@nerdvana/parism 0.1.0 → 0.1.2

package/README.md

@@ -162,7 +162,7 @@ Parism이 개입하는 것은 두 번째와 세 번째 사이다. 한 번 버려
 ### npx
 
 ```bash
-npx parism
+npx @nerdvana/parism
 ```
 
 ### 로컬 빌드
@@ -186,7 +186,7 @@ node dist/index.js
   "mcpServers": {
     "parism": {
       "command": "npx",
-      "args": ["-y", "parism"]
+      "args": ["-y", "@nerdvana/parism"]
     }
   }
 }
@@ -239,4 +239,7 @@ Unix 철학은 "하나의 일을 잘 하라"였다. Parism은 그것을 이해
 
 ---
 
-*Parism — Refract the Shell.*
+<p align="center">
+  Made by <a href="mailto:jinho.von.choi@nerdvana.kr">Jinho Choi</a> &nbsp;|&nbsp;
+  <a href="https://buymeacoffee.com/jinho.von.choi">Buy me a coffee</a>
+</p>

package/dist/config/loader.d.ts

@@ -1,8 +1,13 @@
+export interface CommandArgRestriction {
+    blocked_flags: string[];
+}
 export interface PrismGuardConfig {
     allowed_commands: string[];
     allowed_paths: string[];
     timeout_ms: number;
     block_patterns: string[];
+    command_arg_restrictions: Record<string, CommandArgRestriction>;
+    env_secret_patterns: string[];
 }
 export interface PrismConfig {
     guard: PrismGuardConfig;

package/dist/config/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAK,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAQ,MAAM,CAAC;IACzB,cAAc,EAAI,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED,eAAO,MAAM,cAAc,EAAE,WAe5B,CAAC;AAEF;;;GAGG;AACH,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAWzE"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAU,MAAM,EAAE,CAAC;IACnC,aAAa,EAAa,MAAM,EAAE,CAAC;IACnC,UAAU,EAAgB,MAAM,CAAC;IACjC,cAAc,EAAY,MAAM,EAAE,CAAC;IACnC,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAChE,mBAAmB,EAAO,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED,eAAO,MAAM,cAAc,EAAE,WAsB5B,CAAC;AAEF;;;GAGG;AACH,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAWzE"}

package/dist/config/loader.js

@@ -13,6 +13,13 @@ export const DEFAULT_CONFIG = {
         allowed_paths: [],
         timeout_ms: 10000,
         block_patterns: [";", "$(", "`", "&&", "||", ">", ">>", "<", "|"],
+        command_arg_restrictions: {
+            node: { blocked_flags: ["-e", "--eval", "-r", "--require", "-p", "--print", "--input-type"] },
+            npx: { blocked_flags: ["--yes", "-y"] },
+        },
+        env_secret_patterns: [
+            "TOKEN", "SECRET", "AUTHZ", "PASSWORD", "PASSWD", "CREDENTIAL",
+        ],
     },
 };
 /**

package/dist/config/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAa5C,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,KAAK,EAAE;QACL,gBAAgB,EAAE;YAChB,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI;YAChC,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,MAAM,EAAE,SAAS;YACzB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;YACnC,KAAK;YACL,KAAK,EAAE,KAAK,EAAE,OAAO;YACrB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU;SACpC;QACD,aAAa,EAAG,EAAE;QAClB,UAAU,EAAM,KAAK;QACrB,cAAc,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;KAClE;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAI,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QAErD,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE;SAC1D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC"}
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAmB5C,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,KAAK,EAAE;QACL,gBAAgB,EAAE;YAChB,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI;YAChC,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,MAAM,EAAE,SAAS;YACzB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;YACnC,KAAK;YACL,KAAK,EAAE,KAAK,EAAE,OAAO;YACrB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU;SACpC;QACD,aAAa,EAAG,EAAE;QAClB,UAAU,EAAM,KAAK;QACrB,cAAc,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QACjE,wBAAwB,EAAE;YACxB,IAAI,EAAE,EAAE,aAAa,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE;YAC7F,GAAG,EAAG,EAAE,aAAa,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;SACzC;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY;SAC/D;KACF;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAI,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QAErD,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE;SAC1D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/engine/executor.d.ts

