autohand-cli 0.8.3 → 0.9.0

package/dist/chunk-DNUOXBHL.js

@@ -1,539 +0,0 @@
-import {
-  addToLocalWhitelist,
-  loadLocalProjectSettings,
-  mergePermissions
-} from "./chunk-ALYU6VTM.js";
-
-// src/permissions/PermissionManager.ts
-import path from "path";
-
-// src/permissions/toolPatterns.ts
-import { minimatch } from "minimatch";
-function matchesToolPattern(pattern, call) {
-  if (pattern.kind !== call.kind) return false;
-  if (!pattern.argument) return true;
-  const arg = pattern.argument;
-  if (arg.endsWith(":*")) {
-    const stem = arg.slice(0, -2);
-    return call.target === stem || call.target.startsWith(stem + " ");
-  }
-  if (pattern.kind === "url") {
-    try {
-      const url = new URL(call.target);
-      const domain = url.hostname;
-      if (arg.startsWith("*.")) {
-        return domain.endsWith(arg.slice(1));
-      }
-      return domain === arg || domain.endsWith("." + arg);
-    } catch {
-      return call.target.includes(arg);
-    }
-  }
-  if (arg === call.target) return true;
-  if (arg.includes("*") || arg.includes("?")) {
-    return minimatch(call.target, arg);
-  }
-  return false;
-}
-
-// src/permissions/PermissionManager.ts
-var DEFAULT_SECURITY_BLACKLIST = [
-  // === Sensitive Files (read/write blocked) ===
-  // Environment files with secrets
-  "read_file:.env",
-  "read_file:.env.*",
-  "read_file:*.env",
-  "write_file:.env",
-  "write_file:.env.*",
-  "write_file:*.env",
-  // Git credentials and config
-  "read_file:.git/config",
-  "write_file:.git/config",
-  "read_file:.git/credentials",
-  "write_file:.git/credentials",
-  "read_file:.gitconfig",
-  "write_file:.gitconfig",
-  // SSH keys
-  "read_file:*/.ssh/*",
-  "write_file:*/.ssh/*",
-  "read_file:*/id_rsa*",
-  "read_file:*/id_ed25519*",
-  "read_file:*/id_ecdsa*",
-  "write_file:*/id_rsa*",
-  "write_file:*/id_ed25519*",
-  // Cloud credentials
-  "read_file:*/.aws/credentials",
-  "read_file:*/.aws/config",
-  "write_file:*/.aws/*",
-  "read_file:*/.azure/*",
-  "write_file:*/.azure/*",
-  "read_file:*/.gcloud/*",
-  "write_file:*/.gcloud/*",
-  // Private keys and certificates
-  "read_file:*.pem",
-  "read_file:*.key",
-  "read_file:*.p12",
-  "read_file:*.pfx",
-  "write_file:*.pem",
-  "write_file:*.key",
-  // GPG keys
-  "read_file:*/.gnupg/*",
-  "write_file:*/.gnupg/*",
-  // NPM tokens
-  "read_file:.npmrc",
-  "write_file:.npmrc",
-  // Docker credentials
-  "read_file:*/.docker/config.json",
-  "write_file:*/.docker/config.json",
-  // Kubernetes credentials
-  "read_file:*/.kube/config",
-  "write_file:*/.kube/config",
-  // === Dangerous Commands ===
-  // Environment exposure
-  "run_command:printenv",
-  "run_command:printenv *",
-  "run_command:env",
-  "run_command:export",
-  "run_command:set",
-  // System information
-  "run_command:cat /etc/passwd",
-  "run_command:cat /etc/shadow",
-  "run_command:cat /etc/sudoers",
-  // Privilege escalation
-  "run_command:sudo *",
-  "run_command:su *",
-  "run_command:doas *",
-  // Destructive operations
-  "run_command:rm -rf /",
-  "run_command:rm -rf /*",
-  "run_command:rm -rf ~",
-  "run_command:rm -rf ~/*",
-  "run_command:dd if=* of=/dev/*",
-  "run_command:mkfs*",
-  "run_command:wipefs*",
-  "run_command:shred*",
-  // Remote code execution
-  "run_command:curl * | *sh",
-  "run_command:wget * | *sh",
-  "run_command:curl *|*sh",
-  "run_command:wget *|*sh",
-  // Network tools that can exfiltrate
-  "run_command:nc -e*",
-  "run_command:ncat -e*",
-  "run_command:netcat -e*",
-  // Credential theft
-  "run_command:cat */.ssh/*",
-  "run_command:cat */.aws/*",
