attocode 0.2.3 → 0.2.5

package/dist/src/integrations/safety/policy-engine.js

@@ -0,0 +1,247 @@
+/**
+ * Unified policy engine.
+ *
+ * Resolves effective tool/bash/approval behavior from profiles plus
+ * compatibility mappings from legacy config fields.
+ */
+import { getTaskTypeConfig } from '../swarm/types.js';
+import { evaluateBashPolicy } from './bash-policy.js';
+export const DEFAULT_POLICY_PROFILES = {
+    'research-safe': {
+        toolAccessMode: 'whitelist',
+        allowedTools: ['read_file', 'list_files', 'glob', 'grep', 'web_search', 'write_file', 'bash', 'task_get', 'task_list'],
+        deniedTools: ['delete_file'],
+        bashMode: 'read_only',
+        bashWriteProtection: 'block_file_mutation',
+    },
+    'code-strict-bash': {
+        toolAccessMode: 'whitelist',
+        allowedTools: ['read_file', 'write_file', 'edit_file', 'list_files', 'glob', 'grep', 'bash', 'web_search', 'task_create', 'task_update', 'task_get', 'task_list'],
+        bashMode: 'full',
+        bashWriteProtection: 'block_file_mutation',
+    },
+    'code-full': {
+        toolAccessMode: 'all',
+        bashMode: 'full',
+        bashWriteProtection: 'off',
+    },
+    'review-safe': {
+        toolAccessMode: 'whitelist',
+        allowedTools: ['read_file', 'list_files', 'glob', 'grep', 'web_search', 'task_get', 'task_list'],
+        deniedTools: ['write_file', 'edit_file', 'delete_file', 'bash'],
+        bashMode: 'disabled',
+        bashWriteProtection: 'block_file_mutation',
+    },
+};
+export const DEFAULT_POLICY_ENGINE_CONFIG = {
+    enabled: true,
+    legacyFallback: true,
+    defaultProfile: 'code-full',
+    defaultSwarmProfile: 'code-strict-bash',
+};
+function mergeProfiles(...profiles) {
+    const merged = {};
+    for (const p of profiles) {
+        if (!p)
+            continue;
+        merged.toolAccessMode = p.toolAccessMode ?? merged.toolAccessMode;
+        merged.allowedTools = p.allowedTools ?? merged.allowedTools;
+        merged.deniedTools = p.deniedTools ?? merged.deniedTools;
+        merged.bashMode = p.bashMode ?? merged.bashMode;
+        merged.bashWriteProtection = p.bashWriteProtection ?? merged.bashWriteProtection;
+        if (p.approval) {
+            merged.approval = {
+                autoApprove: p.approval.autoApprove ?? merged.approval?.autoApprove,
+                scopedApprove: p.approval.scopedApprove ?? merged.approval?.scopedApprove,
+                requireApproval: p.approval.requireApproval ?? merged.approval?.requireApproval,
+            };
+        }
+    }
+    return merged;
+}
+function inferSwarmProfileForTask(taskType, swarmConfig) {
+    if (!taskType)
+        return 'code-strict-bash';
+    // V7: Use configurable policyProfile from TaskTypeConfig
+    const typeConfig = getTaskTypeConfig(taskType, swarmConfig);
+    return typeConfig.policyProfile ?? 'code-strict-bash';
+}
+function inferSwarmProfileForWorker(worker) {
+    if (!worker?.capabilities || worker.capabilities.length === 0)
+        return undefined;
+    const caps = new Set(worker.capabilities);
+    if (caps.has('code') || caps.has('write') || caps.has('test') || caps.has('document')) {
+        return 'code-strict-bash';
+    }
+    if (caps.has('review')) {
+        return 'review-safe';
+    }
+    if (caps.has('research')) {
+        return 'research-safe';
+    }
+    return undefined;
+}
+function applyLegacyMappings(profile, options) {
+    const merged = { ...profile };
+    const metadata = {
+        selectionSource: 'default',
+        usedLegacyMappings: false,
+        legacyMappingSources: [],
+        warnings: [],
+    };
+    const legacyAllowed = options.legacyAllowedTools ?? options.worker?.allowedTools;
+    if (legacyAllowed && legacyAllowed.length > 0) {
+        merged.toolAccessMode = 'whitelist';
+        merged.allowedTools = [...legacyAllowed];
+        metadata.usedLegacyMappings = true;
+        metadata.legacyMappingSources.push('legacyAllowedTools');
+        metadata.warnings.push('Legacy tool whitelist is active. Migrate to policyProfiles + worker.policyProfile.');
+    }
+    const denied = [
+        ...(merged.deniedTools ?? []),
+        ...(options.legacyDeniedTools ?? options.worker?.deniedTools ?? []),
+        ...(options.globalDeniedTools ?? options.swarmConfig?.globalDeniedTools ?? []),
+    ];
+    if (denied.length > 0) {
+        merged.deniedTools = [...new Set(denied)];
+        metadata.usedLegacyMappings = true;
+        metadata.legacyMappingSources.push('legacyDeniedTools/globalDeniedTools');
+        metadata.warnings.push('Legacy denied tools are active. Migrate to policyProfiles[].deniedTools.');
+    }
+    if (options.sandboxConfig?.blockFileCreationViaBash) {
+        merged.bashWriteProtection = 'block_file_mutation';
