ugly-app 0.1.651 → 0.1.652

package/dist/cli/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.1.651";
+export declare const CLI_VERSION = "0.1.652";
 //# sourceMappingURL=version.d.ts.map

package/dist/cli/version.js

@@ -1,3 +1,3 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.651";
+export const CLI_VERSION = "0.1.652";
 //# sourceMappingURL=version.js.map

package/dist/native/server/binaries.d.ts

@@ -0,0 +1,23 @@
+export interface BinaryProvisionConfig {
+    /** Where bundled tools are installed, e.g. `~/.ugly-studio/binaries`. */
+    root: string;
+    /** Base URL hosting `binaries-manifest.json` (the R2 mirror). */
+    manifestBase: string;
+}
+/** The installed executable for `tool` under `root`, version-agnostic, or null. */
+export declare function findBundledTool(root: string, tool: string): string | null;
+/**
+ * Resolve a tool name to a path: a downloaded binary under `cfg.root` when
+ * present, else the bare name so the daemon's spawn resolves it on the system
+ * PATH. `downloadable` lists tools the host actually mirrors (others always
+ * fall through to PATH without a directory probe).
+ */
+export declare function resolveBundledBinary(name: string, cfg: Pick<BinaryProvisionConfig, 'root'>, downloadable?: readonly string[]): string;
+/**
+ * Best-effort: download `tool` from the mirror into `cfg.root` on first use.
+ * Never fetches from the upstream project at runtime (the binary is mirrored to
+ * R2 by the host's publish step). Never throws (falls back to a system tool);
+ * idempotent + single-flight per tool.
+ */
+export declare function ensureBundledTool(tool: string, cfg: BinaryProvisionConfig): Promise<void>;
+//# sourceMappingURL=binaries.d.ts.map

package/dist/native/server/binaries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binaries.d.ts","sourceRoot":"","sources":["../../../src/native/server/binaries.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,qBAAqB;IACpC,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;CACtB;AAgBD,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWzE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,EACxC,YAAY,GAAE,SAAS,MAAM,EAAW,GACvC,MAAM,CAMR;AAsBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCzF"}

