@tractorscorch/clank 1.4.0 → 1.4.1

package/CHANGELOG.md

@@ -6,6 +6,22 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ---
 
+## [1.4.1] — 2026-03-23
+
+### Security
+- **Config get redaction** — `config get` action now redacts sensitive keys (apiKey, token, botToken) before returning to LLM context
+- **Config set protection** — config tool now blocks prototype pollution (`__proto__`, `constructor`, `prototype`)
+- **Rate limit streaming path** — `handleInboundMessageStreaming` now enforced (was bypassing rate limiter)
+- **SSRF private IPs** — web_fetch now blocks RFC 1918 ranges (10.x, 192.168.x, 172.16-31.x) and IPv4-mapped IPv6
+- **STT workspace containment** — speech_to_text tool now uses guardPath() to prevent reading files outside workspace
+
+### Audit Result
+- 0 dependency vulnerabilities
+- 14 PASS, 1 WARN (bash blocklist is defense-in-depth), 0 FAIL
+- Grade: A
+
+---
+
 ## [1.4.0] — 2026-03-23
 
 ### Added

package/dist/index.js

@@ -1276,6 +1276,10 @@ var init_registry = __esm({
 });
 
 // src/tools/path-guard.ts
+var path_guard_exports = {};
+__export(path_guard_exports, {
+  guardPath: () => guardPath
+});
 import { resolve, isAbsolute, normalize, relative } from "path";
 function guardPath(inputPath, projectRoot, opts) {
   const resolved = isAbsolute(inputPath) ? normalize(inputPath) : normalize(resolve(projectRoot, inputPath));
@@ -2255,6 +2259,12 @@ var init_web_fetch = __esm({
           if (host === "localhost" || host === "127.0.0.1" || host === "[::1]" || host === "0.0.0.0") {
             return { ok: false, error: "localhost URLs are blocked (SSRF protection)" };
           }
+          if (/^10\./.test(host) || /^192\.168\./.test(host) || /^172\.(1[6-9]|2\d|3[01])\./.test(host)) {
+            return { ok: false, error: "Private network IPs are blocked (SSRF protection)" };
+          }
+          if (host.startsWith("[::ffff:")) {
+            return { ok: false, error: "IPv4-mapped IPv6 addresses are blocked" };
+          }
           if (host === "169.254.169.254" || host === "metadata.google.internal") {
             return { ok: false, error: "Cloud metadata endpoints are blocked" };
           }
@@ -2391,9 +2401,21 @@ var init_config_tool = __esm({
               return `Key not found: ${key}`;
             }
           }
-          return typeof current === "object" ? JSON.stringify(current, null, 2) : String(current);
+          if (typeof current === "object") {
+            return JSON.stringify(redactConfig(current), null, 2);
+          }
+          const SENSITIVE = /* @__PURE__ */ new Set(["apikey", "api_key", "apiKey", "token", "bottoken", "botToken", "secret", "password", "pin"]);
+          const lastKey = keys[keys.length - 1];
+          if (SENSITIVE.has(lastKey) && typeof current === "string") {
+            return "[REDACTED]";
+          }
+          return String(current);
         }
         if (action === "set") {
+          const BLOCKED_KEYS = ["__proto__", "constructor", "prototype"];
+          if (keys.some((k) => BLOCKED_KEYS.includes(k))) {
+            return "Error: blocked \u2014 unsafe key";
+          }
           let parsed = args.value;
           try {
             parsed = JSON.parse(args.value);
@@ -4247,14 +4269,17 @@ var init_voice_tool = __esm({
       },
       safetyLevel: "low",
       readOnly: true,
-      validate(args) {
+      validate(args, ctx) {
         if (!args.file_path || typeof args.file_path !== "string") return { ok: false, error: "file_path is required" };
         return { ok: true };
       },
-      async execute(args) {
+      async execute(args, ctx) {
         const { readFile: readFile13 } = await import("fs/promises");
         const { existsSync: existsSync12 } = await import("fs");
-        const filePath = args.file_path;
+        const { guardPath: guardPath2 } = await Promise.resolve().then(() => (init_path_guard(), path_guard_exports));
+        const guard = guardPath2(args.file_path, ctx.projectRoot, { allowExternal: ctx.allowExternal });
+        if (!guard.ok) return guard.error;
+        const filePath = guard.path;
         if (!existsSync12(filePath)) return `Error: File not found: ${filePath}`;
         const config = await loadConfig();
         const engine = new STTEngine(config);
@@ -5948,6 +5973,13 @@ var init_server = __esm({
        * Used by channel adapters for real-time streaming (e.g., Telegram message editing).
        */
       async handleInboundMessageStreaming(context, text, callbacks) {
+        const rlKey = deriveSessionKey(context);
+        if (this.isRateLimited(rlKey)) {
+          throw new Error("Rate limited \u2014 too many messages. Wait a moment.");
+        }
+        return this._handleInboundMessageStreamingInner(context, text, callbacks);
+      }
+      async _handleInboundMessageStreamingInner(context, text, callbacks) {
         const agentId = resolveRoute(
           context,
           [],
@@ -6021,7 +6053,7 @@ var init_server = __esm({
           res.writeHead(200, { "Content-Type": "application/json" });
           res.end(JSON.stringify({
             status: "ok",
-            version: "1.4.0",
+            version: "1.4.1",
             uptime: process.uptime(),
             clients: this.clients.size,
             agents: this.engines.size
@@ -6129,7 +6161,7 @@ var init_server = __esm({
         const hello = {
           type: "hello",
           protocol: PROTOCOL_VERSION,
-          version: "1.4.0",
+          version: "1.4.1",
           agents: this.config.agents.list.map((a) => ({
             id: a.id,
             name: a.name || a.id,
@@ -7511,7 +7543,7 @@ async function runTui(opts) {
   ws.on("open", () => {
     ws.send(JSON.stringify({
       type: "connect",
-      params: { auth: { token }, mode: "tui", version: "1.4.0" }
+      params: { auth: { token }, mode: "tui", version: "1.4.1" }
     }));
   });
   ws.on("message", (data) => {
@@ -7940,7 +7972,7 @@ import { fileURLToPath as fileURLToPath5 } from "url";
 import { dirname as dirname5, join as join19 } from "path";
 var __filename3 = fileURLToPath5(import.meta.url);
 var __dirname3 = dirname5(__filename3);
-var version = "1.4.0";
+var version = "1.4.1";
 try {
   const pkg = JSON.parse(readFileSync(join19(__dirname3, "..", "package.json"), "utf-8"));
   version = pkg.version;