spacecode 2.5.2 → 2.5.3

package/dist/repl.mjs

@@ -4580,9 +4580,22 @@ function guardHost(inner, opts) {
       await log(kind, subject, d, false);
       throw new PolicyViolation(d.rule, `Blocked by policy (${d.rule}): ${d.reason}`);
     }
+    const verdict = opts.rules?.evaluate(kind === "exec" ? "bash" : kind, subject);
+    const ruleTag = verdict?.rule ? `${verdict.rule} [${verdict.scope}]` : "";
+    if (verdict?.effect === "deny") {
+      d = { action: "deny", rule: "rule-deny", reason: `denied by imported rule ${ruleTag}` };
+      await log(kind, subject, d, false);
+      throw new PolicyViolation(d.rule, `Blocked by policy (${d.rule}): ${d.reason}`);
+    }
     if (kind !== "exec" && opts.permissions?.mode === "default") {
       d = { action: "confirm", rule: "confirm-edit", reason: "modifies a file" };
     }
+    if (verdict?.effect === "ask") {
+      d = { action: "confirm", rule: "rule-ask", reason: `imported rule ${ruleTag} asks first${opts.confirm ? "" : "; no way to ask (headless), so refused"}` };
+    } else if (verdict?.effect === "allow" && d.action === "confirm") {
+      await log(kind, subject, { action: "allow", rule: "rule-allow", reason: `allowed by imported rule ${ruleTag} (would be ${d.rule})` }, true);
+      return;
+    }
     if (d.action === "confirm" && kind === "exec" && opts.permissions?.allowsCommand(subject)) {
       await log(kind, subject, { action: "allow", rule: "allow-session", reason: "approved earlier this session" }, true);
       return;
@@ -4606,7 +4619,15 @@ function guardHost(inner, opts) {
   return {
     kind: inner.kind,
     files: {
-      readFile: (p) => inner.files.readFile(p),
+      readFile: async (p) => {
+        const v2 = opts.rules?.evaluate("read_file", p.replace(/^\.\//, ""));
+        if (v2?.effect === "deny") {
+          const d = { action: "deny", rule: "rule-deny", reason: `denied by imported rule ${v2.rule} [${v2.scope}]` };
+          await log("read_file", p, d, false);
+          throw new PolicyViolation(d.rule, `Blocked by policy (${d.rule}): ${d.reason}`);
+        }
+        return inner.files.readFile(p);
+      },
       listDirectory: (p) => inner.files.listDirectory(p),
       writeFile: async (p, c) => {
         await gate("write_file", p, allow, { oldText: "", newText: c });
@@ -5572,6 +5593,132 @@ var init_imports_config = __esm({
   }
 });
 
+// ../agent/src/import/permission-rules.ts
+function splitCommand(cmd) {
+  const segments2 = [];
+  let cur = "";
+  let quote = null;
+  let compound = false;
+  const flush = () => {
+    const s = cur.trim();
+    if (s) segments2.push(s);
+    cur = "";
+  };
+  for (let i = 0; i < cmd.length; i++) {
+    const ch = cmd[i];
+    if (quote) {
+      cur += ch;
+      if (ch === quote) quote = null;
+    } else if (ch === '"' || ch === "'") {
+      quote = ch;
+      cur += ch;
+    } else if (";&|\n`()<>".includes(ch) || ch === "$" && cmd[i + 1] === "(") {
+      compound = true;
+      flush();
+    } else {
+      cur += ch;
+    }
+  }
+  if (quote) return { compound: true, segments: [cmd.trim()] };
+  flush();
+  return compound ? { compound, segments: segments2 } : { compound, segments: [cmd.trim()] };
+}
+function matchesBash(pattern, cmd, effect) {
+  const { compound, segments: segments2 } = splitCommand(cmd);
+  if (compound && effect === "allow") return false;
+  const prefix = pattern.endsWith(":*") ? pattern.slice(0, -2).trim() : null;
+  const hit = (s) => prefix === null ? s === pattern.trim() : s === prefix || s.startsWith(prefix) && /\s/.test(s[prefix.length] ?? "");
+  return segments2.some(hit);
+}
+function globToRegExp(glob) {
+  let re3 = "";
+  for (let i = 0; i < glob.length; i++) {
+    const ch = glob[i];
+    if (ch === "*") {
+      if (glob[i + 1] === "*") {
+        re3 += ".*";
+        i++;
+        if (glob[i + 1] === "/") i++;
