承認ダイアログに指が慣れる前に — Antigravity 統一パーミッションで許可設定を1枚に束ねる

// permission/classify.ts
export type Tier = "read" | "reversible" | "remote" | "irreversible";
 
export interface Operation {
  kind: "fs" | "shell" | "git" | "http";
  action: string;      // 例: "write", "delete", "push", "POST"
  target: string;      // 例: パス・URL・リモート名
}
 
// 取り消せない、または課金・公開につながる操作の判定
function isIrreversible(op: Operation): boolean {
  if (op.kind === "fs" && op.action === "delete") return true;
  if (op.kind === "git" && op.action === "push" && /--force/.test(op.target)) return true;
  if (op.kind === "http" && op.action === "POST" && /\/(billing|charge|publish)/.test(op.target)) return true;
  return false;
}
 
// 外部へ影響が出る操作の判定
function isRemote(op: Operation): boolean {
  if (op.kind === "git" && op.action === "push") return true;
  if (op.kind === "http" && op.action !== "GET") return true;
  if (op.kind === "shell" && /\b(deploy|wrangler|gcloud)\b/.test(op.target)) return true;
  return false;
}
 
// ローカルで取り消せる変更の判定
function isReversible(op: Operation): boolean {
  if (op.kind === "fs" && op.action === "write") return true;   // 一時・ソースへの書き込み
  if (op.kind === "git" && ["add", "commit"].includes(op.action)) return true;
  return false;
}
 
export function classify(op: Operation): Tier {
  if (isIrreversible(op)) return "irreversible";
  if (isRemote(op)) return "remote";
  if (isReversible(op)) return "reversible";
  return "read";
}

// permission/policy.ts
import { classify, type Operation, type Tier } from "./classify";
 
export type Decision = "allow" | "prompt" | "deny";
 
// 既定は拒否寄り。明示した区分だけを緩める（deny by default）
const POLICY: Record<Tier, Decision> = {
  read: "allow",
  reversible: "allow",
  remote: "prompt",
  irreversible: "deny",   // 手動でしか行わない操作は最初から遮断
};
 
// 例外の上書き。ここだけを見れば「何を特別扱いしているか」が分かる
const OVERRIDES: Array<{ match: (op: Operation) => boolean; decision: Decision }> = [
  // 検証用のステージングへのデプロイは承認に緩める
  { match: (op) => op.kind === "shell" && /wrangler deploy --env staging/.test(op.target), decision: "prompt" },
  // 本番の課金APIは区分に関わらず常に拒否
  { match: (op) => op.kind === "http" && /\/billing\/live/.test(op.target), decision: "deny" },
];
 
export function decide(op: Operation): { tier: Tier; decision: Decision } {
  const tier = classify(op);
  for (const rule of OVERRIDES) {
    if (rule.match(op)) return { tier, decision: rule.decision };
  }
  return { tier, decision: POLICY[tier] };
}

// permission/token-store.ts
import { execFile } from "node:child_process";
import { promisify } from "node:util";
const run = promisify(execFile);
 
// macOS のキーチェーンを例に、トークンをOSの資格情報ストアへ委ねる
const SERVICE = "antigravity-lab";
 
export async function saveToken(account: string, token: string): Promise<void> {
  // 既存を消してから追加（上書き時の重複登録を避ける）
  await run("security", ["delete-generic-password", "-s", SERVICE, "-a", account]).catch(() => {});
  await run("security", ["add-generic-password", "-s", SERVICE, "-a", account, "-w", token]);
}
 
export async function loadToken(account: string): Promise<string | null> {
  try {
    const { stdout } = await run("security", ["find-generic-password", "-s", SERVICE, "-a", account, "-w"]);
    return stdout.trim();
  } catch {
    return null;   // 未保存なら null を返し、呼び出し側で認証フローへ
  }
}

// permission/audit.ts
import { appendFile } from "node:fs/promises";
import { decide } from "./policy";
import type { Operation } from "./classify";
 
export async function guarded(op: Operation): Promise<Operation> {
  const { tier, decision } = decide(op);
  const line = JSON.stringify({
    ts: new Date().toISOString(),
    kind: op.kind, action: op.action, target: op.target,
    tier, decision,
  });
  await appendFile("permission-audit.log", line + "\n");
  if (decision === "deny") throw new Error(`denied: ${op.kind}:${op.action} ${op.target}`);
  return op;   // prompt/allow は呼び出し側の承認フローへ渡す
}

# 直近ログの区分内訳を集計する
grep -o '"decision":"[a-z]*"' permission-audit.log | sort | uniq -c