@blogic-cz/agent-tools 1.7.0 → 1.7.1

package/dist/credential-guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/credential-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAmB,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAM5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,CAAC;AAQF,+CAA+C;AAC/C,MAAM,MAAM,eAAe,GAAG;IAC5B,uBAAuB,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IACxE,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACrD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjF,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACxD,CAAC;AAw7GF,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAMD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,eAAe,CA6hBrF;AAQD,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,UA//HD,SAAS,UAAU,UAAU,KAAK,IA+/HM,CAAC;AAE5E,oDAAoD;AACpD,eAAO,MAAM,aAAa,YAjgIC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAigIjB,CAAC;AAExD,yEAAyE;AACzE,eAAO,MAAM,aAAa,aAngIE,MAAM,KAAK,OAmgIgB,CAAC;AAExD,yDAAyD;AACzD,eAAO,MAAM,aAAa,aArgIE,MAAM,KAAK,OAqgIgB,CAAC;AAExD,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,YAvgIC,MAAM,KAAK,OAugI0B,CAAC;AAE1E,iDAAiD;AACjD,eAAO,MAAM,iBAAiB,YAzgIC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAygIf,CAAC;AAEhE,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,YA3gIC,MAAM,KAAK,OA2gIsB,CAAC;AAElE,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,YA7gIC,MAAM,KAAK,MAAM,GAAG,IA6gIa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/credential-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAmB,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAM5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,CAAC;AAQF,+CAA+C;AAC/C,MAAM,MAAM,eAAe,GAAG;IAC5B,uBAAuB,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IACxE,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACrD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjF,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACxD,CAAC;AAs9GF,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAMD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,eAAe,CA6hBrF;AAQD,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,UA7hID,SAAS,UAAU,UAAU,KAAK,IA6hIM,CAAC;AAE5E,oDAAoD;AACpD,eAAO,MAAM,aAAa,YA/hIC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IA+hIjB,CAAC;AAExD,yEAAyE;AACzE,eAAO,MAAM,aAAa,aAjiIE,MAAM,KAAK,OAiiIgB,CAAC;AAExD,yDAAyD;AACzD,eAAO,MAAM,aAAa,aAniIE,MAAM,KAAK,OAmiIgB,CAAC;AAExD,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,YAriIC,MAAM,KAAK,OAqiI0B,CAAC;AAE1E,iDAAiD;AACjD,eAAO,MAAM,iBAAiB,YAviIC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAuiIf,CAAC;AAEhE,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,YAziIC,MAAM,KAAK,OAyiIsB,CAAC;AAElE,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,YA3iIC,MAAM,KAAK,MAAM,GAAG,IA2iIa,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blogic-cz/agent-tools",
-  "version": "1.7.0",
+  "version": "1.7.1",
   "description": "CLI tools for AI coding agent workflows — GitHub, database, Kubernetes, Azure platform, Azure DevOps, logs, sessions, and audit",
   "keywords": [
     "agent",

package/src/credential-guard/index.ts

@@ -1696,9 +1696,11 @@ function literalSqlArgumentIndex(argv: string[]): number | undefined {
   return sql;
 }
 
-/** echo and printf print their arguments; grep -o, rg and git grep print matched pattern text. */
 function isLiteralTextProducer(argv: string[]): boolean {
-  return isPassiveTextCommand(argv) && argv[0]?.split("/").at(-1) !== "head";
+  return (
+    (argv[0]?.split("/").at(-1) === "git" && argv[1] === "commit") ||
+    (isPassiveTextCommand(argv) && argv[0]?.split("/").at(-1) !== "head")
+  );
 }
 
 function awkProgramIndex(argv: string[]): number | undefined {
@@ -2461,6 +2463,22 @@ function isReadonlySedPrint(argv: string[]): boolean {
   );
 }
 
+function gitCommitExecutionArguments(argv: string[]): string[] {
+  if (argv[0]?.split("/").at(-1) !== "git" || argv[1] !== "commit") return argv;
+  const executionArguments = [...argv];
+  for (let index = 2; index < argv.length && argv[index] !== "--"; index++) {
+    const argument = argv[index] ?? "";
+    if (argument === "-m" || argument === "--message") {
+      if (index + 1 < argv.length) executionArguments[++index] = "";
+    } else if (argument.startsWith("--message=")) {
+      executionArguments[index] = "--message=";
+    } else if (argument.startsWith("-m") && argument.length > 2) {
+      executionArguments[index] = "-m";
+    }
+  }
+  return executionArguments;
+}
+
 function hasStaticEnvironmentRead(
   argv: string[],
   allowedNames: Set<string>,
@@ -2517,7 +2535,7 @@ function hasStaticEnvironmentRead(
       "jq",
       "docker",
     ].includes(name ?? "") &&
-      mentionsEnvironmentRead(argv.join(" ")))
+      mentionsEnvironmentRead(gitCommitExecutionArguments(argv).join(" ")))
   );
 }
 
@@ -2661,6 +2679,18 @@ function hasEnvironmentRead(
   ) {
     return true;
   }
+  if (
+    parsed.redirects.length > 0 &&
+    unwrapped.some(
+      (producer, index) =>
+        producer[0]?.split("/").at(-1) === "git" &&
+        producer[1] === "commit" &&
+        mentionsEnvironmentRead(producer.join(" ")) &&
+        unwrapped.slice(index + 1).some((consumer) => !isPassiveTextCommand(consumer)),
+    )
+  ) {
+    return true;
+  }
   if (
     parsed.redirects.length > 0 &&
     pipelines.some((pipeline) =>