@node9/proxy 1.67.1 → 1.67.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/scan-ink.mjs CHANGED
@@ -818,6 +818,48 @@ function assertBuiltinPatternsAreSafe() {
818
818
  assertBuiltinPatternsAreSafe();
819
819
  var { syntax } = mvdanSh;
820
820
  var sharedParser = syntax.NewParser();
821
+ var FS_READ_TOOLS = /* @__PURE__ */ new Set([
822
+ "cat",
823
+ "less",
824
+ "head",
825
+ "tail",
826
+ "bat",
827
+ "more",
828
+ "open",
829
+ "print",
830
+ "nano",
831
+ "vim",
832
+ "vi",
833
+ "emacs",
834
+ "code",
835
+ "type",
836
+ // — the 22 that were missing —
837
+ "grep",
838
+ "egrep",
839
+ "fgrep",
840
+ "rg",
841
+ "ag",
842
+ "ack",
843
+ "awk",
844
+ "gawk",
845
+ "sed",
846
+ "cut",
847
+ "tr",
848
+ "jq",
849
+ "yq",
850
+ "od",
851
+ "xxd",
852
+ "hexdump",
853
+ "strings",
854
+ "sort",
855
+ "uniq",
856
+ "tac",
857
+ "nl",
858
+ "dd"
859
+ ]);
860
+ var FS_OP_PRESCREEN_RE = new RegExp(
861
+ `(?:^|[\\s|;&(\`\\n])(?:rm|${[...FS_READ_TOOLS].map((t) => t.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|")})\\b`
862
+ );
821
863
  function deriveRedirOp(sample) {
822
864
  try {
823
865
  const f = sharedParser.Parse(sample, "cmd");
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@node9/proxy",
3
- "version": "1.67.1",
3
+ "version": "1.67.3",
4
4
  "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
5
5
  "main": "./dist/index.js",
6
6
  "module": "./dist/index.mjs",