package/dist/native/server/binaries.js

@@ -0,0 +1,125 @@
+/**
+ * Bundled-binary provisioning for the native daemon (lifted from Ugly Studio so
+ * the daemon AND the test harness share one implementation). A host (Ugly
+ * Studio) bundles a small set of tools by downloading them from its own R2
+ * mirror on first launch; everything else resolves on the system PATH.
+ *
+ * Pure fs/child_process/fetch (no Electron) and fully parameterized — the
+ * install root + manifest mirror are injected via `BinaryProvisionConfig`, so
+ * nothing here hardcodes a particular app's paths or hostnames.
+ *
+ * The mirror exposes `<manifestBase>/binaries-manifest.json`:
+ *   { "<tool>": { "version": "x", "archives": { "<platform>-<arch>": { "url" } } } }
+ * One `tar -xf` covers every platform's asset (bsdtar on mac/win unpacks zip).
+ */
+import { basename, join } from 'node:path';
+import { chmodSync, existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileP = promisify(execFile);
+const exeName = (tool) => (process.platform === 'win32' ? `${tool}.exe` : tool);
+function safeReaddir(dir) {
+    try {
+        return readdirSync(dir);
+    }
+    catch {
+        return [];
+    }
+}
+/** The installed executable for `tool` under `root`, version-agnostic, or null. */
+export function findBundledTool(root, tool) {
+    const toolRoot = join(root, tool);
+    if (!existsSync(toolRoot))
+        return null;
+    for (const ver of safeReaddir(toolRoot)) {
+        const verDir = join(toolRoot, ver);
+        for (const sub of safeReaddir(verDir)) {
+            const p = join(verDir, sub, 'bin', exeName(tool));
+            if (existsSync(p))
+                return p;
+        }
+    }
+    return null;
+}
+/**
+ * Resolve a tool name to a path: a downloaded binary under `cfg.root` when
+ * present, else the bare name so the daemon's spawn resolves it on the system
+ * PATH. `downloadable` lists tools the host actually mirrors (others always
+ * fall through to PATH without a directory probe).
+ */
+export function resolveBundledBinary(name, cfg, downloadable = ['gh']) {
+    if (downloadable.includes(name)) {
+        const found = findBundledTool(cfg.root, name);
+        if (found)
+            return found;
+    }
+    return name;
+}
+/** Look up a tool's archive for this platform in the mirror's manifest. */
+async function toolFromManifest(cfg, tool) {
+    try {
+        const res = await fetch(`${cfg.manifestBase}/binaries-manifest.json`, { cache: 'no-store' });
+        if (!res.ok)
+            return null;
+        const m = (await res.json());
+        const entry = m[tool];
+        const archive = entry?.archives[`${process.platform}-${process.arch}`];
+        if (!entry || !archive?.url)
+            return null;
+        return { version: entry.version, url: archive.url };
+    }
+    catch {
+        return null;
+    }
+}
+const ensuring = new Map();
+/**
+ * Best-effort: download `tool` from the mirror into `cfg.root` on first use.
+ * Never fetches from the upstream project at runtime (the binary is mirrored to
+ * R2 by the host's publish step). Never throws (falls back to a system tool);
+ * idempotent + single-flight per tool.
+ */
+export function ensureBundledTool(tool, cfg) {
+    const key = `${cfg.root}:${tool}`;
+    const inflight = ensuring.get(key);
+    if (inflight)
+        return inflight;
+    const run = (async () => {
+        try {
+            if (findBundledTool(cfg.root, tool))
+                return;
+            const man = await toolFromManifest(cfg, tool);
+            if (!man)
+                return; // not mirrored for this platform yet → system fallback
+            const dir = join(cfg.root, tool, man.version);
+            mkdirSync(dir, { recursive: true });
+            const archive = join(dir, basename(new URL(man.url).pathname));
+            const res = await fetch(man.url);
+            if (!res.ok)
+                return;
+            writeFileSync(archive, Buffer.from(await res.arrayBuffer()));
+            await execFileP('tar', ['-xf', archive, '-C', dir]);
+            try {
+                rmSync(archive);
+            }
+            catch {
+                /* leave it */
+            }
+            const bin = findBundledTool(cfg.root, tool);
+            if (bin && process.platform !== 'win32') {
+                try {
+                    chmodSync(bin, 0o755);
+                }
+                catch {
+                    /* already executable */
+                }
+            }
+        }
+        catch {
+            /* best-effort — fall back to a system tool */
+        }
+    })();
+    ensuring.set(key, run);
+    return run;
+}
+//# sourceMappingURL=binaries.js.map

package/dist/native/server/binaries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binaries.js","sourceRoot":"","sources":["../../../src/native/server/binaries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAatC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEhG,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAClD,IAAI,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,GAAwC,EACxC,eAAkC,CAAC,IAAI,CAAC;IAExC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,gBAAgB,CAC7B,GAA0B,EAC1B,IAAY;IAEZ,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,YAAY,yBAAyB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;QACjD,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,GAAG;YAAE,OAAO,IAAI,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,GAA0B;IACxE,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,IAAI,CAAC;YACH,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO;YAC5C,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG;gBAAE,OAAO,CAAC,uDAAuD;YACzE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO;YACpB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,GAAG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/native/server/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Native daemon-side engine (Node) — the capability/permission core + bundled-
+ * binary provisioning that gate every privileged `window.UglyNative` operation.
+ *
+ * Pure decision logic (no Electron): a host wires the prompt UI + on-disk grant
+ * persistence around it. Lifted out of Ugly Studio so the daemon AND the
+ * Playwright test harness enforce the SAME model from one source of truth —
+ * a test can no longer pass against an unrestricted host.
+ */
+export { AuditLog, type AuditEntry } from './permissions/audit.js';
+export { CapabilityGate, type GateConfig, PermissionDenied } from './permissions/gate.js';
+export { GrantStore, type GrantSnapshot } from './permissions/grants.js';
+export { isWithinScope, originScopeDir, resolveScopedPath, ScopeViolation } from './permissions/scope.js';
+export { type CapabilityRequest, EMPTY_GRANT, type OriginGrant, type PermissionDecision, } from './permissions/types.js';
+export { type BinaryProvisionConfig, ensureBundledTool, findBundledTool, resolveBundledBinary, } from './binaries.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/native/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/native/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,KAAK,UAAU,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EACL,KAAK,iBAAiB,EACtB,WAAW,EACX,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,eAAe,EACf,oBAAoB,GACrB,MAAM,eAAe,CAAC"}

