@lannguyensi/harness 0.47.0 → 0.49.0

package/dist/runtime/kubectl-target-parse.js

@@ -0,0 +1,241 @@
+// Kubectl explicit-target parser, Risk Gate resolver merge (task
+// a7eb1a71).
+//
+// Extracts an explicit `--context`/`--namespace`/`-n` target from a
+// `kubectl ...` command string so `src/cli/policy/intercept.ts` can
+// merge it into the resolver's `SignalInputs`, UPGRADE-ONLY (see that
+// call site's `applyKubeTargetUpgrade` for the merge rule). See
+// CHANGELOG.md's `[Unreleased]` entry for the measured defects this
+// fixes and the review round history.
+//
+// SCOPE, deliberately narrow (task risk note: too-broad parsing could
+// collect values from a foreign context):
+//
+//   1. Tokenization is anchored at the COMMAND HEAD: this module only
+//      recognizes a string whose very first token (after leading
+//      whitespace) is the literal word `kubectl`. It does not look
+//      through a leading `cd <path> &&`, `VAR=value`, or `git switch
+//      <branch> &&` prefix on its own; the CALLER is responsible for
+//      stripping any such prefix first (see `intercept.ts`, which
+//      passes the remainder after `parseBashPrefix` consumed one) so a
+//      wrapped invocation like `cd /tmp && kubectl ... --context x` or
+//      `KUBECONFIG=/tmp/k kubectl ... --context x` is still covered.
+//      Known unhandled shapes, listed so a future change does not have
+//      to rediscover them: a `sudo`/`time`/`env` wrapper immediately
+//      before `kubectl` (`parseBashPrefix` does not recognize those
+//      prefixes either); a kubectl invocation that is not the FIRST
+//      segment of a chained command (`echo hi && kubectl ...`); a piped
+//      kubectl (`foo | kubectl ...`, where kubectl is not the command
+//      head at all); an unquoted shell variable as a flag value
+//      (`--context $PROD` reads the literal text `$PROD`, never the
+//      variable's expanded value, so it practically never matches a
+//      real `kube_context_patterns` entry, the same "not evaluated"
+//      stance `bash-prefix-parse.ts` takes for `$VAR`/`${VAR}`); and
+//      backslash-escaped whitespace inside an unquoted value (`prod\
+//      eu` splits into two tokens at the escaped space, same as this
+//      runtime's other narrow parsers, none of which model shell
+//      escape sequences).
+//   2. Once the head is confirmed to be `kubectl`, flags are read only
+//      from the FIRST shell segment of the command, up to (not
+//      including) the first unquoted `&&`, `||`, `;`, `|`, `&`, or
+//      newline, AND stopping at a bare `--` token (the POSIX
+//      end-of-flags marker).
+//   3. Only `--context`, `--namespace`, and `-n` are recognized. The two
+//      long flags accept `--flag value` and `--flag=value`. `-n`
+//      additionally accepts the concatenated short-flag form `-nVALUE`
+//      (see the narrowing note at its own call site) and `-n=value`.
+//      Any other flag is ignored.
+//   4. When a flag repeats, the LAST occurrence wins.
+//   5. A flag with an EMPTY or whitespace-only value (`--context=`,
+//      `--context ""`) is treated as though the flag were absent, never
+//      as the literal empty string (an empty `SignalInputs.kubeContext`
+//      means "no context" to the resolver, so returning `""` here would
+//      erase a real ambient signal instead of leaving it alone).
+//
+// Never throws; a command that is not a `kubectl` invocation (by the
+// narrow head test above) returns `{ context: null, namespace: null }`.
+const EMPTY = { context: null, namespace: null };
+const WS = /\s/;
+function skipWs(s, i) {
+    while (i < s.length && WS.test(s[i]))
+        i++;
+    return i;
+}
+/** Empty or whitespace-only, per scope point 5 above. */
+function isBlank(value) {
+    return value.trim().length === 0;
+}
+/**
+ * True when `command`'s head token (after skipping leading whitespace)
+ * is the literal word `kubectl` on a word boundary, immediately
+ * followed by whitespace or end-of-string, never a partial-word match
+ * (`kubectl-plugin` must not match). See module doc, scope point 1.
+ */
+function isKubectlHead(command) {
+    const i = skipWs(command, 0);
+    if (command.slice(i, i + 7) !== "kubectl")
+        return false;
+    const after = i + 7;
+    return after >= command.length || WS.test(command[after]);
+}
+/**
+ * Slice `command` down to its first shell segment: everything up to
+ * (not including) the first unquoted `&&`, `||`, `;`, bare `|`, bare
+ * `&`, or newline. Quoted spans (single or double) are tracked so a
+ * chain-looking character inside a flag value's quotes does not end
+ * the segment early. See module doc, scope point 2.
