@whisperr/wizard 0.3.0 → 0.3.1

package/dist/index.js

@@ -1148,7 +1148,9 @@ function mockManifest(appId, config) {
 }
 
 // src/core/agent.ts
-import { query } from "@anthropic-ai/claude-agent-sdk";
+import {
+  query
+} from "@anthropic-ai/claude-agent-sdk";
 
 // src/core/git.ts
 import { spawn } from "child_process";
@@ -1730,11 +1732,20 @@ function coverageNote(coverage) {
 import { isAbsolute, relative, resolve } from "path";
 var SECRET_MATERIAL_DENIAL = "blocked: secret material - reference the variable name in .env.example instead of reading the real file";
 var WRITE_OUTSIDE_REPO_DENIAL = "blocked: writes must stay inside the target repository";
+var SENSITIVE_WRITE_DENIAL = "blocked: refusing to write CI/git configuration";
 var BASH_ALLOWLIST_DENIAL = "blocked: command is outside the Bash allowlist - use package install/add commands, mkdir, or git status/diff/log only";
 var CHAINED_COMMAND_DENIAL = "blocked: chained or substituted shell command - run one command at a time";
 var ENV_EXAMPLES = /* @__PURE__ */ new Set([".env.example", ".env.sample", ".env.template"]);
 var SECRET_DIRECTORIES = /* @__PURE__ */ new Set([".aws", ".ssh", ".gnupg"]);
 var SECRET_EXACT_FILES = /* @__PURE__ */ new Set([".netrc", ".npmrc", ".pypirc"]);
+var SENSITIVE_WRITE_DIRECTORIES = /* @__PURE__ */ new Set([".git", ".circleci", ".buildkite"]);
+var SENSITIVE_WRITE_EXACT_FILES = /* @__PURE__ */ new Set([
+  ".gitlab-ci.yml",
+  "azure-pipelines.yml",
+  "bitbucket-pipelines.yml",
+  ".drone.yml",
+  "jenkinsfile"
+]);
 var SECRET_SUFFIXES = [
   ".pem",
   ".key",
@@ -1818,6 +1829,9 @@ function evaluateWrite(input, context) {
   if (!isPathInsideRepo(pathValue, context.repoPath)) {
     return { behavior: "deny", message: WRITE_OUTSIDE_REPO_DENIAL };
   }
+  if (isSensitiveWritePath(pathValue, context.repoPath)) {
+    return { behavior: "deny", message: SENSITIVE_WRITE_DENIAL };
+  }
   return { behavior: "allow" };
 }
 function evaluateBash(input) {
@@ -1907,6 +1921,19 @@ function firstString(input, keys) {
 function normalizePathLike(value) {
   return stripOuterQuotes(value.trim()).replace(/\\/g, "/");
 }
+function repoRelativePath(pathValue, repoPath) {
+  const repoRoot = resolve(repoPath);
+  const candidate = isAbsolute(pathValue) ? resolve(pathValue) : resolve(repoRoot, pathValue);
+  return normalizePathLike(relative(repoRoot, candidate));
+}
+function isSensitiveWritePath(pathValue, repoPath) {
+  const parts = repoRelativePath(pathValue, repoPath).split("/").map((part) => stripOuterQuotes(part.trim().toLowerCase())).filter(Boolean);
+  const [first, second] = parts;
+  if (!first) return false;
+  if (SENSITIVE_WRITE_DIRECTORIES.has(first)) return true;
+  if (first === ".github" && second === "workflows") return true;
+  return parts.length === 1 && SENSITIVE_WRITE_EXACT_FILES.has(first);
+}
 function stripOuterQuotes(value) {
   if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
     return value.slice(1, -1);
@@ -2672,6 +2699,7 @@ async function runPass(opts) {
       thinking: { type: "adaptive" },
       effort,
       tools: [...allowedTools],
+      hooks: buildToolPolicyHooks(repoPath),
       canUseTool: createToolPermissionCallback(repoPath),
       maxTurns,
       // Native SDK hard cost cap. Stops this pass with an `error_max_budget_usd`
@@ -2708,6 +2736,32 @@ async function runPass(opts) {
   }
   return { summary, costUsd, ok, maxedOut };
 }
+function buildToolPolicyHooks(repoPath) {
+  return {
+    PreToolUse: [
+      {
+        hooks: [
+          async (input) => {
+            if (input.hook_event_name !== "PreToolUse") return { continue: true };
+            const decision = evaluateToolUse(input.tool_name, toolInputRecord(input.tool_input), {
+              repoPath
+            });
+            if (decision.behavior === "allow") {
+              return { continue: true };
+            }
+            return {
+              hookSpecificOutput: {
+                hookEventName: "PreToolUse",
+                permissionDecision: "deny",
+                permissionDecisionReason: decision.message
+              }
+            };
+          }
+        ]
+      }
+    ]
+  };
+}
 function createToolPermissionCallback(repoPath) {
   return async (toolName, input, options) => {
     const decision = evaluateToolUse(toolName, input, { repoPath });
@@ -2718,6 +2772,12 @@ function createToolPermissionCallback(repoPath) {
     };
   };
 }
+function toolInputRecord(input) {
+  if (input && typeof input === "object" && !Array.isArray(input)) {
+    return input;
+  }
+  return {};
+}
 function applyModelAuthEnv(config, session) {
   if (config.directAnthropicKey) {
     process.env.ANTHROPIC_API_KEY = config.directAnthropicKey;
@@ -2844,6 +2904,12 @@ function tail2(s) {
 }
 
