@intutic/shared-types 3.1.2 → 3.1.4

package/dist/shellParse.js

@@ -0,0 +1,242 @@
+"use strict";
+/**
+ * A shell command, read as the commands it runs, or not at all.
+ *
+ * Deliberately a small subset of shell: words, quotes, escapes, comments and
+ * the operators `;`, `&`, `&&`, `|`, `|&`, `||` and newline. Anything else (a
+ * redirect, subshell, group, substitution, heredoc, control word) returns
+ * `null`, and so does anything malformed, because `null` is the answer that
+ * fails safe: every caller keeps its old behaviour on it.
+ *
+ * A port of the proxy's `shell_parse.rs`; intutic-clawde `gate/shell_parse.py`
+ * is another. All three run `fixtures/shell-parse-vectors.json`. Self-contained,
+ * because `@intutic/gate` keeps a byte-identical copy and the hook gates embed
+ * {@link SHELL_PARSE_JS_SOURCE}.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHELL_PARSE_JS_SOURCE = void 0;
+exports.parseShell = parseShell;
+exports.dropCarriedText = dropCarriedText;
+exports.isAllowEntry = isAllowEntry;
+exports.commandsOutsideAllow = commandsOutsideAllow;
+/** Words that open a construct this parser does not model. `alias` is here because it changes what the next word means. */
+const SHELL_CONTROL_WORDS = [
+    'if', 'then', 'else', 'elif', 'fi', 'for', 'while', 'until', 'do', 'done', 'case', 'esac',
+    'select', 'function', 'coproc', 'alias',
+];
+/** `NAME=` at `i`: the word sets a variable for the command after it. */
+function shellIsAssignment(text, i) {
+    let j = i;
+    while (j < text.length && /[A-Za-z0-9_]/.test(text[j]))
+        j++;
+    return j > i && !/[0-9]/.test(text[i]) && text[j] === '=';
+}
+/** `text` as pipelines of simple commands, or `null` when not understood. */
+function parseShell(text) {
+    const pipelines = [];
+    let pipeline = [];
+    let command = null;
+    let word = null;
+    let pipeOpen = false;
+    let i = 0;
+    const startWord = (at) => {
+        word ??= [];
+        command ??= { argv: [], literal: true, start: at, end: at };
+    };
+    const endWord = (at) => {
+        if (word !== null && command !== null) {
+            command.argv.push(word.join(''));
+            command.end = at;
+        }
+        word = null;
+    };
+    while (i < text.length) {
+        const c = text[i];
+        if (c === ' ' || c === '\t') {
+            endWord(i);
+            i++;
+        }
+        else if (c === '\\' && text[i + 1] === '\n') {
+            i += 2;
+        }
+        else if (c === '\\') {
+            if (i + 1 >= text.length)
+                return null;
+            startWord(i);
+            word.push(text[i + 1]);
+            i += 2;
+        }
+        else if (c === "'") {
+            startWord(i);
+            const close = text.indexOf("'", i + 1);
+            if (close === -1)
+                return null;
+            word.push(text.slice(i + 1, close));
+            i = close + 1;
+        }
+        else if (c === '"') {
+            startWord(i);
+            i++;
+            for (;;) {
+                if (i >= text.length)
+                    return null;
+                const q = text[i];
+                if (q === '"')
+                    break;
+                if (q === '`')
+                    return null;
+                if (q === '$') {
+                    if (text[i + 1] === '(')
+                        return null;
+                    command.literal = false;
+                }
+                if (q === '\\') {
+                    if (i + 1 >= text.length)
+                        return null;
+                    const next = text[i + 1];
+                    if (!'$"\\`\n'.includes(next))
+                        word.push('\\');
+                    if (next !== '\n')
+                        word.push(next);
+                    i += 2;
+                    continue;
+                }
+                word.push(q);
+                i++;
+            }
+            i++;
+        }
+        else if (c === '#' && word === null) {
+            while (i < text.length && text[i] !== '\n')
+                i++;
+        }
+        else if ('<>(){}`'.includes(c)) {
+            return null;
+        }
+        else if (c === '\n' || c === ';' || c === '&' || c === '|') {
+            endWord(i);
+            const doubled = (c === '&' || c === '|') && text[i + 1] === c;
+            if (command !== null) {
+                const done = command;
