@i4ctime/q-ring 0.13.1 → 0.14.0

package/dist/index.js

@@ -6,6 +6,7 @@ import {
   checkSSRF,
   clearMemory,
   collapseEnvironment,
+  countLegacyApprovals,
   deleteSecret,
   detectAnomalies,
   disableHook,
@@ -36,13 +37,14 @@ import {
   remember,
   removeHook,
   revokeApproval,
+  serviceForScope,
   setSecret,
   tunnelCreate,
   tunnelDestroy,
   tunnelList,
   tunnelRead,
   verifyAuditChain
-} from "./chunk-Z7UJFHVE.js";
+} from "./chunk-C2TFJ2EH.js";
 
 // src/cli/commands.ts
 import { Command, Help } from "commander";
@@ -1881,12 +1883,39 @@ function registerValidationCommands(program2) {
 
 // src/core/exec.ts
 import { spawn } from "child_process";
+import { StringDecoder } from "string_decoder";
 import { Transform } from "stream";
 var BUILTIN_PROFILES = {
   unrestricted: { name: "unrestricted" },
   restricted: {
     name: "restricted",
-    denyCommands: ["curl", "wget", "ssh", "scp", "nc", "netcat", "ncat"],
+    denyCommands: [
+      // Network tools.
+      "curl",
+      "wget",
+      "ssh",
+      "scp",
+      "nc",
+      "netcat",
+      "ncat",
+      // Interpreters and shells: given the secret env vars, `python -c`,
+      // `node -e`, `bash -c`, etc. can perform arbitrary network I/O and
+      // exfiltrate them, defeating allowNetwork. Denied by default in
+      // `restricted`; to run them with secrets use a custom profile in
+      // .q-ring.json, or the `ci` / `unrestricted` profile.
+      "python",
+      "python2",
+      "python3",
+      "node",
+      "deno",
+      "bun",
+      "perl",
+      "ruby",
+      "php",
+      "sh",
+      "bash",
+      "zsh"
+    ],
     maxRuntimeSeconds: 30,
     allowNetwork: false,
     stripEnvVars: ["HTTP_PROXY", "HTTPS_PROXY", "ALL_PROXY"]
@@ -1906,6 +1935,11 @@ var RedactionTransform = class extends Transform {
   patterns = [];
   tail = "";
   maxLen = 0;
+  // Decodes UTF-8 across chunk boundaries: a multi-byte character split between
+  // two Buffer chunks would otherwise be corrupted to U+FFFD by chunk.toString()
+  // BEFORE matching runs, letting a multi-byte secret slip through unredacted.
+  // StringDecoder buffers the incomplete trailing bytes until the rest arrives.
+  decoder = new StringDecoder("utf8");
   constructor(secretsToRedact) {
     super();
     const validSecrets = secretsToRedact.filter((s) => s.length > 5);
@@ -1923,7 +1957,8 @@ var RedactionTransform = class extends Transform {
       this.push(chunk);
       return callback();
     }
-    const text = this.tail + chunk.toString();
+    const decoded = typeof chunk === "string" ? chunk : this.decoder.write(chunk);
+    const text = this.tail + decoded;
     let redacted = text;
     for (const { value, replacement } of this.patterns) {
       redacted = redacted.split(value).join(replacement);
@@ -1939,8 +1974,8 @@ var RedactionTransform = class extends Transform {
     callback();
   }
   _flush(callback) {
-    if (this.tail) {
-      let final = this.tail;
+    let final = this.tail + this.decoder.end();
+    if (final) {
       for (const { value, replacement } of this.patterns) {
         final = final.split(value).join(replacement);
       }
@@ -2457,7 +2492,7 @@ function registerToolingCommands(program2) {
     }
   });
   program2.command("status").description("Launch the quantum status dashboard in your browser").option("--port <port>", "Port to serve on", "9876").option("--no-open", "Don't auto-open the browser").action(async (cmd) => {
-    const { startDashboardServer } = await import("./dashboard-2IGUR7PA.js");
+    const { startDashboardServer } = await import("./dashboard-PYYAED45.js");
     const { exec } = await import("child_process");
     const { platform } = await import("os");
     const port = Number(cmd.port);
@@ -3245,6 +3280,7 @@ function registerSecurityCommands(program2) {
   ).option("-g, --global", "Global scope").option("-p, --project", "Project scope").option("--project-path <path>", "Explicit project path").option("--for <seconds>", "Duration of approval in seconds", parseInt, 3600).option("--reason <text>", "Reason for granting approval").option("--revoke", "Revoke an existing approval").option("--list", "List all approvals").action((key, cmd) => {
     const opts = buildOpts(cmd);
     const scope = opts.scope ?? "global";
+    const service = serviceForScope(scope, opts);
     if (cmd.list) {
       const approvals = listApprovals();
       if (approvals.length === 0) {
@@ -3266,7 +3302,7 @@ function registerSecurityCommands(program2) {
       return;
     }
     if (cmd.revoke) {
-      const revoked = revokeApproval(key, scope);
+      const revoked = revokeApproval(key, scope, service);
       if (revoked) {
         console.log(
           `${SYMBOLS.check} ${c.yellow("revoked")} approval for ${c.bold(key)}`
@@ -3276,7 +3312,7 @@ function registerSecurityCommands(program2) {
       }
       return;
     }
-    const entry = grantApproval(key, scope, cmd.for, {
+    const entry = grantApproval(key, scope, service, cmd.for, {
       reason: cmd.reason ?? "manual approval"
     });
     console.log(
@@ -3482,6 +3518,21 @@ function checkPolicy() {
     detail: active.length ? `active: ${active.join(", ")}` : 'none configured (add a "policy" section to .q-ring.json to enable)'
   };
 }
+function checkLegacyApprovals() {
+  const n = countLegacyApprovals();
+  if (n === 0) {
+    return {
+      name: "approval bindings",
+      status: "ok",
+      detail: "no legacy approvals; all bound to a project/team/org identity"
+    };
+  }
+  return {
+    name: "approval bindings",
+    status: "warn",
+    detail: `${n} pre-v0.14 approval(s) have no project binding and will NOT grant access \u2014 re-run \`qring approve\` for each`
+  };
+}
 function checkMcpBinary() {
   const exts = process.platform === "win32" ? [".cmd", ".exe", ".bat", ""] : [""];
   for (const dir of (process.env.PATH ?? "").split(delimiter)) {
@@ -3511,6 +3562,7 @@ function registerDoctorCommand(program2) {
       checkAuditLog(),
       checkManifest(projectPath),
       checkPolicy(),
+      checkLegacyApprovals(),
       checkMcpBinary()
     ];
     const failed = checks.filter((r) => r.status === "fail").length;