+      } else re3 += "[^/]*";
+    } else if (ch === "?") re3 += "[^/]";
+    else re3 += ch.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+  }
+  return new RegExp("^" + re3 + "$");
+}
+function compile(text, effect, scope) {
+  const m2 = /^([A-Za-z0-9_-]+)(?:\((.*)\))?$/s.exec(text.trim());
+  if (!m2) return "malformed rule";
+  const [, name, rawArg] = m2;
+  const arg = rawArg === void 0 || rawArg.trim() === "" ? null : rawArg.trim();
+  const tools = name.startsWith("mcp__") ? [name] : TOOL_MAP[name];
+  if (!tools) return `unsupported tool ${name}`;
+  if (arg === null) return { effect, scope, text, tools, arg, test: () => true };
+  if (name === "Bash") return { effect, scope, text, tools, arg, test: (s, e) => matchesBash(arg, s, e) };
+  if (name.startsWith("mcp__")) return "argument patterns are not supported for MCP tools";
+  const re3 = globToRegExp(arg);
+  return { effect, scope, text, tools, arg, test: (s) => re3.test(s) };
+}
+function buildRuleSet(sources) {
+  const rules = [];
+  const skipped = [];
+  const counts = {};
+  for (const s of ["user", "repo", "local"]) counts[s] = { allow: 0, deny: 0, ask: 0 };
+  for (const src of sources) {
+    for (const effect of ["deny", "ask", "allow"]) {
+      for (const text of src[effect] ?? []) {
+        const c = typeof text === "string" ? compile(text, effect, src.scope) : "malformed rule";
+        if (typeof c === "string") skipped.push({ text: String(text), scope: src.scope, reason: c });
+        else {
+          rules.push(c);
+          counts[src.scope][effect]++;
+        }
+      }
+    }
+  }
+  const frozen = Object.freeze(rules);
+  return {
+    skipped,
+    counts,
+    evaluate(tool, subject) {
+      for (const effect of ["deny", "ask", "allow"]) {
+        const r = frozen.find((c) => c.effect === effect && c.tools.includes(tool) && c.test(subject, effect));
+        if (r) return { effect, rule: r.text, scope: r.scope };
+      }
+      return { effect: "none" };
+    }
+  };
+}
+function defaultModeFor(mode) {
+  switch (mode) {
+    case void 0:
+    case "default":
+      return { mode: "default" };
+    case "acceptEdits":
+      return { mode: "accept-edits" };
+    case "plan":
+      return { mode: "plan" };
+    case "bypassPermissions":
+      return { mode: "yolo" };
+    default:
+      return { mode: null, reason: `unmappable defaultMode "${mode}"` };
+  }
+}
+var TOOL_MAP;
+var init_permission_rules = __esm({
+  "../agent/src/import/permission-rules.ts"() {
+    "use strict";
+    TOOL_MAP = {
+      Bash: ["bash"],
+      Read: ["read_file"],
+      Edit: ["edit_file", "write_file"],
+      Write: ["edit_file", "write_file"],
+      MultiEdit: ["edit_file", "write_file"],
+      Glob: ["list_directory"],
+      Grep: ["search"]
+    };
+  }
+});
+
 // ../agent/src/index.ts
 var init_src = __esm({
   "../agent/src/index.ts"() {
@@ -5611,13 +5758,14 @@ var init_src = __esm({
     init_instructions_tool();
     init_trust();
     init_imports_config();
+    init_permission_rules();
   }
 });
 
 // src/api-key.ts
 import { join } from "node:path";
 async function resolveApiKey(deps) {
-  const { env: env3, readFile: readFile6, homedir: homedir3 } = deps;
+  const { env: env3, readFile: readFile7, homedir: homedir3 } = deps;
   for (const name of ["SPACECODE_API_KEY", "ANTHROPIC_API_KEY"]) {
     const value = env3[name]?.trim();
     if (value) return value;
@@ -5626,7 +5774,7 @@ async function resolveApiKey(deps) {
   const file = join(dir, "auth.json");
   let raw;
   try {
-    raw = await readFile6(file);
+    raw = await readFile7(file);
   } catch (err) {
     if (err.code === "ENOENT") return null;
     throw new Error(`Cannot read ${file}: ${err instanceof Error ? err.message : String(err)}`);
@@ -34655,7 +34803,7 @@ var init_source = __esm({
       object.level = options.level === void 0 ? colorLevel : options.level;
