@aexhq/cli 0.21.0 → 0.22.1

package/dist/cli.mjs

@@ -350,6 +350,25 @@ var SKILL_BUNDLE_LIMITS = {
   defaultDirMode: 493
 };
 var ASSET_ID_PATTERN = /^asset_[A-Za-z0-9_-]{8,128}$/;
+var MOUNT_PATH_PATTERN = /^\/(?:[^/\0\\]+\/?)*$/;
+var MOUNT_PATH_MAX_LENGTH = 512;
+function assertValidMountPath(value, field) {
+  if (value.length === 0 || value.length > MOUNT_PATH_MAX_LENGTH) {
+    throw new Error(`${field} must be 1..${MOUNT_PATH_MAX_LENGTH} chars`);
+  }
+  if (!value.startsWith("/")) {
+    throw new Error(`${field} must be an absolute path starting with '/'`);
+  }
+  if (value.includes("\0") || value.includes("\\")) {
+    throw new Error(`${field} must not contain NUL or backslash`);
+  }
+  if (value.split("/").some((seg) => seg === "..")) {
+    throw new Error(`${field} must not contain '..' traversal segments`);
+  }
+  if (!MOUNT_PATH_PATTERN.test(value)) {
+    throw new Error(`${field} must match ${MOUNT_PATH_PATTERN.source}`);
+  }
+}
 function parseSkillRef(input, path) {
   if (input === null || typeof input !== "object" || Array.isArray(input)) {
     throw new Error(`${path} must be a SkillRef object`);
@@ -401,8 +420,11 @@ function parseAssetRefFields(record, path) {
     throw new Error(`${path}.name must be a non-empty string (<= 128 chars)`);
   }
   const mountPath = record.mountPath;
-  if (mountPath !== void 0 && (typeof mountPath !== "string" || mountPath.length === 0)) {
-    throw new Error(`${path}.mountPath, when provided, must be a non-empty string`);
+  if (mountPath !== void 0) {
+    if (typeof mountPath !== "string") {
+      throw new Error(`${path}.mountPath, when provided, must be a string`);
+    }
+    assertValidMountPath(mountPath, `${path}.mountPath`);
   }
   return {
     kind: "asset",
@@ -879,7 +901,16 @@ var forbiddenStringPatterns = Object.freeze([
   { reason: "vault_id", regex: /\b(?:vault|vlt|secret)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i },
   {
     reason: "private_resource_handle",
-    regex: /\b(?:machine|session|agent|file|skill|env|resource|handle|token_hash|bearer_hash)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i
+    // `<keyword><sep><id>` opaque handles (`session_a1B2c3D4e5`, `file_9f8e7d…`).
+    // The keyword set overlaps ordinary English (agent/file/skill/resource/…), so
+    // the bare shape also matched documentation prose that simply chains those
+    // words with `_`/`-` (`agent_decision_failure`, `file_grounded`,
+    // `session_handoff_contract`, `agent-judgment` — read straight out of a
+    // skill-pack doc in tool-result text). The `accept` predicate keeps the shape
+    // but requires the id segment to look minted rather than spelled — i.e. carry
+    // a digit — so genuine handles stay flagged while dictionary-word prose does not.
+    regex: /\b(?:machine|session|agent|file|skill|env|resource|handle|token_hash|bearer_hash)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i,
+    accept: isMintedResourceHandle
   },
   {
     reason: "high_entropy_token",
@@ -909,6 +940,11 @@ function isHighEntropySecretRun(run) {
   }
   return highEntropyShannonBits(run) >= 3;
 }
+function isMintedResourceHandle(match) {
+  const separatorIndex = match.search(/[_:-]/);
+  const id = match.slice(separatorIndex + 1);
+  return /\d/.test(id);
+}
 function highEntropyCharClassCount(value) {
   let count = 0;
   if (/[a-z]/.test(value))

package/dist/cli.mjs.sha256

@@ -1 +1 @@
-d05e5e074b577553d20fa3680f834b7941fe0cb7692c0a743975fcf36c4ec9b5  cli.mjs
+84dede6ed017defb49617f6f799912364125363867fa9ca8054150ebc0446286  cli.mjs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aexhq/cli",
-  "version": "0.21.0",
+  "version": "0.22.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/aexhq/aex.git"
@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "fflate": "^0.8.2",
-    "@aexhq/contracts": "0.21.0"
+    "@aexhq/contracts": "0.22.1"
   },
   "devDependencies": {
     "esbuild": "^0.28.0"