Class SecurityPolicy

Index

Constructors

Methods

validate logExecution isToolAllowed isSelectorBlocked sanitizeSelector isRateLimited getRateLimitStatus requiresConfirmation setConfirmationHandler getAuditLog clearAuditLog reset getConfig

Constructors

constructor

new SecurityPolicy(config?: SecurityPolicyConfig): SecurityPolicy
Parameters
- config: SecurityPolicyConfig = {}
Returns SecurityPolicy
- Defined in security/policy.ts:29

Methods

validate

validate(
tool: string,
params: Record<string, unknown>,
): Promise<ToolResult<null> | null>
Validate and optionally gate a tool execution through all security checks. Returns a ToolResult with an error if blocked, or null if the action is allowed.
Parameters
- tool: string
- params: Record<string, unknown>
Returns Promise<ToolResult<null> | null>
- Defined in security/policy.ts:52

logExecution

logExecution(
    tool: string,
    params: Record<string, unknown>,
    success: boolean,
    duration: number,
    error?: string,
): void
Log the result of a tool execution (success or error).
Parameters
- tool: string
- params: Record<string, unknown>
- success: boolean
- duration: number
- Optionalerror: string
Returns void
- Defined in security/policy.ts:100

isToolAllowed

isToolAllowed(tool: string): boolean
Parameters
- tool: string
Returns boolean
- Defined in security/policy.ts:114

isSelectorBlocked

isSelectorBlocked(selector: string): boolean
Parameters
- selector: string
Returns boolean
- Defined in security/policy.ts:121

sanitizeSelector

sanitizeSelector(selector: string): string | null
Parameters
- selector: string
Returns string | null
- Defined in security/policy.ts:154

isRateLimited

isRateLimited(): boolean
Returns boolean
- Defined in security/policy.ts:173

getRateLimitStatus

getRateLimitStatus(): { remaining: number; resetMs: number } | null
Returns { remaining: number; resetMs: number } | null
- Defined in security/policy.ts:188

requiresConfirmation

requiresConfirmation(tool: string): boolean
Parameters
- tool: string
Returns boolean
- Defined in security/policy.ts:205

setConfirmationHandler

setConfirmationHandler(handler: ConfirmationHandler | undefined): void
Parameters
- handler: ConfirmationHandler | undefined
Returns void
- Defined in security/policy.ts:209

getAuditLog

getAuditLog(): readonly AuditLogEntry[]
Returns readonly AuditLogEntry[]
- Defined in security/policy.ts:216

clearAuditLog

clearAuditLog(): void
Returns void
- Defined in security/policy.ts:220

reset

reset(): void
Reset all internal state (rate limiter, audit log).

Returns void
- Defined in security/policy.ts:267

getConfig

getConfig(): Readonly<SecurityPolicyConfig>
Returns Readonly<SecurityPolicyConfig>
- Defined in security/policy.ts:272