@node9/proxy 2.54.0 → 2.54.1

package/dist/cli-main.js

@@ -976,12 +976,46 @@ function wordValues(word, state) {
   if (!dynamic) return out.map(asWord);
   return out.filter((piece) => piece.value !== "").map((piece) => ({ value: piece.value, pattern: piece.pattern + "*", dynamic: true }));
 }
+function sedSubstitutions(script) {
+  const out = [];
+  for (const raw of script.split(/\r?\n|;/)) {
+    const cmd = raw.trim();
+    if (cmd === "") continue;
+    const m = /^(?:(?:\d+|\$|\/(?:\\.|[^\\/])*\/)(?:,(?:\d+|\$|\/(?:\\.|[^\\/])*\/))?)?s(.)/.exec(
+      cmd
+    );
+    if (!m) return null;
+    const delimiter = m[1];
+    if (delimiter === "\\") return null;
+    const parts = [];
+    let cur = "";
+    let i = m[0].length;
+    for (; i < cmd.length && parts.length < 2; i++) {
+      const ch = cmd[i];
+      if (ch === "\\" && i + 1 < cmd.length) {
+        cur += ch + cmd[++i];
+        continue;
+      }
+      if (ch === delimiter) {
+        parts.push(cur);
+        cur = "";
+        continue;
+      }
+      cur += ch;
+    }
+    if (parts.length < 2) return null;
+    if (!/^[gpiImM0-9]*$/.test(cmd.slice(i))) return null;
+    out.push(parts[1].replace(/\\(.)/g, "$1"));
+  }
+  return out.length > 0 ? out : null;
+}
 function collectShellFileAccesses(command, context = {}) {
   const out = [];
   let payloads = 256;
   const functions = /* @__PURE__ */ new Map();
   const seenCalls = /* @__PURE__ */ new Set();
   const pipedStdin = /* @__PURE__ */ new WeakMap();
+  let currentStdin = null;
   let callWalks2 = MAX_CALL_WALKS;
   const initial = {
     cwd: [context.cwd ?? ""],
@@ -1076,8 +1110,9 @@ function collectShellFileAccesses(command, context = {}) {
     }
     const locate = (p) => tokens.find((w) => w?.value === p) ?? { value: p };
     if (name === "sed") {
-      let inplace = false, hasScript = false, ended = false;
+      let inplace = false, hasScript = false, ended = false, scriptUnknown = false;
       const files = [];
+      const scriptParts = [];
       for (let i = 0; i < args.length; i++) {
         const token = args[i];
         if (!token) {
@@ -1095,7 +1130,11 @@ function collectShellFileAccesses(command, context = {}) {
             hasScript = true;
             const eq = value.indexOf("=");
             const script = eq < 0 ? args[++i] : { value: value.slice(eq + 1) };
-            if (value.startsWith("--file") && script) add("read", script, state);
+            if (value.startsWith("--file")) {
+              scriptUnknown = true;
+              if (script) add("read", script, state);
+            } else if (script?.value) scriptParts.push(script.value);
+            else scriptUnknown = true;
           }
           continue;
         }
@@ -1110,7 +1149,11 @@ function collectShellFileAccesses(command, context = {}) {
             if (flag === "e" || flag === "f") {
               hasScript = true;
               const script = value.slice(j + 1) ? { value: value.slice(j + 1) } : args[++i];
-              if (flag === "f" && script) add("read", script, state);
+              if (flag === "f") {
+                scriptUnknown = true;
+                if (script) add("read", script, state);
+              } else if (script?.value) scriptParts.push(script.value);
+              else scriptUnknown = true;
               break;
             }
             if (flag === "l") {
@@ -1120,10 +1163,14 @@ function collectShellFileAccesses(command, context = {}) {
           }
           continue;
         }
-        if (!hasScript) hasScript = true;
-        else files.push(token);
+        if (!hasScript) {
+          hasScript = true;
+          scriptParts.push(value);
+        } else files.push(token);
       }
-      for (const file2 of files) add(inplace ? "write" : "read", file2, state);
+      const edits = inplace && !scriptUnknown ? sedSubstitutions(scriptParts.join("\n")) : null;
+      for (const file2 of files)
+        add(inplace ? "write" : "read", file2, state, edits ? { edits } : {});
       return;
     }
     if (FS_READ_TOOLS.has(name) && name !== "dd") {
@@ -1250,9 +1297,11 @@ function collectShellFileAccesses(command, context = {}) {
           continue;
         const remove = name === "rm" || name === "unlink";
         const append = name === "tee" && strings.some((s) => s === "--append" || /^-[^-]*a/.test(s));
+        const teed = name === "tee" && !append ? currentStdin : null;
