@dexto/core 1.5.4 → 1.5.6

package/dist/process/command-validator.js

@@ -1,531 +0,0 @@
-import "../chunk-PTJYTZNU.js";
-const MAX_COMMAND_LENGTH = 1e4;
-const DANGEROUS_PATTERNS = [
-  // File system destruction
-  /rm\s+-rf\s+\//,
-  // rm -rf /
-  /rm\s+-rf\s+\/\s*$/,
-  // rm -rf / (end of line)
-  /rm\s+-rf\s+\/\s*2/,
-  // rm -rf / 2>/dev/null (with error suppression)
-  // Fork bomb variations
-  /:\(\)\{\s*:\|:&\s*\};:/,
-  // Classic fork bomb
-  /:\(\)\{\s*:\|:&\s*\};/,
-  // Fork bomb without final colon
-  /:\(\)\{\s*:\|:&\s*\}/,
-  // Fork bomb without semicolon
-  // Disk operations
-  /dd\s+if=.*of=\/dev\//,
-  // dd to disk devices
-  /dd\s+if=\/dev\/zero.*of=\/dev\//,
-  // dd zero to disk
-  /dd\s+if=\/dev\/urandom.*of=\/dev\//,
-  // dd random to disk
-  />\s*\/dev\/sd[a-z]/,
-  // Write to disk devices
-  />>\s*\/dev\/sd[a-z]/,
-  // Append to disk devices
-  // Filesystem operations
-  /mkfs\./,
-  // Format filesystem
-  /mkfs\s+/,
-  // Format filesystem with space
-  /fdisk\s+\/dev\/sd[a-z]/,
-  // Partition disk
-  /parted\s+\/dev\/sd[a-z]/,
-  // Partition disk with parted
-  // Download and execute patterns
-  /wget.*\|\s*sh/,
-  // wget | sh
-  /wget.*\|\s*bash/,
-  // wget | bash
-  /curl.*\|\s*sh/,
-  // curl | sh
-  /curl.*\|\s*bash/,
-  // curl | bash
-  /wget.*\|\s*python/,
-  // wget | python
-  /curl.*\|\s*python/,
-  // curl | python
-  // Shell execution
-  /\|\s*bash/,
-  // Pipe to bash
-  /\|\s*sh/,
-  // Pipe to sh
-  /\|\s*zsh/,
-  // Pipe to zsh
-  /\|\s*fish/,
-  // Pipe to fish
-  // Command evaluation
-  /eval\s+\$\(/,
-  // eval $()
-  /eval\s+`/,
-  // eval backticks
-  /eval\s+"/,
-  // eval double quotes
-  /eval\s+'/,
-  // eval single quotes
-  // Permission changes
-  /chmod\s+777\s+\//,
-  // chmod 777 /
-  /chmod\s+777\s+\/\s*$/,
-  // chmod 777 / (end of line)
-  /chmod\s+-R\s+777\s+\//,
-  // chmod -R 777 /
-  /chown\s+-R\s+root\s+\//,
-  // chown -R root /
-  // Network operations
-  /nc\s+-l\s+-p\s+\d+/,
-  // netcat listener
-  /ncat\s+-l\s+-p\s+\d+/,
-  // ncat listener
-  /socat\s+.*LISTEN/,
-  // socat listener
-  // Process manipulation
-  /killall\s+-9/,
-  // killall -9
-  /pkill\s+-9/,
-  // pkill -9
-  /kill\s+-9\s+-1/,
-  // kill -9 -1 (kill all processes)
-  // System shutdown/reboot
-  /shutdown\s+now/,
-  // shutdown now
-  /reboot/,
-  // reboot
-  /halt/,
-  // halt
-  /poweroff/,
-  // poweroff
-  // Memory operations
-  /echo\s+3\s*>\s*\/proc\/sys\/vm\/drop_caches/,
-  // Clear page cache
-  /sync\s*;\s*echo\s+3\s*>\s*\/proc\/sys\/vm\/drop_caches/,
-  // Sync and clear cache
-  // Network interface manipulation
-  /ifconfig\s+.*down/,
-  // Bring interface down
-  /ip\s+link\s+set\s+.*down/,
-  // Bring interface down with ip
-  // Package manager operations
-  /apt\s+remove\s+--purge\s+.*/,
-  // Remove packages
-  /yum\s+remove\s+.*/,
-  // Remove packages
-  /dnf\s+remove\s+.*/,
-  // Remove packages
-  /pacman\s+-R\s+.*/
-  // Remove packages
-];
-const INJECTION_PATTERNS = [