+        metadata.usedLegacyMappings = true;
+        metadata.legacyMappingSources.push('sandbox.blockFileCreationViaBash');
+        metadata.warnings.push('sandbox.blockFileCreationViaBash is legacy compatibility behavior. Use policy profile bashWriteProtection.');
+    }
+    if (options.sandboxConfig?.bashMode) {
+        merged.bashMode = options.sandboxConfig.bashMode;
+        metadata.usedLegacyMappings = true;
+        metadata.legacyMappingSources.push('sandbox.bashMode');
+        metadata.warnings.push('sandbox.bashMode override is active. Prefer profile-level bashMode.');
+    }
+    if (options.sandboxConfig?.bashWriteProtection) {
+        merged.bashWriteProtection = options.sandboxConfig.bashWriteProtection;
+        metadata.usedLegacyMappings = true;
+        metadata.legacyMappingSources.push('sandbox.bashWriteProtection');
+        metadata.warnings.push('sandbox.bashWriteProtection override is active. Prefer profile-level bashWriteProtection.');
+    }
+    return { profile: merged, metadata };
+}
+export function resolvePolicyProfile(options) {
+    const policyEngine = options.policyEngine || undefined;
+    const legacyFallback = policyEngine?.legacyFallback ?? DEFAULT_POLICY_ENGINE_CONFIG.legacyFallback;
+    const mergedProfiles = {
+        ...DEFAULT_POLICY_PROFILES,
+        ...(policyEngine?.profiles ?? {}),
+        ...(options.swarmConfig?.policyProfiles ?? {}),
+    };
+    // Apply profileExtensions (additive patches from YAML)
+    const extensions = options.swarmConfig?.profileExtensions;
+    if (extensions) {
+        for (const [profileName, ext] of Object.entries(extensions)) {
+            const target = mergedProfiles[profileName];
+            if (!target)
+                continue;
+            if (ext.addTools?.length && target.allowedTools) {
+                target.allowedTools = [...new Set([...target.allowedTools, ...ext.addTools])];
+                // If you explicitly add a tool, remove it from deniedTools so it actually works
+                if (target.deniedTools) {
+                    target.deniedTools = target.deniedTools.filter(t => !ext.addTools.includes(t));
+                }
+            }
+            if (ext.removeTools?.length) {
+                if (target.allowedTools) {
+                    target.allowedTools = target.allowedTools.filter(t => !ext.removeTools.includes(t));
+                }
+                // Also add removed tools to deniedTools for belt-and-suspenders
+                target.deniedTools = [...new Set([...(target.deniedTools ?? []), ...ext.removeTools])];
+            }
+        }
+    }
+    const defaultProfileName = options.isSwarmWorker
+        ? (policyEngine?.defaultSwarmProfile ?? DEFAULT_POLICY_ENGINE_CONFIG.defaultSwarmProfile)
+        : (policyEngine?.defaultProfile ?? DEFAULT_POLICY_ENGINE_CONFIG.defaultProfile);
+    let selectionSource = 'default';
+    let requestedProfile = defaultProfileName;
+    if (options.requestedProfile || options.worker?.policyProfile) {
+        requestedProfile = options.requestedProfile ?? options.worker?.policyProfile ?? defaultProfileName;
+        selectionSource = 'explicit';
+    }
+    else if (options.isSwarmWorker) {
+        const workerInferred = inferSwarmProfileForWorker(options.worker);
+        if (workerInferred) {
+            requestedProfile = workerInferred;
+            selectionSource = 'worker-capability';
+        }
+        else if (options.taskType) {
+            requestedProfile = inferSwarmProfileForTask(options.taskType, options.swarmConfig);
+            selectionSource = 'task-type';
+        }
+        else {
+            requestedProfile = defaultProfileName;
+            selectionSource = 'default';
+        }
+    }
+    const base = mergedProfiles[defaultProfileName] ?? DEFAULT_POLICY_PROFILES['code-full'];
+    const requested = mergedProfiles[requestedProfile] ?? base;
+    const merged = mergeProfiles(base, requested);
+    const { profile: effective, metadata } = legacyFallback
+        ? applyLegacyMappings(merged, options)
+        : {
+            profile: merged,
+            metadata: {
+                selectionSource: 'default',
+                usedLegacyMappings: false,
+                legacyMappingSources: [],
+                warnings: [],
+            },
+        };
+    // Merge worker.extraTools into the profile whitelist (additive, overrides deniedTools)
+    if (options.worker?.extraTools?.length && effective.toolAccessMode === 'whitelist' && effective.allowedTools) {
+        effective.allowedTools = [...new Set([...effective.allowedTools, ...options.worker.extraTools])];
+        // If you explicitly add a tool via extraTools, remove it from deniedTools so it actually works
