@wrongstack/core 0.277.0 → 0.277.2

package/dist/security/index.js

@@ -1,7 +1,7 @@
 import { randomBytes, createCipheriv, createDecipheriv, scryptSync } from 'crypto';
 import * as fs2 from 'fs';
 import * as fs from 'fs/promises';
-import * as path3 from 'path';
+import * as path from 'path';
 
 // src/security/secret-scrubber.ts
 var PATTERNS = [
@@ -192,9 +192,9 @@ var DefaultSecretScrubber = class {
   }
 };
 async function atomicWrite(targetPath, content, opts = {}) {
-  const dir = path3.dirname(targetPath);
+  const dir = path.dirname(targetPath);
   await fs.mkdir(dir, { recursive: true });
-  const tmp = path3.join(dir, `.${path3.basename(targetPath)}.${randomBytes(6).toString("hex")}.tmp`);
+  const tmp = path.join(dir, `.${path.basename(targetPath)}.${randomBytes(6).toString("hex")}.tmp`);
   try {
     if (typeof content === "string") {
       await fs.writeFile(tmp, content, { flag: "wx", encoding: opts.encoding ?? "utf8" });
@@ -748,7 +748,7 @@ var DefaultSecretVault = class {
     const oldVersion = this._keyVersion;
     const newKey = randomBytes(KEY_BYTES);
     const newVersion = oldVersion + 1;
-    fs2.mkdirSync(path3.dirname(this.keyFile), { recursive: true });
+    fs2.mkdirSync(path.dirname(this.keyFile), { recursive: true });
     const passphrase = getVaultPassphrase();
     if (passphrase) {
       fs2.writeFileSync(this.keyFile, wrapDataKey(newKey, newVersion, passphrase), { mode: 384 });
@@ -832,7 +832,7 @@ var DefaultSecretVault = class {
     } catch (err) {
       if (err.code !== "ENOENT") throw err;
     }
-    fs2.mkdirSync(path3.dirname(this.keyFile), { recursive: true });
+    fs2.mkdirSync(path.dirname(this.keyFile), { recursive: true });
     const key = randomBytes(KEY_BYTES);
     const passphrase = getVaultPassphrase();
     const initialBytes = passphrase ? wrapDataKey(key, 1, passphrase) : key;
@@ -931,7 +931,7 @@ async function rewriteConfigEncrypted(configPath, vault, patch) {
   }
   const merged = deepMerge(current, patch ?? {});
   const encrypted = encryptConfigSecrets(merged, vault);
-  await fs.mkdir(path3.dirname(configPath), { recursive: true });
+  await fs.mkdir(path.dirname(configPath), { recursive: true });
   await atomicWrite(configPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
   await restrictFilePermissions(configPath);
 }
@@ -1222,19 +1222,51 @@ var LruCache = class {
     return this.store.size;
   }
 };
-var DESTRUCTIVE_BASH_PATTERNS = [
-  /\bgit\s+(?:clean\s+-[^\s]*[xdf]|reset\s+--hard)\b/i,
-  /\b(?:drop|truncate)\s+(?:table|database|schema)\b/i,
-  /\bdelete\s+from\b/i,
-  /\b(?:mkfs|format|diskpart|shutdown|reboot)\b/i,
-  /\bchmod\s+-R\s+777\b/i,
-  /\bchown\s+-R\b/i,
-  /\b(?:curl|wget)\b.*\|\s*(?:sh|bash|zsh|pwsh|powershell)\b/i,
-  /\b(?:powershell|pwsh)\b.*(?:-encodedcommand|-enc)\b/i,
-  /:\(\)\s*\{\s*:\|:&\s*}\s*;/
+var CATASTROPHIC_PATTERNS = [
+  /\b(?:mkfs(?:\.[a-z0-9]+)?|mke2fs|newfs)\b/i,
+  // make a filesystem — wipes a partition
+  /\bformat\s+[A-Za-z]:/i,
+  // format C: — wipes a Windows volume
+  /\bdiskpart\b/i,
+  // Windows partition editor
+  /\bdd\b[^|]*\bof=(?:\/dev\/|\\\\[.?]\\)/i,
+  // dd writing straight to a raw device
+  />\s*\/dev\/(?:sd|hd|nvme|disk|mapper|vd)/i,
+  // redirect into a raw block device
