@fusengine/harness 0.1.89 → 0.1.91

package/dist/{evaluate-C1VSI5pb.mjs → evaluate-CMiIqHeH.mjs}

@@ -652,6 +652,257 @@ function securityGuard(ctx) {
 	};
 }
 //#endregion
+//#region src/policy/guards/bash-write-redirects.ts
+function closingParen(input, start) {
+	let depth = 1;
+	let quote = null;
+	for (let i = start; i < input.length; i++) {
+		const ch = input[i];
+		if (ch === "\\" && quote !== "'") {
+			i++;
+			continue;
+		}
+		if (quote) {
+			if (ch === quote) quote = null;
+			continue;
+		}
+		if (ch === "'" || ch === "\"") {
+			quote = ch;
+			continue;
+		}
+		if (ch === "(") {
+			depth++;
+			continue;
+		}
+		if (ch === ")" && --depth === 0) return i;
+	}
+	return input.length;
+}
+function closingBacktick(input, start) {
+	for (let i = start; i < input.length; i++) {
+		if (input[i] === "\\") {
+			i++;
+			continue;
+		}
+		if (input[i] === "`") return i;
+	}
+	return input.length;
+}
+function closingArithmetic(input, start) {
+	let depth = 1;
+	let quote = null;
+	for (let i = start; i < input.length; i++) {
+		const ch = input[i];
+		if (ch === "\\" && quote !== "'") {
+			i++;
+			continue;
+		}
+		if (quote) {
+			if (ch === quote) quote = null;
+			continue;
+		}
+		if (ch === "'" || ch === "\"") {
+			quote = ch;
+			continue;
+		}
+		if (ch === "(") {
+			depth++;
+			continue;
+		}
+		if (ch !== ")") continue;
+		if (depth === 1 && input[i + 1] === ")") return i + 1;
+		depth--;
+	}
+	return input.length;
+}
+function closingConditional(input, start) {
+	let quote = null;
+	for (let i = start; i < input.length - 1; i++) {
+		const ch = input[i];
+		if (ch === "\\" && quote !== "'") {
+			i++;
+			continue;
+		}
+		if (quote) {
+			if (ch === quote) quote = null;
+			continue;
+		}
+		if (ch === "'" || ch === "\"") {
+			quote = ch;
+			continue;
+		}
+		if (ch === "]" && input[i + 1] === "]") return i;
+	}
+	return input.length;
+}
+function commentStart(input, index, start) {
+	return input[index] === "#" && (index === start || /[\s;|&()]/.test(input[index - 1] ?? ""));
+}
+function commandPosition(input, index, start) {
+	const prefix = input.slice(start, index);
+	const segment = prefix.slice(Math.max(prefix.lastIndexOf(";"), prefix.lastIndexOf("|"), prefix.lastIndexOf("&"), prefix.lastIndexOf("\n")) + 1).trim();
+	return segment === "" || /^(?:if|elif|while|until|then|do|!)$/.test(segment);
+}
+function readTarget(input, start, end) {
+	let out = "";
+	let quote = null;
+	for (let i = start; i < end; i++) {
+		const ch = input[i] ?? "";
+		if (ch === "\\" && quote !== "'") {
+			if (i + 1 < end) out += input[++i] ?? "";
+			continue;
+		}
+		if (quote) {
+			if (ch === quote) quote = null;
+			else out += ch;
+			continue;
+		}
+		if (ch === "'" || ch === "\"") {
+			quote = ch;
+			continue;
+		}
+		if (/\s|[;&|<>]/.test(ch)) break;
+		out += ch;
+	}
+	return out;
+}
+function scanDoubleQuote(input, start, end, out) {
+	for (let i = start; i < end; i++) {
+		if (input[i] === "\\") {
+			i++;
+			continue;
+		}
+		if (input[i] === "\"") return i;
+		if (input[i] === "$" && input[i + 1] === "(" && input[i + 2] === "(") {
+			const close = closingArithmetic(input, i + 3);
+			scanExpansions(input, i + 3, close - 1, out);
+			i = close;
+		} else if (input[i] === "$" && input[i + 1] === "(") {
+			const close = closingParen(input, i + 2);
+			scanRange(input, i + 2, close, out);
+			i = close;
+		} else if (input[i] === "`") {
+			const close = closingBacktick(input, i + 1);
+			scanRange(input, i + 1, close, out);
+			i = close;
+		}
+	}
