@yadsh/dsh-session-scope 0.5.0

package/lib/tool-guard.js

@@ -0,0 +1,233 @@
+import { isAbsolute, relative, resolve } from "node:path";
+import { canonicalPath, isLexicallyUnder } from "./core.js";
+import { getScope } from "./host-api.js";
+import { assertScopeAccess, scopedSearchRoots, } from "./scope-visibility.js";
+import { SESSION_SCOPE_ERROR, SessionScopeError, } from "./session-scope.js";
+const DENIAL_REASON = `${SESSION_SCOPE_ERROR.DENIED}: Path is outside the active session scope. Change the session scope if access is required.`;
+const ISOLATION_UNAVAILABLE_REASON = `${SESSION_SCOPE_ERROR.ISOLATION_UNAVAILABLE}: Isolated session scope is unavailable for this process execution.`;
+const ISOLATION_DANGER_REASON = `${SESSION_SCOPE_ERROR.ISOLATION_UNAVAILABLE}: Isolated session scope cannot execute shell processes with danger-full-access.`;
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function stringField(value, name) {
+    const object = record(value);
+    return typeof object?.[name] === "string" ? object[name] : undefined;
+}
+function singlePathAdapter(name, field, operation) {
+    return {
+        name,
+        extractPaths(value) {
+            const args = record(value);
+            const path = stringField(value, field);
+            if (args === undefined || path === undefined)
+                return [];
+            return [{ path, operation: typeof operation === "function" ? operation(args) : operation }];
+        },
+    };
+}
+function searchPathAdapter(name) {
+    return {
+        name,
+        extractPaths(value) {
+            const args = record(value);
+            if (args === undefined)
+                return [];
+            const path = stringField(value, "path") ?? ".";
+            return [{ path, operation: "search" }];
+        },
+    };
+}
+export const DEFAULT_TOOL_ADAPTERS = Object.freeze([
+    singlePathAdapter("read", "file_path", "read"),
+    singlePathAdapter("read_image", "file_path", "read"),
+    singlePathAdapter("write", "file_path", "write"),
+    singlePathAdapter("edit", "file_path", "write"),
+    searchPathAdapter("glob"),
+    searchPathAdapter("grep"),
+    singlePathAdapter("str_replace_editor", "path", (args) => args.command === "view" ? "list" : "write"),
+]);
+export class ScopeToolAdapterRegistry {
+    adapters = new Map();
+    constructor(adapters = DEFAULT_TOOL_ADAPTERS) {
+        for (const adapter of adapters)
+            this.register(adapter);
+    }
+    register(adapter) {
+        if (!adapter.name || this.adapters.has(adapter.name)) {
+            throw new Error(`session-scope tool adapter already registered: ${adapter.name}`);
+        }
+        this.adapters.set(adapter.name, adapter);
+        return () => {
+            if (this.adapters.get(adapter.name) === adapter)
+                this.adapters.delete(adapter.name);
+        };
+    }
+    requests(execution) {
+        return this.adapters.get(execution.name)?.extractPaths(execution.arguments) ?? [];
+    }
+}
+function absoluteToolPath(path, scope, sessionWorkspaceRoot) {
+    const target = isAbsolute(path) ? path : resolve(scope.workspaceRoot, path);
+    const workspaceSpellings = [scope.workspaceRoot, sessionWorkspaceRoot]
+        .filter((root) => typeof root === "string" && root.length > 0);
+    const originatedInsideWorkspace = workspaceSpellings.some((root) => isLexicallyUnder(target, root));
+    const canonicalTarget = canonicalPath(target);
+    const aliasMappedTarget = sessionWorkspaceRoot
+        && !samePath(sessionWorkspaceRoot, scope.workspaceRoot)
+        && isLexicallyUnder(target, sessionWorkspaceRoot)
+        ? resolve(scope.workspaceRoot, relative(sessionWorkspaceRoot, target))
+        : undefined;
+    const identityTarget = !samePath(canonicalTarget, target)
+        ? canonicalTarget
+        : aliasMappedTarget ?? canonicalTarget;
+    // A path lexically inside the session workspace which resolves outside it
+    // is a symlink/alias escape, not an ordinary external host path.
+    if (originatedInsideWorkspace && !isLexicallyUnder(identityTarget, scope.workspaceRoot)) {
+        throw new SessionScopeError(SESSION_SCOPE_ERROR.SYMLINK_ESCAPE, "Path resolves outside the session workspace.");
+    }
+    // Missing targets cannot be realpathed, so identityTarget may instead be
+    // mapped from a session-header alias (notably a Windows 8.3 path).