-  "run_command:cat *.pem",
-  "run_command:cat *.key"
-];
-var PermissionManager = class {
-  constructor(options = {}) {
-    this.sessionCache = /* @__PURE__ */ new Map();
-    this.localSettingsLoaded = false;
-    const isOptions = "settings" in options || "onPersist" in options || "workspaceRoot" in options;
-    const settings = isOptions ? options.settings ?? {} : options;
-    this.onPersist = isOptions ? options.onPersist : void 0;
-    this.workspaceRoot = isOptions ? options.workspaceRoot : void 0;
-    const userBlacklist = settings.blacklist ?? [];
-    this.settings = {
-      mode: "interactive",
-      whitelist: [],
-      blacklist: userBlacklist,
-      rules: [],
-      rememberSession: true,
-      ...settings
-    };
-    this.mode = this.settings.mode || "interactive";
-  }
-  /**
-   * Initialize local project settings (async)
-   * Call this after construction to load local .autohand/settings.local.json
-   */
-  async initLocalSettings() {
-    if (!this.workspaceRoot || this.localSettingsLoaded) return;
-    try {
-      const localSettings = await loadLocalProjectSettings(this.workspaceRoot);
-      if (localSettings?.permissions) {
-        this.localSettings = localSettings.permissions;
-      }
-      this.localSettingsLoaded = true;
-    } catch {
-    }
-  }
-  /**
-   * Get merged settings (global + local)
-   */
-  getMergedSettings() {
-    return mergePermissions(this.settings, this.localSettings);
-  }
-  /**
-   * Set permission mode (can be overridden by CLI flags)
-   */
-  setMode(mode) {
-    this.mode = mode;
-  }
-  /**
-   * Get current mode
-   */
-  getMode() {
-    return this.mode;
-  }
-  /**
-   * Check if an action should be allowed, denied, or prompted
-   */
-  checkPermission(context) {
-    if (this.isSecurityBlacklisted(context)) {
-      return { allowed: false, reason: "blacklisted" };
-    }
-    const patternDecision = this.checkPatterns(context);
-    if (patternDecision) {
-      return patternDecision;
-    }
-    const cacheKey = this.getCacheKey(context);
-    if (this.settings.rememberSession && this.sessionCache.has(cacheKey)) {
-      return {
-        allowed: this.sessionCache.get(cacheKey),
-        reason: this.sessionCache.get(cacheKey) ? "user_approved" : "user_denied",
-        cached: true
-      };
-    }
-    if (this.mode === "unrestricted") {
-      return { allowed: true, reason: "mode_unrestricted" };
-    }
-    if (this.mode === "restricted") {
-      return { allowed: false, reason: "mode_restricted" };
-    }
-    if (this.isBlacklisted(context)) {
-      return { allowed: false, reason: "blacklisted" };
-    }
-    if (this.isWhitelisted(context)) {
-      return { allowed: true, reason: "whitelisted" };
-    }
-    const ruleDecision = this.checkRules(context);
-    if (ruleDecision) {
-      return ruleDecision;
-    }
-    return { allowed: false, reason: "default" };
-  }
-  /**
-   * Record a user's decision - adds to local project whitelist/blacklist and persists
-   * Approved permissions are saved to .autohand/settings.local.json for "approve once, don't ask again"
-   */
-  async recordDecision(context, allowed) {
-    const merged = this.getMergedSettings();
-    if (merged.rememberSession) {
-      const cacheKey = this.getCacheKey(context);
-      this.sessionCache.set(cacheKey, allowed);
-    }
-    const pattern = this.contextToPattern(context);
-    const dirPattern = allowed && context.path ? this.buildDirectoryWildcard(context) : null;
-    if (allowed && this.workspaceRoot) {
-      try {
-        const patterns = dirPattern ? [pattern, dirPattern] : [pattern];
