ysk-server-core 1.0.0

package/dist/security/tool-executor.js

@@ -0,0 +1,271 @@
+/**
+ * Secure tool execution: Protection → Allowlist → RBAC → Approval → HostExecutor.
+ * Never returns fake executed:true without real host work for mutating tools.
+ */
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+import { resolve as pathResolve } from 'node:path';
+import { checkRbac } from './rbac.js';
+import { toolImpliedLevel } from './operation-level.js';
+import { pathUnderRoot } from '../host/executor.js';
+const EMERGENCY_TOOLS = new Set([
+    'sys.info',
+    'process.list',
+    'service.status',
+    'fs.read',
+    'fs.list',
+    'service.restart',
+]);
+/**
+ * Evaluate and execute a tool call against the real host when permitted.
+ */
+export async function executeToolCall(req, opts, approvalId) {
+    if (!req.tool || typeof req.tool !== 'string') {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1408'), { httpStatus: 400 });
+    }
+    const protection = opts.protection;
+    if (protection?.blockExternalTools || protection?.emergencyPlaybooksOnly) {
+        if (!EMERGENCY_TOOLS.has(req.tool)) {
+            return deny(req, opts, `Protection mode ${protection.mode}: tool blocked (emergency playbooks only)`);
+        }
+    }
+    const evaluation = opts.allowlist.evaluate(req.tool);
+    if (!evaluation.allowed) {
+        return deny(req, opts, evaluation.reason ?? tl('notes.auto.n0779'));
+    }
+    const level = toolImpliedLevel(req.tool, evaluation.risk);
+    const scope = opts.scope ?? req.scope ?? { kind: 'global' };
+    const roles = opts.roles?.length ? opts.roles : ['viewer'];
+    const rbacAllowed = roles.some((role) => checkRbac(role, scope, level).allowed);
+    if (!rbacAllowed) {
+        const reason = roles.map((role) => checkRbac(role, scope, level).reason).find(Boolean) ??
+            `RBAC denied for roles=${roles.join(',')} level=${level}`;
+        return deny(req, opts, reason);
+    }
+    if (req.dryRun) {
+        return {
+            allowed: true,
+            requiresApproval: evaluation.requiresApproval,
+            dryRun: true,
+            result: {
+                tool: req.tool,
+                args: req.args,
+                risk: evaluation.risk,
+                operationLevel: level,
+                wouldRequireApproval: evaluation.requiresApproval,
+                schema: evaluation.entry?.argsSchema,
+                protectionMode: protection?.mode ?? 'normal',
+                hostExecuteEnabled: opts.host.executeEnabled()
+            }
+        };
+    }
+    if (evaluation.requiresApproval) {
+        if (!approvalId) {
+            const pending = opts.approvals.request({
+                action: req.tool,
+                risk: evaluation.risk,
+                requestedBy: opts.actor,
+                payload: req.args
+            });
+            opts.audit?.append({
+                actor: opts.actor,
+                action: 'tool.approval_requested',
+                resource: req.tool,
+                detail: { approvalId: pending.id, args: req.args },
+                ok: true
+            });
+            return {
+                allowed: true,
+                requiresApproval: true,
+                approvalId: pending.id,
+                dryRun: false,
+                result: { status: 'pending_approval', approvalId: pending.id }
+            };
+        }
+        opts.approvals.assertApproved(approvalId, req.tool);
+    }
+    try {
+        const resultPayload = await dispatchTool(req.tool, req.args ?? {}, opts);
+        if (approvalId) {
+            try {
+                opts.approvals.markExecuted(approvalId);
+            }
+            catch {
+                /* ignore */
+            }
+        }
+        opts.audit?.append({
+            actor: opts.actor,
+            action: 'tool.execute',
+            resource: req.tool,
+            detail: { args: req.args, result: summarize(resultPayload), approvalId },
+            ok: true
+        });
+        return {
+            allowed: true,
+            requiresApproval: evaluation.requiresApproval,
+            approvalId,
+            dryRun: false,
+            result: {
+                tool: req.tool,
+                executed: true,
+                ...resultPayload
+            }
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        opts.audit?.append({
+            actor: opts.actor,
+            action: 'tool.execute',
+            resource: req.tool,
+            detail: { args: req.args, error: message },
+            ok: false
+        });
+        if (err instanceof YskError)
+            throw err;
+        throw new YskError(ErrorCodes.INTERNAL, message, { httpStatus: 500, cause: err });
+    }
+}
+/** Resolve allowed roots for tool filesystem ops (fail-closed when empty). */
+export function toolFsRoots(opts) {
+    const roots = [];
+    if (opts.dataDir?.trim())
+        roots.push(pathResolve(opts.dataDir.trim()));
+    for (const r of opts.fsRoots ?? []) {
+        const t = String(r ?? '').trim();
+        if (t)
+            roots.push(pathResolve(t));
+    }
+    return roots;
+}
+/**
+ * Ensure tool path is inside at least one allowed root (boundary-safe).