+  /:\(\)\s*\{\s*:\|:&\s*\}\s*;/
+  // classic fork bomb
 ];
-var PROJECT_ESCAPE_PATTERN = /(?:^|[\s"'])\.\.(?:[\\/]|$)/;
-var ABSOLUTE_PATH_PATTERN = /(?:^|[\s"'])(?:~[\\/]|\/[A-Za-z0-9_.-]|[A-Za-z]:[\\/])/;
+var CATASTROPHIC_POSIX_ROOTS = /* @__PURE__ */ new Set([
+  "/etc",
+  "/usr",
+  "/bin",
+  "/sbin",
+  "/lib",
+  "/lib64",
+  "/var",
+  "/boot",
+  "/dev",
+  "/sys",
+  "/proc",
+  "/opt",
+  "/root",
+  "/home",
+  "/srv",
+  "/run",
+  "/system",
+  "/library",
+  "/applications",
+  "/users"
+]);
+var CATASTROPHIC_WIN_SUBDIRS = /* @__PURE__ */ new Set([
+  "windows",
+  "system32",
+  "winnt",
+  "program files",
+  "program files (x86)",
+  "programdata",
+  "users"
+]);
 var SHELL_OPERATORS = /* @__PURE__ */ new Set(["&&", "||", "|", ";", ">", ">>", "<", "2>", "2>>"]);
 function getInputString(input, key) {
   if (!input || typeof input !== "object") return void 0;
@@ -1244,27 +1276,28 @@ function getInputString(input, key) {
 function pathLooksInsideProject(rawPath, projectRoot) {
   if (!projectRoot) return false;
   if (rawPath === "~" || rawPath.startsWith("~/") || rawPath.startsWith("~\\")) return false;
-  const resolved = path3.resolve(projectRoot, rawPath);
-  const relative2 = path3.relative(projectRoot, resolved);
-  return !!relative2 && !relative2.startsWith("..") && !path3.isAbsolute(relative2);
+  const resolved = path.resolve(projectRoot, rawPath);
+  const relative2 = path.relative(projectRoot, resolved);
+  return !!relative2 && !relative2.startsWith("..") && !path.isAbsolute(relative2);
 }
 function tokenizeShell(command) {
   return command.match(/"[^"]*"|'[^']*'|\S+/g)?.map((token) => token.replace(/^['"]|['"]$/g, "")) ?? [];
 }
-function pathTokenIsOutsideProject(token, projectRoot) {
-  if (!token || SHELL_OPERATORS.has(token) || token.startsWith("-")) return false;
-  if (token === "/" || token === "~" || token === "." || token === "..") return token !== ".";
-  if (token.includes("*")) return true;
-  if (token.startsWith("..") || token.includes("../") || token.includes("..\\")) return true;
-  if (path3.isAbsolute(token) || token.startsWith("~/")) return !pathLooksInsideProject(token, projectRoot);
+function isCatastrophicDeleteTarget(rawTarget) {
+  const t = rawTarget.replace(/^['"]|['"]$/g, "").trim();
+  if (!t) return false;
+  if (t === "*" || t === "." || t === "./" || t === ".\\" || t === "./*" || t === ".\\*") return true;
+  const s = t.replace(/[\\/]\*+$/, "").replace(/[\\/]+$/, "");
+  if (s === "") return true;
+  if (s === "~" || /^\$HOME$/i.test(s) || /^%USERPROFILE%$/i.test(s)) return true;
+  if (/^[A-Za-z]:$/.test(s)) return true;
+  const norm = s.toLowerCase().replace(/\\/g, "/");
+  if (CATASTROPHIC_POSIX_ROOTS.has(norm)) return true;
+  const win = norm.match(/^[a-z]:\/([^/]+)$/);
+  if (win?.[1] && CATASTROPHIC_WIN_SUBDIRS.has(win[1])) return true;
   return false;
 }
-function hasDangerousDeleteTarget(tokens, start, projectRoot) {
-  const targets = tokens.slice(start).filter((token) => !token.startsWith("-") && !SHELL_OPERATORS.has(token));
-  if (targets.length === 0) return true;
-  return targets.some((target) => pathTokenIsOutsideProject(target, projectRoot));
-}
-function hasDestructiveDelete(command, projectRoot) {
+function hasCatastrophicDelete(command) {
