@goobits/sherpa 1.0.1

package/dist/index.js

@@ -0,0 +1,36 @@
+import {
+  runInit
+} from "./chunk-IIU6U7TE.js";
+import {
+  DEFAULT_CONFIG,
+  checkBashCommand,
+  checkCommand,
+  checkPipeline,
+  extractCommands,
+  isPathWithinAllowed,
+  matchesAllowRule,
+  matchesBlockRule,
+  normalizePath,
+  offloadOutput,
+  parseCommand,
+  runPost,
+  runPre
+} from "./chunk-5NF3BSD6.js";
+import "./chunk-3CILH2TO.js";
+export {
+  DEFAULT_CONFIG,
+  checkBashCommand,
+  checkCommand,
+  checkPipeline,
+  extractCommands,
+  isPathWithinAllowed,
+  matchesAllowRule,
+  matchesBlockRule,
+  normalizePath,
+  offloadOutput,
+  parseCommand,
+  runInit,
+  runPost,
+  runPre
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/parser.d.ts

@@ -0,0 +1,21 @@
+/**
+ * AST parsing utilities for bash commands
+ */
+import type { ASTNode, CommandInfo, PathInfo } from './types.js';
+/**
+ * Normalize a path to prevent traversal attacks
+ */
+export declare function normalizePath(inputPath: string): PathInfo;
+/**
+ * Check if a normalized path matches an allowed pattern
+ */
+export declare function isPathWithinAllowed(pathInfo: PathInfo, allowedPattern: string): boolean;
+/**
+ * Extract all commands from AST (handles pipelines, lists, etc.)
+ */
+export declare function extractCommands(node: ASTNode | null): CommandInfo[];
+/**
+ * Parse a Command node into structured info
+ */
+export declare function parseCommand(node: ASTNode): CommandInfo | null;
+//# sourceMappingURL=parser.d.ts.map

package/dist/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAchE;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,CAsCzD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,QAAQ,EAClB,cAAc,EAAE,MAAM,GACpB,OAAO,CAST;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,GAAG,WAAW,EAAE,CAiCnE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAkD9D"}

package/dist/parser.js

@@ -0,0 +1,152 @@
+/**
+ * AST parsing utilities for bash commands
+ */
+import { homedir } from 'os';
+// Cache compiled RegExp patterns
+const regexCache = new Map();
+function getRegex(pattern) {
+    let regex = regexCache.get(pattern);
+    if (!regex) {
+        regex = new RegExp(pattern);
+        regexCache.set(pattern, regex);
+    }
+    return regex;
+}
+/**
+ * Normalize a path to prevent traversal attacks
+ */
+export function normalizePath(inputPath) {
+    if (!inputPath) {
+        return {
+            original: inputPath,
+            normalized: inputPath,
+            hasTraversal: false,
+            isAbsolute: false
+        };
+    }
+    const original = inputPath;
+    // Handle home directory
+    let normalized = inputPath.replace(/^~/, homedir());
+    const isAbsolute = original.startsWith('/') || original.startsWith('~');
+    // Split into segments and resolve
+    const segments = normalized.split('/');
+    const resolved = [];
+    for (const seg of segments) {
+        if (seg === '..') {
+            resolved.pop();
+        }
+        else if (seg !== '.' && seg !== '') {
+            resolved.push(seg);
+        }
+    }
+    // Only prefix with / for absolute paths
+    normalized = isAbsolute ? `/${resolved.join('/')}` : resolved.join('/');
+    return {
+        original,
+        normalized,
+        hasTraversal: original.includes('..'),
+        isAbsolute
+    };
+}
+/**
+ * Check if a normalized path matches an allowed pattern
+ */
+export function isPathWithinAllowed(pathInfo, allowedPattern) {
+    const regex = getRegex(allowedPattern);
+    // If there's traversal, check the NORMALIZED path, not original
+    if (pathInfo.hasTraversal) {
+        return regex.test(pathInfo.normalized);
+    }
+    return regex.test(pathInfo.original);
+}
+/**
+ * Extract all commands from AST (handles pipelines, lists, etc.)
+ */
+export function extractCommands(node) {
+    if (!node) {
+        return [];
+    }
+    const commands = [];
+    switch (node.type) {
+        case 'Script':
+        case 'Pipeline':
+            for (const cmd of node.commands || []) {
+                commands.push(...extractCommands(cmd));
+            }
+            break;
+        case 'LogicalExpression':
+            if (node.left) {
+                commands.push(...extractCommands(node.left));
+            }
+            if (node.right) {
+                commands.push(...extractCommands(node.right));
+            }
+            break;
+        case 'Command': {
+            const parsed = parseCommand(node);
+            if (parsed) {
+                commands.push(parsed);
+            }
+            break;
+        }
+        case 'Subshell':
+        case 'CompoundList':
+            for (const cmd of node.list || []) {
+                commands.push(...extractCommands(cmd));
+            }
+            break;
+    }
+    return commands;
+}
+/**
+ * Parse a Command node into structured info
+ */
+export function parseCommand(node) {
+    if (!node.name?.text) {
+        return null;
+    }
+    const cmdName = node.name.text;
+    const info = {
+        cmd: cmdName,
+        args: [],
+        flags: [],
+        paths: [],
+        raw: []
+    };
+    // Parse suffix (arguments and flags)
+    for (const part of node.suffix || []) {
+        const text = part.text;
+        if (!text) {
+            continue;
+        }
+        info.raw.push(text);
+        if (text.startsWith('--')) {
+            // Long flag: --force, --recursive
+            const flag = text.slice(2).split('=')[0];
+            info.flags.push(flag);
+        }
+        else if (text.startsWith('-') &&
+            text.length > 1 &&
+            !/^-\d+\.?\d*$/.test(text)) {
+            // Short flags: -rf, -f, -r (but not negative numbers like -1)
+            const flags = text.slice(1);
+            for (const f of flags) {
+                info.flags.push(f);
+            }
+        }
+        else {
+            // Regular argument (could be path)
+            info.args.push(text);
+            if (/^[/~$.]/.test(text)) {
+                info.paths.push(text);
+            }
+        }
+    }
+    // Handle git subcommands
+    if (cmdName === 'git' && info.args.length > 0) {
+        info.subcommand = info.args[0];
+        info.subArgs = info.args.slice(1);
+    }
+    return info;
+}
+//# sourceMappingURL=parser.js.map

