@vybestack/llxprt-code-core 0.1.13 → 0.1.14-nightly.250729.2076f7c6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (218) hide show
  1. package/README.md +24 -0
  2. package/dist/src/code_assist/codeAssist.d.ts +2 -1
  3. package/dist/src/code_assist/codeAssist.js +4 -3
  4. package/dist/src/code_assist/codeAssist.js.map +1 -1
  5. package/dist/src/code_assist/oauth2.js +9 -2
  6. package/dist/src/code_assist/oauth2.js.map +1 -1
  7. package/dist/src/code_assist/oauth2.test.js +94 -2
  8. package/dist/src/code_assist/oauth2.test.js.map +1 -1
  9. package/dist/src/code_assist/server.d.ts +5 -6
  10. package/dist/src/code_assist/server.js +7 -70
  11. package/dist/src/code_assist/server.js.map +1 -1
  12. package/dist/src/code_assist/setup.d.ts +6 -1
  13. package/dist/src/code_assist/setup.js +4 -1
  14. package/dist/src/code_assist/setup.js.map +1 -1
  15. package/dist/src/code_assist/setup.test.js +4 -1
  16. package/dist/src/code_assist/setup.test.js.map +1 -1
  17. package/dist/src/code_assist/types.d.ts +2 -2
  18. package/dist/src/config/config.d.ts +25 -3
  19. package/dist/src/config/config.js +47 -10
  20. package/dist/src/config/config.js.map +1 -1
  21. package/dist/src/config/config.test.js +1 -26
  22. package/dist/src/config/config.test.js.map +1 -1
  23. package/dist/src/config/flashFallback.test.js +1 -1
  24. package/dist/src/config/flashFallback.test.js.map +1 -1
  25. package/dist/src/core/client.d.ts +6 -2
  26. package/dist/src/core/client.js +41 -18
  27. package/dist/src/core/client.js.map +1 -1
  28. package/dist/src/core/client.test.js +78 -24
  29. package/dist/src/core/client.test.js.map +1 -1
  30. package/dist/src/core/contentGenerator.d.ts +1 -1
  31. package/dist/src/core/contentGenerator.js +1 -1
  32. package/dist/src/core/contentGenerator.js.map +1 -1
  33. package/dist/src/core/coreToolScheduler.js +14 -1
  34. package/dist/src/core/coreToolScheduler.js.map +1 -1
  35. package/dist/src/core/coreToolScheduler.test.js +80 -0
  36. package/dist/src/core/coreToolScheduler.test.js.map +1 -1
  37. package/dist/src/core/geminiChat.d.ts +4 -3
  38. package/dist/src/core/geminiChat.js +8 -11
  39. package/dist/src/core/geminiChat.js.map +1 -1
  40. package/dist/src/core/geminiRequest.js +2 -37
  41. package/dist/src/core/geminiRequest.js.map +1 -1
  42. package/dist/src/core/logger.js +6 -0
  43. package/dist/src/core/logger.js.map +1 -1
  44. package/dist/src/core/nonInteractiveToolExecutor.test.js +5 -5
  45. package/dist/src/core/prompts.js +42 -18
  46. package/dist/src/core/prompts.js.map +1 -1
  47. package/dist/src/core/prompts.test.js +121 -4
  48. package/dist/src/core/prompts.test.js.map +1 -1
  49. package/dist/src/core/turn.d.ts +7 -2
  50. package/dist/src/core/turn.js +9 -0
  51. package/dist/src/core/turn.js.map +1 -1
  52. package/dist/src/core/turn.test.js +129 -0
  53. package/dist/src/core/turn.test.js.map +1 -1
  54. package/dist/src/ide/ide-client.d.ts +28 -0
  55. package/dist/src/ide/ide-client.js +79 -0
  56. package/dist/src/ide/ide-client.js.map +1 -0
  57. package/dist/src/ide/ideContext.d.ts +174 -0
  58. package/dist/src/{services → ide}/ideContext.js +28 -25
  59. package/dist/src/ide/ideContext.js.map +1 -0
  60. package/dist/src/{services → ide}/ideContext.test.js +39 -39
  61. package/dist/src/ide/ideContext.test.js.map +1 -0
  62. package/dist/src/index.d.ts +3 -1
  63. package/dist/src/index.js +4 -1
  64. package/dist/src/index.js.map +1 -1
  65. package/dist/src/mcp/google-auth-provider.d.ts +23 -0
