@tekmidian/pai 0.66.0 → 0.66.2

package/dist/hooks/worker-guard.mjs

@@ -7712,6 +7712,8 @@ function gitSub(args) {
   }
   return null;
 }
+var PATTERN_KILL = /* @__PURE__ */ new Set(["pkill", "killall"]);
+var PATTERN_KILL_REASON = "pattern-based process kill blocked: kill only what you started, by PID (`cmd & echo $! > /tmp/x.pid`, then `kill $(cat /tmp/x.pid)`), never by name or pattern; other workers' command lines contain your spec text";
 function decideSegment(seg, st, ctx) {
   const words = stripPrefix(seg.words);
   const [cmd, ...args] = words;
@@ -7726,6 +7728,9 @@ function decideSegment(seg, st, ctx) {
     return decideCommand(args[1], { ...ctx, cwd: st.cwd });
   }
   const pos = args.filter((a) => !isFlag(a));
+  if (PATTERN_KILL.has(cmd) || cmd === "xargs" && args.includes("kill") || cmd === "kill" && /pgrep|pidof/.test(args.join(" "))) {
+    return deny(PATTERN_KILL_REASON);
+  }
   if (cmd === "cd") {
     const p = pos[0] ? abs(pos[0], st.cwd, ctx.home) : null;
     if (!p) return ALLOW;