package/dist/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAI5B,iCAAiC;AACjC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;AAE5C,SAAS,QAAQ,CAAC,OAAe;IAChC,IAAI,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAA;QAC3B,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC9C,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO;YACN,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,KAAK;SACjB,CAAA;IACF,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAA;IAE1B,wBAAwB;IACxB,IAAI,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAEnD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IAEvE,kCAAkC;IAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAE7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAClB,QAAQ,CAAC,GAAG,EAAE,CAAA;QACf,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnB,CAAC;IACF,CAAC;IAED,wCAAwC;IACxC,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,IAAK,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEzE,OAAO;QACN,QAAQ;QACR,UAAU;QACV,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrC,UAAU;KACV,CAAA;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAClC,QAAkB,EAClB,cAAsB;IAEtB,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAA;IAEtC,gEAAgE;IAChE,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoB;IACnD,IAAI,CAAC,IAAI,EAAE,CAAC;QAAA,OAAO,EAAE,CAAA;IAAA,CAAC;IAEtB,MAAM,QAAQ,GAAkB,EAAE,CAAA;IAElC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU;YACd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACvC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;YACvC,CAAC;YACD,MAAK;QAEN,KAAK,mBAAmB;YACvB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAA,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YAAA,CAAC;YAC7D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAA,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YAAA,CAAC;YAC/D,MAAK;QAEN,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YACjC,IAAI,MAAM,EAAE,CAAC;gBAAA,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAAA,CAAC;YACnC,MAAK;QACN,CAAC;QAED,KAAK,UAAU,CAAC;QAChB,KAAK,cAAc;YAClB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;YACvC,CAAC;YACD,MAAK;IACP,CAAC;IAED,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAa;IACzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QAAA,OAAO,IAAI,CAAA;IAAA,CAAC;IAEnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;IAE9B,MAAM,IAAI,GAAgB;QACzB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,EAAE;QACT,GAAG,EAAE,EAAE;KACP,CAAA;IAED,qCAAqC;IACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YAAA,SAAQ;QAAA,CAAC;QAErB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEnB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,kCAAkC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACxC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtB,CAAC;aAAM,IACN,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACpB,IAAI,CAAC,MAAM,GAAG,CAAC;YACf,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EACzB,CAAC;YACF,8DAA8D;YAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACnB,CAAC;QACF,CAAC;aAAM,CAAC;YACP,mCAAmC;YACnC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACpB,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtB,CAAC;QACF,CAAC;IACF,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC;IAED,OAAO,IAAI,CAAA;AACZ,CAAC"}