  66. package/dist/src/mcp/google-auth-provider.js +63 -0
  67. package/dist/src/mcp/google-auth-provider.js.map +1 -0
  68. package/dist/src/mcp/google-auth-provider.test.js +54 -0
  69. package/dist/src/mcp/google-auth-provider.test.js.map +1 -0
  70. package/dist/src/providers/anthropic/AnthropicProvider.js.map +1 -1
  71. package/dist/src/providers/gemini/GeminiProvider.d.ts +2 -0
  72. package/dist/src/providers/gemini/GeminiProvider.integration.test.js +36 -0
  73. package/dist/src/providers/gemini/GeminiProvider.integration.test.js.map +1 -1
  74. package/dist/src/providers/gemini/GeminiProvider.js +57 -10
  75. package/dist/src/providers/gemini/GeminiProvider.js.map +1 -1
  76. package/dist/src/providers/openai/OpenAIProvider.js +10 -7
  77. package/dist/src/providers/openai/OpenAIProvider.js.map +1 -1
  78. package/dist/src/services/fileDiscoveryService.d.ts +4 -4
  79. package/dist/src/services/fileDiscoveryService.js +8 -8
  80. package/dist/src/services/gitService.js +1 -1
  81. package/dist/src/services/gitService.js.map +1 -1
  82. package/dist/src/services/gitService.test.js +1 -1
  83. package/dist/src/services/gitService.test.js.map +1 -1
  84. package/dist/src/services/loopDetectionService.d.ts +48 -5
  85. package/dist/src/services/loopDetectionService.js +127 -41
  86. package/dist/src/services/loopDetectionService.js.map +1 -1
  87. package/dist/src/services/loopDetectionService.test.js +50 -123
  88. package/dist/src/services/loopDetectionService.test.js.map +1 -1
  89. package/dist/src/telemetry/clearcut-logger/clearcut-logger.d.ts +2 -1
  90. package/dist/src/telemetry/clearcut-logger/clearcut-logger.js +17 -2
  91. package/dist/src/telemetry/clearcut-logger/clearcut-logger.js.map +1 -1
  92. package/dist/src/telemetry/constants.d.ts +16 -15
  93. package/dist/src/telemetry/constants.js +16 -15
  94. package/dist/src/telemetry/constants.js.map +1 -1
  95. package/dist/src/telemetry/file-exporters.d.ts +28 -0
  96. package/dist/src/telemetry/file-exporters.js +62 -0
  97. package/dist/src/telemetry/file-exporters.js.map +1 -0
  98. package/dist/src/telemetry/loggers.d.ts +2 -1
  99. package/dist/src/telemetry/loggers.js +18 -3
  100. package/dist/src/telemetry/loggers.js.map +1 -1
  101. package/dist/src/telemetry/sdk.js +22 -7
  102. package/dist/src/telemetry/sdk.js.map +1 -1
  103. package/dist/src/telemetry/types.d.ts +9 -2
  104. package/dist/src/telemetry/types.js +13 -1
  105. package/dist/src/telemetry/types.js.map +1 -1
  106. package/dist/src/tools/ToolFormatter.js +19 -1
  107. package/dist/src/tools/ToolFormatter.js.map +1 -1
  108. package/dist/src/tools/edit.js +10 -4
  109. package/dist/src/tools/edit.js.map +1 -1
  110. package/dist/src/tools/edit.test.js +12 -0
  111. package/dist/src/tools/edit.test.js.map +1 -1
  112. package/dist/src/tools/grep.test.js +1 -1
  113. package/dist/src/tools/grep.test.js.map +1 -1
  114. package/dist/src/tools/ls.d.ts +5 -2
  115. package/dist/src/tools/ls.js +39 -10
  116. package/dist/src/tools/ls.js.map +1 -1
  117. package/dist/src/tools/mcp-client.d.ts +5 -1
  118. package/dist/src/tools/mcp-client.js +416 -29
  119. package/dist/src/tools/mcp-client.js.map +1 -1
  120. package/dist/src/tools/mcp-client.test.js +46 -6
  121. package/dist/src/tools/mcp-client.test.js.map +1 -1
  122. package/dist/src/tools/mcp-tool.js +1 -1
  123. package/dist/src/tools/mcp-tool.js.map +1 -1
  124. package/dist/src/tools/mcp-tool.test.js +34 -0
  125. package/dist/src/tools/mcp-tool.test.js.map +1 -1