     };
     chalkFactory = (options) => {
-      const chalk2 = (...strings) => strings.join(" ");
+      const chalk2 = (...strings2) => strings2.join(" ");
       applyOptions(chalk2, options);
       Object.setPrototypeOf(chalk2, createChalk.prototype);
       return chalk2;
@@ -41089,7 +41237,7 @@ var require_core = __commonJS({
       return match && match.index === 0;
     }
     var BACKREF_RE = /\[(?:[^\\\]]|\\.)*\]|\(\??|\\([1-9][0-9]*)|\\./;
-    function join6(regexps, separator = "|") {
+    function join7(regexps, separator = "|") {
       let numCaptures = 0;
       return regexps.map((regex2) => {
         numCaptures += 1;
@@ -41393,7 +41541,7 @@ var require_core = __commonJS({
             this.exec = () => null;
           }
           const terminators = this.regexes.map((el) => el[1]);
-          this.matcherRe = langRe(join6(terminators), true);
+          this.matcherRe = langRe(join7(terminators), true);
           this.lastIndex = 0;
         }
         /** @param {string} s */
@@ -84320,12 +84468,12 @@ var require_source = __commonJS({
       return openAll + string + closeAll;
     };
     var template;
-    var chalkTag = (chalk3, ...strings) => {
-      const [firstString] = strings;
+    var chalkTag = (chalk3, ...strings2) => {
+      const [firstString] = strings2;
       if (!isArray(firstString) || !isArray(firstString.raw)) {
-        return strings.join(" ");
+        return strings2.join(" ");
       }
-      const arguments_ = strings.slice(1);
+      const arguments_ = strings2.slice(1);
       const parts = [firstString.raw[0]];
       for (let i = 1; i < firstString.length; i++) {
         parts.push(
@@ -100673,6 +100821,7 @@ function createLocalToolset(opts) {
     audit: new FileAuditLog(auditFile),
     mode: opts.yolo ? "yolo" : "enforce",
     permissions: opts.permissions,
+    ...opts.rules ? { rules: opts.rules } : {},
     confirm: opts.confirm
   });
   const { handlers: githubHandlers } = createGitHubTools((command) => host.exec(command));
@@ -101104,10 +101253,83 @@ var init_import_gate = __esm({
   }
 });
 
+// src/permission-rules-loader.ts
+import { readFile as readFile5 } from "node:fs/promises";
+import { join as join5 } from "node:path";
+async function readOrNull2(path12) {
+  try {
+    return await readFile5(path12, "utf8");
+  } catch (err) {
+    if (err.code === "ENOENT") return null;
+    throw err;
+  }
+}
+async function loadPermissionRules(deps) {
+  const none = (line) => ({ rules: void 0, defaultMode: void 0, statusLines: [line] });
+  const configPath = join5(deps.configDir, "imports.json");
+  try {
+    const loaded = parseImportsConfig(await readOrNull2(configPath), configPath);
+    if (loaded.error) return none("permission rules: off (imports.json unreadable)");
+    if (!loaded.config.categories.permissions) return none("permission rules: off (imports.json has permissions off)");
+  } catch (err) {
+    return none(`permission rules: off (imports.json not read: ${err instanceof Error ? err.message : String(err)})`);
+  }
+  const lines2 = [];
+  const files = [{ scope: "user", path: join5(deps.homeDir, ".claude", "settings.json") }];
+  try {
+    const sources2 = {};
+    for (const name of REPO_SOURCE_FILES) {
+      const text = await readOrNull2(join5(deps.cwd, name));
+      if (text !== null) sources2[name] = text;
+    }
+    if (sources2[".claude/settings.json"] !== void 0 || sources2[".claude/settings.local.json"] !== void 0) {
+      const status = await createNodeTrustStore(deps.configDir).repoStatus(deps.cwd, sources2);
+      if (status === "trusted" || status === "session") {
+        files.push({ scope: "repo", path: join5(deps.cwd, ".claude", "settings.json") }, { scope: "local", path: join5(deps.cwd, ".claude", "settings.local.json") });
+      } else lines2.push(`permission rules: repo settings NOT loaded (${status === "never" ? "marked never trust" : "untrusted repo"})`);