+ * Returns resolved absolute path.
+ */
+export function assertToolFsPath(rawPath, roots) {
+    if (!rawPath?.trim()) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.needPath'), { httpStatus: 400 });
+    }
+    if (rawPath.includes('\0')) {
+        throw new YskError(ErrorCodes.SANDBOX_VIOLATION, tl('notes.files.pathOutsideSandbox', { target: rawPath }), {
+            httpStatus: 403,
+            details: { path: rawPath },
+        });
+    }
+    if (!roots.length) {
+        throw new YskError(ErrorCodes.SANDBOX_VIOLATION, tl('notes.files.pathOutsideSandbox', { target: rawPath }), {
+            httpStatus: 403,
+            details: { path: rawPath, reason: 'fs_tools_require_sandbox_roots' },
+        });
+    }
+    const abs = pathResolve(rawPath);
+    for (const root of roots) {
+        if (pathUnderRoot(root, abs))
+            return abs;
+    }
+    throw new YskError(ErrorCodes.SANDBOX_VIOLATION, tl('notes.files.pathOutsideSandbox', { target: rawPath }), {
+        httpStatus: 403,
+        details: { path: abs, roots },
+    });
+}
+async function dispatchTool(tool, args, opts) {
+    const host = opts.host;
+    const roots = toolFsRoots(opts);
+    switch (tool) {
+        case 'fs.read': {
+            const path = assertToolFsPath(String(args.path ?? ''), roots);
+            const content = await host.readFile(path);
+            return { path, content, bytes: Buffer.byteLength(content) };
+        }
+        case 'fs.list': {
+            const path = assertToolFsPath(String(args.path ?? ''), roots);
+            const entries = await host.listDir(path);
+            return { path, entries };
+        }
+        case 'fs.write': {
+            const path = assertToolFsPath(String(args.path ?? ''), roots);
+            const content = String(args.content ?? '');
+            await host.writeFile(path, content);
+            return { path, bytesWritten: Buffer.byteLength(content) };
+        }
+        case 'fs.delete': {
+            const path = assertToolFsPath(String(args.path ?? ''), roots);
+            await host.deletePath(path);
+            return { path, deleted: true };
+        }
+        case 'sys.info': {
+            const info = await host.sysInfo();
+            return { info };
+        }
+        case 'process.list': {
+            // portable: read /proc if present else empty
+            try {
+                const entries = await host.listDir('/proc');
+                const pids = entries.filter((e) => /^\d+$/.test(e)).slice(0, 50);
+                return { pids, note: 'limited pid list from /proc' };
+            }
+            catch {
+                return { pids: [], note: '/proc unavailable' };
+            }
+        }
+        case 'service.status': {
+            const name = String(args.name ?? '');
+            if (!name)
+                throw new YskError(ErrorCodes.VALIDATION, tl('notes.needName'), { httpStatus: 400 });
+            const r = await host.serviceStatus(name);
+            return { name, ...r };
+        }
+        case 'service.restart': {
+            const name = String(args.name ?? '');
+            if (!name)
+                throw new YskError(ErrorCodes.VALIDATION, tl('notes.needName'), { httpStatus: 400 });
+            if (!/^[a-zA-Z0-9@_.-]+$/.test(name)) {
+                throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n0947'), { httpStatus: 400 });
+            }
+            const r = await host.runCommand(['systemctl', 'restart', name]);
+            return { name, ...r };
+        }
+        case 'pkg.install': {
+            const name = String(args.name ?? '');
+            if (!name || !/^[a-zA-Z0-9+._-]+$/.test(name)) {
+                throw new YskError(ErrorCodes.VALIDATION, tl('notes.invalidPackageName'), { httpStatus: 400 });
