autohand-cli 0.8.2 → 0.9.0

package/dist/chunk-J6QET7EF.cjs

@@ -1,454 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
-
-
-
-var _chunkYRLYSQEQcjs = require('./chunk-YRLYSQEQ.cjs');
-
-// src/permissions/PermissionManager.ts
-var _path = require('path'); var _path2 = _interopRequireDefault(_path);
-var DEFAULT_SECURITY_BLACKLIST = [
-  // === Sensitive Files (read/write blocked) ===
-  // Environment files with secrets
-  "read_file:.env",
-  "read_file:.env.*",
-  "read_file:*.env",
-  "write_file:.env",
-  "write_file:.env.*",
-  "write_file:*.env",
-  // Git credentials and config
-  "read_file:.git/config",
-  "write_file:.git/config",
-  "read_file:.git/credentials",
-  "write_file:.git/credentials",
-  "read_file:.gitconfig",
-  "write_file:.gitconfig",
-  // SSH keys
-  "read_file:*/.ssh/*",
-  "write_file:*/.ssh/*",
-  "read_file:*/id_rsa*",
-  "read_file:*/id_ed25519*",
-  "read_file:*/id_ecdsa*",
-  "write_file:*/id_rsa*",
-  "write_file:*/id_ed25519*",
-  // Cloud credentials
-  "read_file:*/.aws/credentials",
-  "read_file:*/.aws/config",
-  "write_file:*/.aws/*",
-  "read_file:*/.azure/*",
-  "write_file:*/.azure/*",
-  "read_file:*/.gcloud/*",
-  "write_file:*/.gcloud/*",
-  // Private keys and certificates
-  "read_file:*.pem",
-  "read_file:*.key",
-  "read_file:*.p12",
-  "read_file:*.pfx",
-  "write_file:*.pem",
-  "write_file:*.key",
-  // GPG keys
-  "read_file:*/.gnupg/*",
-  "write_file:*/.gnupg/*",
-  // NPM tokens
-  "read_file:.npmrc",
-  "write_file:.npmrc",
-  // Docker credentials
-  "read_file:*/.docker/config.json",
-  "write_file:*/.docker/config.json",
-  // Kubernetes credentials
-  "read_file:*/.kube/config",
-  "write_file:*/.kube/config",
-  // === Dangerous Commands ===
-  // Environment exposure
-  "run_command:printenv",
-  "run_command:printenv *",
-  "run_command:env",
-  "run_command:export",
-  "run_command:set",
-  // System information
-  "run_command:cat /etc/passwd",
-  "run_command:cat /etc/shadow",
-  "run_command:cat /etc/sudoers",
-  // Privilege escalation
-  "run_command:sudo *",
-  "run_command:su *",
-  "run_command:doas *",
-  // Destructive operations
-  "run_command:rm -rf /",
-  "run_command:rm -rf /*",
-  "run_command:rm -rf ~",
-  "run_command:rm -rf ~/*",
-  "run_command:dd if=* of=/dev/*",
-  "run_command:mkfs*",
-  "run_command:wipefs*",
-  "run_command:shred*",
-  // Remote code execution
-  "run_command:curl * | *sh",
-  "run_command:wget * | *sh",
-  "run_command:curl *|*sh",
-  "run_command:wget *|*sh",
-  // Network tools that can exfiltrate
-  "run_command:nc -e*",
-  "run_command:ncat -e*",
-  "run_command:netcat -e*",
-  // Credential theft
-  "run_command:cat */.ssh/*",
-  "run_command:cat */.aws/*",
-  "run_command:cat *.pem",
-  "run_command:cat *.key"
-];
-var PermissionManager = class {
-  constructor(options = {}) {
-    this.sessionCache = /* @__PURE__ */ new Map();
-    this.localSettingsLoaded = false;
-    const isOptions = "settings" in options || "onPersist" in options || "workspaceRoot" in options;
-    const settings = isOptions ? _nullishCoalesce(options.settings, () => ( {})) : options;
-    this.onPersist = isOptions ? options.onPersist : void 0;
-    this.workspaceRoot = isOptions ? options.workspaceRoot : void 0;
-    const userBlacklist = _nullishCoalesce(settings.blacklist, () => ( []));
-    this.settings = {
-      mode: "interactive",
-      whitelist: [],
-      blacklist: userBlacklist,
-      rules: [],
-      rememberSession: true,
-      ...settings
-    };
-    this.mode = this.settings.mode || "interactive";
-  }
-  /**