+    }
+  } catch (err) {
+    lines2.push(`permission rules: repo settings NOT loaded (trust check failed: ${err instanceof Error ? err.message : String(err)})`);
+  }
+  const sources = [];
+  let defaultMode;
+  for (const f of files) {
+    try {
+      const text = await readOrNull2(f.path);
+      if (text === null) continue;
+      const parsed = JSON.parse(text);
+      const perms = parsed?.permissions;
+      if (!perms || typeof perms !== "object") continue;
+      sources.push({ scope: f.scope, allow: strings(perms.allow), deny: strings(perms.deny), ask: strings(perms.ask) });
+      if (typeof perms.defaultMode === "string") {
+        const m2 = defaultModeFor(perms.defaultMode);
+        if (m2.mode) defaultMode = m2.mode;
+        else lines2.push(`permission rules: ${f.path}: ${m2.reason}`);
+      }
+    } catch (err) {
+      lines2.push(`permission rules: ${f.path} NOT loaded (${err instanceof Error ? err.message : String(err)})`);
+    }
+  }
+  const rules = buildRuleSet(sources);
+  const parts = ["user", "repo", "local"].filter((s) => sources.some((x2) => x2.scope === s)).map((s) => `${s} ${rules.counts[s].allow} allow/${rules.counts[s].deny} deny/${rules.counts[s].ask} ask`);
+  lines2.unshift(`permission rules: ${parts.length ? parts.join(", ") : "none found"}${defaultMode ? `; default mode ${defaultMode}` : ""}`);
+  for (const s of rules.skipped) lines2.push(`permission rules: skipped [${s.scope}] "${s.text}" (${s.reason})`);
+  return { rules, defaultMode, statusLines: lines2 };
+}
+var strings;
+var init_permission_rules_loader = __esm({
+  "src/permission-rules-loader.ts"() {
+    "use strict";
+    init_src();
+    init_import_gate();
+    strings = (v2) => Array.isArray(v2) ? v2.filter((x2) => typeof x2 === "string") : void 0;
+  }
+});
+
 // src/useReplController.ts
-import { readFile as readFile5, writeFile as writeFile4, mkdir as mkdir4 } from "node:fs/promises";
+import { readFile as readFile6, writeFile as writeFile4, mkdir as mkdir4 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { join as join5 } from "node:path";
+import { join as join6 } from "node:path";
 import { execFile as execFile3 } from "node:child_process";
 function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mentionsOpt, sessions, resumeLatest: resumeLatest2, onViewTurns, onViewResume, isEscOwned }) {
   const { exit } = use_app_default();
@@ -101149,6 +101371,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
   const abortRef = (0, import_react30.useRef)(null);
   const pendingRef = (0, import_react30.useRef)(null);
   const toolsetRef = (0, import_react30.useRef)(null);
+  const rulesRef = (0, import_react30.useRef)(void 0);
   (0, import_react30.useEffect)(() => {
     sessionTokensRef.current = sessionTokens;
   }, [sessionTokens]);
@@ -101201,6 +101424,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
       cwd: process.cwd(),
       permissions,
       onTodos: setTodos,
+      ...rulesRef.current ? { rules: rulesRef.current } : {},
       ...profileRef.current && profileRef.current.tools.length > 0 ? { extra: { tools: profileRef.current.tools, handlers: profileRef.current.handlers } } : {},
       confirm: (req) => new Promise((resolve2) => {
         const item = {
@@ -101400,7 +101624,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
           }
           setIsRunning(true);
           try {
-            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile5(p, "utf-8"), homedir: homedir2 });
+            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile6(p, "utf-8"), homedir: homedir2 });
             if (!apiKey2) {
               notice(MISSING_KEY_MESSAGE);
               return;
@@ -101422,7 +101646,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
         }
         case "model": {