package/dist/native/server/index.js

@@ -0,0 +1,16 @@
+/**
+ * Native daemon-side engine (Node) — the capability/permission core + bundled-
+ * binary provisioning that gate every privileged `window.UglyNative` operation.
+ *
+ * Pure decision logic (no Electron): a host wires the prompt UI + on-disk grant
+ * persistence around it. Lifted out of Ugly Studio so the daemon AND the
+ * Playwright test harness enforce the SAME model from one source of truth —
+ * a test can no longer pass against an unrestricted host.
+ */
+export { AuditLog } from './permissions/audit.js';
+export { CapabilityGate, PermissionDenied } from './permissions/gate.js';
+export { GrantStore } from './permissions/grants.js';
+export { isWithinScope, originScopeDir, resolveScopedPath, ScopeViolation } from './permissions/scope.js';
+export { EMPTY_GRANT, } from './permissions/types.js';
+export { ensureBundledTool, findBundledTool, resolveBundledBinary, } from './binaries.js';
+//# sourceMappingURL=index.js.map

package/dist/native/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/native/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAmB,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAmB,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAsB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EAEL,WAAW,GAGZ,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAEL,iBAAiB,EACjB,eAAe,EACf,oBAAoB,GACrB,MAAM,eAAe,CAAC"}

package/dist/native/server/permissions/audit.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Per-origin audit log. Every gated `window.ugly` operation (process
+ * spawn, fs write, serve, …) is appended here so the user can review
+ * what an app actually did. In-memory ring buffer with an optional sink
+ * the Electron layer wires to append to `~/.ugly-browser/audit/<...>`.
+ */
+export interface AuditEntry {
+    ts: number;
+    origin: string;
+    capability: string;
+    /** The specific resource — a path, a binary name, a port, etc. */
+    resource: string;
+    allowed: boolean;
+    /** Why it was denied (empty when allowed). */
+    reason?: string;
+}
+export declare class AuditLog {
+    private readonly opts;
+    private readonly entries;
+    constructor(opts?: {
+        max?: number;
+        now?: () => number;
+        sink?: (e: AuditEntry) => void;
+    });
+    record(e: Omit<AuditEntry, 'ts'>): AuditEntry;
+    /** All entries, optionally filtered by origin. */
+    list(origin?: string): readonly AuditEntry[];
+}
+//# sourceMappingURL=audit.d.ts.map

package/dist/native/server/permissions/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../../src/native/server/permissions/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,QAAQ;IAIjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;gBAGzB,IAAI,GAAE;QACrB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;KAC3B;IAGR,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,UAAU;IAU7C,kDAAkD;IAClD,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,UAAU,EAAE;CAG7C"}