-   * Initialize local project settings (async)
-   * Call this after construction to load local .autohand/settings.local.json
-   */
-  async initLocalSettings() {
-    if (!this.workspaceRoot || this.localSettingsLoaded) return;
-    try {
-      const localSettings = await _chunkYRLYSQEQcjs.loadLocalProjectSettings.call(void 0, this.workspaceRoot);
-      if (_optionalChain([localSettings, 'optionalAccess', _ => _.permissions])) {
-        this.localSettings = localSettings.permissions;
-      }
-      this.localSettingsLoaded = true;
-    } catch (e) {
-    }
-  }
-  /**
-   * Get merged settings (global + local)
-   */
-  getMergedSettings() {
-    return _chunkYRLYSQEQcjs.mergePermissions.call(void 0, this.settings, this.localSettings);
-  }
-  /**
-   * Set permission mode (can be overridden by CLI flags)
-   */
-  setMode(mode) {
-    this.mode = mode;
-  }
-  /**
-   * Get current mode
-   */
-  getMode() {
-    return this.mode;
-  }
-  /**
-   * Check if an action should be allowed, denied, or prompted
-   */
-  checkPermission(context) {
-    if (this.isSecurityBlacklisted(context)) {
-      return { allowed: false, reason: "blacklisted" };
-    }
-    const cacheKey = this.getCacheKey(context);
-    if (this.settings.rememberSession && this.sessionCache.has(cacheKey)) {
-      return {
-        allowed: this.sessionCache.get(cacheKey),
-        reason: this.sessionCache.get(cacheKey) ? "user_approved" : "user_denied",
-        cached: true
-      };
-    }
-    if (this.mode === "unrestricted") {
-      return { allowed: true, reason: "mode_unrestricted" };
-    }
-    if (this.mode === "restricted") {
-      return { allowed: false, reason: "mode_restricted" };
-    }
-    if (this.isBlacklisted(context)) {
-      return { allowed: false, reason: "blacklisted" };
-    }
-    if (this.isWhitelisted(context)) {
-      return { allowed: true, reason: "whitelisted" };
-    }
-    const ruleDecision = this.checkRules(context);
-    if (ruleDecision) {
-      return ruleDecision;
-    }
-    return { allowed: false, reason: "default" };
-  }
-  /**
-   * Record a user's decision - adds to local project whitelist/blacklist and persists
-   * Approved permissions are saved to .autohand/settings.local.json for "approve once, don't ask again"
-   */
-  async recordDecision(context, allowed) {
-    const merged = this.getMergedSettings();
-    if (merged.rememberSession) {
-      const cacheKey = this.getCacheKey(context);
-      this.sessionCache.set(cacheKey, allowed);
-    }
-    const pattern = this.contextToPattern(context);
-    const dirPattern = allowed && context.path ? this.buildDirectoryWildcard(context) : null;
-    if (allowed && this.workspaceRoot) {
-      try {
-        const patterns = dirPattern ? [pattern, dirPattern] : [pattern];
-        for (const p of patterns) {
-          await _chunkYRLYSQEQcjs.addToLocalWhitelist.call(void 0, this.workspaceRoot, p);
-        }
-        if (!this.localSettings) {
-          this.localSettings = { whitelist: [] };
-        }
-        if (!this.localSettings.whitelist) {
-          this.localSettings.whitelist = [];
-        }
-        for (const p of patterns) {
-          if (!this.localSettings.whitelist.includes(p)) {
-            this.localSettings.whitelist.push(p);
-          }
-        }
-      } catch (e2) {
-        this.addToWhitelist(pattern);
-        if (dirPattern) this.addToWhitelist(dirPattern);
-      }
-    } else if (allowed) {
-      this.addToWhitelist(pattern);
-      if (dirPattern) this.addToWhitelist(dirPattern);
-    } else {
-      this.addToBlacklist(pattern);