+                if (SHELL_CONTROL_WORDS.indexOf(done.argv[0]) !== -1)
+                    return null;
+                pipeline.push(done);
+                command = null;
+            }
+            else if (c === '\n') {
+                // A newline may follow an operator or stand alone.
+                i++;
+                continue;
+            }
+            else {
+                // Any other operator here has nothing to its left.
+                return null;
+            }
+            pipeOpen = c === '|' && !doubled;
+            if (pipeOpen) {
+                if (text[i + 1] === '&')
+                    i++;
+            }
+            else {
+                pipelines.push(pipeline);
+                pipeline = [];
+            }
+            i += doubled ? 2 : 1;
+        }
+        else {
+            if ('$*?[~'.includes(c) || (word === null && shellIsAssignment(text, i))) {
+                startWord(i);
+                command.literal = false;
+            }
+            startWord(i);
+            word.push(c);
+            i++;
+        }
+    }
+    endWord(text.length);
+    if (command !== null) {
+        const done = command;
+        if (SHELL_CONTROL_WORDS.indexOf(done.argv[0]) !== -1)
+            return null;
+        pipeline.push(done);
+    }
+    else if (pipeOpen) {
+        return null;
+    }
+    if (pipeline.length > 0)
+        pipelines.push(pipeline);
+    return pipelines;
+}
+/** `text` without the text no command consumes: a lone `echo`, `printf` or `git commit`. Unchanged unless the whole of it parsed. */
+function dropCarriedText(text) {
+    const pipelines = parseShell(text);
+    if (pipelines === null)
+        return text;
+    let out = '';
+    let kept = 0;
+    for (const pipeline of pipelines) {
+        if (pipeline.length !== 1)
+            continue;
+        const only = pipeline[0];
+        // `printf -v` keeps the text for whatever reads the variable.
+        const carries = only.argv[0] === 'echo' || (only.argv[0] === 'printf' && only.argv[1] !== '-v') || (only.argv[0] === 'git' && only.argv[1] === 'commit');
+        if (carries) {
+            out += text.slice(kept, only.start);
+            kept = only.end;
+        }
+    }
+    return out + text.slice(kept);
+}
+/**
+ * An `allow_commands:` entry, or null when it is not one plain command: `git
+ * status`, or `npm test *` for any further arguments. A word that could
+ * expand matches nothing exactly, so an entry may not hold one.
+ */
+function allowEntry(entry) {
+    const open = entry.endsWith(' *');
+    const parsed = parseShell(open ? entry.slice(0, -2) : entry);
+    if (parsed === null || parsed.length !== 1 || parsed[0].length !== 1)
+        return null;
+    const only = parsed[0][0];
+    if (!only.literal || only.argv.some((w) => /[$*?[~]/.test(w)))
+        return null;
+    return { argv: only.argv, open };
+}
+/** Whether `entry` is one `allow_commands:` can use. */
+function isAllowEntry(entry) {
+    return allowEntry(entry) !== null;
+}
+/**
+ * The commands in `text` that `allow` does not allow, as written, in order.
+ * All of `text` when it did not parse, or when an entry cannot be read: an
+ * allow list that reaches no verdict allows nothing, the opposite of
+ * {@link dropCarriedText}, which keeps its old behaviour on the same input.
+ */
+function commandsOutsideAllow(text, allow) {
+    const parsed = parseShell(text);
+    const entries = allow.map(allowEntry);
+    if (parsed === null || entries.some((e) => e === null))
+        return [text];
+    const out = [];
+    for (const pipeline of parsed) {
+        for (const c of pipeline) {
+            const allowed = entries.some((e) => {
+                const n = e.argv.length;
+                if (e.open ? c.argv.length < n : !c.literal || c.argv.length !== n)
+                    return false;
+                return e.argv.every((w, i) => w === c.argv[i]);
+            });
+            if (!allowed)
+                out.push(text.slice(c.start, c.end));
+        }
+    }
+    return out;
+}
+/** The parser and the allow list as JavaScript source, for the hook gates to embed. */
+exports.SHELL_PARSE_JS_SOURCE = [
+    `const SHELL_CONTROL_WORDS = ${JSON.stringify(SHELL_CONTROL_WORDS)};`,
+    ...[shellIsAssignment, parseShell, dropCarriedText, allowEntry, isAllowEntry, commandsOutsideAllow].map((fn) => fn.toString()),
+].join('\n');
+//# sourceMappingURL=shellParse.js.map