+	return end;
+}
+function scanExpansions(input, start, end, out) {
+	for (let i = start; i < end; i++) {
+		if (input[i] === "\\") {
+			i++;
+			continue;
+		}
+		if (commentStart(input, i, start)) {
+			const newline = input.indexOf("\n", i + 1);
+			i = newline < 0 || newline >= end ? end : newline;
+			continue;
+		}
+		if (input[i] === "'") {
+			const close = input.indexOf("'", i + 1);
+			i = close < 0 || close >= end ? end : close;
+			continue;
+		}
+		if (input[i] === "\"") {
+			i = scanDoubleQuote(input, i + 1, end, out);
+			continue;
+		}
+		if (input[i] === "$" && input[i + 1] === "(" && input[i + 2] === "(") {
+			const close = closingArithmetic(input, i + 3);
+			scanExpansions(input, i + 3, close - 1, out);
+			i = close;
+		} else if (input[i] === "$" && input[i + 1] === "(") {
+			const close = closingParen(input, i + 2);
+			scanRange(input, i + 2, close, out);
+			i = close;
+		} else if (input[i] === "`") {
+			const close = closingBacktick(input, i + 1);
+			scanRange(input, i + 1, close, out);
+			i = close;
+		}
+	}
+}
+function scanRange(input, start, end, out) {
+	for (let i = start; i < end; i++) {
+		const ch = input[i];
+		if (ch === "\\") {
+			i++;
+			continue;
+		}
+		if (commentStart(input, i, start)) {
+			const newline = input.indexOf("\n", i + 1);
+			i = newline < 0 || newline >= end ? end : newline;
+			continue;
+		}
+		if (ch === "'") {
+			const close = input.indexOf("'", i + 1);
+			i = close < 0 || close >= end ? end : close;
+			continue;
+		}
+		if (ch === "\"") {
+			i = scanDoubleQuote(input, i + 1, end, out);
+			continue;
+		}
+		if (ch === "[" && input[i + 1] === "[" && commandPosition(input, i, start)) {
+			const close = closingConditional(input, i + 2);
+			scanExpansions(input, i + 2, close, out);
+			i = close + 1;
+			continue;
+		}
+		if (ch === "(" && input[i + 1] === "(" && commandPosition(input, i, start)) {
+			const close = closingArithmetic(input, i + 2);
+			scanExpansions(input, i + 2, close - 1, out);
+			i = close;
+			continue;
+		}
+		if (ch === "$" && input[i + 1] === "(" && input[i + 2] === "(") {
+			const close = closingArithmetic(input, i + 3);
+			scanExpansions(input, i + 3, close - 1, out);
+			i = close;
+			continue;
+		}
+		if (ch === "$" && input[i + 1] === "(") {
+			const close = closingParen(input, i + 2);
+			scanRange(input, i + 2, close, out);
+			i = close;
+			continue;
+		}
+		if (ch === "`") {
+			const close = closingBacktick(input, i + 1);
+			scanRange(input, i + 1, close, out);
+			i = close;
+			continue;
+		}
+		if (ch !== ">") continue;
+		if (input[i + 1] === "(") continue;
+		if (input[i - 1] === "&") {
+			if (input[i + 1] === ">") i++;
+			continue;
+		}
+		let opStart = i;
+		while (opStart > start && /\d/.test(input[opStart - 1] ?? "")) opStart--;
+		if (input[opStart - 1] === "&") opStart--;
+		let cursor = i + (input[i + 1] === ">" || input[i + 1] === "|" ? 2 : 1);
+		const operator = input.slice(opStart, cursor);
+		while (/\s/.test(input[cursor] ?? "")) cursor++;
+		if (input[cursor] === "&") continue;
+		const target = readTarget(input, cursor, end);
+		if (target) out.push({
+			start: opStart,
+			operator,
+			target
+		});
+	}
+}
+/** Return active output redirects, excluding quoted/escaped `>` characters. */
+function shellOutputRedirects(command) {
+	const out = [];
+	scanRange(command, 0, command.length, out);
+	return out;
+}
+//#endregion
 //#region src/policy/guards/protected-path.ts
 /**
 * Path fragments that mark a location as internal/generated state.
