@blogic-cz/agent-tools 1.6.12 → 1.6.13

package/dist/credential-guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/credential-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAmB,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAK5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,CAAC;AAQF,+CAA+C;AAC/C,MAAM,MAAM,eAAe,GAAG;IAC5B,uBAAuB,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IACxE,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACrD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjF,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACxD,CAAC;AAg4FF,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAMD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,eAAe,CAoWrF;AAQD,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,UA9wGD,SAAS,UAAU,UAAU,KAAK,IA8wGM,CAAC;AAE5E,oDAAoD;AACpD,eAAO,MAAM,aAAa,YAhxGC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAgxGjB,CAAC;AAExD,yEAAyE;AACzE,eAAO,MAAM,aAAa,aAlxGE,MAAM,KAAK,OAkxGgB,CAAC;AAExD,yDAAyD;AACzD,eAAO,MAAM,aAAa,aApxGE,MAAM,KAAK,OAoxGgB,CAAC;AAExD,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,YAtxGC,MAAM,KAAK,OAsxG0B,CAAC;AAE1E,iDAAiD;AACjD,eAAO,MAAM,iBAAiB,YAxxGC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAwxGf,CAAC;AAEhE,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,YA1xGC,MAAM,KAAK,OA0xGsB,CAAC;AAElE,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,YA5xGC,MAAM,KAAK,MAAM,GAAG,IA4xGa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/credential-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAmB,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAK5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,CAAC;AAQF,+CAA+C;AAC/C,MAAM,MAAM,eAAe,GAAG;IAC5B,uBAAuB,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IACxE,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACrD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjF,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACxD,CAAC;AA66FF,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAMD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,eAAe,CA+XrF;AAQD,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,UAt1GD,SAAS,UAAU,UAAU,KAAK,IAs1GM,CAAC;AAE5E,oDAAoD;AACpD,eAAO,MAAM,aAAa,YAx1GC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAw1GjB,CAAC;AAExD,yEAAyE;AACzE,eAAO,MAAM,aAAa,aA11GE,MAAM,KAAK,OA01GgB,CAAC;AAExD,yDAAyD;AACzD,eAAO,MAAM,aAAa,aA51GE,MAAM,KAAK,OA41GgB,CAAC;AAExD,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,YA91GC,MAAM,KAAK,OA81G0B,CAAC;AAE1E,iDAAiD;AACjD,eAAO,MAAM,iBAAiB,YAh2GC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAg2Gf,CAAC;AAEhE,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,YAl2GC,MAAM,KAAK,OAk2GsB,CAAC;AAElE,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,YAp2GC,MAAM,KAAK,MAAM,GAAG,IAo2Ga,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blogic-cz/agent-tools",
-  "version": "1.6.12",
+  "version": "1.6.13",
   "description": "CLI tools for AI coding agent workflows — GitHub, database, Kubernetes, Azure platform, Azure DevOps, logs, sessions, and audit",
   "keywords": [
     "agent",

package/src/credential-guard/index.ts

@@ -422,6 +422,7 @@ function literalBindingText(
   command: string,
   name: string,
   value: string,
+  allowBrackets = false,
 ): { text: string; syntax: string } | undefined {
   let text = "";
   let syntax = "";
@@ -453,7 +454,11 @@ function literalBindingText(
       syntax += quote ? " ".repeat(value.length) : value;
       i += match[0].length - 1;
     } else {
-      if (char === "`" || (!quote && /[(){}*?[\]#]/.test(char))) return undefined;
+      if (
+        char === "`" ||
+        (!quote && (/[(){}*?#]/.test(char) || (!allowBrackets && (char === "[" || char === "]"))))
+      )
+        return undefined;
       text += char;
       syntax += quote ? " " : char;
     }
@@ -608,24 +613,45 @@ function literalShellBodies(command: string): string[] | undefined {
   return bodies;
 }
 