-    }
-    if (this.onPersist) {
-      await this.onPersist(this.settings);
-    }
-  }
-  /**
-   * Convert context to a pattern string for whitelist/blacklist
-   */
-  contextToPattern(context) {
-    const tool = context.tool;
-    let value;
-    if (context.command) {
-      const args = _optionalChain([context, 'access', _2 => _2.args, 'optionalAccess', _3 => _3.join, 'call', _4 => _4(" ")]) || "";
-      value = args ? `${context.command} ${args}` : context.command;
-    } else if (context.path) {
-      value = context.path;
-    } else {
-      return `${tool}:*`;
-    }
-    return `${tool}:${value}`;
-  }
-  /**
-   * Build a directory-level wildcard pattern for path-based approvals.
-   * E.g., write_file:/project/tests/foo.ts → write_file:/project/tests/*
-   * This allows future writes in the same directory to be auto-approved.
-   */
-  buildDirectoryWildcard(context) {
-    if (!context.path) return null;
-    const dir = _path2.default.dirname(context.path);
-    if (dir === "." || dir === "/") return null;
-    return `${context.tool}:${dir}/*`;
-  }
-  /**
-   * Check if context matches the immutable security blacklist
-   * This check CANNOT be bypassed by any mode, whitelist, or user setting
-   */
-  isSecurityBlacklisted(context) {
-    return DEFAULT_SECURITY_BLACKLIST.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check if context matches user blacklist (can be modified by user)
-   */
-  isBlacklisted(context) {
-    const merged = this.getMergedSettings();
-    const userBlacklist = merged.blacklist || [];
-    return userBlacklist.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check if context matches whitelist (uses merged global + local settings)
-   */
-  isWhitelisted(context) {
-    const merged = this.getMergedSettings();
-    const whitelist = merged.whitelist || [];
-    return whitelist.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check custom rules (uses merged global + local settings)
-   */
-  checkRules(context) {
-    const merged = this.getMergedSettings();
-    const rules = merged.rules || [];
-    for (const rule of rules) {
-      if (this.ruleMatches(context, rule)) {
-        if (rule.action === "allow") {
-          return { allowed: true, reason: "rule_match" };
-        }
-        if (rule.action === "deny") {
-          return { allowed: false, reason: "rule_match" };
-        }
-      }
-    }
-    return null;
-  }
-  /**
-   * Check if a rule matches the context
-   */
-  ruleMatches(context, rule) {
-    if (rule.tool !== "*" && rule.tool !== context.tool) {
-      return false;
-    }
-    if (rule.pattern) {
-      const fullCommand = this.getFullCommand(context);
-      return this.globMatch(fullCommand, rule.pattern);
-    }
-    return true;
-  }
-  /**
-   * Match context against a pattern string
-   * Format: "tool:pattern" or just "pattern" for run_command
-   */
-  matchesPattern(context, pattern) {
-    const colonIndex = pattern.indexOf(":");
-    let toolPattern;
-    let commandPattern;
-    if (colonIndex !== -1) {
-      toolPattern = pattern.substring(0, colonIndex);
-      commandPattern = pattern.substring(colonIndex + 1);
-    } else {
-      toolPattern = "run_command";
-      commandPattern = pattern;
-    }
-    if (toolPattern !== "*" && toolPattern !== context.tool) {
-      return false;
-    }
-    const fullCommand = this.getFullCommand(context);
-    return this.globMatch(fullCommand, commandPattern);
-  }
-  /**
-   * Get full command string from context
-   */
-  getFullCommand(context) {
-    if (context.command) {
