matex-cli 1.2.65 → 1.2.67

package/src/utils/augov-logger.ts

@@ -0,0 +1,34 @@
+import fs from 'fs';
+import path from 'path';
+
+/**
+ * IRAP-Compliant Audit Logger
+ * The Australian Government requires strict logging of AI tool usage.
+ * This logger records prompts and actions locally so security teams can audit them.
+ */
+export class GovAuditLogger {
+    private logFile: string;
+
+    constructor(baseDir: string = process.cwd()) {
+        const logDir = path.join(baseDir, '.matex_audit');
+        if (!fs.existsSync(logDir)) {
+            fs.mkdirSync(logDir, { recursive: true });
+        }
+
+        // Create an auditable log per day
+        const today = new Date().toISOString().split('T')[0];
+        this.logFile = path.join(logDir, `augov_audit_${today}.log`);
+
+        if (!fs.existsSync(this.logFile)) {
+            fs.writeFileSync(this.logFile, 'TIMESTAMP | ROLE | ACTION | CONTENT\n');
+        }
+    }
+
+    public logInteraction(role: 'USER' | 'AI_SWARM' | 'SYSTEM', action: string, content: string) {
+        const timestamp = new Date().toISOString();
+        const cleanContent = content.replace(/\n/g, ' ').substring(0, 500); // truncate for CSV safety, full logs can be large
+        const logEntry = `${timestamp} | ${role} | ${action} | ${cleanContent}\n`;
+
+        fs.appendFileSync(this.logFile, logEntry);
+    }
+}

package/src/utils/augov-scrubber.ts

@@ -0,0 +1,34 @@
+/**
+ * Citizen Privacy Shield
+ * A local redaction engine that scrubs Australian PII (Personally Identifiable Information)
+ * BEFORE it ever leaves the user's computer to hit an AI API.
+ */
+export class GovPrivacyScrubber {
+
+    // Regex patterns for Australian specific sensitive data
+    private static patterns = [
+        // Australian Tax File Number (TFN) - 9 digits
+        { regex: /\b\d{3}[- ]?\d{3}[- ]?\d{3}\b/g, replacement: '[REDACTED_TFN]' },
+        // Medicare Number - 10 digits
+        { regex: /\b[2-6]\d{9}\b/g, replacement: '[REDACTED_MEDICARE]' },
+        // Australian Phone Numbers (Mobile & Landline)
+        { regex: /(?:\+?61|0)[2-478](?:[ -]?[0-9]){8}\b/g, replacement: '[REDACTED_PHONE]' },
+        // Email Addresses
+        { regex: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g, replacement: '[REDACTED_EMAIL]' },
+        // Credit Card Numbers
+        { regex: /\b(?:\d[ -]*?){13,16}\b/g, replacement: '[REDACTED_CREDIT_CARD]' }
+    ];
+
+    /**
+     * Scrubs sensitive data from a string.
+     * @param input Raw string from user or file
+     * @returns Scrubbed string safe for AI processing
+     */
+    public static scrub(input: string): string {
+        let scrubbed = input;
+        for (const rule of this.patterns) {
+            scrubbed = scrubbed.replace(rule.regex, rule.replacement);
+        }
+        return scrubbed;
+    }
+}

package/src/utils/command-executor.ts

@@ -92,7 +92,7 @@ export function isSafeAutoCommand(command: string): boolean {
         // File Discovery & Read
         'cat ', 'ls ', 'grep ', 'find ', 'pwd', 'echo ', 'read ', 'type ', 'dir',
         // File Operations
-        'mkdir ', 'touch ', 'cp ', 'mv ', 'rm ', 'del ', 'copy ', 'move ',
+        'mkdir ', 'touch ', 'cp ', 'copy ',
         // Dev Tools
         'npm ', 'npx ', 'git ', 'node ', 'python ', 'python3 ', 'pip ', 'pip3 ',
         // Cloud & Mobile
@@ -101,10 +101,6 @@ export function isSafeAutoCommand(command: string): boolean {
         'cd ', 'tsc ', 'vite ', 'next ', 'cargo ', 'go ', 'swift '
     ];
     const trimmed = command.trim();
-    // Special check: 'rm' is only safe if it's NOT recursive or if it targets a specific file
-    if (trimmed.startsWith('rm ') && (trimmed.includes(' -rf') || trimmed.includes(' /*'))) {
-        return false;
-    }
     return safePrefixes.some(prefix => trimmed.startsWith(prefix));
 }
 

package/src/utils/tui.ts

@@ -2,7 +2,7 @@ import chalk from 'chalk';
 import * as readline from 'readline';
 import * as path from 'path';
 
-export type TUIMode = 'dev' | 'study' | 'chat' | 'student';
+export type TUIMode = 'dev' | 'study' | 'chat' | 'student' | 'augov';
 
 export interface ModeTheme {
     primary: (s: string) => string;
@@ -23,8 +23,18 @@ export class TUI {
     private static isTerminalTruncated = false;
     private static currentTheme: TUIMode = 'dev';
 
-    static getModeTheme(mode: TUIMode): ModeTheme {
+    static getModeTheme(mode: TUIMode | 'augov'): ModeTheme {
         switch (mode) {
+            case 'augov':
+                return {
+                    primary: chalk.hex('#00008B'), // Dark Blue (Australian Flag)
+                    secondary: chalk.hex('#005A9C'),
+                    border: '║',
+                    glow: chalk.hex('#ffffff'), // White
+                    shadow: chalk.hex('#E4002B'), // Red (Australian Flag)
+                    bg: '#00008B',
+                    icon: '🇦🇺'
+                };
             case 'study':
                 return {
                     primary: chalk.hex('#10b981'), // Emerald
@@ -138,7 +148,8 @@ export class TUI {
         if (width <= 0 || height <= 0) return;
 
         const theme = this.getModeTheme(this.currentTheme);
-        const leftTag = chalk.bgHex('#1E1E1E').hex(theme.bg).bold(` ${theme.icon} MATEX `);
+        const branding = this.currentTheme === 'augov' ? 'AU-GOV' : 'MATEX';
+        const leftTag = chalk.bgHex('#1E1E1E').hex(theme.bg).bold(` ${theme.icon} ${branding} `);
         const mainMessage = chalk.bgHex('#1E1E1E').white(` ${message} `);
         const remainingWidth = width - (leftTag.length + mainMessage.length);
         const spacer = chalk.bgHex('#1E1E1E')(' '.repeat(Math.max(0, remainingWidth)));
@@ -283,7 +294,9 @@ export class TUI {
         const width = Math.min(process.stdout.columns || 80, 76);
         const border = chalk.gray;
 
-        console.log('\n  ' + border(`┌── TERMINAL ${'─'.repeat(Math.max(0, width - 15))}┐`));
+        const title = this.currentTheme === 'augov' ? 'AU-GOV SECURE TERMINAL' : 'TERMINAL';
+
+        console.log('\n  ' + border(`┌── ${title} ${'─'.repeat(Math.max(0, width - 15 - title.length))}┐`));
         const truncatedCmd = command.length > width - 10 ? command.substring(0, width - 13) + '...' : command;
         console.log('  ' + border('│ ') + chalk.cyan(`$ ${truncatedCmd.padEnd(width - 6)}`) + border(' │'));
         console.log('  ' + border(`├${'─'.repeat(width - 4)}┤`));