@vincemakes/kiso-tools-node 0.40.6 → 0.40.7

package/dist/corpus.d.ts

@@ -34,6 +34,10 @@ import { type Ignore } from "ignore";
 /** The walk stops here. `search_text` has always used 8; the glob inherits
  *  it so a pattern cannot reach deeper than a search can. */
 export declare const CORPUS_MAX_DEPTH = 8;
+/** RO-F4: the credential files named by their DIRECTORY as well — a path
+ *  (absolute or root-relative), folded to lower case as a case-insensitive
+ *  disk would. The read-only shell rule asks this same question. */
+export declare function isCredentialPath(path: string): boolean;
 export declare function isCredentialName(name: string): boolean;
 export interface CorpusOptions {
     workspaceRoot: string;

package/dist/corpus.js

@@ -53,11 +53,18 @@ export const CORPUS_MAX_DEPTH = 8;
  *    id_ecdsa,          are different names and stay searchable, which is
  *    id_ed25519         correct: a public key is public.
  *    *.pem              the same, by extension
+ *    `.npmrc`, `.pypirc`, `.git-credentials`, `.htpasswd` — RO-F4, the
+ *                       owner's 0.40.7 ruling. `.npmrc` was OUT here ("tokens
+ *                       in it are normally `${VAR}` placeholders") while the
+ *                       read-only shell rule (0.40.0, B4) already called it a
+ *                       credential: two lists that disagreed, so a search
+ *                       exposed what `cat` asked about. One set now, used by
+ *                       both; a literal `_authToken=` is common enough.
+ *    and, by PATH (a name alone would be too broad — `config`,
+ *    `credentials`): `.aws/credentials`, `.config/gh/hosts.yml`,
+ *    `.docker/config.json`, `.kube/config` (isCredentialPath)
  *
  *  OUT, deliberately, so the omissions are decisions and not oversights:
- *    `.npmrc`   a config file by convention; tokens in it are normally
- *               `${VAR}` placeholders, so excluding it would cost more
- *               than it protects
  *    `*.key`    too many non-secret uses to be a credential by name
  *
  *  An explicit `read_file` of ANY of these is unchanged. Reading on
@@ -65,7 +72,15 @@ export const CORPUS_MAX_DEPTH = 8;
  *  from a search for "KEY" is exposure without intent, and only the
  *  second is what this prevents. */
 const ENV_TEMPLATES = new Set([".env.example", ".env.sample", ".env.template"]);
-const CREDENTIAL_NAMES = new Set([".envrc", ".netrc", "id_rsa", "id_dsa", "id_ecdsa", "id_ed25519"]);
+const CREDENTIAL_NAMES = new Set([".envrc", ".netrc", "id_rsa", "id_dsa", "id_ecdsa", "id_ed25519", ".npmrc", ".pypirc", ".git-credentials", ".htpasswd"]);
+const CREDENTIAL_PATHS = ["/.aws/credentials", "/.config/gh/hosts.yml", "/.docker/config.json", "/.kube/config"];
+/** RO-F4: the credential files named by their DIRECTORY as well — a path
+ *  (absolute or root-relative), folded to lower case as a case-insensitive
+ *  disk would. The read-only shell rule asks this same question. */
+export function isCredentialPath(path) {
+    const folded = `/${path.split(sep).join("/")}`.toLowerCase();
+    return CREDENTIAL_PATHS.some((s) => folded.endsWith(s));
+}
 export function isCredentialName(name) {
     if (ENV_TEMPLATES.has(name))
         return false;
@@ -105,7 +120,7 @@ export function ignoredBy(layers, full, isDir) {
 export function corpusSkips(declared, layers, full, name, isDir) {
     if (name === "node_modules" || name === ".git")
         return true;
-    if (isCredentialName(name))
+    if (isCredentialName(name) || isCredentialPath(full))
         return true;
     if (!declared)
         return name.startsWith(".");

package/dist/index.d.ts

@@ -187,7 +187,7 @@ export { PROTECTED_REFUSAL, diskPath, isProtectedPath, protectedIdentity, protec
 /** The search corpus's credential rule, by name — exported so the CLI's
  *  read-only shell allow holds a shell read to the same definition rather
  *  than a copy of it. */
-export { isCredentialName } from "./corpus.js";
+export { isCredentialName, isCredentialPath } from "./corpus.js";
 export declare function shellTool(opts: WorkspaceToolsOptions): Tool<{
     command: string;
     timeoutMs?: number;

package/dist/index.js

@@ -1204,7 +1204,7 @@ export { PROTECTED_REFUSAL, diskPath, isProtectedPath, protectedIdentity, protec
 /** The search corpus's credential rule, by name — exported so the CLI's
  *  read-only shell allow holds a shell read to the same definition rather
  *  than a copy of it. */
-export { isCredentialName } from "./corpus.js";
+export { isCredentialName, isCredentialPath } from "./corpus.js";
 export function shellTool(opts) {
     return defineTool({
         name: "shell",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vincemakes/kiso-tools-node",
-	"version": "0.40.6",
+	"version": "0.40.7",
 	"description": "kiso coding tools for Node hosts \u2014 read file, list directory, search text, write/edit file, shell command.",
 	"type": "module",
 	"license": "MIT",
@@ -25,7 +25,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@vincemakes/kiso-core": "0.40.6",
+		"@vincemakes/kiso-core": "0.40.7",
 		"ignore": "^7.0.9"
 	},
 	"devDependencies": {