ailock/dist/core/platform/WindowsAdapter.js

AI-Proof File Guard - Protect sensitive files from accidental AI modifications

import { Platform } from '../platform.js';
import { BasePlatformAdapter } from './BasePlatformAdapter.js';
import { SecureCommandExecutor } from '../../security/CommandExecutor.js';
import path from 'path';
/**
 * Windows platform adapter for file locking
 */
export class WindowsAdapter extends BasePlatformAdapter {
    platformType = Platform.WINDOWS;
    constructor() {
        super();
        // Add Windows-specific commands to the allowed list
        this.commandExecutor = new SecureCommandExecutor(['net']);
    }
    /**
     * Lock a file on Windows
     */
    async lockFile(filePath) {
        const absolutePath = path.resolve(filePath);
        // Validate path
        await this.pathValidator.validateAndSanitizePath(absolutePath);
        // On Windows, we use attrib to set read-only
        await this.setReadOnlyAttribute(absolutePath, true);
        // Additionally, we can use ACLs for stronger protection
        await this.setWindowsACL(absolutePath, true);
    }
    /**
     * Unlock a file on Windows
     */
    async unlockFile(filePath) {
        const absolutePath = path.resolve(filePath);
        // Validate path
        await this.pathValidator.validateAndSanitizePath(absolutePath);
        // Remove ACL restrictions first
        await this.setWindowsACL(absolutePath, false);
        // Then remove read-only attribute
        await this.setReadOnlyAttribute(absolutePath, false);
    }
    /**
     * Check if a file is locked on Windows
     */
    async isLocked(filePath) {
        const absolutePath = path.resolve(filePath);
        try {
            // Check if file has read-only attribute
            const result = await this.commandExecutor.executeCommand('attrib', [absolutePath]);
            return result.stdout.includes(' R ');
        }
        catch {
            // If we can't check, use the base implementation
            return await this.isReadOnly(absolutePath);
        }
    }
    /**
     * Windows doesn't support immutable attributes like Unix
     */
    supportsImmutable() {
        return false;
    }
    /**
     * Check if a file has immutable attributes (always false on Windows)
     */
    async checkImmutable(filePath) {
        return false;
    }
    /**
     * Set or remove the read-only attribute using attrib command
     */
    async setReadOnlyAttribute(filePath, readOnly) {
        try {
            const flag = readOnly ? '+R' : '-R';
            await this.commandExecutor.executeCommand('attrib', [flag, filePath]);
        }
        catch (error) {
            // Fallback to chmod if attrib fails
            if (readOnly) {
                await this.makeReadOnly(filePath);
            }
            else {
                await this.makeWritable(filePath);
            }
        }
    }
    /**
     * Set Windows ACLs for additional protection
     */
    async setWindowsACL(filePath, lock) {
        try {
            if (lock) {
                // Remove write permissions for current user using icacls
                // /deny removes write (W) and delete (D) permissions
                const username = process.env.USERNAME || process.env.USER || 'Everyone';
                await this.commandExecutor.executeCommand('icacls', [
                    filePath,
                    '/deny',
                    `${username}:(W,D)`,
                    '/Q'
                ]);
            }
            else {
                // Reset permissions to inherited defaults
                await this.commandExecutor.executeCommand('icacls', [
                    filePath,
                    '/reset',
                    '/Q'
                ]);
            }
        }
        catch (error) {
            // ACL operations might fail without admin rights
            // Continue with basic protection
            console.debug(`Could not modify Windows ACLs: ${error}`);
        }
    }
    /**
     * Check if running with administrator privileges
     */
    async isAdmin() {
        try {
            await this.commandExecutor.executeCommand('net', ['session']);
            return true;
        }
        catch {
            return false;
        }
    }
}
//# sourceMappingURL=WindowsAdapter.js.map