         add(remove ? "remove" : name === "touch" ? "create" : "write", token, state, {
           recursive: remove && strings.some((s) => /^-[^-]*[rR]/.test(s) || s === "--recursive"),
-          ...append ? { append: true } : {}
+          ...append ? { append: true } : {},
+          ...teed !== null ? { text: teed } : {}
         });
       }
       return;
@@ -1574,11 +1623,18 @@ function collectShellFileAccesses(command, context = {}) {
     if (stmt.Background) state = clone(state);
     const headWord = stmt.Cmd && stmt.Cmd.kind === "CallExpr" ? base(resolveWordLiteral(stmt.Cmd.Args?.[0])) : "";
     const sends = SENDING_STDIN.has(headWord);
+    let produced;
     for (const redir of stmt.Redirs ?? []) {
       substitutions2(redir.Word, state, depth);
       for (const word of wordValues(redir.Word, state)) {
-        if (ops().WRITES.has(redir.Op))
-          add("write", word, state, ops().APPENDS.has(redir.Op) ? { append: true } : {});
+        if (ops().WRITES.has(redir.Op)) {
+          if (ops().APPENDS.has(redir.Op)) add("write", word, state, { append: true });
+          else {
+            const stdout = redir.N == null || redir.N.Value === "1";
+            if (stdout && produced === void 0) produced = producedText(stmt);
+            add("write", word, state, stdout && produced ? { text: produced } : {});
+          }
+        }
         if (ops().READS.has(redir.Op)) add("read", word, state, sends ? { upload: true } : {});
         if (redir.Op === ops().DUP_OUT && word.value && !/^\d+$/.test(word.value))
           add("write", word, state);
@@ -1590,6 +1646,7 @@ function collectShellFileAccesses(command, context = {}) {
     stdinScript(stmt, state, depth);
     const fedText = stdinText(stmt);
     if (fedText !== null) nestedPayload(xargsPayload(stmt, fedText), clone(state), depth);
+    currentStdin = fedText;
     switch (cmd.kind) {
       case "CallExpr":
         call(cmd, state, depth);
@@ -6717,8 +6774,16 @@ function evaluateGitHooksFileAccess(args, accesses, context, settings, shell) {
       disarms = true;
       how = "removed";
     } else if (texts === null) {
-      disarms = true;
-      how = "overwritten";
+      if (access.edits) {
+        disarms = access.edits.some(editDisarms);
+        how = "edited to exit";
+      } else if (access.text !== void 0) {
+        disarms = hookTextRunsNothing(access.text);
+        how = "emptied";
+      } else {
+        disarms = true;
+        how = "overwritten";
+      }
     } else if (texts.whole.length > 0) {
       disarms = texts.whole.some(hookTextRunsNothing);
       how = "emptied";

package/dist/dashboard.mjs

@@ -994,12 +994,46 @@ function wordValues(word, state) {
   if (!dynamic) return out.map(asWord);
   return out.filter((piece) => piece.value !== "").map((piece) => ({ value: piece.value, pattern: piece.pattern + "*", dynamic: true }));
 }
+function sedSubstitutions(script) {
+  const out = [];
+  for (const raw of script.split(/\r?\n|;/)) {
+    const cmd = raw.trim();
+    if (cmd === "") continue;
+    const m = /^(?:(?:\d+|\$|\/(?:\\.|[^\\/])*\/)(?:,(?:\d+|\$|\/(?:\\.|[^\\/])*\/))?)?s(.)/.exec(
+      cmd
+    );
+    if (!m) return null;
+    const delimiter = m[1];
+    if (delimiter === "\\") return null;
+    const parts = [];
+    let cur = "";
+    let i = m[0].length;
+    for (; i < cmd.length && parts.length < 2; i++) {
+      const ch = cmd[i];
+      if (ch === "\\" && i + 1 < cmd.length) {
+        cur += ch + cmd[++i];
+        continue;
+      }
+      if (ch === delimiter) {
+        parts.push(cur);
+        cur = "";
+        continue;
+      }
+      cur += ch;
+    }
+    if (parts.length < 2) return null;
+    if (!/^[gpiImM0-9]*$/.test(cmd.slice(i))) return null;
+    out.push(parts[1].replace(/\\(.)/g, "$1"));
+  }
+  return out.length > 0 ? out : null;
+}
 function collectShellFileAccesses(command, context = {}) {
   const out = [];
   let payloads = 256;
   const functions = /* @__PURE__ */ new Map();
   const seenCalls = /* @__PURE__ */ new Set();
   const pipedStdin = /* @__PURE__ */ new WeakMap();
+  let currentStdin = null;
   let callWalks2 = MAX_CALL_WALKS;
   const initial = {
     cwd: [context.cwd ?? ""],
@@ -1094,8 +1128,9 @@ function collectShellFileAccesses(command, context = {}) {
     }
     const locate = (p) => tokens.find((w) => w?.value === p) ?? { value: p };