+ */
+function firstSegment(command) {
+    let inSingle = false;
+    let inDouble = false;
+    for (let i = 0; i < command.length; i++) {
+        const c = command[i];
+        if (inSingle) {
+            if (c === "'")
+                inSingle = false;
+            continue;
+        }
+        if (inDouble) {
+            if (c === '"')
+                inDouble = false;
+            continue;
+        }
+        if (c === "'") {
+            inSingle = true;
+            continue;
+        }
+        if (c === '"') {
+            inDouble = true;
+            continue;
+        }
+        if (c === "\n" || c === ";" || c === "|" || c === "&") {
+            return command.slice(0, i);
+        }
+    }
+    return command;
+}
+/**
+ * Whitespace-delimited tokenizer over an already-segment-bounded
+ * string. A quoted span (single or double) is read literally, quote
+ * characters stripped, no escape/interpolation handling, and may
+ * contain whitespace or a chain-boundary character (`;`, `|`) without
+ * splitting the token, mirroring the quoted-value handling
+ * `consumeInlineEnv` and `consumeLeadingCd` already use elsewhere in
+ * this runtime.
+ */
+function tokenize(segment) {
+    const tokens = [];
+    let i = 0;
+    const n = segment.length;
+    while (i < n) {
+        i = skipWs(segment, i);
+        if (i >= n)
+            break;
+        let token = "";
+        while (i < n && !WS.test(segment[i])) {
+            const c = segment[i];
+            if (c === "'" || c === '"') {
+                const end = segment.indexOf(c, i + 1);
+                if (end < 0) {
+                    token += segment.slice(i + 1);
+                    i = n;
+                    break;
+                }
+                token += segment.slice(i + 1, end);
+                i = end + 1;
+                continue;
+            }
+            token += c;
+            i++;
+        }
+        tokens.push(token);
+    }
+    return tokens;
+}
+/**
+ * Parse an explicit `--context`/`--namespace`/`-n` target out of a
+ * `kubectl ...` command string. Returns `{ context: null, namespace:
+ * null }` when `command` is not, by the narrow head test above, a
+ * `kubectl` invocation, or when neither flag carries a non-blank value.
+ * Never throws.
+ */
+export function parseKubectlTarget(command) {
+    if (typeof command !== "string" || command.length === 0)
+        return EMPTY;
+    if (!isKubectlHead(command))
+        return EMPTY;
+    const tokens = tokenize(firstSegment(command));
+    let context = null;
+    let namespace = null;
+    for (let i = 0; i < tokens.length; i++) {
+        const t = tokens[i];
+        // POSIX end-of-flags marker (scope point 2): everything after a
+        // bare `--` belongs to the exec'd program, not to kubectl itself.
+        if (t === "--")
+            break;
+        if (t === "--context" || t === "--namespace" || t === "-n") {
+            const value = tokens[i + 1];
+            // No next token: a trailing valueless flag, nothing to consume or
+            // skip. Otherwise the NEXT token is this flag's value under real
+            // kubectl argument parsing (`--context -n prod` means --context
+            // takes the literal value "-n"; "prod" is a positional argument,
+            // not `-n`'s own value), so advance `i` past it here, regardless
+            // of whether the value turns out blank, so the loop's own
+            // increment does not re-examine that same token as if it were an
+            // independent flag (fix round 3, review LOW finding).
+            if (value === undefined)
+                continue;
+            i++;
+            if (isBlank(value))
+                continue;
+            if (t === "--context")
+                context = value;
+            else
+                namespace = value;
+            continue;
+        }
+        if (t.startsWith("--context=")) {
+            const value = t.slice("--context=".length);
+            if (!isBlank(value))
+                context = value;
+            continue;
+        }
+        if (t.startsWith("--namespace=")) {
+            const value = t.slice("--namespace=".length);
+            if (!isBlank(value))
+                namespace = value;
+            continue;
+        }
+        // `-n` short-flag forms, checked in an order where the longer
+        // prefix (`-n=`) is tried before the general concatenated-value
+        // fallback, so `-n=value` does not fall through to being read as
+        // namespace `=value` (scope point 3).