-function isProvedLiteralShellBody(body: string): boolean {
+function isProvedLiteralShellBody(
+  body: string,
+  allowedNames: Set<string>,
+  isPathBlocked: (path: string) => boolean,
+  onProvedPredicate: () => void,
+): boolean {
   if (!body.trim()) return true;
   const materialized = materializeLiteralShell(body)?.command ?? body;
   const parsed = parseStaticShellCommands(materialized);
-  if (!parsed || typeof parsed === "string" || !hasProvedNavigationSequence(materialized))
-    return false;
+  if (!parsed || typeof parsed === "string") {
+    let proved = false;
+    if (
+      hasEnvironmentVariableExpansionRead(body, allowedNames, isPathBlocked, undefined, () => {
+        proved = true;
+      }) ||
+      !proved
+    )
+      return false;
+    onProvedPredicate();
+    return true;
+  }
+  if (!hasProvedNavigationSequence(materialized)) return false;
   if (isStaticHerdrPrompt(materialized)) return true;
   return parsed.pipelines.flat().every((words) => {
     const argv = unwrapProofCommand(words, "\0");
     if (!argv) return false;
     if (argv[0]?.split("/").at(-1) === "env") return false;
     const name = unwrapStaticCommand(argv)[0]?.split("/").at(-1) ?? "";
-    if (isShellWord(name))
+    if (isShellWord(name)) {
+      const nested = literalShellBodies(
+        words.map((word) => "'" + word.replaceAll("'", "'\"'\"'") + "'").join(" "),
+      );
       return (
-        literalShellBodies(
-          words.map((word) => "'" + word.replaceAll("'", "'\"'\"'") + "'").join(" "),
-        ) !== undefined
+        nested !== undefined &&
+        nested.every((inner) =>
+          isProvedLiteralShellBody(inner, allowedNames, isPathBlocked, onProvedPredicate),
+        )
       );
+    }
     return (
       isProvedCwdSubprocessRole(unwrapStaticCommand(argv)) ||
       (name === "bun" && isSafeLocalAssignmentCommand(argv) && !isUnsupportedInlineRuntime(argv)) ||
@@ -2535,7 +2561,9 @@ function hasEnvironmentVariableExpansionRead(
   allowedNames: Set<string>,
   isPathBlocked: (path: string) => boolean,
   onProvedStatus?: (command: string) => void,
+  onProvedPredicate?: () => void,
 ): boolean {
+  const originalCommand = command;
   let heredoc = boundedHeredoc(command);
   while (heredoc) {
     // In an unquoted heredoc, # and quote characters are data, not shell syntax.
@@ -2544,6 +2572,7 @@ function hasEnvironmentVariableExpansionRead(
     heredoc = boundedHeredoc(command);
   }
   if (!command.includes("$") && !command.includes("`")) return false;
+  let predicateSyntaxIntact = command === originalCommand;
   let invalidExpansion = false;
   const assignments = getLeadingLiteralAssignments(command);
   let localIndex = 0;
@@ -2562,6 +2591,7 @@ function hasEnvironmentVariableExpansionRead(
   for (let i = 0; i < command.length; i++) {
     const char = command[i] ?? "";
     if (!quote && char === "#" && !wordStarted) {
+      predicateSyntaxIntact = false;
       while (i + 1 < command.length && command[i + 1] !== "\n") i++;
       continue;
     }
@@ -2810,6 +2840,21 @@ function hasEnvironmentVariableExpansionRead(
   const materialized = normalized.replaceAll("ENVVALUE", "SAFEENVVALUE");
   const blocked = hasSensitiveFileRead(materialized, isPathBlocked);
   if (!blocked && statusCaptures.size) onProvedStatus?.(materialized);
+  // This is a complete command proof, not merely a recursively safe shell body.
+  if (
+    !blocked &&
+    parsed.pipelines.length === 1 &&
+    parsed.pipelines[0]?.length === 1 &&
+    !parsed.redirects.length
+  ) {
+    const argv = unwrapProofCommand(parsed.pipelines[0]?.[0] ?? [], "ENVVALUE");
+    if (argv && isApprovedEnvironmentPredicate(argv) && predicateSyntaxIntact) {
+      // Roles alone cannot prove original shell boundaries or discarded controls.
+      // Brackets are enabled only for the completely proved bracket builtin.
+      const binding = literalBindingText(normalized, "", "", argv[0] === "[");
+      if (binding && !/[;&|<>\r\n]/.test(binding.syntax.trim())) onProvedPredicate?.();
+    }
+  }
   return blocked;
 }
 
@@ -3120,11 +3165,37 @@ export function createCredentialGuard(config?: CredentialGuardConfig): Credentia
     const shellBodies = literalShellBodies(command);
     if (!shellBodies || (shellBodies.length && shellDepth >= 8))
       return "cannot prove a bounded literal shell invocation";
+    const provedPredicateShellBodies: string[] = [];
     for (const body of shellBodies) {
       const reason = getDangerousBashReason(body, shellDepth + 1);
       if (reason || getBlockedCliTool(body, true, shellDepth + 1))
         return reason ?? "invokes a blocked CLI from a shell body";
-      if (!isProvedLiteralShellBody(body)) return "cannot prove a closed literal shell body";
+      if (
+        !isProvedLiteralShellBody(body, allowedEnvironmentVariables, isPathBlocked, () => {
+          provedPredicateShellBodies.push(body);
+        })
+      )
+        return "cannot prove a closed literal shell body";
+    }
+    if (provedPredicateShellBodies.length) {
+      const context = parseStaticShellCommands(command);
+      const binding = literalBindingText(command, "", "");
+      const argv =
+        context && typeof context !== "string"
+          ? unwrapProofCommand(context.pipelines[0]?.[0] ?? [], "\0")
+          : undefined;
+      if (
+        !context ||
+        typeof context === "string" ||
+        context.pipelines.length !== 1 ||
+        context.pipelines[0]?.length !== 1 ||
+        context.redirects.length !== 0 ||
+        !binding ||
+        /[;&|<>\r\n]/.test(binding.syntax.trim()) ||
+        !argv ||
+        !SHELL_IDENTITIES.has(argv[0] ?? "")
+      )
+        return "cannot prove a single literal shell predicate invocation";
     }
     const proof = materializeLiteralShell(command);
     if (!proof && /^\s*for\b/.test(command)) return "cannot prove a bounded literal shell loop";
@@ -3169,6 +3240,7 @@ export function createCredentialGuard(config?: CredentialGuardConfig): Credentia
         allowedEnvironmentVariables,
         allowPackageInventory,
         shellBodies.filter((body) => {
+          if (provedPredicateShellBodies.includes(body)) return true;
           const parsed = parseStaticShellCommands(body);
           return (
             parsed &&