL_NAME, UI_TYPE_TOOL_NAME, UI_WAIT_TOOL_NAME, } from '../../tools/tool-names.js';
+const UI_MUTATING_TOOLS = new Set([
+    UI_CLICK_TOOL_NAME,
+    UI_TYPE_TOOL_NAME,
+    UI_KEY_TOOL_NAME,
+    UI_SCROLL_TOOL_NAME,
+    UI_FOCUS_TOOL_NAME,
+    UI_CLICK_XY_TOOL_NAME,
+]);
+const UI_READ_TOOLS = new Set([
+    UI_HEALTH_TOOL_NAME,
+    UI_CAPABILITIES_TOOL_NAME,
+    UI_SNAPSHOT_TOOL_NAME,
+    UI_QUERY_TOOL_NAME,
+    UI_DESCRIBE_TOOL_NAME,
+    UI_WAIT_TOOL_NAME,
+    UI_ASSERT_TOOL_NAME,
+]);
+function normalizeProvenance(provenance) {
+    if (!provenance || provenance.length === 0) {
+        return ['unknown'];
+    }
+    const unique = new Set();
+    const merged = [];
+    for (const entry of provenance) {
+        if (!unique.has(entry)) {
+            unique.add(entry);
+            merged.push(entry);
+        }
+    }
+    return merged;
+}
+function resolveTargetDir(config) {
+    if (typeof config.getTargetDir === 'function') {
+        return config.getTargetDir();
+    }
+    return process.cwd();
+}
+function isPathWithinRoot(root, targetPath) {
+    const relative = path.relative(path.resolve(root), path.resolve(targetPath));
+    return (!relative.startsWith(`..${path.sep}`) &&
+        relative !== '..' &&
+        !path.isAbsolute(relative));
+}
+function resolveToolPath(config, value) {
+    if (typeof value !== 'string') {
+        return null;
+    }
+    const trimmed = value.trim();
+    if (!trimmed) {
+        return null;
+    }
+    return path.resolve(resolveTargetDir(config), trimmed);
+}
+function uniquePaths(paths) {
+    const result = [];
+    const seen = new Set();
+    for (const entry of paths) {
+        if (!entry || seen.has(entry)) {
+            continue;
+        }
+        seen.add(entry);
+        result.push(entry);
+    }
+    return result;
+}
+function isUnboundedDeletePath(resolvedPath, workspaceRoots) {
+    const normalized = path.resolve(resolvedPath);
+    const rootPath = path.parse(normalized).root;
+    if (normalized === rootPath) {
+        return true;
+    }
+    if (normalized === os.homedir()) {
+        return true;
+    }
+    return workspaceRoots.some((root) => path.resolve(root) === normalized);
+}
+export function buildToolActionProfile({ toolName, args, config, provenance, }) {
+    const operations = new Set();
+    const targetDir = resolveTargetDir(config);
+    const workspaceContext = typeof config.getWorkspaceContext === 'function'
+        ? config.getWorkspaceContext()
+        : null;
+    const workspaceRoots = workspaceContext && typeof workspaceContext.getDirectories === 'function'
+        ? workspaceContext.getDirectories()
+        : [targetDir];
+    let parseConfidence = 'high';
+    let hasUnboundedScopeSignals = false;
+    let rawSummary = toolName;
+    let touchedPaths = [];
+    const networkTargets = [];
+    switch (toolName) {
+        case EDIT_TOOL_NAME:
+        case SMART_EDIT_TOOL_NAME:
+        case WRITE_FILE_TOOL_NAME: {
+            operations.add('write');
+            const filePath = resolveToolPath(config, args['file_path']);
+            touchedPaths = uniquePaths([filePath]);
+            if (!filePath) {
+                parseConfidence = 'low';
+            }
+            rawSummary = `${toolName} ${args['file_path'] ?? ''}`.trim();
+            break;
+        }
+        case FILE_OPS_TOOL_NAME: {
+            const operation = typeof args['operation'] === 'string' ? args['operation'] : 'unknown';
+            rawSummary = `${toolName}:${operation}`;
+            switch (operation) {
+                case 'delete': {
+                    operations.add('delete');
+                    const targetPath = resolveToolPath(config, args['path']);
+                    touchedPaths = uniquePaths([targetPath]);
+                    if (targetPath) {
+                        hasUnboundedScopeSignals = isUnboundedDeletePath(targetPath, workspaceRoots);
+                    }
+                    else {
+                        parseConfidence = 'low';
+                    }
+                    break;
+                }
+                case 'move': {
+                    operations.add('write');
+                    operations.add('delete');
+                    const fromPath = resolveToolPath(config, args['from']);
+                    const toPath = resolveToolPath(config, args['to']);
+                    touchedPaths = uniquePaths([fromPath, toPath]);
+                    if (!fromPath || !toPath) {
+                        parseConfidence = 'low';
+                    }
+                    break;
+                }
+                case 'copy': {
+                    operations.add('write');
+                    const fromPath = resolveToolPath(config, args['from']);
+                    const toPath = resolveToolPath(config, args['to']);
+                    touchedPaths = uniquePaths([fromPath, toPath]);
+                    if (!fromPath || !toPath) {
+                        parseConfidence = 'low';
+                    }
+                    break;
+                }
