@dexto/core 1.1.10 → 1.2.0

package/dist/process/command-validator.cjs

@@ -0,0 +1,544 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var command_validator_exports = {};
+__export(command_validator_exports, {
+  CommandValidator: () => CommandValidator
+});
+module.exports = __toCommonJS(command_validator_exports);
+var import_logger = require("../logger/index.js");
+const MAX_COMMAND_LENGTH = 1e4;
+const DANGEROUS_PATTERNS = [
+  // File system destruction
+  /rm\s+-rf\s+\//,
+  // rm -rf /
+  /rm\s+-rf\s+\/\s*$/,
+  // rm -rf / (end of line)
+  /rm\s+-rf\s+\/\s*2/,
+  // rm -rf / 2>/dev/null (with error suppression)
+  // Fork bomb variations
+  /:\(\)\{\s*:\|:&\s*\};:/,
+  // Classic fork bomb
+  /:\(\)\{\s*:\|:&\s*\};/,
+  // Fork bomb without final colon
+  /:\(\)\{\s*:\|:&\s*\}/,
+  // Fork bomb without semicolon
+  // Disk operations
+  /dd\s+if=.*of=\/dev\//,
+  // dd to disk devices
+  /dd\s+if=\/dev\/zero.*of=\/dev\//,
+  // dd zero to disk
+  /dd\s+if=\/dev\/urandom.*of=\/dev\//,
+  // dd random to disk
+  />\s*\/dev\/sd[a-z]/,
+  // Write to disk devices
+  />>\s*\/dev\/sd[a-z]/,
+  // Append to disk devices
+  // Filesystem operations
+  /mkfs\./,
+  // Format filesystem
+  /mkfs\s+/,
+  // Format filesystem with space
+  /fdisk\s+\/dev\/sd[a-z]/,
+  // Partition disk
+  /parted\s+\/dev\/sd[a-z]/,
+  // Partition disk with parted
+  // Download and execute patterns
+  /wget.*\|\s*sh/,
+  // wget | sh
+  /wget.*\|\s*bash/,
+  // wget | bash
+  /curl.*\|\s*sh/,
+  // curl | sh
+  /curl.*\|\s*bash/,
+  // curl | bash
+  /wget.*\|\s*python/,
+  // wget | python
+  /curl.*\|\s*python/,
+  // curl | python
+  // Shell execution
+  /\|\s*bash/,
+  // Pipe to bash
+  /\|\s*sh/,
+  // Pipe to sh
+  /\|\s*zsh/,
+  // Pipe to zsh
+  /\|\s*fish/,
+  // Pipe to fish
+  // Command evaluation
+  /eval\s+\$\(/,
+  // eval $()
+  /eval\s+`/,
+  // eval backticks
+  /eval\s+"/,
+  // eval double quotes
+  /eval\s+'/,
+  // eval single quotes
+  // Permission changes
+  /chmod\s+777\s+\//,
+  // chmod 777 /
+  /chmod\s+777\s+\/\s*$/,
+  // chmod 777 / (end of line)
+  /chmod\s+-R\s+777\s+\//,
+  // chmod -R 777 /
+  /chown\s+-R\s+root\s+\//,
+  // chown -R root /
+  // Network operations
+  /nc\s+-l\s+-p\s+\d+/,
+  // netcat listener
+  /ncat\s+-l\s+-p\s+\d+/,
+  // ncat listener
+  /socat\s+.*LISTEN/,
+  // socat listener
+  // Process manipulation
+  /killall\s+-9/,
+  // killall -9
+  /pkill\s+-9/,
+  // pkill -9
+  /kill\s+-9\s+-1/,
+  // kill -9 -1 (kill all processes)
+  // System shutdown/reboot
+  /shutdown\s+now/,
+  // shutdown now
+  /reboot/,
+  // reboot
+  /halt/,
+  // halt
+  /poweroff/,
+  // poweroff
+  // Memory operations
+  /echo\s+3\s*>\s*\/proc\/sys\/vm\/drop_caches/,
+  // Clear page cache
+  /sync\s*;\s*echo\s+3\s*>\s*\/proc\/sys\/vm\/drop_caches/,
+  // Sync and clear cache
+  // Network interface manipulation
+  /ifconfig\s+.*down/,
+  // Bring interface down
+  /ip\s+link\s+set\s+.*down/,
+  // Bring interface down with ip
+  // Package manager operations
+  /apt\s+remove\s+--purge\s+.*/,
+  // Remove packages
+  /yum\s+remove\s+.*/,
+  // Remove packages
+  /dnf\s+remove\s+.*/,
+  // Remove packages
+  /pacman\s+-R\s+.*/
+  // Remove packages
+];
+const INJECTION_PATTERNS = [
+  // Command chaining with dangerous commands
+  /;\s*rm\s+-rf/,
+  // ; rm -rf
+  /&&\s*rm\s+-rf/,
+  // && rm -rf
+  /\|\s*rm\s+-rf/,
+  // | rm -rf
+  /;\s*chmod\s+777/,
+  // ; chmod 777
+  /&&\s*chmod\s+777/,
+  // && chmod 777
+  /;\s*chown\s+root/,
+  // ; chown root