-        for (const p of patterns) {
-          await addToLocalWhitelist(this.workspaceRoot, p);
-        }
-        if (!this.localSettings) {
-          this.localSettings = { whitelist: [] };
-        }
-        if (!this.localSettings.whitelist) {
-          this.localSettings.whitelist = [];
-        }
-        for (const p of patterns) {
-          if (!this.localSettings.whitelist.includes(p)) {
-            this.localSettings.whitelist.push(p);
-          }
-        }
-      } catch {
-        this.addToWhitelist(pattern);
-        if (dirPattern) this.addToWhitelist(dirPattern);
-      }
-    } else if (allowed) {
-      this.addToWhitelist(pattern);
-      if (dirPattern) this.addToWhitelist(dirPattern);
-    } else {
-      this.addToBlacklist(pattern);
-    }
-    if (this.onPersist) {
-      await this.onPersist(this.settings);
-    }
-  }
-  /**
-   * Convert context to a pattern string for whitelist/blacklist
-   */
-  contextToPattern(context) {
-    const tool = context.tool;
-    let value;
-    if (context.command) {
-      const args = context.args?.join(" ") || "";
-      value = args ? `${context.command} ${args}` : context.command;
-    } else if (context.path) {
-      value = context.path;
-    } else {
-      return `${tool}:*`;
-    }
-    return `${tool}:${value}`;
-  }
-  /**
-   * Build a directory-level wildcard pattern for path-based approvals.
-   * E.g., write_file:/project/tests/foo.ts → write_file:/project/tests/*
-   * This allows future writes in the same directory to be auto-approved.
-   */
-  buildDirectoryWildcard(context) {
-    if (!context.path) return null;
-    const dir = path.dirname(context.path);
-    if (dir === "." || dir === "/") return null;
-    return `${context.tool}:${dir}/*`;
-  }
-  /**
-   * Convert a PermissionContext to the { kind, target } shape used by matchesToolPattern.
-   */
-  contextToCall(context) {
-    return { kind: context.tool, target: this.getFullCommand(context) };
-  }
-  /**
-   * Check pattern-based allow/deny rules (denyPatterns, availableTools, excludedTools,
-   * allowPatterns, allPathsAllowed, allUrlsAllowed).
-   * Returns a decision when a pattern fires, or null to continue with normal flow.
-   */
-  checkPatterns(context) {
-    const settings = this.getMergedSettings();
-    const call = this.contextToCall(context);
-    if (settings.denyPatterns?.length) {
-      for (const p of settings.denyPatterns) {
-        if (matchesToolPattern(p, call)) {
-          return { allowed: false, reason: "pattern_denied" };
-        }
-      }
-    }
-    if (settings.availableTools?.length) {
-      const inAvailable = settings.availableTools.some((p) => matchesToolPattern(p, call));
-      if (!inAvailable) {
-        return { allowed: false, reason: "not_in_available" };
-      }
-    }
-    if (settings.excludedTools?.length) {
-      for (const p of settings.excludedTools) {
-        if (matchesToolPattern(p, call)) {
-          return { allowed: false, reason: "excluded" };
-        }
-      }
-    }
-    if (settings.allowPatterns?.length) {
-      for (const p of settings.allowPatterns) {
-        if (matchesToolPattern(p, call)) {
-          return { allowed: true, reason: "pattern_allowed" };
-        }
-      }
-    }
-    const fileTools = /* @__PURE__ */ new Set(["read_file", "write_file", "list_dir", "delete_path", "move_path", "copy_path"]);
-    if (settings.allPathsAllowed && fileTools.has(context.tool)) {
-      return { allowed: true, reason: "all_paths_allowed" };
-    }
-    if (settings.allUrlsAllowed && context.tool === "url") {