     if (name === "sed") {
-      let inplace = false, hasScript = false, ended = false;
+      let inplace = false, hasScript = false, ended = false, scriptUnknown = false;
       const files = [];
+      const scriptParts = [];
       for (let i = 0; i < args.length; i++) {
         const token = args[i];
         if (!token) {
@@ -1113,7 +1148,11 @@ function collectShellFileAccesses(command, context = {}) {
             hasScript = true;
             const eq = value.indexOf("=");
             const script = eq < 0 ? args[++i] : { value: value.slice(eq + 1) };
-            if (value.startsWith("--file") && script) add("read", script, state);
+            if (value.startsWith("--file")) {
+              scriptUnknown = true;
+              if (script) add("read", script, state);
+            } else if (script?.value) scriptParts.push(script.value);
+            else scriptUnknown = true;
           }
           continue;
         }
@@ -1128,7 +1167,11 @@ function collectShellFileAccesses(command, context = {}) {
             if (flag === "e" || flag === "f") {
               hasScript = true;
               const script = value.slice(j + 1) ? { value: value.slice(j + 1) } : args[++i];
-              if (flag === "f" && script) add("read", script, state);
+              if (flag === "f") {
+                scriptUnknown = true;
+                if (script) add("read", script, state);
+              } else if (script?.value) scriptParts.push(script.value);
+              else scriptUnknown = true;
               break;
             }
             if (flag === "l") {
@@ -1138,10 +1181,14 @@ function collectShellFileAccesses(command, context = {}) {
           }
           continue;
         }
-        if (!hasScript) hasScript = true;
-        else files.push(token);
+        if (!hasScript) {
+          hasScript = true;
+          scriptParts.push(value);
+        } else files.push(token);
       }
-      for (const file2 of files) add(inplace ? "write" : "read", file2, state);
+      const edits = inplace && !scriptUnknown ? sedSubstitutions(scriptParts.join("\n")) : null;
+      for (const file2 of files)
+        add(inplace ? "write" : "read", file2, state, edits ? { edits } : {});
       return;
     }
     if (FS_READ_TOOLS.has(name) && name !== "dd") {
@@ -1268,9 +1315,11 @@ function collectShellFileAccesses(command, context = {}) {
           continue;
         const remove = name === "rm" || name === "unlink";
         const append = name === "tee" && strings.some((s) => s === "--append" || /^-[^-]*a/.test(s));
+        const teed = name === "tee" && !append ? currentStdin : null;
         add(remove ? "remove" : name === "touch" ? "create" : "write", token, state, {
           recursive: remove && strings.some((s) => /^-[^-]*[rR]/.test(s) || s === "--recursive"),
-          ...append ? { append: true } : {}
+          ...append ? { append: true } : {},
+          ...teed !== null ? { text: teed } : {}
         });
       }
       return;
@@ -1592,11 +1641,18 @@ function collectShellFileAccesses(command, context = {}) {
     if (stmt.Background) state = clone(state);
     const headWord = stmt.Cmd && stmt.Cmd.kind === "CallExpr" ? base(resolveWordLiteral(stmt.Cmd.Args?.[0])) : "";
     const sends = SENDING_STDIN.has(headWord);
+    let produced;
     for (const redir of stmt.Redirs ?? []) {
       substitutions(redir.Word, state, depth);
       for (const word of wordValues(redir.Word, state)) {
-        if (ops().WRITES.has(redir.Op))
-          add("write", word, state, ops().APPENDS.has(redir.Op) ? { append: true } : {});
+        if (ops().WRITES.has(redir.Op)) {
+          if (ops().APPENDS.has(redir.Op)) add("write", word, state, { append: true });
+          else {
+            const stdout = redir.N == null || redir.N.Value === "1";
+            if (stdout && produced === void 0) produced = producedText(stmt);
+            add("write", word, state, stdout && produced ? { text: produced } : {});
+          }
+        }
         if (ops().READS.has(redir.Op)) add("read", word, state, sends ? { upload: true } : {});
         if (redir.Op === ops().DUP_OUT && word.value && !/^\d+$/.test(word.value))
           add("write", word, state);
@@ -1608,6 +1664,7 @@ function collectShellFileAccesses(command, context = {}) {
     stdinScript(stmt, state, depth);
     const fedText = stdinText(stmt);