  126. package/dist/src/tools/read-file.js +1 -1
  127. package/dist/src/tools/read-file.test.js +98 -69
  128. package/dist/src/tools/read-file.test.js.map +1 -1
  129. package/dist/src/tools/read-many-files.d.ts +5 -2
  130. package/dist/src/tools/read-many-files.js +61 -16
  131. package/dist/src/tools/read-many-files.js.map +1 -1
  132. package/dist/src/tools/read-many-files.test.js +5 -2
  133. package/dist/src/tools/read-many-files.test.js.map +1 -1
  134. package/dist/src/tools/shell.d.ts +15 -26
  135. package/dist/src/tools/shell.js +137 -358
  136. package/dist/src/tools/shell.js.map +1 -1
  137. package/dist/src/tools/shell.test.js +73 -318
  138. package/dist/src/tools/shell.test.js.map +1 -1
  139. package/dist/src/tools/tool-registry.d.ts +13 -1
  140. package/dist/src/tools/tool-registry.js +45 -1
  141. package/dist/src/tools/tool-registry.js.map +1 -1
  142. package/dist/src/tools/tool-registry.test.js +3 -3
  143. package/dist/src/tools/tool-registry.test.js.map +1 -1
  144. package/dist/src/utils/bfsFileSearch.d.ts +2 -0
  145. package/dist/src/utils/bfsFileSearch.js +4 -1
  146. package/dist/src/utils/bfsFileSearch.js.map +1 -1
  147. package/dist/src/utils/bfsFileSearch.test.js +108 -105
  148. package/dist/src/utils/bfsFileSearch.test.js.map +1 -1
  149. package/dist/src/utils/editCorrector.js +4 -4
  150. package/dist/src/utils/editCorrector.js.map +1 -1
  151. package/dist/src/utils/editCorrector.test.js +1 -1
  152. package/dist/src/utils/editor.js +16 -10
  153. package/dist/src/utils/editor.js.map +1 -1
  154. package/dist/src/utils/editor.test.js +128 -28
  155. package/dist/src/utils/editor.test.js.map +1 -1
  156. package/dist/src/utils/errorReporting.d.ts +1 -1
  157. package/dist/src/utils/errorReporting.js +2 -2
  158. package/dist/src/utils/errorReporting.js.map +1 -1
  159. package/dist/src/utils/errorReporting.test.js +44 -38
  160. package/dist/src/utils/errorReporting.test.js.map +1 -1
  161. package/dist/src/utils/fileUtils.d.ts +4 -4
  162. package/dist/src/utils/fileUtils.js +31 -15
  163. package/dist/src/utils/fileUtils.js.map +1 -1
  164. package/dist/src/utils/fileUtils.test.js +37 -37
  165. package/dist/src/utils/fileUtils.test.js.map +1 -1
  166. package/dist/src/utils/getFolderStructure.d.ts +3 -2
  167. package/dist/src/utils/getFolderStructure.js +27 -28
  168. package/dist/src/utils/getFolderStructure.js.map +1 -1
  169. package/dist/src/utils/getFolderStructure.test.js +169 -185
  170. package/dist/src/utils/getFolderStructure.test.js.map +1 -1
  171. package/dist/src/utils/gitIgnoreParser.js +4 -7
  172. package/dist/src/utils/gitIgnoreParser.js.map +1 -1
  173. package/dist/src/utils/gitIgnoreParser.test.js +71 -62
  174. package/dist/src/utils/gitIgnoreParser.test.js.map +1 -1
  175. package/dist/src/utils/memoryDiscovery.d.ts +2 -1
  176. package/dist/src/utils/memoryDiscovery.js +11 -5
  177. package/dist/src/utils/memoryDiscovery.js.map +1 -1
  178. package/dist/src/utils/memoryDiscovery.test.js +160 -371
  179. package/dist/src/utils/memoryDiscovery.test.js.map +1 -1
  180. package/dist/src/utils/partUtils.d.ts +14 -0
  181. package/dist/src/utils/partUtils.js +65 -0
  182. package/dist/src/utils/partUtils.js.map +1 -0
  183. package/dist/src/utils/partUtils.test.d.ts +6 -0
  184. package/dist/src/utils/partUtils.test.js +130 -0
  185. package/dist/src/utils/partUtils.test.js.map +1 -0
  186. package/dist/src/utils/paths.d.ts +11 -0
  187. package/dist/src/utils/paths.js +17 -1