+    return identityTarget;
+}
+/** Monotonic tool guard: undefined allows; a stable reason string denies. */
+export function guardScopeToolExecution(execution, adapters, fallbackWorkspaceRoot = "", options = {}) {
+    const session = execution.agent?.session;
+    if (session === undefined)
+        return undefined;
+    const scope = getScope(session, fallbackWorkspaceRoot);
+    const sessionWorkspaceRoot = session.header?.cwd;
+    if (scope.mode === "full")
+        return undefined;
+    // Current LSP providers index and return locations for the entire immutable
+    // session cwd. An input-path check alone cannot prevent hidden sibling
+    // symbols or hover content from leaking through the server result.
+    if (execution.name === "lsp")
+        return DENIAL_REASON;
+    try {
+        for (const request of adapters.requests(execution)) {
+            const target = absoluteToolPath(request.path, scope, sessionWorkspaceRoot);
+            if (request.operation === "search"
+                && options.splitBroadSearches === true
+                && (execution.name === "glob" || execution.name === "grep")) {
+                scopedSearchRoots(scope, target);
+            }
+            else {
+                assertScopeAccess(scope, target, request.operation);
+            }
+        }
+        if (scope.mode === "isolated" && (execution.name === "bash" || execution.name === "terminal_open")) {
+            if (options.isolatedBackendReady !== true)
+                return ISOLATION_UNAVAILABLE_REASON;
+            const args = record(execution.arguments);
+            if (options.sandboxMode === "danger-full-access" || stringField(args, "sandbox_permissions") === "danger-full-access") {
+                return ISOLATION_DANGER_REASON;
+            }
+            const field = execution.name === "bash" ? "workdir" : "cwd";
+            const requestedWorkingDirectory = stringField(args, field);
+            if (requestedWorkingDirectory !== undefined) {
+                const target = absoluteToolPath(requestedWorkingDirectory, scope, sessionWorkspaceRoot);
+                if (!samePath(target, scope.workspaceRoot))
+                    assertScopeAccess(scope, target, "list");
+            }
+        }
+        return undefined;
+    }
+    catch {
+        return DENIAL_REASON;
+    }
+}
+function samePath(left, right) {
+    return process.platform === "win32"
+        ? left.toLowerCase() === right.toLowerCase()
+        : left === right;
+}
+function mergeGlobValues(requestedRoot, results, scope) {
+    const paths = new Set();
+    for (const result of results) {
+        const value = record(result.value);
+        if (!Array.isArray(value?.paths))
+            continue;
+        for (const path of value.paths) {
+            if (typeof path !== "string")
+                continue;
+            try {
+                assertScopeAccess(scope, absoluteToolPath(path, scope), "search");
+                paths.add(path);
+            }
+            catch {
+                // A malformed or changed search backend cannot leak a hidden path.
+            }
+        }
+    }
+    return {
+        isError: false,
+        value: { root: requestedRoot, paths: [...paths] },
+        content: [],
+    };
+}
+function mergeGrepValues(results, scope) {
+    const matches = [];
+    for (const result of results) {
+        const value = record(result.value);
+        if (!Array.isArray(value?.matches))
+            continue;
+        for (const match of value.matches) {
+            const path = stringField(match, "path");
+            if (path === undefined)
+                continue;
+            try {
+                assertScopeAccess(scope, absoluteToolPath(path, scope), "search");
+                matches.push(match);
+            }
+            catch {
+                // Drop the entire match, including its line content, on any path leak.
+            }
+        }
+    }
+    return {
+        isError: false,
+        value: { matches },
+        content: [],
+    };
+}
+/**
+ * Split a navigation-root glob/grep into child calls under content roots.
+ * Direct searches already inside one content root pass through unchanged.