package/dist/shellParse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellParse.js","sourceRoot":"","sources":["../src/shellParse.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AA2BH,gCA8GC;AAGD,0CAgBC;AAuBD,oCAEC;AAQD,oDAgBC;AA3MD,2HAA2H;AAC3H,MAAM,mBAAmB,GAAsB;IAC7C,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACzF,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO;CACxC,CAAA;AAaD,yEAAyE;AACzE,SAAS,iBAAiB,CAAC,IAAY,EAAE,CAAS;IAChD,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QAAE,CAAC,EAAE,CAAA;IAC5D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAA;AAC5D,CAAC;AAED,6EAA6E;AAC7E,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,SAAS,GAAsB,EAAE,CAAA;IACvC,IAAI,QAAQ,GAAoB,EAAE,CAAA;IAClC,IAAI,OAAO,GAAyB,IAAI,CAAA;IACxC,IAAI,IAAI,GAAoB,IAAI,CAAA;IAChC,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,CAAC,GAAG,CAAC,CAAA;IAET,MAAM,SAAS,GAAG,CAAC,EAAU,EAAQ,EAAE;QACrC,IAAI,KAAK,EAAE,CAAA;QACX,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAA;IAC7D,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,CAAC,EAAU,EAAQ,EAAE;QACnC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YAChC,OAAO,CAAC,GAAG,GAAG,EAAE,CAAA;QAClB,CAAC;QACD,IAAI,GAAG,IAAI,CAAA;IACb,CAAC,CAAA;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,CAAC,CAAA;YACV,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,CAAC,IAAI,CAAC,CAAA;QACR,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACrC,SAAS,CAAC,CAAC,CAAC,CAAA;YACZ,IAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;YACxB,CAAC,IAAI,CAAC,CAAA;QACR,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,SAAS,CAAC,CAAC,CAAC,CAAA;YACZ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YACtC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC7B,IAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;YACpC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;QACf,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,SAAS,CAAC,CAAC,CAAC,CAAA;YACZ,CAAC,EAAE,CAAA;YACH,SAAS,CAAC;gBACR,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAA;gBACjC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;gBAClB,IAAI,CAAC,KAAK,GAAG;oBAAE,MAAK;gBACpB,IAAI,CAAC,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAA;gBAC1B,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;oBACd,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;wBAAE,OAAO,IAAI,CAAA;oBACpC,OAAQ,CAAC,OAAO,GAAG,KAAK,CAAA;gBAC1B,CAAC;gBACD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACf,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM;wBAAE,OAAO,IAAI,CAAA;oBACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAA;oBACzB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAAE,IAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBAC/C,IAAI,IAAI,KAAK,IAAI;wBAAE,IAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBACnC,CAAC,IAAI,CAAC,CAAA;oBACN,SAAQ;gBACV,CAAC;gBACD,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACb,CAAC,EAAE,CAAA;YACL,CAAC;YACD,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAA;QACjD,CAAC;aAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAA;QACb,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC7D,OAAO,CAAC,CAAC,CAAC,CAAA;YACV,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;YAC7D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAkB,OAAO,CAAA;gBACnC,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAA;gBAClE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACnB,OAAO,GAAG,IAAI,CAAA;YAChB,CAAC;iBAAM,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACtB,mDAAmD;gBACnD,CAAC,EAAE,CAAA;gBACH,SAAQ;YACV,CAAC;iBAAM,CAAC;gBACN,mDAAmD;gBACnD,OAAO,IAAI,CAAA;YACb,CAAC;YACD,QAAQ,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAA;YAChC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;oBAAE,CAAC,EAAE,CAAA;YAC9B,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACxB,QAAQ,GAAG,EAAE,CAAA;YACf,CAAC;YACD,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACtB,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,SAAS,CAAC,CAAC,CAAC,CAAA;gBACZ,OAAQ,CAAC,OAAO,GAAG,KAAK,CAAA;YAC1B,CAAC;YACD,SAAS,CAAC,CAAC,CAAC,CAAA;YACZ,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACb,CAAC,EAAE,CAAA;QACL,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACpB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAkB,OAAO,CAAA;QACnC,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAClE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACpB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACjD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,qIAAqI;AACrI,SAAgB,eAAe,CAAC,IAAY;IAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAClC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAA;QACzB,8DAA8D;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAA;QACxJ,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;YACnC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAA;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;AAC/B,CAAC;AAQD;;;;GAIG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC5D,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAA;IAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1E,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAA;AAClC,CAAC;AAED,wDAAwD;AACxD,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,CAAA;AACnC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,IAAY,EAAE,KAAwB;IACzE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACrE,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjC,MAAM,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,MAAM,CAAA;gBACxB,IAAI,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAA;gBACjF,OAAO,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YACjD,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,uFAAuF;AAC1E,QAAA,qBAAqB,GAAG;IACnC,+BAA+B,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,GAAG;IACrE,GAAG,CAAC,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC;CAC/H,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA"}