  188. package/dist/src/utils/paths.js.map +1 -1
  189. package/dist/src/utils/quotaErrorDetection.js.map +1 -1
  190. package/dist/src/utils/retry.js +1 -1
  191. package/dist/src/utils/retry.js.map +1 -1
  192. package/dist/src/utils/schemaValidator.js +5 -2
  193. package/dist/src/utils/schemaValidator.js.map +1 -1
  194. package/dist/src/utils/shell-utils.d.ts +44 -0
  195. package/dist/src/utils/shell-utils.js +243 -0
  196. package/dist/src/utils/shell-utils.js.map +1 -0
  197. package/dist/src/utils/shell-utils.test.d.ts +6 -0
  198. package/dist/src/utils/shell-utils.test.js +450 -0
  199. package/dist/src/utils/shell-utils.test.js.map +1 -0
  200. package/dist/src/utils/summarizer.js +1 -30
  201. package/dist/src/utils/summarizer.js.map +1 -1
  202. package/dist/src/utils/systemEncoding.d.ts +40 -0
  203. package/dist/src/utils/systemEncoding.js +149 -0
  204. package/dist/src/utils/systemEncoding.js.map +1 -0
  205. package/dist/src/utils/systemEncoding.test.d.ts +6 -0
  206. package/dist/src/utils/systemEncoding.test.js +368 -0
  207. package/dist/src/utils/systemEncoding.test.js.map +1 -0
  208. package/dist/src/utils/user_account.test.js +1 -1
  209. package/dist/src/utils/user_account.test.js.map +1 -1
  210. package/dist/tsconfig.tsbuildinfo +1 -1
  211. package/package.json +4 -1
  212. package/dist/src/core/geminiRequest.test.js +0 -72
  213. package/dist/src/core/geminiRequest.test.js.map +0 -1
  214. package/dist/src/services/ideContext.d.ts +0 -126
  215. package/dist/src/services/ideContext.js.map +0 -1
  216. package/dist/src/services/ideContext.test.js.map +0 -1
  217. /package/dist/src/{services → ide}/ideContext.test.d.ts +0 -0
  218. /package/dist/src/{core/geminiRequest.test.d.ts → mcp/google-auth-provider.test.d.ts} +0 -0
@@ -0,0 +1,243 @@
1
+ /**
2
+ * @license
3
+ * Copyright 2025 Google LLC
4
+ * SPDX-License-Identifier: Apache-2.0
5
+ */
6
+ /**
7
+ * Splits a shell command into a list of individual commands, respecting quotes.
8
+ * This is used to separate chained commands (e.g., using &&, ||, ;).
9
+ * @param command The shell command string to parse
10
+ * @returns An array of individual command strings
11
+ */
12
+ export function splitCommands(command) {
13
+ const commands = [];
14
+ let currentCommand = '';
15
+ let inSingleQuotes = false;
16
+ let inDoubleQuotes = false;
17
+ let i = 0;
18
+ while (i < command.length) {
19
+ const char = command[i];
20
+ const nextChar = command[i + 1];
21
+ if (char === '\\' && i < command.length - 1) {
22
+ currentCommand += char + command[i + 1];
23
+ i += 2;
24
+ continue;
25
+ }
26
+ if (char === "'" && !inDoubleQuotes) {
27
+ inSingleQuotes = !inSingleQuotes;
28
+ }
29
+ else if (char === '"' && !inSingleQuotes) {
30
+ inDoubleQuotes = !inDoubleQuotes;
31
+ }
32
+ if (!inSingleQuotes && !inDoubleQuotes) {
33
+ if ((char === '&' && nextChar === '&') ||
34
+ (char === '|' && nextChar === '|')) {
35
+ commands.push(currentCommand.trim());
36
+ currentCommand = '';
37
+ i++; // Skip the next character
38
+ }
39
+ else if (char === ';' || char === '&' || char === '|') {
40
+ commands.push(currentCommand.trim());
41
+ currentCommand = '';
42
+ }
43
+ else {
44
+ currentCommand += char;
45
+ }
46
+ }
47
+ else {
48
+ currentCommand += char;
49
+ }
50
+ i++;
51
+ }
52
+ if (currentCommand.trim()) {
53
+ commands.push(currentCommand.trim());
54
+ }
55
+ return commands.filter(Boolean); // Filter out any empty strings
56
+ }
57
+ /**
58
+ * Extracts the root command from a given shell command string.
