maestro-agent-sdk 0.1.8 → 0.1.11

package/dist/tools/path-guard.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Path-guard utilities shared across file-mutation tools (Write, Edit, MultiEdit).
+ *
+ * Centralises two concerns:
+ *  1. `checkBlockedPath` — rejects writes to sensitive files (.env, .ssh, etc.)
+ *     that should never be silently overwritten by an agent, regardless of what
+ *     the model requests.
+ *
+ * These are *last-resort* guards. The primary access control layer is the
+ * Read-before-Edit invariant enforced by FileStateTracker. The guards here
+ * are a belt-and-suspenders measure that survives even if the tracker is
+ * not wired (e.g. direct tool invocation in tests).
+ */
+/**
+ * Returns an error string if `normalizedAbsPath` matches a blocked pattern,
+ * `null` otherwise. The returned string is ready to be wrapped in
+ * `JSON.stringify({ error: ... })` by the caller.
+ *
+ * @param toolName  Display name used in the error message ("Write", "Edit", …).
+ * @param normalizedAbsPath  An already-`normalize()`d absolute path.
+ */
+export declare function checkBlockedPath(toolName: string, normalizedAbsPath: string): string | null;
+//# sourceMappingURL=path-guard.d.ts.map

package/dist/tools/path-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-guard.d.ts","sourceRoot":"","sources":["../../src/tools/path-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAuBH;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW3F"}

package/dist/tools/path-guard.js

@@ -0,0 +1,52 @@
+/**
+ * Path-guard utilities shared across file-mutation tools (Write, Edit, MultiEdit).
+ *
+ * Centralises two concerns:
+ *  1. `checkBlockedPath` — rejects writes to sensitive files (.env, .ssh, etc.)
+ *     that should never be silently overwritten by an agent, regardless of what
+ *     the model requests.
+ *
+ * These are *last-resort* guards. The primary access control layer is the
+ * Read-before-Edit invariant enforced by FileStateTracker. The guards here
+ * are a belt-and-suspenders measure that survives even if the tracker is
+ * not wired (e.g. direct tool invocation in tests).
+ */
+/**
+ * Patterns for files that must never be mutated by the agent's file tools.
+ * The check runs on the *normalized* absolute path, so `..` traversal cannot
+ * bypass it (normalization is the caller's responsibility — see edit.ts /
+ * write.ts / multi_edit.ts).
+ *
+ * Deliberately conservative: prefer false negatives over silently blocking
+ * legitimate writes. The model can still reach these files through bash if
+ * the operator allows it.
+ */
+const BLOCKED_PATTERNS = [
+    /\/\.env(\.[^/]*)?$/i, //  .env  .env.local  .env.production …
+    /\/\.ssh\//i, //  ~/.ssh/  (any file inside)
+    /\/\.aws\//i, //  ~/.aws/credentials …
+    /\/\.gnupg\//i, //  GPG keyring
+    /\/\.netrc$/i, //  FTP / HTTP creds
+    /\/\.npmrc$/i, //  npm auth tokens
+    /\/\.pypirc$/i, //  PyPI upload tokens
+    /\/\.git\/config$/i, //  repo git config (may contain PATs)
+];
+/**
+ * Returns an error string if `normalizedAbsPath` matches a blocked pattern,
+ * `null` otherwise. The returned string is ready to be wrapped in
+ * `JSON.stringify({ error: ... })` by the caller.
+ *
+ * @param toolName  Display name used in the error message ("Write", "Edit", …).
+ * @param normalizedAbsPath  An already-`normalize()`d absolute path.
+ */
+export function checkBlockedPath(toolName, normalizedAbsPath) {
+    for (const pattern of BLOCKED_PATTERNS) {
+        if (pattern.test(normalizedAbsPath)) {
+            return (`${toolName}: writing to '${normalizedAbsPath}' is blocked — ` +
+                `this path matches a sensitive-file pattern (${pattern.source}). ` +
+                `Use bash to edit it explicitly if you are certain this is intentional.`);
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=path-guard.js.map

package/dist/tools/path-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-guard.js","sourceRoot":"","sources":["../../src/tools/path-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAAa;IACjC,qBAAqB,EAAE,uCAAuC;IAC9D,YAAY,EAAE,8BAA8B;IAC5C,YAAY,EAAE,wBAAwB;IACtC,cAAc,EAAE,eAAe;IAC/B,aAAa,EAAE,oBAAoB;IACnC,aAAa,EAAE,mBAAmB;IAClC,cAAc,EAAE,sBAAsB;IACtC,mBAAmB,EAAE,sCAAsC;CAC5D,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,iBAAyB;IAC1E,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACpC,OAAO,CACL,GAAG,QAAQ,iBAAiB,iBAAiB,iBAAiB;gBAC9D,+CAA+C,OAAO,CAAC,MAAM,KAAK;gBAClE,wEAAwE,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maestro-agent-sdk",
-  "version": "0.1.8",
+  "version": "0.1.11",
   "description": "Embeddable, provider-agnostic TypeScript agent SDK — pluggable providers, built-in tools, skills, memory, and MCP.",
   "license": "MIT",
   "author": "Yeonwoo Jeong <aadd4020@gmail.com>",