package/dist/native/server/permissions/audit.js

@@ -0,0 +1,28 @@
+/**
+ * Per-origin audit log. Every gated `window.ugly` operation (process
+ * spawn, fs write, serve, …) is appended here so the user can review
+ * what an app actually did. In-memory ring buffer with an optional sink
+ * the Electron layer wires to append to `~/.ugly-browser/audit/<...>`.
+ */
+export class AuditLog {
+    opts;
+    entries = [];
+    constructor(opts = {}) {
+        this.opts = opts;
+    }
+    record(e) {
+        const now = this.opts.now ?? (() => Date.now());
+        const entry = { ts: now(), ...e };
+        this.entries.push(entry);
+        const max = this.opts.max ?? 5000;
+        if (this.entries.length > max)
+            this.entries.splice(0, this.entries.length - max);
+        this.opts.sink?.(entry);
+        return entry;
+    }
+    /** All entries, optionally filtered by origin. */
+    list(origin) {
+        return origin ? this.entries.filter((e) => e.origin === origin) : this.entries;
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/native/server/permissions/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../../src/native/server/permissions/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,MAAM,OAAO,QAAQ;IAIA;IAHF,OAAO,GAAiB,EAAE,CAAC;IAE5C,YACmB,OAIb,EAAE;QAJW,SAAI,GAAJ,IAAI,CAIf;IACL,CAAC;IAEJ,MAAM,CAAC,CAAyB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAe,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC;QAClC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kDAAkD;IAClD,IAAI,CAAC,MAAe;QAClB,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IACjF,CAAC;CACF"}

package/dist/native/server/permissions/gate.d.ts

@@ -0,0 +1,63 @@
+/**
+ * CapabilityGate — the single enforcement chokepoint the privileged
+ * daemon calls before performing any `window.ugly` operation. It
+ * composes the per-origin grants, the per-origin fs scope, the bundled-
+ * binary allowlist, and the audit log. Every call either returns the
+ * resolved/authorized value or throws `PermissionDenied` — and is
+ * recorded either way.
+ *
+ * Pure logic (no Electron / no fs): the Electron main wires the real
+ * `baseDir`, the live `GrantStore`, and an audit sink around it.
+ */
+import { AuditLog } from './audit.js';
+import { GrantStore } from './grants.js';
+export declare class PermissionDenied extends Error {
+    readonly origin: string;
+    readonly capability: string;
+    readonly resource: string;
+    constructor(origin: string, capability: string, resource: string, reason: string);
+}
+export interface GateConfig {
+    store: GrantStore;
+    /** Root for per-origin scoped folders, e.g. `~/.ugly-browser`. */
+    baseDir: string;
+    /** Binaries that CAN be granted at all (the bundled-tool allowlist). */
+    bundledBinaries: readonly string[];
+    audit?: AuditLog;
+}
+export declare class CapabilityGate {
+    private readonly store;
+    private readonly baseDir;
+    private readonly bundled;
+    readonly audit: AuditLog;
+    constructor(cfg: GateConfig);
+    /** The on-disk scope root for an origin (its sandboxed app folder). */
+    scopeRoot(origin: string): string;
+    private deny;
+    private allow;
+    /**
+     * Authorize + resolve an `ugly.fs.*` path. 'scoped' confines to the
+     * origin's folder; 'full' (sudo) allows any absolute path; 'none'
+     * denies. Returns the absolute path to operate on.
+     */
+    resolveFsPath(origin: string, requestedPath: string): string;
+    /**
+     * Resolve + confine a process's working directory. A `process` grant
+     * alone is enough to run inside the origin's scope folder — this does
+     * NOT require a separate `fs` grant (that gates `ugly.fs.*`). A 'full'
+     * (sudo) origin may cwd anywhere; everyone else is confined to scope.
+     */
+    resolveProcessCwd(origin: string, cwd?: string): string;
+    /** Does this origin hold the github capability (authorizes gh + git)? */
+    holdsGithub(origin: string): boolean;
+    /** Authorize an `ugly.process` spawn of `binary`. Throws if not allowed. */
+    checkProcess(origin: string, binary: string): void;
+    checkServe(origin: string, port?: number): void;
+    checkNet(origin: string, target?: string): void;
+    checkWorkers(origin: string, opts?: {
+        boot?: boolean;
+    }): void;
+    checkSecrets(origin: string, key?: string): void;
+    checkBrowse(origin: string, target?: string): void;
+}
+//# sourceMappingURL=gate.d.ts.map

