@swestash/agent-lens 0.5.1 → 0.5.3

package/dist/agent-lens.js

@@ -2319,7 +2319,7 @@ function classify(db, dirty) {
 
 // ../ingest/dist/detect.js
 import { createHash } from "crypto";
-var DETECTOR_VERSION = 5;
+var DETECTOR_VERSION = 6;
 function evidence(s, max = 200) {
   const one = s.replace(/\s+/g, " ").trim();
   return one.length > max ? one.slice(0, max - 1) + "\u2026" : one;
@@ -2381,6 +2381,33 @@ function outsideProject(filePath, projectPath, configDirs) {
     return false;
   return filePath !== projectPath && !filePath.startsWith(projectPath.replace(/\/$/, "") + "/");
 }
+var SCOPE_RANK = { unknown: 0, loopback: 1, internal: 2, external: 3 };
+function netTargetScope(rawCommand) {
+  const s = rawCommand.replace(/(?:-H|--header)\s+(['"]).*?\1/gi, " ").replace(/(?:-H|--header)\s+[^\s'"]+/gi, " ");
+  const authorities = [];
+  for (const m of s.matchAll(/\bhttps?:\/\/(\[[0-9a-fA-F:]+\]|[^/\s"'<>|]+)/gi))
+    authorities.push(m[1]);
+  for (const m of s.matchAll(/(?:^|[\s"'=(])(\[[0-9a-fA-F:]+\]|[A-Za-z0-9.-]+):\d{2,5}(?=[/\s"']|$)/g))
+    authorities.push(m[1]);
+  let scope = "unknown";
+  for (let host of authorities) {
+    host = host.replace(/^\[|\]$/g, "").replace(/^[^@/]*@/, "").toLowerCase();
+    if (!host.includes("::"))
+      host = host.replace(/:\d+$/, "");
+    let hs;
+    if (host === "localhost" || /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(host) || host === "0.0.0.0" || host === "::1")
+      hs = "loopback";
+    else if (/^10\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(host) || // RFC1918
+    /^192\.168\.\d{1,3}\.\d{1,3}$/.test(host) || /^172\.(1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}$/.test(host) || /^169\.254\.\d{1,3}\.\d{1,3}$/.test(host) || // link-local
+    host.endsWith(".local") || host.endsWith(".internal") || !host.includes("."))
+      hs = "internal";
+    else
+      hs = "external";
+    if (SCOPE_RANK[hs] > SCOPE_RANK[scope])
+      scope = hs;
+  }
+  return scope;
+}
 var RULES = [
   // --- Destructive / data-loss (OWASP ASI02 Tool Misuse) -------------------
   {
@@ -2407,7 +2434,8 @@ var RULES = [
     framework_ref: "OWASP ASI02",
     title: "Discards local changes (git reset --hard)",
     tools: ["Bash"],
-    baseSeverity: "medium",
+    baseSeverity: "low",
+    // routine dev op — only uncommitted working-tree changes are lost; commits survive in reflog
     test(ctx) {
       const c = ctx.commandBare;
       if (!c || !/\bgit\s+reset\s+--hard\b/i.test(c))
@@ -2421,13 +2449,14 @@ var RULES = [
     framework_ref: "OWASP ASI02",
     title: "Force-push rewrites remote history",
     tools: ["Bash"],
-    baseSeverity: "medium",
+    baseSeverity: "low",
+    // feature-branch force-push is routine; only a protected branch (below) is high
     test(ctx) {
       const c = ctx.commandBare;
       if (!c || !/\bgit\s+push\b[^|;&\n]*(--force\b|--force-with-lease\b|\s-f\b)/i.test(c))
         return null;
       const mainBranch = /\b(main|master|release)\b/.test(c);
-      return { evidence: evidence(ctx.command), severity: mainBranch ? "high" : "medium", mods: { protected_branch: mainBranch } };
+      return { evidence: evidence(ctx.command), severity: mainBranch ? "high" : "low", mods: { protected_branch: mainBranch } };
     }
   },
   {
@@ -2465,14 +2494,16 @@ var RULES = [
     framework_ref: "OWASP ASI02",
     title: "Overwrites a critical project file",
     tools: ["Write", "Edit", "MultiEdit"],
-    baseSeverity: "medium",
+    baseSeverity: "low",
     test(ctx) {
       const f = ctx.filePath;
       if (!f)
