@event4u/agent-config 16.5.0 → 17.0.0

package/dist/cli-delegate/chunk-I4KJYVPB.js

@@ -0,0 +1,69 @@
+import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+
+// src/scripts/_lib/spawn_env.ts
+var DENY_EXACT = /* @__PURE__ */ new Set([
+  // dynamic loader
+  "LD_PRELOAD",
+  "LD_LIBRARY_PATH",
+  "LD_AUDIT",
+  "DYLD_INSERT_LIBRARIES",
+  "DYLD_LIBRARY_PATH",
+  "DYLD_FRAMEWORK_PATH",
+  "GCONV_PATH",
+  // git command-injection
+  "GIT_EXTERNAL_DIFF",
+  "GIT_SSH",
+  "GIT_SSH_COMMAND",
+  "GIT_PROXY_COMMAND",
+  "GIT_PAGER",
+  "PAGER",
+  // git config-injection: GIT_ALTERNATE_OBJECT_DIRECTORIES can point git at
+  // attacker-controlled object stores; the GIT_CONFIG* family is handled by
+  // prefix below (it is a general arbitrary-config-injection primitive).
+  "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+  // git path-redirection: GIT_DIR / GIT_INDEX_FILE / GIT_NAMESPACE point a
+  // child's git at an attacker-controlled repo, index file, or ref namespace
+  // — ordinary git ops then read and write attacker state (low severity,
+  // same family as GIT_ALTERNATE_OBJECT_DIRECTORIES above).
+  "GIT_DIR",
+  "GIT_INDEX_FILE",
+  "GIT_NAMESPACE",
+  // resolver hijack: HOSTALIASES remaps hostnames via an attacker file,
+  // redirecting any network fetch the child performs (CWE-427-adjacent).
+  "HOSTALIASES",
+  // runtime auto-exec hooks
+  "NODE_OPTIONS",
+  "BASH_ENV",
+  "ENV",
+  "PYTHONPATH",
+  "PYTHONSTARTUP",
+  "PYTHONINSPECT",
+  "PERL5OPT",
+  "PERL5LIB",
+  "RUBYOPT",
+  // shell field-splitting
+  "IFS"
+]);
+function isDeniedByFamily(name) {
+  if (name.startsWith("LD_") || name.startsWith("DYLD_")) return true;
+  if (name.startsWith("GIT_") && name.endsWith("_COMMAND")) return true;
+  if (name === "GIT_CONFIG" || name.startsWith("GIT_CONFIG_")) return true;
+  return false;
+}
+function hardenedSpawnEnv(overrides = {}) {
+  const out = {};
+  for (const [key, value] of Object.entries(process.env)) {
+    if (value === void 0) continue;
+    if (DENY_EXACT.has(key)) continue;
+    if (isDeniedByFamily(key)) continue;
+    out[key] = value;
+  }
+  for (const [key, value] of Object.entries(overrides)) {
+    out[key] = value;
+  }
+  return out;
+}
+
+export {
+  hardenedSpawnEnv
+};

package/dist/cli-delegate/{chunk-JQOM7TTM.js → chunk-IDAOTDPE.js}

@@ -1087,103 +1087,6 @@ if (_isCliEntry()) {
   process.exitCode = main();
 }
 
-// src/scripts/_lib/confusables.ts
-var MIN_LETTERS = 3;
-var _LATIN = new RegExp("\\p{Script=Latin}", "u");
-var _CYRILLIC = new RegExp("\\p{Script=Cyrillic}", "u");
-var _GREEK = new RegExp("\\p{Script=Greek}", "u");
-var _LETTER = new RegExp("\\p{L}", "u");
-var TOKEN_RE = /[\p{L}\p{M}\p{Nd}]+/gu;
-var CONFUSABLE_FOREIGN = /* @__PURE__ */ new Set([
-  // Cyrillic lowercase ↔ Latin
-  1072,
-  1077,
-  1086,
-  1088,
-  1089,
-  1091,
-  1093,
-  1109,
-  1110,
-  1112,
-  1211,
-  1281,
-  1307,
-  1399,
-  // Cyrillic uppercase ↔ Latin
-  1040,
-  1042,
-  1045,
-  1050,
-  1052,
-  1053,
-  1054,
-  1056,
-  1057,
-  1058,
-  1059,
-  1061,
-  1029,
-  1030,
-  1032,
-  // Greek lowercase ↔ Latin
-  945,
-  949,
-  959,
-  957,
-  961,
-  965,
-  967,
-  954,
-  // Greek uppercase ↔ Latin (only those with a real Latin twin)
-  913,
-  914,
-  917,
-  918,
-  919,
-  921,
-  922,
-  924,
-  925,
-  927,
-  929,
-  932,
-  933,
-  935,
-  914
-]);
-function _script_of(ch) {
-  if (_LATIN.test(ch)) return "latin";
-  if (_CYRILLIC.test(ch)) return "cyrillic";
-  if (_GREEK.test(ch)) return "greek";
-  return "other";
-}
-function classifyToken(token) {
-  let latin = 0;
-  let cyrillic = 0;
-  let greek = 0;
-  let letters = 0;
-  for (const ch of token) {
-    if (!_LETTER.test(ch)) continue;
-    letters += 1;
-    const script = _script_of(ch);
-    if (script === "latin") {
-      latin += 1;
-    } else if (script === "cyrillic" || script === "greek") {
-      if (CONFUSABLE_FOREIGN.has(ch.codePointAt(0))) {
-        if (script === "cyrillic") cyrillic += 1;
-        else greek += 1;
-      }
-    }
-  }
-  if (letters < MIN_LETTERS) return null;
-  const foreign = cyrillic + greek;
-  if (latin === 0 || foreign === 0) return null;
-  if (latin <= foreign) return null;
-  const which = cyrillic > 0 && greek > 0 ? "cyrillic+greek" : cyrillic > 0 ? "cyrillic" : "greek";
-  return `latin+${which} (${latin} latin / ${foreign} foreign-confusable)`;
-}
-
 export {
   ROOT,
   DEFAULT_SCAN_ROOTS,
@@ -1195,7 +1098,5 @@ export {
   report,
   py_json_dumps_indent2,
   _classify,
-  _scan,
-  TOKEN_RE,
-  classifyToken
+  _scan
 };

