@stroq/cli 0.15.1 → 0.15.2

package/dist/index.js

@@ -11561,6 +11561,45 @@ async function newestTranscript(cwd) {
 // src/sent/scan.ts
 import { isAbsolute as isAbsolute3, relative as relative3, resolve as resolve9 } from "path";
 
+// src/sent/heredoc.ts
+var HEREDOC = /(?<!<)<<(-?)\s*(['"]?)([A-Za-z_][\w.-]*)\2/g;
+var EXECUTES_STDIN = /^(?:sudo\s+)?(?:(?:\S*\/)?env\s+(?:\S+=\S*\s+)*)?(?:\S*\/)?(?:sh|bash|zsh|dash|ksh|fish|python\d*(?:\.\d+)?|node|deno|bun|tsx|ruby|perl|php|osascript|ssh|eval|source|\.|xargs|npx|pnpm|uv)(?:\s|$)/;
+function bodyIsExecuted(line3, operatorStart, operatorEnd) {
+  const before = line3.slice(0, operatorStart).split(/&&|\|\||;|\$\(|\|/);
+  const stages = [before[before.length - 1] ?? "", ...line3.slice(operatorEnd).split("|").slice(1)];
+  return stages.some((stage) => EXECUTES_STDIN.test(stage.trim()));
+}
+function withoutHeredocData(command) {
+  if (!command.includes("<<")) return command;
+  const lines = command.split("\n");
+  const kept = [];
+  let i = 0;
+  while (i < lines.length) {
+    const line3 = lines[i] ?? "";
+    kept.push(line3);
+    const operators = [...line3.matchAll(HEREDOC)];
+    i += 1;
+    if (operators.length === 0) continue;
+    for (const op of operators) {
+      const dash = op[1] === "-";
+      const delimiter3 = op[3] ?? "";
+      let end = i;
+      while (end < lines.length) {
+        const candidate = lines[end] ?? "";
+        if ((dash ? candidate.replace(/^\t+/, "") : candidate) === delimiter3) break;
+        end += 1;
+      }
+      if (end >= lines.length) return command;
+      const start = op.index;
+      const executed = bodyIsExecuted(line3, start, start + op[0].length);
+      if (executed) kept.push(...lines.slice(i, end));
+      kept.push(lines[end] ?? "");
+      i = end + 1;
+    }
+  }
+  return kept.join("\n");
+}
+
 // src/sent/report.ts
 var MAX_OCCURRENCES = 5;
 function byTime(a, b) {
@@ -11628,8 +11667,8 @@ function fileEvidenceFor(tool) {
   if (SHELL_TOOLS4.has(tool)) return "named";
   return null;
 }
-function credentialFilesIn(input, scope, sessionCwd) {
-  const leaves = collectStrings(input);
+function credentialFilesIn(tool, input, scope, sessionCwd) {
+  const leaves = SHELL_TOOLS4.has(tool) ? collectStrings(input).map(withoutHeredocData) : collectStrings(input);
   return scope.sourcePaths.filter(
     (path) => spellingsOf(path, scope, sessionCwd).some(
       (spelling) => leaves.some((leaf) => mentions(leaf, spelling))
@@ -11699,7 +11738,7 @@ async function scanTranscript(transcript, source, index, scope) {
     }
     const evidence = fileEvidenceFor(event.tool);
     if (evidence !== null) {
-      for (const path of credentialFilesIn(event.input, scope, transcript.cwd)) {
+      for (const path of credentialFilesIn(event.tool, event.input, scope, transcript.cwd)) {
         files.push({ path, tool: event.tool, evidence, call, at: event.at });
       }
     }
@@ -11742,7 +11781,7 @@ function scanAuditLog(allEntries, sessionId, scope) {
   const files = entries.filter((e) => e.phase === "post").flatMap((entry2) => {
     const evidence = fileEvidenceFor(entry2.tool);
     if (evidence === null) return [];
-    return credentialFilesIn({ summary: entry2.summary }, scope, null).map((path) => ({
+    return credentialFilesIn(entry2.tool, { summary: entry2.summary }, scope, null).map((path) => ({
       path,
       tool: entry2.tool,
       evidence,

package/openclaw-plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "stroq",
   "name": "Stroq",
   "description": "Local action firewall for OpenClaw: scans what the agent reads, taints the session, blocks or asks before dangerous tool calls.",
-  "version": "0.15.1",
+  "version": "0.15.2",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/openclaw-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stroq-openclaw-plugin",
-  "version": "0.15.1",
+  "version": "0.15.2",
   "private": true,
   "description": "Stroq's OpenClaw plugin entry: forwards before_tool_call and after_tool_call to the Stroq CLI.",
   "type": "module",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stroq/cli",
-  "version": "0.15.1",
+  "version": "0.15.2",
   "description": "Local action firewall for AI agents: scans what the agent reads, taints the session, blocks dangerous follow-up actions",
   "license": "Apache-2.0",
   "type": "module",