@node9/proxy 2.47.0 → 2.47.2

package/dist/scan-ink.mjs

@@ -237,14 +237,15 @@ import path from "path";
 import os from "os";
 
 // packages/policy-engine/dist/index.mjs
+import { fileURLToPath } from "url";
 import picomatch from "picomatch";
 import safeRegex from "safe-regex2";
 import pm from "picomatch";
-import mvdanSh2 from "mvdan-sh";
-import mvdanSh from "mvdan-sh";
-import mvdanSh3 from "mvdan-sh";
+import { createRequire } from "module";
 import safeRegex2 from "safe-regex2";
 import { createHash as createHash2 } from "crypto";
+var getFilename = () => fileURLToPath(import.meta.url);
+var __filename2 = /* @__PURE__ */ getFilename();
 var MAX_REGEX_LENGTH = 256;
 function validateRegex(pattern) {
   if (!pattern) return "Pattern is required";
@@ -2934,7 +2935,25 @@ function isLockedCheck(def) {
 var LEGACY_TO_ID = new Map(
   CHECKS.flatMap((c) => (c.legacy ?? []).map((l) => [l, c.id]))
 );
-var { syntax } = mvdanSh;
+var syntax = null;
+function getSyntax() {
+  if (syntax === null) {
+    const req = createRequire(__filename2);
+    syntax = req("mvdan-sh").syntax;
+  }
+  return syntax;
+}
+function lazy(compute) {
+  let done = false;
+  let value;
+  return () => {
+    if (!done) {
+      value = compute();
+      done = true;
+    }
+    return value;
+  };
+}
 var KINDS = {
   File: { nodes: ["Stmts"] },
   Stmt: { nodes: ["Cmd", "Redirs"], scalars: ["Negated", "Background", "Coprocess"] },
@@ -2993,7 +3012,7 @@ function isGoNode(v) {
   return v !== null && typeof v === "object" && typeof v.Pos === "function";
 }
 function toPlainTree(goNode) {
-  const kind = syntax.NodeType(goNode);
+  const kind = getSyntax().NodeType(goNode);
   const out = { kind, pos: goNode.Pos().Offset(), end: goNode.End().Offset() };
   const spec = KINDS[kind];
   if (!spec) {
@@ -3278,8 +3297,7 @@ var PHP = [
   ],
   ["permissions", /\b(?:chmod|chown|chgrp|lchown|lchgrp)\s*\(/]
 ];
-var { syntax: syntax2 } = mvdanSh2;
-var sharedParser = syntax2.NewParser();
+var sharedParser = lazy(() => getSyntax().NewParser());
 var SHELL_INTERPRETERS = /* @__PURE__ */ new Set([
   "bash",
   "sh",
@@ -3304,7 +3322,7 @@ function parseShared(command) {
   }
   let parsed;
   try {
-    parsed = toPlainTree(sharedParser.Parse(command, "cmd"));
+    parsed = toPlainTree(sharedParser().Parse(command, "cmd"));
   } catch {
     parsed = PARSE_FAIL;
   }
@@ -3829,18 +3847,23 @@ var FS_OP_PRESCREEN_RE = new RegExp(
 var currentStmtOffset = Number.MAX_SAFE_INTEGER;
 function probeBinOp(src) {
   try {
-    const cmd = toPlainTree(syntax2.NewParser().Parse(src, "probe"))?.Stmts?.[0]?.Cmd;
+    const cmd = toPlainTree(getSyntax().NewParser().Parse(src, "probe"))?.Stmts?.[0]?.Cmd;
     if (cmd && cmd.kind === "BinaryCmd") return cmd.Op;
   } catch {
   }
   return null;
 }
-var AND_OP = probeBinOp("a && b");
-var OR_OP = probeBinOp("a || b");
-var AND_OR_OPS = new Set([AND_OP, OR_OP].filter((o) => o !== null));
+var andOrOps = lazy(() => {
+  const and = probeBinOp("a && b");
+  const or = probeBinOp("a || b");
+  return {
+    AND_OP: and,
+    AND_OR_OPS: new Set([and, or].filter((o) => o !== null))
+  };
+});
 function deriveRedirOp(sample) {
   try {
-    const f = toPlainTree(sharedParser.Parse(sample, "cmd"));
+    const f = toPlainTree(sharedParser().Parse(sample, "cmd"));
     let op = -1;
     walk(f, (node) => {
       const n = node;
