@node9/policy-engine 2.19.2 → 2.20.0

package/dist/index.d.mts

@@ -1351,7 +1351,7 @@ declare const LONG_OUTPUT_THRESHOLD_BYTES: number;
  * and fails CI when the hash drifts without a version bump — forgetting
  * is loud, not silent.
  */
-declare const CANONICAL_EXTRACTOR_VERSION = "canonical-v15";
+declare const CANONICAL_EXTRACTOR_VERSION = "canonical-v16";
 /**
  * SHA-256 prefix of the detector-source files
  * (canonical.ts + pii.ts + destructive-regex.ts).
@@ -1362,7 +1362,7 @@ declare const CANONICAL_EXTRACTOR_VERSION = "canonical-v15";
  * files changed, this hash must change too, and you must consciously
  * decide whether to bump CANONICAL_EXTRACTOR_VERSION."
  */
-declare const CANONICAL_EXTRACTOR_HASH = "2823cd6a54a1fca7";
+declare const CANONICAL_EXTRACTOR_HASH = "5d450ab100864451";
 declare function extractCanonicalFindings(call: ToolCallEntry, ctx: ExtractContext): CanonicalFinding[];
 declare function extractSessionLevelFindings(calls: ReadonlyArray<SessionToolCall>, ctx: SessionExtractContext): CanonicalFinding[];
 /**

package/dist/index.d.ts

@@ -1351,7 +1351,7 @@ declare const LONG_OUTPUT_THRESHOLD_BYTES: number;
  * and fails CI when the hash drifts without a version bump — forgetting
  * is loud, not silent.
  */
-declare const CANONICAL_EXTRACTOR_VERSION = "canonical-v15";
+declare const CANONICAL_EXTRACTOR_VERSION = "canonical-v16";
 /**
  * SHA-256 prefix of the detector-source files
  * (canonical.ts + pii.ts + destructive-regex.ts).
@@ -1362,7 +1362,7 @@ declare const CANONICAL_EXTRACTOR_VERSION = "canonical-v15";
  * files changed, this hash must change too, and you must consciously
  * decide whether to bump CANONICAL_EXTRACTOR_VERSION."
  */
-declare const CANONICAL_EXTRACTOR_HASH = "2823cd6a54a1fca7";
+declare const CANONICAL_EXTRACTOR_HASH = "5d450ab100864451";
 declare function extractCanonicalFindings(call: ToolCallEntry, ctx: ExtractContext): CanonicalFinding[];
 declare function extractSessionLevelFindings(calls: ReadonlyArray<SessionToolCall>, ctx: SessionExtractContext): CanonicalFinding[];
 /**

package/dist/index.js

@@ -1874,7 +1874,14 @@ var FS_OP_PRESCREEN_RE = new RegExp(
   // reader right after `"` / `'`, and without these two characters the
   // prescreen rejected every string-wrapped read before the parser ran.
   // Found 2026-09-11 by instrumenting the walk -- no CallExpr was ever visited.
-  `(?:^|[\\s|;&("'\`\\n/])(?:rm|${[...FS_READ_TOOLS, ...COPY_VERB_HEADS].map((t) => t.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|")})\\b|(?<!<)<(?!<)`
+  `(?:^|[\\s|;&("'\`\\n/])(?:rm|${[...FS_READ_TOOLS, ...COPY_VERB_HEADS].map((t) => t.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|")})\\b|(?<!<)<(?!<)`,
+  // Case-insensitive on purpose. Without `i`, `CAT .env` failed this fast path
+  // and analyzeFsOperation returned before the AST ran at all — a live bypass
+  // on macOS and Windows, whose filesystems resolve `CAT` to `cat`, and on
+  // PowerShell, which is case-insensitive by language. Linux is unaffected in
+  // practice (`CAT` is not an executable there) but folding costs nothing.
+  // Dogfound 2026-09-22; pinned by verb-case-coverage.spec.ts.
+  "i"
 );
 var HOME_CACHE_ALLOWLIST = [
   ".cache",
@@ -5738,8 +5745,8 @@ function matchCanaryArgs(args, values) {
 
 // src/scan/canonical.ts
 var LONG_OUTPUT_THRESHOLD_BYTES = 100 * 1024;
-var CANONICAL_EXTRACTOR_VERSION = "canonical-v15";
-var CANONICAL_EXTRACTOR_HASH = "2823cd6a54a1fca7";
+var CANONICAL_EXTRACTOR_VERSION = "canonical-v16";
+var CANONICAL_EXTRACTOR_HASH = "5d450ab100864451";
 var DEDUPE_PREVIEW_LEN = 120;
 function extractCanonicalFindings(call, ctx) {
   const out = [];

package/dist/index.mjs

@@ -1732,7 +1732,14 @@ var FS_OP_PRESCREEN_RE = new RegExp(
   // reader right after `"` / `'`, and without these two characters the
   // prescreen rejected every string-wrapped read before the parser ran.
   // Found 2026-09-11 by instrumenting the walk -- no CallExpr was ever visited.
-  `(?:^|[\\s|;&("'\`\\n/])(?:rm|${[...FS_READ_TOOLS, ...COPY_VERB_HEADS].map((t) => t.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|")})\\b|(?<!<)<(?!<)`
+  `(?:^|[\\s|;&("'\`\\n/])(?:rm|${[...FS_READ_TOOLS, ...COPY_VERB_HEADS].map((t) => t.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|")})\\b|(?<!<)<(?!<)`,
+  // Case-insensitive on purpose. Without `i`, `CAT .env` failed this fast path
+  // and analyzeFsOperation returned before the AST ran at all — a live bypass
+  // on macOS and Windows, whose filesystems resolve `CAT` to `cat`, and on
+  // PowerShell, which is case-insensitive by language. Linux is unaffected in
+  // practice (`CAT` is not an executable there) but folding costs nothing.
+  // Dogfound 2026-09-22; pinned by verb-case-coverage.spec.ts.
+  "i"
 );
 var HOME_CACHE_ALLOWLIST = [
   ".cache",
@@ -5596,8 +5603,8 @@ function matchCanaryArgs(args, values) {
 
 // src/scan/canonical.ts
 var LONG_OUTPUT_THRESHOLD_BYTES = 100 * 1024;
-var CANONICAL_EXTRACTOR_VERSION = "canonical-v15";
-var CANONICAL_EXTRACTOR_HASH = "2823cd6a54a1fca7";
+var CANONICAL_EXTRACTOR_VERSION = "canonical-v16";
+var CANONICAL_EXTRACTOR_HASH = "5d450ab100864451";
 var DEDUPE_PREVIEW_LEN = 120;
 function extractCanonicalFindings(call, ctx) {
   const out = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/policy-engine",
-  "version": "2.19.2",
+  "version": "2.20.0",
   "description": "Shared policy evaluation engine for node9 — DLP, smart rules, AST shell parsing, shields, loop detection. Pure functions, no I/O. Used by both node9-proxy and the node9 SaaS firewall.",
   "license": "Apache-2.0",
   "homepage": "https://node9.ai",