@@ -2,7 +2,8 @@ import type { ResponseEnvelope } from "../types/envelope.js";
 /**
  * 지정한 명령을 execFile로 실행하고 ResponseEnvelope를 반환한다.
  * - 셸을 거치지 않으므로 셸 확장/인젝션 위험 없음
+ * - secretPatterns에 해당하는 환경 변수는 자식 프로세스에 전달하지 않음
  * - 실행 실패(명령 없음 포함)는 예외 대신 ok=false 봉투로 반환
  */
-export declare function execute(cmd: string, args: string[], cwd: string): Promise<ResponseEnvelope>;
+export declare function execute(cmd: string, args: string[], cwd: string, secretPatterns?: string[]): Promise<ResponseEnvelope>;
 //# sourceMappingURL=executor.d.ts.map

package/dist/engine/executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/engine/executor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAI7D;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAG,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAG,MAAM,GACX,OAAO,CAAC,gBAAgB,CAAC,CAyC3B"}
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/engine/executor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAqB7D;;;;;GAKG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAa,MAAM,EACtB,IAAI,EAAY,MAAM,EAAE,EACxB,GAAG,EAAa,MAAM,EACtB,cAAc,GAAE,MAAM,EAAO,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CA0C3B"}

package/dist/engine/executor.js

@@ -1,17 +1,35 @@
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 const execFileAsync = promisify(execFile);
+/**
+ * process.env에서 시크릿 패턴과 일치하는 변수를 제거한 환경 객체를 반환한다.
+ * patterns의 각 항목을 환경 변수명의 대문자 substring으로 검사한다.
+ */
+function buildSanitizedEnv(secretPatterns) {
+    if (secretPatterns.length === 0)
+        return process.env;
+    const sanitized = {};
+    for (const [key, value] of Object.entries(process.env)) {
+        const upper = key.toUpperCase();
+        if (!secretPatterns.some(p => upper.includes(p.toUpperCase()))) {
+            sanitized[key] = value;
+        }
+    }
+    return sanitized;
+}
 /**
  * 지정한 명령을 execFile로 실행하고 ResponseEnvelope를 반환한다.
  * - 셸을 거치지 않으므로 셸 확장/인젝션 위험 없음
+ * - secretPatterns에 해당하는 환경 변수는 자식 프로세스에 전달하지 않음
  * - 실행 실패(명령 없음 포함)는 예외 대신 ok=false 봉투로 반환
  */
-export async function execute(cmd, args, cwd) {
+export async function execute(cmd, args, cwd, secretPatterns = []) {
     const start = Date.now();
     try {
         const { stdout, stderr } = await execFileAsync(cmd, args, {
             cwd,
             maxBuffer: 10 * 1024 * 1024, // 10 MB
+            env: { ...buildSanitizedEnv(secretPatterns), LC_ALL: "C", LANG: "C" },
         });
         return {
             ok: true,

package/dist/engine/executor.js.map

@@ -1 +1 @@
-{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/engine/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAY,EACZ,IAAc,EACd,GAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE;YACxD,GAAG;YACH,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ;SACtC,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAW,IAAI;YACjB,QAAQ,EAAK,CAAC;YACd,GAAG;YACH,IAAI;YACJ,GAAG;YACH,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC/B,MAAM,EAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;YAC1C,MAAM,EAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;YAC1C,IAAI,EAAS,IAAI;SAClB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAIT,CAAC;QAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzD,OAAO;YACL,EAAE,EAAW,KAAK;YAClB,QAAQ;YACR,GAAG;YACH,IAAI;YACJ,GAAG;YACH,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC/B,MAAM,EAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YAClD,MAAM,EAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;YACzD,IAAI,EAAS,IAAI;SAClB,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/engine/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;;GAGG;AACH,SAAS,iBAAiB,CAAC,cAAwB;IACjD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC;IAEpD,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;YAC/D,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAsB,EACtB,IAAwB,EACxB,GAAsB,EACtB,iBAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE;YACxD,GAAG;YACH,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ;YACrC,GAAG,EAAE,EAAE,GAAG,iBAAiB,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE;SACtE,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAW,IAAI;YACjB,QAAQ,EAAK,CAAC;YACd,GAAG;YACH,IAAI;YACJ,GAAG;YACH,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC/B,MAAM,EAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;YAC1C,MAAM,EAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;YAC1C,IAAI,EAAS,IAAI;SAClB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAIT,CAAC;QAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzD,OAAO;YACL,EAAE,EAAW,KAAK;YAClB,QAAQ;YACR,GAAG;YACH,IAAI;YACJ,GAAG;YACH,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC/B,MAAM,EAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YAClD,MAAM,EAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;YACzD,IAAI,EAAS,IAAI;SAClB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/engine/guard.d.ts