@@ -709,7 +960,7 @@ function extractWriteTargets(cmd) {
 		const v = unquote((t ?? "").trim());
 		if (v && v !== "/dev/null") out.push(v);
 	};
-	for (const m of cmd.matchAll(/(?<![2&\d])>{1,2}\s*('[^']+'|"[^"]+"|\S+)/g)) push(m[1]);
+	for (const redirect of shellOutputRedirects(cmd)) push(redirect.target);
 	for (const m of cmd.matchAll(/\btee\b(?:\s+-\S+)*\s+('[^']+'|"[^"]+"|\S+)/g)) push(m[1]);
 	for (const m of cmd.matchAll(/\bdd\b[^|;&]*\bof=('[^']+'|"[^"]+"|\S+)/g)) push(m[1]);
 	for (const seg of cmd.split(/[;&|]+/)) {
@@ -755,15 +1006,10 @@ function resolvePath(raw) {
 	const stripped = raw.trim().replace(/^['"]|['"]$/g, "");
 	return normalize((stripped === "~" || stripped.startsWith("~/") ? homedir() + stripped.slice(1) : stripped).replace(/\$HOME/g, homedir()));
 }
-/** Extract the file path after a `>`/`>>` redirect (parity extract_redirect_target). */
-function extractRedirectTarget(cmd) {
-	const m = cmd.match(/>>\s*(\S+)|(?<![0-9&])>\s*(\S+)/);
-	return m ? resolvePath(m[1] ?? m[2] ?? "") : null;
-}
 /** True when a `>`/`>>` redirect targets a harness-owned safe path (parity is_safe_write_path). */
 function isSafeWritePath(cmd) {
-	const target = extractRedirectTarget(cmd);
-	return target !== null && SAFE_WRITE_PATHS.some((safe) => target === safe || target.startsWith(safe + "/"));
+	const targets = shellOutputRedirects(cmd).map((redirect) => resolvePath(redirect.target)).filter((target) => target !== "/dev/null");
+	return targets.length > 0 && targets.every((target) => SAFE_WRITE_PATHS.some((safe) => target === safe || target.startsWith(safe + "/")));
 }
 /** Extract the file argument of `tee`/`dd of=` (parity extract_command_target). */
 function extractCommandTarget(cmd) {
@@ -976,9 +1222,10 @@ function blockCodeWrite(reason) {
 		actions: ["Use the Write/Edit tool instead"]
 	};
 }
-function askFileWrite(reason) {
+function askFileWrite(reason, ruleId = "bash-write:file-write") {
 	return {
 		kind: "ask",
+		ruleId,
 		title: "Bash file write",
 		reason,
 		actions: ["Use the Write/Edit tool instead"]
@@ -1002,20 +1249,21 @@ function bashWriteGuard(ctx) {
 	if (ctx.tool !== "Bash" || !ctx.command) return null;
 	const cmd = ctx.command;
 	const stripped = cmd.trim();
+	const redirects = shellOutputRedirects(cmd).filter((redirect) => redirect.target !== "/dev/null");
 	const mutator = CODE_MUTATORS.find((m) => m.re.test(cmd));
 	if (mutator) return blockCodeWrite(`${mutator.desc} — Use Edit/Write tools instead`);
 	if (CODE_COMMAND_WRITE.test(cmd)) return blockCodeWrite("tee/dd into a code file — Use Edit/Write tools instead");
 	if (PYTHON_C_ANCHOR.test(cmd) && PYTHON_WRITES.test(cmd)) return blockCodeWrite("Python inline script mutates files/spawns a process — Use Edit/Write tools instead");
-	if (SAFE_PREFIXES.some((p) => stripped.startsWith(p)) && !FILE_REDIRECT.test(stripped)) return null;
+	if (SAFE_PREFIXES.some((p) => stripped.startsWith(p)) && redirects.length === 0) return null;
 	if (cmd.includes(".fuse-harness/cache/sessions")) return {
 		kind: "block",
 		title: "Session-state tampering",
 		reason: "Bash access to the harness session-state directory is a hook-bypass vector — the freshness/APEX enforcement reads it to decide block/allow.",
 		actions: ["Never read or write session state from the shell"]
 	};
-	if (FILE_REDIRECT.test(cmd)) {
+	if (redirects.length > 0) {
 		if (isSafeWritePath(cmd)) return null;
-		return CODE_REDIRECT.test(cmd) ? blockCodeWrite("Bash redirect to code file — Use Write/Edit tools (enforces APEX + SOLID specs)") : askFileWrite("Shell redirect to file detected. Authorize?");
