windows-development-sandbox 0.0.0-stage → 1.1.0

package/dist/runtime/gitguard.js

@@ -0,0 +1,84 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+
+// src/guest/gitguard.ts
+import { spawnSync } from "node:child_process";
+var READ_ONLY = /* @__PURE__ */ new Set([
+  "status",
+  "log",
+  "diff",
+  "show",
+  "blame",
+  "annotate",
+  "ls-files",
+  "ls-tree",
+  "ls-remote",
+  "rev-parse",
+  "rev-list",
+  "describe",
+  "shortlog",
+  "grep",
+  "cat-file",
+  "reflog",
+  "whatchanged",
+  "name-rev",
+  "for-each-ref",
+  "show-ref",
+  "merge-base",
+  "count-objects",
+  "check-ignore",
+  "check-attr",
+  "var",
+  "version",
+  "help",
+  "diff-tree",
+  "diff-files",
+  "diff-index",
+  "cherry",
+  "range-diff",
+  "show-branch",
+  "verify-commit",
+  "verify-tag"
+]);
+var listingOnly = (flags, listFlags) => (rest) => rest.every((a) => flags.test(a)) || rest.some((a) => listFlags.test(a)) && rest.every((a) => flags.test(a) || !a.startsWith("-"));
+var LISTING = {
+  branch: listingOnly(/^(-a|-r|-v|-vv|--all|--remotes|--list|-l|--show-current|--verbose|--no-color|--color(=.*)?|--contains|--no-contains|--merged|--no-merged|--sort=.*|--format=.*)$/, /^(--list|-l|--contains|--no-contains|--merged|--no-merged)$/),
+  tag: listingOnly(/^(-l|--list|-n\d*|--contains|--no-contains|--merged|--no-merged|--points-at|--sort=.*|--format=.*)$/, /^(-l|--list|--contains|--no-contains|--merged|--no-merged|--points-at)$/),
+  remote: (rest) => rest.length === 0 || ["-v", "--verbose", "show", "get-url"].includes(rest[0]),
+  config: (rest) => rest.some((a) => /^(--get|--get-all|--get-regexp|--list|-l|--show-origin|--show-scope|--name-only)$/.test(a)) && !rest.some((a) => /^(--add|--unset|--unset-all|--replace-all|--rename-section|--remove-section|-e|--edit)$/.test(a)),
+  stash: (rest) => ["list", "show"].includes(rest[0] ?? ""),
+  worktree: (rest) => rest[0] === "list",
+  submodule: (rest) => rest.length === 0 || rest[0] === "status" || rest[0] === "summary",
+  notes: (rest) => rest.length === 0 || ["list", "show"].includes(rest[0])
+};
+var WITH_VALUE = /* @__PURE__ */ new Set(["-C", "--namespace"]);
+var FORBIDDEN_GLOBAL = /^(-c|--config-env|--exec-path|--git-dir|--work-tree|--super-prefix)(=|$)/;
+var gitDecision = (args, access) => {
+  if (access === "full") return { allow: true };
+  if (access !== "readonly") return { allow: false, reason: "git is disabled in this sandbox (provisioning.git.access = " + (access || "none") + ")." };
+  let i = 0;
+  while (i < args.length && args[i].startsWith("-")) {
+    if (FORBIDDEN_GLOBAL.test(args[i])) return { allow: false, reason: "git " + args[i] + " is not allowed: git is read-only in this sandbox." };
+    i += WITH_VALUE.has(args[i]) ? 2 : 1;
+  }
+  const [command, ...rest] = args.slice(i);
+  if (command === void 0 || command === "--version" || READ_ONLY.has(command) || (LISTING[command]?.(rest) ?? false)) return { allow: true };
+  return { allow: false, reason: "git " + command + " is blocked: git is read-only in this sandbox (provisioning.git.access = readonly). Reading (status, log, diff, show, blame) is allowed." };
+};
+if (process.argv[1]?.toLowerCase().endsWith("gitguard.js")) {
+  const args = process.argv.slice(2);
+  const decision = gitDecision(args, process.env.AGENT_GIT_ACCESS ?? "none");
+  if (!decision.allow) {
+    console.error("fatal: " + decision.reason);
+    process.exit(128);
+  }
+  const real = process.env.AGENT_REAL_GIT;
+  if (!real) {
+    console.error("fatal: git is not available in this sandbox.");
+    process.exit(128);
+  }
+  const result = spawnSync(real, args, { stdio: "inherit", windowsHide: true });
+  process.exit(result.status ?? 1);
+}
+export {
+  gitDecision
+};