@@ -3,8 +3,8 @@ import type { PrismConfig } from "../config/loader.js";
  * Execution Guard가 차단 시 던지는 오류.
  */
 export declare class GuardError extends Error {
-    readonly reason: "command_not_allowed" | "path_not_allowed" | "injection_pattern";
-    constructor(message: string, reason: "command_not_allowed" | "path_not_allowed" | "injection_pattern");
+    readonly reason: "command_not_allowed" | "path_not_allowed" | "injection_pattern" | "arg_not_allowed";
+    constructor(message: string, reason: "command_not_allowed" | "path_not_allowed" | "injection_pattern" | "arg_not_allowed");
 }
 /**
  * 명령 실행 허용 여부를 검사한다. 차단 조건 충족 시 GuardError를 던진다.
@@ -12,7 +12,8 @@ export declare class GuardError extends Error {
  * 검사 순서:
  * 1. 화이트리스트 — cmd가 allowed_commands에 없으면 차단
  * 2. 인젝션 패턴 — args 중 block_patterns에 포함된 패턴이 있으면 차단
- * 3. 경로 제한 — allowed_paths가 설정된 경우 cwd가 허용 경로 하위인지 확인
+ * 3. 명령별 인자 제한 — command_arg_restrictions에 등록된 blocked_flags와 일치하면 차단
+ * 4. 경로 제한 — allowed_paths가 설정된 경우 cwd가 허용 경로 하위인지 확인
  */
 export declare function checkGuard(cmd: string, args: string[], cwd: string, config: PrismConfig): void;
 //# sourceMappingURL=guard.d.ts.map

package/dist/engine/guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/engine/guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD;;GAEG;AACH,qBAAa,UAAW,SAAQ,KAAK;aAGjB,MAAM,EAAE,qBAAqB,GAAG,kBAAkB,GAAG,mBAAmB;gBADxF,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,qBAAqB,GAAG,kBAAkB,GAAG,mBAAmB;CAK3F;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAK,MAAM,EACd,IAAI,EAAI,MAAM,EAAE,EAChB,GAAG,EAAK,MAAM,EACd,MAAM,EAAE,WAAW,GAClB,IAAI,CAkCN"}
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/engine/guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD;;GAEG;AACH,qBAAa,UAAW,SAAQ,KAAK;aAGjB,MAAM,EAClB,qBAAqB,GACrB,kBAAkB,GAClB,mBAAmB,GACnB,iBAAiB;gBALrB,OAAO,EAAE,MAAM,EACC,MAAM,EAClB,qBAAqB,GACrB,kBAAkB,GAClB,mBAAmB,GACnB,iBAAiB;CAKxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAK,MAAM,EACd,IAAI,EAAI,MAAM,EAAE,EAChB,GAAG,EAAK,MAAM,EACd,MAAM,EAAE,WAAW,GAClB,IAAI,CAgDN"}

package/dist/engine/guard.js

@@ -15,7 +15,8 @@ export class GuardError extends Error {
  * 검사 순서:
  * 1. 화이트리스트 — cmd가 allowed_commands에 없으면 차단
  * 2. 인젝션 패턴 — args 중 block_patterns에 포함된 패턴이 있으면 차단
- * 3. 경로 제한 — allowed_paths가 설정된 경우 cwd가 허용 경로 하위인지 확인
+ * 3. 명령별 인자 제한 — command_arg_restrictions에 등록된 blocked_flags와 일치하면 차단
+ * 4. 경로 제한 — allowed_paths가 설정된 경우 cwd가 허용 경로 하위인지 확인
  */
 export function checkGuard(cmd, args, cwd, config) {
     const { guard } = config;
@@ -28,6 +29,16 @@ export function checkGuard(cmd, args, cwd, config) {
             throw new GuardError(`Blocked pattern '${pattern}' detected in arguments`, "injection_pattern");
         }
     }
+    const restriction = guard.command_arg_restrictions?.[cmd];
+    if (restriction) {
+        for (const arg of args) {
+            // --flag=value 형태에서 플래그 이름만 추출
+            const normalized = arg.startsWith("--") ? arg.split("=")[0] : arg;
+            if (restriction.blocked_flags.includes(normalized)) {
+                throw new GuardError(`Argument '${arg}' is not allowed for command '${cmd}'`, "arg_not_allowed");
+            }
+        }
+    }
     if (guard.allowed_paths.length > 0) {
         const normalizedCwd = cwd.endsWith("/") ? cwd : cwd + "/";
         const allowed = guard.allowed_paths.some((p) => {