+        if (effective.deniedTools) {
+            effective.deniedTools = effective.deniedTools.filter(t => !options.worker.extraTools.includes(t));
+        }
+    }
+    return {
+        profileName: requestedProfile,
+        profile: effective,
+        metadata: {
+            ...metadata,
+            selectionSource,
+        },
+    };
+}
+export function isToolAllowedByProfile(toolName, profile) {
+    const mode = profile.toolAccessMode ?? 'all';
+    if (mode === 'whitelist') {
+        const allowed = profile.allowedTools ?? [];
+        if (!allowed.includes(toolName)) {
+            return { allowed: false, reason: `Tool '${toolName}' is not allowed by policy whitelist.` };
+        }
+    }
+    if ((profile.deniedTools ?? []).includes(toolName)) {
+        return { allowed: false, reason: `Tool '${toolName}' is denied by policy profile.` };
+    }
+    return { allowed: true };
+}
+export function evaluateBashCommandByProfile(command, profile, taskType) {
+    let mode = profile.bashMode ?? 'full';
+    if (mode === 'task_scoped') {
+        mode = ['implement', 'test', 'refactor', 'integrate', 'deploy', 'document'].includes(taskType ?? '')
+            ? 'read_only'
+            : 'disabled';
+    }
+    const decision = evaluateBashPolicy(command, mode, profile.bashWriteProtection ?? 'off');
+    return { allowed: decision.allowed, reason: decision.reason };
+}
+export function mergeApprovalScopeWithProfile(scope, profile) {
+    return {
+        autoApprove: [...new Set([...(scope.autoApprove ?? []), ...(profile.approval?.autoApprove ?? [])])],
+        scopedApprove: { ...(scope.scopedApprove ?? {}), ...(profile.approval?.scopedApprove ?? {}) },
+        requireApproval: [...new Set([...(scope.requireApproval ?? []), ...(profile.approval?.requireApproval ?? [])])],
+    };
+}
+//# sourceMappingURL=policy-engine.js.map

package/dist/src/integrations/safety/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../../../src/integrations/safety/policy-engine.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,CAAC,MAAM,uBAAuB,GAAkC;IACpE,eAAe,EAAE;QACf,cAAc,EAAE,WAAW;QAC3B,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC;QACtH,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,QAAQ,EAAE,WAAW;QACrB,mBAAmB,EAAE,qBAAqB;KAC3C;IACD,kBAAkB,EAAE;QAClB,cAAc,EAAE,WAAW;QAC3B,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC;QACjK,QAAQ,EAAE,MAAM;QAChB,mBAAmB,EAAE,qBAAqB;KAC3C;IACD,WAAW,EAAE;QACX,cAAc,EAAE,KAAK;QACrB,QAAQ,EAAE,MAAM;QAChB,mBAAmB,EAAE,KAAK;KAC3B;IACD,aAAa,EAAE;QACb,cAAc,EAAE,WAAW;QAC3B,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC;QAChG,WAAW,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC;QAC/D,QAAQ,EAAE,UAAU;QACpB,mBAAmB,EAAE,qBAAqB;KAC3C;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAErC;IACF,OAAO,EAAE,IAAI;IACb,cAAc,EAAE,IAAI;IACpB,cAAc,EAAE,WAAW;IAC3B,mBAAmB,EAAE,kBAAkB;CACxC,CAAC;AA0BF,SAAS,aAAa,CAAC,GAAG,QAA0C;IAClE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC;QAClE,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;QAC5D,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;QACzD,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;QAChD,MAAM,CAAC,mBAAmB,GAAG,CAAC,CAAC,mBAAmB,IAAI,MAAM,CAAC,mBAAmB,CAAC;QACjF,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,CAAC,QAAQ,GAAG;gBAChB,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,EAAE,WAAW;gBACnE,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE,aAAa;gBACzE,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,IAAI,MAAM,CAAC,QAAQ,EAAE,eAAe;aAChF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAiB,EAAE,WAAyB;IAC5E,IAAI,CAAC,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACzC,yDAAyD;IACzD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5D,OAAO,UAAU,CAAC,aAAa,IAAI,kBAAkB,CAAC;AACxD,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAwB;IAC1D,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAChF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACtF,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACzB,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAsB,EACtB,OAAoC;IAKpC,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAsC;QAClD,eAAe,EAAE,SAAS;QAC1B,kBAAkB,EAAE,KAAK;QACzB,oBAAoB,EAAE,EAAE;QACxB,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;IACjF,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,cAAc,GAAG,WAAW,CAAC;QACpC,MAAM,CAAC,YAAY,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;QACzC,QAAQ,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACnC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACzD,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,oFAAoF,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,WAAW,EAAE,iBAAiB,IAAI,EAAE,CAAC;KAC/E,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