@buyong/pi-codex-auto-review 0.0.0-stage → 0.2.2

package/dist/policy/shell.js

@@ -0,0 +1,151 @@
+import { GuardError } from "../contracts.js";
+/** A bounded literal grammar. Expansion/interpreters cannot borrow permission from their first word. */
+export function analyzeShell(command) {
+    if (typeof command !== "string" ||
+        !command.trim() ||
+        command.includes("\0"))
+        throw new GuardError("INVALID_COMMAND", "Invalid shell command");
+    if (command.length > 100_000)
+        return {
+            commands: [],
+            isSupported: false,
+            reason: "Command too long for literal analysis",
+        };
+    const commands = [];
+    let argv = [], writes = [], reads = [], word = "", hasWord = false, quote = "", redirect = "";
+    let isSupported = true, reason;
+    const unsupported = (text) => {
+        isSupported = false;
+        reason ??= text;
+    };
+    const finishWord = () => {
+        if (!hasWord)
+            return;
+        if (redirect === ">")
+            writes.push(word);
+        else if (redirect === "<")
+            reads.push(word);
+        else
+            argv.push(word);
+        word = "";
+        hasWord = false;
+        redirect = "";
+    };
+    const finishCommand = () => {
+        finishWord();
+        if (redirect)
+            unsupported("Missing redirection target");
+        if (argv.length)
+            commands.push({ argv, writes, reads });
+        else if (writes.length || reads.length)
+            unsupported("Redirection without literal command");
+        argv = [];
+        writes = [];
+        reads = [];
+        redirect = "";
+    };
+    for (let i = 0; i < command.length; i++) {
+        const ch = command.charAt(i);
+        if (quote === "'") {
+            if (ch === "'")
+                quote = "";
+            else
+                word += ch;
+            continue;
+        }
+        if (ch === "\\" && quote !== "'") {
+            if (i + 1 >= command.length)
+                unsupported("Trailing escape");
+            else {
+                word += command[++i];
+                hasWord = true;
+            }
+            continue;
+        }
+        if (ch === '"') {
+            quote = quote === '"' ? "" : '"';
+            hasWord = true;
+            continue;
+        }
+        if (ch === "'" && !quote) {
+            quote = "'";
+            hasWord = true;
+            continue;
+        }
+        if (ch === "$" || ch === "`")
+            unsupported("Shell expansion requires review");
+        if (quote) {
+            word += ch;
+            continue;
+        }
+        if ("(){}*?~".includes(ch))
+            unsupported("Non-literal shell syntax requires review");
+        if (ch === "#" && !hasWord) {
+            unsupported("Comments require review");
+            break;
+        }
+        if (/\s/.test(ch) && ch !== "\n") {
+            finishWord();
+            continue;
+        }
+        if (ch === ";" || ch === "|" || ch === "&" || ch === "\n") {
+            finishCommand();
+            if (command[i + 1] === ch && "|&".includes(ch))
+                i++;
+            else if (ch === "&")
+                unsupported("Background execution requires review");
+            continue;
+        }
+        if (ch === ">" || ch === "<") {
+            if (hasWord && /^\d+$/.test(word)) {
+                word = "";
+                hasWord = false;
+            }
+            finishWord();
+            redirect = ch;
+            if (command[i + 1] === ch) {
+                i++;
+                if (ch === "<")
+                    unsupported("Here-documents require review");
+            }
+            if (command[i + 1] === "&")
+                unsupported("Descriptor redirection requires review");
+            continue;
+        }
+        word += ch;
+        hasWord = true;
+    }
+    if (quote)
+        unsupported("Unclosed quote");
+    finishCommand();
+    if (!commands.length)
+        unsupported("No literal command");
+    if (commands.some((c) => c.argv.some((a) => /^\w+=/.test(a))))
+        unsupported("Environment assignments require review");
+    return { commands, isSupported, ...(reason ? { reason } : {}) };
+}
+export function matchesPrefix(argv, prefix) {
+    return (prefix.length > 0 &&
+        prefix.length <= argv.length &&
+        prefix.every((arg, i) => argv[i] === arg));
+}
+export const INTERPRETERS = new Set([
+    "bash",
+    "sh",
+    "zsh",
+    "fish",
+    "dash",
+    "node",
+    "python",
+    "python3",
+    "perl",
+    "ruby",
+    "env",
+    "eval",
+    "source",
+    "exec",
+    "xargs",
+    "sudo",
+    "osascript",
+]);
+//# sourceMappingURL=shell.js.map

