@blogic-cz/agent-tools 0.18.1 → 1.1.0

package/src/shared/azure-credentials.ts

@@ -0,0 +1,50 @@
+/**
+ * Azure CLI surfaces that return credential material.
+ *
+ * Shared because two tools reach the Azure CLI: az-tool for the platform, and
+ * azdo-tool for the `acr`/`account` groups it still passes through for
+ * backwards compatibility. Both must refuse the same commands — a term added
+ * to one list and not the other reopens a credential read through whichever
+ * tool was missed.
+ */
+
+/** Read-shaped verbs that return credential material, in any command group. */
+export const CREDENTIAL_BLOCKED_VERBS = [
+  "get-access-token",
+  "get-credentials",
+  "get-secrets",
+  "list-account-keys",
+  "list-connection-strings",
+  "list-keys",
+  "list-publishing-credentials",
+  "list-publishing-profiles",
+  "list-secrets",
+  "show-connection-string",
+  "show-secret",
+] as const;
+
+/**
+ * Command group segments that carry credential material. For these the listing
+ * itself returns values — `az storage account keys list` and
+ * `az webapp config appsettings list` both print secrets.
+ */
+export const CREDENTIAL_BLOCKED_SEGMENTS = [
+  "admin-key",
+  "appsettings",
+  "connection-string",
+  "credential",
+  "credentials",
+  "key",
+  "keys",
+  "password",
+  "query-key",
+  "sas",
+  "secret",
+  "secrets",
+] as const;
+
+export const isCredentialBlockedVerb = (word: string): boolean =>
+  (CREDENTIAL_BLOCKED_VERBS as readonly string[]).includes(word);
+
+export const isCredentialBlockedSegment = (word: string): boolean =>
+  (CREDENTIAL_BLOCKED_SEGMENTS as readonly string[]).includes(word);

package/src/shared/binary-preflight.ts

@@ -1,6 +1,6 @@
 export const REQUIRED_BINARIES = {
   az: {
-    tools: "az-tool",
+    tools: "az-tool and azdo-tool",
     install:
       "Install it with `brew install azure-cli` (macOS) or see https://learn.microsoft.com/cli/azure/install-azure-cli.",
   },

package/dist/az-tool/build.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/az-tool/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3F,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC;;GAEG;AACH,eAAO,MAAM,gBAAgB,yLAuD3B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,YAAY;UAOP,QAAQ,EAAE;YACN,QAAQ,EAAE;wIAE9B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,YAAY,qLAkCvB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,kBAAkB,iMAwC7B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,kBAAkB,wLAgC7B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;0IAazB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;aAClB,MAAM;iBACF,MAAM;UACb,MAAM;oLAwDZ,CAAC"}

package/dist/az-tool/extract-option-value.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"extract-option-value.d.ts","sourceRoot":"","sources":["../../src/az-tool/extract-option-value.ts"],"names":[],"mappings":"AAAA,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CAQpB"}

package/dist/az-tool/transformers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"transformers.d.ts","sourceRoot":"","sources":["../../src/az-tool/transformers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,KAAK,WAAW,GAAG;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;CAChC,CAAC;AAwCF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAoC/D;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CA6B5D;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAQjE"}