autohand-cli 0.8.3 → 0.9.1

package/dist/chunk-MERYP6AM.cjs

@@ -1,539 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
-
-
-
-var _chunkYRLYSQEQcjs = require('./chunk-YRLYSQEQ.cjs');
-
-// src/permissions/PermissionManager.ts
-var _path = require('path'); var _path2 = _interopRequireDefault(_path);
-
-// src/permissions/toolPatterns.ts
-var _minimatch = require('minimatch');
-function matchesToolPattern(pattern, call) {
-  if (pattern.kind !== call.kind) return false;
-  if (!pattern.argument) return true;
-  const arg = pattern.argument;
-  if (arg.endsWith(":*")) {
-    const stem = arg.slice(0, -2);
-    return call.target === stem || call.target.startsWith(stem + " ");
-  }
-  if (pattern.kind === "url") {
-    try {
-      const url = new URL(call.target);
-      const domain = url.hostname;
-      if (arg.startsWith("*.")) {
-        return domain.endsWith(arg.slice(1));
-      }
-      return domain === arg || domain.endsWith("." + arg);
-    } catch (e) {
-      return call.target.includes(arg);
-    }
-  }
-  if (arg === call.target) return true;
-  if (arg.includes("*") || arg.includes("?")) {
-    return _minimatch.minimatch.call(void 0, call.target, arg);
-  }
-  return false;
-}
-
-// src/permissions/PermissionManager.ts
-var DEFAULT_SECURITY_BLACKLIST = [
-  // === Sensitive Files (read/write blocked) ===
-  // Environment files with secrets
-  "read_file:.env",
-  "read_file:.env.*",
-  "read_file:*.env",
-  "write_file:.env",
-  "write_file:.env.*",
-  "write_file:*.env",
-  // Git credentials and config
-  "read_file:.git/config",
-  "write_file:.git/config",
-  "read_file:.git/credentials",
-  "write_file:.git/credentials",
-  "read_file:.gitconfig",
-  "write_file:.gitconfig",
-  // SSH keys
-  "read_file:*/.ssh/*",
-  "write_file:*/.ssh/*",
-  "read_file:*/id_rsa*",
-  "read_file:*/id_ed25519*",
-  "read_file:*/id_ecdsa*",
-  "write_file:*/id_rsa*",
-  "write_file:*/id_ed25519*",
-  // Cloud credentials
-  "read_file:*/.aws/credentials",
-  "read_file:*/.aws/config",
-  "write_file:*/.aws/*",
-  "read_file:*/.azure/*",
-  "write_file:*/.azure/*",
-  "read_file:*/.gcloud/*",
-  "write_file:*/.gcloud/*",
-  // Private keys and certificates
-  "read_file:*.pem",
-  "read_file:*.key",
-  "read_file:*.p12",
-  "read_file:*.pfx",
-  "write_file:*.pem",
-  "write_file:*.key",
-  // GPG keys
-  "read_file:*/.gnupg/*",
-  "write_file:*/.gnupg/*",
-  // NPM tokens
-  "read_file:.npmrc",
-  "write_file:.npmrc",
-  // Docker credentials
-  "read_file:*/.docker/config.json",
-  "write_file:*/.docker/config.json",
-  // Kubernetes credentials
-  "read_file:*/.kube/config",
-  "write_file:*/.kube/config",
-  // === Dangerous Commands ===
-  // Environment exposure
-  "run_command:printenv",
-  "run_command:printenv *",
-  "run_command:env",
-  "run_command:export",
-  "run_command:set",
-  // System information
-  "run_command:cat /etc/passwd",
-  "run_command:cat /etc/shadow",
-  "run_command:cat /etc/sudoers",
-  // Privilege escalation
-  "run_command:sudo *",
-  "run_command:su *",
-  "run_command:doas *",
-  // Destructive operations
-  "run_command:rm -rf /",
-  "run_command:rm -rf /*",
-  "run_command:rm -rf ~",
-  "run_command:rm -rf ~/*",
-  "run_command:dd if=* of=/dev/*",
-  "run_command:mkfs*",
-  "run_command:wipefs*",
-  "run_command:shred*",
-  // Remote code execution
-  "run_command:curl * | *sh",
-  "run_command:wget * | *sh",
-  "run_command:curl *|*sh",
-  "run_command:wget *|*sh",
-  // Network tools that can exfiltrate
-  "run_command:nc -e*",
-  "run_command:ncat -e*",
-  "run_command:netcat -e*",
-  // Credential theft
-  "run_command:cat */.ssh/*",
-  "run_command:cat */.aws/*",
-  "run_command:cat *.pem",
-  "run_command:cat *.key"
-];
-var PermissionManager = class {
-  constructor(options = {}) {
-    this.sessionCache = /* @__PURE__ */ new Map();
-    this.localSettingsLoaded = false;
-    const isOptions = "settings" in options || "onPersist" in options || "workspaceRoot" in options;
-    const settings = isOptions ? _nullishCoalesce(options.settings, () => ( {})) : options;
-    this.onPersist = isOptions ? options.onPersist : void 0;
-    this.workspaceRoot = isOptions ? options.workspaceRoot : void 0;
-    const userBlacklist = _nullishCoalesce(settings.blacklist, () => ( []));
-    this.settings = {
-      mode: "interactive",
-      whitelist: [],
-      blacklist: userBlacklist,
-      rules: [],
-      rememberSession: true,
-      ...settings
-    };