     if (fedText !== null) nestedPayload(xargsPayload(stmt, fedText), clone(state), depth);
+    currentStdin = fedText;
     switch (cmd.kind) {
       case "CallExpr":
         call(cmd, state, depth);
@@ -6641,8 +6698,16 @@ function evaluateGitHooksFileAccess(args, accesses, context, settings, shell) {
       disarms = true;
       how = "removed";
     } else if (texts === null) {
-      disarms = true;
-      how = "overwritten";
+      if (access.edits) {
+        disarms = access.edits.some(editDisarms);
+        how = "edited to exit";
+      } else if (access.text !== void 0) {
+        disarms = hookTextRunsNothing(access.text);
+        how = "emptied";
+      } else {
+        disarms = true;
+        how = "overwritten";
+      }
     } else if (texts.whole.length > 0) {
       disarms = texts.whole.some(hookTextRunsNothing);
       how = "emptied";

package/dist/hook.js

@@ -903,12 +903,46 @@ function wordValues(word, state) {
   if (!dynamic) return out.map(asWord);
   return out.filter((piece) => piece.value !== "").map((piece) => ({ value: piece.value, pattern: piece.pattern + "*", dynamic: true }));
 }
+function sedSubstitutions(script) {
+  const out = [];
+  for (const raw of script.split(/\r?\n|;/)) {
+    const cmd = raw.trim();
+    if (cmd === "") continue;
+    const m = /^(?:(?:\d+|\$|\/(?:\\.|[^\\/])*\/)(?:,(?:\d+|\$|\/(?:\\.|[^\\/])*\/))?)?s(.)/.exec(
+      cmd
+    );
+    if (!m) return null;
+    const delimiter = m[1];
+    if (delimiter === "\\") return null;
+    const parts = [];
+    let cur = "";
+    let i = m[0].length;
+    for (; i < cmd.length && parts.length < 2; i++) {
+      const ch = cmd[i];
+      if (ch === "\\" && i + 1 < cmd.length) {
+        cur += ch + cmd[++i];
+        continue;
+      }
+      if (ch === delimiter) {
+        parts.push(cur);
+        cur = "";
+        continue;
+      }
+      cur += ch;
+    }
+    if (parts.length < 2) return null;
+    if (!/^[gpiImM0-9]*$/.test(cmd.slice(i))) return null;
+    out.push(parts[1].replace(/\\(.)/g, "$1"));
+  }
+  return out.length > 0 ? out : null;
+}
 function collectShellFileAccesses(command, context = {}) {
   const out = [];
   let payloads = 256;
   const functions = /* @__PURE__ */ new Map();
   const seenCalls = /* @__PURE__ */ new Set();
   const pipedStdin = /* @__PURE__ */ new WeakMap();
+  let currentStdin = null;
   let callWalks2 = MAX_CALL_WALKS;
   const initial = {
     cwd: [context.cwd ?? ""],
@@ -1003,8 +1037,9 @@ function collectShellFileAccesses(command, context = {}) {
     }
     const locate = (p) => tokens.find((w) => w?.value === p) ?? { value: p };
     if (name === "sed") {
-      let inplace = false, hasScript = false, ended = false;
+      let inplace = false, hasScript = false, ended = false, scriptUnknown = false;
       const files = [];
+      const scriptParts = [];
       for (let i = 0; i < args.length; i++) {
         const token = args[i];
         if (!token) {
@@ -1022,7 +1057,11 @@ function collectShellFileAccesses(command, context = {}) {
             hasScript = true;
             const eq = value.indexOf("=");
             const script = eq < 0 ? args[++i] : { value: value.slice(eq + 1) };
-            if (value.startsWith("--file") && script) add("read", script, state);
+            if (value.startsWith("--file")) {
+              scriptUnknown = true;
+              if (script) add("read", script, state);
+            } else if (script?.value) scriptParts.push(script.value);
+            else scriptUnknown = true;
           }
           continue;
         }
@@ -1037,7 +1076,11 @@ function collectShellFileAccesses(command, context = {}) {
             if (flag === "e" || flag === "f") {
               hasScript = true;
               const script = value.slice(j + 1) ? { value: value.slice(j + 1) } : args[++i];
-              if (flag === "f" && script) add("read", script, state);
+              if (flag === "f") {
+                scriptUnknown = true;
+                if (script) add("read", script, state);
+              } else if (script?.value) scriptParts.push(script.value);
+              else scriptUnknown = true;
               break;
             }
             if (flag === "l") {
@@ -1047,10 +1090,14 @@ function collectShellFileAccesses(command, context = {}) {
           }
           continue;
         }
-        if (!hasScript) hasScript = true;
-        else files.push(token);
+        if (!hasScript) {