+            }
+            const r = await host.runCommand(['apt-get', 'install', '-y', name], { timeoutMs: 120_000 });
+            return { package: name, ...r };
+        }
+        case 'pkg.remove': {
+            const name = String(args.name ?? '');
+            if (!name || !/^[a-zA-Z0-9+._-]+$/.test(name)) {
+                throw new YskError(ErrorCodes.VALIDATION, tl('notes.invalidPackageName'), { httpStatus: 400 });
+            }
+            const r = await host.runCommand(['apt-get', 'remove', '-y', name], { timeoutMs: 120_000 });
+            return { package: name, ...r };
+        }
+        default:
+            throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.t0019', { v0: (tool) }), {
+                httpStatus: 400
+            });
+    }
+}
+function deny(req, opts, reason) {
+    opts.audit?.append({
+        actor: opts.actor,
+        action: 'tool.denied',
+        resource: req.tool,
+        detail: { reason, args: req.args },
+        ok: false
+    });
+    return {
+        allowed: false,
+        requiresApproval: false,
+        dryRun: Boolean(req.dryRun),
+        denialReason: reason
+    };
+}
+function summarize(payload) {
+    if (typeof payload.content === 'string' && payload.content.length > 200) {
+        return { ...payload, content: String(payload.content).slice(0, 200) + '…' };
+    }
+    return payload;
+}
+//# sourceMappingURL=tool-executor.js.map

package/dist/security/tool-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-executor.js","sourceRoot":"","sources":["../../src/security/tool-executor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAGnD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,EAAE,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAGvE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,UAAU;IACV,cAAc;IACd,gBAAgB;IAChB,SAAS;IACT,SAAS;IACT,iBAAiB;CAClB,CAAC,CAAC;AAoBH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAoB,EACpB,IAAyB,EACzB,UAAmB;IAEnB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,UAAU,EAAE,kBAAkB,IAAI,UAAU,EAAE,sBAAsB,EAAE,CAAC;QACzE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CACT,GAAG,EACH,IAAI,EACJ,mBAAmB,UAAU,CAAC,IAAI,2CAA2C,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,KAAK,GAAmB,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAkB,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAkB,CAAC;IAC7E,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;IAChF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,MAAM,GACV,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YACvE,yBAAyB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;YAC7C,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE;gBACN,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,cAAc,EAAE,KAAK;gBACrB,oBAAoB,EAAE,UAAU,CAAC,gBAAgB;gBACjD,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU;gBACpC,cAAc,EAAE,UAAU,EAAE,IAAI,IAAI,QAAQ;gBAC5C,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;aAAE;SAAE,CAAC;IACzD,CAAC;IAED,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAChC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBACrC,MAAM,EAAE,GAAG,CAAC,IAAI;gBAChB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,WAAW,EAAE,IAAI,CAAC,KAAK;gBACvB,OAAO,EAAE,GAAG,CAAC,IAAI;aAAE,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,yBAAyB;gBACjC,QAAQ,EAAE,GAAG,CAAC,IAAI;gBAClB,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;gBAClD,EAAE,EAAE,IAAI;aAAE,CAAC,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,gBAAgB,EAAE,IAAI;gBACtB,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE;aAAE,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACzE,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,GAAG,CAAC,IAAI;YAClB,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE;YACxE,EAAE,EAAE,IAAI;SAAE,CAAC,CAAC;QACd,OAAO;YACL,OAAO,EAAE,IAAI;YACb,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;YAC7C,UAAU;YACV,MAAM,EAAE,KAAK;YACb,MAAM,EAAE;gBACN,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,IAAI;gBACd,GAAG,aAAa;aAAE;SAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,GAAG,CAAC,IAAI;YAClB,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;YAC1C,EAAE,EAAE,KAAK;SAAE,CAAC,CAAC;QACf,IAAI,GAAG,YAAY,QAAQ;YAAE,MAAM,GAAG,CAAC;QACvC,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,IAAsD;IAChF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,KAAe;IAEf,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,iBAAiB,EAAE,EAAE,CAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;YAC1G,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,QAAQ,CAChB,UAAU,CAAC,iBAAiB,EAC5B,EAAE,CAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EACzD;YACE,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,EAAE;SACrE,CACF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAC3C,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,iBAAiB,EAAE,EAAE,CAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;QAC1G,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,IAA6B,EAC7B,IAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,6CAA6C;YAC7C,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;YACjD,CAAC;QACH,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YAChG,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACxB,CAAC;QACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YAChG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YAChE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACxB,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACjC,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACjC,CAAC;QACD;YACE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;gBAChF,UAAU,EAAE,GAAG;aAAE,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CACX,GAAoB,EACpB,IAAyB,EACzB,MAAc;IAEd,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,GAAG,CAAC,IAAI;QAClB,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;QAClC,EAAE,EAAE,KAAK;KAAE,CAAC,CAAC;IACf,OAAO;QACL,OAAO,EAAE,KAAK;QACd,gBAAgB,EAAE,KAAK;QACvB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3B,YAAY,EAAE,MAAM;KAAE,CAAC;AAC3B,CAAC;AAED,SAAS,SAAS,CAAC,OAAgC;IACjD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxE,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/security/totp.d.ts

@@ -0,0 +1,15 @@
+/**
+ * RFC 6238 TOTP (SHA-1, 30s, 6 digits) — no external deps.
+ */
+export declare function generateTotpSecret(bytes?: number): string;
+export declare function buildOtpAuthUrl(opts: {
+    secret: string;
+    username: string;
+    issuer?: string;
+}): string;
+/** Verify 6-digit code with ±1 step window. */
+export declare function verifyTotp(secret: string, code: string, nowMs?: number): boolean;
+/** Like verifyTotp but returns the matched time-step (for anti-replay). */
+export declare function matchTotpStep(secret: string, code: string, nowMs?: number): number | null;
+export declare function generateTotpCode(secret: string, counter?: number): string;
+//# sourceMappingURL=totp.d.ts.map

package/dist/security/totp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../../src/security/totp.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,wBAAgB,kBAAkB,CAAC,KAAK,SAAK,GAAG,MAAM,CAGrD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAWT;AAED,+CAA+C;AAC/C,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,SAAa,GAAG,OAAO,CAEpF;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,KAAK,SAAa,GACjB,MAAM,GAAG,IAAI,CASf;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAczE"}

package/dist/security/totp.js

@@ -0,0 +1,97 @@
+/**
+ * RFC 6238 TOTP (SHA-1, 30s, 6 digits) — no external deps.