-    this.mode = this.settings.mode || "interactive";
-  }
-  /**
-   * Initialize local project settings (async)
-   * Call this after construction to load local .autohand/settings.local.json
-   */
-  async initLocalSettings() {
-    if (!this.workspaceRoot || this.localSettingsLoaded) return;
-    try {
-      const localSettings = await _chunkYRLYSQEQcjs.loadLocalProjectSettings.call(void 0, this.workspaceRoot);
-      if (_optionalChain([localSettings, 'optionalAccess', _ => _.permissions])) {
-        this.localSettings = localSettings.permissions;
-      }
-      this.localSettingsLoaded = true;
-    } catch (e2) {
-    }
-  }
-  /**
-   * Get merged settings (global + local)
-   */
-  getMergedSettings() {
-    return _chunkYRLYSQEQcjs.mergePermissions.call(void 0, this.settings, this.localSettings);
-  }
-  /**
-   * Set permission mode (can be overridden by CLI flags)
-   */
-  setMode(mode) {
-    this.mode = mode;
-  }
-  /**
-   * Get current mode
-   */
-  getMode() {
-    return this.mode;
-  }
-  /**
-   * Check if an action should be allowed, denied, or prompted
-   */
-  checkPermission(context) {
-    if (this.isSecurityBlacklisted(context)) {
-      return { allowed: false, reason: "blacklisted" };
-    }
-    const patternDecision = this.checkPatterns(context);
-    if (patternDecision) {
-      return patternDecision;
-    }
-    const cacheKey = this.getCacheKey(context);
-    if (this.settings.rememberSession && this.sessionCache.has(cacheKey)) {
-      return {
-        allowed: this.sessionCache.get(cacheKey),
-        reason: this.sessionCache.get(cacheKey) ? "user_approved" : "user_denied",
-        cached: true
-      };
-    }
-    if (this.mode === "unrestricted") {
-      return { allowed: true, reason: "mode_unrestricted" };
-    }
-    if (this.mode === "restricted") {
-      return { allowed: false, reason: "mode_restricted" };
-    }
-    if (this.isBlacklisted(context)) {
-      return { allowed: false, reason: "blacklisted" };
-    }
-    if (this.isWhitelisted(context)) {
-      return { allowed: true, reason: "whitelisted" };
-    }
-    const ruleDecision = this.checkRules(context);
-    if (ruleDecision) {
-      return ruleDecision;
-    }
-    return { allowed: false, reason: "default" };
-  }
-  /**
-   * Record a user's decision - adds to local project whitelist/blacklist and persists
-   * Approved permissions are saved to .autohand/settings.local.json for "approve once, don't ask again"
-   */
-  async recordDecision(context, allowed) {
-    const merged = this.getMergedSettings();
-    if (merged.rememberSession) {
-      const cacheKey = this.getCacheKey(context);
-      this.sessionCache.set(cacheKey, allowed);
-    }
-    const pattern = this.contextToPattern(context);
-    const dirPattern = allowed && context.path ? this.buildDirectoryWildcard(context) : null;
-    if (allowed && this.workspaceRoot) {
-      try {
-        const patterns = dirPattern ? [pattern, dirPattern] : [pattern];
-        for (const p of patterns) {
-          await _chunkYRLYSQEQcjs.addToLocalWhitelist.call(void 0, this.workspaceRoot, p);
-        }
-        if (!this.localSettings) {
-          this.localSettings = { whitelist: [] };
-        }
-        if (!this.localSettings.whitelist) {
-          this.localSettings.whitelist = [];
-        }
-        for (const p of patterns) {
-          if (!this.localSettings.whitelist.includes(p)) {
-            this.localSettings.whitelist.push(p);
-          }
-        }
-      } catch (e3) {
-        this.addToWhitelist(pattern);
-        if (dirPattern) this.addToWhitelist(dirPattern);
-      }
-    } else if (allowed) {
-      this.addToWhitelist(pattern);
-      if (dirPattern) this.addToWhitelist(dirPattern);
-    } else {
-      this.addToBlacklist(pattern);
-    }
-    if (this.onPersist) {
-      await this.onPersist(this.settings);
-    }
-  }
-  /**
-   * Convert context to a pattern string for whitelist/blacklist
-   */
-  contextToPattern(context) {
-    const tool = context.tool;
-    let value;
-    if (context.command) {
-      const args = _optionalChain([context, 'access', _2 => _2.args, 'optionalAccess', _3 => _3.join, 'call', _4 => _4(" ")]) || "";
-      value = args ? `${context.command} ${args}` : context.command;
-    } else if (context.path) {
-      value = context.path;
-    } else {
-      return `${tool}:*`;
-    }
-    return `${tool}:${value}`;
-  }
-  /**
-   * Build a directory-level wildcard pattern for path-based approvals.