-  // Command chaining with dangerous commands using semicolon (more suspicious)
-  /;\s*rm\s+-rf/,
-  // ; rm -rf
-  /;\s*chmod\s+777/,
-  // ; chmod 777
-  /;\s*chown\s+root/,
-  // ; chown root
-  // Command substitution with dangerous commands
-  /`.*rm.*`/,
-  // backticks with rm
-  /\$\(.*rm.*\)/,
-  // $() with rm
-  /`.*chmod.*`/,
-  // backticks with chmod
-  /\$\(.*chmod.*\)/,
-  // $() with chmod
-  /`.*chown.*`/,
-  // backticks with chown
-  /\$\(.*chown.*\)/,
-  // $() with chown
-  // Multiple command separators
-  /;\s*;\s*/,
-  // Multiple semicolons
-  /&&\s*&&\s*/,
-  // Multiple && operators
-  /\|\|\s*\|\|\s*/,
-  // Multiple || operators
-  // Redirection with dangerous commands
-  /rm\s+.*>\s*\/dev\/null/,
-  // rm with output redirection
-  /chmod\s+.*>\s*\/dev\/null/,
-  // chmod with output redirection
-  /chown\s+.*>\s*\/dev\/null/,
-  // chown with output redirection
-  // Environment variable manipulation
-  /\$[A-Z_]+\s*=\s*.*rm/,
-  // Environment variable with rm
-  /\$[A-Z_]+\s*=\s*.*chmod/,
-  // Environment variable with chmod
-  /\$[A-Z_]+\s*=\s*.*chown/
-  // Environment variable with chown
-];
-const REQUIRES_APPROVAL_PATTERNS = [
-  // File operations
-  /^rm\s+/,
-  // rm (removal)
-  /^mv\s+/,
-  // move files
-  /^cp\s+/,
-  // copy files
-  /^chmod\s+/,
-  // chmod
-  /^chown\s+/,
-  // chown
-  /^chgrp\s+/,
-  // chgrp
-  /^ln\s+/,
-  // create links
-  /^unlink\s+/,
-  // unlink files
-  // Git operations
-  /^git\s+push/,
-  // git push
-  /^git\s+commit/,
-  // git commit
-  /^git\s+reset/,
-  // git reset
-  /^git\s+rebase/,
-  // git rebase
-  /^git\s+merge/,
-  // git merge
-  /^git\s+checkout/,
-  // git checkout
-  /^git\s+branch/,
-  // git branch
-  /^git\s+tag/,
-  // git tag
-  // Package management
-  /^npm\s+publish/,
-  // npm publish
-  /^npm\s+uninstall/,
-  // npm uninstall
-  /^yarn\s+publish/,
-  // yarn publish
-  /^yarn\s+remove/,
-  // yarn remove
-  /^pip\s+install/,
-  // pip install
-  /^pip\s+uninstall/,
-  // pip uninstall
-  /^apt\s+install/,
-  // apt install
-  /^apt\s+remove/,
-  // apt remove
-  /^yum\s+install/,
-  // yum install
-  /^yum\s+remove/,
-  // yum remove
-  /^dnf\s+install/,
-  // dnf install
-  /^dnf\s+remove/,
-  // dnf remove
-  /^pacman\s+-S/,
-  // pacman install
-  /^pacman\s+-R/,
-  // pacman remove
-  // Container operations
-  /^docker\s+/,
-  // docker commands
-  /^podman\s+/,
-  // podman commands
-  /^kubectl\s+/,
-  // kubectl commands
-  // System operations
-  /^sudo\s+/,
-  // sudo commands
-  /^su\s+/,
-  // su commands
-  /^systemctl\s+/,
-  // systemctl commands
-  /^service\s+/,
-  // service commands
-  /^mount\s+/,
-  // mount commands
-  /^umount\s+/,
-  // umount commands
-  /^fdisk\s+/,
-  // fdisk commands
-  /^parted\s+/,
-  // parted commands
-  /^mkfs\s+/,
-  // mkfs commands
-  /^fsck\s+/,
-  // fsck commands
-  // Network operations
-  /^iptables\s+/,
-  // iptables commands
-  /^ufw\s+/,
-  // ufw commands
-  /^firewall-cmd\s+/,