59
+ * This is used to identify the base command for permission checks.
60
+ * @param command The shell command string to parse
61
+ * @returns The root command name, or undefined if it cannot be determined
62
+ * @example getCommandRoot("ls -la /tmp") returns "ls"
63
+ * @example getCommandRoot("git status && npm test") returns "git"
64
+ */
65
+ export function getCommandRoot(command) {
66
+ const trimmedCommand = command.trim();
67
+ if (!trimmedCommand) {
68
+ return undefined;
69
+ }
70
+ // This regex is designed to find the first "word" of a command,
71
+ // while respecting quotes. It looks for a sequence of non-whitespace
72
+ // characters that are not inside quotes.
73
+ const match = trimmedCommand.match(/^"([^"]+)"|^'([^']+)'|^(\S+)/);
74
+ if (match) {
75
+ // The first element in the match array is the full match.
76
+ // The subsequent elements are the capture groups.
77
+ // We prefer a captured group because it will be unquoted.
78
+ const commandRoot = match[1] || match[2] || match[3];
79
+ if (commandRoot) {
80
+ // If the command is a path, return the last component.
81
+ return commandRoot.split(/[\\/]/).pop();
82
+ }
83
+ }
84
+ return undefined;
85
+ }
86
+ export function getCommandRoots(command) {
87
+ if (!command) {
88
+ return [];
89
+ }
90
+ return splitCommands(command)
91
+ .map((c) => getCommandRoot(c))
92
+ .filter((c) => !!c);
93
+ }
94
+ export function stripShellWrapper(command) {
95
+ const pattern = /^\s*(?:sh|bash|zsh|cmd.exe)\s+(?:\/c|-c)\s+/;
96
+ const match = command.match(pattern);
97
+ if (match) {
98
+ let newCommand = command.substring(match[0].length).trim();
99
+ if ((newCommand.startsWith('"') && newCommand.endsWith('"')) ||
100
+ (newCommand.startsWith("'") && newCommand.endsWith("'"))) {
101
+ newCommand = newCommand.substring(1, newCommand.length - 1);
102
+ }
103
+ return newCommand;
104
+ }
105
+ return command.trim();
106
+ }
107
+ /**
108
+ * Detects command substitution patterns in a shell command, following bash quoting rules:
109
+ * - Single quotes ('): Everything literal, no substitution possible
110
+ * - Double quotes ("): Command substitution with $() and backticks unless escaped with \
111
+ * - No quotes: Command substitution with $(), <(), and backticks
112
+ * @param command The shell command string to check
113
+ * @returns true if command substitution would be executed by bash
114
+ */
115
+ export function detectCommandSubstitution(command) {
116
+ let inSingleQuotes = false;
117
+ let inDoubleQuotes = false;
118
+ let inBackticks = false;
119
+ let i = 0;
120
+ while (i < command.length) {
121
+ const char = command[i];
122
+ const nextChar = command[i + 1];
123
+ // Handle escaping - only works outside single quotes
124
+ if (char === '\\' && !inSingleQuotes) {
125
+ i += 2; // Skip the escaped character
126
+ continue;
127
+ }
128
+ // Handle quote state changes
129
+ if (char === "'" && !inDoubleQuotes && !inBackticks) {
130
+ inSingleQuotes = !inSingleQuotes;
131
+ }
132
+ else if (char === '"' && !inSingleQuotes && !inBackticks) {
133
+ inDoubleQuotes = !inDoubleQuotes;
134
+ }
135
+ else if (char === '`' && !inSingleQuotes) {
136
+ // Backticks work outside single quotes (including in double quotes)
137
+ inBackticks = !inBackticks;
138
+ }
139
+ // Check for command substitution patterns that would be executed
140
+ if (!inSingleQuotes) {
141
+ // $(...) command substitution - works in double quotes and unquoted
142
+ if (char === '$' && nextChar === '(') {
143
+ return true;
144
+ }
145
+ // <(...) process substitution - works unquoted only (not in double quotes)
146
+ if (char === '<' && nextChar === '(' && !inDoubleQuotes && !inBackticks) {
147
+ return true;
148
+ }
149
+ // Backtick command substitution - check for opening backtick
150
+ // (We track the state above, so this catches the start of backtick substitution)
151
+ if (char === '`' && !inBackticks) {
152
+ return true;
153
+ }
154
+ }
155
+ i++;
156
+ }
157
+ return false;
158
+ }
159
+ /**
160
+ * Determines whether a given shell command is allowed to execute based on
161
+ * the tool's configuration including allowlists and blocklists.