+  /&&\s*chown\s+root/,
+  // && chown root
+  // Command substitution with dangerous commands
+  /`.*rm.*`/,
+  // backticks with rm
+  /\$\(.*rm.*\)/,
+  // $() with rm
+  /`.*chmod.*`/,
+  // backticks with chmod
+  /\$\(.*chmod.*\)/,
+  // $() with chmod
+  /`.*chown.*`/,
+  // backticks with chown
+  /\$\(.*chown.*\)/,
+  // $() with chown
+  // Multiple command separators
+  /;\s*;\s*/,
+  // Multiple semicolons
+  /&&\s*&&\s*/,
+  // Multiple && operators
+  /\|\|\s*\|\|\s*/,
+  // Multiple || operators
+  // Redirection with dangerous commands
+  /rm\s+.*>\s*\/dev\/null/,
+  // rm with output redirection
+  /chmod\s+.*>\s*\/dev\/null/,
+  // chmod with output redirection
+  /chown\s+.*>\s*\/dev\/null/,
+  // chown with output redirection
+  // Environment variable manipulation
+  /\$[A-Z_]+\s*=\s*.*rm/,
+  // Environment variable with rm
+  /\$[A-Z_]+\s*=\s*.*chmod/,
+  // Environment variable with chmod
+  /\$[A-Z_]+\s*=\s*.*chown/
+  // Environment variable with chown
+];
+const REQUIRES_APPROVAL_PATTERNS = [
+  // File operations
+  /^rm\s+/,
+  // rm (removal)
+  /^mv\s+/,
+  // move files
+  /^cp\s+/,
+  // copy files
+  /^chmod\s+/,
+  // chmod
+  /^chown\s+/,
+  // chown
+  /^chgrp\s+/,
+  // chgrp
+  /^ln\s+/,
+  // create links
+  /^unlink\s+/,
+  // unlink files
+  // Git operations
+  /^git\s+push/,
+  // git push
+  /^git\s+commit/,
+  // git commit
+  /^git\s+reset/,
+  // git reset
+  /^git\s+rebase/,
+  // git rebase
+  /^git\s+merge/,
+  // git merge
+  /^git\s+checkout/,
+  // git checkout
+  /^git\s+branch/,
+  // git branch
+  /^git\s+tag/,
+  // git tag
+  // Package management
+  /^npm\s+publish/,
+  // npm publish
+  /^npm\s+uninstall/,
+  // npm uninstall
+  /^yarn\s+publish/,
+  // yarn publish
+  /^yarn\s+remove/,
+  // yarn remove
+  /^pip\s+install/,
+  // pip install
+  /^pip\s+uninstall/,
+  // pip uninstall
+  /^apt\s+install/,
+  // apt install
+  /^apt\s+remove/,
+  // apt remove
+  /^yum\s+install/,
+  // yum install
+  /^yum\s+remove/,
+  // yum remove
+  /^dnf\s+install/,
+  // dnf install
+  /^dnf\s+remove/,
+  // dnf remove
+  /^pacman\s+-S/,
+  // pacman install
+  /^pacman\s+-R/,
+  // pacman remove
+  // Container operations
+  /^docker\s+/,
+  // docker commands
+  /^podman\s+/,
+  // podman commands
+  /^kubectl\s+/,
+  // kubectl commands
+  // System operations
+  /^sudo\s+/,
+  // sudo commands
+  /^su\s+/,
+  // su commands
+  /^systemctl\s+/,
+  // systemctl commands
+  /^service\s+/,
+  // service commands
+  /^mount\s+/,
+  // mount commands
+  /^umount\s+/,
+  // umount commands
+  /^fdisk\s+/,
+  // fdisk commands
+  /^parted\s+/,
+  // parted commands
+  /^mkfs\s+/,
+  // mkfs commands
+  /^fsck\s+/,
+  // fsck commands
+  // Network operations
+  /^iptables\s+/,
+  // iptables commands
+  /^ufw\s+/,
+  // ufw commands
+  /^firewall-cmd\s+/,
+  // firewall-cmd commands
+  /^sshd\s+/,
+  // sshd commands
+  /^ssh\s+/,
+  // ssh commands
+  /^scp\s+/,
+  // scp commands
+  /^rsync\s+/,
+  // rsync commands
+  // Process management
+  /^kill\s+/,
+  // kill commands
+  /^killall\s+/,
+  // killall commands
+  /^pkill\s+/,
+  // pkill commands
+  /^nohup\s+/,
+  // nohup commands
+  /^screen\s+/,
+  // screen commands
+  /^tmux\s+/,
+  // tmux commands
+  // Database operations
+  /^mysql\s+/,
+  // mysql commands
+  /^psql\s+/,
+  // psql commands
+  /^sqlite3\s+/,
+  // sqlite3 commands
+  /^mongodb\s+/,
+  // mongodb commands
+  /^redis-cli\s+/
+  // redis-cli commands
+];
+const SAFE_PATTERNS = [
+  // Directory navigation with commands