package/dist/engine/guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/engine/guard.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAGjB;IAFlB,YACE,OAAe,EACC,MAAwE;QAExF,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAkE;QAGxF,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,GAAc,EACd,IAAgB,EAChB,GAAc,EACd,MAAmB;IAEnB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAEzB,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,UAAU,CAClB,YAAY,GAAG,8BAA8B,EAC7C,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,UAAU,CAClB,oBAAoB,OAAO,yBAAyB,EACpD,mBAAmB,CACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7C,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YAClD,OAAO,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAClB,sBAAsB,GAAG,4BAA4B,EACrD,kBAAkB,CACnB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/engine/guard.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAGjB;IAFlB,YACE,OAAe,EACC,MAIK;QAErB,KAAK,CAAC,OAAO,CAAC,CAAC;QANC,WAAM,GAAN,MAAM,CAID;QAGrB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CACxB,GAAc,EACd,IAAgB,EAChB,GAAc,EACd,MAAmB;IAEnB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAEzB,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,UAAU,CAClB,YAAY,GAAG,8BAA8B,EAC7C,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,UAAU,CAClB,oBAAoB,OAAO,yBAAyB,EACpD,mBAAmB,CACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,wBAAwB,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,+BAA+B;YAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YACnE,IAAI,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,UAAU,CAClB,aAAa,GAAG,iCAAiC,GAAG,GAAG,EACvD,iBAAiB,CAClB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7C,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YAClD,OAAO,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAClB,sBAAsB,GAAG,4BAA4B,EACrD,kBAAkB,CACnB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/parsers/fs/stat.d.ts

@@ -1,4 +1,22 @@
-export declare function parseStat(cmd: string, args: string[], raw: string): {
+export interface StatResult {
+    file: string;
+    size_bytes: number;
+    blocks: number;
+    io_block: number;
+    file_type: string;
+    inode: number;
+    links: number;
+    permissions: string;
+    uid: number;
+    uid_name: string;
+    gid: number;
+    gid_name: string;
+    accessed_at: string;
+    modified_at: string;
+    changed_at: string;
+    birth_at: string;
+}
+export declare function parseStat(cmd: string, args: string[], raw: string): StatResult | {
     lines: string[];
 };
 //# sourceMappingURL=stat.d.ts.map

package/dist/parsers/fs/stat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stat.d.ts","sourceRoot":"","sources":["../../../src/parsers/fs/stat.ts"],"names":[],"mappings":"AAAA,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAEvF"}
+{"version":3,"file":"stat.d.ts","sourceRoot":"","sources":["../../../src/parsers/fs/stat.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAS,MAAM,CAAC;IACpB,UAAU,EAAG,MAAM,CAAC;IACpB,MAAM,EAAO,MAAM,CAAC;IACpB,QAAQ,EAAK,MAAM,CAAC;IACpB,SAAS,EAAI,MAAM,CAAC;IACpB,KAAK,EAAQ,MAAM,CAAC;IACpB,KAAK,EAAQ,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAU,MAAM,CAAC;IACpB,QAAQ,EAAK,MAAM,CAAC;IACpB,GAAG,EAAU,MAAM,CAAC;IACpB,QAAQ,EAAK,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAG,MAAM,CAAC;IACpB,QAAQ,EAAK,MAAM,CAAC;CACrB;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAyCpG"}