162
+ * @param command The shell command string to validate
163
+ * @param config The application configuration
164
+ * @returns An object with 'allowed' boolean and optional 'reason' string if not allowed
165
+ */
166
+ export function isCommandAllowed(command, config) {
167
+ // 0. Disallow command substitution
168
+ // Parse the command to check for unquoted/unescaped command substitution
169
+ const hasCommandSubstitution = detectCommandSubstitution(command);
170
+ if (hasCommandSubstitution) {
171
+ return {
172
+ allowed: false,
173
+ reason: 'Command substitution using $(), <(), or >() is not allowed for security reasons',
174
+ };
175
+ }
176
+ const SHELL_TOOL_NAMES = ['run_shell_command', 'ShellTool'];
177
+ const normalize = (cmd) => cmd.trim().replace(/\s+/g, ' ');
178
+ /**
179
+ * Checks if a command string starts with a given prefix, ensuring it's a
180
+ * whole word match (i.e., followed by a space or it's an exact match).
181
+ * e.g., `isPrefixedBy('npm install', 'npm')` -> true
182
+ * e.g., `isPrefixedBy('npm', 'npm')` -> true
183
+ * e.g., `isPrefixedBy('npminstall', 'npm')` -> false
184
+ */
185
+ const isPrefixedBy = (cmd, prefix) => {
186
+ if (!cmd.startsWith(prefix)) {
187
+ return false;
188
+ }
189
+ return cmd.length === prefix.length || cmd[prefix.length] === ' ';
190
+ };
191
+ /**
192
+ * Extracts and normalizes shell commands from a list of tool strings.
193
+ * e.g., 'ShellTool("ls -l")' becomes 'ls -l'
194
+ */
195
+ const extractCommands = (tools) => tools.flatMap((tool) => {
196
+ for (const toolName of SHELL_TOOL_NAMES) {
197
+ if (tool.startsWith(`${toolName}(`) && tool.endsWith(')')) {
198
+ return [normalize(tool.slice(toolName.length + 1, -1))];
199
+ }
200
+ }
201
+ return [];
202
+ });
203
+ const coreTools = config.getCoreTools() || [];
204
+ const excludeTools = config.getExcludeTools() || [];
205
+ // 1. Check if the shell tool is globally disabled.
206
+ if (SHELL_TOOL_NAMES.some((name) => excludeTools.includes(name))) {
207
+ return {
208
+ allowed: false,
209
+ reason: 'Shell tool is globally disabled in configuration',
210
+ };
211
+ }
212
+ const blockedCommands = new Set(extractCommands(excludeTools));
213
+ const allowedCommands = new Set(extractCommands(coreTools));
214
+ const hasSpecificAllowedCommands = allowedCommands.size > 0;
215
+ const isWildcardAllowed = SHELL_TOOL_NAMES.some((name) => coreTools.includes(name));
216
+ const commandsToValidate = splitCommands(command).map(normalize);
217
+ const blockedCommandsArr = [...blockedCommands];
218
+ for (const cmd of commandsToValidate) {
219
+ // 2. Check if the command is on the blocklist.