-      return { allowed: true, reason: "all_urls_allowed" };
-    }
-    return null;
-  }
-  /**
-   * Check if context matches the immutable security blacklist
-   * This check CANNOT be bypassed by any mode, whitelist, or user setting
-   */
-  isSecurityBlacklisted(context) {
-    return DEFAULT_SECURITY_BLACKLIST.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check if context matches user blacklist (can be modified by user)
-   */
-  isBlacklisted(context) {
-    const merged = this.getMergedSettings();
-    const userBlacklist = merged.blacklist || [];
-    return userBlacklist.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check if context matches whitelist (uses merged global + local settings)
-   */
-  isWhitelisted(context) {
-    const merged = this.getMergedSettings();
-    const whitelist = merged.whitelist || [];
-    return whitelist.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check custom rules (uses merged global + local settings)
-   */
-  checkRules(context) {
-    const merged = this.getMergedSettings();
-    const rules = merged.rules || [];
-    for (const rule of rules) {
-      if (this.ruleMatches(context, rule)) {
-        if (rule.action === "allow") {
-          return { allowed: true, reason: "rule_match" };
-        }
-        if (rule.action === "deny") {
-          return { allowed: false, reason: "rule_match" };
-        }
-      }
-    }
-    return null;
-  }
-  /**
-   * Check if a rule matches the context
-   */
-  ruleMatches(context, rule) {
-    if (rule.tool !== "*" && rule.tool !== context.tool) {
-      return false;
-    }
-    if (rule.pattern) {
-      const fullCommand = this.getFullCommand(context);
-      return this.globMatch(fullCommand, rule.pattern);
-    }
-    return true;
-  }
-  /**
-   * Match context against a pattern string
-   * Format: "tool:pattern" or just "pattern" for run_command
-   */
-  matchesPattern(context, pattern) {
-    const colonIndex = pattern.indexOf(":");
-    let toolPattern;
-    let commandPattern;
-    if (colonIndex !== -1) {
-      toolPattern = pattern.substring(0, colonIndex);
-      commandPattern = pattern.substring(colonIndex + 1);
-    } else {
-      toolPattern = "run_command";
-      commandPattern = pattern;
-    }
-    if (toolPattern !== "*" && toolPattern !== context.tool) {
-      return false;
-    }
-    const fullCommand = this.getFullCommand(context);
-    return this.globMatch(fullCommand, commandPattern);
-  }
-  /**
-   * Get full command string from context
-   */
-  getFullCommand(context) {
-    if (context.command) {
-      const args = context.args?.join(" ") || "";
-      return args ? `${context.command} ${args}` : context.command;
-    }
-    if (context.path) {
-      return context.path;
-    }
-    return context.tool;
-  }
-  /**
-   * Simple glob matching (* for wildcards)
-   */
-  globMatch(text, pattern) {
-    const regexPattern = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
-    const regex = new RegExp(`^${regexPattern}$`, "i");
-    return regex.test(text);
-  }
-  /**
-   * Generate cache key from context
-   */
-  getCacheKey(context) {
-    const parts = [context.tool];
-    if (context.command) parts.push(context.command);
-    if (context.args?.length) parts.push(context.args.join(" "));
-    if (context.path) parts.push(context.path);
-    return parts.join("::");
-  }
-  /**
-   * Clear session cache
-   */
-  clearCache() {
-    this.sessionCache.clear();
-  }
-  /**
-   * Get session cache stats
-   */
-  getCacheStats() {
-    return {
-      size: this.sessionCache.size,