package/dist/native/server/permissions/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../../src/native/server/permissions/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,qBAAa,gBAAiB,SAAQ,KAAK;IAEvC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBAFhB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EACzB,MAAM,EAAE,MAAM;CAKjB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,UAAU,CAAC;IAClB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAEb,GAAG,EAAE,UAAU;IAO3B,uEAAuE;IACvE,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAIjC,OAAO,CAAC,IAAI;IAUZ,OAAO,CAAC,KAAK;IAIb;;;;OAIG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM;IAsB5D;;;;;OAKG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM;IAiBvD,yEAAyE;IACzE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIpC,4EAA4E;IAC5E,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAalD,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,SAAI,GAAG,IAAI;IAO1C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,IAAI;IAO3C,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,IAAI;IASjE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAK,GAAG,IAAI;IAO5C,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,IAAI;CAM/C"}

package/dist/native/server/permissions/gate.js

@@ -0,0 +1,150 @@
+/**
+ * CapabilityGate — the single enforcement chokepoint the privileged
+ * daemon calls before performing any `window.ugly` operation. It
+ * composes the per-origin grants, the per-origin fs scope, the bundled-
+ * binary allowlist, and the audit log. Every call either returns the
+ * resolved/authorized value or throws `PermissionDenied` — and is
+ * recorded either way.
+ *
+ * Pure logic (no Electron / no fs): the Electron main wires the real
+ * `baseDir`, the live `GrantStore`, and an audit sink around it.
+ */
+import path from 'path';
+import { AuditLog } from './audit.js';
+import { originScopeDir, resolveScopedPath, ScopeViolation } from './scope.js';
+export class PermissionDenied extends Error {
+    origin;
+    capability;
+    resource;
+    constructor(origin, capability, resource, reason) {
+        super(`Permission denied for ${origin} (${capability} ${resource}): ${reason}`);
+        this.origin = origin;
+        this.capability = capability;
+        this.resource = resource;
+        this.name = 'PermissionDenied';
+    }
+}
+export class CapabilityGate {
+    store;
+    baseDir;
+    bundled;
+    audit;
+    constructor(cfg) {
+        this.store = cfg.store;
+        this.baseDir = cfg.baseDir;
+        this.bundled = new Set(cfg.bundledBinaries);
+        this.audit = cfg.audit ?? new AuditLog();
+    }
+    /** The on-disk scope root for an origin (its sandboxed app folder). */
+    scopeRoot(origin) {
+        return originScopeDir(this.baseDir, origin);
+    }
+    deny(origin, capability, resource, reason) {
+        this.audit.record({ origin, capability, resource, allowed: false, reason });
+        throw new PermissionDenied(origin, capability, resource, reason);
+    }
+    allow(origin, capability, resource) {
+        this.audit.record({ origin, capability, resource, allowed: true });
+    }
+    /**
+     * Authorize + resolve an `ugly.fs.*` path. 'scoped' confines to the
+     * origin's folder; 'full' (sudo) allows any absolute path; 'none'
+     * denies. Returns the absolute path to operate on.
+     */
+    resolveFsPath(origin, requestedPath) {
+        const fs = this.store.query(origin).fs;
+        if (fs === 'none') {
+            this.deny(origin, 'fs', requestedPath, 'no filesystem permission');
+        }