package/dist/sopKeySince.d.ts

@@ -16,6 +16,8 @@
  */
 /** The proxy release that first reads the newer keys. */
 export declare const LOOP_GRAPH_GATE_PROXY_VERSION = "3.0.0";
+/** The proxy release that first reads `allow_commands:`. */
+export declare const ALLOW_COMMANDS_PROXY_VERSION = "3.1.4";
 /**
  * Each key, as written at the start of its line, and the proxy version that
  * reads it. `requires_before:[ok]` stands for a qualified `requires_before:`

package/dist/sopKeySince.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sopKeySince.d.ts","sourceRoot":"","sources":["../src/sopKeySince.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,yDAAyD;AACzD,eAAO,MAAM,6BAA6B,UAAU,CAAA;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAWjE,CAAA;AAED,8GAA8G;AAC9G,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAGrG;AAED,6IAA6I;AAC7I,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAMnG;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAatI"}
+{"version":3,"file":"sopKeySince.d.ts","sourceRoot":"","sources":["../src/sopKeySince.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,yDAAyD;AACzD,eAAO,MAAM,6BAA6B,UAAU,CAAA;AACpD,4DAA4D;AAC5D,eAAO,MAAM,4BAA4B,UAAU,CAAA;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAYjE,CAAA;AAED,8GAA8G;AAC9G,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAGrG;AAED,6IAA6I;AAC7I,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAMnG;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAatI"}

package/dist/sopKeySince.js

@@ -16,12 +16,14 @@
  * @module
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SOP_KEY_SINCE = exports.LOOP_GRAPH_GATE_PROXY_VERSION = void 0;
+exports.SOP_KEY_SINCE = exports.ALLOW_COMMANDS_PROXY_VERSION = exports.LOOP_GRAPH_GATE_PROXY_VERSION = void 0;
 exports.parseProxyVersion = parseProxyVersion;
 exports.proxyVersionOlder = proxyVersionOlder;
 exports.sopKeysNeedingNewerProxy = sopKeysNeedingNewerProxy;
 /** The proxy release that first reads the newer keys. */
 exports.LOOP_GRAPH_GATE_PROXY_VERSION = '3.0.0';
+/** The proxy release that first reads `allow_commands:`. */
+exports.ALLOW_COMMANDS_PROXY_VERSION = '3.1.4';
 /**
  * Each key, as written at the start of its line, and the proxy version that
  * reads it. `requires_before:[ok]` stands for a qualified `requires_before:`
@@ -39,6 +41,7 @@ exports.SOP_KEY_SINCE = {
     'context_isolation:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
     'node_kind:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
     'node_kind_allow:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
+    'allow_commands:': exports.ALLOW_COMMANDS_PROXY_VERSION,
 };
 /** `major.minor.patch` (a `v` prefix and any `-pre` or `+build` suffix ignored) as three numbers, or null. */
 function parseProxyVersion(version) {