-      entries: Array.from(this.sessionCache.keys())
-    };
-  }
-  /**
-   * Add to whitelist dynamically
-   */
-  addToWhitelist(pattern) {
-    if (!this.settings.whitelist) {
-      this.settings.whitelist = [];
-    }
-    if (!this.settings.whitelist.includes(pattern)) {
-      this.settings.whitelist.push(pattern);
-    }
-  }
-  /**
-   * Add to blacklist dynamically
-   */
-  addToBlacklist(pattern) {
-    if (!this.settings.blacklist) {
-      this.settings.blacklist = [];
-    }
-    if (!this.settings.blacklist.includes(pattern)) {
-      this.settings.blacklist.push(pattern);
-    }
-  }
-  /**
-   * Remove from whitelist
-   */
-  async removeFromWhitelist(pattern) {
-    if (!this.settings.whitelist) return false;
-    const index = this.settings.whitelist.indexOf(pattern);
-    if (index !== -1) {
-      this.settings.whitelist.splice(index, 1);
-      if (this.onPersist) {
-        await this.onPersist(this.settings);
-      }
-      return true;
-    }
-    return false;
-  }
-  /**
-   * Remove from blacklist
-   */
-  async removeFromBlacklist(pattern) {
-    if (!this.settings.blacklist) return false;
-    const index = this.settings.blacklist.indexOf(pattern);
-    if (index !== -1) {
-      this.settings.blacklist.splice(index, 1);
-      if (this.onPersist) {
-        await this.onPersist(this.settings);
-      }
-      return true;
-    }
-    return false;
-  }
-  /**
-   * Get current whitelist
-   */
-  getWhitelist() {
-    return [...this.settings.whitelist || []];
-  }
-  /**
-   * Get current blacklist
-   */
-  getBlacklist() {
-    return [...this.settings.blacklist || []];
-  }
-  /**
-   * Get current settings (for display)
-   */
-  getSettings() {
-    return { ...this.settings };
-  }
-};
-
-export {
-  DEFAULT_SECURITY_BLACKLIST,
-  PermissionManager
-};
-/**
- * Permission Manager - Handles tool/command approval with whitelist/blacklist
- * @license Apache-2.0
- */

package/dist/chunk-EFX2QSZX.cjs

@@ -1,33 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }// src/core/immediateCommandRouter.ts
-var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
-function renderTerminalMarkdown(text) {
-  if (!text) return text;
-  let result = text.replace(
-    /\*\*([^*]+)\*\*/g,
-    (_match, content) => _chalk2.default.bold(content)
-  );
-  result = result.replace(
-    /(^|[\s(])_([^_]+)_(?=[\s),.:;!?]|$)/gm,
-    (_match, before, content) => `${before}${_chalk2.default.italic(content)}`
-  );
-  return result;
-}
-function routeOutput(text, opts) {
-  const rendered = renderTerminalMarkdown(text);
-  if (opts.persistentInputActiveTurn && !opts.terminalRegionsDisabled) {
-    opts.writeAbove(`${rendered}
-`);
-  } else {
-    console.log(rendered);
-  }
-}
-
-
-
-
-exports.renderTerminalMarkdown = renderTerminalMarkdown; exports.routeOutput = routeOutput;
-/**
- * @license
- * Copyright 2025 Autohand AI LLC
- * SPDX-License-Identifier: Apache-2.0
- */

package/dist/chunk-H2ZRHQQV.js

@@ -1,33 +0,0 @@
-// src/core/immediateCommandRouter.ts
-import chalk from "chalk";
-function renderTerminalMarkdown(text) {
-  if (!text) return text;
-  let result = text.replace(
-    /\*\*([^*]+)\*\*/g,
-    (_match, content) => chalk.bold(content)
-  );
-  result = result.replace(
-    /(^|[\s(])_([^_]+)_(?=[\s),.:;!?]|$)/gm,
-    (_match, before, content) => `${before}${chalk.italic(content)}`
-  );
-  return result;
-}
-function routeOutput(text, opts) {
-  const rendered = renderTerminalMarkdown(text);
-  if (opts.persistentInputActiveTurn && !opts.terminalRegionsDisabled) {
-    opts.writeAbove(`${rendered}
-`);
-  } else {
