@dreb/coding-agent 2.7.0 → 2.8.0

package/dist/core/agent-session.js

@@ -24,7 +24,7 @@ import { DEFAULT_THINKING_LEVEL } from "./defaults.js";
 import { exportSessionToHtml } from "./export-html/index.js";
 import { createToolHtmlRenderer } from "./export-html/tool-renderer.js";
 import { ExtensionRunner, wrapRegisteredTools, } from "./extensions/index.js";
-import { isForbiddenCommand } from "./forbidden-commands.js";
+import { checkScriptContent, extractScriptPaths, isForbiddenCommand } from "./forbidden-commands.js";
 import { expandPromptTemplate } from "./prompt-templates.js";
 import { CURRENT_SESSION_VERSION, getLatestCompactionEntry } from "./session-manager.js";
 import { createSyntheticSourceInfo } from "./source-info.js";
@@ -171,6 +171,31 @@ export class AgentSession {
                             reason: `Command blocked by forbidden-commands guard: "${pattern}" matched "${command}"`,
                         };
                     }
+                    // Check script files referenced by the command (e.g., bash script.sh)
+                    const scriptPaths = extractScriptPaths(command);
+                    if (scriptPaths.length > 0) {
+                        const { readFileSync, existsSync } = await import("node:fs");
+                        const { resolve } = await import("node:path");
+                        const cwd = this._cwd;
+                        for (const scriptPath of scriptPaths) {
+                            const resolved = resolve(cwd, scriptPath);
+                            if (existsSync(resolved)) {
+                                try {
+                                    const content = readFileSync(resolved, "utf-8");
+                                    const match = checkScriptContent(content, customPatterns);
+                                    if (match) {
+                                        return {
+                                            block: true,
+                                            reason: `Command blocked by forbidden-commands guard: script "${scriptPath}" contains forbidden command at line ${match.line}: "${match.text}" (matched pattern "${match.pattern}")`,
+                                        };
+                                    }
+                                }
+                                catch {
+                                    // File not readable — skip (could be binary, permission denied, etc.)
+                                }
+                            }
+                        }
+                    }
                 }
             }
             const runner = this._extensionRunner;