-   * E.g., write_file:/project/tests/foo.ts → write_file:/project/tests/*
-   * This allows future writes in the same directory to be auto-approved.
-   */
-  buildDirectoryWildcard(context) {
-    if (!context.path) return null;
-    const dir = _path2.default.dirname(context.path);
-    if (dir === "." || dir === "/") return null;
-    return `${context.tool}:${dir}/*`;
-  }
-  /**
-   * Convert a PermissionContext to the { kind, target } shape used by matchesToolPattern.
-   */
-  contextToCall(context) {
-    return { kind: context.tool, target: this.getFullCommand(context) };
-  }
-  /**
-   * Check pattern-based allow/deny rules (denyPatterns, availableTools, excludedTools,
-   * allowPatterns, allPathsAllowed, allUrlsAllowed).
-   * Returns a decision when a pattern fires, or null to continue with normal flow.
-   */
-  checkPatterns(context) {
-    const settings = this.getMergedSettings();
-    const call = this.contextToCall(context);
-    if (_optionalChain([settings, 'access', _5 => _5.denyPatterns, 'optionalAccess', _6 => _6.length])) {
-      for (const p of settings.denyPatterns) {
-        if (matchesToolPattern(p, call)) {
-          return { allowed: false, reason: "pattern_denied" };
-        }
-      }
-    }
-    if (_optionalChain([settings, 'access', _7 => _7.availableTools, 'optionalAccess', _8 => _8.length])) {
-      const inAvailable = settings.availableTools.some((p) => matchesToolPattern(p, call));
-      if (!inAvailable) {
-        return { allowed: false, reason: "not_in_available" };
-      }
-    }
-    if (_optionalChain([settings, 'access', _9 => _9.excludedTools, 'optionalAccess', _10 => _10.length])) {
-      for (const p of settings.excludedTools) {
-        if (matchesToolPattern(p, call)) {
-          return { allowed: false, reason: "excluded" };
-        }
-      }
-    }
-    if (_optionalChain([settings, 'access', _11 => _11.allowPatterns, 'optionalAccess', _12 => _12.length])) {
-      for (const p of settings.allowPatterns) {
-        if (matchesToolPattern(p, call)) {
-          return { allowed: true, reason: "pattern_allowed" };
-        }
-      }
-    }
-    const fileTools = /* @__PURE__ */ new Set(["read_file", "write_file", "list_dir", "delete_path", "move_path", "copy_path"]);
-    if (settings.allPathsAllowed && fileTools.has(context.tool)) {
-      return { allowed: true, reason: "all_paths_allowed" };
-    }
-    if (settings.allUrlsAllowed && context.tool === "url") {
-      return { allowed: true, reason: "all_urls_allowed" };
-    }
-    return null;
-  }
-  /**
-   * Check if context matches the immutable security blacklist
-   * This check CANNOT be bypassed by any mode, whitelist, or user setting
-   */
-  isSecurityBlacklisted(context) {
-    return DEFAULT_SECURITY_BLACKLIST.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check if context matches user blacklist (can be modified by user)
-   */
-  isBlacklisted(context) {
-    const merged = this.getMergedSettings();
-    const userBlacklist = merged.blacklist || [];
-    return userBlacklist.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check if context matches whitelist (uses merged global + local settings)
-   */
-  isWhitelisted(context) {
-    const merged = this.getMergedSettings();
-    const whitelist = merged.whitelist || [];
-    return whitelist.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check custom rules (uses merged global + local settings)
-   */
-  checkRules(context) {
-    const merged = this.getMergedSettings();
-    const rules = merged.rules || [];
-    for (const rule of rules) {
-      if (this.ruleMatches(context, rule)) {
-        if (rule.action === "allow") {
-          return { allowed: true, reason: "rule_match" };
-        }
-        if (rule.action === "deny") {
-          return { allowed: false, reason: "rule_match" };
-        }
-      }
-    }
-    return null;
-  }
-  /**
-   * Check if a rule matches the context
-   */
-  ruleMatches(context, rule) {
-    if (rule.tool !== "*" && rule.tool !== context.tool) {
-      return false;
-    }
-    if (rule.pattern) {