         return null;
-      if (!/(^|\/)(package-lock\.json|pnpm-lock\.ya?ml|yarn\.lock|Cargo\.lock|go\.sum|\.github\/workflows\/|\.gitlab-ci\.ya?ml)\b/.test(f))
+      const lock = /(^|\/)(package-lock\.json|pnpm-lock\.ya?ml|yarn\.lock|Cargo\.lock|go\.sum)\b/.test(f);
+      const ci = /(^|\/)(\.github\/workflows\/|\.gitlab-ci\.ya?ml)\b/.test(f);
+      if (!lock && !ci)
         return null;
-      return { evidence: evidence(f) };
+      return { evidence: evidence(f), severity: ci ? "medium" : "low", mods: { kind: ci ? "ci-config" : "lockfile" } };
     }
   },
   // --- Credential & secret access ------------------------------------------
@@ -2540,22 +2571,29 @@ var RULES = [
     id: "exfil.network_upload",
     category: "exfiltration",
     framework_ref: "MITRE ATLAS AML.T0086",
-    title: "Uploads data to an external host",
+    title: "Uploads data to a network host",
     tools: ["Bash"],
     baseSeverity: "high",
     test(ctx) {
       const c = ctx.commandBare;
       if (!c)
         return null;
-      const upload = /\b(curl|wget)\b[^|;&\n]*(-X\s*POST|--data\b|--data-\w+\b|\s-d\b|-T\b|--upload-file\b|-F\b|--form\b)/i.test(c);
+      const upload = /\b(curl|wget)\b[^|;&\n]*(-X\s*POST|--data\b|--data-\w+\b|\s-d\b|-T\b|--upload-file\b|-F\b|--form\b)/.test(c);
       if (!upload)
         return null;
-      const external = /https?:\/\/(?!(localhost|127\.0\.0\.1|0\.0\.0\.0))/i.test(c);
       const withFile = /(@[^\s'"]+|--upload-file|\s-T\b)/.test(c);
+      const scope = netTargetScope(ctx.command);
+      let severity;
+      if (scope === "external")
+        severity = withFile ? "critical" : "high";
+      else if (scope === "unknown")
+        severity = "high";
+      else
+        severity = withFile ? bumpSeverity(scope === "loopback" ? "info" : "low", 1) : scope === "loopback" ? "info" : "low";
       return {
         evidence: evidence(ctx.command),
-        severity: withFile && external ? "critical" : "high",
-        mods: { external, with_file: withFile }
+        severity,
+        mods: { target_scope: scope, with_file: withFile }
       };
     }
   },
@@ -2599,7 +2637,14 @@ var RULES = [
     baseSeverity: "high",
     test(ctx) {
       const c = ctx.commandBare;
-      if (!c || !/\b(curl|wget)\b[^|]*\|\s*(sudo\s+)?(sh|bash|zsh|python\d?|node)\b/i.test(c))
+      if (!c)
+        return null;
+      const m = /\b(?:curl|wget)\b[^|]*\|\s*(?:sudo\s+)?(sh|bash|zsh|python\d?|node)\b([^|;&]*)/i.exec(c);
+      if (!m)
+        return null;
+      const interp = m[1].toLowerCase();
+      const args = m[2] || "";
+      if (/^(?:node|python)/.test(interp) && /(?:^|\s)-(?:e|c|m|p)\b|(?:^|\s)--(?:eval|command|module|print)\b/.test(args))
         return null;
       return { evidence: evidence(ctx.command) };
     }
@@ -2673,13 +2718,14 @@ var RULES = [
     framework_ref: "OWASP LLM06",
     title: "Writes a file outside the working project",
     tools: ["Write", "Edit", "MultiEdit"],
-    baseSeverity: "medium",
+    baseSeverity: "low",
+    // writing to /tmp, scratch dirs, adjacent repos is routine; only a system path (below) is high
     test(ctx) {
       const f = ctx.filePath;
       if (!outsideProject(f, ctx.projectPath, ctx.ownedConfigDirs))
         return null;
       const system = !!f && SYSTEM_PATH.test(f);
-      return { evidence: evidence(f), severity: system ? "high" : "medium", mods: { project: ctx.projectPath, system_path: system } };
+      return { evidence: evidence(f), severity: system ? "high" : "low", mods: { project: ctx.projectPath, system_path: system } };
     }
   }
 ];