vitya
ca669d96e1
Copies source (no node_modules, dist, .tasks, .wiki, __pycache__) for: - projects-meta-mcp v2.25.0 (TypeScript/Node) - wiki-graph v0.3.1 (TypeScript/Node) - interns-mcp v0.3.3 (Python/FastMCP) .gitignore: exclude lib build artefacts (node_modules, dist, .venv, __pycache__, *.pyc) bootstrap.ps1: add MCP build step — npm install+build for TS servers, venv+pip for Python Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
65 lines
1.9 KiB
Python
65 lines
1.9 KiB
Python
"""Always-ask path matcher — safety enforcement for intern calls."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from pathlib import PurePath
|
|
|
|
# Patterns that always require explicit user approval before sending to an intern.
|
|
ALWAYS_ASK_PATTERNS: list[str] = [
|
|
"**/.env",
|
|
"**/.env.*",
|
|
"**/secrets/**",
|
|
"**/projects-secrets/**",
|
|
"**/credentials*",
|
|
"**/*.key",
|
|
"**/*.pem",
|
|
"**/.ssh/**",
|
|
"**/.aws/credentials",
|
|
"**/.aws/config",
|
|
"**/.netrc",
|
|
"**/.npmrc",
|
|
"**/.pypirc",
|
|
]
|
|
|
|
ALWAYS_ASK_REASON = (
|
|
"Path matched always-ask pattern. "
|
|
"Sending this file to an external endpoint requires explicit approval."
|
|
)
|
|
|
|
|
|
def check_paths(paths: list[str], extra_patterns: list[str] | None = None) -> list[dict]:
|
|
"""Check each path against always-ask patterns.
|
|
|
|
Returns list of blocked entries: [{"path": ..., "pattern": ..., "reason": ...}].
|
|
Empty list = all paths clear.
|
|
"""
|
|
patterns = list(ALWAYS_ASK_PATTERNS)
|
|
if extra_patterns:
|
|
patterns.extend(extra_patterns)
|
|
|
|
blocked = []
|
|
for p in paths:
|
|
pp = PurePath(p)
|
|
for pattern in patterns:
|
|
if pp.match(pattern):
|
|
blocked.append({"path": p, "pattern": pattern, "reason": ALWAYS_ASK_REASON})
|
|
break
|
|
return blocked
|
|
|
|
|
|
def always_ask_globs() -> list[str]:
|
|
"""Return glob patterns for always-ask paths, suitable for --ignore flags.
|
|
|
|
Used by tool-wrapping interns (e.g. repo_read) to inject --ignore flags
|
|
into subprocess calls, preventing repomix from packaging sensitive files
|
|
even if they exist inside the target directory.
|
|
"""
|
|
# Convert PurePath-style patterns to glob patterns repomix understands.
|
|
# Strip leading **/ since repomix --ignore uses gitignore-style patterns.
|
|
globs = []
|
|
for p in ALWAYS_ASK_PATTERNS:
|
|
if p.startswith("**/"):
|
|
globs.append(p[3:])
|
|
else:
|
|
globs.append(p)
|
|
return globs |