atris 3.82.9 → 3.82.11

package/lib/sentinel-rules.js

@@ -12,6 +12,9 @@
 //   word, an option name or a command substring. The guard matches them
 //   with plain string operations. There is no pattern to compile and
 //   nothing that can stall on long input
+//   a command block may add four plain conditions, each read by fixed code
+//   in the guard: inline (true or false), needs_secret (true or false),
+//   needs_remote (true or false) and unless (a list of literal substrings)
 //
 // validateRules() returns a list of plain problems. Empty means valid.
 
@@ -21,7 +24,9 @@ const MAX_ITEM = 200;
 const GUARD_KEYS = ['allow_hosts', 'net_tools', 'secret_parts', 'safe_net', 'safe_net_aliases', 'read_only', 'read_only_git', 'db_clients', 'command_blocks'];
 const AGENT_KEYS = ['override_substrings', 'secret_env_names'];
 const SAFE_NET_KEYS = ['flags', 'values', 'local_values', 'short_flags', 'short_values', 'items'];
-const BLOCK_KEYS = ['id', 'category', 'all', 'programs'];
+const BLOCK_KEYS = ['id', 'category', 'all', 'programs', 'inline', 'needs_secret', 'needs_remote', 'unless'];
+const BLOCK_OPTIONAL = ['programs', 'inline', 'needs_secret', 'needs_remote', 'unless'];
+const BLOCK_FLAGS = ['inline', 'needs_secret', 'needs_remote'];
 
 const isObj = (v) => v !== null && typeof v === 'object' && !Array.isArray(v);
 
@@ -85,12 +90,19 @@ function validateRules(rules) {
         const where = `guard.command_blocks[${i}]`;
         if (!isObj(b)) { problems.push(`${where} must be an object`); return; }
         noPatternField(b, where, problems);
-        exactKeys(b, BLOCK_KEYS, where, problems, ['programs']);
+        exactKeys(b, BLOCK_KEYS, where, problems, BLOCK_OPTIONAL);
         if (typeof b.id !== 'string' || !/^[a-z0-9-]{1,40}$/.test(b.id)) problems.push(`${where}.id must be short lowercase words`);
         if (!['exfil', 'destroy', 'disarm'].includes(b.category)) problems.push(`${where}.category must be exfil, destroy or disarm`);
+        for (const k of BLOCK_FLAGS) if (k in b && typeof b[k] !== 'boolean') problems.push(`${where}.${k} must be true or false`);
         strList(b.all, `${where}.all`, problems);
-        if (Array.isArray(b.all) && !b.all.length) problems.push(`${where}.all needs at least one substring`);
+        // An empty all is allowed only when a secret or an outside address
+        // must also be present, so a block can never fire on a program alone.
+        if (Array.isArray(b.all) && !b.all.length && b.needs_secret !== true && b.needs_remote !== true) problems.push(`${where}.all needs at least one substring, unless needs_secret or needs_remote is true`);
         if ('programs' in b) strList(b.programs, `${where}.programs`, problems, /^[A-Za-z0-9._+-]{1,40}$/);
+        if ('unless' in b) {
+          strList(b.unless, `${where}.unless`, problems);
+          if (Array.isArray(b.unless) && b.unless.length > 30) problems.push(`${where}.unless has more than 30 items`);
+        }
       });
     }
   }

package/lib/sentinel-rules.json

@@ -228,7 +228,16 @@
       "neonctl",
       "cqlsh"
     ],
-    "command_blocks": []
+    "command_blocks": [
+      {
+        "id": "inline-secret-out",
+        "category": "exfil",
+        "all": [],
+        "inline": true,
+        "needs_secret": true,
+        "needs_remote": true
+      }
+    ]
   },
   "agents": {
     "override_substrings": [],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "atris",
-  "version": "3.82.9",
+  "version": "3.82.11",
   "description": "you say what you want in plain words. atris builds it, checks it, and shows you proof. project memory your coding agents share across sessions.",
   "mcpName": "io.github.atrislabs/atris",
   "main": "bin/atris.js",