+ */
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+const BASE32 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
+export function generateTotpSecret(bytes = 20) {
+    const buf = randomBytes(bytes);
+    return base32Encode(buf);
+}
+export function buildOtpAuthUrl(opts) {
+    const issuer = opts.issuer ?? 'YSK Server';
+    const label = encodeURIComponent(`${issuer}:${opts.username}`);
+    const q = new URLSearchParams({
+        secret: opts.secret,
+        issuer,
+        algorithm: 'SHA1',
+        digits: '6',
+        period: '30',
+    });
+    return `otpauth://totp/${label}?${q.toString()}`;
+}
+/** Verify 6-digit code with ±1 step window. */
+export function verifyTotp(secret, code, nowMs = Date.now()) {
+    return matchTotpStep(secret, code, nowMs) != null;
+}
+/** Like verifyTotp but returns the matched time-step (for anti-replay). */
+export function matchTotpStep(secret, code, nowMs = Date.now()) {
+    const clean = code.replace(/\s/g, '');
+    if (!/^\d{6}$/.test(clean))
+        return null;
+    const step = Math.floor(nowMs / 1000 / 30);
+    for (const s of [step - 1, step, step + 1]) {
+        const expected = generateTotpCode(secret, s);
+        if (equalDigits(clean, expected))
+            return s;
+    }
+    return null;
+}
+export function generateTotpCode(secret, counter) {
+    const step = counter ?? Math.floor(Date.now() / 1000 / 30);
+    const key = base32Decode(secret);
+    const buf = Buffer.alloc(8);
+    buf.writeBigUInt64BE(BigInt(step));
+    const hmac = createHmac('sha1', key).update(buf).digest();
+    const offset = hmac[hmac.length - 1] & 0x0f;
+    const bin = ((hmac[offset] & 0x7f) << 24) |
+        ((hmac[offset + 1] & 0xff) << 16) |
+        ((hmac[offset + 2] & 0xff) << 8) |
+        (hmac[offset + 3] & 0xff);
+    const otp = bin % 1_000_000;
+    return String(otp).padStart(6, '0');
+}
+function base32Encode(buf) {
+    let bits = 0;
+    let value = 0;
+    let out = '';
+    for (const b of buf) {
+        value = (value << 8) | b;
+        bits += 8;
+        while (bits >= 5) {
+            out += BASE32[(value >>> (bits - 5)) & 31];
+            bits -= 5;
+        }
+    }
+    if (bits > 0)
+        out += BASE32[(value << (5 - bits)) & 31];
+    return out;
+}
+function base32Decode(input) {
+    const cleaned = input.toUpperCase().replace(/=+$/, '').replace(/[^A-Z2-7]/g, '');
+    let bits = 0;
+    let value = 0;
+    const out = [];
+    for (const ch of cleaned) {
+        const idx = BASE32.indexOf(ch);
+        if (idx < 0)
+            continue;
+        value = (value << 5) | idx;
+        bits += 5;
+        if (bits >= 8) {
+            out.push((value >>> (bits - 8)) & 0xff);
+            bits -= 8;
+        }
+    }
+    return Buffer.from(out);
+}
+function equalDigits(a, b) {
+    if (a.length !== b.length)
+        return false;
+    try {
+        return timingSafeEqual(Buffer.from(a, 'utf8'), Buffer.from(b, 'utf8'));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=totp.js.map

package/dist/security/totp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.js","sourceRoot":"","sources":["../../src/security/totp.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,MAAM,GAAG,kCAAkC,CAAC;AAElD,MAAM,UAAU,kBAAkB,CAAC,KAAK,GAAG,EAAE;IAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAI/B;IACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC;IAC3C,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC;QAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM;QACN,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,GAAG;QACX,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,OAAO,kBAAkB,KAAK,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IACzE,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;AACpD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,IAAY,EACZ,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAElB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7C,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,OAAgB;IAC/D,MAAM,IAAI,GAAG,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC;IAC7C,MAAM,GAAG,GACP,CAAC,CAAC,IAAI,CAAC,MAAM,CAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS,CAAC;IAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,GAAG,IAAI,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3C,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,GAAG,CAAC;QAAE,GAAG,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACjF,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,GAAG,GAAG,CAAC;YAAE,SAAS;QACtB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;QAC3B,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/services/ai-task-service.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Persist AI tasks and execute approved steps through the secure tool gate.