+        if (t.startsWith("-n=")) {
+            const value = t.slice("-n=".length);
+            if (!isBlank(value))
+                namespace = value;
+            continue;
+        }
+        if (t.startsWith("-n") && t.length > 2) {
+            // Narrowed (fix round 3, review LOW finding): real pflag DOES
+            // glue any value onto a short flag's remaining characters, which
+            // makes an unrelated flag typed with a single dash instead of two
+            // (`-no-headers` for `--no-headers`) collide with this form and
+            // read as `-n` plus a nonsense namespace value `o-headers`. A
+            // genuine namespace value never contains a `-`-prefixed run once
+            // read this way, since a Kubernetes namespace is a plain DNS
+            // label; requiring no embedded `-` rejects that whole class of
+            // false positive. This does NOT catch every case (`-namespace`
+            // slices to `amespace`, which has no dash and is still accepted;
+            // this is genuine pflag behavior for a value-taking short flag
+            // and is left as a documented, narrow residual gap, not a
+            // fabricated denylist of flag-shaped words).
+            const value = t.slice(2);
+            if (!isBlank(value) && !value.includes("-"))
+                namespace = value;
+            continue;
+        }
+    }
+    return { context, namespace };
+}
+//# sourceMappingURL=kubectl-target-parse.js.map

package/dist/runtime/kubectl-target-parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubectl-target-parse.js","sourceRoot":"","sources":["../../src/runtime/kubectl-target-parse.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,aAAa;AACb,EAAE;AACF,oEAAoE;AACpE,oEAAoE;AACpE,sEAAsE;AACtE,gEAAgE;AAChE,oEAAoE;AACpE,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,0CAA0C;AAC1C,EAAE;AACF,sEAAsE;AACtE,iEAAiE;AACjE,mEAAmE;AACnE,qEAAqE;AACrE,qEAAqE;AACrE,kEAAkE;AAClE,uEAAuE;AACvE,uEAAuE;AACvE,qEAAqE;AACrE,uEAAuE;AACvE,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,wEAAwE;AACxE,sEAAsE;AACtE,gEAAgE;AAChE,oEAAoE;AACpE,oEAAoE;AACpE,oEAAoE;AACpE,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,iEAAiE;AACjE,0BAA0B;AAC1B,uEAAuE;AACvE,+DAA+D;AAC/D,mEAAmE;AACnE,6DAA6D;AAC7D,6BAA6B;AAC7B,yEAAyE;AACzE,iEAAiE;AACjE,uEAAuE;AACvE,qEAAqE;AACrE,kCAAkC;AAClC,sDAAsD;AACtD,oEAAoE;AACpE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,iEAAiE;AACjE,EAAE;AACF,qEAAqE;AACrE,wEAAwE;AAUxE,MAAM,KAAK,GAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAEhE,MAAM,EAAE,GAAG,IAAI,CAAC;AAEhB,SAAS,MAAM,CAAC,CAAS,EAAE,CAAS;IAClC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QAAE,CAAC,EAAE,CAAC;IAC3C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,yDAAyD;AACzD,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,KAAK,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACtB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACtD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM;QAClB,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;oBACZ,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC9B,CAAC,GAAG,CAAC,CAAC;oBACN,MAAM;gBACR,CAAC;gBACD,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;gBACnC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,KAAK,IAAI,CAAC,CAAC;YACX,CAAC,EAAE,CAAC;QACN,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1C,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAErB,gEAAgE;QAChE,kEAAkE;QAClE,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM;QAEtB,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,iEAAiE;YACjE,iEAAiE;YACjE,0DAA0D;YAC1D,iEAAiE;YACjE,sDAAsD;YACtD,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,CAAC,EAAE,CAAC;YACJ,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC,KAAK,WAAW;gBAAE,OAAO,GAAG,KAAK,CAAC;;gBAClC,SAAS,GAAG,KAAK,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,GAAG,KAAK,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAS,GAAG,KAAK,CAAC;YACvC,SAAS;QACX,CAAC;QACD,8DAA8D;QAC9D,gEAAgE;QAChE,iEAAiE;QACjE,sCAAsC;QACtC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAS,GAAG,KAAK,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,8DAA8D;YAC9D,iEAAiE;YACjE,kEAAkE;YAClE,gEAAgE;YAChE,8DAA8D;YAC9D,iEAAiE;YACjE,6DAA6D;YAC7D,+DAA+D;YAC/D,+DAA+D;YAC/D,iEAAiE;YACjE,+DAA+D;YAC/D,0DAA0D;YAC1D,6CAA6C;YAC7C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS,GAAG,KAAK,CAAC;YAC/D,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lannguyensi/harness",
-  "version": "0.47.0",
-  "description": "Declarative control plane for agent harnesses \u2014 one YAML for grounding, tools, memory, and hooks.",
+  "version": "0.49.0",
+  "description": "Declarative control plane for agent harnesses — one YAML for grounding, tools, memory, and hooks.",
   "license": "MIT",
   "homepage": "https://github.com/LanNguyenSi/harness",
   "repository": {