@stroq/cli 0.15.0 → 0.15.2

package/dist/index.js

@@ -11467,6 +11467,7 @@ async function readCursorSession(path) {
 var HEAD_BYTES = 64 * 1024;
 var claudeCodeReader = {
   agent: "claude-code",
+  label: "Claude Code",
   find: findTranscripts,
   read: readTranscript,
   root: "~/.claude/projects",
@@ -11481,6 +11482,7 @@ var claudeCodeReader = {
 };
 var codexReader = {
   agent: "codex",
+  label: "Codex CLI",
   find: (cwd) => findCodexRollouts(cwd),
   read: readCodexRollout,
   root: "~/.codex/sessions",
@@ -11493,6 +11495,7 @@ var codexReader = {
 };
 var cursorReader = {
   agent: "cursor",
+  label: "Cursor",
   find: (cwd) => findCursorSessions(cwd),
   read: readCursorSession,
   root: tilde(cursorStateDb()),
@@ -11522,6 +11525,10 @@ function tryParse(line3) {
     return null;
   }
 }
+function readerLabels() {
+  const labels = READERS.map((r) => r.label);
+  return labels.length <= 1 ? labels[0] ?? "" : `${labels.slice(0, -1).join(", ")} and ${labels[labels.length - 1]}`;
+}
 var READER_ROOTS = () => READERS.map((r) => r.root).join(" or ");
 async function readerForFile(path) {
   let head = "";
@@ -11554,6 +11561,45 @@ async function newestTranscript(cwd) {
 // src/sent/scan.ts
 import { isAbsolute as isAbsolute3, relative as relative3, resolve as resolve9 } from "path";
 
+// src/sent/heredoc.ts
+var HEREDOC = /(?<!<)<<(-?)\s*(['"]?)([A-Za-z_][\w.-]*)\2/g;
+var EXECUTES_STDIN = /^(?:sudo\s+)?(?:(?:\S*\/)?env\s+(?:\S+=\S*\s+)*)?(?:\S*\/)?(?:sh|bash|zsh|dash|ksh|fish|python\d*(?:\.\d+)?|node|deno|bun|tsx|ruby|perl|php|osascript|ssh|eval|source|\.|xargs|npx|pnpm|uv)(?:\s|$)/;
+function bodyIsExecuted(line3, operatorStart, operatorEnd) {
+  const before = line3.slice(0, operatorStart).split(/&&|\|\||;|\$\(|\|/);
+  const stages = [before[before.length - 1] ?? "", ...line3.slice(operatorEnd).split("|").slice(1)];
+  return stages.some((stage) => EXECUTES_STDIN.test(stage.trim()));
+}
+function withoutHeredocData(command) {
+  if (!command.includes("<<")) return command;
+  const lines = command.split("\n");
+  const kept = [];
+  let i = 0;
+  while (i < lines.length) {
+    const line3 = lines[i] ?? "";
+    kept.push(line3);
+    const operators = [...line3.matchAll(HEREDOC)];
+    i += 1;
+    if (operators.length === 0) continue;
+    for (const op of operators) {
+      const dash = op[1] === "-";
+      const delimiter3 = op[3] ?? "";
+      let end = i;
+      while (end < lines.length) {
+        const candidate = lines[end] ?? "";
+        if ((dash ? candidate.replace(/^\t+/, "") : candidate) === delimiter3) break;
+        end += 1;
+      }
+      if (end >= lines.length) return command;
+      const start = op.index;
+      const executed = bodyIsExecuted(line3, start, start + op[0].length);
+      if (executed) kept.push(...lines.slice(i, end));
+      kept.push(lines[end] ?? "");
+      i = end + 1;
+    }
+  }
+  return kept.join("\n");
+}
+
 // src/sent/report.ts
 var MAX_OCCURRENCES = 5;
 function byTime(a, b) {
@@ -11621,8 +11667,8 @@ function fileEvidenceFor(tool) {
   if (SHELL_TOOLS4.has(tool)) return "named";
   return null;
 }
-function credentialFilesIn(input, scope, sessionCwd) {
-  const leaves = collectStrings(input);
+function credentialFilesIn(tool, input, scope, sessionCwd) {
+  const leaves = SHELL_TOOLS4.has(tool) ? collectStrings(input).map(withoutHeredocData) : collectStrings(input);
   return scope.sourcePaths.filter(
     (path) => spellingsOf(path, scope, sessionCwd).some(
       (spelling) => leaves.some((leaf) => mentions(leaf, spelling))
@@ -11692,7 +11738,7 @@ async function scanTranscript(transcript, source, index, scope) {
     }
     const evidence = fileEvidenceFor(event.tool);
     if (evidence !== null) {
-      for (const path of credentialFilesIn(event.input, scope, transcript.cwd)) {
+      for (const path of credentialFilesIn(event.tool, event.input, scope, transcript.cwd)) {
         files.push({ path, tool: event.tool, evidence, call, at: event.at });
       }
     }
@@ -11735,7 +11781,7 @@ function scanAuditLog(allEntries, sessionId, scope) {
   const files = entries.filter((e) => e.phase === "post").flatMap((entry2) => {
     const evidence = fileEvidenceFor(entry2.tool);
     if (evidence === null) return [];
-    return credentialFilesIn({ summary: entry2.summary }, scope, null).map((path) => ({
+    return credentialFilesIn(entry2.tool, { summary: entry2.summary }, scope, null).map((path) => ({
       path,
       tool: entry2.tool,
       evidence,
@@ -11780,10 +11826,12 @@ Flags:
   --fail-on-finding    exit 1 when a credential is found (for a scheduled job)
   -h, --help           show this
 
-Reads Claude Code transcripts and Codex CLI rollouts; --transcript works out
-which from the file itself. It reads this machine's credential files to know what
-to look for, and prints names and sources only, never a value. A finding exits 0
-by default: a session that already happened cannot be un-sent by today's commit.
+Reads sessions recorded by ${readerLabels()}.
+--transcript works out which from the file itself; a Cursor session is
+addressed as <store>#<session>. It reads this machine's credential files to
+know what to look for, and prints names and sources only, never a value. A
+finding exits 0 by default: a session that already happened cannot be
+un-sent by today's commit.
 `;
 async function runSent(args) {
   let parsed;

package/openclaw-plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "stroq",
   "name": "Stroq",
   "description": "Local action firewall for OpenClaw: scans what the agent reads, taints the session, blocks or asks before dangerous tool calls.",
-  "version": "0.15.0",
+  "version": "0.15.2",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/openclaw-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stroq-openclaw-plugin",
-  "version": "0.15.0",
+  "version": "0.15.2",
   "private": true,
   "description": "Stroq's OpenClaw plugin entry: forwards before_tool_call and after_tool_call to the Stroq CLI.",
   "type": "module",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stroq/cli",
-  "version": "0.15.0",
+  "version": "0.15.2",
   "description": "Local action firewall for AI agents: scans what the agent reads, taints the session, blocks dangerous follow-up actions",
   "license": "Apache-2.0",
   "type": "module",