package/dist/sopKeySince.js.map

@@ -1 +1 @@
-{"version":3,"file":"sopKeySince.js","sourceRoot":"","sources":["../src/sopKeySince.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAyBH,8CAGC;AAGD,8CAMC;AASD,4DAaC;AAzDD,yDAAyD;AAC5C,QAAA,6BAA6B,GAAG,OAAO,CAAA;AAEpD;;;;;GAKG;AACU,QAAA,aAAa,GAA4C;IACpE,sBAAsB,EAAE,qCAA6B;IACrD,mBAAmB,EAAE,qCAA6B;IAClD,kBAAkB,EAAE,qCAA6B;IACjD,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,qCAA6B;IAC9C,eAAe,EAAE,qCAA6B;IAC9C,qBAAqB,EAAE,qCAA6B;IACpD,oBAAoB,EAAE,qCAA6B;IACnD,YAAY,EAAE,qCAA6B;IAC3C,kBAAkB,EAAE,qCAA6B;CAClD,CAAA;AAED,8GAA8G;AAC9G,SAAgB,iBAAiB,CAAC,OAAkC;IAClE,MAAM,CAAC,GAAG,gDAAgD,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACvF,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC9D,CAAC;AAED,6IAA6I;AAC7I,SAAgB,iBAAiB,CAAC,OAAkC,EAAE,KAAa;IACjF,MAAM,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IACnE,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,wBAAwB,CAAC,KAAa,EAAE,YAAuC;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACpD,MAAM,GAAG,GAA0C,EAAE,CAAA;IACrD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,qBAAa,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,SAAQ;QACnD,MAAM,IAAI,GACR,GAAG,KAAK,sBAAsB;YAC5B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3E,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1C,IAAI,IAAI,IAAI,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"sopKeySince.js","sourceRoot":"","sources":["../src/sopKeySince.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AA4BH,8CAGC;AAGD,8CAMC;AASD,4DAaC;AA5DD,yDAAyD;AAC5C,QAAA,6BAA6B,GAAG,OAAO,CAAA;AACpD,4DAA4D;AAC/C,QAAA,4BAA4B,GAAG,OAAO,CAAA;AAEnD;;;;;GAKG;AACU,QAAA,aAAa,GAA4C;IACpE,sBAAsB,EAAE,qCAA6B;IACrD,mBAAmB,EAAE,qCAA6B;IAClD,kBAAkB,EAAE,qCAA6B;IACjD,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,qCAA6B;IAC9C,eAAe,EAAE,qCAA6B;IAC9C,qBAAqB,EAAE,qCAA6B;IACpD,oBAAoB,EAAE,qCAA6B;IACnD,YAAY,EAAE,qCAA6B;IAC3C,kBAAkB,EAAE,qCAA6B;IACjD,iBAAiB,EAAE,oCAA4B;CAChD,CAAA;AAED,8GAA8G;AAC9G,SAAgB,iBAAiB,CAAC,OAAkC;IAClE,MAAM,CAAC,GAAG,gDAAgD,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACvF,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC9D,CAAC;AAED,6IAA6I;AAC7I,SAAgB,iBAAiB,CAAC,OAAkC,EAAE,KAAa;IACjF,MAAM,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IACnE,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,wBAAwB,CAAC,KAAa,EAAE,YAAuC;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACpD,MAAM,GAAG,GAA0C,EAAE,CAAA;IACrD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,qBAAa,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,SAAQ;QACnD,MAAM,IAAI,GACR,GAAG,KAAK,sBAAsB;YAC5B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3E,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1C,IAAI,IAAI,IAAI,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intutic/shared-types",
-  "version": "3.1.2",
+  "version": "3.1.4",
   "description": "Shared TypeScript types, schemas and gate semantics for the Intutic CLI, SDKs and proxy",
   "license": "MIT",
   "repository": {
@@ -18,7 +18,7 @@
   ],
   "dependencies": {
     "zod": "^4.6.6",
-    "@intutic/anomaly-taxonomy": "3.1.2"
+    "@intutic/anomaly-taxonomy": "3.1.4"
   },
   "devDependencies": {
     "typescript": "^5.5",