+		return redirects.some((redirect) => /\.(?:ts|tsx|js|jsx|py|go|rb|rs|java|kt|php|swift|vue|svelte|astro|css|c|cpp|h)\b/.test(redirect.target)) ? blockCodeWrite("Bash redirect to code file — Use Write/Edit tools (enforces APEX + SOLID specs)") : askFileWrite("Shell redirect to file detected. Authorize?", "bash-write:file-redirect");
 	}
 	if (/\bnode\s+-e\b/.test(cmd) && NODE_WRITES.test(cmd)) return hasSafeWriteTarget(cmd) ? null : askFileWrite("Node.js write operation detected. Authorize?");
 	if (/\bruby\s+-e\b/.test(cmd) && RUBY_WRITES.test(cmd)) return askFileWrite("Ruby write operation detected. Authorize?");
@@ -1541,4 +1789,4 @@ function evaluate(ctx) {
 	};
 }
 //#endregion
-export { matchPatterns as $, moduleAwarePath as A, protectedPathGuard as B, isInterfacesPath as C, isVendorPath as D, isTypesPath as E, FILE_REDIRECT as F, isFileSizeScoped as G, CRITICAL_PATTERNS as H, SAFE_PREFIXES as I, GIT_BLOCKED as J, resolveSolidRefFramework as K, SESSION_STATE_FRAGMENT as L, ASK_WRITERS as M, CODE_MUTATORS as N, langOfPath as O, CODE_REDIRECT as P, isRalphMode as Q, PROTECTED_FRAGMENTS as R, isHooksPath as S, isStoresPath as T, securityGuard as U, ASK_PATTERNS as V, computeEditResultLines as W, RALPH_SAFE as X, PROJECT_INSTALL as Y, SYSTEM_INSTALL as Z, rolloutVerdict as _, registerGuard as a, DEV_KEYWORDS as at, interfaceDeclLevel as b, GO_DECL_RE as c, isApexCommand as ct, PY_MODEL_RE as d, detectFramework as et, RUST_DECL_RE as f, conventionsMode as g, interfaceSeparationGuard as h, clearUserGuards as i, maskCommentsOnly as it, bashWriteGuard as j, lexProfileOf as k, JAVA_DECL_RE as l, requiredArchSkill as lt, TS_DECL_RE as m, FAIL_CLOSED as n, projectCaps as nt, runGuards as o, detectModularArchitecture as ot, SWIFT_PROTO_RE as p, GIT_ASK as q, GUARDS as r, maskCommentsAndStrings as rt, installGuard as s, detectProjectType as st, evaluate as t, nearestManifestDir as tt, PHP_DECL_RE as u, declaresExportedTypeAlias as v, isQueryPath as w, isComponentsPath as x, declaresInterface as y, PROTECTED_GIT_RE as z };
+export { isRalphMode as $, moduleAwarePath as A, protectedPathGuard as B, isInterfacesPath as C, isVendorPath as D, isTypesPath as E, FILE_REDIRECT as F, computeEditResultLines as G, ASK_PATTERNS as H, SAFE_PREFIXES as I, GIT_ASK as J, isFileSizeScoped as K, SESSION_STATE_FRAGMENT as L, ASK_WRITERS as M, CODE_MUTATORS as N, langOfPath as O, CODE_REDIRECT as P, SYSTEM_INSTALL as Q, PROTECTED_FRAGMENTS as R, isHooksPath as S, isStoresPath as T, CRITICAL_PATTERNS as U, shellOutputRedirects as V, securityGuard as W, PROJECT_INSTALL as X, GIT_BLOCKED as Y, RALPH_SAFE as Z, rolloutVerdict as _, registerGuard as a, maskCommentsOnly as at, interfaceDeclLevel as b, GO_DECL_RE as c, detectProjectType as ct, PY_MODEL_RE as d, matchPatterns as et, RUST_DECL_RE as f, conventionsMode as g, interfaceSeparationGuard as h, clearUserGuards as i, maskCommentsAndStrings as it, bashWriteGuard as j, lexProfileOf as k, JAVA_DECL_RE as l, isApexCommand as lt, TS_DECL_RE as m, FAIL_CLOSED as n, nearestManifestDir as nt, runGuards as o, DEV_KEYWORDS as ot, SWIFT_PROTO_RE as p, resolveSolidRefFramework as q, GUARDS as r, projectCaps as rt, installGuard as s, detectModularArchitecture as st, evaluate as t, detectFramework as tt, PHP_DECL_RE as u, requiredArchSkill as ut, declaresExportedTypeAlias as v, isQueryPath as w, isComponentsPath as x, declaresInterface as y, PROTECTED_GIT_RE as z };