           try {
-            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile5(p, "utf-8"), homedir: homedir2 });
+            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile6(p, "utf-8"), homedir: homedir2 });
             if (!apiKey2) {
               notice(MISSING_KEY_MESSAGE);
               return;
@@ -101464,7 +101688,7 @@ ${tools.map((t) => `  ${t.name}`).join("\n")}`);
     try {
       apiKey = await resolveApiKey({
         env: process.env,
-        readFile: (p) => readFile5(p, "utf-8"),
+        readFile: (p) => readFile6(p, "utf-8"),
         homedir: homedir2
       });
     } catch (err) {
@@ -101500,7 +101724,7 @@ ${tools.map((t) => `  ${t.name}`).join("\n")}`);
     try {
       profilePromiseRef.current ??= prepareProfile({
         env: process.env,
-        readFile: (p) => readFile5(p, "utf-8"),
+        readFile: (p) => readFile6(p, "utf-8"),
         writeFile: (p, d) => writeFile4(p, d, { encoding: "utf-8", mode: 384 }),
         mkdir: async (p) => {
           await mkdir4(p, { recursive: true });
@@ -101509,11 +101733,14 @@ ${tools.map((t) => `  ${t.name}`).join("\n")}`);
         fetch,
         cwd: process.cwd(),
         gitRoot: gitTopLevel,
-        importGate: () => importGateStatus({
-          configDir: process.env.SPACECODE_CONFIG_DIR?.trim() || join5(homedir2(), ".spacecode"),
-          cwd: process.cwd(),
-          interactive: Boolean(process.stdin.isTTY)
-        })
+        importGate: async () => {
+          const configDir = process.env.SPACECODE_CONFIG_DIR?.trim() || join6(homedir2(), ".spacecode");
+          const gate = await importGateStatus({ configDir, cwd: process.cwd(), interactive: Boolean(process.stdin.isTTY) });
+          const loaded = await loadPermissionRules({ configDir, homeDir: homedir2(), cwd: process.cwd() });
+          rulesRef.current = loaded.rules;
+          if (loaded.defaultMode && !yolo2) permissions.set(loaded.defaultMode);
+          return [...gate, ...loaded.statusLines];
+        }
       });
       profileRef.current = await profilePromiseRef.current;
       const toolset = createToolset();
@@ -101641,6 +101868,7 @@ var init_useReplController = __esm({
     init_api_key();
     init_profile_runtime();
     init_import_gate();
+    init_permission_rules_loader();
     init_slash_commands();
     init_useEventAccumulator();
     gitTopLevel = () => new Promise((resolve2) => {
@@ -102225,7 +102453,7 @@ function clearOnResize(stdout) {
 var import_jsx_runtime14 = __toESM(require_jsx_runtime(), 1);
 if (process.argv[2] === "import-claude") {
   const { runImportClaude: runImportClaude2 } = await Promise.resolve().then(() => (init_import_claude(), import_claude_exports));
-  const { readFile: readFile6, readdir: readdir3 } = await import("node:fs/promises");
+  const { readFile: readFile7, readdir: readdir3 } = await import("node:fs/promises");
   const { execFile: execFile4 } = await import("node:child_process");
   const gitRoot = () => new Promise((resolve2) => {
     execFile4("git", ["rev-parse", "--show-toplevel"], { cwd: process.cwd() }, (err, stdout) => resolve2(err ? null : stdout.trim() || null));
@@ -102233,8 +102461,8 @@ if (process.argv[2] === "import-claude") {
   const code = await runImportClaude2({
     argv: process.argv.slice(2),
     env: process.env,
-    fs: { readFile: (p) => readFile6(p, "utf-8"), readdir: (p) => readdir3(p) },
-    readFile: (p) => readFile6(p, "utf-8"),
+    fs: { readFile: (p) => readFile7(p, "utf-8"), readdir: (p) => readdir3(p) },
+    readFile: (p) => readFile7(p, "utf-8"),
     homedir: os5.homedir,
     cwd: process.cwd(),
     gitRoot,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spacecode",
-  "version": "2.5.2",
+  "version": "2.5.3",
   "description": "SpaceCode - launch cloud dev environments with AI coding agents",
   "license": "MIT",
   "type": "commonjs",