-    console.log(rendered);
-  }
-}
-
-export {
-  renderTerminalMarkdown,
-  routeOutput
-};
-/**
- * @license
- * Copyright 2025 Autohand AI LLC
- * SPDX-License-Identifier: Apache-2.0
- */

package/dist/chunk-HNRPK5MY.cjs

@@ -1,85 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
-var _chunkZYQMLKOKcjs = require('./chunk-ZYQMLKOK.cjs');
-
-
-var _chunkCB4E2T5Ncjs = require('./chunk-CB4E2T5N.cjs');
-
-
-
-
-
-
-var _chunk7BTSG4MEcjs = require('./chunk-7BTSG4ME.cjs');
-
-// src/commands/language.ts
-var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
-async function language(ctx) {
-  const currentLocale = _chunk7BTSG4MEcjs.getCurrentLocale.call(void 0, );
-  const currentDisplayName = _chunk7BTSG4MEcjs.LANGUAGE_DISPLAY_NAMES[currentLocale];
-  console.log(_chalk2.default.cyan(`
-\u{1F310} ${_chunk7BTSG4MEcjs.t.call(void 0, "commands.language.title")}
-`));
-  console.log(_chalk2.default.gray(`${_chunk7BTSG4MEcjs.t.call(void 0, "commands.language.currentLanguage", { language: currentDisplayName })}`));
-  console.log();
-  const options = _chunk7BTSG4MEcjs.SUPPORTED_LOCALES.map((locale) => ({
-    label: locale === currentLocale ? `${_chunk7BTSG4MEcjs.LANGUAGE_DISPLAY_NAMES[locale]} (${_chunk7BTSG4MEcjs.t.call(void 0, "common.current")})` : _chunk7BTSG4MEcjs.LANGUAGE_DISPLAY_NAMES[locale],
-    value: locale
-  }));
-  const result = await _chunkZYQMLKOKcjs.showModal.call(void 0, {
-    title: _chunk7BTSG4MEcjs.t.call(void 0, "commands.language.selectPrompt"),
-    options,
-    initialIndex: _chunk7BTSG4MEcjs.SUPPORTED_LOCALES.indexOf(currentLocale)
-  });
-  if (!result) {
-    console.log(_chalk2.default.gray("\nLanguage selection cancelled."));
-    return null;
-  }
-  const selected = result.value;
-  if (selected === currentLocale) {
-    console.log(_chalk2.default.gray(`
-${_chunk7BTSG4MEcjs.t.call(void 0, "commands.language.noChange")}`));
-    return null;
-  }
-  await _chunk7BTSG4MEcjs.changeLanguage.call(void 0, selected);
-  ctx.config.ui = { ...ctx.config.ui, locale: selected };
-  await _chunkCB4E2T5Ncjs.saveConfig.call(void 0, ctx.config);
-  const newDisplayName = _chunk7BTSG4MEcjs.LANGUAGE_DISPLAY_NAMES[selected];
-  console.log(_chalk2.default.green(`
-\u2713 ${_chunk7BTSG4MEcjs.t.call(void 0, "commands.language.changed", { language: newDisplayName })}`));
-  console.log();
-  return null;
-}
-async function languageInfo() {
-  const currentLocale = _chunk7BTSG4MEcjs.getCurrentLocale.call(void 0, );
-  const currentDisplayName = _chunk7BTSG4MEcjs.LANGUAGE_DISPLAY_NAMES[currentLocale];
-  console.log(_chalk2.default.cyan(`
-\u{1F310} ${_chunk7BTSG4MEcjs.t.call(void 0, "commands.language.title")}
-`));
-  console.log(_chalk2.default.gray(`${_chunk7BTSG4MEcjs.t.call(void 0, "commands.language.currentLanguage", { language: currentDisplayName })}`));
-  console.log(_chalk2.default.gray(`Locale code: ${_chalk2.default.white(currentLocale)}`));
-  console.log();
-  console.log(_chalk2.default.gray("Supported languages:"));
-  for (const locale of _chunk7BTSG4MEcjs.SUPPORTED_LOCALES) {
-    const marker = locale === currentLocale ? _chalk2.default.green("\u25CF") : _chalk2.default.gray("\u25CB");
-    console.log(`  ${marker} ${_chunk7BTSG4MEcjs.LANGUAGE_DISPLAY_NAMES[locale]}`);
-  }
-  console.log();
-  return null;
-}
-var metadata = {
-  command: "/language",
-  description: "change display language",
-  implemented: true
-};
-
-
-
-
-
-exports.language = language; exports.languageInfo = languageInfo; exports.metadata = metadata;
-/**
- * @license
- * Copyright 2025 Autohand AI LLC
- * SPDX-License-Identifier: Apache-2.0
- */