@wrongstack/core 0.310.1 → 0.313.1

package/dist/chunk-ZEHUCJHY.js

@@ -0,0 +1,129 @@
+import {
+  ToolCapabilities
+} from "./chunk-A455ATZB.js";
+
+// src/security/readonly-permission-policy.ts
+import * as path from "node:path";
+var MUTATION_CAPABILITIES = /* @__PURE__ */ new Set([
+  ToolCapabilities.FS_WRITE,
+  ToolCapabilities.FS_WRITE_OUTSIDE_PROJECT,
+  ToolCapabilities.MEMORY_WRITE,
+  ToolCapabilities.MEMORY_DELETE,
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.TOOL_MUTATE_ANY,
+  ToolCapabilities.CONFIG_MUTATE,
+  ToolCapabilities.PACKAGE_INSTALL,
+  ToolCapabilities.SUBAGENT_SPAWN
+]);
+function toolMutates(tool) {
+  if (tool.mutating === true) return true;
+  return (tool.capabilities ?? []).some((c) => MUTATION_CAPABILITIES.has(c));
+}
+var hasMutationCapability = toolMutates;
+function isAllowedReportFile(input, projectRoot) {
+  if (!input || typeof input !== "object") return false;
+  const record = input;
+  const inputPath = record["path"];
+  if (typeof inputPath !== "string") return false;
+  if (!inputPath.endsWith(".md")) return false;
+  try {
+    const resolved = path.resolve(projectRoot, inputPath);
+    const tempDir = path.resolve(projectRoot, ".temp_files");
+    if (!resolved.startsWith(tempDir + path.sep) && resolved !== tempDir) return false;
+    return true;
+  } catch {
+    return false;
+  }
+}
+var ReadOnlyPermissionPolicy = class {
+  constructor(inner, projectRoot) {
+    this.inner = inner;
+    this.projectRoot = projectRoot;
+  }
+  inner;
+  projectRoot;
+  async evaluate(tool, input, ctx) {
+    if (ctx.meta["readOnly"] !== true) {
+      return this.inner.evaluate(tool, input, ctx);
+    }
+    if (!hasMutationCapability(tool)) {
+      return this.inner.evaluate(tool, input, ctx);
+    }
+    if (isAllowedReportFile(input, this.projectRoot)) {
+      return this.inner.evaluate(tool, input, ctx);
+    }
+    const matched = (tool.capabilities ?? []).filter((c) => MUTATION_CAPABILITIES.has(c));
+    const why = matched.length > 0 ? `requires mutation capabilities (${matched.join(", ")})` : "is declared mutating";
+    return {
+      permission: "deny",
+      source: "readonly_mode",
+      reason: `Session is in read-only mode: tool "${tool.name}" ${why}, which is not allowed. Only .md report files under .temp_files/ may be written.`
+    };
+  }
+  async trust(rule) {
+    return this.inner.trust(rule);
+  }
+  async deny(rule) {
+    return this.inner.deny(rule);
+  }
+  denyOnce(rule) {
+    this.inner.denyOnce(rule);
+  }
+  allowOnce(rule) {
+    this.inner.allowOnce(rule);
+  }
+  async reload() {
+    if ("reload" in this.inner && typeof this.inner.reload === "function") {
+      await this.inner.reload();
+    }
+  }
+  async explain(tool, input, ctx) {
+    if (ctx.meta["readOnly"] !== true) {
+      if (this.inner.explain) return this.inner.explain(tool, input, ctx);
+      const decision = await this.inner.evaluate(tool, input, ctx);
+      return {
+        toolName: tool.name,
+        subject: null,
+        steps: [{ rule: "inner", matched: true, decision: decision.permission === "deny" ? "deny" : "auto", source: decision.source, detail: decision.reason ?? "Inner policy decision" }],
+        winnerIndex: 0,
+        decision
+      };
+    }
+    if (!hasMutationCapability(tool) || isAllowedReportFile(input, this.projectRoot)) {
+      if (this.inner.explain) return this.inner.explain(tool, input, ctx);
+      const decision = await this.evaluate(tool, input, ctx);
+      return {
+        toolName: tool.name,
+        subject: null,
+        steps: [{ rule: "readonly_mode", matched: decision.permission === "deny", decision: decision.permission === "deny" ? "deny" : "auto", source: "readonly_mode", detail: decision.reason ?? "Read-only mode" }],
+        winnerIndex: 0,
+        decision
+      };
+    }
+    return {
+      toolName: tool.name,
+      subject: null,
+      steps: [{
+        rule: "readonly_mode",
+        matched: true,
+        decision: "deny",
+        source: "readonly_mode",
+        detail: `Read-only mode blocks ${tool.name} because it carries mutation capabilities (${(tool.capabilities ?? []).filter((c) => MUTATION_CAPABILITIES.has(c)).join(", ")}). Only .md files under .temp_files/ may be written.`
+      }],
+      winnerIndex: 0,
+      decision: {
+        permission: "deny",
+        source: "readonly_mode",
+        reason: `Read-only mode: ${tool.name} requires mutation capabilities.`
+      }
+    };
+  }
+};
+
+export {
+  toolMutates,
+  ReadOnlyPermissionPolicy
+};
+//# sourceMappingURL=chunk-ZEHUCJHY.js.map