+          hasScript = true;
+          scriptParts.push(value);
+        } else files.push(token);
       }
-      for (const file2 of files) add(inplace ? "write" : "read", file2, state);
+      const edits = inplace && !scriptUnknown ? sedSubstitutions(scriptParts.join("\n")) : null;
+      for (const file2 of files)
+        add(inplace ? "write" : "read", file2, state, edits ? { edits } : {});
       return;
     }
     if (FS_READ_TOOLS.has(name) && name !== "dd") {
@@ -1177,9 +1224,11 @@ function collectShellFileAccesses(command, context = {}) {
           continue;
         const remove = name === "rm" || name === "unlink";
         const append = name === "tee" && strings.some((s) => s === "--append" || /^-[^-]*a/.test(s));
+        const teed = name === "tee" && !append ? currentStdin : null;
         add(remove ? "remove" : name === "touch" ? "create" : "write", token, state, {
           recursive: remove && strings.some((s) => /^-[^-]*[rR]/.test(s) || s === "--recursive"),
-          ...append ? { append: true } : {}
+          ...append ? { append: true } : {},
+          ...teed !== null ? { text: teed } : {}
         });
       }
       return;
@@ -1501,11 +1550,18 @@ function collectShellFileAccesses(command, context = {}) {
     if (stmt.Background) state = clone(state);
     const headWord = stmt.Cmd && stmt.Cmd.kind === "CallExpr" ? base(resolveWordLiteral(stmt.Cmd.Args?.[0])) : "";
     const sends = SENDING_STDIN.has(headWord);
+    let produced;
     for (const redir of stmt.Redirs ?? []) {
       substitutions(redir.Word, state, depth);
       for (const word of wordValues(redir.Word, state)) {
-        if (ops().WRITES.has(redir.Op))
-          add("write", word, state, ops().APPENDS.has(redir.Op) ? { append: true } : {});
+        if (ops().WRITES.has(redir.Op)) {
+          if (ops().APPENDS.has(redir.Op)) add("write", word, state, { append: true });
+          else {
+            const stdout = redir.N == null || redir.N.Value === "1";
+            if (stdout && produced === void 0) produced = producedText(stmt);
+            add("write", word, state, stdout && produced ? { text: produced } : {});
+          }
+        }
         if (ops().READS.has(redir.Op)) add("read", word, state, sends ? { upload: true } : {});
         if (redir.Op === ops().DUP_OUT && word.value && !/^\d+$/.test(word.value))
           add("write", word, state);
@@ -1517,6 +1573,7 @@ function collectShellFileAccesses(command, context = {}) {
     stdinScript(stmt, state, depth);
     const fedText = stdinText(stmt);
     if (fedText !== null) nestedPayload(xargsPayload(stmt, fedText), clone(state), depth);
+    currentStdin = fedText;
     switch (cmd.kind) {
       case "CallExpr":
         call(cmd, state, depth);
@@ -6644,8 +6701,16 @@ function evaluateGitHooksFileAccess(args, accesses, context, settings, shell) {
       disarms = true;
       how = "removed";
     } else if (texts === null) {
-      disarms = true;
-      how = "overwritten";
+      if (access.edits) {
+        disarms = access.edits.some(editDisarms);
+        how = "edited to exit";
+      } else if (access.text !== void 0) {
+        disarms = hookTextRunsNothing(access.text);
+        how = "emptied";
+      } else {
+        disarms = true;
+        how = "overwritten";
+      }
     } else if (texts.whole.length > 0) {
       disarms = texts.whole.some(hookTextRunsNothing);
       how = "emptied";

package/dist/index.js

@@ -957,12 +957,46 @@ function wordValues(word, state) {
   if (!dynamic) return out.map(asWord);
   return out.filter((piece) => piece.value !== "").map((piece) => ({ value: piece.value, pattern: piece.pattern + "*", dynamic: true }));
 }
+function sedSubstitutions(script) {
+  const out = [];
+  for (const raw of script.split(/\r?\n|;/)) {
+    const cmd = raw.trim();
+    if (cmd === "") continue;
+    const m = /^(?:(?:\d+|\$|\/(?:\\.|[^\\/])*\/)(?:,(?:\d+|\$|\/(?:\\.|[^\\/])*\/))?)?s(.)/.exec(
+      cmd
+    );
+    if (!m) return null;
+    const delimiter = m[1];
+    if (delimiter === "\\") return null;
+    const parts = [];
+    let cur = "";
+    let i = m[0].length;
+    for (; i < cmd.length && parts.length < 2; i++) {
+      const ch = cmd[i];
+      if (ch === "\\" && i + 1 < cmd.length) {
+        cur += ch + cmd[++i];
+        continue;
+      }
+      if (ch === delimiter) {
+        parts.push(cur);
