@aexhq/cli 0.20.0 → 0.22.0

package/dist/cli.mjs

@@ -350,6 +350,25 @@ var SKILL_BUNDLE_LIMITS = {
   defaultDirMode: 493
 };
 var ASSET_ID_PATTERN = /^asset_[A-Za-z0-9_-]{8,128}$/;
+var MOUNT_PATH_PATTERN = /^\/(?:[^/\0\\]+\/?)*$/;
+var MOUNT_PATH_MAX_LENGTH = 512;
+function assertValidMountPath(value, field) {
+  if (value.length === 0 || value.length > MOUNT_PATH_MAX_LENGTH) {
+    throw new Error(`${field} must be 1..${MOUNT_PATH_MAX_LENGTH} chars`);
+  }
+  if (!value.startsWith("/")) {
+    throw new Error(`${field} must be an absolute path starting with '/'`);
+  }
+  if (value.includes("\0") || value.includes("\\")) {
+    throw new Error(`${field} must not contain NUL or backslash`);
+  }
+  if (value.split("/").some((seg) => seg === "..")) {
+    throw new Error(`${field} must not contain '..' traversal segments`);
+  }
+  if (!MOUNT_PATH_PATTERN.test(value)) {
+    throw new Error(`${field} must match ${MOUNT_PATH_PATTERN.source}`);
+  }
+}
 function parseSkillRef(input, path) {
   if (input === null || typeof input !== "object" || Array.isArray(input)) {
     throw new Error(`${path} must be a SkillRef object`);
@@ -401,8 +420,11 @@ function parseAssetRefFields(record, path) {
     throw new Error(`${path}.name must be a non-empty string (<= 128 chars)`);
   }
   const mountPath = record.mountPath;
-  if (mountPath !== void 0 && (typeof mountPath !== "string" || mountPath.length === 0)) {
-    throw new Error(`${path}.mountPath, when provided, must be a non-empty string`);
+  if (mountPath !== void 0) {
+    if (typeof mountPath !== "string") {
+      throw new Error(`${path}.mountPath, when provided, must be a string`);
+    }
+    assertValidMountPath(mountPath, `${path}.mountPath`);
   }
   return {
     kind: "asset",
@@ -838,7 +860,7 @@ function visitCustodyValue(input, path, findings) {
 }
 function scanStringValue(value, path, findings) {
   for (const pattern of forbiddenStringPatterns) {
-    if (pattern.regex.test(value)) {
+    if (matchesForbiddenPattern(pattern, value)) {
       findings.push(Object.freeze({
         path,
         reason: pattern.reason,
@@ -847,11 +869,32 @@ function scanStringValue(value, path, findings) {
     }
   }
 }
+function matchesForbiddenPattern(pattern, value) {
+  if (!pattern.accept) {
+    return pattern.regex.test(value);
+  }
+  const scan = pattern.regex.global ? pattern.regex : new RegExp(pattern.regex.source, `${pattern.regex.flags}g`);
+  scan.lastIndex = 0;
+  let match;
+  while ((match = scan.exec(value)) !== null) {
+    if (pattern.accept(match[0])) {
+      return true;
+    }
+    if (match.index === scan.lastIndex) {
+      scan.lastIndex++;
+    }
+  }
+  return false;
+}
 var forbiddenStringPatterns = Object.freeze([
   { reason: "bearer_token", regex: /\bBearer\s+[A-Za-z0-9._~+/=-]{8,}/i },
   {
     reason: "provider_key",
-    regex: /\b(?:sk-(?:ant|proj|live|test|deepseek|openai)|xox[baprs]-|AIza)[A-Za-z0-9_-]{8,}/i
+    // Prefixed provider keys (`sk-…`, Slack `xox*-…`, Google `AIza…`). The bare
+    // `sk-` body is intentionally generic so an unrecognised vendor's `sk-` key
+    // (e.g. DeepSeek `sk-<hex>`, OpenRouter `sk-or-…`) is still caught by shape,
+    // not left to the narrowed entropy catch-all below.