,QAAQ,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACnC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC1E,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,EAAE,wBAAwB,EAAE,CAAC;QACpD,MAAM,CAAC,mBAAmB,GAAG,qBAAqB,CAAC;QACnD,QAAQ,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACnC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACvE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,4GAA4G,CAC7G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC;QACjD,QAAQ,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACnC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACvD,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,mBAAmB,EAAE,CAAC;QAC/C,MAAM,CAAC,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,mBAAmB,CAAC;QACvE,QAAQ,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACnC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAClE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAoC;IACvE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,SAAS,CAAC;IACvD,MAAM,cAAc,GAAG,YAAY,EAAE,cAAc,IAAI,4BAA4B,CAAC,cAAc,CAAC;IACnG,MAAM,cAAc,GAAkC;QACpD,GAAG,uBAAuB;QAC1B,GAAG,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC;QACjC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,IAAI,EAAE,CAAC;KAC/C,CAAC;IAEF,uDAAuD;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,iBAAiB,CAAC;IAC1D,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBAChD,MAAM,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC9E,gFAAgF;gBAChF,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;YACD,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBAC5B,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBACxB,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,WAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvF,CAAC;gBACD,gEAAgE;gBAChE,MAAM,CAAC,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,aAAa;QAC9C,CAAC,CAAC,CAAC,YAAY,EAAE,mBAAmB,IAAI,4BAA4B,CAAC,mBAAmB,CAAC;QACzF,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;IAElF,IAAI,eAAe,GAAyD,SAAS,CAAC;IACtF,IAAI,gBAAgB,GAAW,kBAAkB,CAAC;IAElD,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;QAC9D,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,MAAM,EAAE,aAAa,IAAI,kBAAkB,CAAC;QACnG,eAAe,GAAG,UAAU,CAAC;IAC/B,CAAC;SAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,cAAc,EAAE,CAAC;YACnB,gBAAgB,GAAG,cAAc,CAAC;YAClC,eAAe,GAAG,mBAAmB,CAAC;QACxC,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5B,gBAAgB,GAAG,wBAAwB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACnF,eAAe,GAAG,WAAW,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,gBAAgB,GAAG,kBAAkB,CAAC;YACtC,eAAe,GAAG,SAAS,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,kBAAkB,CAAC,IAAI,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,cAAc,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;IAE3D,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,cAAc;QACrD,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC;QACtC,CAAC,CAAC;YACE,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE;gBACR,eAAe,EAAE,SAAkB;gBACnC,kBAAkB,EAAE,KAAK;gBACzB,oBAAoB,EAAE,EAAE;gBACxB,QAAQ,EAAE,EAAE;aACb;SACF,CAAC;IAEN,uFAAuF;IACvF,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,IAAI,SAAS,CAAC,cAAc,KAAK,WAAW,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QAC7G,SAAS,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjG,+FAA+F;QAC/F,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1B,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAO,CAAC,UAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE,gBAAgB;QAC7B,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE;YACR,GAAG,QAAQ;YACX,eAAe;SAChB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,OAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IAE7C,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,QAAQ,uCAAuC,EAAE,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,QAAQ,gCAAgC,EAAE,CAAC;IACvF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAe,EACf,OAAsB,EACtB,QAAiB;IAEjB,IAAI,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;IACtC,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;YAClG,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CACjC,OAAO,EACP,IAAI,EACJ,OAAO,CAAC,mBAAmB,IAAI,KAAK,CACrC,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAIC,EACD,OAAsB;IAMtB,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnG,aAAa,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,IAAI,EAAE,CAAC,EAAE;QAC7F,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;KAChH,CAAC;AACJ,CAAC"}

package/dist/src/integrations/safety/safety.d.ts

@@ -0,0 +1,174 @@
+/**
+ * Lesson 23: Safety Integration
+ *
+ * Integrates sandboxing (Lesson 20) and human-in-the-loop (Lesson 21)
+ * into the production agent. Provides execution safety and approval workflows.