-      const args = _optionalChain([context, 'access', _5 => _5.args, 'optionalAccess', _6 => _6.join, 'call', _7 => _7(" ")]) || "";
-      return args ? `${context.command} ${args}` : context.command;
-    }
-    if (context.path) {
-      return context.path;
-    }
-    return context.tool;
-  }
-  /**
-   * Simple glob matching (* for wildcards)
-   */
-  globMatch(text, pattern) {
-    const regexPattern = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
-    const regex = new RegExp(`^${regexPattern}$`, "i");
-    return regex.test(text);
-  }
-  /**
-   * Generate cache key from context
-   */
-  getCacheKey(context) {
-    const parts = [context.tool];
-    if (context.command) parts.push(context.command);
-    if (_optionalChain([context, 'access', _8 => _8.args, 'optionalAccess', _9 => _9.length])) parts.push(context.args.join(" "));
-    if (context.path) parts.push(context.path);
-    return parts.join("::");
-  }
-  /**
-   * Clear session cache
-   */
-  clearCache() {
-    this.sessionCache.clear();
-  }
-  /**
-   * Get session cache stats
-   */
-  getCacheStats() {
-    return {
-      size: this.sessionCache.size,
-      entries: Array.from(this.sessionCache.keys())
-    };
-  }
-  /**
-   * Add to whitelist dynamically
-   */
-  addToWhitelist(pattern) {
-    if (!this.settings.whitelist) {
-      this.settings.whitelist = [];
-    }
-    if (!this.settings.whitelist.includes(pattern)) {
-      this.settings.whitelist.push(pattern);
-    }
-  }
-  /**
-   * Add to blacklist dynamically
-   */
-  addToBlacklist(pattern) {
-    if (!this.settings.blacklist) {
-      this.settings.blacklist = [];
-    }
-    if (!this.settings.blacklist.includes(pattern)) {
-      this.settings.blacklist.push(pattern);
-    }
-  }
-  /**
-   * Remove from whitelist
-   */
-  async removeFromWhitelist(pattern) {
-    if (!this.settings.whitelist) return false;
-    const index = this.settings.whitelist.indexOf(pattern);
-    if (index !== -1) {
-      this.settings.whitelist.splice(index, 1);
-      if (this.onPersist) {
-        await this.onPersist(this.settings);
-      }
-      return true;
-    }
-    return false;
-  }
-  /**
-   * Remove from blacklist
-   */
-  async removeFromBlacklist(pattern) {
-    if (!this.settings.blacklist) return false;
-    const index = this.settings.blacklist.indexOf(pattern);
-    if (index !== -1) {
-      this.settings.blacklist.splice(index, 1);
-      if (this.onPersist) {
-        await this.onPersist(this.settings);
-      }
-      return true;
-    }
-    return false;
-  }
-  /**
-   * Get current whitelist
-   */
-  getWhitelist() {
-    return [...this.settings.whitelist || []];
-  }
-  /**
-   * Get current blacklist
-   */
-  getBlacklist() {
-    return [...this.settings.blacklist || []];
-  }
-  /**
-   * Get current settings (for display)
-   */
-  getSettings() {
-    return { ...this.settings };
-  }
-};
-
-
-
-
-exports.DEFAULT_SECURITY_BLACKLIST = DEFAULT_SECURITY_BLACKLIST; exports.PermissionManager = PermissionManager;
-/**
- * Permission Manager - Handles tool/command approval with whitelist/blacklist
- * @license Apache-2.0
- */

package/dist/chunk-LWUJFGOZ.js

@@ -1,115 +0,0 @@
-import {
-  safePrompt
-} from "./chunk-6ZCULLCA.js";
-import {
-  t
-} from "./chunk-APIXPPMT.js";
-
-// src/commands/permissions.ts
-import chalk from "chalk";
-async function permissions(ctx) {
-  const whitelist = ctx.permissionManager.getWhitelist();
-  const blacklist = ctx.permissionManager.getBlacklist();
-  const settings = ctx.permissionManager.getSettings();
-  console.log();