+    regex: /\b(?:sk-[A-Za-z0-9_-]{16,}|xox[baprs]-[A-Za-z0-9-]{8,}|AIza[A-Za-z0-9_-]{8,})/i
   },
   { reason: "signed_url", regex: /[?&](?:X-Amz-Signature|X-Amz-Credential|X-Amz-Algorithm|AWSAccessKeyId)=/i },
   { reason: "object_store_key", regex: /(^|[\s"'`])(?:runs|assets)\/[^?<#\s"'`]+/i },
@@ -860,8 +903,59 @@ var forbiddenStringPatterns = Object.freeze([
     reason: "private_resource_handle",
     regex: /\b(?:machine|session|agent|file|skill|env|resource|handle|token_hash|bearer_hash)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i
   },
-  { reason: "high_entropy_token", regex: /\b(?=[A-Za-z0-9_-]{40,}\b)(?=.*[A-Za-z])(?=.*\d)[A-Za-z0-9_-]{40,}\b/ }
+  {
+    reason: "high_entropy_token",
+    // Catch-all for an unrecognised opaque secret blob. The candidate run
+    // EXCLUDES `_` (so `SCREAMING_SNAKE` env names and `slug_with_words` URL
+    // segments split instead of fusing into a phantom 40-char run — the live
+    // false positive was `ted_season_2_peacock_official_discussion_thread` in
+    // web-search result text and a fetched URL), and the `accept` predicate
+    // vetoes content-addressed hashes (md5/sha1/sha256 digests — the platform's
+    // OWN asset filenames) and low-entropy / single-class runs so only genuine
+    // opaque secrets remain. Slash-bearing secrets (signed URLs, connection
+    // strings, `Bearer …`) are covered by the named patterns above.
+    regex: /\b[A-Za-z0-9-]{40,}\b/,
+    accept: isHighEntropySecretRun
+  }
 ]);
+var CONTENT_HASH_RUN = /^(?:[0-9a-f]{32}|[0-9a-f]{40}|[0-9a-f]{64})$/i;
+function isHighEntropySecretRun(run) {
+  if (CONTENT_HASH_RUN.test(run)) {
+    return false;
+  }
+  if (!/[A-Za-z]/.test(run) || !/\d/.test(run)) {
+    return false;
+  }
+  if (highEntropyCharClassCount(run) < 2) {
+    return false;
+  }
+  return highEntropyShannonBits(run) >= 3;
+}
+function highEntropyCharClassCount(value) {
+  let count = 0;
+  if (/[a-z]/.test(value))
+    count++;
+  if (/[A-Z]/.test(value))
+    count++;
+  if (/[0-9]/.test(value))
+    count++;
+  return count;
+}
+function highEntropyShannonBits(value) {
+  if (value.length === 0) {
+    return 0;
+  }
+  const counts = /* @__PURE__ */ new Map();
+  for (const char of value) {
+    counts.set(char, (counts.get(char) ?? 0) + 1);
+  }
+  let bits = 0;
+  for (const count of counts.values()) {
+    const p = count / value.length;
+    bits -= p * Math.log2(p);
+  }
+  return bits;
+}
 function isForbiddenCustodyFieldName(key) {
   return /^(apiKey|secretValue|bearerHash|signedUrl|objectStoreKey|objectKey|vaultId|providerResponseBody|responseBody|privateResourceHandle|resourceHandle|rawBody)$/i.test(key);
 }

package/dist/cli.mjs.sha256

@@ -1 +1 @@
-cbf31722f64f1ca909287456236e1e689291516e227dcdd69935300bbc0994c9  cli.mjs
+bfd0fb573fa113fe08d69fc50f246c821bfc9e0acd9bddd6e92775d38120e201  cli.mjs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aexhq/cli",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/aexhq/aex.git"
@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "fflate": "^0.8.2",
-    "@aexhq/contracts": "0.20.0"
+    "@aexhq/contracts": "0.22.0"
   },
   "devDependencies": {
     "esbuild": "^0.28.0"