+ */
+import type { SandboxConfig, PolicyEngineConfig, HumanInLoopConfig, ToolCall } from '../../types.js';
+/**
+ * Manages sandboxed execution of tools.
+ */
+export declare class SandboxManager {
+    private config;
+    private policyEngineConfig?;
+    constructor(config: SandboxConfig, policyEngineConfig?: PolicyEngineConfig | false);
+    /**
+     * Check if a command is allowed.
+     */
+    isCommandAllowed(command: string): {
+        allowed: boolean;
+        reason?: string;
+    };
+    /**
+     * Check if a path is allowed.
+     * Resolves relative paths against cwd before comparison.
+     * Uses realpath to resolve symlinks and prevent symlink escape attacks.
+     */
+    isPathAllowed(path: string): boolean;
+    /**
+     * Get resource limits.
+     */
+    getResourceLimits(): NonNullable<SandboxConfig['resourceLimits']>;
+    /**
+     * Wrap execution with resource limits.
+     */
+    executeWithLimits<T>(fn: () => Promise<T>, timeout?: number): Promise<T>;
+    /**
+     * Validate tool call against sandbox rules.
+     */
+    validateToolCall(toolCall: ToolCall): {
+        valid: boolean;
+        reason?: string;
+    };
+}
+/**
+ * Manages human approval workflows.
+ */
+export declare class HumanInLoopManager {
+    private config;
+    private auditLog;
+    private pendingApprovals;
+    private approvalScope;
+    private readonly maxAuditEntries;
+    private readonly auditTrimSize;
+    constructor(config: HumanInLoopConfig);
+    /**
+     * Set an approval scope for pre-approved operations.
+     * Used by subagents to reduce approval interruptions.
+     */
+    setApprovalScope(scope: ApprovalScope): void;
+    /**
+     * Check if a tool call is pre-approved by the current scope.
+     */
+    private isPreApproved;
+    /**
+     * Determine risk level of an action.
+     */
+    assessRisk(toolCall: ToolCall): RiskLevel;
+    /**
+     * Check if action needs approval.
+     */
+    needsApproval(toolCall: ToolCall): boolean;
+    /**
+     * Request approval for an action.
+     */
+    requestApproval(toolCall: ToolCall, context: string): Promise<ApprovalResult>;
+    /**
+     * Console-based approval (for demos).
+     */
+    private consoleApproval;
+    /**
+     * Execute with timeout.
+     */
+    private executeWithTimeout;
+    /**
+     * Log an action to audit trail.
+     * Trims the log when it exceeds maxAuditEntries to prevent unbounded growth.
+     */
+    private logAction;
+    /**
+     * Get audit log.
+     */
+    getAuditLog(): AuditEntry[];
+    /**
+     * Get audit summary.
+     */
+    getAuditSummary(): AuditSummary;
+    /**
+     * Clear audit log.
+     */
+    clearAuditLog(): void;
+}
+/**
+ * Combined safety manager for the production agent.
+ */
+export declare class SafetyManager {
+    sandbox: SandboxManager | null;
+    humanInLoop: HumanInLoopManager | null;
+    constructor(sandboxConfig: SandboxConfig | false, hilConfig: HumanInLoopConfig | false, policyEngineConfig?: PolicyEngineConfig | false);
+    /**
+     * Validate a tool call against all safety rules.
+     */
+    validateAndApprove(toolCall: ToolCall, context: string, options?: {
+        skipHumanApproval?: boolean;
+    }): Promise<{
+        allowed: boolean;
+        reason?: string;
+    }>;
+    /**
+     * Execute a tool call with safety wrapping.