@@ -3852,14 +3875,13 @@ function deriveRedirOp(sample) {
     return -1;
   }
 }
-var REDIR_TRUNCATE_OPS = /* @__PURE__ */ new Set([deriveRedirOp(">_f")]);
-var REDIR_FILE_IN_OPS = new Set(
-  [deriveRedirOp("cat < f"), deriveRedirOp("cat <> f")].filter((op) => op >= 0)
+var REDIR_TRUNCATE_OPS = lazy(() => /* @__PURE__ */ new Set([deriveRedirOp(">_f")]));
+var REDIR_FILE_IN_OPS = lazy(
+  () => new Set([deriveRedirOp("cat < f"), deriveRedirOp("cat <> f")].filter((op) => op >= 0))
+);
+var REDIR_HEREDOC_OPS = lazy(
+  () => /* @__PURE__ */ new Set([deriveRedirOp("cat <<X\nX"), deriveRedirOp("cat <<-X\nX")])
 );
-var REDIR_HEREDOC_OPS = /* @__PURE__ */ new Set([
-  deriveRedirOp("cat <<X\nX"),
-  deriveRedirOp("cat <<-X\nX")
-]);
 var BASH_TOOL_NAMES = /* @__PURE__ */ new Set([
   "bash",
   "execute_bash",
@@ -3880,33 +3902,36 @@ var MCP_EXECUTORS = /* @__PURE__ */ new Set([
   "run_terminal_command",
   "start_process"
 ]);
-var { syntax: syntax3 } = mvdanSh3;
 function opOf(sample) {
   return parseShared(sample).Stmts[0].Redirs[0].Op;
 }
-var WRITES = new Set([">x", ">>x", ">|x", "&>x", "&>>x", "<>x"].map(opOf));
-var APPENDS = new Set([">>x", "&>>x"].map(opOf));
-var READS = new Set(["<x", "<>x"].map(opOf));
-var DUP_OUT = opOf(">&x");
-var HERE_STRING = opOf("<<<x");
-var AND = parseShared("a && b").Stmts[0].Cmd.Op;
-var OR = parseShared("a || b").Stmts[0].Cmd.Op;
-var DEFAULT_OPS = new Set(
-  ["${x:-y}", "${x-y}", "${x:=y}", "${x=y}"].map(
-    (s) => parseShared(`echo ${s}`).Stmts[0].Cmd.Args[1].Parts[0].Exp.Op
+var ops = lazy(() => ({
+  WRITES: new Set([">x", ">>x", ">|x", "&>x", "&>>x", "<>x"].map(opOf)),
+  APPENDS: new Set([">>x", "&>>x"].map(opOf)),
+  READS: new Set(["<x", "<>x"].map(opOf)),
+  /** `>&word` with a non-numeric word is `&>word` in bash. */
+  DUP_OUT: opOf(">&x"),
+  HERE_STRING: opOf("<<<x"),
+  AND: parseShared("a && b").Stmts[0].Cmd.Op,
+  OR: parseShared("a || b").Stmts[0].Cmd.Op,
+  /** `${x:-d}` `${x-d}` `${x:=d}` `${x=d}`: the default is the value when x is unset. */
+  DEFAULT_OPS: new Set(
+    ["${x:-y}", "${x-y}", "${x:=y}", "${x=y}"].map(
+      (s) => parseShared(`echo ${s}`).Stmts[0].Cmd.Args[1].Parts[0].Exp.Op
+    )
   )
-);
-var SEQUENCE_OPS = (() => {
-  const ops = /* @__PURE__ */ new Set();
+}));
+var SEQUENCE_OPS = lazy(() => {
+  const ops2 = /* @__PURE__ */ new Set();
   for (const text of ["x && y", "x || y"]) {
     try {
       const f = parseShared(text);
-      if (typeof f !== "symbol") ops.add(f.Stmts[0].Cmd.Op);
+      if (typeof f !== "symbol") ops2.add(f.Stmts[0].Cmd.Op);
     } catch {
     }
   }
-  return ops;
-})();
+  return ops2;
+});
 var BIP39_ENGLISH = `abandon
 ability
 able
@@ -7137,13 +7162,13 @@ var REUSED_SIGNALS = INJECTION_SIGNALS.map(
   } : sig
 );
 var NEVER_NEGATED = /* @__PURE__ */ new Set([SIGNALS[1].any[0]]);
-var RDR_IN = (() => {
+var RDR_IN = lazy(() => {
   try {
     return parseShared("x <y").Stmts[0].Redirs[0].Op;
   } catch {
     return null;
   }
-})();
+});
 var SHELLS = /* @__PURE__ */ new Set([...SHELL_INTERPRETERS, "mksh", "ash", "csh", "tcsh"]);
 var NETCATS = /* @__PURE__ */ new Set(["nc", "ncat", "netcat", "nc.traditional", "nc.openbsd"]);
 var NET_CLIENTS = /* @__PURE__ */ new Set([...NETCATS, "telnet", "socat"]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.47.0",
+  "version": "2.47.2",
   "description": "Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",