+ */
+export async function dispatchScopedSearchExecution(execution, dispatcher, next, fallbackWorkspaceRoot = "") {
+    if (execution.name !== "glob" && execution.name !== "grep")
+        return next();
+    const session = execution.agent?.session;
+    const args = record(execution.arguments);
+    if (session === undefined || args === undefined)
+        return next();
+    const scope = getScope(session, fallbackWorkspaceRoot);
+    if (scope.mode === "full")
+        return next();
+    const requestedPath = typeof args.path === "string" ? args.path : ".";
+    const requestedRoot = absoluteToolPath(requestedPath, scope, session.header?.cwd);
+    const roots = scopedSearchRoots(scope, requestedRoot);
+    if (roots.length === 1 && samePath(roots[0], requestedRoot))
+        return next();
+    const results = [];
+    for (let index = 0; index < roots.length; index += 1) {
+        const result = await dispatcher.execute({
+            callId: `${execution.callId ?? execution.name}:scope:${index}`,
+            rootCallId: execution.rootCallId ?? execution.callId,
+            name: execution.name,
+            arguments: { ...args, path: roots[index] },
+            agent: execution.agent,
+            signal: execution.signal,
+            parent: execution.token,
+        });
+        if (result.isError)
+            return result;
+        results.push(result);
+    }
+    return execution.name === "glob"
+        ? mergeGlobValues(requestedPath, results, scope)
+        : mergeGrepValues(results, scope);
+}
+//# sourceMappingURL=tool-guard.js.map

package/lib/tool-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-guard.js","sourceRoot":"","sources":["../src/tool-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAyC5B,MAAM,aAAa,GAAG,GAAG,mBAAmB,CAAC,MAAM,6FAA6F,CAAC;AACjJ,MAAM,4BAA4B,GAAG,GAAG,mBAAmB,CAAC,qBAAqB,qEAAqE,CAAC;AACvJ,MAAM,uBAAuB,GAAG,GAAG,mBAAmB,CAAC,qBAAqB,kFAAkF,CAAC;AAE/J,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,KAAa,EACb,SAAqG;IAErG,OAAO;QACL,IAAI;QACJ,YAAY,CAAC,KAAK;YAChB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YACxD,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9F,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO;QACL,IAAI;QACJ,YAAY,CAAC,KAAK;YAChB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC;YAC/C,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAgC,MAAM,CAAC,MAAM,CAAC;IAC9E,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC;IAC9C,iBAAiB,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC;IACpD,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC;IAChD,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC;IAC/C,iBAAiB,CAAC,MAAM,CAAC;IACzB,iBAAiB,CAAC,MAAM,CAAC;IACzB,iBAAiB,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;CACtG,CAAC,CAAC;AAEH,MAAM,OAAO,wBAAwB;IAClB,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEhE,YAAY,QAAQ,GAAgC,qBAAqB;QACvE,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,QAAQ,CAAC,OAAyB;QAChC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,kDAAkD,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,GAAG,EAAE;YACV,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtF,CAAC,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,SAA6B;QACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACpF,CAAC;CACF;AAED,SAAS,gBAAgB,CACvB,IAAY,EACZ,KAA4B,EAC5B,oBAA6B;IAE7B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC5E,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,oBAAoB,CAAC;SACnE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjF,MAAM,yBAAyB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACpG,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,oBAAoB;WACzC,CAAC,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAAC;WACpD,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACjD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACvD,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,iBAAiB,IAAI,eAAe,CAAC;IAEzC,0EAA0E;IAC1E,iEAAiE;IACjE,IAAI,yBAAyB,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,cAAc,EAAE,8CAA8C,CAAC,CAAC;IAClH,CAAC;IACD,yEAAyE;IACzE,mEAAmE;IACnE,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB,CACrC,SAA6B,EAC7B,QAAkC,EAClC,qBAAqB,GAAG,EAAE,EAC1B,OAAO,GAA0B,EAAE;IAEnC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;IACzC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACvD,MAAM,oBAAoB,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC5C,4EAA4E;IAC5E,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,aAAa,CAAC;IACnD,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;YAC3E,IACE,OAAO,CAAC,SAAS,KAAK,QAAQ;mBAC3B,OAAO,CAAC,kBAAkB,KAAK,IAAI;mBACnC,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,EAC3D,CAAC;gBACD,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe,CAAC,EAAE,CAAC;YACnG,IAAI,OAAO,CAAC,oBAAoB,KAAK,IAAI;gBAAE,OAAO,4BAA4B,CAAC;YAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,WAAW,KAAK,oBAAoB,IAAI,WAAW,CAAC,IAAI,EAAE,qBAAqB,CAAC,KAAK,oBAAoB,EAAE,CAAC;gBACtH,OAAO,uBAAuB,CAAC;YACjC,CAAC;YACD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;YAC5D,MAAM,yBAAyB,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3D,IAAI,yBAAyB,KAAK,SAAS,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,yBAAyB,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;gBACxF,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC;oBAAE,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO;QACjC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAC5C,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