package/dist/parsers/fs/stat.js

@@ -1,4 +1,40 @@
 export function parseStat(cmd, args, raw) {
-    return { lines: raw.split("\n").filter(Boolean) };
+    const fileMatch = raw.match(/\s*File:\s*(.+)/);
+    const sizeMatch = raw.match(/\s*Size:\s*(\d+)/);
+    const blocksMatch = raw.match(/Blocks:\s*(\d+)/);
+    const ioBlockMatch = raw.match(/IO Block:\s*(\d+)/);
+    const fileTypeMatch = raw.match(/IO Block:\s*\d+\s+(.+)/);
+    const inodeMatch = raw.match(/Inode:\s*(\d+)/);
+    const linksMatch = raw.match(/Links:\s*(\d+)/);
+    const permMatch = raw.match(/Access:\s*\(\d+\/([^)]+)\)/);
+    const uidMatch = raw.match(/Uid:\s*\(\s*(\d+)\/\s*([^)]+)\)/);
+    const gidMatch = raw.match(/Gid:\s*\(\s*(\d+)\/\s*([^)]+)\)/);
+    if (!fileMatch || !sizeMatch) {
+        return { lines: raw.split("\n").filter(Boolean) };
+    }
+    // "Access:" 줄이 두 개 존재 — 하나는 권한, 하나는 타임스탬프
+    const lines = raw.split("\n");
+    const accessLine = lines.find(l => /^\s*Access:\s+\d{4}/.test(l));
+    const modifyLine = lines.find(l => /^\s*Modify:/.test(l));
+    const changeLine = lines.find(l => /^\s*Change:/.test(l));
+    const birthLine = lines.find(l => /Birth:/.test(l));
+    return {
+        file: fileMatch[1].trim(),
+        size_bytes: parseInt(sizeMatch[1], 10),
+        blocks: blocksMatch ? parseInt(blocksMatch[1], 10) : 0,
+        io_block: ioBlockMatch ? parseInt(ioBlockMatch[1], 10) : 0,
+        file_type: fileTypeMatch ? fileTypeMatch[1].trim() : "",
+        inode: inodeMatch ? parseInt(inodeMatch[1], 10) : 0,
+        links: linksMatch ? parseInt(linksMatch[1], 10) : 0,
+        permissions: permMatch ? permMatch[1].trim() : "",
+        uid: uidMatch ? parseInt(uidMatch[1], 10) : 0,
+        uid_name: uidMatch ? uidMatch[2].trim() : "",
+        gid: gidMatch ? parseInt(gidMatch[1], 10) : 0,
+        gid_name: gidMatch ? gidMatch[2].trim() : "",
+        accessed_at: accessLine ? accessLine.replace(/^\s*Access:\s+/, "").trim() : "",
+        modified_at: modifyLine ? modifyLine.replace(/^\s*Modify:\s+/, "").trim() : "",
+        changed_at: changeLine ? changeLine.replace(/^\s*Change:\s+/, "").trim() : "",
+        birth_at: birthLine ? birthLine.replace(/^\s*Birth:\s+/, "").trim() : "",
+    };
 }
 //# sourceMappingURL=stat.js.map

package/dist/parsers/fs/stat.js.map

@@ -1 +1 @@
-{"version":3,"file":"stat.js","sourceRoot":"","sources":["../../../src/parsers/fs/stat.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW;IAChE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AACpD,CAAC"}
+{"version":3,"file":"stat.js","sourceRoot":"","sources":["../../../src/parsers/fs/stat.ts"],"names":[],"mappings":"AAmBA,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW;IAChE,MAAM,SAAS,GAAM,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAClD,MAAM,SAAS,GAAM,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnD,MAAM,WAAW,GAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAK,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACjD,MAAM,UAAU,GAAK,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAM,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAO,GAAG,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAO,GAAG,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAElE,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,CAAC;IAED,0CAA0C;IAC1C,MAAM,KAAK,GAAS,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,UAAU,GAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtD,OAAO;QACL,IAAI,EAAS,SAAS,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE;QACjC,UAAU,EAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAE,EAAK,EAAE,CAAC;QAC3C,MAAM,EAAO,WAAW,CAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAE,EAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,QAAQ,EAAK,YAAY,CAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAE,EAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,SAAS,EAAI,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAQ,CAAC,CAAC,EAAE;QACjE,KAAK,EAAQ,UAAU,CAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAE,EAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,KAAK,EAAQ,UAAU,CAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAE,EAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,WAAW,EAAE,SAAS,CAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAY,CAAC,CAAC,EAAE;QACjE,GAAG,EAAU,QAAQ,CAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,QAAQ,EAAK,QAAQ,CAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAa,CAAC,CAAC,EAAE;QACjE,GAAG,EAAU,QAAQ,CAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,QAAQ,EAAK,QAAQ,CAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAa,CAAC,CAAC,EAAE;QACjE,WAAW,EAAE,UAAU,CAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QACjF,WAAW,EAAE,UAAU,CAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QACjF,UAAU,EAAG,UAAU,CAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QACjF,QAAQ,EAAK,SAAS,CAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,EAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;KAClF,CAAC;AACJ,CAAC"}