-  console.log(chalk.bold.cyan(t("commands.permissions.title")));
-  console.log(chalk.gray("\u2500".repeat(50)));
-  console.log(chalk.gray(t("commands.permissions.mode", { mode: settings.mode || "interactive" })));
-  console.log();
-  if (whitelist.length === 0 && blacklist.length === 0) {
-    console.log(chalk.gray("No saved permissions yet."));
-    console.log();
-    console.log(chalk.gray("When you approve or deny a tool/command, it will be saved here."));
-    console.log(chalk.gray("Approved items are auto-allowed; denied items are auto-blocked."));
-    return null;
-  }
-  if (whitelist.length > 0) {
-    console.log(chalk.bold.green(t("commands.permissions.allowed")));
-    console.log();
-    whitelist.forEach((pattern, index) => {
-      console.log(chalk.green(`  ${index + 1}. ${pattern}`));
-    });
-    console.log();
-  }
-  if (blacklist.length > 0) {
-    console.log(chalk.bold.red(t("commands.permissions.denied")));
-    console.log();
-    blacklist.forEach((pattern, index) => {
-      console.log(chalk.red(`  ${index + 1}. ${pattern}`));
-    });
-    console.log();
-  }
-  console.log(chalk.gray("\u2500".repeat(50)));
-  console.log(chalk.gray(`Total: ${whitelist.length} approved, ${blacklist.length} denied`));
-  console.log();
-  const actionResult = await safePrompt({
-    type: "select",
-    name: "action",
-    message: "What would you like to do?",
-    choices: [
-      { name: "done", message: "Done" },
-      { name: "remove_approved", message: "Remove an approved item" },
-      { name: "remove_denied", message: "Remove a denied item" },
-      { name: "clear_all", message: "Clear all permissions" }
-    ]
-  });
-  if (!actionResult || actionResult.action === "done") {
-    return null;
-  }
-  const { action } = actionResult;
-  if (action === "remove_approved" && whitelist.length > 0) {
-    const result = await safePrompt({
-      type: "select",
-      name: "pattern",
-      message: "Select item to remove from approved list:",
-      choices: whitelist.map((p) => ({ name: p, message: p }))
-    });
-    if (result) {
-      await ctx.permissionManager.removeFromWhitelist(result.pattern);
-      console.log(chalk.yellow(`Removed "${result.pattern}" from approved list.`));
-    }
-  } else if (action === "remove_denied" && blacklist.length > 0) {
-    const result = await safePrompt({
-      type: "select",
-      name: "pattern",
-      message: "Select item to remove from denied list:",
-      choices: blacklist.map((p) => ({ name: p, message: p }))
-    });
-    if (result) {
-      await ctx.permissionManager.removeFromBlacklist(result.pattern);
-      console.log(chalk.yellow(`Removed "${result.pattern}" from denied list.`));
-    }
-  } else if (action === "clear_all") {
-    const result = await safePrompt({
-      type: "confirm",
-      name: "confirm",
-      message: "Clear all saved permissions? This cannot be undone.",
-      initial: false
-    });
-    if (result?.confirm) {
-      for (const pattern of [...whitelist]) {
-        await ctx.permissionManager.removeFromWhitelist(pattern);
-      }
-      for (const pattern of [...blacklist]) {
-        await ctx.permissionManager.removeFromBlacklist(pattern);
-      }
-      console.log(chalk.yellow("All permissions cleared."));
-    }
-  }
-  return null;
-}
-var metadata = {
-  command: "/permissions",
-  description: t("commands.permissions.description"),
-  implemented: true
-};
-
-export {
-  permissions,
-  metadata
-};
-/**
- * @license
- * Copyright 2025 Autohand AI LLC
- * SPDX-License-Identifier: Apache-2.0
- */