CACtB,aAAqB,EACrB,OAA4C,EAC5C,KAA4B;IAE5B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,SAAS;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACvC,IAAI,CAAC;gBACH,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAClE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE;QACjD,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,OAA4C,EAC5C,KAA4B;IAE5B,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;YAAE,SAAS;QAC7C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACxC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,IAAI,CAAC;gBACH,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAClE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,uEAAuE;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,OAAO,EAAE;QAClB,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,SAA6B,EAC7B,UAA+B,EAC/B,IAA6C,EAC7C,qBAAqB,GAAG,EAAE;IAE1B,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,EAAE,CAAC;IAC1E,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,EAAE,CAAC;IAEzC,MAAM,aAAa,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACtE,MAAM,aAAa,GAAG,gBAAgB,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,aAAa,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAE5E,MAAM,OAAO,GAA+B,EAAE,CAAC;IAC/C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACtC,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,UAAU,KAAK,EAAE;YAC9D,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,MAAM;YACpD,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;YAC1C,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,KAAK;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,SAAS,CAAC,IAAI,KAAK,MAAM;QAC9B,CAAC,CAAC,eAAe,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC;QAChD,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC"}

package/package.json

@@ -0,0 +1,150 @@
+{
+  "name": "@yadsh/dsh-session-scope",
+  "version": "0.5.0",
+  "description": "Per-session workspace visibility scopes for DeepSeek Harness.",
+  "type": "module",
+  "main": "./lib/index.js",
+  "types": "./lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "import": "./lib/index.js"
+    },
+    "./client": {
+      "types": "./lib/client.d.ts",
+      "import": "./lib/client.js",
+      "default": "./lib/client.js"
+    },
+    "./core": {
+      "types": "./lib/core.d.ts",
+      "import": "./lib/core.js"
+    },
+    "./session-scope": {
+      "types": "./lib/session-scope.d.ts",
+      "import": "./lib/session-scope.js"
+    },
+    "./host-api": {
+      "types": "./lib/host-api.d.ts",
+      "import": "./lib/host-api.js"
+    },
+    "./scope-visibility": {
+      "types": "./lib/scope-visibility.d.ts",
+      "import": "./lib/scope-visibility.js"
+    },
+    "./scope-context": {
+      "types": "./lib/scope-context.d.ts",
+      "import": "./lib/scope-context.js"
+    },
+    "./scope-delegation": {
+      "types": "./lib/scope-delegation.d.ts",
+      "import": "./lib/scope-delegation.js"
+    },
+    "./scope-fs": {
+      "types": "./lib/scope-fs.d.ts",
+      "import": "./lib/scope-fs.js"
+    },
+    "./scope-processes": {
+      "types": "./lib/scope-processes.d.ts",
+      "import": "./lib/scope-processes.js"
+    },
+    "./scope-sandbox-linux": {
+      "types": "./lib/scope-sandbox-linux.d.ts",
+      "import": "./lib/scope-sandbox-linux.js"
+    },
+    "./tool-guard": {
+      "types": "./lib/tool-guard.d.ts",
+      "import": "./lib/tool-guard.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "cordis.patch.yml",
+    "compatibility.json",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "lint": "eslint src test scripts",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "verify:client": "node scripts/verify-client-bundle.mjs",
+    "verify:compatibility": "node scripts/verify-compatibility.mjs",
+    "verify:package": "node scripts/verify-package.mjs",
+    "verify": "npm run verify:client && npm run verify:compatibility && npm run verify:package",
+    "check": "npm run build && npm test && npm run verify",
+    "smoke:packed": "node scripts/smoke-packed-dsh.mjs",
+    "release:prepare": "node scripts/prepare-release.mjs",
+    "prepublishOnly": "npm run check"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-client-ui-slots"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-fs": "catalog:dsh",
+    "@deepseek-ai/dsh-sandbox": "catalog:dsh",
+    "@deepseek-ai/dsh-session": "catalog:dsh",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    },
+    "react-dom": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "sandbox",
+    "permission",
+    "session-scope",
+    "workspace-scope"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xarleyn/dsh-plugins.git",
+    "directory": "plugins/dsh-session-scope"
+  },
+  "bugs": {
+    "url": "https://github.com/xarleyn/dsh-plugins/issues"
+  },
+  "homepage": "https://github.com/xarleyn/dsh-plugins/tree/main/plugins/dsh-session-scope#readme",
+  "author": "xarleyn",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh-fs": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-sandbox": "catalog:dsh-dev",
+    "@deepseek-ai/dsh-session": "catalog:dsh-dev",
+    "@types/node": "catalog:tooling",
+    "@types/react": "catalog:frontend-dev",
+    "@types/react-dom": "catalog:frontend-dev",
+    "eslint": "catalog:tooling",
+    "react": "catalog:frontend-dev",
+    "react-dom": "catalog:frontend-dev",
+    "typescript": "catalog:plugin-tooling",
+    "vitest": "catalog:tooling"
+  }
+}