 // src/core/report.ts
+function scrubSummary(text) {
+  return scrubTerminalControls(text).replace(/sk-ant-[A-Za-z0-9_-]+/g, "[redacted]").replace(/sk-[A-Za-z0-9]{16,}/g, "[redacted]").replace(/AKIA[0-9A-Z]{16}/g, "[redacted]").replace(/Bearer\s+[A-Za-z0-9._-]+/g, "[redacted]").replace(
+    /\b(ANTHROPIC_(?:AUTH_TOKEN|API_KEY))\s*=\s*["']?[^"'\s]+["']?/gi,
+    "$1=[redacted]"
+  );
+}
 async function postRunReport(config, session, report) {
   if (config.offline) return { ok: true };
   try {
@@ -2879,6 +2945,9 @@ function detailSlice(detail) {
   const sliced = detail.slice(0, 200).trim();
   return sliced || void 0;
 }
+function scrubTerminalControls(value) {
+  return value.replace(/\x1b\[[0-9;?]*[ -/]*[@-~]/g, "").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)?/g, "").replace(/[\x00-\x1f\x7f]/g, " ").replace(/ {2,}/g, " ").trim();
+}
 
 // src/ui/banner.ts
 function banner() {
@@ -3071,9 +3140,7 @@ Flutter is live today; ${theme.bright(
   if (files.length) {
     p.note(files.map((f) => theme.muted("\u2022 ") + f).join("\n"), "Files changed");
   }
-  if (outcome.summary.trim()) {
-    p.log.message(outcome.summary.trim());
-  }
+  logAgentSummary(outcome.summary);
   if (!outcome.coreOk) {
     const reverted = await maybeRevert(
       repoPath,
@@ -3124,7 +3191,7 @@ Flutter is live today; ${theme.bright(
           if (repair.summary.trim()) {
             outcome.summary = [outcome.summary, `Repair:
 ${repair.summary}`].filter(Boolean).join("\n\n");
-            p.log.message(repair.summary.trim());
+            logAgentSummary(repair.summary);
           }
           repairSpin.stop(theme.success("Repair pass finished"));
         } catch (err) {
@@ -3243,7 +3310,7 @@ ${repair.summary}`].filter(Boolean).join("\n\n");
     verified,
     cost_usd: outcome.costUsd,
     duration_ms: outcome.durationMs,
-    summary: outcome.summary.slice(0, 4e3),
+    summary: scrubSummary(outcome.summary).slice(0, 4e3),
     events: reportEvents
   });
   if (!reportResult.ok) {
@@ -3435,7 +3502,7 @@ async function offerOpportunities(opts) {
     });
     if (pass.ran) {
       spin.stop(theme.success("New events instrumented"));
-      if (pass.summary.trim()) p.log.message(pass.summary.trim());
+      logAgentSummary(pass.summary);
     } else {
       spin.stop(
         theme.warn("Skipped instrumenting the new events") + theme.muted(
@@ -3588,6 +3655,10 @@ function renderEventOutcomeLines(outcomes, wiredMap) {
   if (remainder > 0) lines.push(theme.muted(`\u2026 ${remainder} more events`));
   return lines.join("\n");
 }
+function logAgentSummary(summary) {
+  const cleaned = scrubSummary(summary).trim();
+  if (cleaned) p.log.message(cleaned);
+}
 function shortPhaseLabel(phase) {
   switch (phase) {
     case "Mapping your codebase":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@whisperr/wizard",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Whisperr Wizard — one command to integrate the Whisperr SDK into your app. Authenticates with your onboarded account and uses an AI coding agent to wire up identify() and your business events automatically.",
   "repository": {
     "type": "git",