220
+ const isBlocked = blockedCommandsArr.some((blocked) => isPrefixedBy(cmd, blocked));
221
+ if (isBlocked) {
222
+ return {
223
+ allowed: false,
224
+ reason: `Command '${cmd}' is blocked by configuration`,
225
+ };
226
+ }
227
+ // 3. If in strict allow-list mode, check if the command is permitted.
228
+ const isStrictAllowlist = hasSpecificAllowedCommands && !isWildcardAllowed;
229
+ const allowedCommandsArr = [...allowedCommands];
230
+ if (isStrictAllowlist) {
231
+ const isAllowed = allowedCommandsArr.some((allowed) => isPrefixedBy(cmd, allowed));
232
+ if (!isAllowed) {
233
+ return {
234
+ allowed: false,
235
+ reason: `Command '${cmd}' is not in the allowed commands list`,
236
+ };
237
+ }
238
+ }
239
+ }
240
+ // 4. If all checks pass, the command is allowed.
241
+ return { allowed: true };
242
+ }
243
+ //# sourceMappingURL=shell-utils.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"shell-utils.js","sourceRoot":"","sources":["../../../src/utils/shell-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEhC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,cAAc,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YACpC,cAAc,GAAG,CAAC,cAAc,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,cAAc,GAAG,CAAC,cAAc,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,EAAE,CAAC;YACvC,IACE,CAAC,IAAI,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,CAAC;gBAClC,CAAC,IAAI,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,CAAC,EAClC,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrC,cAAc,GAAG,EAAE,CAAC;gBACpB,CAAC,EAAE,CAAC,CAAC,0BAA0B;YACjC,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrC,cAAc,GAAG,EAAE,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,cAAc,IAAI,IAAI,CAAC;YACzB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,cAAc,IAAI,IAAI,CAAC;QACzB,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,gEAAgE;IAChE,qEAAqE;IACrE,yCAAyC;IACzC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACnE,IAAI,KAAK,EAAE,CAAC;QACV,0DAA0D;QAC1D,kDAAkD;QAClD,0DAA0D;QAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,WAAW,EAAE,CAAC;YAChB,uDAAuD;YACvD,OAAO,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,aAAa,CAAC,OAAO,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,OAAO,GAAG,6CAA6C,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,IACE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EACxD,CAAC;YACD,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEhC,qDAAqD;QACrD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACrC,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B;YACrC,SAAS;QACX,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC;YACpD,cAAc,GAAG,CAAC,cAAc,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3D,cAAc,GAAG,CAAC,cAAc,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,oEAAoE;YACpE,WAAW,GAAG,CAAC,WAAW,CAAC;QAC7B,CAAC;QAED,iEAAiE;QACjE,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,oEAAoE;YACpE,IAAI,IAAI,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,2EAA2E;YAC3E,IAAI,IAAI,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,6DAA6D;YAC7D,iFAAiF;YACjF,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,CAAC,EAAE,CAAC;IACN,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,MAAc;IAEd,mCAAmC;IACnC,yEAAyE;IACzE,MAAM,sBAAsB,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,sBAAsB,EAAE,CAAC;QAC3B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EACJ,iFAAiF;SACpF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;IAE5D,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE3E;;;;;;OAMG;IACH,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,MAAc,EAAW,EAAE;QAC5D,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC;IACpE,CAAC,CAAC;IAEF;;;OAGG;IACH,MAAM,eAAe,GAAG,CAAC,KAAe,EAAY,EAAE,CACpD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACrB,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEL,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAEpD,mDAAmD;IACnD,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,kDAAkD;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IAE5D,MAAM,0BAA0B,GAAG,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACvD,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CACzB,CAAC;IAEF,MAAM,kBAAkB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEjE,MAAM,kBAAkB,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC;IAEhD,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,+CAA+C;QAC/C,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACpD,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAC3B,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,YAAY,GAAG,+BAA+B;aACvD,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,MAAM,iBAAiB,GAAG,0BAA0B,IAAI,CAAC,iBAAiB,CAAC;QAC3E,MAAM,kBAAkB,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC;QAChD,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACpD,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAC3B,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,YAAY,GAAG,uCAAuC;iBAC/D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}
@@ -0,0 +1,6 @@
1
+ /**
2
+ * @license
3
+ * Copyright 2025 Google LLC
4
+ * SPDX-License-Identifier: Apache-2.0
5
+ */
6
+ export {};