+ */
+import type { YskDatabase } from '../db/database.js';
+import type { Allowlist } from '../security/allowlist.js';
+import type { ApprovalQueue } from '../security/approval.js';
+import type { HostExecutor } from '../host/executor.js';
+import type { AuditRepository } from '../repositories/audit-repo.js';
+import type { ProtectionState } from './protection.js';
+import type { SystemRole } from 'ysk-server-shared';
+import { type AiTask } from '../skills/task-planner.js';
+import type { LlmGateway } from '../llm/gateway.js';
+export declare class AiTaskService {
+    private readonly allowlist;
+    private readonly approvals;
+    private readonly host;
+    private readonly audit;
+    private readonly llm;
+    private readonly getProtection;
+    private readonly store;
+    constructor(db: YskDatabase, allowlist: Allowlist, approvals: ApprovalQueue, host: HostExecutor, audit: AuditRepository, llm: LlmGateway, getProtection: () => ProtectionState);
+    list(): AiTask[];
+    get(id: string): AiTask;
+    create(prompt: string, actor: string, enrich?: boolean): Promise<AiTask>;
+    approve(id: string, actor: string): AiTask;
+    /** Cancel a planned/running task — mark remaining steps skipped. */
+    cancel(id: string, actor: string): AiTask;
+    /** Reject a single step (supervised). */
+    rejectStep(id: string, stepId: string, actor: string): AiTask;
+    /**
+     * Execute approved (or non-approval) steps via real tool executor.
+     */
+    execute(id: string, actor: string, roles: SystemRole[]): Promise<AiTask>;
+}
+//# sourceMappingURL=ai-task-service.d.ts.map

package/dist/services/ai-task-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-task-service.d.ts","sourceRoot":"","sources":["../../src/services/ai-task-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAIL,KAAK,MAAM,EAEZ,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAsBpD,qBAAa,aAAa;IAKtB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAThC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;gBAGlC,EAAE,EAAE,WAAW,EACE,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,aAAa,EACxB,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,UAAU,EACf,aAAa,EAAE,MAAM,eAAe;IAKvD,IAAI,IAAI,MAAM,EAAE;IAIhB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IAMjB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,UAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAqB3E,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAa1C,oEAAoE;IACpE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAwBzC,yCAAyC;IACzC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAoB7D;;OAEG;IACG,OAAO,CACX,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,UAAU,EAAE,GAClB,OAAO,CAAC,MAAM,CAAC;CAyEnB"}

package/dist/services/ai-task-service.js

@@ -0,0 +1,208 @@
+/**
+ * Persist AI tasks and execute approved steps through the secure tool gate.
+ */
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+import { approveTaskSteps, createAiTask, enrichPlanWithLlm, } from '../skills/task-planner.js';
+import { executeToolCall } from '../security/tool-executor.js';
+class DbTaskStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    save(task) {
+        const list = this.db.snapshot.ai_tasks;
+        const i = list.findIndex((t) => t.id === task.id);
+        if (i >= 0)
+            list[i] = task;
+        else
+            list.unshift(task);
+        this.db.persist();
+    }
+    get(id) {
+        return this.db.snapshot.ai_tasks.find((t) => t.id === id);
+    }
+    list() {
+        return this.db.snapshot.ai_tasks.map((t) => ({
+            ...t,
+            steps: t.steps.map((s) => ({ ...s })),
+        }));
+    }
+}
+export class AiTaskService {
+    allowlist;
+    approvals;
+    host;
+    audit;
+    llm;
+    getProtection;
+    store;
+    constructor(db, allowlist, approvals, host, audit, llm, getProtection) {
+        this.allowlist = allowlist;
+        this.approvals = approvals;
+        this.host = host;
+        this.audit = audit;
+        this.llm = llm;
+        this.getProtection = getProtection;
+        this.store = new DbTaskStore(db);
+    }
+    list() {
+        return this.store.list();
+    }
+    get(id) {
+        const t = this.store.get(id);
+        if (!t)
+            throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.auto.t0500', { v0: (id) }), { httpStatus: 404 });
+        return t;
+    }
+    async create(prompt, actor, enrich = true) {
+        let task = createAiTask({
+            prompt,
+            actor,
+            allowlist: this.allowlist,
+            store: this.store,
+        });
+        if (enrich) {
+            task = await enrichPlanWithLlm(task, this.llm);
+            this.store.save(task);
+        }
+        this.audit.append({
+            actor,
+            action: 'ai.task.create',
+            resource: task.id,
+            detail: { prompt, steps: task.steps.map((s) => s.tool) },
+            ok: true,
+        });