+                case 'mkdir': {
+                    operations.add('write');
+                    const targetPath = resolveToolPath(config, args['path']);
+                    touchedPaths = uniquePaths([targetPath]);
+                    if (!targetPath) {
+                        parseConfidence = 'low';
+                    }
+                    break;
+                }
+                case 'list_tree': {
+                    operations.add('read');
+                    const targetPath = resolveToolPath(config, args['path']);
+                    touchedPaths = uniquePaths([targetPath]);
+                    if (!targetPath) {
+                        parseConfidence = 'low';
+                    }
+                    break;
+                }
+                default:
+                    operations.add('unknown');
+                    parseConfidence = 'low';
+            }
+            break;
+        }
+        case PROCESS_MANAGER_TOOL_NAME: {
+            const operation = typeof args['operation'] === 'string' ? args['operation'] : 'unknown';
+            const readOperations = new Set(['list', 'status', 'read', 'summarize']);
+            if (readOperations.has(operation)) {
+                operations.add('read');
+            }
+            else if (operation === 'unknown') {
+                operations.add('unknown');
+                parseConfidence = 'low';
+            }
+            else {
+                operations.add('process');
+            }
+            rawSummary = `${toolName}:${operation}`.trim();
+            break;
+        }
+        case WEB_FETCH_TOOL_NAME: {
+            operations.add('network');
+            const url = typeof args['url'] === 'string' ? args['url'] : '';
+            if (url) {
+                // Simple extraction of target
+                networkTargets.push(url);
+            }
+            rawSummary = `${toolName} ${args['url'] ?? ''}`.trim();
+            break;
+        }
+        case WEB_SEARCH_TOOL_NAME: {
+            operations.add('network');
+            networkTargets.push('google.com'); // Default to google for search tool
+            rawSummary = `${toolName} ${args['query'] ?? ''}`.trim();
+            break;
+        }
+        case REPL_TOOL_NAME: {
+            operations.add('process');
+            const language = typeof args['language'] === 'string' ? args['language'] : 'unknown';
+            if (language === 'shell') {
+                operations.add('unknown');
+            }
+            const code = typeof args['code'] === 'string' ? args['code'] : '';
+            if (code.length > 200 || code.split('\n').length > 3) {
+                parseConfidence = 'low';
+            }
+            rawSummary = `${toolName}:${language}`;
+            break;
+        }
+        default: {
+            if (UI_MUTATING_TOOLS.has(toolName)) {
+                operations.add('ui');
+            }
+            else if (UI_READ_TOOLS.has(toolName)) {
+                operations.add('read');
+            }
+            else {
+                operations.add('unknown');
+                parseConfidence = 'low';
+            }
+        }
+    }
+    if (operations.size === 0) {
+        operations.add('unknown');
+    }
+    const outsideWorkspace = touchedPaths.length > 0 &&
+        touchedPaths.some((targetPath) => workspaceContext &&
+            typeof workspaceContext.isPathWithinWorkspace === 'function'
+            ? !workspaceContext.isPathWithinWorkspace(targetPath)
+            : !workspaceRoots.some((root) => isPathWithinRoot(root, targetPath)));
+    return {
+        toolName,
+        operations: Array.from(operations),
+        roots: [toolName],
+        touchedPaths,
+        outsideWorkspace,
+        usesPrivilege: false,
+        hasUnboundedScopeSignals,
+        networkTargets,
+        parseConfidence,
+        provenance: normalizeProvenance(provenance),
+        rawSummary,
+    };
+}
+//# sourceMappingURL=buildToolActionProfile.js.map

package/dist/src/safety/approval-ladder/buildToolActionProfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildToolActionProfile.js","sourceRoot":"","sources":["../../../../src/safety/approval-ladder/buildToolActionProfile.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AAInC,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AASnC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,qBAAqB;CACtB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,mBAAmB;IACnB,yBAAyB;IACzB,qBAAqB;IACrB,kBAAkB;IAClB,qBAAqB;IACrB,iBAAiB;IACjB,mBAAmB;CACpB,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,UAAyB;IACpD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,SAAS,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAc,CAAC;IACrC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,YAAY,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,UAAkB;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7E,OAAO,CACL,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,QAAQ,KAAK,IAAI;QACjB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,KAA2B;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