+        cur = "";
+        continue;
+      }
+      cur += ch;
+    }
+    if (parts.length < 2) return null;
+    if (!/^[gpiImM0-9]*$/.test(cmd.slice(i))) return null;
+    out.push(parts[1].replace(/\\(.)/g, "$1"));
+  }
+  return out.length > 0 ? out : null;
+}
 function collectShellFileAccesses(command, context = {}) {
   const out = [];
   let payloads = 256;
   const functions = /* @__PURE__ */ new Map();
   const seenCalls = /* @__PURE__ */ new Set();
   const pipedStdin = /* @__PURE__ */ new WeakMap();
+  let currentStdin = null;
   let callWalks2 = MAX_CALL_WALKS;
   const initial = {
     cwd: [context.cwd ?? ""],
@@ -1057,8 +1091,9 @@ function collectShellFileAccesses(command, context = {}) {
     }
     const locate = (p) => tokens.find((w) => w?.value === p) ?? { value: p };
     if (name === "sed") {
-      let inplace = false, hasScript = false, ended = false;
+      let inplace = false, hasScript = false, ended = false, scriptUnknown = false;
       const files = [];
+      const scriptParts = [];
       for (let i = 0; i < args.length; i++) {
         const token = args[i];
         if (!token) {
@@ -1076,7 +1111,11 @@ function collectShellFileAccesses(command, context = {}) {
             hasScript = true;
             const eq = value.indexOf("=");
             const script = eq < 0 ? args[++i] : { value: value.slice(eq + 1) };
-            if (value.startsWith("--file") && script) add("read", script, state);
+            if (value.startsWith("--file")) {
+              scriptUnknown = true;
+              if (script) add("read", script, state);
+            } else if (script?.value) scriptParts.push(script.value);
+            else scriptUnknown = true;
           }
           continue;
         }
@@ -1091,7 +1130,11 @@ function collectShellFileAccesses(command, context = {}) {
             if (flag === "e" || flag === "f") {
               hasScript = true;
               const script = value.slice(j + 1) ? { value: value.slice(j + 1) } : args[++i];
-              if (flag === "f" && script) add("read", script, state);
+              if (flag === "f") {
+                scriptUnknown = true;
+                if (script) add("read", script, state);
+              } else if (script?.value) scriptParts.push(script.value);
+              else scriptUnknown = true;
               break;
             }
             if (flag === "l") {
@@ -1101,10 +1144,14 @@ function collectShellFileAccesses(command, context = {}) {
           }
           continue;
         }
-        if (!hasScript) hasScript = true;
-        else files.push(token);
+        if (!hasScript) {
+          hasScript = true;
+          scriptParts.push(value);
+        } else files.push(token);
       }
-      for (const file2 of files) add(inplace ? "write" : "read", file2, state);
+      const edits = inplace && !scriptUnknown ? sedSubstitutions(scriptParts.join("\n")) : null;
+      for (const file2 of files)
+        add(inplace ? "write" : "read", file2, state, edits ? { edits } : {});
       return;
     }
     if (FS_READ_TOOLS.has(name) && name !== "dd") {
@@ -1231,9 +1278,11 @@ function collectShellFileAccesses(command, context = {}) {
           continue;
         const remove = name === "rm" || name === "unlink";
         const append = name === "tee" && strings.some((s) => s === "--append" || /^-[^-]*a/.test(s));
+        const teed = name === "tee" && !append ? currentStdin : null;
         add(remove ? "remove" : name === "touch" ? "create" : "write", token, state, {
           recursive: remove && strings.some((s) => /^-[^-]*[rR]/.test(s) || s === "--recursive"),
-          ...append ? { append: true } : {}
+          ...append ? { append: true } : {},
+          ...teed !== null ? { text: teed } : {}
         });
       }
       return;
@@ -1555,11 +1604,18 @@ function collectShellFileAccesses(command, context = {}) {
     if (stmt.Background) state = clone(state);
     const headWord = stmt.Cmd && stmt.Cmd.kind === "CallExpr" ? base(resolveWordLiteral(stmt.Cmd.Args?.[0])) : "";
     const sends = SENDING_STDIN.has(headWord);
+    let produced;
     for (const redir of stmt.Redirs ?? []) {
       substitutions(redir.Word, state, depth);
       for (const word of wordValues(redir.Word, state)) {
-        if (ops().WRITES.has(redir.Op))
-          add("write", word, state, ops().APPENDS.has(redir.Op) ? { append: true } : {});