+        if (fs === 'full') {
+            const abs = path.resolve(requestedPath);
+            this.allow(origin, 'fs:full', abs);
+            return abs;
+        }
+        // scoped
+        try {
+            const abs = resolveScopedPath(this.scopeRoot(origin), requestedPath);
+            this.allow(origin, 'fs:scoped', abs);
+            return abs;
+        }
+        catch (e) {
+            const reason = e instanceof ScopeViolation ? 'path escapes scoped folder' : 'invalid path';
+            this.deny(origin, 'fs:scoped', requestedPath, reason);
+        }
+    }
+    /**
+     * Resolve + confine a process's working directory. A `process` grant
+     * alone is enough to run inside the origin's scope folder — this does
+     * NOT require a separate `fs` grant (that gates `ugly.fs.*`). A 'full'
+     * (sudo) origin may cwd anywhere; everyone else is confined to scope.
+     */
+    resolveProcessCwd(origin, cwd) {
+        const root = this.scopeRoot(origin);
+        if (!cwd)
+            return root;
+        if (this.store.query(origin).fs === 'full') {
+            const abs = path.resolve(cwd);
+            this.allow(origin, 'process:cwd', abs);
+            return abs;
+        }
+        try {
+            const abs = resolveScopedPath(root, cwd);
+            this.allow(origin, 'process:cwd', abs);
+            return abs;
+        }
+        catch {
+            this.deny(origin, 'process:cwd', cwd, 'cwd escapes scoped folder');
+        }
+    }
+    /** Does this origin hold the github capability (authorizes gh + git)? */
+    holdsGithub(origin) {
+        return this.store.query(origin).github;
+    }
+    /** Authorize an `ugly.process` spawn of `binary`. Throws if not allowed. */
+    checkProcess(origin, binary) {
+        if (!this.bundled.has(binary)) {
+            this.deny(origin, 'process', binary, 'not a bundled tool');
+        }
+        const g = this.store.query(origin);
+        // The github capability authorizes exactly the GitHub CLIs.
+        const githubTool = g.github && (binary === 'gh' || binary === 'git');
+        if (!githubTool && !g.process.includes(binary)) {
+            this.deny(origin, 'process', binary, 'tool not granted');
+        }
+        this.allow(origin, 'process', binary);
+    }
+    checkServe(origin, port = 0) {
+        if (!this.store.query(origin).serve) {
+            this.deny(origin, 'serve', String(port), 'serve not granted');
+        }
+        this.allow(origin, 'serve', String(port));
+    }
+    checkNet(origin, target = '') {
+        if (!this.store.query(origin).net) {
+            this.deny(origin, 'net', target, 'net not granted');
+        }
+        this.allow(origin, 'net', target);
+    }
+    checkWorkers(origin, opts = {}) {
+        const g = this.store.query(origin);
+        if (!g.workers)
+            this.deny(origin, 'workers', '', 'workers not granted');
+        if (opts.boot && !g.workersBoot) {
+            this.deny(origin, 'workers:boot', '', 'boot-start not granted');
+        }
+        this.allow(origin, opts.boot ? 'workers:boot' : 'workers', '');
+    }
+    checkSecrets(origin, key = '') {
+        if (!this.store.query(origin).secrets) {
+            this.deny(origin, 'secrets', key, 'secrets not granted');
+        }
+        this.allow(origin, 'secrets', key);
+    }
+    checkBrowse(origin, target = '') {
+        if (!this.store.query(origin).browse) {
+            this.deny(origin, 'browse', target, 'browse not granted');
+        }
+        this.allow(origin, 'browse', target);
+    }
+}
+//# sourceMappingURL=gate.js.map