,YAAoB,EACpB,cAAiC;IAEjC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IAC7C,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,UAAU,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,EACrC,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,UAAU,GACiB;IAC3B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GACpB,OAAO,MAAM,CAAC,mBAAmB,KAAK,UAAU;QAC9C,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE;QAC9B,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,cAAc,GAClB,gBAAgB,IAAI,OAAO,gBAAgB,CAAC,cAAc,KAAK,UAAU;QACvE,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE;QACnC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClB,IAAI,eAAe,GAA8B,MAAM,CAAC;IACxD,IAAI,wBAAwB,GAAG,KAAK,CAAC;IACrC,IAAI,UAAU,GAAG,QAAQ,CAAC;IAC1B,IAAI,YAAY,GAAa,EAAE,CAAC;IAChC,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAC5D,YAAY,GAAG,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,eAAe,GAAG,KAAK,CAAC;YAC1B,CAAC;YACD,UAAU,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YAC7D,MAAM;QACR,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,UAAU,GAAG,GAAG,QAAQ,IAAI,SAAS,EAAE,CAAC;YACxC,QAAQ,SAAS,EAAE,CAAC;gBAClB,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBACzB,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;oBACzD,YAAY,GAAG,WAAW,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;oBACzC,IAAI,UAAU,EAAE,CAAC;wBACf,wBAAwB,GAAG,qBAAqB,CAC9C,UAAU,EACV,cAAc,CACf,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,eAAe,GAAG,KAAK,CAAC;oBAC1B,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACxB,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBACzB,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;oBACvD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;oBACnD,YAAY,GAAG,WAAW,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;oBAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;wBACzB,eAAe,GAAG,KAAK,CAAC;oBAC1B,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACxB,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;oBACvD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;oBACnD,YAAY,GAAG,WAAW,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;oBAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;wBACzB,eAAe,GAAG,KAAK,CAAC;oBAC1B,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACxB,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;oBACzD,YAAY,GAAG,WAAW,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;oBACzC,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,eAAe,GAAG,KAAK,CAAC;oBAC1B,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACvB,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;oBACzD,YAAY,GAAG,WAAW,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;oBACzC,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,eAAe,GAAG,KAAK,CAAC;oBAC1B,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD;oBACE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBAC1B,eAAe,GAAG,KAAK,CAAC;YAC5B,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,yBAAyB,CAAC,CAAC,CAAC;YAC/B,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YACxE,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;iBAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1B,eAAe,GAAG,KAAK,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;YACD,UAAU,GAAG,GAAG,QAAQ,IAAI,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC;YAC/C,MAAM;QACR,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,GAAG,EAAE,CAAC;gBACR,8BAA8B;gBAC9B,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,UAAU,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YACvD,MAAM;QACR,CAAC;QACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1B,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,oCAAoC;YACvE,UAAU,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YACzD,MAAM;QACR,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,QAAQ,GACZ,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,eAAe,GAAG,KAAK,CAAC;YAC1B,CAAC;YACD,UAAU,GAAG,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACvC,MAAM;QACR,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1B,eAAe,GAAG,KAAK,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1B,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,gBAAgB,GACpB,YAAY,CAAC,MAAM,GAAG,CAAC;QACvB,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC/B,gBAAgB;YAChB,OAAO,gBAAgB,CAAC,qBAAqB,KAAK,UAAU;YAC1D,CAAC,CAAC,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,UAAU,CAAC;YACrD,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CACvE,CAAC;IAEJ,OAAO;QACL,QAAQ;QACR,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;QAClC,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,YAAY;QACZ,gBAAgB;QAChB,aAAa,EAAE,KAAK;QACpB,wBAAwB;QACxB,cAAc;QACd,eAAe;QACf,UAAU,EAAE,mBAAmB,CAAC,UAAU,CAAC;QAC3C,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/src/safety/approval-ladder/classifyDomain.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { ActionProfile, Domain } from './types.js';
+import type { Config } from '../../config/config.js';
+export declare function classifyDomain(action: ActionProfile, config: Config): Domain;