package/dist/cli-delegate/chunk-IROAQ77A.js

@@ -0,0 +1,137 @@
+import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+import {
+  classifyOwnership
+} from "./chunk-J2SJZICO.js";
+
+// src/install/preserve.ts
+var SIDECAR_SUFFIX = ".agent-config.new";
+var EXIT_COMPLETED_WITH_CONFLICTS = 3;
+function isLedgerMigration(inputs) {
+  if (!inputs.exists || inputs.force) return false;
+  if (inputs.ledgerListed !== true) return false;
+  if (inputs.onDiskSha256 === null) return false;
+  return classifyOwnership(inputs.recordedSha256, inputs.onDiskSha256) === "unknown";
+}
+function decideDeployWrite(inputs) {
+  if (!inputs.exists) return "write";
+  if (inputs.force) return "write";
+  const ownership = classifyOwnership(inputs.recordedSha256, inputs.onDiskSha256);
+  if (ownership === "recorded-modified") return "preserve";
+  if (ownership === "unknown" && isLedgerMigration(inputs)) {
+    return inputs.packagedSha256 != null && inputs.packagedSha256 === inputs.onDiskSha256 ? "write" : "preserve";
+  }
+  return "write";
+}
+function sidecarPathFor(target) {
+  return `${target}${SIDECAR_SUFFIX}`;
+}
+function preservedFileMessage(target, sidecar) {
+  return `Preserved user-modified ${target}. Package content was written to ${sidecar}; the active installation is not current. Review and merge it, or rerun with --force to replace the managed file.`;
+}
+function migrationPreservedMessage(target, sidecar) {
+  return `Preserved ${target} without being able to classify it: this package deployed it before it began recording digests, so an edit and an older version look the same here. Package content was written to ${sidecar}; the active installation is not current. Review and merge it, or rerun with --force to replace the managed file. Once resolved, this file is classified normally on every later install.`;
+}
+function conflictSummaryMessage(count) {
+  const noun = count === 1 ? "file" : "files";
+  return `Completed with conflicts: ${count} user-modified ${noun} preserved. Package content is staged alongside as *${SIDECAR_SUFFIX}; the active installation is not current until you merge it, or rerun with --force to replace the managed ${noun}.`;
+}
+function foreignSidecarMessage(target, sidecar) {
+  return `Refusing to replace ${sidecar}: it already exists with different content and this install cannot show it wrote it. Package content for ${target} was NOT staged. Move or delete that file and re-run, or rerun with --force to replace the managed file instead.`;
+}
+
+// src/install/plan.ts
+import { createHash } from "node:crypto";
+import { readFileSync, readdirSync, statSync } from "node:fs";
+import { join, relative, resolve } from "node:path";
+function sha256File(path) {
+  try {
+    const data = readFileSync(path);
+    return createHash("sha256").update(data).digest("hex");
+  } catch {
+    return null;
+  }
+}
+function fileEntry(path, kind, options) {
+  return {
+    path,
+    kind,
+    sha256: options.hashContent ? sha256File(path) : null
+  };
+}
+function walkSourceTree(dir) {
+  const out = [];
+  walkInto(dir, out);
+  return out;
+}
+function walkInto(dir, out) {
+  let entries;
+  try {
+    entries = readdirSync(dir).sort();
+  } catch {
+    return;
+  }
+  for (const name of entries) {
+    const full = join(dir, name);
+    let isDir;
+    try {
+      isDir = statSync(full).isDirectory();
+    } catch {
+      continue;
+    }
+    if (isDir) {
+      walkInto(full, out);
+    } else {
+      out.push(full);
+    }
+  }
+}
+function buildInstallPlan(inputs) {
+  const filesByTool = {};
+  for (const source of inputs.sources) {
+    const bucket = filesByTool[source.toolId] ?? [];
+    let files = walkSourceTree(source.srcDir);
+    if (source.fileFilter !== void 0) {
+      files = files.filter(source.fileFilter);
+    }
+    for (const srcFile of files) {
+      const rel = relative(source.srcDir, srcFile);
+      const destPath = resolve(source.destDir, rel);
+      bucket.push(
+        fileEntry(srcFile, source.kind, {
+          hashContent: source.kind !== "bridge"
+        })
+      );
+      bucket[bucket.length - 1] = {
+        ...bucket[bucket.length - 1],
+        path: destPath
+      };
+    }
+    filesByTool[source.toolId] = bucket;
+  }
+  for (const source of inputs.sources) {
+    if (!(source.toolId in filesByTool)) {
+      filesByTool[source.toolId] = [];
+    }
+  }
+  return {
+    version: 2,
+    target: inputs.target,
+    root: inputs.root,
+    filesByTool,
+    mergedKeysByTool: {},
+    policy: inputs.policy
+  };
+}
+
+export {
+  EXIT_COMPLETED_WITH_CONFLICTS,
+  isLedgerMigration,
+  decideDeployWrite,
+  sidecarPathFor,
+  preservedFileMessage,
+  migrationPreservedMessage,
+  conflictSummaryMessage,
+  foreignSidecarMessage,
+  sha256File,
+  buildInstallPlan
+};