+  /^cd\s+.*&&\s+\w+/,
+  // cd && command
+  /^cd\s+.*;\s+\w+/,
+  // cd ; command
+  // Safe pipe operations
+  /\|\s*grep/,
+  // | grep
+  /\|\s*head/,
+  // | head
+  /\|\s*tail/,
+  // | tail
+  /\|\s*sort/,
+  // | sort
+  /\|\s*uniq/,
+  // | uniq
+  /\|\s*wc/,
+  // | wc
+  /\|\s*cat/,
+  // | cat
+  /\|\s*less/,
+  // | less
+  /\|\s*more/,
+  // | more
+  /\|\s*awk/,
+  // | awk
+  /\|\s*sed/,
+  // | sed
+  /\|\s*cut/,
+  // | cut
+  /\|\s*tr/,
+  // | tr
+  /\|\s*xargs/,
+  // | xargs
+  // Safe redirection
+  /^ls\s+.*>/,
+  // ls with output redirection
+  /^find\s+.*>/,
+  // find with output redirection
+  /^grep\s+.*>/,
+  // grep with output redirection
+  /^cat\s+.*>/
+  // cat with output redirection
+];
+const WRITE_PATTERNS = [
+  // Output redirection
+  />/,
+  // output redirection
+  />>/,
+  // append redirection
+  /2>/,
+  // error redirection
+  /2>>/,
+  // error append redirection
+  /&>/,
+  // both output and error redirection
+  /&>>/,
+  // both output and error append redirection
+  // File operations
+  /tee\s+/,
+  // tee command
+  /touch\s+/,
+  // touch command
+  /mkdir\s+/,
+  // mkdir command
+  /rmdir\s+/,
+  // rmdir command
+  // Text editors
+  /vim\s+/,
+  // vim command
+  /nano\s+/,
+  // nano command
+  /emacs\s+/,
+  // emacs command
+  /code\s+/,
+  // code command (VS Code)
+  // File copying and moving
+  /cp\s+/,
+  // cp command
+  /mv\s+/,
+  // mv command
+  /scp\s+/,
+  // scp command
+  /rsync\s+/
+  // rsync command
+];
+class CommandValidator {
+  config;
+  constructor(config) {
+    this.config = config;
+    import_logger.logger.debug(`CommandValidator initialized with security level: ${config.securityLevel}`);
+  }
+  /**
+   * Validate a command for security and policy compliance
+   */
+  validateCommand(command) {
+    if (!command || command.trim() === "") {
+      return {
+        isValid: false,
+        error: "Command cannot be empty"
+      };
+    }
+    const trimmedCommand = command.trim();
+    if (trimmedCommand.length > MAX_COMMAND_LENGTH) {
+      return {
+        isValid: false,
+        error: `Command too long: ${trimmedCommand.length} characters. Maximum: ${MAX_COMMAND_LENGTH}`
+      };
+    }
+    if (this.config.securityLevel !== "permissive") {
+      for (const pattern of DANGEROUS_PATTERNS) {
+        if (pattern.test(trimmedCommand)) {
+          return {
+            isValid: false,
+            error: `Command matches dangerous pattern: ${pattern.source}`
+          };
+        }
+      }
+    }
+    const injectionResult = this.detectInjection(trimmedCommand);
+    if (!injectionResult.isValid) {
+      return injectionResult;
+    }
+    for (const blockedPattern of this.config.blockedCommands) {
+      if (trimmedCommand.includes(blockedPattern)) {
+        return {
+          isValid: false,
+          error: `Command is blocked: matches "${blockedPattern}"`
+        };
+      }
+    }
+    if (this.config.allowedCommands.length > 0) {
+      const isAllowed = this.config.allowedCommands.some(
+        (allowedCmd) => trimmedCommand.startsWith(allowedCmd)
+      );
+      if (!isAllowed) {
+        return {
+          isValid: false,
+          error: `Command not in allowed list. Allowed: ${this.config.allowedCommands.join(", ")}`
+        };
+      }
+    }
+    const requiresApproval = this.determineApprovalRequirement(trimmedCommand);
+    return {
+      isValid: true,
+      normalizedCommand: trimmedCommand,
+      requiresApproval
+    };
+  }
+  /**
+   * Detect command injection attempts