-  // firewall-cmd commands
-  /^sshd\s+/,
-  // sshd commands
-  /^ssh\s+/,
-  // ssh commands
-  /^scp\s+/,
-  // scp commands
-  /^rsync\s+/,
-  // rsync commands
-  // Process management
-  /^kill\s+/,
-  // kill commands
-  /^killall\s+/,
-  // killall commands
-  /^pkill\s+/,
-  // pkill commands
-  /^nohup\s+/,
-  // nohup commands
-  /^screen\s+/,
-  // screen commands
-  /^tmux\s+/,
-  // tmux commands
-  // Database operations
-  /^mysql\s+/,
-  // mysql commands
-  /^psql\s+/,
-  // psql commands
-  /^sqlite3\s+/,
-  // sqlite3 commands
-  /^mongodb\s+/,
-  // mongodb commands
-  /^redis-cli\s+/
-  // redis-cli commands
-];
-const SAFE_PATTERNS = [
-  // Directory navigation with commands
-  /^cd\s+.*&&\s+\w+/,
-  // cd && command
-  /^cd\s+.*;\s+\w+/,
-  // cd ; command
-  // Safe pipe operations
-  /\|\s*grep/,
-  // | grep
-  /\|\s*head/,
-  // | head
-  /\|\s*tail/,
-  // | tail
-  /\|\s*sort/,
-  // | sort
-  /\|\s*uniq/,
-  // | uniq
-  /\|\s*wc/,
-  // | wc
-  /\|\s*cat/,
-  // | cat
-  /\|\s*less/,
-  // | less
-  /\|\s*more/,
-  // | more
-  /\|\s*awk/,
-  // | awk
-  /\|\s*sed/,
-  // | sed
-  /\|\s*cut/,
-  // | cut
-  /\|\s*tr/,
-  // | tr
-  /\|\s*xargs/,
-  // | xargs
-  // Safe redirection
-  /^ls\s+.*>/,
-  // ls with output redirection
-  /^find\s+.*>/,
-  // find with output redirection
-  /^grep\s+.*>/,
-  // grep with output redirection
-  /^cat\s+.*>/
-  // cat with output redirection
-];
-const WRITE_PATTERNS = [
-  // Output redirection
-  />/,
-  // output redirection
-  />>/,
-  // append redirection
-  /2>/,
-  // error redirection
-  /2>>/,
-  // error append redirection
-  /&>/,
-  // both output and error redirection
-  /&>>/,
-  // both output and error append redirection
-  // File operations
-  /tee\s+/,
-  // tee command
-  /touch\s+/,
-  // touch command
-  /mkdir\s+/,
-  // mkdir command
-  /rmdir\s+/,
-  // rmdir command
-  // Text editors
-  /vim\s+/,
-  // vim command
-  /nano\s+/,
-  // nano command
-  /emacs\s+/,
-  // emacs command
-  /code\s+/,
-  // code command (VS Code)
-  // File copying and moving
-  /cp\s+/,
-  // cp command
-  /mv\s+/,
-  // mv command
-  /scp\s+/,
-  // scp command
-  /rsync\s+/
-  // rsync command
-];
-class CommandValidator {
-  config;
-  logger;
-  constructor(config, logger) {
-    this.config = config;
-    this.logger = logger;
-    this.logger.debug(
-      `CommandValidator initialized with security level: ${config.securityLevel}`
-    );
-  }
-  /**
-   * Validate a command for security and policy compliance
-   */
-  validateCommand(command) {
-    if (!command || command.trim() === "") {
-      return {
-        isValid: false,
-        error: "Command cannot be empty"
-      };
-    }
-    const trimmedCommand = command.trim();
-    if (/&\s*$/.test(trimmedCommand)) {
-      return {
-        isValid: false,
-        error: "Commands ending with & (shell backgrounding) are not allowed. Use run_in_background parameter instead for proper process management."