+     */
+    executeWithSafety<T>(fn: () => Promise<T>, toolCall: ToolCall, context: string): Promise<T>;
+}
+/**
+ * Approval scope for subagent pre-approval.
+ * Allows specifying which tools and paths are pre-approved,
+ * reducing interruptions during multi-agent workflows.
+ */
+export interface ApprovalScope {
+    /** Tools that are always auto-approved (e.g., read_file, glob, grep) */
+    autoApprove?: string[];
+    /** Tools approved within specific path scopes */
+    scopedApprove?: Record<string, {
+        paths: string[];
+    }>;
+    /** Tools that always require approval regardless of scope */
+    requireApproval?: string[];
+}
+/**
+ * Risk levels for safety assessment.
+ * Matches the risk property in ApprovalRequest from types.ts.
+ */
+type RiskLevel = 'low' | 'moderate' | 'high' | 'critical';
+/**
+ * Result of an approval request.
+ * Extends ApprovalResponse with additional tracking info.
+ */
+interface ApprovalResult {
+    approved: boolean;
+    reason?: string;
+    modifiedArgs?: Record<string, unknown>;
+    /** Who approved the action (for audit trail) */
+    approver?: string;
+}
+interface AuditEntry {
+    timestamp: Date;
+    action: string;
+    args: unknown;
+    approved: boolean;
+    approver: string;
+    risk: RiskLevel;
+}
+interface AuditSummary {
+    total: number;
+    approved: number;
+    denied: number;
+    byRisk: {
+        low: number;
+        medium: number;
+        high: number;
+    };
+}
+export declare function createSafetyManager(sandboxConfig: SandboxConfig | false, hilConfig: HumanInLoopConfig | false, policyEngineConfig?: PolicyEngineConfig | false): SafetyManager;
+export {};
+//# sourceMappingURL=safety.d.ts.map

package/dist/src/integrations/safety/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../../../src/integrations/safety/safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EACV,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,QAAQ,EAGT,MAAM,gBAAgB,CAAC;AAaxB;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,kBAAkB,CAAC,CAAqB;gBAEpC,MAAM,EAAE,aAAa,EAAE,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,KAAK;IAKlF;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAkCxE;;;;OAIG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAyDpC;;OAEG;IACH,iBAAiB,IAAI,WAAW,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IASjE;;OAEG;IACG,iBAAiB,CAAC,CAAC,EACvB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,CAAC,CAAC;IAqBb;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;CA6B1E;AAMD;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,gBAAgB,CAA2C;IACnE,OAAO,CAAC,aAAa,CAA8B;IAGnD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;gBAE1B,MAAM,EAAE,iBAAiB;IAIrC;;;OAGG;IACH,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IAI5C;;OAEG;IACH,OAAO,CAAC,aAAa;IAsCrB;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS;IAgDzC;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO;IAgB1C;;OAEG;IACG,eAAe,CACnB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC;IAyC1B;;OAEG;YACW,eAAe;IAkB7B;;OAEG;YACW,kBAAkB;IAqBhC;;;OAGG;IACH,OAAO,CAAC,SAAS;IAyBjB;;OAEG;IACH,WAAW,IAAI,UAAU,EAAE;IAI3B;;OAEG;IACH,eAAe,IAAI,YAAY;IAa/B;;OAEG;IACH,aAAa,IAAI,IAAI;CAGtB;AAMD;;GAEG;AACH,qBAAa,aAAa;IACjB,OAAO,EAAE,cAAc,GAAG,IAAI,CAAQ;IACtC,WAAW,EAAE,kBAAkB,GAAG,IAAI,CAAQ;gBAGnD,aAAa,EAAE,aAAa,GAAG,KAAK,EACpC,SAAS,EAAE,iBAAiB,GAAG,KAAK,EACpC,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,KAAK;IAWjD;;OAEG;IACG,kBAAkB,CACtB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,GACxC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAsBjD;;OAEG;IACG,iBAAiB,CAAC,CAAC,EACvB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,CAAC,CAAC;CAcd;AAMD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACpD,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;GAGG;AACH,KAAK,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;AAE1D;;;GAGG;AACH,UAAU,cAAc;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAWD,UAAU,UAAU;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,UAAU,YAAY;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAMD,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,aAAa,GAAG,KAAK,EACpC,SAAS,EAAE,iBAAiB,GAAG,KAAK,EACpC,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,KAAK,GAC9C,aAAa,CAEf"}