@sagentlab/navarch-runtime 0.1.117 → 0.1.118

package/bin/worktree-guard-hook.cjs

@@ -173,12 +173,80 @@ function expandHome(value) {
   return value;
 }
 
+/**
+ * Previous character on the same line, ignoring blanks; "" at a true line
+ * start. A line that ends in an unescaped backslash continues onto the next
+ * line in the shell, so that backslash is returned instead.
+ */
+function previousSignificantChar(command, index) {
+  for (let i = index - 1; i >= 0; i--) {
+    const ch = command[i];
+    if (ch === "\n") {
+      let j = i - 1;
+      while (j >= 0 && (command[j] === "\r" || command[j] === " " || command[j] === "\t")) j--;
+      let slashes = 0;
+      while (j >= 0 && command[j] === "\\") {
+        slashes++;
+        j--;
+      }
+      return slashes % 2 === 1 ? "\\" : "";
+    }
+    if (ch !== " " && ch !== "\t") return ch;
+  }
+  return "";
+}
+
+/**
+ * True when the token sits directly after a quote that opens a word
+ * (`"/** x *\/"`). A closing quote (`"" /*`, `"x"/*`) leaves the token as a
+ * bare shell argument, so it does not count.
+ */
+function isInsideOpeningQuote(command, start) {
+  const quote = command[start - 1];
+  // Backticks run a command, so never use them to exempt a path token.
+  if (quote !== '"' && quote !== "'") return false;
+  // Only the command's first quote can prove an opening quoted word without
+  // parsing shell comments, heredocs and nested substitutions. Earlier quote
+  // characters make this ambiguous: keep screening rather than risk treating
+  // a closing quote after a continuation as an opening one.
+  if (/["'`]/.test(command.slice(0, start - 1))) return false;
+  const beforeQuote = command[start - 2];
+  return beforeQuote === undefined || /[\s=(<>;|&]/.test(beforeQuote);
+}
+
+/**
+ * True when a "/"-leading token is comment or markup text rather than a path:
+ * a closing tag (`</p>`), a block-comment opener (`/**`, `/*`), or a line
+ * comment (`// note`). Each rule is deliberately narrow so real escapes stay
+ * screened: tag names that exist at the filesystem root (`</home>`) are still
+ * checked, `/*` and `//` only count at a comment position (line start, right
+ * after an opening quote, or after `;`) so `rm -rf /*`, `find // -name x`
+ * and `rm -rf "" /*` stay blocked, and a block comment needs a closing
+ * `*` + `/` later in the text.
+ */
+function isCommentOrMarkupToken(command, start, token) {
+  const end = start + token.length;
+  const next = command[end];
+
+  if (command[start - 1] === "<" && next === ">" && /^\/[A-Za-z][\w:.-]*$/.test(token)) {
+    return !fs.existsSync(token);
+  }
+
+  const atCommentPosition =
+    isInsideOpeningQuote(command, start) ||
+    ["", ";"].includes(previousSignificantChar(command, start));
+  if (!atCommentPosition || next === undefined || !/\s/.test(next)) return false;
+  if (token === "/*" || token === "/**") return command.indexOf("*/", end) !== -1;
+  return token === "//" && /\S/.test(command.slice(end));
+}
+
 /**
  * Pulls path-like references out of a shell command: absolute paths,
  * home-anchored paths (`~...`, `$HOME/...`), and relative `..` traversals.
  * Lexical by design — see the file header for why this is a guardrail, not
  * a parser. URLs survive untouched (the char before `//` in `https://` is
- * `:`, which is not a path delimiter here).
+ * `:`, which is not a path delimiter here). Comment and markup text that
+ * merely starts with "/" (`/** doc *\/`, `// note`, `</p>`) is not a path.
  */
 function extractBashPathCandidates(command) {
   const candidates = [];
@@ -193,7 +261,11 @@ function extractBashPathCandidates(command) {
   const absoluteRe = /(?:^|[\s'"`=(<>;|&])(\/[^\s'"`<>;|&)]*)/g;
   const homeRe = /(?:^|[\s'"`=(<>;|&])((?:~|\$\{?HOME\}?)[^\s'"`<>;|&)]*)/g;
   let match;
-  while ((match = absoluteRe.exec(command))) add(match[1]);
+  while ((match = absoluteRe.exec(command))) {
+    const start = match.index + match[0].length - match[1].length;
+    if (isCommentOrMarkupToken(command, start, match[1])) continue;
+    add(match[1]);
+  }
   while ((match = homeRe.exec(command))) add(match[1]);
 
   for (const token of command.split(/[\s'"`;|&<>()]+/)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sagentlab/navarch-runtime",
-  "version": "0.1.117",
+  "version": "0.1.118",
   "description": "Navarch machine-side session manager: claims delivery tasks and runs them through local coding agents.",
   "type": "commonjs",
   "license": "MIT",