-      };
-    }
-    if (trimmedCommand.length > MAX_COMMAND_LENGTH) {
-      return {
-        isValid: false,
-        error: `Command too long: ${trimmedCommand.length} characters. Maximum: ${MAX_COMMAND_LENGTH}`
-      };
-    }
-    if (this.config.securityLevel !== "permissive") {
-      for (const pattern of DANGEROUS_PATTERNS) {
-        if (pattern.test(trimmedCommand)) {
-          return {
-            isValid: false,
-            error: `Command matches dangerous pattern: ${pattern.source}`
-          };
-        }
-      }
-    }
-    const injectionResult = this.detectInjection(trimmedCommand);
-    if (!injectionResult.isValid) {
-      return injectionResult;
-    }
-    for (const blockedPattern of this.config.blockedCommands) {
-      if (trimmedCommand.includes(blockedPattern)) {
-        return {
-          isValid: false,
-          error: `Command is blocked: matches "${blockedPattern}"`
-        };
-      }
-    }
-    if (this.config.allowedCommands.length > 0) {
-      const isAllowed = this.config.allowedCommands.some(
-        (allowedCmd) => trimmedCommand.startsWith(allowedCmd)
-      );
-      if (!isAllowed) {
-        return {
-          isValid: false,
-          error: `Command not in allowed list. Allowed: ${this.config.allowedCommands.join(", ")}`
-        };
-      }
-    }
-    const requiresApproval = this.determineApprovalRequirement(trimmedCommand);
-    return {
-      isValid: true,
-      normalizedCommand: trimmedCommand,
-      requiresApproval
-    };
-  }
-  /**
-   * Detect command injection attempts
-   */
-  detectInjection(command) {
-    for (const pattern of INJECTION_PATTERNS) {
-      if (pattern.test(command)) {
-        return {
-          isValid: false,
-          error: `Potential command injection detected: ${pattern.source}`
-        };
-      }
-    }
-    if (this.config.securityLevel === "strict") {
-      const hasMultipleCommands = /;|\|{1,2}|&&/.test(command);
-      if (hasMultipleCommands) {
-        const isSafe = SAFE_PATTERNS.some((pattern) => pattern.test(command));
-        if (!isSafe) {
-          return {
-            isValid: false,
-            error: "Multiple commands detected in strict mode. Use moderate or permissive mode if this is intentional."
-          };
-        }
-      }
-    }
-    return {
-      isValid: true
-    };
-  }
-  /**
-   * Determine if a command requires approval
-   * Handles compound commands (with &&, ||, ;) by checking each sub-command
-   */
-  determineApprovalRequirement(command) {
-    const subCommands = command.split(/\s*(?:&&|\|\||;)\s*/).map((cmd) => cmd.trim());
-    for (const subCmd of subCommands) {
-      if (!subCmd) continue;
-      const normalizedSubCmd = subCmd.replace(/^(?:then|do|else)\b\s*/, "").replace(/^\{\s*/, "").trim();
-      if (!normalizedSubCmd) continue;