+        return task;
+    }
+    approve(id, actor) {
+        const task = this.get(id);
+        const updated = approveTaskSteps(task, this.store);
+        this.audit.append({
+            actor,
+            action: 'ai.task.approve',
+            resource: id,
+            detail: {},
+            ok: true,
+        });
+        return updated;
+    }
+    /** Cancel a planned/running task — mark remaining steps skipped. */
+    cancel(id, actor) {
+        const task = this.get(id);
+        if (task.status === 'completed' || task.status === 'cancelled') {
+            return task;
+        }
+        for (const step of task.steps) {
+            if (step.status === 'planned' || step.status === 'approved') {
+                step.status = 'skipped';
+                step.error = 'cancelled by operator';
+            }
+        }
+        task.status = 'cancelled';
+        task.updated_at = new Date().toISOString();
+        this.store.save(task);
+        this.audit.append({
+            actor,
+            action: 'ai.task.cancel',
+            resource: id,
+            detail: {},
+            ok: true,
+        });
+        return task;
+    }
+    /** Reject a single step (supervised). */
+    rejectStep(id, stepId, actor) {
+        const task = this.get(id);
+        const step = task.steps.find((s) => s.id === stepId);
+        if (!step) {
+            throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.auto.n0864'), { httpStatus: 404 });
+        }
+        step.status = 'rejected';
+        step.error = `rejected by ${actor}`;
+        task.updated_at = new Date().toISOString();
+        this.store.save(task);
+        this.audit.append({
+            actor,
+            action: 'ai.task.reject_step',
+            resource: id,
+            detail: { stepId },
+            ok: true,
+        });
+        return task;
+    }
+    /**
+     * Execute approved (or non-approval) steps via real tool executor.
+     */
+    async execute(id, actor, roles) {
+        const task = this.get(id);
+        task.status = 'running';
+        this.store.save(task);
+        for (const step of task.steps) {
+            if (step.status === 'rejected' || step.status === 'skipped')
+                continue;
+            // auto-approve low risk planned steps for execution path
+            if (step.status === 'planned' && !step.requiresApproval) {
+                step.status = 'approved';
+            }
+            if (step.status !== 'approved' && step.status !== 'planned')
+                continue;
+            if (step.requiresApproval && step.status !== 'approved') {
+                step.status = 'skipped';
+                step.error = 'requires human approval — call approve first';
+                continue;
+            }
+            try {
+                let approvalId;
+                if (step.requiresApproval) {
+                    // create and auto-link if already task-approved: still need approval queue record for tool gate
+                    const pending = this.approvals.request({
+                        action: step.tool,
+                        risk: step.risk,
+                        requestedBy: actor,
+                        payload: step.args,
+                    });
+                    this.approvals.approve(pending.id, actor);
+                    approvalId = pending.id;
+                }
+                const result = await executeToolCall({ tool: step.tool, args: step.args }, {
+                    allowlist: this.allowlist,
+                    approvals: this.approvals,
+                    actor,
+                    roles,
+                    host: this.host,
+                    audit: this.audit,
+                    protection: this.getProtection(),
+                }, approvalId);
+                if (!result.allowed) {
+                    step.status = 'failed';
+                    step.error = result.denialReason;
+                }
+                else if (result.requiresApproval && !result.result) {
+                    step.status = 'failed';
+                    step.error = 'approval still required';
+                }
+                else {
+                    step.status = 'executed';
+                    step.result = result.result;
+                }
+            }
+            catch (e) {
+                step.status = 'failed';
+                step.error = e instanceof Error ? e.message : String(e);
+            }
+        }
+        const failed = task.steps.some((s) => s.status === 'failed');
+        task.status = failed ? 'failed' : 'completed';
+        task.updated_at = new Date().toISOString();
+        this.store.save(task);
+        this.audit.append({
+            actor,
+            action: 'ai.task.execute',
+            resource: id,
+            detail: { status: task.status },
+            ok: !failed,
+        });
+        return task;
+    }
+}
+//# sourceMappingURL=ai-task-service.js.map