package/dist/native/server/permissions/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../../src/native/server/permissions/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAE9B;IACA;IACA;IAHX,YACW,MAAc,EACd,UAAkB,EAClB,QAAgB,EACzB,MAAc;QAEd,KAAK,CAAC,yBAAyB,MAAM,KAAK,UAAU,IAAI,QAAQ,MAAM,MAAM,EAAE,CAAC,CAAC;QALvE,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAQ;QAClB,aAAQ,GAAR,QAAQ,CAAQ;QAIzB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAWD,MAAM,OAAO,cAAc;IACR,KAAK,CAAa;IAClB,OAAO,CAAS;IAChB,OAAO,CAAsB;IACrC,KAAK,CAAW;IAEzB,YAAY,GAAe;QACzB,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC3C,CAAC;IAED,uEAAuE;IACvE,SAAS,CAAC,MAAc;QACtB,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAEO,IAAI,CACV,MAAc,EACd,UAAkB,EAClB,QAAgB,EAChB,MAAc;QAEd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,MAAc,EAAE,UAAkB,EAAE,QAAgB;QAChE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,MAAc,EAAE,aAAqB;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YACnC,OAAO,GAAG,CAAC;QACb,CAAC;QACD,SAAS;QACT,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;YACrC,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,MAAM,GACV,CAAC,YAAY,cAAc,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,cAAc,CAAC;YAC9E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,MAAc,EAAE,GAAY;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;YACvC,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;YACvC,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,WAAW,CAAC,MAAc;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACzC,CAAC;IAED,4EAA4E;IAC5E,YAAY,CAAC,MAAc,EAAE,MAAc;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,4DAA4D;QAC5D,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,UAAU,CAAC,MAAc,EAAE,IAAI,GAAG,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,QAAQ,CAAC,MAAc,EAAE,MAAM,GAAG,EAAE;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,YAAY,CAAC,MAAc,EAAE,OAA2B,EAAE;QACxD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,YAAY,CAAC,MAAc,EAAE,GAAG,GAAG,EAAE;QACnC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,WAAW,CAAC,MAAc,EAAE,MAAM,GAAG,EAAE;QACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/native/server/permissions/grants.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Per-origin grant store + the incremental request decision logic.
+ *
+ * `evaluate()` is pure: it diffs a request against what the origin holds
+ * and reports the delta + whether a prompt / elevated confirm is needed,
+ * WITHOUT mutating. The Electron layer shows the prompt for the delta,
+ * then calls `grant()` to commit (or auto-commits for trusted origins).
+ * This keeps "decide" separate from "persist" and makes both testable.
+ */
+import { type CapabilityRequest, type OriginGrant, type PermissionDecision } from './types.js';
+export declare class GrantStore {
+    private readonly grants;
+    private readonly trusted;
+    constructor(trustedOrigins?: readonly string[]);
+    isTrusted(origin: string): boolean;
+    /** Capabilities the origin currently holds (EMPTY_GRANT if none). */
+    query(origin: string): OriginGrant;
+    /**
+     * Decide what a request needs — the delta beyond what's held, and
+     * whether it must prompt / elevate. Pure: does not mutate.
+     */
+    evaluate(origin: string, req: CapabilityRequest): PermissionDecision;
+    /**
+     * Commit a (delta) grant onto the origin's held set. Idempotent and
+     * monotonic — merges, never downgrades. Returns the new held grant.
+     */
+    grant(origin: string, req: CapabilityRequest): OriginGrant;
+    /** Revoke everything for an origin (Subsystem B exposes a settings UI). */
+    revoke(origin: string): void;
+    /** Serializable copy of all held grants (for persistence). */
+    snapshot(): Record<string, OriginGrant>;
+    /** Replace all held grants from a snapshot (load on startup). */
+    restore(snapshot: Record<string, OriginGrant>): void;
+}
+export type GrantSnapshot = Record<string, OriginGrant>;
+//# sourceMappingURL=grants.d.ts.map

package/dist/native/server/permissions/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../../../src/native/server/permissions/grants.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAapB,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;gBAElC,cAAc,GAAE,SAAS,MAAM,EAAO;IAIlD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIlC,qEAAqE;IACrE,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW;IAIlC;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,kBAAkB;IAyCpE;;;OAGG;IACH,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,WAAW;IAmB1D,2EAA2E;IAC3E,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI5B,8DAA8D;IAC9D,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;IAMvC,iEAAiE;IACjE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,IAAI;CAMrD;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC"}