@parel/security-basic 0.1.5 → 0.1.7

package/README.md

@@ -18,7 +18,8 @@ plugins:
 ```
 
 It enforces a command allowlist and redacts known secret patterns from tool
-output.
+output. By default it scans common shell tool names, including `bash`,
+`workspace_shell`, and `workspace_start_process`.
 
 > **Scope.** This is a best-effort policy layer, **not** an isolation boundary.
 > A program-name allowlist cannot see inside an allowlisted interpreter's

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import * as _parel_core from '@parel/core';
+import { ParelPlugin } from '@parel/plugin-sdk';
 
-declare const _default: _parel_core.ParelPlugin;
+declare const _default: ParelPlugin;
 
 export { _default as default };

package/dist/index.js

@@ -1,6 +1,29 @@
 // src/index.ts
 import { definePlugin, HookPriority, LifecycleEvent } from "@parel/plugin-sdk";
-var DEFAULT_EXEC_TOOLS = /* @__PURE__ */ new Set(["bash", "shell", "exec", "terminal", "run_command", "run"]);
+
+// parel.plugin.json
+var parel_plugin_default = {
+  name: "@parel/security-basic",
+  version: "0.1.5",
+  execution: {
+    snapshot: {
+      store: "reset",
+      sideEffects: "reference"
+    }
+  }
+};
+
+// src/index.ts
+var DEFAULT_EXEC_TOOLS = /* @__PURE__ */ new Set([
+  "bash",
+  "shell",
+  "exec",
+  "terminal",
+  "run_command",
+  "run",
+  "workspace_shell",
+  "workspace_start_process"
+]);
 var DEFAULT_ALLOWED_PATTERNS = [
   /^(ls|cat|head|tail|wc|grep|find|which|echo|printf|date|pwd|whoami|id|env|printenv)$/,
   /^(cd|mkdir|cp|mv|touch|ln)$/,
@@ -347,6 +370,7 @@ function extractAllPrograms(command) {
 }
 var index_default = definePlugin({
   name: "@parel/security-basic",
+  execution: parel_plugin_default.execution,
   async setup(ctx) {
     const mode = ctx.config.mode ?? "allowlist";
     const customExecTools = ctx.config.exec_tools;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parel/security-basic",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "PAREL plugin for basic command and secret safety checks.",
   "license": "MIT",
   "repository": {
@@ -21,16 +21,17 @@
   },
   "files": [
     "dist",
+    "parel.plugin.json",
     "LICENSE",
     "README.md"
   ],
   "dependencies": {
-    "@parel/plugin-sdk": "0.2.4"
+    "@parel/plugin-sdk": "0.4.0"
   },
   "devDependencies": {
     "tsup": "^8.0.0",
     "typescript": "^5.8.0",
-    "vitest": "^3.0.0"
+    "vitest": "^4.1.8"
   },
   "publishConfig": {
     "access": "public"

package/parel.plugin.json

@@ -0,0 +1,10 @@
+{
+  "name": "@parel/security-basic",
+  "version": "0.1.5",
+  "execution": {
+    "snapshot": {
+      "store": "reset",
+      "sideEffects": "reference"
+    }
+  }
+}