-      for (const pattern of REQUIRES_APPROVAL_PATTERNS) {
-        if (pattern.test(normalizedSubCmd)) {
-          return true;
-        }
-      }
-      if (this.config.securityLevel === "strict") {
-        return true;
-      }
-      if (this.config.securityLevel === "moderate") {
-        if (WRITE_PATTERNS.some((pattern) => pattern.test(normalizedSubCmd))) {
-          return true;
-        }
-      }
-    }
-    return false;
-  }
-  /**
-   * Get list of blocked commands
-   */
-  getBlockedCommands() {
-    return [...this.config.blockedCommands];
-  }
-  /**
-   * Get list of allowed commands
-   */
-  getAllowedCommands() {
-    return [...this.config.allowedCommands];
-  }
-  /**
-   * Get security level
-   */
-  getSecurityLevel() {
-    return this.config.securityLevel;
-  }
-}
-export {
-  CommandValidator
-};

package/dist/process/error-codes.cjs

@@ -1,47 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var error_codes_exports = {};
-__export(error_codes_exports, {
-  ProcessErrorCode: () => ProcessErrorCode
-});
-module.exports = __toCommonJS(error_codes_exports);
-var ProcessErrorCode = /* @__PURE__ */ ((ProcessErrorCode2) => {
-  ProcessErrorCode2["INVALID_COMMAND"] = "PROCESS_INVALID_COMMAND";
-  ProcessErrorCode2["COMMAND_BLOCKED"] = "PROCESS_COMMAND_BLOCKED";
-  ProcessErrorCode2["COMMAND_TOO_LONG"] = "PROCESS_COMMAND_TOO_LONG";
-  ProcessErrorCode2["INJECTION_DETECTED"] = "PROCESS_INJECTION_DETECTED";
-  ProcessErrorCode2["APPROVAL_REQUIRED"] = "PROCESS_APPROVAL_REQUIRED";
-  ProcessErrorCode2["APPROVAL_DENIED"] = "PROCESS_APPROVAL_DENIED";
-  ProcessErrorCode2["EXECUTION_FAILED"] = "PROCESS_EXECUTION_FAILED";
-  ProcessErrorCode2["TIMEOUT"] = "PROCESS_TIMEOUT";
-  ProcessErrorCode2["PERMISSION_DENIED"] = "PROCESS_PERMISSION_DENIED";
-  ProcessErrorCode2["COMMAND_NOT_FOUND"] = "PROCESS_COMMAND_NOT_FOUND";
-  ProcessErrorCode2["WORKING_DIRECTORY_INVALID"] = "PROCESS_WORKING_DIRECTORY_INVALID";
-  ProcessErrorCode2["PROCESS_NOT_FOUND"] = "PROCESS_NOT_FOUND";
-  ProcessErrorCode2["TOO_MANY_PROCESSES"] = "PROCESS_TOO_MANY_PROCESSES";
-  ProcessErrorCode2["KILL_FAILED"] = "PROCESS_KILL_FAILED";
-  ProcessErrorCode2["OUTPUT_BUFFER_FULL"] = "PROCESS_OUTPUT_BUFFER_FULL";
-  ProcessErrorCode2["INVALID_CONFIG"] = "PROCESS_INVALID_CONFIG";
-  ProcessErrorCode2["SERVICE_NOT_INITIALIZED"] = "PROCESS_SERVICE_NOT_INITIALIZED";
-  return ProcessErrorCode2;
-})(ProcessErrorCode || {});
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  ProcessErrorCode
-});

package/dist/process/error-codes.d.ts

@@ -1,25 +0,0 @@
-/**
- * Process Service Error Codes
- *
- * Standardized error codes for process execution and management
- */
-export declare enum ProcessErrorCode {
-    INVALID_COMMAND = "PROCESS_INVALID_COMMAND",
-    COMMAND_BLOCKED = "PROCESS_COMMAND_BLOCKED",