+   */
+  detectInjection(command) {
+    for (const pattern of INJECTION_PATTERNS) {
+      if (pattern.test(command)) {
+        return {
+          isValid: false,
+          error: `Potential command injection detected: ${pattern.source}`
+        };
+      }
+    }
+    if (this.config.securityLevel === "strict") {
+      const hasMultipleCommands = /;|\|{1,2}|&&/.test(command);
+      if (hasMultipleCommands) {
+        const isSafe = SAFE_PATTERNS.some((pattern) => pattern.test(command));
+        if (!isSafe) {
+          return {
+            isValid: false,
+            error: "Multiple commands detected in strict mode. Use moderate or permissive mode if this is intentional."
+          };
+        }
+      }
+    }
+    return {
+      isValid: true
+    };
+  }
+  /**
+   * Determine if a command requires approval
+   */
+  determineApprovalRequirement(command) {
+    for (const pattern of REQUIRES_APPROVAL_PATTERNS) {
+      if (pattern.test(command)) {
+        return true;
+      }
+    }
+    if (this.config.securityLevel === "strict") {
+      return true;
+    }
+    if (this.config.securityLevel === "moderate") {
+      return WRITE_PATTERNS.some((pattern) => pattern.test(command));
+    }
+    return false;
+  }
+  /**
+   * Get list of blocked commands
+   */
+  getBlockedCommands() {
+    return [...this.config.blockedCommands];
+  }
+  /**
+   * Get list of allowed commands
+   */
+  getAllowedCommands() {
+    return [...this.config.allowedCommands];
+  }
+  /**
+   * Get security level
+   */
+  getSecurityLevel() {
+    return this.config.securityLevel;
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CommandValidator
+});

package/dist/process/command-validator.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Command Validator
+ *
+ * Security-focused command validation for process execution
+ */
+import { ProcessConfig, CommandValidation } from './types.js';
+/**
+ * CommandValidator - Validates commands for security and policy compliance
+ *
+ * Security checks:
+ * 1. Command length limits
+ * 2. Dangerous command patterns
+ * 3. Command injection detection
+ * 4. Allowed/blocked command lists
+ * 5. Shell metacharacter analysis
+ * TODO: Add tests for this class
+ */
+export declare class CommandValidator {
+    private config;
+    constructor(config: ProcessConfig);
+    /**
+     * Validate a command for security and policy compliance
+     */
+    validateCommand(command: string): CommandValidation;
+    /**
+     * Detect command injection attempts
+     */
+    private detectInjection;
+    /**
+     * Determine if a command requires approval
+     */
+    private determineApprovalRequirement;
+    /**
+     * Get list of blocked commands
+     */
+    getBlockedCommands(): string[];
+    /**
+     * Get list of allowed commands
+     */
+    getAllowedCommands(): string[];
+    /**
+     * Get security level
+     */
+    getSecurityLevel(): string;
+}
+//# sourceMappingURL=command-validator.d.ts.map

package/dist/process/command-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-validator.d.ts","sourceRoot":"","sources":["../../src/process/command-validator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAqQ9D;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IACzB,OAAO,CAAC,MAAM,CAAgB;gBAElB,MAAM,EAAE,aAAa;IAKjC;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB;IAuEnD;;OAEG;IACH,OAAO,CAAC,eAAe;IAgCvB;;OAEG;IACH,OAAO,CAAC,4BAA4B;IAsBpC;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,gBAAgB,IAAI,MAAM;CAG7B"}