package/dist/parsers/system/free.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"free.d.ts","sourceRoot":"","sources":["../../../src/parsers/system/free.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,OAAO;IACtB,KAAK,EAAO,MAAM,CAAC;IACnB,IAAI,EAAQ,MAAM,CAAC;IACnB,IAAI,EAAQ,MAAM,CAAC;IACnB,MAAM,EAAM,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAG,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAG,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CA6B9E"}
+{"version":3,"file":"free.d.ts","sourceRoot":"","sources":["../../../src/parsers/system/free.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,OAAO;IACtB,KAAK,EAAO,MAAM,CAAC;IACnB,IAAI,EAAQ,MAAM,CAAC;IACnB,IAAI,EAAQ,MAAM,CAAC;IACnB,MAAM,EAAM,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAG,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAG,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAmBD,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CA6B9E"}

package/dist/parsers/system/free.js

@@ -1,14 +1,31 @@
+/** "62Gi", "6.9Gi", "5.0M", "4096" 등을 bytes 정수로 변환 */
+function parseSize(s) {
+    const m = s.match(/^([\d.]+)([KMGTPE]i?)?$/i);
+    if (!m)
+        return NaN;
+    const n = parseFloat(m[1]);
+    const sfx = (m[2] ?? "").toUpperCase().replace("I", "");
+    const mul = {
+        "": 1,
+        "K": 1024,
+        "M": 1024 ** 2,
+        "G": 1024 ** 3,
+        "T": 1024 ** 4,
+        "P": 1024 ** 5,
+    };
+    return Math.round(n * (mul[sfx] ?? 1));
+}
 export function parseFree(cmd, args, raw) {
     const lines = raw.split("\n").filter(Boolean);
     const parseRow = (line) => {
-        const cols = line.trim().split(/\s+/).slice(1).map(Number);
+        const cols = line.trim().split(/\s+/).slice(1).map(parseSize);
         return {
-            total: cols[0] ?? 0,
-            used: cols[1] ?? 0,
-            free: cols[2] ?? 0,
-            shared: cols[3] ?? null,
-            buff_cache: cols[4] ?? null,
-            available: cols[5] ?? null,
+            total: isNaN(cols[0]) ? 0 : cols[0],
+            used: isNaN(cols[1]) ? 0 : cols[1],
+            free: isNaN(cols[2]) ? 0 : cols[2],
+            shared: cols[3] !== undefined && !isNaN(cols[3]) ? cols[3] : null,
+            buff_cache: cols[4] !== undefined && !isNaN(cols[4]) ? cols[4] : null,
+            available: cols[5] !== undefined && !isNaN(cols[5]) ? cols[5] : null,
         };
     };
     const memLine = lines.find(l => l.startsWith("Mem:"));

package/dist/parsers/system/free.js.map

@@ -1 +1 @@
-{"version":3,"file":"free.js","sourceRoot":"","sources":["../../../src/parsers/system/free.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW;IAChE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO;YACL,KAAK,EAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACxB,IAAI,EAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACxB,IAAI,EAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACxB,MAAM,EAAM,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;YAC3B,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;YAC3B,SAAS,EAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;SAC5B,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,OAAO,GAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAExD,4BAA4B;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QAC5B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC5B,CAAC,CAAC,OAAO,CAAC;IAErB,OAAO;QACL,GAAG,EAAG,OAAO,CAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;QACrH,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;QAC1C,IAAI;KACL,CAAC;AACJ,CAAC"}
+{"version":3,"file":"free.js","sourceRoot":"","sources":["../../../src/parsers/system/free.ts"],"names":[],"mappings":"AAeA,sDAAsD;AACtD,SAAS,SAAS,CAAC,CAAS;IAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACnB,MAAM,CAAC,GAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxD,MAAM,GAAG,GAA2B;QAClC,EAAE,EAAG,CAAC;QACN,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,IAAI,IAAI,CAAC;QACd,GAAG,EAAE,IAAI,IAAI,CAAC;QACd,GAAG,EAAE,IAAI,IAAI,CAAC;QACd,GAAG,EAAE,IAAI,IAAI,CAAC;KACf,CAAC;IACF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW;IAChE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9D,OAAO;YACL,KAAK,EAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,IAAI,EAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,IAAI,EAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,MAAM,EAAM,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACrE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACrE,SAAS,EAAG,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;SACtE,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,OAAO,GAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAExD,4BAA4B;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QAC5B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC5B,CAAC,CAAC,OAAO,CAAC;IAErB,OAAO;QACL,GAAG,EAAG,OAAO,CAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;QACrH,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;QAC1C,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/parsers/system/id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../../src/parsers/system/id.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAK,MAAM,CAAC;IACf,IAAI,EAAI,MAAM,CAAC;IACf,GAAG,EAAK,MAAM,CAAC;IACf,KAAK,EAAG,MAAM,CAAC;IACf,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7C;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,CAY1E"}
+{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../../src/parsers/system/id.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAK,MAAM,CAAC;IACf,IAAI,EAAI,MAAM,CAAC;IACf,GAAG,EAAK,MAAM,CAAC;IACf,KAAK,EAAG,MAAM,CAAC;IACf,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7C;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,CAmB1E"}

