@growthagent/ci 0.4.0 → 0.5.0

package/dist/cli.js

@@ -100,6 +100,7 @@ var FORBIDDEN_PATTERNS = [
   { pattern: /^\.github\//i, why: "workflow and CI configuration" },
   { pattern: /^\.git(\/|$)/i, why: "git internals" },
   { pattern: /(^|\/)\.env(\.|$)/i, why: "environment files" },
+  // except the examples below
   { pattern: /(^|\/)\.npmrc$|(^|\/)\.yarnrc(\.yml)?$|(^|\/)\.pypirc$/i, why: "registry credentials" },
   { pattern: /(^|\/)(package-lock\.json|pnpm-lock\.yaml|yarn\.lock|bun\.lockb?|Cargo\.lock|poetry\.lock|Gemfile\.lock|composer\.lock)$/i, why: "dependency lockfiles" },
   { pattern: /(^|\/)(Dockerfile|docker-compose\.ya?ml|Procfile)$/i, why: "build and deployment configuration" },
@@ -111,6 +112,44 @@ var FORBIDDEN_PATTERNS = [
   { pattern: /\.(pem|p12|pfx|key|keystore|jks)$/i, why: "key material" },
   { pattern: /(^|\/)node_modules\//i, why: "installed dependencies" }
 ];
+var EXAMPLE_ENV = /(^|\/)\.env(\.[\w-]+)*\.(example|sample|template)$/i;
+var CREDENTIAL_PREFIXES = [
+  "sk-",
+  "sk_live",
+  "sk_test",
+  "pk_live",
+  "rk_live",
+  "whsec_",
+  "phc_",
+  "ghp_",
+  "gho_",
+  "ghs_",
+  "github_pat_",
+  "AKIA",
+  "AIza",
+  "xox",
+  "eyJ",
+  "-----BEGIN"
+];
+function secretishEnvLine(line) {
+  const text = line.trim();
+  if (!text || text.startsWith("#")) return null;
+  const eq = text.indexOf("=");
+  if (eq < 0) return null;
+  const key = text.slice(0, eq).replace(/^export\s+/, "").trim();
+  const value = text.slice(eq + 1).trim().replace(/^["']|["']$/g, "").trim();
+  if (!value) return null;
+  if (/^https?:\/\//i.test(value)) return null;
+  for (const prefix of CREDENTIAL_PREFIXES) {
+    if (value.startsWith(prefix)) {
+      return `${key} carries what looks like a real credential`;
+    }
+  }
+  if (value.length >= 20 && /^[A-Za-z0-9_\-.]+$/.test(value)) {
+    return `${key} carries a ${value.length}-character opaque value, not a placeholder`;
+  }
+  return null;
+}
 var SYMLINK_MODE = "120000";
 var EXECUTABLE_MODE = "100755";
 function parsePatch(patch) {
@@ -183,6 +222,7 @@ function forbiddenReason(filePath) {
     return "an absolute path";
   }
   if (normalised.split("/").includes("..")) return "a parent-directory escape";
+  if (EXAMPLE_ENV.test(normalised)) return null;
   for (const { pattern, why } of FORBIDDEN_PATTERNS) {
     if (pattern.test(normalised)) return why;
   }
@@ -210,6 +250,20 @@ function validatePatch(patch, limits = DEFAULT_PATCH_LIMITS) {
         return { ok: false, reason: `the patch changes ${candidate}, which is ${why} \u2014 never modifiable by the agent` };
       }
     }
+    if (EXAMPLE_ENV.test(file.path)) {
+      if (file.addedLines > file.added.length) {
+        return {
+          ok: false,
+          reason: `the patch adds ${file.addedLines} lines to ${file.path}, more than can be checked for credentials`
+        };
+      }
+      for (const line of file.added) {
+        const why = secretishEnvLine(line);
+        if (why) {
+          return { ok: false, reason: `the patch writes a secret into ${file.path}: ${why}` };
+        }
+      }
+    }
     if (/(^|\/)package\.json$/i.test(file.path)) {
       const why = manifestChangeReason(file);
       if (why) {
@@ -537,8 +591,9 @@ async function implement() {
     console.error("pi exited non-zero \u2014 no patch produced");
     return 1;
   }
-  sh("git", ["checkout", "--", ".pi"], { allowFail: true });
-  sh("git", ["clean", "-fd", ".pi"], { allowFail: true });
+  const piTracked = sh("git", ["ls-files", "--", ".pi"], { allowFail: true });
+  if (piTracked) sh("git", ["checkout", "--", ".pi"], { allowFail: true });
+  sh("git", ["clean", "-fdq", ".pi"], { allowFail: true });
   sh("git", ["add", "-A"]);
   const patch = sh("git", ["diff", "--staged"]);
   if (!patch.trim()) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@growthagent/ci",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "private": false,
   "type": "module",
   "bin": {