-      const fullCommand = this.getFullCommand(context);
-      return this.globMatch(fullCommand, rule.pattern);
-    }
-    return true;
-  }
-  /**
-   * Match context against a pattern string
-   * Format: "tool:pattern" or just "pattern" for run_command
-   */
-  matchesPattern(context, pattern) {
-    const colonIndex = pattern.indexOf(":");
-    let toolPattern;
-    let commandPattern;
-    if (colonIndex !== -1) {
-      toolPattern = pattern.substring(0, colonIndex);
-      commandPattern = pattern.substring(colonIndex + 1);
-    } else {
-      toolPattern = "run_command";
-      commandPattern = pattern;
-    }
-    if (toolPattern !== "*" && toolPattern !== context.tool) {
-      return false;
-    }
-    const fullCommand = this.getFullCommand(context);
-    return this.globMatch(fullCommand, commandPattern);
-  }
-  /**
-   * Get full command string from context
-   */
-  getFullCommand(context) {
-    if (context.command) {
-      const args = _optionalChain([context, 'access', _13 => _13.args, 'optionalAccess', _14 => _14.join, 'call', _15 => _15(" ")]) || "";
-      return args ? `${context.command} ${args}` : context.command;
-    }
-    if (context.path) {
-      return context.path;
-    }
-    return context.tool;
-  }
-  /**
-   * Simple glob matching (* for wildcards)
-   */
-  globMatch(text, pattern) {
-    const regexPattern = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
-    const regex = new RegExp(`^${regexPattern}$`, "i");
-    return regex.test(text);
-  }
-  /**
-   * Generate cache key from context
-   */
-  getCacheKey(context) {
-    const parts = [context.tool];
-    if (context.command) parts.push(context.command);
-    if (_optionalChain([context, 'access', _16 => _16.args, 'optionalAccess', _17 => _17.length])) parts.push(context.args.join(" "));
-    if (context.path) parts.push(context.path);
-    return parts.join("::");
-  }
-  /**
-   * Clear session cache
-   */
-  clearCache() {
-    this.sessionCache.clear();
-  }
-  /**
-   * Get session cache stats
-   */
-  getCacheStats() {
-    return {
-      size: this.sessionCache.size,
-      entries: Array.from(this.sessionCache.keys())
-    };
-  }
-  /**
-   * Add to whitelist dynamically
-   */
-  addToWhitelist(pattern) {
-    if (!this.settings.whitelist) {
-      this.settings.whitelist = [];
-    }
-    if (!this.settings.whitelist.includes(pattern)) {
-      this.settings.whitelist.push(pattern);
-    }
-  }
-  /**
-   * Add to blacklist dynamically
-   */
-  addToBlacklist(pattern) {
-    if (!this.settings.blacklist) {
-      this.settings.blacklist = [];
-    }
-    if (!this.settings.blacklist.includes(pattern)) {
-      this.settings.blacklist.push(pattern);
-    }
-  }
-  /**
-   * Remove from whitelist
-   */
-  async removeFromWhitelist(pattern) {
-    if (!this.settings.whitelist) return false;
-    const index = this.settings.whitelist.indexOf(pattern);
-    if (index !== -1) {
-      this.settings.whitelist.splice(index, 1);
-      if (this.onPersist) {
-        await this.onPersist(this.settings);
-      }
-      return true;
-    }
-    return false;
-  }
-  /**
-   * Remove from blacklist
-   */
-  async removeFromBlacklist(pattern) {
-    if (!this.settings.blacklist) return false;
-    const index = this.settings.blacklist.indexOf(pattern);
-    if (index !== -1) {
-      this.settings.blacklist.splice(index, 1);
-      if (this.onPersist) {
-        await this.onPersist(this.settings);
-      }
-      return true;
-    }
-    return false;
-  }
-  /**
-   * Get current whitelist
-   */
-  getWhitelist() {
-    return [...this.settings.whitelist || []];
-  }
-  /**
-   * Get current blacklist
-   */
-  getBlacklist() {
-    return [...this.settings.blacklist || []];
-  }
-  /**
-   * Get current settings (for display)
-   */
-  getSettings() {
-    return { ...this.settings };
-  }
-};
-
-
-
-
-exports.DEFAULT_SECURITY_BLACKLIST = DEFAULT_SECURITY_BLACKLIST; exports.PermissionManager = PermissionManager;
-/**
- * Permission Manager - Handles tool/command approval with whitelist/blacklist
- * @license Apache-2.0
- */