   const tokens = tokenizeShell(command);
   for (let i = 0; i < tokens.length; i++) {
     const token = tokens[i]?.toLowerCase();
@@ -1272,35 +1305,43 @@ function hasDestructiveDelete(command, projectRoot) {
     if (token === "rm") {
       const args = tokens.slice(i + 1);
       const recursiveOrForce = args.some(
-        (arg) => /^-[^-]*[rf]/i.test(arg) || arg === "--recursive" || arg === "--force"
+        (arg) => /^-[^-]*[rf]/i.test(arg) || arg === "--recursive" || arg === "--force" || arg === "--no-preserve-root"
       );
-      if (recursiveOrForce && hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
+      if (!recursiveOrForce) continue;
+      const targets = args.filter((arg) => !arg.startsWith("-") && !SHELL_OPERATORS.has(arg));
+      if (targets.length === 0) return true;
+      if (targets.some(isCatastrophicDeleteTarget)) return true;
+    }
+    if (token === "remove-item" || token === "ri") {
+      const args = tokens.slice(i + 1);
+      const recursive = args.some((arg) => {
+        const a = arg.toLowerCase();
+        return a === "-recurse" || a === "-force";
+      });
+      if (!recursive) continue;
+      const targets = args.filter((arg) => !arg.startsWith("-") && !SHELL_OPERATORS.has(arg));
+      if (targets.some(isCatastrophicDeleteTarget)) return true;
     }
     if (token === "rmdir" || token === "rd") {
       const args = tokens.slice(i + 1);
       const recursive = args.some((arg) => arg.toLowerCase() === "/s");
-      if (recursive && hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
+      if (!recursive) continue;
+      const targets = args.filter((arg) => !arg.startsWith("-") && !arg.startsWith("/") && !SHELL_OPERATORS.has(arg));
+      if (targets.some(isCatastrophicDeleteTarget)) return true;
     }
     if (token === "del" || token === "erase") {
-      if (hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
-    }
-    if (token === "remove-item") {
-      const args = tokens.slice(i + 1).map((arg) => arg.toLowerCase());
-      const recursiveOrForce = args.includes("-recurse") || args.includes("-force");
-      if (recursiveOrForce && hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
+      const args = tokens.slice(i + 1);
+      const targets = args.filter((arg) => !arg.startsWith("-") && !arg.startsWith("/") && !SHELL_OPERATORS.has(arg));
+      if (targets.some(isCatastrophicDeleteTarget)) return true;
     }
   }
   return false;
 }
-function isClearlyDestructiveBashCommand(command, projectRoot) {
+function isClearlyDestructiveBashCommand(command, _projectRoot) {
   const trimmed = command.trim();
   if (!trimmed) return false;
-  if (hasDestructiveDelete(trimmed, projectRoot)) return true;
-  if (DESTRUCTIVE_BASH_PATTERNS.some((pattern) => pattern.test(trimmed))) return true;
-  if (/\bcd\s+(?:\.\.|~|\/|[A-Za-z]:[\\/])/i.test(trimmed)) return true;
-  if (PROJECT_ESCAPE_PATTERN.test(trimmed)) return true;
-  const absolute = trimmed.match(ABSOLUTE_PATH_PATTERN)?.[0]?.trim().replace(/^['"]|['"]$/g, "");
-  if (absolute && !pathLooksInsideProject(absolute, projectRoot)) return true;
+  if (hasCatastrophicDelete(trimmed)) return true;
+  if (CATASTROPHIC_PATTERNS.some((pattern) => pattern.test(trimmed))) return true;
   return false;
 }