package/dist/policy/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/policy/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAY7C,wGAAwG;AACxG,MAAM,UAAU,YAAY,CAAC,OAAe;IACxC,IACI,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,OAAO,CAAC,IAAI,EAAE;QACf,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEtB,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO;QACxB,OAAO;YACH,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,uCAAuC;SAClD,CAAC;IACN,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,IAAI,GAAa,EAAE,EACnB,MAAM,GAAa,EAAE,EACrB,KAAK,GAAa,EAAE,EACpB,IAAI,GAAG,EAAE,EACT,OAAO,GAAG,KAAK,EACf,KAAK,GAAG,EAAE,EACV,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,WAAW,GAAG,IAAI,EAClB,MAA0B,CAAC;IAC/B,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE;QACjC,WAAW,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,IAAI,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,EAAE;QACpB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,QAAQ,KAAK,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACnC,IAAI,QAAQ,KAAK,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACvC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,GAAG,EAAE,CAAC;QACV,OAAO,GAAG,KAAK,CAAC;QAChB,QAAQ,GAAG,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,GAAG,EAAE;QACvB,UAAU,EAAE,CAAC;QACb,IAAI,QAAQ;YAAE,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;aACnD,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;YAClC,WAAW,CAAC,qCAAqC,CAAC,CAAC;QACvD,IAAI,GAAG,EAAE,CAAC;QACV,MAAM,GAAG,EAAE,CAAC;QACZ,KAAK,GAAG,EAAE,CAAC;QACX,QAAQ,GAAG,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAChB,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,GAAG,EAAE,CAAC;;gBACtB,IAAI,IAAI,EAAE,CAAC;YAChB,SAAS;QACb,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM;gBAAE,WAAW,CAAC,iBAAiB,CAAC,CAAC;iBACvD,CAAC;gBACF,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrB,OAAO,GAAG,IAAI,CAAC;YACnB,CAAC;YACD,SAAS;QACb,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACb,KAAK,GAAG,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YACjC,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACb,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,GAAG,GAAG,CAAC;YACZ,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACb,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YACxB,WAAW,CAAC,iCAAiC,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE,CAAC;YACR,IAAI,IAAI,EAAE,CAAC;YACX,SAAS;QACb,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtB,WAAW,CAAC,0CAA0C,CAAC,CAAC;QAC5D,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,WAAW,CAAC,yBAAyB,CAAC,CAAC;YACvC,MAAM;QACV,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC/B,UAAU,EAAE,CAAC;YACb,SAAS;QACb,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACxD,aAAa,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;iBAC/C,IAAI,EAAE,KAAK,GAAG;gBACf,WAAW,CAAC,sCAAsC,CAAC,CAAC;YACxD,SAAS;QACb,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC3B,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,IAAI,GAAG,EAAE,CAAC;gBACV,OAAO,GAAG,KAAK,CAAC;YACpB,CAAC;YACD,UAAU,EAAE,CAAC;YACb,QAAQ,GAAG,EAAE,CAAC;YACd,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBACxB,CAAC,EAAE,CAAC;gBACJ,IAAI,EAAE,KAAK,GAAG;oBAAE,WAAW,CAAC,+BAA+B,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;gBACtB,WAAW,CAAC,wCAAwC,CAAC,CAAC;YAC1D,SAAS;QACb,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;QACX,OAAO,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,IAAI,KAAK;QAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;IACzC,aAAa,EAAE,CAAC;IAChB,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,WAAW,CAAC,wCAAwC,CAAC,CAAC;IAC1D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACpE,CAAC;AACD,MAAM,UAAU,aAAa,CACzB,IAAuB,EACvB,MAAyB;IAEzB,OAAO,CACH,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAC5C,CAAC;AACN,CAAC;AACD,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM;IACN,IAAI;IACJ,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,WAAW;CACd,CAAC,CAAC"}

package/dist/policy/starlark/builtins.d.ts

@@ -0,0 +1,6 @@
+import type { Budget } from "./lexer.js";
+import { type Callable, type Value } from "./values.js";
+export declare function bindArguments(name: string, args: Value[], keywords: Map<string, Value>, spec: (string | [string, Value])[]): Value[];
+export declare function standardGlobals(budget: Budget, mutate: (value: Value) => void): Map<string, Value>;
+export declare function attribute(value: Value, name: string, budget: Budget, mutate: (value: Value) => void): Callable;
+export declare function percentFormat(format: string, value: Value, budget: Budget): string;