+        if (ops().WRITES.has(redir.Op)) {
+          if (ops().APPENDS.has(redir.Op)) add("write", word, state, { append: true });
+          else {
+            const stdout = redir.N == null || redir.N.Value === "1";
+            if (stdout && produced === void 0) produced = producedText(stmt);
+            add("write", word, state, stdout && produced ? { text: produced } : {});
+          }
+        }
         if (ops().READS.has(redir.Op)) add("read", word, state, sends ? { upload: true } : {});
         if (redir.Op === ops().DUP_OUT && word.value && !/^\d+$/.test(word.value))
           add("write", word, state);
@@ -1571,6 +1627,7 @@ function collectShellFileAccesses(command, context = {}) {
     stdinScript(stmt, state, depth);
     const fedText = stdinText(stmt);
     if (fedText !== null) nestedPayload(xargsPayload(stmt, fedText), clone(state), depth);
+    currentStdin = fedText;
     switch (cmd.kind) {
       case "CallExpr":
         call(cmd, state, depth);
@@ -6572,8 +6629,16 @@ function evaluateGitHooksFileAccess(args, accesses, context, settings, shell) {
       disarms = true;
       how = "removed";
     } else if (texts === null) {
-      disarms = true;
-      how = "overwritten";
+      if (access.edits) {
+        disarms = access.edits.some(editDisarms);
+        how = "edited to exit";
+      } else if (access.text !== void 0) {
+        disarms = hookTextRunsNothing(access.text);
+        how = "emptied";
+      } else {
+        disarms = true;
+        how = "overwritten";
+      }
     } else if (texts.whole.length > 0) {
       disarms = texts.whole.some(hookTextRunsNothing);
       how = "emptied";

package/dist/index.mjs

@@ -944,12 +944,46 @@ function wordValues(word, state) {
   if (!dynamic) return out.map(asWord);
   return out.filter((piece) => piece.value !== "").map((piece) => ({ value: piece.value, pattern: piece.pattern + "*", dynamic: true }));
 }
+function sedSubstitutions(script) {
+  const out = [];
+  for (const raw of script.split(/\r?\n|;/)) {
+    const cmd = raw.trim();
+    if (cmd === "") continue;
+    const m = /^(?:(?:\d+|\$|\/(?:\\.|[^\\/])*\/)(?:,(?:\d+|\$|\/(?:\\.|[^\\/])*\/))?)?s(.)/.exec(
+      cmd
+    );
+    if (!m) return null;
+    const delimiter = m[1];
+    if (delimiter === "\\") return null;
+    const parts = [];
+    let cur = "";
+    let i = m[0].length;
+    for (; i < cmd.length && parts.length < 2; i++) {
+      const ch = cmd[i];
+      if (ch === "\\" && i + 1 < cmd.length) {
+        cur += ch + cmd[++i];
+        continue;
+      }
+      if (ch === delimiter) {
+        parts.push(cur);
+        cur = "";
+        continue;
+      }
+      cur += ch;
+    }
+    if (parts.length < 2) return null;
+    if (!/^[gpiImM0-9]*$/.test(cmd.slice(i))) return null;
+    out.push(parts[1].replace(/\\(.)/g, "$1"));
+  }
+  return out.length > 0 ? out : null;
+}
 function collectShellFileAccesses(command, context = {}) {
   const out = [];
   let payloads = 256;
   const functions = /* @__PURE__ */ new Map();
   const seenCalls = /* @__PURE__ */ new Set();
   const pipedStdin = /* @__PURE__ */ new WeakMap();
+  let currentStdin = null;
   let callWalks2 = MAX_CALL_WALKS;
   const initial = {
     cwd: [context.cwd ?? ""],
@@ -1044,8 +1078,9 @@ function collectShellFileAccesses(command, context = {}) {
     }
     const locate = (p) => tokens.find((w) => w?.value === p) ?? { value: p };
     if (name === "sed") {
-      let inplace = false, hasScript = false, ended = false;
+      let inplace = false, hasScript = false, ended = false, scriptUnknown = false;
       const files = [];
+      const scriptParts = [];
       for (let i = 0; i < args.length; i++) {
         const token = args[i];
         if (!token) {
@@ -1063,7 +1098,11 @@ function collectShellFileAccesses(command, context = {}) {
             hasScript = true;
             const eq = value.indexOf("=");
             const script = eq < 0 ? args[++i] : { value: value.slice(eq + 1) };
-            if (value.startsWith("--file") && script) add("read", script, state);
+            if (value.startsWith("--file")) {
+              scriptUnknown = true;
+              if (script) add("read", script, state);
+            } else if (script?.value) scriptParts.push(script.value);
+            else scriptUnknown = true;
           }
           continue;
         }
@@ -1078,7 +1117,11 @@ function collectShellFileAccesses(command, context = {}) {