-    COMMAND_TOO_LONG = "PROCESS_COMMAND_TOO_LONG",
-    INJECTION_DETECTED = "PROCESS_INJECTION_DETECTED",
-    APPROVAL_REQUIRED = "PROCESS_APPROVAL_REQUIRED",
-    APPROVAL_DENIED = "PROCESS_APPROVAL_DENIED",
-    EXECUTION_FAILED = "PROCESS_EXECUTION_FAILED",
-    TIMEOUT = "PROCESS_TIMEOUT",
-    PERMISSION_DENIED = "PROCESS_PERMISSION_DENIED",
-    COMMAND_NOT_FOUND = "PROCESS_COMMAND_NOT_FOUND",
-    WORKING_DIRECTORY_INVALID = "PROCESS_WORKING_DIRECTORY_INVALID",
-    PROCESS_NOT_FOUND = "PROCESS_NOT_FOUND",
-    TOO_MANY_PROCESSES = "PROCESS_TOO_MANY_PROCESSES",
-    KILL_FAILED = "PROCESS_KILL_FAILED",
-    OUTPUT_BUFFER_FULL = "PROCESS_OUTPUT_BUFFER_FULL",
-    INVALID_CONFIG = "PROCESS_INVALID_CONFIG",
-    SERVICE_NOT_INITIALIZED = "PROCESS_SERVICE_NOT_INITIALIZED"
-}
-//# sourceMappingURL=error-codes.d.ts.map

package/dist/process/error-codes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"error-codes.d.ts","sourceRoot":"","sources":["../../src/process/error-codes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,oBAAY,gBAAgB;IAExB,eAAe,4BAA4B;IAC3C,eAAe,4BAA4B;IAC3C,gBAAgB,6BAA6B;IAC7C,kBAAkB,+BAA+B;IACjD,iBAAiB,8BAA8B;IAC/C,eAAe,4BAA4B;IAG3C,gBAAgB,6BAA6B;IAC7C,OAAO,oBAAoB;IAC3B,iBAAiB,8BAA8B;IAC/C,iBAAiB,8BAA8B;IAC/C,yBAAyB,sCAAsC;IAG/D,iBAAiB,sBAAsB;IACvC,kBAAkB,+BAA+B;IACjD,WAAW,wBAAwB;IACnC,kBAAkB,+BAA+B;IAGjD,cAAc,2BAA2B;IACzC,uBAAuB,oCAAoC;CAC9D"}

package/dist/process/error-codes.js

@@ -1,24 +0,0 @@
-import "../chunk-PTJYTZNU.js";
-var ProcessErrorCode = /* @__PURE__ */ ((ProcessErrorCode2) => {
-  ProcessErrorCode2["INVALID_COMMAND"] = "PROCESS_INVALID_COMMAND";
-  ProcessErrorCode2["COMMAND_BLOCKED"] = "PROCESS_COMMAND_BLOCKED";
-  ProcessErrorCode2["COMMAND_TOO_LONG"] = "PROCESS_COMMAND_TOO_LONG";
-  ProcessErrorCode2["INJECTION_DETECTED"] = "PROCESS_INJECTION_DETECTED";
-  ProcessErrorCode2["APPROVAL_REQUIRED"] = "PROCESS_APPROVAL_REQUIRED";
-  ProcessErrorCode2["APPROVAL_DENIED"] = "PROCESS_APPROVAL_DENIED";
-  ProcessErrorCode2["EXECUTION_FAILED"] = "PROCESS_EXECUTION_FAILED";
-  ProcessErrorCode2["TIMEOUT"] = "PROCESS_TIMEOUT";
-  ProcessErrorCode2["PERMISSION_DENIED"] = "PROCESS_PERMISSION_DENIED";
-  ProcessErrorCode2["COMMAND_NOT_FOUND"] = "PROCESS_COMMAND_NOT_FOUND";
-  ProcessErrorCode2["WORKING_DIRECTORY_INVALID"] = "PROCESS_WORKING_DIRECTORY_INVALID";
-  ProcessErrorCode2["PROCESS_NOT_FOUND"] = "PROCESS_NOT_FOUND";
-  ProcessErrorCode2["TOO_MANY_PROCESSES"] = "PROCESS_TOO_MANY_PROCESSES";
-  ProcessErrorCode2["KILL_FAILED"] = "PROCESS_KILL_FAILED";
-  ProcessErrorCode2["OUTPUT_BUFFER_FULL"] = "PROCESS_OUTPUT_BUFFER_FULL";
-  ProcessErrorCode2["INVALID_CONFIG"] = "PROCESS_INVALID_CONFIG";
-  ProcessErrorCode2["SERVICE_NOT_INITIALIZED"] = "PROCESS_SERVICE_NOT_INITIALIZED";
-  return ProcessErrorCode2;
-})(ProcessErrorCode || {});
-export {
-  ProcessErrorCode
-};