package/dist/parsers/system/id.js

@@ -1,13 +1,19 @@
 export function parseId(cmd, args, raw) {
     const uidMatch = raw.match(/uid=(\d+)\(([^)]+)\)/);
     const gidMatch = raw.match(/gid=(\d+)\(([^)]+)\)/);
-    const groupsMatch = [...raw.matchAll(/(\d+)\(([^)]+)\)/g)];
+    const groupsPart = raw.match(/groups=(.+)/);
+    const groups = [];
+    if (groupsPart) {
+        for (const m of groupsPart[1].matchAll(/(\d+)\(([^)]+)\)/g)) {
+            groups.push({ id: parseInt(m[1], 10), name: m[2] });
+        }
+    }
     return {
         uid: uidMatch ? parseInt(uidMatch[1], 10) : 0,
         user: uidMatch ? uidMatch[2] : "",
         gid: gidMatch ? parseInt(gidMatch[1], 10) : 0,
         group: gidMatch ? gidMatch[2] : "",
-        groups: groupsMatch.map(m => ({ id: parseInt(m[1], 10), name: m[2] })),
+        groups,
     };
 }
 //# sourceMappingURL=id.js.map

package/dist/parsers/system/id.js.map

@@ -1 +1 @@
-{"version":3,"file":"id.js","sourceRoot":"","sources":["../../../src/parsers/system/id.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW;IAC9D,MAAM,QAAQ,GAAM,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAM,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE3D,OAAO;QACL,GAAG,EAAI,QAAQ,CAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,EAAG,QAAQ,CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE;QACpC,GAAG,EAAI,QAAQ,CAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,EAAE,QAAQ,CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE;QACpC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KACvE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../../src/parsers/system/id.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW;IAC9D,MAAM,QAAQ,GAAK,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAK,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAE5C,MAAM,MAAM,GAAwC,EAAE,CAAC;IACvD,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,EAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,EAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE;QACnC,GAAG,EAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE;QACnC,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/parsers/text/grep.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grep.d.ts","sourceRoot":"","sources":["../../../src/parsers/text/grep.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,CAc5F"}
+{"version":3,"file":"grep.d.ts","sourceRoot":"","sources":["../../../src/parsers/text/grep.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,CA+B5F"}

package/dist/parsers/text/grep.js

@@ -3,9 +3,24 @@ export function parseGrep(cmd, args, raw) {
     for (const line of raw.split("\n")) {
         if (!line.trim())
             continue;
-        const m = line.match(/^([^:]+):(\d+):(.*)$/);
-        if (m) {
-            matches.push({ file: m[1], line: parseInt(m[2], 10), text: m[3] });
+        // file:line:text 형태 (grep -rn 또는 grep -n)
+        const withLineNum = line.match(/^([^:]+):(\d+):(.*)$/);
+        if (withLineNum) {
+            matches.push({
+                file: withLineNum[1],
+                line: parseInt(withLineNum[2], 10),
+                text: withLineNum[3],
+            });
+            continue;
+        }
+        // file:text 형태 (grep -r without -n) — 콜론 앞이 파일 경로
+        const colonIdx = line.indexOf(":");
+        if (colonIdx > 0) {
+            matches.push({
+                file: line.slice(0, colonIdx),
+                line: 0,
+                text: line.slice(colonIdx + 1),
+            });
         }
         else {
             matches.push({ file: "", line: 0, text: line });