             if (flag === "e" || flag === "f") {
               hasScript = true;
               const script = value.slice(j + 1) ? { value: value.slice(j + 1) } : args[++i];
-              if (flag === "f" && script) add("read", script, state);
+              if (flag === "f") {
+                scriptUnknown = true;
+                if (script) add("read", script, state);
+              } else if (script?.value) scriptParts.push(script.value);
+              else scriptUnknown = true;
               break;
             }
             if (flag === "l") {
@@ -1088,10 +1131,14 @@ function collectShellFileAccesses(command, context = {}) {
           }
           continue;
         }
-        if (!hasScript) hasScript = true;
-        else files.push(token);
+        if (!hasScript) {
+          hasScript = true;
+          scriptParts.push(value);
+        } else files.push(token);
       }
-      for (const file2 of files) add(inplace ? "write" : "read", file2, state);
+      const edits = inplace && !scriptUnknown ? sedSubstitutions(scriptParts.join("\n")) : null;
+      for (const file2 of files)
+        add(inplace ? "write" : "read", file2, state, edits ? { edits } : {});
       return;
     }
     if (FS_READ_TOOLS.has(name) && name !== "dd") {
@@ -1218,9 +1265,11 @@ function collectShellFileAccesses(command, context = {}) {
           continue;
         const remove = name === "rm" || name === "unlink";
         const append = name === "tee" && strings.some((s) => s === "--append" || /^-[^-]*a/.test(s));
+        const teed = name === "tee" && !append ? currentStdin : null;
         add(remove ? "remove" : name === "touch" ? "create" : "write", token, state, {
           recursive: remove && strings.some((s) => /^-[^-]*[rR]/.test(s) || s === "--recursive"),
-          ...append ? { append: true } : {}
+          ...append ? { append: true } : {},
+          ...teed !== null ? { text: teed } : {}
         });
       }
       return;
@@ -1542,11 +1591,18 @@ function collectShellFileAccesses(command, context = {}) {
     if (stmt.Background) state = clone(state);
     const headWord = stmt.Cmd && stmt.Cmd.kind === "CallExpr" ? base(resolveWordLiteral(stmt.Cmd.Args?.[0])) : "";
     const sends = SENDING_STDIN.has(headWord);
+    let produced;
     for (const redir of stmt.Redirs ?? []) {
       substitutions(redir.Word, state, depth);
       for (const word of wordValues(redir.Word, state)) {
-        if (ops().WRITES.has(redir.Op))
-          add("write", word, state, ops().APPENDS.has(redir.Op) ? { append: true } : {});
+        if (ops().WRITES.has(redir.Op)) {
+          if (ops().APPENDS.has(redir.Op)) add("write", word, state, { append: true });
+          else {
+            const stdout = redir.N == null || redir.N.Value === "1";
+            if (stdout && produced === void 0) produced = producedText(stmt);
+            add("write", word, state, stdout && produced ? { text: produced } : {});
+          }
+        }
         if (ops().READS.has(redir.Op)) add("read", word, state, sends ? { upload: true } : {});
         if (redir.Op === ops().DUP_OUT && word.value && !/^\d+$/.test(word.value))
           add("write", word, state);
@@ -1558,6 +1614,7 @@ function collectShellFileAccesses(command, context = {}) {
     stdinScript(stmt, state, depth);
     const fedText = stdinText(stmt);
     if (fedText !== null) nestedPayload(xargsPayload(stmt, fedText), clone(state), depth);
+    currentStdin = fedText;
     switch (cmd.kind) {
       case "CallExpr":
         call(cmd, state, depth);
@@ -6559,8 +6616,16 @@ function evaluateGitHooksFileAccess(args, accesses, context, settings, shell) {
       disarms = true;
       how = "removed";
     } else if (texts === null) {
-      disarms = true;
-      how = "overwritten";
+      if (access.edits) {
+        disarms = access.edits.some(editDisarms);
+        how = "edited to exit";
+      } else if (access.text !== void 0) {
+        disarms = hookTextRunsNothing(access.text);
+        how = "emptied";
+      } else {
+        disarms = true;
+        how = "overwritten";
+      }
     } else if (texts.whole.length > 0) {
       disarms = texts.whole.some(hookTextRunsNothing);
       how = "emptied";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.54.0",
+  "version": "2.54.1",
   "description": "Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",