package/dist/parsers/text/grep.js.map

@@ -1 +1 @@
-{"version":3,"file":"grep.js","sourceRoot":"","sources":["../../../src/parsers/text/grep.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW;IAChE,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC"}
+{"version":3,"file":"grep.js","sourceRoot":"","sources":["../../../src/parsers/text/grep.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW;IAChE,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAE3B,0CAA0C;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,WAAW,CAAC,CAAC,CAAE;gBACrB,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC;gBACnC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAE;aACtB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;gBAC7B,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;aAC/B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC"}

package/dist/server.js

@@ -3,7 +3,7 @@ import { z } from "zod";
 import { execute } from "./engine/executor.js";
 import { checkGuard, GuardError } from "./engine/guard.js";
 import { defaultRegistry } from "./parsers/index.js";
-const PACKAGE_VERSION = "0.1.0";
+const PACKAGE_VERSION = "0.1.2";
 /**
  * Guard 검사 → 실행 → JSON 직렬화까지의 파이프라인.
  * MCP 서버와 테스트 코드가 공통으로 사용한다.
@@ -30,7 +30,7 @@ export async function buildRunResult(cmd, args, cwd, config) {
         }
         throw err;
     }
-    const envelope = await execute(cmd, args, cwd);
+    const envelope = await execute(cmd, args, cwd, config.guard.env_secret_patterns);
     const parsed = defaultRegistry.parse(cmd, args, envelope.stdout.raw);
     const enriched = { ...envelope, stdout: { ...envelope.stdout, parsed } };
     return JSON.stringify(enriched, null, 2);

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAmB,yCAAyC,CAAC;AAEjF,OAAO,EAAE,CAAC,EAAE,MAA2B,KAAK,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAqB,sBAAsB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAa,oBAAoB,CAAC;AAG5D,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAc,EACd,IAAgB,EAChB,GAAc,EACd,MAAmB;IAEnB,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG;gBACf,EAAE,EAAW,KAAK;gBAClB,QAAQ,EAAK,CAAC,CAAC;gBACf,GAAG;gBACH,IAAI;gBACJ,GAAG;gBACH,WAAW,EAAE,CAAC;gBACd,MAAM,EAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;gBACtC,MAAM,EAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;gBAC/C,IAAI,EAAS,IAAI;gBACjB,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;aAC1D,CAAC;YACF,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAK,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACzE,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAmB;IAC9C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAK,QAAQ;QACjB,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CACT,KAAK,EACL,8DAA8D;QAC9D,0FAA0F,EAC1F;QACE,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QAC5D,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACnE,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;KACtE,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;SACnD,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAmB,yCAAyC,CAAC;AAEjF,OAAO,EAAE,CAAC,EAAE,MAA2B,KAAK,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAqB,sBAAsB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAa,oBAAoB,CAAC;AAG5D,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAc,EACd,IAAgB,EAChB,GAAc,EACd,MAAmB;IAEnB,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG;gBACf,EAAE,EAAW,KAAK;gBAClB,QAAQ,EAAK,CAAC,CAAC;gBACf,GAAG;gBACH,IAAI;gBACJ,GAAG;gBACH,WAAW,EAAE,CAAC;gBACd,MAAM,EAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;gBACtC,MAAM,EAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;gBAC/C,IAAI,EAAS,IAAI;gBACjB,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;aAC1D,CAAC;YACF,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjF,MAAM,MAAM,GAAK,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACzE,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAmB;IAC9C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAK,QAAQ;QACjB,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CACT,KAAK,EACL,8DAA8D;QAC9D,0FAA0F,EAC1F;QACE,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QAC5D,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACnE,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;KACtE,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;SACnD,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nerdvana/parism",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Structured shell output wrapper for AI agents",
   "type": "module",
   "main": "dist/index.js",

package/prism.config.json

@@ -14,6 +14,13 @@
     ],
     "allowed_paths": [],
     "timeout_ms": 10000,
-    "block_patterns": [";", "$(", "`", "&&", "||", ">", ">>", "<", "|"]
+    "block_patterns": [";", "$(", "`", "&&", "||", ">", ">>", "<", "|"],
+    "command_arg_restrictions": {
+      "node": { "blocked_flags": ["-e", "--eval", "-r", "--require", "-p", "--print", "--input-type"] },
+      "npx":  { "blocked_flags": ["--yes", "-y"] }
+    },
+    "env_secret_patterns": [
+      "TOKEN", "SECRET", "AUTHZ", "PASSWORD", "PASSWD", "CREDENTIAL"
+    ]
   }
 }